Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
46747509_by_Libranalysis.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: van-van, Last Saved
By: vi-vi, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date:
Wed May 12 08:24:11 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\20723BDA-9E27-4683-A323-0D0F8F1CA287
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\35820000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\46747509_by_Libranalysis.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:26:59
2020, mtime=Wed May 12 18:44:44 2021, atime=Wed May 12 18:44:44 2021, length=177152, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 18:52:18 2019, mtime=Wed May 12 18:44:44 2021, atime=Wed May 12 18:44:44 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\26820000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 59863 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\99DE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabE3CB.tmp
|
Microsoft Cabinet archive data, 59863 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarE3CC.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\6ADE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
There are 5 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\ritofm.cvm,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\ritofm.cvm1,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\ritofm.cvm,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\ritofm.cvm1,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
signifysystem.com
|
192.185.39.58
|
|
|
|
fcventasyservicios.cl
|
192.185.32.232
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.39.58
|
signifysystem.com
|
United States
|
|
|
|
192.185.32.232
|
fcventasyservicios.cl
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
#`<
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
$`<
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27A19
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
28052
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
282B4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2840C
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
285A2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
28767
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
`x<
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3D6BB
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3DD91
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
|78
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED3F2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED7AA
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED874
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED901
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED9FA
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDB61
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
m#8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
113524
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1143C4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 174 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
42393FB000
|
unkown
|
page read and write
|
|
|
|
2362615F000
|
unkown
|
page read and write
|
|
|
|
20C0224D000
|
unkown
|
page read and write
|
|
|
|
7FF5DB93B000
|
unkown
|
page readonly
|
|
|
|
7FF5DB954000
|
unkown
|
page readonly
|
|
|
|
7FF5DB78A000
|
unkown
|
page readonly
|
|
|
|
25F8000
|
unkown
|
page readonly
|
|
|
|
42395FE000
|
unkown
|
page read and write
|
|
|
|
19218930000
|
unkown
|
page read and write
|
|
|
|
26945FE000
|
unkown
|
page read and write
|
|
|
|
EA07E75000
|
unkown
|
page read and write
|
|
|
|
7FF526C97000
|
unkown
|
page readonly
|
|
|
|
7FF5DB722000
|
unkown
|
page readonly
|
|
|
|
2232A66C000
|
unkown
|
page read and write
|
|
|
|
2232A668000
|
unkown
|
page read and write
|
|
|
|
7FF56FE85000
|
unkown
|
page readonly
|
|
|
|
7FF58CCC5000
|
unkown
|
page readonly
|
|
|
|
19214530000
|
unkown
|
page readonly
|
|
|
|
7FF5704EF000
|
unkown
|
page readonly
|
|
|
|
65DF000
|
unkown
|
page read and write
|
|
|
|
EA082FF000
|
unkown
|
page read and write
|
|
|
|
20C02229000
|
unkown
|
page read and write
|
|
|
|
2C0A000
|
heap default
|
page read and write
|
|
|
|
236258D7000
|
unkown
|
page read and write
|
|
|
|
19218B20000
|
unkown
|
page write copy
|
|
|
|
20C02213000
|
unkown
|
page read and write
|
|
|
|
7FF5705E6000
|
unkown
|
page readonly
|
|
|
|
F55B2FB000
|
unkown
|
page read and write
|
|
|
|
7FF56FE89000
|
unkown
|
page readonly
|
|
|
|
7FF532925000
|
unkown
|
page readonly
|
|
|
|
7FF55D984000
|
unkown
|
page readonly
|
|
|
|
7FF58B525000
|
unkown
|
page readonly
|
|
|
|
23C437C0000
|
unkown
|
page read and write
|
|
|
|
19218C85000
|
unkown
|
page read and write
|
|
|
|
2D70000
|
heap private
|
page read and write
|
|
|
|
29EE000
|
unkown
|
page read and write
|
|
|
|
7FF58CF0D000
|
unkown
|
page readonly
|
|
|
|
7FF55DA2D000
|
unkown
|
page readonly
|
|
|
|
7FF58B5F9000
|
unkown
|
page readonly
|
|
|
|
7FF58F166000
|
unkown
|
page readonly
|
|
|
|
7FF58F377000
|
unkown
|
page readonly
|
|
|
|
7FF5705A1000
|
unkown
|
page readonly
|
|
|
|
7FF58B151000
|
unkown
|
page readonly
|
|
|
|
423937A000
|
unkown
|
page read and write
|
|
|
|
20C02300000
|
unkown
|
page read and write
|
|
|
|
7FF55D9C9000
|
unkown
|
page readonly
|
|
|
|
F55B77E000
|
unkown
|
page read and write
|
|
|
|
2579063B000
|
unkown
|
page read and write
|
|
|
|
23625829000
|
unkown
|
page read and write
|
|
|
|
19213513000
|
unkown
|
page read and write
|
|
|
|
F77C47F000
|
unkown
|
page read and write
|
|
|
|
16B8FB61000
|
unkown
|
page read and write
|
|
|
|
19218CAD000
|
unkown
|
page read and write
|
|
|
|
7FF55D296000
|
unkown
|
page readonly
|
|
|
|
7FF58F28D000
|
unkown
|
page readonly
|
|
|
|
23C4355C000
|
unkown
|
page read and write
|
|
|
|
231B7C40000
|
unkown
|
page read and write
|
|
|
|
BBE437E000
|
unkown
|
page read and write
|
|
|
|
7FF57FCF4000
|
unkown
|
page readonly
|
|
|
|
7FF5703B7000
|
unkown
|
page readonly
|
|
|
|
23C43660000
|
unkown
|
page read and write
|
|
|
|
20C0228A000
|
unkown
|
page read and write
|
|
|
|
420B277000
|
unkown
|
page read and write
|
|
|
|
23625913000
|
unkown
|
page read and write
|
|
|
|
7FF5702CF000
|
unkown
|
page readonly
|
|
|
|
16B92310000
|
unkown
|
page read and write
|
|
|
|
235E7482000
|
unkown
|
page read and write
|
|
|
|
2232A702000
|
unkown
|
page read and write
|
|
|
|
7FF570300000
|
unkown
|
page readonly
|
|
|
|
23626194000
|
unkown
|
page read and write
|
|
|
|
7FF551CCF000
|
unkown
|
page readonly
|
|
|
|
23C44380000
|
unkown
|
page read and write
