Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
catalog-1908475637.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: van-van, Last Saved
By: vi-vi, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date:
Tue May 11 10:24:38 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\catalog-1908475637.xls.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:47
2020, mtime=Wed May 12 16:37:06 2021, atime=Wed May 12 16:37:06 2021, length=182272, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\DC377C05-C999-41EA-9263-9D9A4A0CA3BB
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\79A10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Wed May 12 16:37:06 2021, atime=Wed May 12 16:37:06 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\7AA10000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 59863 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabEEC3.tmp
|
Microsoft Cabinet archive data, 59863 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\D3EE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarEEC4.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\catalog-1908475637.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:17
2020, mtime=Wed May 12 16:29:43 2021, atime=Wed May 12 16:29:43 2021, length=179200, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\A4EE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
There are 6 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\ikjcvesdv.ref,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\ikjcvesdv.ref1,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\ikjcvesdv.ref,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\ikjcvesdv.ref1,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
iamihaveican.com
|
108.167.180.164
|
|
|
|
carriepatrick.com
|
199.79.62.12
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
199.79.62.12
|
carriepatrick.com
|
United States
|
|
|
|
108.167.180.164
|
iamihaveican.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
=f5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
>f5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19F88
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A62F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A7B5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A880
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1A9D8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1AAD2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
<{5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2FF75
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
308DC
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
+q8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDECB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE1E6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE2B1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE37C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE476
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE56F
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{}8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
11673B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
11734C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 170 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF59F200000
|
unkown
|
page readonly
|
|
|
|
CBE8BFB000
|
unkown
|
page read and write
|
|
|
|
1E9BFC6C000
|
unkown
|
page read and write
|
|
|
|
7FF5AFD01000
|
unkown
|
page readonly
|
|
|
|
99FBBFA000
|
unkown
|
page read and write
|
|
|
|
238D5C80000
|
unkown
|
page read and write
|
|
|
|
7FF50EFFA000
|
unkown
|
page readonly
|
|
|
|
7FF59F271000
|
unkown
|
page readonly
|
|
|
|
7FF5B339E000
|
unkown
|
page readonly
|
|
|
|
27E9A049000
|
unkown
|
page read and write
|
|
|
|
7FF56798C000
|
unkown
|
page readonly
|
|
|
|
296F2C00000
|
unkown
|
page readonly
|
|
|
|
7FF52F7D1000
|
unkown
|
page readonly
|
|
|
|
7FF56968C000
|
unkown
|
page readonly
|
|
|
|
3C716FB000
|
unkown
|
page read and write
|
|
|
|
403807D000
|
unkown
|
page read and write
|
|
|
|
23BC6E3F000
|
unkown
|
page read and write
|
|
|
|
7FF569819000
|
unkown
|
page readonly
|
|
|
|
7FF50F0E9000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B50000
|
unkown
|
page readonly
|
|
|
|
7FF5DE890000
|
unkown
|
page readonly
|
|
|
|
20ADC002000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB13000
|
unkown
|
page readonly
|
|
|
|
7FF59EF64000
|
unkown
|
page readonly
|
|
|
|
2482BACF000
|
unkown
|
page read and write
|
|
|
|
7FF5ECD5C000
|
unkown
|
page readonly
|
|
|
|
7FF5B2FD2000
|
unkown
|
page readonly
|
|
|
|
29F6000
|
unkown
|
page readonly
|
|
|
|
7FF5C8937000
|
unkown
|
page readonly
|
|
|
|
7FF5B3376000
|
unkown
|
page readonly
|
|
|
|
27E9AA00000
|
unkown
|
page readonly
|
|
|
|
7FF59F048000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B1E000
|
unkown
|
page readonly
|
|
|
|
99F3FF000
|
unkown
|
page read and write
|
|
|
|
2482BB5A000
|
unkown
|
page read and write
|
|
|
|
2482BAAA000
|
unkown
|
page read and write
|
|
|
|
2DF5000
|
unkown
|
page read and write
|
|
|
|
992D97F000
|
unkown
|
page read and write
|
|
|
|
7FF5ED01E000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AB7000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF18000
|
unkown
|
page readonly
|
|
|
|
7FF4F12E6000
|
unkown
|
page readonly
|
|
|
|
238D59B0000
|
unkown
|
page read and write
|
|
|
|
7FF5DE98E000
|
unkown
|
page readonly
|
|
|
|
60EC39B000
|
unkown
|
page read and write
|
|
|
|
7FF50EFF2000
|
unkown
|
page readonly
|
|
|
|
7FF5B31CE000
|
unkown
|
page readonly
|
|
|
|
7FF5931CD000
|
unkown
|
page readonly
|
|
|
|
7FF5A9EE6000
|
unkown
|
page readonly
|
|
|
|
5D40000
|
unkown
|
page readonly
|
|
|
|
7FF593478000
|
unkown
|
page readonly
|
|
|
|
DE5C7FE000
|
unkown
|
page read and write
|
|
|
|
21758E13000
|
unkown
|
page read and write
|
|
|
|
7FF5D87C9000
|
unkown
|
page readonly
|
|
|
|
2482E010000
|
unkown
|
page read and write
|
|
|
|
27E9A058000
|
unkown
|
page read and write
|
|
|
|
7FF57574D000
|
unkown
|
page readonly
|
|
|
|
CBE8DF9000
|
unkown
|
page read and write
|
|
|
|
7FF567C8A000
|
unkown
|
page readonly
|
|
|
|
1FBE6746000
|
unkown
|
page read and write
|
|
|
|
289B55C4000
|
unkown
|
page read and write
|
|
|
|
253A8C26000
|
unkown
|
page read and write
|
|
|
|
7FF59F212000
|
unkown
|
page readonly
|
|
|
|
289B58B1000
|
unkown
|
page read and write
|
|
|
|
DE5C18E000
|
unkown
|
page read and write
|
|
|
|
16DB8A68000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
226B548B000
|
unkown
|
page read and write
|
|
|
|
7FF50F084000
|
unkown
|
page readonly
|
|
|
|
178BD699000
|
heap default
|
page read and write
|
|
|
|
2832FA36000
|
unkown
|
page read and write
|
|
|
|
2E50000
|
unkown
|
page readonly
|
|
|
|
2482D910000
|
unkown
|
page readonly
|
|
|
|
7FF5A5BB9000
|
unkown
|
page readonly
|
|
|
|
7FF573AE9000
|
unkown
|
page readonly
|
|
|
|
7FF5B32F5000
|
unkown
|
page readonly
|
|
|
|
7FF52F420000
|
unkown
|
page readonly
|
|
|
|
7FF56977D000
|
unkown
|
page readonly
|
|
|
|
253A8C02000
|
unkown
|
page read and write
|
|
|
|
1D9A3CC5000
|
heap private
|
page read and write
|
|
|
|
289B56E0000
|
unkown
|
page readonly
|
|
|
|
16DB8B13000
|
unkown
|
page read and write
|
|
|
|
56DFB7E000
|
unkown
|
page read and write
|
|
|
|
7FF5ECC36000
|
unkown
|
page readonly
|
|
|
|
7FF50F025000
|
unkown
|
page readonly
|
|
|
|
178BD6B6000
|
unkown
|
page read and write
|
|
|
|
7FF567CC9000
|
unkown
|
page readonly
|
|
|
|
1D9A3CC0000
|
heap private
|
page read and write
|
|
|
|
289B13D1000
|
unkown
|
page read and write
|
|
|
|
60EC77B000
|
unkown
|
page read and write
|
|
|
|
2482BB18000
|
unkown
|
page read and write
|
|
|
|
2482DB21000
|
unkown
|
page read and write
|
|
|
|
2967000
|
unkown
|
page readonly
|
|
|
|
253A8C13000
|
unkown
|
page read and write
|
|
|
|
1FBE48A2000
|
unkown
|
page read and write
|
|
|
|
7FF52F427000
|
unkown
|
page readonly
|
|
|
|
7FF593504000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF79000
|
unkown
|
page readonly
|
|
|
|
23DBEF02000
|
unkown
|
page read and write
|
|
|
|
2A18000
|
unkown
|
page readonly
|
|
|
|
2832FA27000
|
unkown
|
page read and write
|
|
|
|
7FF50EFA1000
|
unkown
|
page readonly
|
|
|
|
2482DBF5000
|
unkown
|
page read and write
|
|
|
|
289B0800000
|
unkown
|
page read and write
|
|
|
|
7FF5B33D6000
|
unkown
|
page readonly
|
|
|
|
7FF59F1AA000
|
unkown
|
page readonly
|
|
|
|
7FF575875000
|
unkown
|
page readonly
|
|
|
|
7FF5A5AEE000
|
unkown
|
page readonly
|
|
|
|
7FF593561000
|
unkown
|
page readonly
|
|
|
|
7FF5DE7A3000
|
unkown
|
page readonly
|
|
|
|
7FF5A5AF5000
|
unkown
|
page readonly
|
|
|
|
2482BAEE000
|
unkown
|
page read and write
|
|
|
|
1E9BFC32000
|
unkown
|
page read and write
|
|
|
|
71D7D9C000
|
unkown
|
page read and write
|
|
|
|
289B13F0000
|
unkown
|
page read and write
|
|
|
|
1FBE47D0000
|
unkown
|
page read and write
|
|
|
|
7FF567CB5000
|
unkown
|
page readonly
|
|
|
|
7FF5AFA2A000
|
unkown
|
page readonly
|
|
|
|
7FF56980E000
|
unkown
|
page readonly
|
|
|
|
CF707FB000
|
unkown
|
page read and write
|
|
|
|
7FF59F22A000
|
unkown
|
page readonly
|
|
|
|
2482BB1B000
|
unkown
|
page read and write
|
|
|
|
2482E210000
|
unkown
|
page read and write
|
|
|
|
7FF5A9C8E000
|
unkown
|
page readonly
|
|
|
|
178BF100000
|
unkown
|
page readonly
|
|
|
|
16DB8920000
|
heap default
|
page read and write
|
|
|
|
7FF5D872E000
|
unkown
|
page readonly
|
|
|
|
238D59A0000
|
unkown
|
page read and write
|
|
|
|
289B0029000
|
unkown
|
page read and write
|
|
|
|
7FF593472000
|
unkown
|
page readonly
|
|
|
|
1FBE4875000
|
unkown
|
page read and write
|
|
|
|
9EB007B000
|
unkown
|
page read and write
|
|
|
|
7FF5B338A000
|
unkown
|
page readonly
|
|
|
|
178BD830000
|
unkown
|
page read and write
|
|
|
|
7FF5ECCD7000
|
unkown
|
page readonly
|
|
|
|
7FF573A84000
|
unkown
|
page readonly
|
|
|
|
2175A8C0000
|
unkown
|
page readonly
|
|
|
|
2D87000
|
unkown
|
page read and write
|
|
|
|
7FF5A9D78000
|
unkown
|
page readonly
|
|
|
|
7FF5DE8A8000
|
unkown
|
page readonly
|
|
|
|
7FF52F3D7000
|
unkown
|
page readonly
|
|
|
|
7FF5758B6000
|
unkown
|
page readonly
|
|
|
|
1FBE61A0000
|
unkown
|
page read and write
|
|
|
|
7FF57380A000
|
unkown
|
page readonly
|
|
|
|
28EAA002000
|
unkown
|
page read and write
|
|
|
|
7FF51AF6A000
|
unkown
|
page readonly
|
|
|
|
253A8C56000
|
unkown
|
page read and write
|
|
|
|
2D7E000
|
unkown
|
page read and write
|
|
|
|
99FBB7F000
|
unkown
|
page read and write
|
|
|
|
1CAF6710000
|
unkown
|
page write copy
|
|
|
|
226B5330000
|
heap default
|
page read and write
|
|
|
|
7FF5DE83A000
|
unkown
|
page readonly
|
|
|
|
7FF575570000
|
unkown
|
page readonly
|
|
|
|
2918000
|
unkown
|
page readonly
|
|
|
|
253A8B70000
|
unkown
|
page read and write
|
|
|
|
253A9402000
|
unkown
|
page read and write
|
|
|
|
7FF573A80000
|
unkown
|
page readonly
|
|
|
|
289B567C000
|
unkown
|
page readonly
|
|
|
|
7FF50EEF3000
|
unkown
|
page readonly
|
|
|
|
912000
|
unkown
|
page read and write
|
|
|
|
2482BB17000
|
unkown
|
page read and write
|
|
|
|
1E9BFC74000
|
unkown
|
page read and write
|
|
|
|
289B003D000
|
unkown
|
page read and write
|
|
|
|
2482BB5C000
|
unkown
|
page read and write
|
|
|
|
7FF5B3404000
|
unkown
|
page readonly
|
|
|
|
7FF51B185000