|
|
|
|
19218C18000
|
unkown
|
page read and write
|
|
|
|
7FF532C2A000
|
unkown
|
page readonly
|
|
|
|
3260000
|
unkown
|
page readonly
|
|
|
|
7FF58F321000
|
unkown
|
page readonly
|
|
|
|
16B92010000
|
unkown
|
page read and write
|
|
|
|
5EA0000
|
unkown
|
page readonly
|
|
|
|
20C021C0000
|
unkown
|
page readonly
|
|
|
|
25790800000
|
unkown
|
page readonly
|
|
|
|
420BA7F000
|
unkown
|
page read and write
|
|
|
|
2630000
|
unkown
|
page readonly
|
|
|
|
27EB000
|
unkown
|
page readonly
|
|
|
|
23625A00000
|
unkown
|
page readonly
|
|
|
|
2232A668000
|
unkown
|
page read and write
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
2232A668000
|
unkown
|
page read and write
|
|
|
|
231B7C40000
|
unkown
|
page read and write
|
|
|
|
420BB7B000
|
unkown
|
page read and write
|
|
|
|
7FF57FCF7000
|
unkown
|
page readonly
|
|
|
|
235E748E000
|
unkown
|
page read and write
|
|
|
|
19213600000
|
unkown
|
page readonly
|
|
|
|
23C4353C000
|
unkown
|
page read and write
|
|
|
|
7FF551F03000
|
unkown
|
page readonly
|
|
|
|
7FF551FB4000
|
unkown
|
page readonly
|
|
|
|
235E7508000
|
unkown
|
page read and write
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
2614000
|
unkown
|
page readonly
|
|
|
|
7FF58F1B8000
|
unkown
|
page readonly
|
|
|
|
2362617B000
|
unkown
|
page read and write
|
|
|
|
23626173000
|
unkown
|
page read and write
|
|
|
|
7FF551FA7000
|
unkown
|
page readonly
|
|
|
|
23626175000
|
unkown
|
page read and write
|
|
|
|
16B91C84000
|
unkown
|
page read and write
|
|
|
|
5E94000
|
heap private
|
page read and write
|
|
|
|
16B8FAAA000
|
unkown
|
page read and write
|
|
|
|
231B7C00000
|
heap private
|
page read and write
|
|
|
|
7FF57FB40000
|
unkown
|
page readonly
|
|
|
|
21B0CFB0000
|
unkown
|
page readonly
|
|
|
|
23625870000
|
unkown
|
page read and write
|
|
|
|
16B8FA3F000
|
unkown
|
page read and write
|
|
|
|
19213D00000
|
unkown
|
page read and write
|
|
|
|
420B9FF000
|
unkown
|
page read and write
|
|
|
|
25790460000
|
heap private
|
page read and write
|
|
|
|
7FF551DE6000
|
unkown
|
page readonly
|
|
|
|
2579063F000
|
unkown
|
page read and write
|
|
|
|
7FF58B65D000
|
unkown
|
page readonly
|
|
|
|
25F3000
|
unkown
|
page readonly
|
|
|
|
2362617B000
|
unkown
|
page read and write
|
|
|
|
42392FB000
|
unkown
|
page read and write
|
|
|
|
1921343D000
|
unkown
|
page read and write
|
|
|
|
7FF551EA5000
|
unkown
|
page readonly
|
|
|
|
23626197000
|
unkown
|
page read and write
|
|
|
|
236257B0000
|
unkown
|
page write copy
|
|
|
|
7FF58CED4000
|
unkown
|
page readonly
|
|
|
|
7FF5A63C7000
|
unkown
|
page readonly
|
|
|
|
7FF58B4B5000
|
unkown
|
page readonly
|
|
|
|
26942FB000
|
unkown
|
page read and write
|
|
|
|
2232A629000
|
unkown
|
page read and write
|
|
|
|
7FF55D9BD000
|
unkown
|
page readonly
|
|
|
|
7FF538346000
|
unkown
|
page readonly
|
|
|
|
7FF526B9F000
|
unkown
|
page readonly
|
|
|
|
19218B24000
|
unkown
|
page readonly
|
|
|
|
7FF551EC7000
|
unkown
|
page readonly
|
|
|
|
16B91B9D000
|
unkown
|
page read and write
|
|
|
|
23626180000
|
unkown
|
page read and write
|
|
|
|
6AF1D7F000
|
unkown
|
page read and write
|
|
|
|
16B8F930000
|
heap private
|
page read and write
|
|
|
|
A351DFC000
|
unkown
|
page read and write
|
|
|
|
19213D59000
|
unkown
|
page read and write
|
|
|
|
7FF58CD1F000
|
unkown
|
page readonly
|
|
|
|
23626175000
|
unkown
|
page read and write
|
|
|
|
7FF57FD0A000
|
unkown
|
page readonly
|
|
|
|
23626600000
|
unkown
|
page read and write
|
|
|
|
7FF5A62D3000
|
unkown
|
page readonly
|
|
|
|
21B0CE90000
|
unkown
|
page readonly
|
|
|
|
18999700000
|
unkown
|
page read and write
|
|
|
|
21B0CFF0000
|
unkown
|
page read and write
|
|
|
|
420BD7F000
|
unkown
|
page read and write
|
|
|
|
27D8000
|
unkown
|
page readonly
|
|
|
|
7FF551BB8000
|
unkown
|
page readonly
|
|
|
|
7FF58CE08000
|
unkown
|
page readonly
|
|
|
|
7FF5DBAF1000
|
unkown
|
page readonly
|
|
|
|
236258E4000
|
unkown
|
page read and write
|
|
|
|
7FF58CEFF000
|
unkown
|
page readonly
|
|
|
|
16B91970000
|
unkown
|
page readonly
|
|
|
|
EA08578000
|
unkown
|
page read and write
|
|
|
|
7FF58B496000
|
unkown
|
page readonly
|
|
|
|
18999602000
|
unkown
|
page read and write
|
|
|
|
30C8000
|
unkown
|
page read and write
|
|
|
|
2433000
|
unkown
|
page readonly
|
|
|
|
7FF5A5F5A000
|
unkown
|
page readonly
|
|
|
|
7FF526BE7000
|
unkown
|
page readonly
|
|
|
|
30D4000
|
unkown
|
page read and write
|
|
|
|
A3521FB000
|
unkown
|
page read and write
|
|
|
|
423967D000
|
unkown
|
page read and write
|
|
|
|
7FF5A63C7000
|
unkown
|
page readonly
|
|
|
|
23C43680000
|
unkown
|
page read and write
|
|
|
|
7FF58EAB2000
|
unkown
|
page readonly
|
|
|
|
6AF1DFE000
|
unkown
|
page read and write
|
|
|
|
21B0D029000
|
unkown
|
page read and write
|
|
|
|
19218B70000
|
unkown
|
page read and write
|
|
|
|
420B07B000
|
unkown
|
page read and write
|
|
|
|
7FF5DBAC4000
|
unkown
|
page readonly
|
|
|
|
19218BF0000
|
unkown
|
page readonly
|
|
|
|
7FF58F27F000
|
unkown
|
page readonly
|
|
|
|
4238CFB000
|
unkown
|
page read and write
|
|
|
|
7FF58CEE4000
|
unkown
|
page readonly
|
|
|
|
7FF57FC3F000
|
unkown
|
page readonly
|
|
|
|
2747000
|
unkown
|
page readonly
|
|
|
|
7FF5DBBF2000
|
unkown
|
page readonly
|
|
|
|
23C436B0000
|
unkown
|
page readonly
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
2602000
|
unkown
|
page readonly
|
|
|
|
7FF5DBB3D000
|
unkown
|
page readonly
|
|
|
|
F55B37E000
|
unkown
|
page read and write
|
|
|
|
2232A602000
|
unkown
|
page read and write
|
|
|
|
3330000
|
unkown
|
page readonly
|
|
|
|
236258BB000
|
unkown
|
page read and write
|
|
|
|
7FF58F271000
|
unkown
|
page readonly
|
|
|
|
19218CB3000
|
unkown
|
page read and write
|
|
|
|
19218BB0000
|
unkown
|
page readonly
|
|
|
|
21B0D054000
|
unkown
|
page read and write
|
|
|
|
23625760000
|
unkown
|
page read and write
|
|
|
|
16B8FB61000
|
unkown
|
page read and write
|
|
|
|
21B0D040000
|
unkown
|
page read and write
|
|
|
|
7FF551D1F000
|
unkown
|
page readonly
|
|
|
|
236258CC000
|
unkown
|
page read and write
|
|
|
|
1899A340000
|
unkown
|
page readonly
|
|
|
|
7FF58CBCA000
|
unkown
|
page readonly
|
|
|
|
7FF58CF4E000
|
unkown
|
page readonly
|
|
|
|
19213494000
|
unkown
|
page read and write
|
|
|
|
7FF58F296000
|
unkown
|
page readonly
|
|
|
|
2232A66E000
|
unkown
|
page read and write
|
|
|
|
7FF58F33B000
|
unkown
|
page readonly
|
|
|
|
2D80000
|
heap default
|
page read and write
|
|
|
|
19213C15000
|
unkown
|
page read and write
|
|
|
|
231B7C10000
|
heap default
|
page read and write
|
|
|
|
23626109000
|
unkown
|
page read and write
|