|
unkown
|
page readonly
|
|
|
|
2482E010000
|
unkown
|
page read and write
|
|
|
|
EFDAD5B000
|
unkown
|
page read and write
|
|
|
|
B4E000
|
unkown
|
page read and write
|
|
|
|
7FF593230000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF22000
|
unkown
|
page readonly
|
|
|
|
7FF5A9EE8000
|
unkown
|
page readonly
|
|
|
|
7FF569796000
|
unkown
|
page readonly
|
|
|
|
2D37000
|
heap private
|
page read and write
|
|
|
|
7FF5A5BB9000
|
unkown
|
page readonly
|
|
|
|
20ADCA00000
|
unkown
|
page readonly
|
|
|
|
1FBE6860000
|
unkown
|
page readonly
|
|
|
|
BE0000
|
heap private
|
page read and write
|
|
|
|
289B0400000
|
unkown
|
page readonly
|
|
|
|
21758E00000
|
unkown
|
page read and write
|
|
|
|
226B5502000
|
unkown
|
page read and write
|
|
|
|
2832FA02000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC6D000
|
unkown
|
page readonly
|
|
|
|
7FF569755000
|
unkown
|
page readonly
|
|
|
|
7FF52F737000
|
unkown
|
page readonly
|
|
|
|
7FF5DE64E000
|
unkown
|
page readonly
|
|
|
|
2482E010000
|
unkown
|
page read and write
|
|
|
|
7FF567C24000
|
unkown
|
page readonly
|
|
|
|
289B5580000
|
unkown
|
page read and write
|
|
|
|
7FF59F113000
|
unkown
|
page readonly
|
|
|
|
7FF52F6A9000
|
unkown
|
page readonly
|
|
|
|
6380000
|
unkown
|
page read and write
|
|
|
|
23BC6C40000
|
heap private
|
page read and write
|
|
|
|
7FF5C8A32000
|
unkown
|
page readonly
|
|
|
|
7FF5DE888000
|
unkown
|
page readonly
|
|
|
|
7FF4F1A99000
|
unkown
|
page readonly
|
|
|
|
7FF592BCF000
|
unkown
|
page readonly
|
|
|
|
289B0902000
|
unkown
|
page read and write
|
|
|
|
289B5720000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B29000
|
unkown
|
page readonly
|
|
|
|
1E9BFBD0000
|
unkown
|
page read and write
|
|
|
|
238D4FE0000
|
heap private
|
page read and write
|
|
|
|
2482DBE1000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC4F000
|
unkown
|
page readonly
|
|
|
|
1FBE6830000
|
unkown
|
page read and write
|
|
|
|
7FF57587F000
|
unkown
|
page readonly
|
|
|
|
7FF573A0A000
|
unkown
|
page readonly
|
|
|
|
1E9BFC4E000
|
unkown
|
page read and write
|
|
|
|
7FF50EDB0000
|
unkown
|
page readonly
|
|
|
|
99FB78A000
|
unkown
|
page read and write
|
|
|
|
7FF5ECDF0000
|
unkown
|
page readonly
|
|
|
|
2D5A000
|
heap default
|
page read and write
|
|
|
|
289B1050000
|
unkown
|
page readonly
|
|
|
|
60ECF7D000
|
unkown
|
page read and write
|
|
|
|
7FF5ED029000
|
unkown
|
page readonly
|
|
|
|
2482B8F0000
|
heap private
|
page read and write
|
|
|
|
2614000
|
unkown
|
page readonly
|
|
|
|
2956000
|
unkown
|
page readonly
|
|
|
|
2954000
|
unkown
|
page readonly
|
|
|
|
238D4E3D000
|
unkown
|
page read and write
|
|
|
|
7FF5C887A000
|
unkown
|
page readonly
|
|
|
|
7FF4F1B49000
|
unkown
|
page readonly
|
|
|
|
7FF52F7E6000
|
unkown
|
page readonly
|
|
|
|
7FF51B081000
|
unkown
|
page readonly
|
|
|
|
16DB8A28000
|
unkown
|
page read and write
|
|
|
|
16DB8FA0000
|
unkown
|
page readonly
|
|
|
|
7FF52F5DE000
|
unkown
|
page readonly
|
|
|
|
7FF5ECDDC000
|
unkown
|
page readonly
|
|
|
|
2482DC02000
|
unkown
|
page read and write
|
|
|
|
7FF5D8746000
|
unkown
|
page readonly
|
|
|
|
7FF50F056000
|
unkown
|
page readonly
|
|
|
|
60ECC7B000
|
unkown
|
page read and write
|
|
|
|
CF70BFA000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AC6000
|
unkown
|
page readonly
|
|
|
|
226B5465000
|
unkown
|
page read and write
|
|
|
|
2482B9B0000
|
unkown
|
page readonly
|
|
|
|
20ADC670000
|
unkown
|
page readonly
|
|
|
|
289B5480000
|
unkown
|
page read and write
|
|
|
|
23BC6E6A000
|
unkown
|
page read and write
|
|
|
|
7FF5DE87C000
|
unkown
|
page readonly
|
|
|
|
7FF59F297000
|
unkown
|
page readonly
|
|
|
|
27F7000
|
unkown
|
page readonly
|
|
|
|
7FF50F077000
|
unkown
|
page readonly
|
|
|
|
1CAF4C56000
|
unkown
|
page read and write
|
|
|
|
2482BAF6000
|
unkown
|
page read and write
|
|
|
|
7FF5DE805000
|
unkown
|
page readonly
|
|
|
|
289B0F50000
|
unkown
|
page read and write
|
|
|
|
7FF50EED8000
|
unkown
|
page readonly
|
|
|
|
7FF5C8337000
|
unkown
|
page readonly
|
|
|
|
7FF575848000
|
unkown
|
page readonly
|
|
|
|
EFDB5FF000
|
unkown
|
page read and write
|
|
|
|
296F2A4F000
|
unkown
|
page read and write
|
|
|
|
99F47E000
|
unkown
|
page read and write
|
|
|
|
1CAF4C40000
|
unkown
|
page read and write
|
|
|
|
7FF5679F3000
|
unkown
|
page readonly
|
|
|
|
27E9A2D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF6F000
|
unkown
|
page readonly
|
|
|
|
7FF5B32DC000
|
unkown
|
page readonly
|
|
|
|
EFDB27B000
|
unkown
|
page read and write
|
|
|
|
7FF5ECEF7000
|
unkown
|
page readonly
|
|
|
|
28EA9DB0000
|
heap private
|
page read and write
|
|
|
|
1D9A3A77000
|
heap default
|
page read and write
|
|
|
|
2832FA13000
|
unkown
|
page read and write
|
|
|
|
1E9BFC3D000
|
unkown
|
page read and write
|
|
|
|
7FF5A5ACA000
|
unkown
|
page readonly
|
|
|
|
7FF52F557000
|
unkown
|
page readonly
|
|
|
|
992D17E000
|
unkown
|
page read and write
|
|
|
|
296F2A81000
|
unkown
|
page read and write
|
|
|
|
226B5D3A000
|
unkown
|
page read and write
|
|
|
|
7FF59F06E000
|
unkown
|
page readonly
|
|
|
|
23BC6E6A000
|
unkown
|
page read and write
|
|
|
|
7FF567CEC000
|
unkown
|
page readonly
|
|
|
|
2845000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF36000
|
unkown
|
page readonly
|
|
|
|
7FF5A9F65000
|
unkown
|
page readonly
|
|
|
|
7FF5932D0000
|
unkown
|
page readonly
|
|
|
|
2803000
|
unkown
|
page readonly
|
|
|
|
7FF567CE1000
|
unkown
|
page readonly
|
|
|
|
20ADBFE0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A8D000
|
unkown
|
page readonly
|
|
|
|
7FF593458000
|
unkown
|
page readonly
|
|
|
|
F8C7E7E000
|
unkown
|
page read and write
|
|
|
|
8FD000
|
unkown
|
page read and write
|
|
|
|
2954000
|
unkown
|
page readonly
|
|
|
|
2482BB6D000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A01000
|
unkown
|
page readonly
|
|
|
|
296F2A6F000
|
unkown
|
page read and write
|
|
|
|
7FF52F7DC000
|
unkown
|
page readonly
|
|
|
|
7FF5D8655000
|
unkown
|
page readonly
|
|
|
|
28EAB9A0000
|
unkown
|
page read and write
|
|
|
|
7FF59F2A7000
|
unkown
|
page readonly
|
|
|
|
7FF57586E000
|
unkown
|
page readonly
|
|
|
|
2D10000
|
unkown
|
page read and write
|
|
|
|
71D83FB000
|
unkown
|
page read and write
|
|
|
|
7FF5D86DA000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A38000
|
unkown
|
page readonly
|
|
|
|
2A10000
|
unkown
|
page readonly
|
|
|
|
23DBEF13000
|
unkown
|
page read and write
|
|
|
|
20ADC05A000
|
unkown
|
page read and write
|
|
|
|
2482DB7C000
|
unkown
|
page read and write
|
|
|
|
23DBEE89000
|
unkown
|
page read and write
|
|
|
|
7FF59F1E7000
|
unkown
|
page readonly
|
|
|
|
1CAF4C63000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A36000
|
unkown
|
page readonly
|
|
|
|
CBE8A7B000
|
unkown
|
page read and write
|
|
|
|
F8C7DFA000
|
unkown
|
page read and write
|
|
|
|
178BF160000
|
heap private
|
page read and write
|
|
|
|
7FF5AFCA0000
|
unkown
|
page readonly
|
|
|
|
1E9BFC73000
|
unkown
|
page read and write
|
|
|
|
40381FC000
|
unkown
|
page read and write
|
|
|
|
7FF59F286000
|
unkown
|
page readonly
|
|
|
|
2482DA02000
|
unkown
|
page read and write
|
|
|
|
7FF50EEF7000
|
unkown
|
page readonly
|
|
|
|
9EB04FC000
|
unkown
|
page read and write
|
|
|
|
7FF573ADE000
|
unkown
|
page readonly
|
|
|
|
20ADC802000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A65000
|
unkown
|
page readonly
|
|
|
|
16DB8B02000
|
unkown
|
page read and write
|
|
|
|
7FF593507000
|
unkown
|
page readonly
|
|
|
|
7FF5A9C87000
|
unkown
|
page readonly
|
|
|
|
7FF59F0F8000
|
unkown
|
page readonly
|
|
|
|
7FF59F1C1000
|
unkown
|
page readonly
|
|
|
|
71D89FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A9D5F000
|
unkown
|
page readonly
|
|
|
|
20ADBFD0000
|
unkown
|
page readonly
|
|
|
|
2932000
|
unkown
|
page readonly
|
|
|
|
2482D920000
|
unkown
|
page readonly
|
|
|
|
71D81FB000
|
unkown
|
page read and write
|
|
|
|
F8C79DB000
|
unkown
|
page read and write
|
|
|
|
2482DBFA000
|
unkown
|
page read and write
|
|
|
|
238D4E21000
|
unkown
|
page read and write
|
|
|
|
7FF567CAE000
|
unkown
|
page readonly
|
|
|
|
1E9BFBA0000
|
heap default
|
page read and write
|
|
|
|
1CAF4C57000
|
unkown
|
page read and write
|
|
|
|
CF70A7E000
|
unkown
|
page read and write
|
|
|
|
23DBF000000
|
unkown
|
page readonly
|
|
|
|
7FF5A9F15000
|
unkown
|
page readonly
|
|
|
|
771F3FE000
|
unkown
|
page read and write
|
|
|
|
253A8C5C000
|
unkown
|
page read and write
|
|
|
|
7FF592BE1000
|
unkown
|
page readonly
|
|
|
|
27E9A108000
|
unkown
|
page read and write
|
|
|
|
60EC6FE000
|
unkown
|
page read and write
|
|
|
|
1FBE48D3000
|
unkown
|
page read and write
|
|
|
|
7FF52F598000
|
unkown
|
page readonly
|
|
|
|
7FF4F1ACC000
|
unkown
|
page readonly
|
|
|
|
7FB000
|
unkown
|
page read and write
|
|
|
|
1CAF6A00000
|
unkown
|
page readonly
|
|
|
|
7FF5758D0000
|
unkown
|
page readonly
|
|
|
|
7FF52F278000
|
unkown
|
page readonly
|
|
|
|
7FF59F1DA000
|
unkown
|
page readonly
|
|
|
|
1E9BFC5E000
|
unkown
|
page read and write
|
|
|
|
7FF5DE647000
|
unkown
|
page readonly
|
|
|
|
7FF5A5827000
|
unkown
|
page readonly
|
|
|
|
76A2B7E000
|
unkown
|
page read and write
|
|
|
|
23DBEC40000
|
heap private
|
page read and write
|
|
|
|
2482E110000
|
unkown
|
page read and write
|
|
|
|
7FF5932EF000
|
unkown
|
page readonly
|
|
|
|
7FF5DE847000
|
unkown
|
page readonly
|
|
|
|
1FBE4800000
|
unkown
|
page read and write
|
|
|
|
238D4D20000
|
unkown
|
page read and write
|
|
|
|
289B586F000
|
unkown
|
page read and write
|
|
|
|
60ECD7B000
|
unkown
|
page read and write
|
|
|
|
238D4E52000
|
unkown
|
page read and write
|
|
|
|
23DBEE02000
|
unkown
|
page read and write
|
|
|
|
289B0680000
|
unkown
|
page read and write
|
|
|
|
28EAA100000
|
unkown
|
page read and write
|
|
|
|
7FF5D7F8D000
|
unkown
|
page readonly
|
|
|
|
992D37E000
|
unkown
|
page read and write
|
|
|
|
28EA9E10000
|
heap default
|
page read and write
|
|
|
|
7FF5ECDE1000
|
unkown
|
page readonly
|
|
|
|
1FBE7010000
|
unkown
|
page read and write
|
|
|
|
1E9BFC83000
|
unkown
|
page read and write
|
|
|
|
7FF567D71000
|
unkown
|
page readonly
|
|
|
|
253A8BA0000
|
unkown
|
page read and write
|
|
|
|
901F2FC000
|
unkown
|
page read and write
|
|
|
|
DE5C08B000
|
unkown
|
page read and write
|
|
|
|
7FF593293000
|
unkown
|
page readonly
|
|
|
|
7FF5ECBF8000
|
unkown
|
page readonly
|
|
|
|
2482BB28000
|
unkown
|
page read and write
|
|
|
|
2CA7000
|
heap private
|
page read and write
|
|
|
|
992D07A000
|
unkown
|
page read and write
|
|
|
|
7FF575939000
|
unkown
|
page readonly
|
|
|
|
7FF5DE8E9000
|
unkown
|
page readonly
|
|
|
|
7FF4F17B3000
|
unkown
|
page readonly
|
|
|
|
7FF51B1E0000
|
unkown
|
page readonly
|
|
|
|
16DB8A64000
|
unkown
|
page read and write
|
|
|
|
1FBE47F0000
|
heap private
|
page read and write
|
|
|
|
7FF59F24F000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AC4000
|
unkown
|
page readonly
|
|
|
|
7FF5DE999000
|
unkown
|
page readonly
|
|
|
|
901EC7C000
|
unkown
|
page read and write
|
|
|
|
7FF5DE6EA000
|
unkown
|
page readonly
|
|
|
|
7FF5B345E000
|
unkown
|
page readonly
|
|
|
|
238D4E21000
|
unkown
|
page read and write
|
|
|
|
7FF51B158000
|
unkown
|
page readonly
|
|
|
|
226B5470000
|
unkown
|
page read and write
|
|
|
|
23DBEE8D000
|
unkown
|
page read and write
|
|
|
|
2482BB02000
|
unkown
|
page read and write
|
|
|
|
7FF50EFF8000
|
unkown
|
page readonly
|
|
|
|
289B5470000
|
unkown
|
page read and write
|
|
|
|
1CAF5260000
|
unkown
|
page readonly
|
|
|
|
7C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F1953000
|
unkown
|
page readonly
|
|
|
|
2482E110000
|
unkown
|
page read and write
|
|
|
|
60ECDFA000
|
unkown
|
page read and write
|
|
|
|
7FF51B249000
|
unkown
|
page readonly
|
|
|
|
7FF5D87BE000
|
unkown
|
page readonly
|
|
|
|
60EC87E000
|
unkown
|
page read and write
|
|
|
|
291F000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC02000
|
unkown
|
page readonly
|
|
|
|
7FF51B1D5000
|
unkown
|
page readonly
|
|
|
|
7FF5739F6000
|
unkown
|
page readonly
|
|
|
|
1FBE6840000
|
unkown
|
page readonly
|
|
|
|
7FF5A9F46000
|
unkown
|
page readonly
|
|
|
|
2482DB79000
|
unkown
|
page read and write
|
|
|
|
289AFEC0000
|
heap private
|
page read and write
|
|
|
|
1CAF4ED0000
|
unkown
|
page readonly
|
|
|
|
2CB0000
|
unkown
|
page readonly
|
|
|
|
DE5C5FF000
|
unkown
|
page read and write
|
|
|
|
23DBECA0000
|
heap default
|
page read and write
|
|
|
|
20ADC013000
|
unkown
|
page read and write
|
|
|
|
7FF52F626000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF0C000
|
unkown
|
page readonly
|
|
|
|
7FF5DE4CD000
|
unkown
|
page readonly
|
|
|
|
7FF57585A000
|
unkown
|
page readonly
|
|
|
|
771EFFF000
|
unkown
|
page read and write
|
|
|
|
289B006F000
|
unkown
|
page read and write
|
|
|
|
283314A0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE8D5000
|
unkown
|
page readonly
|
|
|
|
7FF52F635000
|
unkown
|
page readonly
|
|
|
|
7FF52F1E3000
|
unkown
|
page readonly
|
|
|
|
289B5854000
|
unkown
|
page read and write
|
|
|
|
2C70000
|
unkown
|
page read and write
|
|
|
|
2832FA55000
|
unkown
|
page read and write
|
|
|
|
7FF5A9FCE000
|
unkown
|
page readonly
|
|
|
|
1D9A3A9A000
|
heap default
|
page read and write
|
|
|
|
E0570FC000
|
unkown
|
page read and write
|
|
|
|
253A8C3D000
|
unkown
|
page read and write
|
|
|
|
226B5C02000
|
unkown
|
page read and write
|
|
|
|
7FF4F17A4000
|
unkown
|
page readonly
|
|
|
|
289B5653000
|
unkown
|
page readonly
|
|
|
|
7FF5A9EFA000
|
unkown
|
page readonly
|
|
|
|
7FF5AF7FA000
|
unkown
|
page readonly
|
|
|
|
23DBEDA0000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown
|
page readonly
|
|
|
|
2E01000
|
unkown
|
page read and write
|
|
|
|
7FF567D1D000
|
unkown
|
page readonly
|
|
|
|
7FF567C1A000
|
unkown
|
page readonly
|
|
|
|
294B000
|
unkown
|
page readonly
|
|
|
|
7FF5ECEC1000
|
unkown
|
page readonly
|
|
|
|
289B1040000
|
unkown
|
page readonly
|
|
|
|
7FF567C1E000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A8A000
|
unkown
|
page readonly
|
|
|
|
27E9A04A000
|
unkown
|
page read and write
|
|
|
|
20ADC113000
|
unkown
|
page read and write
|
|
|
|
7FF5DE61C000
|
unkown
|
page readonly
|
|
|
|
7FF50ED57000
|
unkown
|
page readonly
|
|
|
|
296F3740000
|
unkown
|
page readonly
|
|
|
|
289B5588000
|
unkown
|
page read and write
|
|
|
|
7FF52F5B2000
|
unkown
|
page readonly
|
|
|
|
238D4EB6000
|
unkown
|
page read and write
|
|
|
|
7FF59F27C000
|
unkown
|
page readonly
|
|
|
|
7FF573A2F000
|
unkown
|
page readonly
|
|
|
|
60ECA7A000
|
unkown
|
page read and write
|
|
|
|
289B0913000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A9C000
|
unkown
|
page readonly
|
|
|
|
7FF573AE9000
|
unkown
|
page readonly
|
|
|
|
2482DC02000
|
unkown
|
page read and write
|
|
|
|
289B5740000
|
unkown
|
page readonly
|
|
|
|
7FF5C8918000
|
unkown
|
page readonly
|
|
|
|
7FF51B1CC000
|
unkown
|
page readonly
|
|
|
|
7FF59F1BA000
|
unkown
|
page readonly
|
|
|
|
1E9BFC66000
|
unkown
|
page read and write
|
|
|
|
7BB000
|
unkown
|
page read and write
|
|
|
|
7FF57386F000
|
unkown
|
page readonly
|
|
|
|
253A8E00000
|
unkown
|
page readonly
|
|
|
|
1FBE4882000
|
unkown
|
page read and write
|
|
|
|
289B1090000
|
unkown
|
page readonly
|
|
|
|
7FF5B3460000
|
unkown
|
page readonly
|
|
|
|
1CAF4C57000
|
unkown
|
page read and write
|
|
|
|
7FF59EB15000
|
unkown
|
page readonly
|
|
|
|
1E9BFC46000
|
unkown
|
page read and write
|
|
|
|
7FF52F861000
|
unkown
|
page readonly
|
|
|
|
28EAA06B000
|
unkown
|
page read and write
|
|
|
|
901F3FC000
|
unkown
|
page read and write
|
|
|
|
56DFD7B000
|
unkown
|
page read and write
|
|
|
|
2A04000
|
unkown
|
page readonly
|
|
|
|
2482B9F0000
|
unkown
|
page read and write
|
|
|
|
56E017F000
|
unkown
|
page read and write
|
|
|
|
289B55A0000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC16000
|
unkown
|
page readonly
|
|
|
|
226B56D0000
|
unkown
|
page readonly
|
|
|
|
56DFCFD000
|
unkown
|
page read and write
|
|
|
|
289B5580000
|
unkown
|
page read and write
|
|
|
|
4037CBC000
|
unkown
|
page read and write
|
|
|
|
7FF5933F5000
|
unkown
|
page readonly
|
|
|
|
7FF5930A1000
|
unkown
|
page readonly
|
|
|
|
2482E210000
|
unkown
|
page read and write
|
|
|
|
1FBE487F000
|
unkown
|
page read and write
|
|
|
|
2482D920000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC86000
|
unkown
|
page readonly
|
|
|
|
7FF567D10000
|
unkown
|
page readonly
|
|
|
|
289B0958000
|
unkown
|
page read and write
|
|
|
|
289B5678000
|
unkown
|
page write copy
|
|
|
|
7FF56974E000
|
unkown
|
page readonly
|
|
|
|
238D4DD8000
|
heap default
|
page read and write
|
|
|
|
7FF5A9FD9000
|
unkown
|
page readonly
|
|
|
|
178BF0E0000
|
unkown
|
page readonly
|
|
|
|
1FBE4913000
|
unkown
|
page read and write
|
|
|
|
7FF5AF810000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC95000
|
unkown
|
page readonly
|
|
|
|
296F2B02000
|
unkown
|
page read and write
|
|
|
|
7FF5DE90C000
|
unkown
|
page readonly
|
|
|
|
2482D570000
|
unkown
|
page readonly
|
|
|
|
226B5600000
|
unkown
|
page readonly
|
|
|
|
238D4E29000
|
unkown
|
page read and write
|
|
|
|
1CAF4C47000
|
unkown
|
page read and write
|
|
|
|
289B58AA000
|
unkown
|
page read and write
|
|
|
|
7FF50EDA5000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF4A000
|
unkown
|
page readonly
|
|
|
|
CF70AFE000
|
unkown
|
page read and write
|
|
|
|
7FF52F7B9000
|
unkown
|
page readonly
|
|
|
|
7FF52F869000
|
unkown
|
page readonly
|
|
|
|
238D4E9D000
|
unkown
|
page read and write
|
|
|
|
1CAF4D00000
|
unkown
|
page read and write
|
|
|
|
7FF5A9EAA000
|
unkown
|
page readonly
|
|
|
|
403817E000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC7C000
|
unkown
|
page readonly
|
|
|
|
178BD850000
|
unkown
|
page readonly
|
|
|
|
D9B000
|
unkown
|
page readonly
|
|
|
|
76A2C79000
|
unkown
|
page read and write
|
|
|
|
7FF5DE655000
|
unkown
|
page readonly
|
|
|
|
2962000
|
unkown
|
page readonly
|
|
|
|
7FF4F1A85000
|
unkown
|
page readonly
|
|
|
|
2E04000
|
unkown
|
page read and write
|
|
|
|
296F3202000
|
unkown
|
page read and write
|
|
|
|
7FF52F7F5000
|
unkown
|
page readonly
|
|
|
|
7FF592BC6000
|
unkown
|
page readonly
|
|
|
|
7FF52F61C000
|
unkown
|
page readonly
|
|
|
|
7FF52F7AF000
|
unkown
|
page readonly
|
|
|
|
1E9BFC60000
|
unkown
|
page read and write
|
|
|
|
7FF51B23E000
|
unkown
|
page readonly
|
|
|
|
2832F870000
|
heap default
|
page read and write
|
|
|
|
7FF5DE603000
|
unkown
|
page readonly
|
|
|
|
2D3A000
|
heap private
|
page read and write
|
|
|
|
7FF5B3051000
|
unkown
|
page readonly
|
|
|
|
3C138FA000
|
unkown
|
page read and write
|
|
|
|
7FF57313A000
|
unkown
|
page readonly
|
|
|
|
7FF52F47A000
|
unkown
|
page readonly
|
|
|
|
7FF51B152000
|
unkown
|
page readonly
|
|
|
|
7FF50F04D000
|
unkown
|
page readonly
|
|
|
|
7FF5C89E1000
|
unkown
|
page readonly
|
|
|
|
2E04000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB41000
|
unkown
|
page readonly
|
|
|
|
29AA000
|
unkown
|
page readonly
|
|
|
|
7FF52F58C000
|
unkown
|
page readonly
|
|
|
|
9EAFDDE000
|
unkown
|
page read and write
|
|
|
|
289AFF20000
|
heap default
|
page read and write
|
|
|
|
289B0000000
|
unkown
|
page read and write
|
|
|
|
2A18000
|
unkown
|
page readonly
|
|
|
|
238D4DE1000
|
heap default
|
page read and write
|
|
|
|
7FF573AE1000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A6A000
|
unkown
|
page readonly
|
|
|
|
7FF59332A000
|
unkown
|
page readonly
|
|
|
|
7FF567CE6000
|
unkown
|
page readonly
|
|
|
|
7FF5B3277000
|
unkown
|
page readonly
|
|
|
|
901F5FC000
|
unkown
|
page read and write
|
|
|
|
1FBE48C4000
|
unkown
|
page read and write
|
|
|
|
238D5C60000
|
unkown
|
page readonly
|
|
|
|
7FF559F2C000
|
unkown
|
page readonly
|
|
|
|
253A8C29000
|
unkown
|
page read and write
|
|
|
|
253A8B60000
|
unkown
|
page readonly
|
|
|
|
7FF59EE13000
|
unkown
|
page readonly
|
|
|
|
7FF5A5880000
|
unkown
|
page readonly
|
|
|
|
7FF5A9BA8000
|
unkown
|
page readonly
|
|
|
|
238D5200000
|
unkown
|
page readonly
|
|
|
|
2995000
|
unkown
|
page readonly
|
|
|
|
7FF593454000
|
unkown
|
page readonly
|
|
|
|
7FF50F06C000
|
unkown
|
page readonly
|
|
|
|
7FF569819000
|
unkown
|
page readonly
|
|
|
|
7FF5690A1000
|
unkown
|
page readonly
|
|
|
|
7FF5DE8FD000
|
unkown
|
page readonly
|
|
|
|
7FF5DE6FE000
|
unkown
|
page readonly
|
|
|
|
2482DBF0000
|
unkown
|
page read and write
|
|
|
|
2482DC02000
|
unkown
|
page read and write
|
|
|
|
289B0079000
|
unkown
|
page read and write
|
|
|
|
7FF567C70000
|
unkown
|
page readonly
|
|
|
|
1E9BFC58000
|
unkown
|
page read and write
|
|
|
|
56DFA7E000
|
unkown
|
page read and write
|
|
|
|
238D4DC0000
|
unkown
|
page readonly
|
|
|
|
289B5650000
|
unkown
|
page read and write
|
|
|
|
7FF51AD50000
|
unkown
|
page readonly
|
|
|
|
23DBEE13000
|
unkown
|
page read and write
|
|
|
|
7FF567C72000
|
unkown
|
page readonly
|
|
|
|
238D4EC6000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
heap default
|
page read and write
|
|
|
|
20ADC000000
|
unkown
|
page read and write
|
|
|
|
CBE8C7A000
|
unkown
|
page read and write
|
|
|
|
7FF5ECE9C000
|
unkown
|
page readonly
|
|
|
|
7FF52F485000
|
unkown
|
page readonly
|
|
|
|
238D59B0000
|
unkown
|
page read and write
|
|
|
|
7FF5B33DC000
|
unkown
|
page readonly
|
|
|
|
71D88FF000
|
unkown
|
page read and write
|
|
|
|
253A8C00000
|
unkown
|
page read and write
|
|
|
|
1E9BFC34000
|
unkown
|
page read and write
|
|
|
|
7FF5D87C1000
|
unkown
|
page readonly
|
|
|
|
7FF575771000
|
unkown
|
page readonly
|
|
|
|
7FF567C9A000
|
unkown
|
page readonly
|
|
|
|
7FF5757AC000
|
unkown
|
page readonly
|
|
|
|
289B55A4000
|
unkown
|
page read and write
|
|
|
|
7FF5B3378000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC12000
|
unkown
|
page readonly
|
|
|
|
23BC6E68000
|
unkown
|
page read and write
|
|
|
|
CF70D7A000
|
unkown
|
page read and write
|
|
|
|
23BC6CA0000
|
heap default
|
page read and write
|
|
|
|
56DF8FC000
|
unkown
|
page read and write
|
|
|
|
289B5687000
|
unkown
|
page write copy
|
|
|
|
7FF593502000
|
unkown
|
page readonly
|
|
|
|
23BC6D80000
|
unkown
|
page write copy
|
|
|
|
289B00FC000
|
unkown
|
page read and write
|
|
|
|
73B000
|
unkown
|
page read and write
|
|
|
|
7FF5934AF000
|
unkown
|
page readonly
|
|
|
|
7FF50EFF6000
|
unkown
|
page readonly
|
|
|
|
1CAF4BF0000
|
unkown
|
page read and write
|
|
|
|
28EAA03F000
|
unkown
|
page read and write
|
|
|
|
7FF573A56000
|
unkown
|
page readonly
|
|
|
|
7FF51B199000
|
unkown
|
page readonly
|
|
|
|