|
|
|
7FF57FC76000
|
unkown
|
page readonly
|
|
|
|
7FF526866000
|
unkown
|
page readonly
|
|
|
|
EEBE877000
|
unkown
|
page read and write
|
|
|
|
23C43525000
|
unkown
|
page read and write
|
|
|
|
30A0000
|
heap default
|
page read and write
|
|
|
|
420B97F000
|
unkown
|
page read and write
|
|
|
|
7FF532818000
|
unkown
|
page readonly
|
|
|
|
20C020D0000
|
heap default
|
page read and write
|
|
|
|
7FF58B67A000
|
unkown
|
page readonly
|
|
|
|
F77C4FE000
|
unkown
|
page read and write
|
|
|
|
19218BA0000
|
unkown
|
page read and write
|
|
|
|
7FF58F372000
|
unkown
|
page readonly
|
|
|
|
2232A66E000
|
unkown
|
page read and write
|
|
|
|
7FF5A63C2000
|
unkown
|
page readonly
|
|
|
|
7FF526C57000
|
unkown
|
page readonly
|
|
|
|
7FF551F47000
|
unkown
|
page readonly
|
|
|
|
7FF57FA5B000
|
unkown
|
page readonly
|
|
|
|
7FF526B67000
|
unkown
|
page readonly
|
|
|
|
18999651000
|
unkown
|
page read and write
|
|
|
|
7FF58B311000
|
unkown
|
page readonly
|
|
|
|
F77C1F9000
|
unkown
|
page read and write
|
|
|
|
23C44130000
|
unkown
|
page read and write
|
|
|
|
7FF538359000
|
unkown
|
page readonly
|
|
|
|
16B91B13000
|
unkown
|
page read and write
|
|
|
|
7FF58CF16000
|
unkown
|
page readonly
|
|
|
|
16B91C84000
|
unkown
|
page read and write
|
|
|
|
7FF57039D000
|
unkown
|
page readonly
|
|
|
|
7FF5DBBAD000
|
unkown
|
page readonly
|
|
|
|
23625F30000
|
unkown
|
page readonly
|
|
|
|
7FF58CFF7000
|
unkown
|
page readonly
|
|
|
|
BBE417E000
|
unkown
|
page read and write
|
|
|
|
7FF52686A000
|
unkown
|
page readonly
|
|
|
|
7FF58B5ED000
|
unkown
|
page readonly
|
|
|
|
231B7C1D000
|
heap default
|
page read and write
|
|
|
|
235E7513000
|
unkown
|
page read and write
|
|
|
|
2232A66C000
|
unkown
|
page read and write
|
|
|
|
7FF58B5B3000
|
unkown
|
page readonly
|
|
|
|
23C4355A000
|
unkown
|
page read and write
|
|
|
|
7FF570438000
|
unkown
|
page readonly
|
|
|
|
7FF5A5E77000
|
unkown
|
page readonly
|
|
|
|
25790600000
|
unkown
|
page read and write
|
|
|
|
2D7F000
|
unkown
|
page read and write
|
|
|
|
7FF532A68000
|
unkown
|
page readonly
|
|
|
|
7FF537BE0000
|
unkown
|
page readonly
|
|
|
|
7FF5DB479000
|
unkown
|
page readonly
|
|
|
|
20C020E0000
|
unkown
|
page readonly
|
|
|
|
19213400000
|
unkown
|
page read and write
|
|
|
|
7FF58F324000
|
unkown
|
page readonly
|
|
|
|
7FF58CED0000
|
unkown
|
page readonly
|
|
|
|
7FF53297F000
|
unkown
|
page readonly
|
|
|
|
23626191000
|
unkown
|
page read and write
|
|
|
|
23626173000
|
unkown
|
page read and write
|
|
|
|
2C2E000
|
unkown
|
page read and write
|
|
|
|
7FF56FD38000
|
unkown
|
page readonly
|
|
|
|
7FF56FDD4000
|
unkown
|
page readonly
|
|
|
|
7FF5704D9000
|
unkown
|
page readonly
|
|
|
|
16B8FA00000
|
unkown
|
page read and write
|
|
|
|
2848000
|
unkown
|
page readonly
|
|
|
|
2C25000
|
unkown
|
page read and write
|
|
|
|
231B7C05000
|
heap private
|
page read and write
|
|
|
|
23C443F0000
|
unkown
|
page read and write
|
|
|
|
420BE7B000
|
unkown
|
page read and write
|
|
|
|
7FF58CEA1000
|
unkown
|
page readonly
|
|
|
|
7FF5DBA38000
|
unkown
|
page readonly
|
|
|
|
231B7FF0000
|
unkown
|
page readonly
|
|
|
|
7FF58F185000
|
unkown
|
page readonly
|
|
|
|
7FF5DB8C5000
|
unkown
|
page readonly
|
|
|
|
19213471000
|
unkown
|
page read and write
|
|
|
|
19218B57000
|
unkown
|
page write copy
|
|
|
|
23625908000
|
unkown
|
page read and write
|
|
|
|
7FF5DB9B3000
|
unkown
|
page readonly
|
|
|
|
23C43490000
|
heap default
|
page read and write
|
|
|
|
7FF526A0F000
|
unkown
|
page readonly
|
|
|
|
19218B90000
|
unkown
|
page read and write
|
|
|
|
2762000
|
unkown
|
page readonly
|
|
|
|
4238FFA000
|
unkown
|
page read and write
|
|
|
|
7FF5704FF000
|
unkown
|
page readonly
|
|
|
|
7FF58CEA7000
|
unkown
|
page readonly
|
|
|
|
BBE4277000
|
unkown
|
page read and write
|
|
|
|
6AF21FA000
|
unkown
|
page read and write
|
|
|
|
7FF58B4B8000
|
unkown
|
page readonly
|
|
|
|
7FF5DBAA5000
|
unkown
|
page readonly
|
|
|
|
2D669029000
|
unkown
|
page read and write
|
|
|
|
16B91BAD000
|
unkown
|
page read and write
|
|
|
|
420B379000
|
unkown
|
page read and write
|
|
|
|
7FF570152000
|
unkown
|
page readonly
|
|
|
|
19218A70000
|
unkown
|
page read and write
|
|
|
|
19218C26000
|
unkown
|
page read and write
|
|
|
|
18999649000
|
unkown
|
page read and write
|
|
|
|
7FF56FDD0000
|
unkown
|
page readonly
|
|
|
|
18999613000
|
unkown
|
page read and write
|
|
|
|
5E7E000
|
unkown
|
page read and write
|
|
|
|
16B8FA13000
|
unkown
|
page read and write
|
|
|
|
7FF57FCE4000
|
unkown
|
page readonly
|
|
|
|
16B91D42000
|
unkown
|
page read and write
|
|
|
|
27FE000
|
unkown
|
page readonly
|
|
|
|
23626182000
|
unkown
|
page read and write
|
|
|
|
2840000
|
unkown
|
page readonly
|
|
|
|
2D668FB0000
|
unkown
|
page read and write
|
|
|
|
19218CA2000
|
unkown
|
page read and write
|
|
|
|
7FF5A6319000
|
unkown
|
page readonly
|
|
|
|
63A0000
|
unkown
|
page read and write
|
|
|
|
2990000
|
unkown
|
page readonly
|
|
|
|
236258E9000
|
unkown
|
page read and write
|
|
|
|
7FF57FA05000
|
unkown
|
page readonly
|
|
|
|
7FF538315000
|
unkown
|
page readonly
|
|
|
|
7FF5DBBE6000
|
unkown
|
page readonly
|
|
|
|
2232A4F0000
|
heap default
|
page read and write
|
|
|
|
7FF5383B7000
|
unkown
|
page readonly
|
|
|
|
255D000
|
unkown
|
page readonly
|
|
|
|
7FF58CEA5000
|
unkown
|
page readonly
|
|
|
|
16B8FB1F000
|
unkown
|
page read and write
|
|
|
|
7FF58B5D2000
|
unkown
|
page readonly
|
|
|
|
2537000
|
unkown
|
page readonly
|
|
|
|
23625F50000
|
unkown
|
page readonly
|
|
|
|
7FF5DB930000
|
unkown
|
page readonly
|
|
|
|
235E71C0000
|
heap private
|
page read and write
|
|
|
|
F77C57E000
|
unkown
|
page read and write
|
|
|
|
7FF5DB8F4000
|
unkown
|
page readonly
|
|
|
|
30D1000
|
unkown
|
page read and write
|
|
|
|
23626661000
|
unkown
|
page read and write
|
|
|
|
7FF55DA66000
|
unkown
|
page readonly
|
|
|
|
2E00000
|
unkown
|
page readonly
|
|
|
|
2232A63F000
|
unkown
|
page read and write
|
|
|
|
19213C02000
|
unkown
|
page read and write
|
|
|
|
2362587B000
|
unkown
|
page read and write
|
|
|
|
2694175000
|
unkown
|
page read and write
|
|
|
|
BBE447E000
|
unkown
|
page read and write
|
|
|
|
7FF5A630D000
|
unkown
|
page readonly
|
|
|
|
23C4356F000
|
unkown
|
page read and write
|
|
|
|
1899968D000
|
unkown
|
page read and write
|
|
|
|
7FF58F283000
|
unkown
|
page readonly
|
|
|
|
7FF5383C7000
|
unkown
|
page readonly
|
|
|
|
EA0867E000
|
unkown
|
page read and write
|
|
|
|
7FF5705F2000
|
unkown
|
page readonly
|
|
|
|
4238B7B000
|
unkown
|
page read and write
|
|
|
|
EA08478000
|
unkown
|
page read and write