2482BB39000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A1A000
|
unkown
|
page readonly
|
|
|
|
992D47E000
|
unkown
|
page read and write
|
|
|
|
5E80000
|
unkown
|
page readonly
|
|
|
|
7FF5679FC000
|
unkown
|
page readonly
|
|
|
|
289B53F0000
|
unkown
|
page read and write
|
|
|
|
1E9BFC28000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A6F000
|
unkown
|
page readonly
|
|
|
|
7FF56972A000
|
unkown
|
page readonly
|
|
|
|
289B5861000
|
unkown
|
page read and write
|
|
|
|
7FF5DE873000
|
unkown
|
page readonly
|
|
|
|
1CAF4C2A000
|
unkown
|
page read and write
|
|
|
|
2482BA3F000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A1C000
|
unkown
|
page readonly
|
|
|
|
7FF4F1810000
|
unkown
|
page readonly
|
|
|
|
2482DBF8000
|
unkown
|
page read and write
|
|
|
|
771E9FB000
|
unkown
|
page read and write
|
|
|
|
7FF5ECBB7000
|
unkown
|
page readonly
|
|
|
|
2D7D000
|
unkown
|
page read and write
|
|
|
|
253A9260000
|
unkown
|
page readonly
|
|
|
|
7FF5A5BAE000
|
unkown
|
page readonly
|
|
|
|
2482BAA6000
|
unkown
|
page read and write
|
|
|
|
23BC6E02000
|
unkown
|
page read and write
|
|
|
|
27E9A056000
|
unkown
|
page read and write
|
|
|
|
7FF56978C000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF96000
|
unkown
|
page readonly
|
|
|
|
253A9600000
|
unkown
|
page read and write
|
|
|
|
2482DBF2000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
2482DBF4000
|
unkown
|
page read and write
|
|
|
|
20ADC200000
|
unkown
|
page readonly
|
|
|
|
7FF5B3400000
|
unkown
|
page readonly
|
|
|
|
F8C7EFD000
|
unkown
|
page read and write
|
|
|
|
71D8AFF000
|
unkown
|
page read and write
|
|
|
|
178BDBE0000
|
unkown
|
page readonly
|
|
|
|
7FF5DE934000
|
unkown
|
page readonly
|
|
|
|
7FF5DE901000
|
unkown
|
page readonly
|
|
|
|
238D4EC6000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
16DB88C0000
|
heap private
|
page read and write
|
|
|
|
238D5CD0000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A56000
|
unkown
|
page readonly
|
|
|
|
7FF5DE91C000
|
unkown
|
page readonly
|
|
|
|
2482DB79000
|
unkown
|
page read and write
|
|
|
|
7FF59EF8C000
|
unkown
|
page readonly
|
|
|
|
2970000
|
unkown
|
page readonly
|
|
|
|
EFDB07E000
|
unkown
|
page read and write
|
|
|
|
27E9A090000
|
unkown
|
page read and write
|
|
|
|
7FF5B33A5000
|
unkown
|
page readonly
|
|
|
|
289B0074000
|
unkown
|
page read and write
|
|
|
|
289B0790000
|
unkown
|
page read and write
|
|
|
|
1E9BFC5C000
|
unkown
|
page read and write
|
|
|
|
7FF569811000
|
unkown
|
page readonly
|
|
|
|
7FF573A75000
|
unkown
|
page readonly
|
|
|
|
60ECE7C000
|
unkown
|
page read and write
|
|
|
|
BBD000
|
unkown
|
page read and write
|
|
|
|
2482DC00000
|
unkown
|
page read and write
|
|
|
|
226B54BF000
|
unkown
|
page read and write
|
|
|
|
7FF5673F6000
|
unkown
|
page readonly
|
|
|
|
5F80000
|
unkown
|
page readonly
|
|
|
|
7FF5B3280000
|
unkown
|
page readonly
|
|
|
|
29FB000
|
unkown
|
page readonly
|
|
|
|
7FF50F05C000
|
unkown
|
page readonly
|
|
|
|
2C5E000
|
unkown
|
page read and write
|
|
|
|
20ADBFF0000
|
unkown
|
page read and write
|
|
|
|
7FF5AF800000
|
unkown
|
page readonly
|
|
|
|
CBE8D7A000
|
unkown
|
page read and write
|
|
|
|
1CAF4C02000
|
unkown
|
page read and write
|
|
|
|
7FF4F19FA000
|
unkown
|
page readonly
|
|
|
|
2482E310000
|
unkown
|
page read and write
|
|
|
|
27E9A055000
|
unkown
|
page read and write
|
|
|
|
2482BB59000
|
unkown
|
page read and write
|
|
|
|
2832F880000
|
unkown
|
page readonly
|
|
|
|
7FF50F02F000
|
unkown
|
page readonly
|
|
|
|
1FBE4740000
|
unkown
|
page write copy
|
|
|
|
7FF5AFC3E000
|
unkown
|
page readonly
|
|
|
|
1E9BFC45000
|
unkown
|
page read and write
|
|
|
|
238D4D80000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC45000
|
unkown
|
page readonly
|
|
|
|
290E000
|
unkown
|
page readonly
|
|
|
|
23DBF460000
|
unkown
|
page readonly
|
|
|
|
7FF5B30B6000
|
unkown
|
page readonly
|
|
|
|
E056EF7000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AC2000
|
unkown
|
page readonly
|
|
|
|
2482DBF6000
|
unkown
|
page read and write
|
|
|
|
1CAF4BF0000
|
unkown
|
page read and write
|
|
|
|
7FF5ECF65000
|
unkown
|
page readonly
|
|
|
|
23BC6E68000
|
unkown
|
page read and write
|
|
|
|
2D92000
|
unkown
|
page read and write
|
|
|
|
7FF567D79000
|
unkown
|
page readonly
|
|
|
|
1E9C0402000
|
unkown
|
page read and write
|
|
|
|
2482DB59000
|
unkown
|
page read and write
|
|
|
|
7FF51B038000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AA6000
|
unkown
|
page readonly
|
|
|
|
289B0802000
|
unkown
|
page read and write
|
|
|
|
1E9BFC2F000
|
unkown
|
page read and write
|
|
|
|
7FF59F1F8000
|
unkown
|
page readonly
|
|
|
|
CBE8AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5EC6A6000
|
unkown
|
page readonly
|
|
|
|
7FF5ECC3F000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B57000
|
unkown
|
page readonly
|
|
|
|
7FF573A66000
|
unkown
|
page readonly
|
|
|
|
178BEFF0000
|
unkown
|
page readonly
|
|
|
|
238D4E9D000
|
unkown
|
page read and write
|
|
|
|
2482F010000
|
unkown
|
page read and write
|
|
|
|
7FF5A590A000
|
unkown
|
page readonly
|
|
|
|
7FF569685000
|
unkown
|
page readonly
|
|
|
|
2983000
|
unkown
|
page readonly
|
|
|
|
238D4E8E000
|
unkown
|
page read and write
|
|
|
|
289B5690000
|
unkown
|
page read and write
|
|
|
|
7FF52F5EF000
|
unkown
|
page readonly
|
|
|
|
1CAF4C47000
|
unkown
|
page read and write
|
|
|
|
60ECCFB000
|
unkown
|
page read and write
|
|
|
|
7FF5ECF07000
|
unkown
|
page readonly
|
|
|
|
7FF52F547000
|
unkown
|
page readonly
|
|
|
|
2832F9A0000
|
unkown
|
page readonly
|
|
|
|
2932000
|
unkown
|
page readonly
|
|
|
|
7FF59EFB7000
|
unkown
|
page readonly
|
|
|
|
2482BAFF000
|
unkown
|
page read and write
|
|
|
|
27E9A08A000
|
unkown
|
page read and write
|
|
|
|
CF70C7F000
|
unkown
|
page read and write
|
|
|
|
2482B950000
|
heap default
|
page read and write
|
|
|
|
2482DBF1000
|
unkown
|
page read and write
|
|
|
|
23BC6CB0000
|
unkown
|
page readonly
|
|
|
|
23BC6E6E000
|
unkown
|
page read and write
|
|
|
|
7FF50F0E9000
|
unkown
|
page readonly
|
|
|
|
2DFE000
|
unkown
|
page read and write
|
|
|
|
16DB8A02000
|
unkown
|
page read and write
|
|
|
|
289B55B0000
|
unkown
|
page read and write
|
|
|
|
7FF51B053000
|
unkown
|
page readonly
|
|
|
|
7FF575430000
|
unkown
|
page readonly
|
|
|
|
7FF5758AC000
|
unkown
|
page readonly
|
|
|
|
283313A0000
|
unkown
|
page read and write
|
|
|
|
7FF5ECD8E000
|
unkown
|
page readonly
|
|
|
|
7FF593377000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AC7000
|
unkown
|
page readonly
|
|
|
|
253A8BA0000
|
unkown
|
page read and write
|
|
|
|
7FF51AD40000
|
unkown
|
page readonly
|
|
|
|
7FF5B309E000
|
unkown
|
page readonly
|
|
|
|
289B009C000
|
unkown
|
page read and write
|
|
|
|
7FF5B3360000
|
unkown
|
page readonly
|
|
|
|
16DB8B00000
|
unkown
|
page read and write
|
|
|
|
901EFFF000
|
unkown
|
page read and write
|
|
|
|
289B0A01000
|
unkown
|
page read and write
|
|
|
|
238D4E21000
|
unkown
|
page read and write
|
|
|
|
7FF5C8797000
|
unkown
|
page readonly
|
|
|
|
7FF50F039000
|
unkown
|
page readonly
|
|
|
|
7FF59F245000
|
unkown
|
page readonly
|
|
|
|
1CAF6700000
|
unkown
|
page readonly
|
|
|
|
7FF5B2ADE000
|
unkown
|
page readonly
|
|
|
|
23DBEE3C000
|
unkown
|
page read and write
|
|
|
|
20ADC102000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page readonly
|
|
|
|
2D7D000
|
unkown
|
page read and write
|
|
|
|
1E9BFC61000
|
unkown
|
page read and write
|
|
|
|
7FF573A4D000
|
unkown
|
page readonly
|
|
|
|
1E9BFC41000
|
unkown
|
page read and write
|
|
|
|
1FBE486E000
|
unkown
|
page read and write
|
|
|
|
29AA000
|
unkown
|
page readonly
|
|
|
|
2482DBF5000
|
unkown
|
page read and write
|
|
|
|
60EC8F9000
|
unkown
|
page read and write
|
|
|
|
289B0E70000
|
unkown
|
page read and write
|
|
|
|
7FF5C89FA000
|
unkown
|
page readonly
|
|
|
|
56DF4FC000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCA4000
|
unkown
|
page readonly
|
|
|
|
2C80000
|
unkown
|
page read and write
|
|
|
|
7FF59F1DC000
|
unkown
|
page readonly
|
|
|
|
27E9A04E000
|
unkown
|
page read and write
|
|
|
|
2D30000
|
heap private
|
page read and write
|
|
|
|
2832FA1D000
|
unkown
|
page read and write
|
|
|
|
2482B960000
|
unkown
|
page write copy
|
|
|
|
7FF57570A000
|
unkown
|
page readonly
|
|
|
|
296F2A65000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A8C000
|
unkown
|
page readonly
|
|
|
|
7FF52F1E1000
|
unkown
|
page readonly
|
|
|
|
28EA9EF0000
|
unkown
|
page write copy
|
|
|
|
7FF5DE925000
|
unkown
|
page readonly
|
|
|
|
23BC6E68000
|
unkown
|
page read and write
|
|
|
|
7FF59EFC5000
|
unkown
|
page readonly
|
|
|
|
7FF575777000
|
unkown
|
page readonly
|
|
|
|
7FF5DE991000
|
unkown
|
page readonly
|
|
|
|
2946000
|
unkown
|
page readonly
|
|
|
|
7FF4F18B0000
|
unkown
|
page readonly
|
|
|
|
56DFBFC000
|
unkown
|
page read and write
|
|
|
|
7FF5A9DA9000
|
unkown
|
page readonly
|
|
|
|
7FF5C87E5000
|
unkown
|
page readonly
|
|
|
|
7FF52F760000
|
unkown
|
page readonly
|
|
|
|
CBE8B7E000
|
unkown
|
page read and write
|
|
|
|
99F27E000
|
unkown
|
page read and write
|
|
|
|
9EB02F7000
|
unkown
|
page read and write
|
|
|
|
E0571FF000
|
unkown
|
page read and write
|
|
|
|
7FF59F05A000
|
unkown
|
page readonly
|
|
|
|
2941000
|
unkown
|
page readonly
|
|
|
|
7FF5AFB7C000
|
unkown
|
page readonly
|
|
|
|
289B581B000
|
unkown
|
page read and write
|
|
|
|
7FF57589D000
|
unkown
|
page readonly
|
|
|
|
7FF50EF97000
|
unkown
|
page readonly
|
|
|
|
238D4FA0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFA8F000
|
unkown
|
page readonly
|
|
|
|
7FF5EC6B0000
|
unkown
|
page readonly
|
|
|
|
7FF51AD3A000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF9C000
|
unkown
|
page readonly
|
|
|
|
7FF5A59C3000
|
unkown
|
page readonly
|
|
|
|
289B00BA000
|
unkown
|
page read and write
|
|
|
|
7FF5ECCF0000
|
unkown
|
page readonly
|
|
|
|
7FF56979C000
|
unkown
|
page readonly
|
|
|
|
7FF5758BC000
|
unkown
|
page readonly
|
|
|
|
7FF575939000
|
unkown
|
page readonly
|
|
|
|
99F2FE000
|
unkown
|
page read and write
|
|
|
|
992C9DB000
|
unkown
|
page read and write
|
|
|
|
1CAF4BB0000
|
unkown
|
page read and write
|
|
|
|
2D7D000
|
unkown
|
page read and write
|
|
|
|
2972000
|
unkown
|
page readonly
|
|
|
|
7FF52F62C000
|
unkown
|
page readonly
|
|
|
|
16DB8A40000
|
unkown
|
page read and write
|
|
|
|
2962000
|
unkown
|
page readonly
|
|
|
|
7FF5C89FC000
|
unkown
|
page readonly
|
|
|
|
7FF5A5823000
|
unkown
|
page readonly
|
|
|
|
23DBF602000
|
unkown
|
page read and write
|
|
|
|
7FF5B33AF000
|
unkown
|
page readonly
|
|
|
|
1E9BFC57000
|
unkown
|
page read and write
|
|
|
|
7FF52F644000
|
unkown
|
page readonly
|
|
|
|
7FF59EFD0000
|
unkown
|
page readonly
|
|
|
|
23DBEF08000
|
unkown
|
page read and write
|
|
|
|
1D9A3960000
|
unkown
|
page readonly
|
|
|
|
7FF5DE4A3000
|
unkown
|
page readonly
|
|
|
|
DE5C10E000
|
unkown
|
page read and write
|
|
|
|
253A8D02000
|
unkown
|
page read and write
|
|
|
|
2482DBF4000
|
unkown
|
page read and write
|
|
|
|
1E9BFC40000
|
unkown
|
page read and write
|
|
|
|
7FF567D14000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B21000
|
unkown
|
page readonly
|
|
|
|
27E9AD40000
|
unkown
|
page readonly
|
|
|
|
7FF5934EC000
|
unkown
|
page readonly
|
|
|
|
7FF5A5875000
|
unkown
|
page readonly
|
|
|
|
1CAF4B40000
|
unkown
|
page readonly
|
|
|
|
23BC87A0000
|
unkown
|
page read and write
|
|
|
|
21758E29000
|
unkown
|
page read and write
|
|
|
|
2CAA000
|
heap private
|
page read and write
|
|
|
|
7FF52F5A0000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC18000
|
unkown
|
page readonly
|
|
|
|
EFDB3F7000
|
unkown
|
page read and write
|
|
|
|
7FF5B328C000
|
unkown
|
page readonly
|
|
|
|
289B0959000
|
unkown
|
page read and write
|
|
|
|
7FF593308000
|
unkown
|
page readonly
|
|
|
|
27E9A04D000
|
unkown
|
page read and write
|
|
|
|
2482DBF6000
|
unkown
|
page read and write
|
|
|
|
29A5000
|
unkown
|
page readonly
|
|
|
|
7FF5A9ED2000
|
unkown
|
page readonly
|
|
|
|
7FF575842000
|
unkown
|
page readonly
|
|
|
|
7FF52F5EF000
|
unkown
|
page readonly
|
|
|
|
23DBEE00000
|
unkown
|
page read and write
|
|
|
|
23DBEE4A000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B29000
|
unkown
|
page readonly
|
|
|
|
771EE7E000
|
unkown
|
page read and write
|
|
|
|
7FF575440000
|
unkown
|
page readonly
|
|
|
|
7FF593569000
|
unkown
|
page readonly
|
|
|
|
7FF5ECFC7000
|
unkown
|
page readonly
|
|
|
|
27E9A057000
|
unkown
|
page read and write
|
|
|
|
2482E210000
|
unkown
|
page read and write
|
|
|
|
7FF50F0DE000
|
unkown
|
page readonly
|
|
|
|
23BC6F00000
|
unkown
|
page read and write
|
|
|
|
2482DBF4000
|
unkown
|
page read and write
|
|
|
|
992D779000
|
unkown
|
page read and write
|
|
|
|
7FF5AFACE000
|
unkown
|
page readonly
|
|
|
|
2689000
|
unkown
|
page readonly
|
|
|
|
7FF5D86D8000
|
unkown
|
page readonly
|
|
|
|
289B55C0000
|
unkown
|
page read and write
|
|
|
|
7FF5B2FCE000
|
unkown
|
page readonly
|
|
|
|
7FF5D8705000
|
unkown
|
page readonly
|
|
|
|
2D81000
|
unkown
|
page read and write
|
|
|
|
1FBE6830000
|
unkown
|
page read and write
|
|
|
|
27E99F50000
|
unkown
|
page readonly
|
|
|
|
296F2B00000
|
unkown
|
page read and write
|
|
|
|
7FF567C86000
|
unkown
|
page readonly
|
|
|
|
7FF52F1E5000
|
unkown
|
page readonly
|
|
|
|
EFDB175000
|
unkown
|
page read and write
|
|
|
|
2990000
|
unkown
|
page readonly
|
|
|
|
2614000
|
unkown
|
page readonly
|
|
|
|
60ECEFB000
|
unkown
|
page read and write
|
|
|
|
7FF50F01E000
|
unkown
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
2832FC00000
|
unkown
|
page readonly
|
|
|
|
1D9A3A96000
|
heap default
|
page read and write
|
|
|
|
7FF5C87F0000
|
unkown
|
page readonly
|
|
|
|
1FBE483F000
|
unkown
|
page read and write
|
|
|
|
28EAA06D000
|
unkown
|
page read and write
|
|
|
|
21758CE0000
|
unkown
|
page readonly
|
|
|
|
7FF5ECDCE000
|
unkown
|
page readonly
|
|
|
|
7FF59F295000
|
unkown
|
page readonly
|
|
|
|
7FF5D87C9000
|
unkown
|
page readonly
|
|
|
|
1D9A3A70000
|
heap default
|
page read and write
|
|
|
|
7FF4F12EA000
|
unkown
|
page readonly
|
|
|
|
99FBAFB000
|
unkown
|
page read and write
|
|
|
|
7FF59355E000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF20000
|
unkown
|
page readonly
|
|
|
|
7FF59F117000
|
unkown
|
page readonly
|
|
|
|
7FF52F5E5000
|
unkown
|
page readonly
|
|
|
|
7FF51B1AD000
|
unkown
|
page readonly
|
|
|
|
2482BCD0000
|
unkown
|
page readonly
|
|
|
|
2482BA54000
|
unkown
|
page read and write
|
|
|
|
226B5413000
|
unkown
|
page read and write
|
|
|
|
62C0000
|
unkown
|
page read and write
|
|
|
|
99FB70F000
|
unkown
|
page read and write
|
|
|
|
1E9BFE00000
|
unkown
|
page readonly
|
|
|
|
178BD760000
|
unkown
|
page readonly
|
|
|
|
2482BB13000
|
unkown
|
page read and write
|
|
|
|
238D4EC6000
|
unkown
|
page read and write
|
|
|
|
2DF8000
|
unkown
|
page read and write
|
|
|
|
7FF5D8755000
|
unkown
|
page readonly
|
|
|
|
901F0FE000
|
unkown
|
page read and write
|
|
|
|
289B5897000
|
unkown
|
page read and write
|
|
|
|
2482DBF6000
|
unkown
|
page read and write
|
|
|
|
EFDB2FF000
|
unkown
|
page read and write
|
|
|
|
3C1387F000
|
unkown
|
page read and write
|
|
|
|
7FF575830000
|
unkown
|
page readonly
|
|
|
|
289B56C0000
|
unkown
|
page read and write
|
|
|
|
7FF575728000
|
unkown
|
page readonly
|
|
|
|
253A8B40000
|
heap default
|
page read and write
|
|
|
|
BDE000
|
unkown
|
page read and write
|
|
|
|
7FF5DE6CC000
|
unkown
|
page readonly
|
|
|
|
27E9A03C000
|
unkown
|
page read and write
|
|
|
|
7FF5AFAF8000
|
unkown
|
page readonly
|
|
|
|
6240000
|
unkown
|
page read and write
|
|
|
|
7FF52F647000
|
unkown
|
page readonly
|
|
|
|
9EB03FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A9E65000
|
unkown
|
page readonly
|
|
|
|
238D4E8D000
|
unkown
|
page read and write
|
|
|
|
7FF5ECCE5000
|
unkown
|
page readonly
|
|
|
|
289B55B0000
|
unkown
|
page read and write
|
|
|
|
289B0E60000
|
unkown
|
page read and write
|
|
|
|
296F2A3C000
|
unkown
|
page read and write
|
|
|
|
289B0900000
|
unkown
|
page read and write
|
|
|
|
7FF5B3372000
|
unkown
|
page readonly
|
|
|
|
7FF573A5C000
|
unkown
|
page readonly
|
|
|
|
7FF593569000
|
unkown
|
page readonly
|
|
|
|
16DB8A00000
|
unkown
|
page read and write
|
|
|
|
2482E310000
|
unkown
|
page read and write
|
|
|
|
7FF567CDD000
|
unkown
|
page readonly
|
|
|
|
7FF57592E000
|
unkown
|
page readonly
|
|
|
|
2482E010000
|
unkown
|
page read and write
|
|
|
|
20ADBE90000
|
heap private
|
page read and write
|
|
|
|
178BF290000
|
heap private
|
page read and write
|
|
|
|
7FF573A25000
|
unkown
|
page readonly
|
|
|
|
7FF569627000
|
unkown
|
page readonly
|
|
|
|
7FF52F7CD000
|
unkown
|
page readonly
|
|
|
|
5E74000
|
heap private
|
page read and write
|
|
|
|
60EC67E000
|
unkown
|
page read and write
|
|
|
|
1CAF6802000
|
unkown
|
page read and write
|
|
|
|
1FBE4790000
|
unkown
|
page readonly
|
|
|
|
296F2A55000
|
unkown
|
page read and write
|
|
|
|
7FF59349E000
|
unkown
|
page readonly
|
|
|
|
7FF5A5BB1000
|
unkown
|
page readonly
|
|
|
|
16DB8A79000
|
unkown
|
page read and write
|
|
|
|
771F37D000
|
unkown
|
page read and write
|
|
|
|
21758CD0000
|
heap default
|
page read and write
|
|
|
|
226B5E00000
|
unkown
|
page readonly
|
|
|
|
7FF5ECFAC000
|
unkown
|
page readonly
|
|
|
|
7FF4F1A7E000
|
unkown
|
page readonly
|
|
|
|
16DB9202000
|
unkown
|
page read and write
|
|
|
|
7FF5AF47C000
|
unkown
|
page readonly
|
|
|
|
7FF5A9F1F000
|
unkown
|
page readonly
|
|
|
|
1E9BFD02000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F56000
|
unkown
|
page readonly
|
|
|
|
238D5C50000
|
unkown
|
page read and write
|
|
|
|
16DB9070000
|
unkown
|
page readonly
|
|
|
|
56DFF7E000
|
unkown
|
page read and write
|
|
|
|
7FF568EB7000
|
unkown
|
page readonly
|
|
|
|
1CAF4B80000
|
unkown
|
page read and write
|
|
|
|
226B6140000
|
unkown
|
page readonly
|
|
|
|
7FF51B1BC000
|
unkown
|
page readonly
|
|
|
|
7FF5934E6000
|
unkown
|
page readonly
|
|
|
|
21758E55000
|
unkown
|
page read and write
|
|
|
|
1FBE6702000
|
unkown
|
page read and write
|
|
|
|
992D3FF000
|
unkown
|
page read and write
|
|
|
|
1FBE6700000
|
unkown
|
page read and write
|
|
|
|
7FF5ECD4B000
|
unkown
|
page readonly
|
|
|
|
21758DB0000
|
unkown
|
page write copy
|
|
|
|
7FF5A5B1D000
|
unkown
|
page readonly
|
|
|
|
9EB05FF000
|
unkown
|
page read and write
|
|
|
|
7FF52F60D000
|
unkown
|
page readonly
|
|
|
|
7FF5AF93B000
|
unkown
|
page readonly
|
|
|
|
7FF50EFBA000
|
unkown
|
page readonly
|
|
|
|
7FF5A9F0E000
|
unkown
|
page readonly
|
|
|
|
27E9A04B000
|
unkown
|
page read and write
|
|
|
|
CF70EFC000
|
unkown
|
page read and write
|
|
|
|
28EAA06B000
|
unkown
|
page read and write
|
|
|
|
1E9BFC59000
|
unkown
|
page read and write
|
|
|
|
2482BA00000
|
unkown
|
page read and write
|
|
|
|
226B54E2000
|
unkown
|
page read and write
|
|
|
|
226B5340000
|
unkown
|
page readonly
|
|
|
|
1CAF4E00000
|
unkown
|
page readonly
|
|
|
|
7FF5A5356000
|
unkown
|
page readonly
|
|
|
|
7FF569769000
|
unkown
|
page readonly
|
|
|
|
7FF51B17E000
|
unkown
|
page readonly
|
|
|
|
20ADBF00000
|
unkown
|
page readonly
|
|
|
|
238D4EBB000
|
unkown
|
page read and write
|
|
|
|
1E9BFC69000
|
unkown
|
page read and write
|
|
|
|
7FF5ECB63000
|
unkown
|
page readonly
|
|
|
|
289B5430000
|
unkown
|
page readonly
|
|
|
|
1FBE6715000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCA7000
|
unkown
|
page readonly
|
|
|
|
7FF5B3042000
|
unkown
|
page readonly
|
|
|
|
2C20000
|
unkown
|
page readonly
|
|
|
|
7FF57542A000
|
unkown
|
page readonly
|
|
|
|
289B581F000
|
unkown
|
page read and write
|
|
|
|
7FF52F72B000
|
unkown
|
page readonly
|
|
|
|
226B5360000
|
unkown
|
page read and write
|
|
|
|
2DFD000
|
unkown
|
page read and write
|
|
|
|
1CAF4B30000
|
heap default
|
page read and write
|
|
|
|
7FF5DE7A7000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B36000
|
unkown
|
page readonly
|
|
|
|
7FF59F309000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC8C000
|
unkown
|
page readonly
|
|
|
|
289B00AB000
|
unkown
|
page read and write
|
|
|
|
7FF567D05000
|
unkown
|
page readonly
|
|
|
|
2482DB79000
|
unkown
|
page read and write
|
|
|
|
7FF573A39000
|
unkown
|
page readonly
|
|
|
|
7FF51B087000
|
unkown
|
page readonly
|
|
|
|
27E9A029000
|
unkown
|
page read and write
|
|
|
|
289B0076000
|
unkown
|
page read and write
|
|
|
|
7FF5B33EC000
|
unkown
|
page readonly
|
|
|
|
2DDA000
|
heap default
|
page read and write
|
|
|
|
226B52D0000
|
heap private
|
page read and write
|
|
|
|
296F3070000
|
unkown
|
page readonly
|
|
|
|
7FF567CFC000
|
unkown
|
page readonly
|
|
|
|
7FF4F1A8F000
|
unkown
|
page readonly
|
|
|
|
76A2AF9000
|
unkown
|
page read and write
|
|
|
|
3C135FA000
|
unkown
|
page read and write
|
|
|
|
EFDADDE000
|
unkown
|
page read and write
|
|
|
|
23BC6E29000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A3A000
|
unkown
|
page readonly
|
|
|
|
253A8BA0000
|
unkown
|
page read and write
|
|
|
|
28EAA06D000
|
unkown
|
page read and write
|
|
|
|
27E9A054000
|
unkown
|
page read and write
|
|
|
|
289B1080000
|
unkown
|
page readonly
|
|
|
|
7FF51B00E000
|
unkown
|
page readonly
|
|
|
|
7FF5DE788000
|
unkown
|
page readonly
|
|
|
|
7FF52F2DE000
|
unkown
|
page readonly
|
|
|
|
2D84000
|
unkown
|
page read and write
|
|
|
|
21759200000
|
unkown
|
page readonly
|
|
|
|
21758F02000
|
unkown
|
page read and write
|
|
|
|
7FF59F202000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC59000
|
unkown
|
page readonly
|
|
|
|
771F27D000
|
unkown
|
page read and write
|
|
|
|
23BC6E00000
|
unkown
|
page read and write
|
|
|
|
7FF575889000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF38000
|
unkown
|
page readonly
|
|
|
|
296F3080000
|
unkown
|
page read and write
|
|
|
|
99F37F000
|
unkown
|
page read and write
|
|
|
|
238D4FF0000
|
unkown
|
page read and write
|
|
|
|
7FF5C833B000
|
unkown
|
page readonly
|
|
|
|
B0E000
|
unkown
|
page read and write
|
|
|
|
7FF568FB2000
|
unkown
|
page readonly
|
|
|
|
7FF5756FE000
|
unkown
|
page readonly
|
|
|
|
1CAF4D02000
|
unkown
|
page read and write
|
|
|
|
2832F950000
|
unkown
|
page write copy
|
|
|
|
7FF59F02B000
|
unkown
|
page readonly
|
|
|
|
23DBF800000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D98000
|
unkown
|
page readonly
|
|
|
|
2482DBF8000
|
unkown
|
page read and write
|
|
|
|
2956000
|
unkown
|
page readonly
|
|
|
|
20ADBEF0000
|
heap default
|
page read and write
|
|
|
|
2A10000
|
unkown
|
page readonly
|
|
|
|
60ECBFB000
|
unkown
|
page read and write
|
|
|
|
238D4FEA000