|
|
|
|
23C43561000
|
unkown
|
page read and write
|
|
|
|
7FF55DA27000
|
unkown
|
page readonly
|
|
|
|
19218C00000
|
unkown
|
page read and write
|
|
|
|
7FF526BE9000
|
unkown
|
page readonly
|
|
|
|
7FF58F188000
|
unkown
|
page readonly
|
|
|
|
2C42000
|
unkown
|
page read and write
|
|
|
|
20C02A02000
|
unkown
|
page read and write
|
|
|
|
2D669200000
|
unkown
|
page readonly
|
|
|
|
420B87F000
|
unkown
|
page read and write
|
|
|
|
7FF526C54000
|
unkown
|
page readonly
|
|
|
|
7FF57FA5F000
|
unkown
|
page readonly
|
|
|
|
7FF532A60000
|
unkown
|
page readonly
|
|
|
|
19218ED0000
|
unkown
|
page readonly
|
|
|
|
23C43835000
|
heap private
|
page read and write
|
|
|
|
2970000
|
unkown
|
page read and write
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
19214520000
|
unkown
|
page readonly
|
|
|
|
245C000
|
unkown
|
page readonly
|
|
|
|
2561000
|
unkown
|
page readonly
|
|
|
|
420B47B000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB49000
|
unkown
|
page readonly
|
|
|
|
235E7230000
|
unkown
|
page readonly
|
|
|
|
2693DBE000
|
unkown
|
page read and write
|
|
|
|
EA080F7000
|
unkown
|
page read and write
|
|
|
|
235E7450000
|
unkown
|
page read and write
|
|
|
|
27C1000
|
unkown
|
page readonly
|
|
|
|
7FF56FD32000
|
unkown
|
page readonly
|
|
|
|
7FF5DB3E6000
|
unkown
|
page readonly
|
|
|
|
16B91B4E000
|
unkown
|
page read and write
|
|
|
|
23626175000
|
unkown
|
page read and write
|
|
|
|
23C434D6000
|
unkown
|
page read and write
|
|
|
|
7FF5702C5000
|
unkown
|
page readonly
|
|
|
|
236261DA000
|
unkown
|
page read and write
|
|
|
|
16B8F9F0000
|
unkown
|
page readonly
|
|
|
|
23C43525000
|
unkown
|
page read and write
|
|
|
|
7FF5A637D000
|
unkown
|
page readonly
|
|
|
|
16B8FB21000
|
unkown
|
page read and write
|
|
|
|
16B91D82000
|
unkown
|
page read and write
|
|
|
|
7FF570076000
|
unkown
|
page readonly
|
|
|
|
7FF5700A7000
|
unkown
|
page readonly
|
|
|
|
19218950000
|
unkown
|
page read and write
|
|
|
|
3327000
|
heap private
|
page read and write
|
|
|
|
20C02880000
|
unkown
|
page readonly
|
|
|
|
2F70000
|
heap default
|
page read and write
|
|
|
|
7FF5A5B08000
|
unkown
|
page readonly
|
|
|
|
19213D18000
|
unkown
|
page read and write
|
|
|
|
7FF58B693000
|
unkown
|
page readonly
|
|
|
|
BBE3BAB000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB1A000
|
unkown
|
page readonly
|
|
|
|
420B17E000
|
unkown
|
page read and write
|
|
|
|
7FF57FC87000
|
unkown
|
page readonly
|
|
|
|
16B91CC4000
|
unkown
|
page read and write
|
|
|
|
7FF526C92000
|
unkown
|
page readonly
|
|
|
|
266C000
|
unkown
|
page readonly
|
|
|
|
2232A66A000
|
unkown
|
page read and write
|
|
|
|
A3522F9000
|
unkown
|
page read and write
|
|
|
|
25790602000
|
unkown
|
page read and write
|
|
|
|
235E7413000
|
unkown
|
page read and write
|
|
|
|
7FF5383CB000
|
unkown
|
page readonly
|
|
|
|
16B91BFD000
|
unkown
|
page read and write
|
|
|
|
7FF5A62CF000
|
unkown
|
page readonly
|
|
|
|
2362615F000
|
unkown
|
page read and write
|
|
|
|
7FF551FB7000
|
unkown
|
page readonly
|
|
|
|
7FF538407000
|
unkown
|
page readonly
|
|
|
|
23625855000
|
unkown
|
page read and write
|
|
|
|
D8FFEFF000
|
unkown
|
page read and write
|
|
|
|
16B91C22000
|
unkown
|
page read and write
|
|
|
|
7FF570330000
|
unkown
|
page readonly
|
|
|
|
7FF57FC43000
|
unkown
|
page readonly
|
|
|
|
2D90000
|
unkown
|
page readonly
|
|
|
|
16B92110000
|
unkown
|
page read and write
|
|
|
|
3320000
|
heap private
|
page read and write
|
|
|
|
7FF5DB752000
|
unkown
|
page readonly
|
|
|
|
7FF551FBB000
|
unkown
|
page readonly
|
|
|
|
7FF58EAB8000
|
unkown
|
page readonly
|
|
|
|
7FF5A63B6000
|
unkown
|
page readonly
|
|
|
|
235E7C00000
|
unkown
|
page readonly
|
|
|
|
7FF57FA0F000
|
unkown
|
page readonly
|
|
|
|
280E000
|
unkown
|
page readonly
|
|
|
|
23C4355A000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBA4000
|
unkown
|
page readonly
|
|
|
|
4600000
|
unkown
|
page readonly
|
|
|
|
16B8FA74000
|
unkown
|
page read and write
|
|
|
|
EA07C7B000
|
unkown
|
page read and write
|
|
|
|
19214440000
|
unkown
|
page read and write
|
|
|
|
7FF538326000
|
unkown
|
page readonly
|
|
|
|
7FF57FBE5000
|
unkown
|
page readonly
|
|
|
|
16B91D02000
|
unkown
|
page read and write
|
|
|
|
236261B6000
|
unkown
|
page read and write
|
|
|
|
16B92010000
|
unkown
|
page read and write
|
|
|
|
25790717000
|
unkown
|
page read and write
|
|
|
|
19213D02000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBB7000
|
unkown
|
page readonly
|
|
|
|
20C021D0000
|
unkown
|
page read and write
|
|
|
|
21B0D113000
|
unkown
|
page read and write
|
|
|
|
2C2D000
|
unkown
|
page read and write
|
|
|
|
2BFE000
|
unkown
|
page read and write
|
|
|
|
7FF55DA34000
|
unkown
|
page readonly
|
|
|
|
7FF5DB8F6000
|
unkown
|
page readonly
|
|
|
|
235E744A000
|
unkown
|
page read and write
|
|
|
|
7FF57051A000
|
unkown
|
page readonly
|
|
|
|
16B91B10000
|
unkown
|
page read and write
|
|
|
|
16B91CDB000
|
unkown
|
page read and write
|
|
|
|
7FF58CFA4000
|
unkown
|
page readonly
|
|
|
|
7FF5DBA31000
|
unkown
|
page readonly
|
|
|
|
2638000
|
unkown
|
page readonly
|
|
|
|
16B8F990000
|
heap default
|
page read and write
|
|
|
|
192148C0000
|
unkown
|
page read and write
|
|
|
|
18999656000
|
unkown
|
page read and write
|
|
|
|
7FF5704D4000
|
unkown
|
page readonly
|
|
|
|
20C02C00000
|
unkown
|
page readonly
|
|
|
|
23625730000
|
heap default
|
page read and write
|
|
|
|
19213D59000
|
unkown
|
page read and write
|
|
|
|
7FF526B45000
|
unkown
|
page readonly
|
|
|
|
2F10000
|
unkown
|
page read and write
|
|
|
|
7FF5DBA75000
|
unkown
|
page readonly
|
|
|
|
16B91B84000
|
unkown
|
page read and write
|
|
|
|
27F6000
|
unkown
|
page readonly
|
|
|
|
23626157000
|
unkown
|
page read and write
|
|
|
|
1921347A000
|
unkown
|
page read and write
|
|
|
|
7FF526C47000
|
unkown
|
page readonly
|
|
|
|
23C434E6000
|
unkown
|
page read and write
|
|
|
|
7FF58CBC6000
|
unkown
|
page readonly
|
|
|
|
25EE000
|
unkown
|
page readonly
|
|
|
|
423947B000
|
unkown
|
page read and write
|
|
|
|
7FF57FC07000
|
unkown
|
page readonly
|
|
|
|
7FF551F1A000
|
unkown
|
page readonly
|
|
|
|
192134FC000
|
unkown
|
page read and write
|
|
|
|
7FF5A6031000
|
unkown
|
page readonly
|
|
|
|
7FF58B667000
|
unkown
|
page readonly
|
|
|
|
2D7A000
|
heap private
|
page read and write
|
|
|
|
7FF5705B7000
|
unkown
|
page readonly
|
|
|
|
2362615C000
|
unkown
|
page read and write
|
|
|
|
7FF526B47000
|
unkown
|
page readonly
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
25790713000
|
unkown
|
page read and write
|
|
|
|
7FF570503000
|