|
heap private
|
page read and write
|
|
|
|
1E9BFC5F000
|
unkown
|
page read and write
|
|
|
|
2C60000
|
unkown
|
page readonly
|
|
|
|
7FF5C89DA000
|
unkown
|
page readonly
|
|
|
|
7FF5DE927000
|
unkown
|
page readonly
|
|
|
|
16DB8A13000
|
unkown
|
page read and write
|
|
|
|
7FF5DE851000
|
unkown
|
page readonly
|
|
|
|
28EAA200000
|
unkown
|
page readonly
|
|
|
|
7FF5D873C000
|
unkown
|
page readonly
|
|
|
|
2D75000
|
unkown
|
page read and write
|
|
|
|
7FF50EE50000
|
unkown
|
page readonly
|
|
|
|
296F2E00000
|
unkown
|
page readonly
|
|
|
|
226B5429000
|
unkown
|
page read and write
|
|
|
|
7FF5ECC3C000
|
unkown
|
page readonly
|
|
|
|
E05697E000
|
unkown
|
page read and write
|
|
|
|
7FF59EE3D000
|
unkown
|
page readonly
|
|
|
|
21758E02000
|
unkown
|
page read and write
|
|
|
|
1FBE4600000
|
heap private
|
page read and write
|
|
|
|
21758C70000
|
heap private
|
page read and write
|
|
|
|
7FF4F1AD7000
|
unkown
|
page readonly
|
|
|
|
226B5D00000
|
unkown
|
page read and write
|
|
|
|
28EA9E20000
|
unkown
|
page readonly
|
|
|
|
2482BA29000
|
unkown
|
page read and write
|
|
|
|
23DBED90000
|
unkown
|
page readonly
|
|
|
|
7FF5A9EC8000
|
unkown
|
page readonly
|
|
|
|
28EAA06D000
|
unkown
|
page read and write
|
|
|
|
7FF52F7EC000
|
unkown
|
page readonly
|
|
|
|
28EAA113000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC00000
|
unkown
|
page readonly
|
|
|
|
3C134FB000
|
unkown
|
page read and write
|
|
|
|
1E9BFC42000
|
unkown
|
page read and write
|
|
|
|
28EAA06F000
|
unkown
|
page read and write
|
|
|
|
7FF5739F8000
|
unkown
|
page readonly
|
|
|
|
DE5C6FE000
|
unkown
|
page read and write
|
|
|
|
7FF52F5F9000
|
unkown
|
page readonly
|
|
|
|
992CF7A000
|
unkown
|
page read and write
|
|
|
|
7FF5A9EE2000
|
unkown
|
page readonly
|
|
|
|
289B0918000
|
unkown
|
page read and write
|
|
|
|
20ADC590000
|
unkown
|
page readonly
|
|
|
|
289B5878000
|
unkown
|
page read and write
|
|
|
|
992D5FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A5A71000
|
unkown
|
page readonly
|
|
|
|
27E9A050000
|
unkown
|
page read and write
|
|
|
|
7FF568EAF000
|
unkown
|
page readonly
|
|
|
|
2482DB23000
|
unkown
|
page read and write
|
|
|
|
7FF5DE831000
|
unkown
|
page readonly
|
|
|
|
7FF5DE80C000
|
unkown
|
page readonly
|
|
|
|
296F28C0000
|
heap private
|
page read and write
|
|
|
|
40382FE000
|
unkown
|
page read and write
|
|
|
|
7FF5758D4000
|
unkown
|
page readonly
|
|
|
|
2990000
|
unkown
|
page readonly
|
|
|
|
289B0918000
|
unkown
|
page read and write
|
|
|
|
1E9BFB40000
|
heap private
|
page read and write
|
|
|
|
7FF51B249000
|
unkown
|
page readonly
|
|
|
|
23BC6E68000
|
unkown
|
page read and write
|
|
|
|
289B5684000
|
unkown
|
page write copy
|
|
|
|
1E9BFC6A000
|
unkown
|
page read and write
|
|
|
|
7FF59EF73000
|
unkown
|
page readonly
|
|
|
|
7FF5DE8A2000
|
unkown
|
page readonly
|
|
|
|
7FF5AFB47000
|
unkown
|
page readonly
|
|
|
|
7FF4F1AE7000
|
unkown
|
page readonly
|
|
|
|
BE4000
|
heap private
|
page read and write
|
|
|
|
901F1FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F70000
|
unkown
|
page readonly
|
|
|
|
7FF5ECFC4000
|
unkown
|
page readonly
|
|
|
|
7FF5ECC2D000
|
unkown
|
page readonly
|
|
|
|
992D67F000
|
unkown
|
page read and write
|
|
|
|
60EC9FB000
|
unkown
|
page read and write
|
|
|
|
23DBEE55000
|
unkown
|
page read and write
|
|
|
|
1CAF4C00000
|
unkown
|
page read and write
|
|
|
|
7FF4F1AE4000
|
unkown
|
page readonly
|
|
|
|
7FF59310D000
|
unkown
|
page readonly
|
|
|
|
1FBE4902000
|
unkown
|
page read and write
|
|
|
|
7FF50EFBC000
|
unkown
|
page readonly
|
|
|
|
296F3400000
|
unkown
|
page readonly
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
3C714FB000
|
unkown
|
page read and write
|
|
|
|
289B565C000
|
unkown
|
page write copy
|
|
|
|
7FF5DE892000
|
unkown
|
page readonly
|
|
|
|
23BC6F13000
|
unkown
|
page read and write
|
|
|
|
60ECAFD000
|
unkown
|
page read and write
|
|
|
|
7FF5A9EBC000
|
unkown
|
page readonly
|
|
|
|
7FF5EC70B000
|
unkown
|
page readonly
|
|
|
|
7FF59EF77000
|
unkown
|
page readonly
|
|
|
|
60ECFFB000
|
unkown
|
page read and write
|
|
|
|
7FF5B336D000
|
unkown
|
page readonly
|
|
|
|
7FF5ECFB5000
|
unkown
|
page readonly
|
|
|
|
7FF5B333A000
|
unkown
|
page readonly
|
|
|
|
27E9A05B000
|
unkown
|
page read and write
|
|
|
|
2482BB5E000
|
unkown
|
page read and write
|
|
|
|
E0569FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F77000
|
unkown
|
page readonly
|
|
|
|
7FF50F00A000
|
unkown
|
page readonly
|
|
|
|
7FF5DE660000
|
unkown
|
page readonly
|
|
|
|
2482D470000
|
unkown
|
page read and write
|
|
|
|
2A18000
|
unkown
|
page readonly
|
|
|
|
2983000
|
unkown
|
page readonly
|
|
|
|
7FF5DE8DF000
|
unkown
|
page readonly
|
|
|
|
7FF59F1B7000
|
unkown
|
page readonly
|
|
|
|
7FF59F2FE000
|
unkown
|
page readonly
|
|
|
|
28EAA029000
|
unkown
|
page read and write
|
|
|
|
7FF593476000
|
unkown
|
page readonly
|
|
|
|
5E70000
|
heap private
|
page read and write
|
|
|
|
7FF5DE930000
|
unkown
|
page readonly
|
|
|
|
71D84FF000
|
unkown
|
page read and write
|
|
|
|
289B0670000
|
unkown
|
page readonly
|
|
|
|
99EFFA000
|
unkown
|
page read and write
|
|
|
|
226B5A60000
|
unkown
|
page readonly
|
|
|
|
7FF5ECBBE000
|
unkown
|
page readonly
|
|
|
|
7FF593339000
|
unkown
|
page readonly
|
|
|
|
60ECB7F000
|
unkown
|
page read and write
|
|
|
|
7FF5ECE95000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AAC000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF5E000
|
unkown
|
page readonly
|
|
|
|
7FF52F6A9000
|
unkown
|
page readonly
|
|
|
|
7FF50ED53000
|
unkown
|
page readonly
|
|
|
|
1E9BFC79000
|
unkown
|
page read and write
|
|
|
|
3C1357F000
|
unkown
|
page read and write
|
|
|
|
28EAA013000
|
unkown
|
page read and write
|
|
|
|
238D4E3D000
|
unkown
|
page read and write
|
|
|
|
16DB8C00000
|
unkown
|
page readonly
|
|
|
|
178BD650000
|
unkown
|
page readonly
|
|
|
|
27E9A06D000
|
unkown
|
page read and write
|
|
|
|
7FF5A5920000
|
unkown
|
page readonly
|
|
|
|
289B56E0000
|
unkown
|
page read and write
|
|
|
|
226B5400000
|
unkown
|
page read and write
|
|
|
|
7FF5ECBA0000
|
unkown
|
page readonly
|
|
|
|
7FF568F9E000
|
unkown
|
page readonly
|
|
|
|
289B58B3000
|
unkown
|
page read and write
|
|
|
|
7FF5ECED7000
|
unkown
|
page readonly
|
|
|
|
7FF59F218000
|
unkown
|
page readonly
|
|
|
|
7FF5ECFA6000
|
unkown
|
page readonly
|
|
|
|
7FF5ECEE1000
|
unkown
|
page readonly
|
|
|
|
7FF4F189A000
|
unkown
|
page readonly
|
|
|
|
178BF0F0000
|
unkown
|
page readonly
|
|
|
|
238D4E7E000
|
unkown
|
page read and write
|
|
|
|
238D4E19000
|
unkown
|
page read and write
|
|
|
|
289B0090000
|
unkown
|
page read and write
|
|
|
|
2482DC42000
|
unkown
|
page read and write
|
|
|
|
1D9A3A7E000
|
heap default
|
page read and write
|
|
|
|
27E9A000000
|
unkown
|
page read and write
|
|
|
|
238D4DA0000
|
unkown
|
page read and write
|
|
|
|
7FF5EC7AC000
|
unkown
|
page readonly
|
|
|
|
2832F810000
|
heap private
|
page read and write
|
|
|
|
178BD630000
|
unkown
|
page readonly
|
|
|
|
7FF52F804000
|
unkown
|
page readonly
|
|
|
|
226B54D0000
|
unkown
|
page read and write
|
|
|
|
27E9A200000
|
unkown
|
page readonly
|
|
|
|
27E9A05C000
|
unkown
|
page read and write
|
|
|
|
7FF5ECCAC000
|
unkown
|
page readonly
|
|
|
|
238D4E9F000
|
unkown
|
page read and write
|
|
|
|
7FF52F778000
|
unkown
|
page readonly
|
|
|
|
7FF52F410000
|
unkown
|
page readonly
|
|
|
|
7FF51B140000
|
unkown
|
page readonly
|
|
|
|
E056DFE000
|
unkown
|
page read and write
|
|
|
|
76A2A7B000
|
unkown
|
page read and write
|
|
|
|
5F3E000
|
unkown
|
page read and write
|
|
|
|
296F2920000
|
heap default
|
page read and write
|
|
|
|
20ADC029000
|
unkown
|
page read and write
|
|
|
|
2482DB00000
|
unkown
|
page read and write
|
|
|
|
7FF573A87000
|
unkown
|
page readonly
|
|
|
|
7FF57313D000
|
unkown
|
page readonly
|
|
|
|
99FB68B000
|
unkown
|
page read and write
|
|
|
|
2175A7C0000
|
unkown
|
page read and write
|
|
|
|
7FF59F2A4000
|
unkown
|
page readonly
|
|
|
|
238D4E52000
|
unkown
|
page read and write
|
|
|
|
992D27B000
|
unkown
|
page read and write
|
|
|
|
238D4E67000
|
unkown
|
page read and write
|
|
|
|
7FF50ED44000
|
unkown
|
page readonly
|
|
|
|
7FF52F7D6000
|
unkown
|
page readonly
|
|
|
|
7FF5A9ED0000
|
unkown
|
page readonly
|
|
|
|
20ADC03D000
|
unkown
|
page read and write
|
|
|
|
7FF5A9FD9000
|
unkown
|
page readonly
|
|
|
|
289B56A0000
|
unkown
|
page read and write
|
|
|
|
2482BB28000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F3D000
|
unkown
|
page readonly
|
|
|
|
2832FB02000
|
unkown
|
page read and write
|
|
|
|
7FF5D874C000
|
unkown
|
page readonly
|
|
|
|
771EEFF000
|
unkown
|
page read and write
|
|
|
|
7FF567D79000
|
unkown
|
page readonly
|
|
|
|
7FF52F55A000
|
unkown
|
page readonly
|
|
|
|
1E9BFC44000
|
unkown
|
page read and write
|
|
|
|
7FF5AFD09000
|
unkown
|
page readonly
|
|
|
|
3C1397F000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown
|
page readonly
|
|
|
|
5DC0000
|
unkown
|
page readonly
|
|
|
|
27E99F60000
|
unkown
|
page readonly
|
|
|
|
7FF5DE999000
|
unkown
|
page readonly
|
|
|
|
238D4E7F000
|
unkown
|
page read and write
|
|
|
|
7FF592C4B000
|
unkown
|
page readonly
|
|
|
|
2482BC00000
|
unkown
|
page readonly
|
|
|
|
28EAA06F000
|
unkown
|
page read and write
|
|
|
|
7FF5A5B26000
|
unkown
|
page readonly
|
|
|
|
5EBE000
|
unkown
|
page read and write
|
|
|
|
226B5442000
|
unkown
|
page read and write
|
|
|
|
56DFE7D000
|
unkown
|
page read and write
|
|
|
|
2482E000000
|
unkown
|
page read and write
|
|
|
|
7FF575846000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A96000
|
unkown
|
page readonly
|
|
|
|
2832FA00000
|
unkown
|
page read and write
|
|
|
|
7FF5A5B09000
|
unkown
|
page readonly
|
|
|
|
296F2A29000
|
unkown
|
page read and write
|
|
|
|
2482DB79000
|
unkown
|
page read and write
|
|
|
|
F8C7D79000
|
unkown
|
page read and write
|
|
|
|
E0568FB000
|
unkown
|
page read and write
|
|
|
|
7FF5B33B9000
|
unkown
|
page readonly
|
|
|
|
23BC6E13000
|
unkown
|
page read and write
|
|
|
|
7FF4F1957000
|
unkown
|
page readonly
|
|
|
|
61C0000
|
unkown
|
page read and write
|
|
|
|
7FF51B18F000
|
unkown
|
page readonly
|
|
|
|
7FF59F28C000
|
unkown
|
page readonly
|
|
|
|
1FBE48E2000
|
unkown
|
page read and write
|
|
|
|
7FF5AFC76000
|
unkown
|
page readonly
|
|
|
|
7FF5ECB65000
|
unkown
|
page readonly
|
|
|
|
6FA000
|
unkown
|
page read and write
|
|
|
|
7FF5B32E7000
|
unkown
|
page readonly
|
|
|
|
7FF5DE937000
|
unkown
|
page readonly
|
|
|
|
7FF59F259000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AC0000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B3C000
|
unkown
|
page readonly
|
|
|
|
289B56E0000
|
unkown
|
page read and write
|
|
|
|
CBE8CFE000
|
unkown
|
page read and write
|
|
|
|
1FBE6820000
|
unkown
|
page readonly
|
|
|
|
2482E210000
|
unkown
|
page read and write
|
|
|
|
1FBE4670000
|
unkown
|
page readonly
|
|
|
|
2482BAF2000
|
unkown
|
page read and write
|
|
|
|
1E9BFC13000
|
unkown
|
page read and write
|
|
|
|
1E9BFC3B000
|
unkown
|
page read and write
|
|
|
|
7FF5758D7000
|
unkown
|
page readonly
|
|
|
|
7FF59F26D000
|
unkown
|
page readonly
|
|
|
|
CF70F7F000
|
unkown
|
page read and write
|
|
|
|
7FF52F561000
|
unkown
|
page readonly