unkown
|
page readonly
|
|
|
|
20C02255000
|
unkown
|
page read and write
|
|
|
|
16B8FB40000
|
unkown
|
page read and write
|
|
|
|
19214540000
|
unkown
|
page readonly
|
|
|
|
16B91BF1000
|
unkown
|
page read and write
|
|
|
|
7FF57FD32000
|
unkown
|
page readonly
|
|
|
|
7FF551F22000
|
unkown
|
page readonly
|
|
|
|
2232A490000
|
heap private
|
page read and write
|
|
|
|
7FF55D8B1000
|
unkown
|
page readonly
|
|
|
|
7FF5383F3000
|
unkown
|
page readonly
|
|
|
|
235E73E0000
|
unkown
|
page readonly
|
|
|
|
7FF5705B4000
|
unkown
|
page readonly
|
|
|
|
257905F0000
|
unkown
|
page readonly
|
|
|
|
6AF217E000
|
unkown
|
page read and write
|
|
|
|
23626180000
|
unkown
|
page read and write
|
|
|
|
19218940000
|
unkown
|
page read and write
|
|
|
|
7FF57032E000
|
unkown
|
page readonly
|
|
|
|
290B000
|
unkown
|
page read and write
|
|
|
|
235E7A02000
|
unkown
|
page read and write
|
|
|
|
7FF55D9C7000
|
unkown
|
page readonly
|
|
|
|
19213B40000
|
unkown
|
page readonly
|
|
|
|
21B0D013000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB4E000
|
unkown
|
page readonly
|
|
|
|
7FF5DBBA7000
|
unkown
|
page readonly
|
|
|
|
19218B20000
|
unkown
|
page read and write
|
|
|
|
7FF58F366000
|
unkown
|
page readonly
|
|
|
|
7FF570408000
|
unkown
|
page readonly
|
|
|
|
19218B80000
|
unkown
|
page read and write
|
|
|
|
20C02308000
|
unkown
|
page read and write
|
|
|
|
EBF0BFD000
|
unkown
|
page read and write
|
|
|
|
7FF57053D000
|
unkown
|
page readonly
|
|
|
|
2824000
|
unkown
|
page readonly
|
|
|
|
7FF58CFAD000
|
unkown
|
page readonly
|
|
|
|
231B7C4D000
|
unkown
|
page read and write
|
|
|
|
16B91960000
|
unkown
|
page read and write
|
|
|
|
18999652000
|
unkown
|
page read and write
|
|
|
|
7FF58F26F000
|
unkown
|
page readonly
|
|
|
|
7FF55D8A1000
|
unkown
|
page readonly
|
|
|
|
19218C88000
|
unkown
|
page read and write
|
|
|
|
19218E10000
|
unkown
|
page readonly
|
|
|
|
7FF5DB89D000
|
unkown
|
page readonly
|
|
|
|
2ADA000
|
unkown
|
page read and write
|
|
|
|
7FF58CE97000
|
unkown
|
page readonly
|
|
|
|
18999708000
|
unkown
|
page read and write
|
|
|
|
7FF532B27000
|
unkown
|
page readonly
|
|
|
|
2627000
|
unkown
|
page readonly
|
|
|
|
2638000
|
unkown
|
page readonly
|
|
|
|
16B91CC8000
|
unkown
|
page read and write
|
|
|
|
7FF57FC5A000
|
unkown
|
page readonly
|
|
|
|
7FF570261000
|
unkown
|
page readonly
|
|
|
|
2D669102000
|
unkown
|
page read and write
|
|
|
|
7FF551FF7000
|
unkown
|
page readonly
|
|
|
|
16B8FBA3000
|
unkown
|
page read and write
|
|
|
|
6AF207E000
|
unkown
|
page read and write
|
|
|
|
7FF532C57000
|
unkown
|
page readonly
|
|
|
|
7FF5A6317000
|
unkown
|
page readonly
|
|
|
|
7FF551EFF000
|
unkown
|
page readonly
|
|
|
|
23C4356E000
|
unkown
|
page read and write
|
|
|
|
7FF57FCED000
|
unkown
|
page readonly
|
|
|
|
7FF58F1F5000
|
unkown
|
page readonly
|
|
|
|
7FF532C04000
|
unkown
|
page readonly
|
|
|
|
16B92113000
|
unkown
|
page read and write
|
|
|
|
16B91C00000
|
unkown
|
page read and write
|
|
|
|
7FF551FE6000
|
unkown
|
page readonly
|
|
|
|
257905A0000
|
unkown
|
page write copy
|
|
|
|
7FF58F180000
|
unkown
|
page readonly
|
|
|
|
16B8FAC8000
|
unkown
|
page read and write
|
|
|
|
23C4355A000
|
unkown
|
page read and write
|
|
|
|
7FF58CFB7000
|
unkown
|
page readonly
|
|
|
|
7FF570073000
|
unkown
|
page readonly
|
|
|
|
236258C2000
|
unkown
|
page read and write
|
|
|
|
7FF551CC5000
|
unkown
|
page readonly
|
|
|
|
5E90000
|
heap private
|
page read and write
|
|
|
|
16B92410000
|
unkown
|
page read and write
|
|
|
|
7FF58C7E7000
|
unkown
|
page readonly
|
|
|
|
16B92110000
|
unkown
|
page read and write
|
|
|
|
236258A5000
|
unkown
|
page read and write
|
|
|
|
7FF532C52000
|
unkown
|
page readonly
|
|
|
|
23626191000
|
unkown
|
page read and write
|
|
|
|
7FF526C5B000
|
unkown
|
page readonly
|
|
|
|
D8FFF7C000
|
unkown
|
page read and write
|
|
|
|
7FF58B157000
|
unkown
|
page readonly
|
|
|
|
F77C5FA000
|
unkown
|
page read and write
|
|
|
|
7FF55DA77000
|
unkown
|
page readonly
|
|
|
|
7FF5DB99D000
|
unkown
|
page readonly
|
|
|
|
2D668F70000
|
unkown
|
page readonly
|
|
|
|
1899963C000
|
unkown
|
page read and write
|
|
|
|
23C43839000
|
heap private
|
page read and write
|
|
|
|
7FF551FF7000
|
unkown
|
page readonly
|
|
|
|
16B91B50000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown
|
page readonly
|
|
|
|
2362583C000
|
unkown
|
page read and write
|
|
|
|
19218CB0000
|
unkown
|
page read and write
|
|
|
|
30C5000
|
unkown
|
page read and write
|
|
|
|
235E7600000
|
unkown
|
page readonly
|
|
|
|
6AF20F9000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBF7000
|
unkown
|
page readonly
|
|
|
|
2232A66C000
|
unkown
|
page read and write
|
|
|
|
42390FB000
|
unkown
|
page read and write
|
|
|
|
2808000
|
unkown
|
page readonly
|
|
|
|
23C434ED000
|
unkown
|
page read and write
|
|
|
|
420B67A000
|
unkown
|
page read and write
|
|
|
|
256B000
|
unkown
|
page readonly
|
|
|
|
16B92110000
|
unkown
|
page read and write
|
|
|
|
7FF55D2F1000
|
unkown
|
page readonly
|
|
|
|
7FF55D96F000
|
unkown
|
page readonly
|
|
|
|
19218BB0000
|
unkown
|
page read and write
|
|
|
|
EBF0A7A000
|
unkown
|
page read and write
|
|
|
|
16B91B73000
|
unkown
|
page read and write
|
|
|
|
7FF5269BF000
|
unkown
|
page readonly
|
|
|
|
2232A600000
|
unkown
|
page read and write
|
|
|
|
423917B000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBB4000
|
unkown
|
page readonly
|
|
|
|
7FF55D8B8000
|
unkown
|
page readonly
|
|
|
|
7FF58B6A7000
|
unkown
|
page readonly
|
|
|
|
7FF58B657000
|
unkown
|
page readonly
|
|
|
|
7FF55DA77000
|
unkown
|
page readonly
|
|
|
|
19218E90000
|
unkown
|
page readonly
|
|
|
|
7FF58CD30000
|
unkown
|
page readonly
|
|
|
|
EA07D7E000
|
unkown
|
page read and write
|
|
|
|
2C49000
|
unkown
|
page read and write
|
|
|
|
7FF58B696000
|
unkown
|
page readonly
|
|
|
|
231B7DF0000
|
unkown
|
page readonly
|
|
|
|
16B91E00000
|
unkown
|
page read and write
|
|
|
|
231B7DE0000
|
unkown
|
page readonly
|
|
|
|
16B93000000
|
unkown
|
page readonly
|
|
|
|
16B91C84000
|
unkown
|
page read and write
|
|
|
|
2812000
|
unkown
|
page readonly
|
|
|
|
7FF526BC2000
|
unkown
|
page readonly
|
|
|
|
2ACB000
|
unkown
|
page read and write
|
|
|
|
7FF5704E4000
|
unkown
|
page readonly
|
|
|
|
7FF57FD37000
|
unkown
|
page readonly
|
|
|
|
7FF58CF47000
|
unkown
|
page readonly
|
|
|
|
7FF57FBE7000
|
unkown
|
page readonly
|
|
|
|
7FF570400000
|
unkown
|
page readonly
|
|
|
|
21B0D200000
|
unkown
|
page readonly
|
|
|
|
16B8F9A0000
|
unkown
|
page write copy
|
|
|
|
25790613000
|
unkown
|
page read and write
|
|
|