|
|
|
|
B50000
|
unkown
|
page readonly
|
|
|
|
7FF569728000
|
unkown
|
page readonly
|
|
|
|
7FF52F79E000
|
unkown
|
page readonly
|
|
|
|
27E9A072000
|
unkown
|
page read and write
|
|
|
|
7FF5A9FD1000
|
unkown
|
page readonly
|
|
|
|
1CAF4C46000
|
unkown
|
page read and write
|
|
|
|
7FF5ECFC0000
|
unkown
|
page readonly
|
|
|
|
2DFA000
|
unkown
|
page read and write
|
|
|
|
7FF5690A6000
|
unkown
|
page readonly
|
|
|
|
901F4FE000
|
unkown
|
page read and write
|
|
|
|
1CAF4B60000
|
unkown
|
page read and write
|
|
|
|
7FF5ECEA7000
|
unkown
|
page readonly
|
|
|
|
1E9BFC7A000
|
unkown
|
page read and write
|
|
|
|
7FF569786000
|
unkown
|
page readonly
|
|
|
|
7FF5ED020000
|
unkown
|
page readonly
|
|
|
|
7FF573A6C000
|
unkown
|
page readonly
|
|
|
|
7FF5DE906000
|
unkown
|
page readonly
|
|
|
|
7FF5B334C000
|
unkown
|
page readonly
|
|
|
|
289B05A0000
|
unkown
|
page readonly
|
|
|
|
1E9BFED0000
|
unkown
|
page readonly
|
|
|
|
2482DB79000
|
unkown
|
page read and write
|
|
|
|
293A000
|
unkown
|
page readonly
|
|
|
|
7FF5DE607000
|
unkown
|
page readonly
|
|
|
|
60ED07B000
|
unkown
|
page read and write
|
|
|
|
1FBE4851000
|
unkown
|
page read and write
|
|
|
|
289B57E0000
|
unkown
|
page readonly
|
|
|
|
7FF50EE3A000
|
unkown
|
page readonly
|
|
|
|
7FF5DE86C000
|
unkown
|
page readonly
|
|
|
|
7FF5ED029000
|
unkown
|
page readonly
|
|
|
|
7FF51B241000
|
unkown
|
page readonly
|
|
|
|
2689000
|
unkown
|
page readonly
|
|
|
|
289B0056000
|
unkown
|
page read and write
|
|
|
|
289B58B3000
|
unkown
|
page read and write
|
|
|
|
20ADC076000
|
unkown
|
page read and write
|
|
|
|
2482DBF4000
|
unkown
|
page read and write
|
|
|
|
2482D8B0000
|
unkown
|
page readonly
|
|
|
|
2DFD000
|
unkown
|
page read and write
|
|
|
|
7FF52F611000
|
unkown
|
page readonly
|
|
|
|
1FBE6747000
|
unkown
|
page read and write
|
|
|
|
7FF50F0E1000
|
unkown
|
page readonly
|
|
|
|
289B1060000
|
unkown
|
page readonly
|
|
|
|
23DBECB0000
|
unkown
|
page readonly
|
|
|
|
7FF5B31EF000
|
unkown
|
page readonly
|
|
|
|
2482BA13000
|
unkown
|
page read and write
|
|
|
|
2970000
|
unkown
|
page readonly
|
|
|
|
28EABAA0000
|
unkown
|
page readonly
|
|
|
|
7FF51A897000
|
unkown
|
page readonly
|
|
|
|
238D5590000
|
unkown
|
page readonly
|
|
|
|
20ADC067000
|
unkown
|
page read and write
|
|
|
|
7FF5A5B54000
|
unkown
|
page readonly
|
|
|
|
F8C7C7F000
|
unkown
|
page read and write
|
|
|
|
238D5CD0000
|
unkown
|
page read and write
|
|
|
|
238D4E9D000
|
unkown
|
page read and write
|
|
|
|
27E9A100000
|
unkown
|
page read and write
|
|
|
|
16DB9080000
|
unkown
|
page read and write
|
|
|
|
238D4FE5000
|
heap private
|
page read and write
|
|
|
|
293A000
|
unkown
|
page readonly
|
|
|
|
296F2A00000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AC8000
|
unkown
|
page readonly
|
|
|
|
7FF5DE149000
|
unkown
|
page readonly
|
|
|
|
27E9A013000
|
unkown
|
page read and write
|
|
|
|
7FF4F1AB6000
|
unkown
|
page readonly
|
|
|
|
7FF52F69E000
|
unkown
|
page readonly
|
|
|
|
27E9A052000
|
unkown
|
page read and write
|
|
|
|
7FF5B33D1000
|
unkown
|
page readonly
|
|
|
|
992CDF7000
|
unkown
|
page read and write
|
|
|
|
7FF5B33CD000
|
unkown
|
page readonly
|
|
|
|
23DBEE2A000
|
unkown
|
page read and write
|
|
|
|
7FF5A59A8000
|
unkown
|
page readonly
|
|
|
|
2482E110000
|
unkown
|
page read and write
|
|
|
|
2482F110000
|
unkown
|
page read and write
|
|
|
|
289B584A000
|
unkown
|
page read and write
|
|
|
|
7FF5DE6BB000
|
unkown
|
page readonly
|
|
|
|
1CAF4C88000
|
unkown
|
page read and write
|
|
|
|
2D78000
|
unkown
|
page read and write
|
|
|
|
2482D8C0000
|
heap private
|
page read and write
|
|
|
|
CBE8E7F000
|
unkown
|
page read and write
|
|
|
|
27E99F40000
|
heap default
|
page read and write
|
|
|
|
7FF575931000
|
unkown
|
page readonly
|
|
|
|
992D2FF000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown
|
page readonly
|
|
|
|
7FF59F03C000
|
unkown
|
page readonly
|
|
|
|
2DF5000
|
unkown
|
page read and write
|
|
|
|
7FF5AFB1D000
|
unkown
|
page readonly
|
|
|
|
7FF59F1E3000
|
unkown
|
page readonly
|
|
|
|
7FF5ECDE8000
|
unkown
|
page readonly
|
|
|
|
2D84000
|
unkown
|
page read and write
|
|
|
|
289B56E0000
|
unkown
|
page read and write
|
|
|
|
7FF52F762000
|
unkown
|
page readonly
|
|
|
|
7FF59F070000
|
unkown
|
page readonly
|
|
|
|
178BF38F000
|
heap private
|
page read and write
|
|
|
|
7FF593460000
|
unkown
|
page readonly
|
|
|
|
23BC6E68000
|
unkown
|
page read and write
|
|
|
|
76A2BF9000
|
unkown
|
page read and write
|
|
|
|
2482BB5E000
|
unkown
|
page read and write
|
|
|
|
7FF5697A5000
|
unkown
|
page readonly
|
|
|
|
7FF52EEB7000
|
unkown
|
page readonly
|
|
|
|
2E07000
|
unkown
|
page read and write
|
|
|
|
7FF559F2C000
|
unkown
|
page readonly
|
|
|
|
7FF52F5B6000
|
unkown
|
page readonly
|
|
|
|
BFE000
|
unkown
|
page read and write
|
|
|
|
2482BB29000
|
unkown
|
page read and write
|
|
|
|
1E9BFC4A000
|
unkown
|
page read and write
|
|
|
|
7FF59F23E000
|
unkown
|
page readonly
|
|
|
|
7FF5DE877000
|
unkown
|
page readonly
|
|
|
|
7FF5934F5000
|
unkown
|
page readonly
|
|
|
|
2482DBB9000
|
unkown
|
page read and write
|
|
|
|
7FF5758A6000
|
unkown
|
page readonly
|
|
|
|
1E9BFC5A000
|
unkown
|
page read and write
|
|
|
|
2D71000
|
unkown
|
page read and write
|
|
|
|
27E99EE0000
|
heap private
|
page read and write
|
|
|
|
7FF5934DC000
|
unkown
|
page readonly
|
|
|
|
7FF5DE844000
|
unkown
|
page readonly
|
|
|
|
7FF5A9D3E000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B2C000
|
unkown
|
page readonly
|
|
|
|
289B5460000
|
unkown
|
page read and write
|
|
|
|
29F6000
|
unkown
|
page readonly
|
|
|
|
2482D920000
|
unkown
|
page read and write
|
|
|
|
7FF52F772000
|
unkown
|
page readonly
|
|
|
|
293D000
|
unkown
|
page readonly
|
|
|
|
7FF52F869000
|
unkown
|
page readonly
|
|
|
|
7FF4F1B41000
|
unkown
|
page readonly
|
|
|
|
7FF5DE700000
|
unkown
|
page readonly
|
|
|
|
7FF52F616000
|
unkown
|
page readonly
|
|
|
|
7FF5B3407000
|
unkown
|
page readonly
|
|
|
|
76A269C000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A52000
|
unkown
|
page readonly
|
|
|
|
771F17E000
|
unkown
|
page read and write
|
|
|
|
71D86FD000
|
unkown
|
page read and write
|
|
|
|
7FF5D8719000
|
unkown
|
page readonly
|
|
|
|
238D4EBB000
|
unkown
|
page read and write
|
|
|
|
289B57C0000
|
unkown
|
page readonly
|
|
|
|
28EAA000000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A4A000
|
unkown
|
page readonly
|
|
|
|
7FF51B01A000
|
unkown
|
page readonly
|
|
|
|
2482BACB000
|
unkown
|
page read and write
|
|
|
|
289B0815000
|
unkown
|
page read and write
|
|
|
|
2482DBBE000
|
unkown
|
page read and write
|
|
|
|
7FF59F175000
|
unkown
|
page readonly
|
|
|
|
7FF5C89D7000
|
unkown
|
page readonly
|
|
|
|
23DBEE4E000
|
unkown
|
page read and write
|
|
|
|
7FF52F423000
|
unkown
|
page readonly
|
|
|
|
2803000
|
unkown
|
page readonly
|
|
|
|
7FF5DE5F4000
|
unkown
|
page readonly
|
|
|
|
7FF573A1E000
|
unkown
|
page readonly
|
|
|
|
7FF59F17C000
|
unkown
|
page readonly
|
|
|
|
178BD645000
|
heap private
|
page read and write
|
|
|
|
7FF5B33E6000
|
unkown
|
page readonly
|
|
|
|
2941000
|
unkown
|
page readonly
|
|
|
|
23DBEF00000
|
unkown
|
page read and write
|
|
|
|
16DB9400000
|
unkown
|
page readonly
|
|
|
|
291F000
|
unkown
|
page readonly
|
|
|
|
2D75000
|
unkown
|
page read and write
|
|
|
|
23DBEE23000
|
unkown
|
page read and write
|
|
|
|
7FF51B1C6000
|
unkown
|
page readonly
|
|
|
|
1FBE4813000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A6A000
|
unkown
|
page readonly
|
|
|
|
CF70CFA000
|
unkown
|
page read and write
|
|
|
|
99FBA7E000
|
unkown
|
page read and write
|
|
|
|
2482DE00000
|
unkown
|
page readonly
|
|
|
|
7FF567D17000
|
unkown
|
page readonly
|
|
|
|
7FF50EF9A000
|
unkown
|
page readonly
|
|
|
|
3C715FB000
|
unkown
|
page read and write
|
|
|
|
7FF5ECF32000
|
unkown
|
page readonly
|
|
|
|
296F2B08000
|
unkown
|
page read and write
|
|
|
|
23BC88A0000
|
unkown
|
page readonly
|
|
|
|
7FF59F309000
|
unkown
|
page readonly
|
|
|
|
27E9A113000
|
unkown
|
page read and write
|
|
|
|
7FF5ECDAF000
|
unkown
|
page readonly
|
|
|
|
7FF5930A5000
|
unkown
|
page readonly
|
|
|
|
3C139FF000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
7FF5A5AFF000
|
unkown
|
page readonly
|
|
|
|
2A18000
|
unkown
|
page readonly
|
|
|
|
2482DB61000
|
unkown
|
page read and write
|
|
|
|
7FF569726000
|
unkown
|
page readonly
|
|
|
|
7FF567D22000
|
unkown
|
page readonly
|
|
|
|
7FF52F7A5000
|
unkown
|
page readonly
|
|
|
|
2D7A000
|
unkown
|
page read and write
|
|
|
|
1FBE4660000
|
heap default
|
page read and write
|
|
|
|
226B5390000
|
unkown
|
page readonly
|
|
|
|
289B582D000
|
unkown
|
page read and write
|
|
|
|
293D000
|
unkown
|
page readonly
|
|
|
|
71D8BFF000
|
unkown
|
page read and write
|
|
|
|
1E9BFC7D000
|
unkown
|
page read and write
|
|
|
|
178BD5B0000
|
unkown
|
page readonly
|
|
|
|
2482DB5E000
|
unkown
|
page read and write
|
|
|
|
9EB01FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A59C7000
|
unkown
|
page readonly
|
|
|
|
7FF5739E0000
|
unkown
|
page readonly
|
|
|
|
CF70B7B000
|
unkown
|
page read and write
|
|
|
|
7FF569643000
|
unkown
|
page readonly
|
|
|
|
7FF59F301000
|
unkown
|
page readonly
|
|
|
|
7FF5B3469000
|
unkown
|
page readonly
|
|
|
|
7FF5A535A000
|
unkown
|
page readonly
|
|
|
|
7FF5A9F4C000
|
unkown
|
page readonly
|
|
|
|
3C70FAB000
|
unkown
|
page read and write
|
|
|
|
2DFD000
|
unkown
|
page read and write
|
|
|
|
289B1030000
|
unkown
|
page readonly
|
|
|
|
178BD610000
|
unkown
|
page read and write
|
|
|
|
9EAFD5E000
|
unkown
|
page read and write
|
|
|
|
2482BA86000
|
unkown
|
page read and write
|
|
|
|
7FF4F1ABC000
|
unkown
|
page readonly
|
|
|
|
1D9A3A50000
|
unkown
|
page read and write
|
|
|
|
7FF593225000
|
unkown
|
page readonly
|
|
|
|
771F0FD000
|
unkown
|
page read and write
|
|
|
|
7FF5934CD000
|
unkown
|
page readonly
|
|
|
|
7FF5B3469000
|
unkown
|
page readonly
|
|
|
|
1CAF4D18000
|
unkown
|
page read and write
|
|
|
|
2482DB35000
|
unkown
|
page read and write
|
|
|
|
289B583D000
|
unkown
|
page read and write
|
|
|
|
23BC7000000
|
unkown
|
page readonly
|
|
|
|
27E9A802000
|
unkown
|
page read and write
|
|
|
|
1FBE4870000
|
unkown
|
page read and write
|
|
|
|
28EAA06F000
|
unkown
|
page read and write
|
|
|
|
71D87FF000
|
unkown
|
page read and write
|
|
|
|
7FF52F807000
|
unkown
|
page readonly
|
|
|
|
16DB8A5A000
|
unkown
|
page read and write
|
|
|
|
7FF59EFBE000
|
unkown
|
page readonly
|
|
|
|
1CAF4D13000
|
unkown
|
page read and write
|
|
|
|
2482E110000
|
unkown
|
page read and write
|
|
|
|
16DB8E00000
|
unkown
|
page readonly
|
|
|
|
28EAA055000
|
unkown
|
page read and write
|
|
|
|
27E99F70000
|
unkown
|
page read and write
|
|
|
|
E056C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5AFD09000
|
unkown
|
page readonly
|
|
|
|
28EAA048000
|
unkown
|
page read and write
|
|
|
|
27E9A102000
|
unkown
|
page read and write
|
|
|
|
7FF4F19F7000
|
unkown
|
page readonly
|
|
|
|
7FF5695B3000
|
unkown
|
page readonly
|
|
|
|
1E9BFC34000
|
unkown
|
page read and write
|
|
|
|
60EC7F9000
|
unkown
|
page read and write
|
|
|
|
178BD6B6000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F29000
|
unkown
|
page readonly
|
|
|