|
21B0CF60000
|
unkown
|
page write copy
|
|
|
|
16B8FC00000
|
unkown
|
page readonly
|
|
|
|
7FF58B5CA000
|
unkown
|
page readonly
|
|
|
|
21B0EAA0000
|
unkown
|
page readonly
|
|
|
|
19218A5E000
|
unkown
|
page read and write
|
|
|
|
7FF5A6187000
|
unkown
|
page readonly
|
|
|
|
235E7400000
|
unkown
|
page read and write
|
|
|
|
2D669040000
|
unkown
|
page read and write
|
|
|
|
23C4355A000
|
unkown
|
page read and write
|
|
|
|
23626165000
|
unkown
|
page read and write
|
|
|
|
2F0F000
|
unkown
|
page read and write
|
|
|
|
6AF227E000
|
unkown
|
page read and write
|
|
|
|
7FF532B6E000
|
unkown
|
page readonly
|
|
|
|
7FF5DBB47000
|
unkown
|
page readonly
|
|
|
|
7FF532B07000
|
unkown
|
page readonly
|
|
|
|
19218CAE000
|
unkown
|
page read and write
|
|
|
|
23625902000
|
unkown
|
page read and write
|
|
|
|
16B91BBF000
|
unkown
|
page read and write
|
|
|
|
7FF58CFF7000
|
unkown
|
page readonly
|
|
|
|
7FF55D27D000
|
unkown
|
page readonly
|
|
|
|
16B8FAC1000
|
unkown
|
page read and write
|
|
|
|
16B91BB6000
|
unkown
|
page read and write
|
|
|
|
7FF570549000
|
unkown
|
page readonly
|
|
|
|
7FF5DB9A3000
|
unkown
|
page readonly
|
|
|
|
19218C3C000
|
unkown
|
page read and write
|
|
|
|
23C443E0000
|
unkown
|
page read and write
|
|
|
|
7FF532B76000
|
unkown
|
page readonly
|
|
|
|
16B92110000
|
unkown
|
page read and write
|
|
|
|
7FF58F2A2000
|
unkown
|
page readonly
|
|
|
|
7FF58F2C7000
|
unkown
|
page readonly
|
|
|
|
7FF58EE27000
|
unkown
|
page readonly
|
|
|
|
16B92210000
|
unkown
|
page read and write
|
|
|
|
231B7C22000
|
unkown
|
page read and write
|
|
|
|
7FF57F527000
|
unkown
|
page readonly
|
|
|
|
276D000
|
unkown
|
page readonly
|
|
|
|
7FF58B5E6000
|
unkown
|
page readonly
|
|
|
|
23626165000
|
unkown
|
page read and write
|
|
|
|
7FF58B23B000
|
unkown
|
page readonly
|
|
|
|
7FF57033B000
|
unkown
|
page readonly
|
|
|
|
F55B67B000
|
unkown
|
page read and write
|
|
|
|
2693D3B000
|
unkown
|
page read and write
|
|
|
|
189995A0000
|
unkown
|
page read and write
|
|
|
|
16B92000000
|
unkown
|
page read and write
|
|
|
|
23625740000
|
unkown
|
page readonly
|
|
|
|
23C44390000
|
unkown
|
page read and write
|
|
|
|
23C4354B000
|
unkown
|
page read and write
|
|
|
|
2232A613000
|
unkown
|
page read and write
|
|
|
|
7FF5705F7000
|
unkown
|
page readonly
|
|
|
|
EBF079E000
|
unkown
|
page read and write
|
|
|
|
7FF5DB8FA000
|
unkown
|
page readonly
|
|
|
|
7FF5269BB000
|
unkown
|
page readonly
|
|
|
|
7FF526BA3000
|
unkown
|
page readonly
|
|
|
|
2D669002000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
unkown
|
page read and write
|
|
|
|
235E7220000
|
heap default
|
page read and write
|
|
|
|
7FF53282A000
|
unkown
|
page readonly
|
|
|
|
16B91990000
|
unkown
|
page readonly
|
|
|
|
7FF58B5BD000
|
unkown
|
page readonly
|
|
|
|
25E6000
|
unkown
|
page readonly
|
|
|
|
19214580000
|
unkown
|
page readonly
|
|
|
|
EA07F77000
|
unkown
|
page read and write
|
|
|
|
D8FFE79000
|
unkown
|
page read and write
|
|
|
|
7FF58ED28000
|
unkown
|
page readonly
|
|
|
|
2AC7000
|
unkown
|
page read and write
|
|
|
|
27D5000
|
unkown
|
page readonly
|
|
|
|
1899A000000
|
unkown
|
page readonly
|
|
|
|
23C434A0000
|
heap default
|
page read and write
|
|
|
|
231B7C37000
|
unkown
|
page read and write
|
|
|
|
235E742A000
|
unkown
|
page read and write
|
|
|
|
7FF5705F7000
|
unkown
|
page readonly
|
|
|
|
19213BC1000
|
unkown
|
page read and write
|
|
|
|
7FF5A6384000
|
unkown
|
page readonly
|
|
|
|
23C4355A000
|
unkown
|
page read and write
|
|
|
|
7FF55D9B6000
|
unkown
|
page readonly
|
|
|
|
7FF58B6A7000
|
unkown
|
page readonly
|
|
|
|
42394FB000
|
unkown
|
page read and write
|
|
|
|
7FF55DA63000
|
unkown
|
page readonly
|
|
|
|
30C5000
|
unkown
|
page read and write
|
|
|
|
7FF58CFE3000
|
unkown
|
page readonly
|
|
|
|
7FF55DA21000
|
unkown
|
page readonly
|
|
|
|
7FF5703A3000
|
unkown
|
page readonly
|
|
|
|
23C44360000
|
unkown
|
page read and write
|
|
|
|
7FF532C1B000
|
unkown
|
page readonly
|
|
|
|
2D669056000
|
unkown
|
page read and write
|
|
|
|
7FF5DB8CF000
|
unkown
|
page readonly
|
|
|
|
192134B0000
|
unkown
|
page read and write
|
|
|
|
7FF58CD1B000
|
unkown
|
page readonly
|
|
|
|
19218C32000
|
unkown
|
page read and write
|
|
|
|
7FF5329CF000
|
unkown
|
page readonly
|
|
|
|
7FF55DA4A000
|
unkown
|
page readonly
|
|
|
|
7FF532C0D000
|
unkown
|
page readonly
|
|
|
|
7FF551F49000
|
unkown
|
page readonly
|
|
|
|
EEBE57D000
|
unkown
|
page read and write
|
|
|
|
23625F40000
|
unkown
|
page readonly
|
|
|
|
21B0D100000
|
unkown
|
page read and write
|
|
|
|
23625F50000
|
unkown
|
page read and write
|
|
|
|
16B91960000
|
unkown
|
page read and write
|
|
|
|
23626141000
|
unkown
|
page read and write
|
|
|
|
7FF526BB6000
|
unkown
|
page readonly
|
|
|
|
62E0000
|
unkown
|
page read and write
|
|
|
|
18999570000
|
heap default
|
page read and write
|
|
|
|
16B8FB13000
|
unkown
|
page read and write
|
|
|
|
16B8FA29000
|
unkown
|
page read and write
|
|
|
|
19218BB0000
|
unkown
|
page read and write
|
|
|
|
16B91B63000
|
unkown
|
page read and write
|
|
|
|
7FF57FD23000
|
unkown
|
page readonly
|
|
|
|
423957B000
|
unkown
|
page read and write
|
|
|
|
7FF58F34A000
|
unkown
|
page readonly
|
|
|
|
16B91E02000
|
unkown
|
page read and write
|
|
|
|
7FF526BAE000
|
unkown
|
page readonly
|
|
|
|
7FF551F3D000
|
unkown
|
page readonly
|
|
|
|
6220000
|
unkown
|
page readonly
|
|
|
|
7FF526C44000
|
unkown
|
page readonly
|
|
|
|
7FF5703E6000
|
unkown
|
page readonly
|
|
|
|
7FF5DB7B7000
|
unkown
|
page readonly
|
|
|
|
5F9F000
|
unkown
|
page read and write
|
|
|
|
7FF551F36000
|
unkown
|
page readonly
|
|
|
|
25790702000
|
unkown
|
page read and write
|
|
|
|
7FF58F363000
|
unkown
|
page readonly
|
|
|
|
23626152000
|
unkown
|
page read and write
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
EA07FFE000
|
unkown
|
page read and write
|
|
|
|
2D66A9A0000
|
unkown
|
page read and write
|
|
|
|
19213A70000
|
unkown
|
page readonly
|
|
|
|
7FF58CA6E000
|
unkown
|
page readonly
|
|
|
|
1899964D000
|
unkown
|
page read and write
|
|
|
|
420B77B000
|
unkown
|
page read and write
|
|
|
|
420B57F000
|
unkown
|
page read and write
|
|
|
|
16B8FAD4000
|
unkown
|
page read and write
|
|
|
|
236258F9000
|
unkown
|
page read and write
|
|
|
|
19213D13000
|
unkown
|
page read and write
|
|
|
|
2362616D000
|
unkown
|
page read and write
|
|
|
|
30CD000
|
unkown
|
page read and write
|
|
|
|
276A000
|
unkown
|
page readonly
|
|
|
|
42391FB000
|
unkown
|
page read and write
|
|
|
|
7FF58F2B6000
|
unkown
|
page readonly
|
|
|
|
16B918F0000
|
unkown
|
page readonly
|
|
|
|
23625F50000
|
unkown
|
page read and write
|
|
|
|
19218C49000
|
unkown
|
page read and write
|
|
|
|
7FF5A62F2000
|
unkown
|
page readonly
|
|
|
|
7FF526AA0000
|
unkown
|
page readonly
|
|
|
|
23C437D0000
|
unkown
|
page read and write
|
|
|
|
EA0837F000
|
unkown
|
page read and write
|
|
|
|
16B91B00000
|
unkown
|
page read and write
|
|
|
|
2D3F000
|
unkown
|
page read and write
|
|
|
|
26943F7000
|
unkown
|
page read and write
|
|
|
|
18999800000
|
unkown
|
page readonly
|
|
|
|
23625813000
|
unkown
|
page read and write
|
|
|
|
23626200000
|
unkown
|
page readonly
|
|
|
|
20C02270000
|
unkown
|
page read and write
|
|
|
|
16B92410000
|
unkown
|
page read and write
|
|
|
|
16B91B5B000
|
unkown
|
page read and write
|
|
|
|
7FF551EA7000
|
unkown
|
page readonly
|
|
|
|
19218A71000
|
unkown
|
page read and write
|
|
|
|
7FF5DB7BA000
|
unkown
|
page readonly
|
|
|
|
30C1000
|
unkown
|
page read and write
|
|
|
|
7FF532B96000
|
unkown
|
page readonly
|
|
|
|
F55B6F9000
|
unkown
|
page read and write
|
|
|
|
423907A000
|
unkown
|
page read and write
|
|
|
|
7FF58F2C9000
|
unkown
|
page readonly
|
|
|
|
260F000
|
unkown
|
page readonly
|
|
|
|
18999E02000
|
unkown
|
page read and write
|
|
|
|
16B8FB30000
|
unkown
|
page read and write
|
|
|
|
D8FFCFF000
|
unkown
|
page read and write
|
|
|
|
16B91960000
|
unkown
|
page read and write
|
|
|
|
2232A66E000
|
unkown
|
page read and write
|
|
|
|
2423000
|
unkown
|
page readonly
|
|
|
|
18999590000
|
unkown
|
page readonly
|
|
|
|
7FF5DB98A000
|
unkown
|
page readonly
|
|
|
|
2C28000
|
unkown
|
page read and write
|
|
|
|
2D60000
|
unkown
|
page read and write
|
|
|
|
25DB000
|
unkown
|
page readonly
|
|
|
|
6AF1CFB000
|
unkown
|
page read and write
|
|
|
|
282D000
|
unkown
|
page readonly
|
|
|
|
19213390000
|
heap private
|
page read and write
|
|
|
|
7FF58CFCA000
|
unkown
|
page readonly
|
|
|
|
274F000
|
unkown
|
page readonly
|
|
|
|
7FF58CF1A000
|
unkown
|
page readonly
|
|
|
|
25790629000
|
unkown
|
page read and write
|
|
|
|
7FF526C6A000
|
unkown
|
page readonly
|
|
|
|
7FF58F337000
|
unkown
|
page readonly
|
|
|
|
2771000
|
unkown
|
page readonly
|
|
|
|
192138D0000
|
unkown
|
page readonly
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
7FF58B5A1000
|
unkown
|
page readonly
|
|
|
|
23625800000
|
unkown
|
page read and write
|
|
|
|
7FF551FA4000
|
unkown
|
page readonly
|
|
|
|
19218A94000
|
unkown
|
page read and write
|
|
|
|
7FF58B6A2000
|
unkown
|
page readonly
|
|
|
|
231B7D10000
|
unkown
|
page readonly
|
|
|
|
7FF54291B000
|
unkown
|
page readonly
|
|
|
|
16B91D00000
|
unkown
|
page read and write
|
|
|
|
BBE40FB000
|
unkown
|
page read and write
|
|
|
|
7FF52696F000
|
unkown
|
page readonly
|
|
|
|
23C434DF000
|
unkown
|
page read and write
|
|
|
|
2D66AAA0000
|
unkown
|
page readonly
|
|
|
|
23C436A0000
|
unkown
|
page readonly
|
|
|
|
16B91590000
|
unkown
|
page readonly
|
|
|
|
2232A658000
|
unkown
|
page read and write
|
|
|
|
7FF5704A7000
|
unkown
|
page readonly
|
|
|
|
23626154000
|
unkown
|
page read and write
|
|
|
|
23C434E6000
|
unkown
|
page read and write
|
|
|
|
7FF58CF49000
|
unkown
|
page readonly
|
|
|
|
23C43573000
|
unkown
|
page read and write
|
|
|
|
EBF071E000
|
unkown
|
page read and write
|
|
|
|
7FF551BCA000
|
unkown
|
page readonly
|
|
|
|
7FF5A62DD000
|
unkown
|
page readonly
|
|
|
|
2D83000
|
unkown
|
page read and write
|
|
|
|
7FF5DB997000
|
unkown
|
page readonly
|
|
|
|
7FF5A62C1000
|
unkown
|
page readonly
|
|
|
|
EBF069B000
|
unkown
|
page read and write
|
|
|
|
7FF526BD6000
|
unkown
|
page readonly
|
|
|
|
231B7C40000
|
unkown
|
page read and write
|
|
|
|
7FF532B9D000
|
unkown
|
page readonly
|
|
|
|
30E9000
|
unkown
|
page read and write
|
|
|
|
16B91B6F000
|
unkown
|
page read and write
|
|
|
|
23625884000
|
unkown
|
page read and write
|
|
|
|
192133F0000
|
heap default
|
page read and write
|
|
|
|
23C4357C000
|
unkown
|
page read and write
|
|
|
|
27ED000
|
unkown
|
page readonly
|
|
|
|
EEBE97F000
|
unkown
|
page read and write
|
|
|
|
7FF5A5E71000
|
unkown
|
page readonly
|
|
|
|
30CE000
|
unkown
|
page read and write
|
|
|
|
25C8000
|
unkown
|
page readonly
|
|
|
|
23C434ED000
|
unkown
|
page read and write
|
|
|
|
16B8FA78000
|
unkown
|
page read and write
|
|
|
|
7FF532C14000
|
unkown
|
page readonly
|
|
|
|
236258E6000
|
unkown
|
page read and write
|
|
|
|
16B8FB40000
|
unkown
|
page read and write
|
|
|
|
23626602000
|
unkown
|
page read and write
|
|
|
|
7FF58CD54000
|
unkown
|
page readonly
|
|
|
|
261D000
|
unkown
|
page readonly
|
|
|
|
23C43780000
|
unkown
|
page readonly
|
|
|
|
EEBEA7D000
|
unkown
|
page read and write
|
|
|
|
7FF58CF22000
|
unkown
|
page readonly
|
|
|
|
F55B3FE000
|
unkown
|
page read and write
|
|
|
|
18999510000
|
heap private
|
page read and write
|
|
|
|
7FF5DB8E9000
|
unkown
|
page readonly
|
|
|
|
30E9000
|
unkown
|
page read and write
|
|
|
|
16B91CCA000
|
unkown
|
page read and write
|
|
|
|
19213BE3000
|
unkown
|
page read and write
|
|
|
|
7FF526858000
|
unkown
|
page readonly
|
|
|
|
21B0CE20000
|
heap private
|
page read and write
|
|
|
|
7FF58CD6F000
|
unkown
|
page readonly
|
|
|
|
7FF570547000
|
unkown
|
page readonly
|
|
|
|
2C2D000
|
unkown
|
page read and write
|
|
|
|
2362584F000
|
unkown
|
page read and write
|
|
|
|
23C434FA000
|
unkown
|
page read and write
|
|
|
|
23C4354A000
|
unkown
|
page read and write
|
|
|
|
252E000
|
unkown
|
page readonly
|
|
|
|
16B92310000
|
unkown
|
page read and write
|
|
|
|
1899966C000
|
unkown
|
page read and write
|
|
|
|
23625750000
|
unkown
|
page readonly
|
|
|
|
D8FFDFF000
|
unkown
|
page read and write
|
|
|
|
7FF57FCFB000
|
unkown
|
page readonly
|
|
|
|
20C021B0000
|
unkown
|
page readonly
|
|
|
|
2C34000
|
unkown
|
page read and write
|
|
|
|
2232A700000
|
unkown
|
page read and write
|
|
|
|
21B0D002000
|
unkown
|
page read and write
|
|
|
|
EEBE77B000
|
unkown
|
page read and write
|
|
|
|
19218A58000
|
unkown
|
page read and write
|
|
|
|
16B8FAC3000
|
unkown
|
page read and write
|
|
|
|
235E7455000
|
unkown
|
page read and write
|
|
|
|
2362615E000
|
unkown
|
page read and write
|
|
|
|
23C43840000
|
unkown
|
page read and write
|
|
|
|
2362617B000
|
unkown
|
page read and write
|
|
|
|
189998D0000
|
unkown
|
page readonly
|
|
|
|
19213F01000
|
unkown
|
page read and write
|
|
|
|
7FF57FC7D000
|
unkown
|
page readonly
|
|
|
|
423927B000
|
unkown
|
page read and write
|
|
|
|
7FF551D1B000
|
unkown
|
page readonly
|
|
|
|
7FF58CCE9000
|
unkown
|
page readonly
|
|
|
|
7FF5704A5000
|
unkown
|
page readonly
|
|
|
|
20C02313000
|
unkown
|