|
238D5C70000
|
unkown
|
page read and write
|
|
|
|
289B008C000
|
unkown
|
page read and write
|
|
|
|
7FF5ECDF9000
|
unkown
|
page readonly
|
|
|
|
289B1070000
|
unkown
|
page readonly
|
|
|
|
289B55A1000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A5E000
|
unkown
|
page readonly
|
|
|
|
7FF4F1AC6000
|
unkown
|
page readonly
|
|
|
|
EFDB4FE000
|
unkown
|
page read and write
|
|
|
|
B60000
|
unkown
|
page read and write
|
|
|
|
289B56B0000
|
unkown
|
page read and write
|
|
|
|
178BD640000
|
heap private
|
page read and write
|
|
|
|
1CAF4B50000
|
unkown
|
page readonly
|
|
|
|
238D4DD0000
|
heap default
|
page read and write
|
|
|
|
7FF575743000
|
unkown
|
page readonly
|
|
|
|
7FF4F17B7000
|
unkown
|
page readonly
|
|
|
|
226B5513000
|
unkown
|
page read and write
|
|
|
|
7FF5ECF91000
|
unkown
|
page readonly
|
|
|
|
2DF1000
|
unkown
|
page read and write
|
|
|
|
2967000
|
unkown
|
page readonly
|
|
|
|
7FF51B142000
|
unkown
|
page readonly
|
|
|
|
1FBE4A00000
|
unkown
|
page readonly
|
|
|
|
3C717FF000
|
unkown
|
page read and write
|
|
|
|
7FF51B16A000
|
unkown
|
page readonly
|
|
|
|
7FF5B3362000
|
unkown
|
page readonly
|
|
|
|
289B5650000
|
unkown
|
page readonly
|
|
|
|
A00000
|
unkown
|
page readonly
|
|
|
|
D9D000
|
unkown
|
page readonly
|
|
|
|
7FF5DE145000
|
unkown
|
page readonly
|
|
|
|
7D0000
|
unkown
|
page readonly
|
|
|
|
1E9BFBB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C8793000
|
unkown
|
page readonly
|
|
|
|
226B5350000
|
unkown
|
page readonly
|
|
|
|
289B5730000
|
unkown
|
page readonly
|
|
|
|
F8C7CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5C8890000
|
unkown
|
page readonly
|
|
|
|
2482E013000
|
unkown
|
page read and write
|
|
|
|
27F7000
|
unkown
|
page readonly
|
|
|
|
7FF575832000
|
unkown
|
page readonly
|
|
|
|
E056FFE000
|
unkown
|
page read and write
|
|
|
|
289B07F3000
|
unkown
|
page read and write
|
|
|
|
7FF5AFADA000
|
unkown
|
page readonly
|
|
|
|
296F2A13000
|
unkown
|
page read and write
|
|
|
|
23DBEE6F000
|
unkown
|
page read and write
|
|
|
|
7FF5AFCFE000
|
unkown
|
page readonly
|
|
|
|
289B58AC000
|
unkown
|
page read and write
|
|
|
|
2482DBF5000
|
unkown
|
page read and write
|
|
|
|
7FF5C8784000
|
unkown
|
page readonly
|
|
|
|
226B53A0000
|
unkown
|
page write copy
|
|
|
|
1FBE47E0000
|
unkown
|
page readonly
|
|
|
|
226B54C9000
|
unkown
|
page read and write
|
|
|
|
7FF52F434000
|
unkown
|
page readonly
|
|
|
|
7FF5ECCDE000
|
unkown
|
page readonly
|
|
|
|
7FF5B303F000
|
unkown
|
page readonly
|
|
|
|
2CA0000
|
heap private
|
page read and write
|
|
|
|
289B0013000
|
unkown
|
page read and write
|
|
|
|
29FB000
|
unkown
|
page readonly
|
|
|
|
7FF5DE916000
|
unkown
|
page readonly
|
|
|
|
7FF5AFC2A000
|
unkown
|
page readonly
|
|
|
|
238D4ED0000
|
unkown
|
page readonly
|
|
|
|
2832FA3F000
|
unkown
|
page read and write
|
|
|
|
23DBEE50000
|
unkown
|
page read and write
|
|
|
|
7FF5ECEEB000
|
unkown
|
page readonly
|
|
|
|
7FF59F08F000
|
unkown
|
page readonly
|
|
|
|
289B5A00000
|
unkown
|
page readonly
|
|
|
|
7FF50F087000
|
unkown
|
page readonly
|
|
|
|
7FF5EC865000
|
unkown
|
page readonly
|
|
|
|
7FF4F1A58000
|
unkown
|
page readonly
|
|
|
|
7FF5ECB61000
|
unkown
|
page readonly
|
|
|
|
1FBE62A0000
|
unkown
|
page readonly
|
|
|
|
7FF5A9CA0000
|
unkown
|
page readonly
|
|
|
|
1CAF4AD0000
|
heap private
|
page read and write
|
|
|
|
2845000
|
unkown
|
page readonly
|
|
|
|
7FF51B156000
|
unkown
|
page readonly
|
|
|
|
27E9A02E000
|
unkown
|
page read and write
|
|
|
|
238D4EBB000
|
unkown
|
page read and write
|
|
|
|
1CAF4C13000
|
unkown
|
page read and write
|
|
|
|
AC0000
|
heap default
|
page read and write
|
|
|
|
296F2930000
|
unkown
|
page readonly
|
|
|
|
289B008A000
|
unkown
|
page read and write
|
|
|
|
1CAF4BF0000
|
unkown
|
page read and write
|
|
|
|
7FF4F1B49000
|
unkown
|
page readonly
|
|
|
|
7FF5A9630000
|
unkown
|
page readonly
|
|
|
|
7FF5A9F74000
|
unkown
|
page readonly
|
|
|
|
7FF51B0BC000
|
unkown
|
page readonly
|
|
|
|
2DFD000
|
unkown
|
page read and write
|
|
|
|
21759000000
|
unkown
|
page readonly
|
|
|
|
7FF5A5A67000
|
unkown
|
page readonly
|
|
|
|
7FF5B3358000
|
unkown
|
page readonly
|
|
|
|
7FF5C8933000
|
unkown
|
page readonly
|
|
|
|
1FBE48FC000
|
unkown
|
page read and write
|
|
|
|
7FF567CF6000
|
unkown
|
page readonly
|
|
|
|
238D5660000
|
unkown
|
page readonly
|
|
|
|
B70000
|
heap default
|
page read and write
|
|
|
|
1FBE6830000
|
unkown
|
page read and write
|
|
|
|
1E9BFC00000
|
unkown
|
page read and write
|
|
|
|
28EA9F40000
|
unkown
|
page readonly
|
|
|
|
238D4E9F000
|
unkown
|
page read and write
|
|
|
|
289B58AF000
|
unkown
|
page read and write
|
|
|
|
1E9BFBC0000
|
unkown
|
page readonly
|
|
|
|
2918000
|
unkown
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7FF59F1B4000
|
unkown
|
page readonly
|
|
|
|
2482BB9D000
|
unkown
|
page read and write
|
|
|
|
71D82FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DE8BA000
|
unkown
|
page readonly
|
|
|
|
7FF59F216000
|
unkown
|
page readonly
|
|
|
|
289B07F0000
|
unkown
|
page read and write
|
|
|
|
7FF5934B9000
|
unkown
|
page readonly
|
|
|
|
7FF5750AC000
|
unkown
|
page readonly
|
|
|
|
2D50000
|
heap default
|
page read and write
|
|
|
|
7FF5DE6D8000
|
unkown
|
page readonly
|
|
|
|
7FF52F5A2000
|
unkown
|
page readonly
|
|
|
|
56E007D000
|
unkown
|
page read and write
|
|
|
|
7FF5ECF03000
|
unkown
|
page readonly
|
|
|
|
7FF5A5B47000
|
unkown
|
page readonly
|
|
|
|
7FF5DE8A6000
|
unkown
|
page readonly
|
|
|
|
7FF5934D6000
|
unkown
|
page readonly
|
|
|
|
7FF50F066000
|
unkown
|
page readonly
|
|
|
|
1E9BFC02000
|
unkown
|
page read and write
|
|
|
|
2482F110000
|
unkown
|
page read and write
|
|
|
|
7FF51B05D000
|
unkown
|
page readonly
|
|
|
|
2482DB66000
|
unkown
|
page read and write
|
|
|
|
7FF59F1A1000
|
unkown
|
page readonly
|
|
|
|
178BD660000
|
heap default
|
page read and write
|
|
|
|
178BF190000
|
heap private
|
page read and write
|
|
|
|
A90000
|
unkown
|
page readonly
|
|
|
|
7FF51B1B6000
|
unkown
|
page readonly
|
|
|
|
289B0102000
|
unkown
|
page read and write
|
|
|
|
238D4E7D000
|
unkown
|
page read and write
|
|
|
|
1FBE4855000
|
unkown
|
page read and write
|
|
|
|
1E9BFC2D000
|
unkown
|
page read and write
|
|
|
|
23BC6E55000
|
unkown
|
page read and write
|
|
|
|
2482D920000
|
unkown
|
page read and write
|
|
|
|
2482DBB9000
|
unkown
|
page read and write
|
|
|
|
289B0024000
|
unkown
|
page read and write
|
|
|
|
289B0200000
|
unkown
|
page readonly
|
|
|
|
289B558E000
|
unkown
|
page read and write
|
|
|
|
7FF52F6A0000
|
unkown
|
page readonly
|
|
|
|
7FF50E8F5000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A79000
|
unkown
|
page readonly
|
|
|
|
7FF4F1AAD000
|
unkown
|
page readonly
|
|
|
|
2D7D000
|
unkown
|
page read and write
|
|
|
|
289B5800000
|
unkown
|
page read and write
|
|
|
|
2482D950000
|
unkown
|
page readonly
|
|
|
|
7FF5A9C95000
|
unkown
|
page readonly
|
|
|
|
7FF5DE71F000
|
unkown
|
page readonly
|
|
|
|
178BD66B000
|
heap default
|
page read and write
|
|
|
|
2482DBFC000
|
unkown
|
page read and write
|
|
|
|
60EC97A000
|
unkown
|
page read and write
|
|
|
|
253A8B50000
|
unkown
|
page readonly
|
|
|
|
5EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5A9F5C000
|
unkown
|
page readonly
|
|
|
|
7FF5934A5000
|
unkown
|
page readonly
|
|
|
|
7FF568EEC000
|
unkown
|
page readonly
|
|
|
|
CF70E7D000
|
unkown
|
page read and write
|
|
|
|
7FF4F1938000
|
unkown
|
page readonly
|
|
|
|
238D5A10000
|
unkown
|
page read and write
|
|
|
|
7FF57565A000
|
unkown
|
page readonly
|
|
|
|
7FF592DA5000
|
unkown
|
page readonly
|
|
|
|
1D9A3A30000
|
unkown
|
page read and write
|
|
|
|
2972000
|
unkown
|
page readonly
|
|
|
|
9EAFCDB000
|
unkown
|
page read and write
|
|
|
|
7FF4F1B3E000
|
unkown
|
page readonly
|
|
|
|
29A5000
|
unkown
|
page readonly
|
|
|
|
1FBE4829000
|
unkown
|
page read and write
|
|
|
|
7FF50F080000
|
unkown
|
page readonly
|
|
|
|
992D57C000
|
unkown
|
page read and write
|
|
|
|
7FF567C88000
|
unkown
|
page readonly
|
|
|
|
7FF5DE84A000
|
unkown
|
page readonly
|
|
|
|
2A04000
|
unkown
|
page readonly
|
|
|
|
289B56D0000
|
unkown
|
page read and write
|
|
|
|
289B0113000
|
unkown
|
page read and write
|
|
|
|
238D4E29000
|
unkown
|
page read and write
|
|
|
|
238D4E67000
|
unkown
|
page read and write
|
|
|
|
7FF5DE8CE000
|
unkown
|
page readonly
|
|
|
|
7FF59F276000
|
unkown
|
page readonly
|
|
|
|
916000
|
unkown
|
page read and write
|
|
|
|
7FF5ECD68000
|
unkown
|
page readonly
|
|
|
|
1FBE48DE000
|
unkown
|
page read and write
|
|
|
|
7FF567D6E000
|
unkown
|
page readonly
|
|
|
|
1FBE6870000
|
unkown
|
page readonly
|
|
|
|
7FF567712000
|
unkown
|
page readonly
|
|
|
|
7FF59F2A0000
|
unkown
|
page readonly
|
|
|
|
7FF5ECF8D000
|
unkown
|
page readonly
|
|
|
|
1CAF6670000
|
unkown
|
page read and write
|
|
|
|
296F2A65000
|
unkown
|
page read and write
|
|
|
|
7FF52F85E000
|
unkown
|
page readonly
|
|
|
|
1FBE4918000
|
unkown
|
page read and write
|
|
|
|
23DBED80000
|
unkown
|
page readonly
|
|
|
|
253A8ED0000
|
unkown
|
page readonly
|
|
|
|
1FBE6602000
|
unkown
|
page read and write
|
|
|
|
1FBE48F7000
|
unkown
|
page read and write
|
|
|
|
21758E3F000
|
unkown
|
page read and write
|
|
|
|
7FF593462000
|
unkown
|
page readonly
|
|
|
|
2995000
|
unkown
|
page readonly
|
|
|
|
1FBE6830000
|
unkown
|
page read and write
|
|
|
|
23BC6F02000
|
unkown
|
page read and write
|
|
|
|
289AFF30000
|
unkown
|
page readonly
|
|
|
|
1E9BFC76000
|
unkown
|
page read and write
|
|
|
|
294B000
|
unkown
|
page readonly
|
|
|
|
7FF5758C5000
|
unkown
|
page readonly
|
|
|
|
7FF5756BF000
|
unkown
|
page readonly
|
|
|
|
16DB8930000
|
unkown
|
page readonly
|
|
|
|
178BF530000
|
heap private
|
page read and write
|
|
|
|
7FF5DE86A000
|
unkown
|
page readonly
|
|
|
|
7FF5A9B13000
|
unkown
|
page readonly
|
|
|
|
253A8AE0000
|
heap private
|
page read and write
|
|
|
|
7FF4F1805000
|
unkown
|
page readonly
|
|
|
|
7FF51B1E4000
|
unkown
|
page readonly
|
|
|
|
7FF5A5814000
|
unkown
|
page readonly
|
|
|
|
71D85FE000
|
unkown
|
page read and write
|
|
|
|
7FF51AFCF000
|
unkown
|
page readonly
|
|
|
|
CF70DFF000
|
unkown
|
page read and write
|
|
|
|
8F9000
|
unkown
|
page read and write
|
|
|
|
23BC6DD0000
|
unkown
|
page readonly
|
|
|
|
289B56E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3208000
|
unkown
|
page readonly
|
|
|
|
7FF52F5B8000
|
unkown
|
page readonly
|
|
|
|
28EAA102000
|
unkown
|
page read and write
|
|
|
|
2946000
|
unkown
|
page readonly
|
|
|
|
238D5A20000
|
unkown
|
page read and write
|
|
|
|
1CAF66F0000
|
unkown
|
page readonly
|
|
|
|
7FF5A5ADA000
|
unkown
|
page readonly
|
|
|
|
2482DC82000
|
unkown
|
page read and write
|
|
|
|
290E000
|
unkown
|
page readonly
|
|
|
|
7FF51B1E7000
|
unkown
|
page readonly
|
|
|
|
226B5D12000
|
unkown
|
page read and write
|
|
|
|
7FF59F1EC000
|
unkown
|
page readonly
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
7FF5B33F5000
|
unkown
|
page readonly
|
|
|
|
23BC6E68000
|
unkown
|
page read and write
|
|
|
|
5F7F000
|
unkown
|
page read and write
|
|
|
|
296F2B13000
|
unkown
|
page read and write
|
|
|
|
7FF4F1A5A000
|
unkown
|
page readonly
|
|
There are 1783 hidden memdumps, click here to show them.