page read and write
|
|
|
|
420B8FF000
|
unkown
|
page read and write
|
|
|
|
235E743C000
|
unkown
|
page read and write
|
|
|
|
2F40000
|
unkown
|
page readonly
|
|
|
|
192188C0000
|
unkown
|
page read and write
|
|
|
|
192134A1000
|
unkown
|
page read and write
|
|
|
|
D8FFD7F000
|
unkown
|
page read and write
|
|
|
|
16B92110000
|
unkown
|
page read and write
|
|
|
|
7FF57FC56000
|
unkown
|
page readonly
|
|
|
|
7FF57FB48000
|
unkown
|
page readonly
|
|
|
|
420B7FE000
|
unkown
|
page read and write
|
|
|
|
18999713000
|
unkown
|
page read and write
|
|
|
|
235E746F000
|
unkown
|
page read and write
|
|
|
|
7FF57F906000
|
unkown
|
page readonly
|
|
|
|
19218BB0000
|
unkown
|
page read and write
|
|
|
|
20C0223C000
|
unkown
|
page read and write
|
|
|
|
2D668DE0000
|
heap private
|
page read and write
|
|
|
|
23C434FA000
|
unkown
|
page read and write
|
|
|
|
7FF551FAD000
|
unkown
|
page readonly
|
|
|
|
7FF57FC62000
|
unkown
|
page readonly
|
|
|
|
23626180000
|
unkown
|
page read and write
|
|
|
|
7FF58B43A000
|
unkown
|
page readonly
|
|
|
|
16B8FAD2000
|
unkown
|
page read and write
|
|
|
|
16B91C84000
|
unkown
|
page read and write
|
|
|
|
19218CB3000
|
unkown
|
page read and write
|
|
|
|
7FF570354000
|
unkown
|
page readonly
|
|
|
|
23625821000
|
unkown
|
page read and write
|
|
|
|
7FF57FD37000
|
unkown
|
page readonly
|
|
|
|
7FF5A61B6000
|
unkown
|
page readonly
|
|
|
|
16B91C84000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown
|
page readonly
|
|
|
|
7FF5DB900000
|
unkown
|
page readonly
|
|
|
|
6620000
|
unkown
|
page read and write
|
|
|
|
16B8FBB3000
|
unkown
|
page read and write
|
|
|
|
7FF55D1DA000
|
unkown
|
page readonly
|
|
|
|
20C02302000
|
unkown
|
page read and write
|
|
|
|
2362617B000
|
unkown
|
page read and write
|
|
|
|
7FF5704D0000
|
unkown
|
page readonly
|
|
|
|
7FF532BA7000
|
unkown
|
page readonly
|
|
|
|
2D669013000
|
unkown
|
page read and write
|
|
|
|
7FF551D6F000
|
unkown
|
page readonly
|
|
|
|
7FF58CFE6000
|
unkown
|
page readonly
|
|
|
|
30D4000
|
unkown
|
page read and write
|
|
|
|
7FF58CF03000
|
unkown
|
page readonly
|
|
|
|
2B1B000
|
unkown
|
page read and write
|
|
|
|
21B0E9A0000
|
unkown
|
page read and write
|
|
|
|
23626602000
|
unkown
|
page read and write
|
|
|
|
5FA0000
|
unkown
|
page readonly
|
|
|
|
16B91D82000
|
unkown
|
page read and write
|
|
|
|
7FF57FC89000
|
unkown
|
page readonly
|
|
|
|
7FF551FE3000
|
unkown
|
page readonly
|
|
|
|
2BA0000
|
unkown
|
page readonly
|
|
|
|
236261DA000
|
unkown
|
page read and write
|
|
|
|
2848000
|
unkown
|
page readonly
|
|
|
|
235E7502000
|
unkown
|
page read and write
|
|
|
|
23C43498000
|
heap default
|
page read and write
|
|
|
|
A35227E000
|
unkown
|
page read and write
|
|
|
|
7FF526BDD000
|
unkown
|
page readonly
|
|
|
|
7FF58B4B0000
|
unkown
|
page readonly
|
|
|
|
7FF570516000
|
unkown
|
page readonly
|
|
|
|
7FF58CFF2000
|
unkown
|
page readonly
|
|
|
|
7FF53292F000
|
unkown
|
page readonly
|
|
|
|
23C434DD000
|
unkown
|
page read and write
|
|
|
|
19218E00000
|
unkown
|
page readonly
|
|
|
|
7FF58CD3B000
|
unkown
|
page readonly
|
|
|
|
2F80000
|
unkown
|
page readonly
|
|
|
|
7FF58CE00000
|
unkown
|
page readonly
|
|
|
|
231B7BD0000
|
unkown
|
page read and write
|
|
|
|
7FF538357000
|
unkown
|
page readonly
|
|
|
|
16B8FB20000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page read and write
|
|
|
|
236256D0000
|
heap private
|
page read and write
|
|
|
|
7FF532BA9000
|
unkown
|
page readonly
|
|
|
|
236261C1000
|
unkown
|
page read and write
|
|
|
|
16B91490000
|
unkown
|
page read and write
|
|
|
|
7FF5383F6000
|
unkown
|
page readonly
|
|
|
|
23626117000
|
unkown
|
page read and write
|
|
|
|
16B8FBE4000
|
unkown
|
page read and write
|
|
|
|
7FF532B63000
|
unkown
|
page readonly
|
|
|
|
7FF5DBBCA000
|
unkown
|
page readonly
|
|
|
|
2BB0000
|
unkown
|
page readonly
|
|
|
|
2803000
|
unkown
|
page readonly
|
|
|
|
423878B000
|
unkown
|
page read and write
|
|
|
|
7FF5DB8E2000
|
unkown
|
page readonly
|
|
|
|
236261D5000
|
unkown
|
page read and write
|
|
|
|
BBE3E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5DBBA1000
|
unkown
|
page readonly
|
|
|
|
19214360000
|
unkown
|
page read and write
|
|
|
|
BBE3EFE000
|
unkown
|
page read and write
|
|
|
|
19213455000
|
unkown
|
page read and write
|
|
|
|
7FF55DA37000
|
unkown
|
page readonly
|
|
|
|
23C4355A000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB16000
|
unkown
|
page readonly
|
|
|
|
23C434DD000
|
unkown
|
page read and write
|
|
|
|
19213457000
|
unkown
|
page read and write
|
|
|
|
20C02250000
|
unkown
|
page read and write
|
|
|
|
7FF58CF36000
|
unkown
|
page readonly
|
|
|
|
BBE3FF5000
|
unkown
|
page read and write
|
|
|
|
7FF538407000
|
unkown
|
page readonly
|
|
|
|
16B8FB41000
|
unkown
|
page read and write
|
|
|
|
23626137000
|
unkown
|
page read and write
|
|
|
|
2552000
|
unkown
|
page readonly
|
|
|
|
16B92110000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB22000
|
unkown
|
page readonly
|
|
|
|
7FF57FD26000
|
unkown
|
page readonly
|
|
|
|
16B8FB33000
|
unkown
|
page read and write
|
|
|
|
7FF551BC6000
|
unkown
|
page readonly
|
|
|
|
257904C0000
|
heap default
|
page read and write
|
|
|
|
1921348D000
|
unkown
|
page read and write
|
|
|
|
7FF538313000
|
unkown
|
page readonly
|
|
|
|
2565000
|
unkown
|
page readonly
|
|
|
|
EEBE47B000
|
unkown
|
page read and write
|
|
|
|
4238D7A000
|
unkown
|
page read and write
|
|
|
|
231B7C1B000
|
heap default
|
page read and write
|
|
|
|
7FF5DB92E000
|
unkown
|
page readonly
|
|
|
|
7FF5705E3000
|
unkown
|
page readonly
|
|
|
|
7FF58CCCF000
|
unkown
|
page readonly
|
|
|
|
24B6000
|
unkown
|
page readonly
|
|
|
|
7FF58F334000
|
unkown
|
page readonly
|
|
|
|
EA081F8000
|
unkown
|
page read and write
|
|
|
|
19218A50000
|
unkown
|
page read and write
|
|
|
|
7FF5A62EA000
|
unkown
|
page readonly
|
|
|
|
7FF5DBB03000
|
unkown
|
page readonly
|
|
|
|
7FF532447000
|
unkown
|
page readonly
|
|
|
|
231B95A0000
|
unkown
|
page read and write
|
|
|
|
16B91A02000
|
unkown
|
page read and write
|
|
|
|
7FF5517E7000
|
unkown
|
page readonly
|
|
|
|
16B92210000
|
unkown
|
page read and write
|
|
|
|
2775000
|
unkown
|
page readonly
|
|
|
|
4238E79000
|
unkown
|
page read and write
|
|
|
|
7FF58CAD6000
|
unkown
|
page readonly
|
|
|
|
7FF526AA8000
|
unkown
|
page readonly
|
|
|
|
7FF5A639A000
|
unkown
|
page readonly
|
|
|
|
16B8FB72000
|
unkown
|
page read and write
|
|
|
|
7FF5705A4000
|
unkown
|
page readonly
|
|
|
|
7FF57FC4E000
|
unkown
|
page readonly
|
|
|
|
23C43DE0000
|
unkown
|
page readonly
|
|
|
|
7FF58F137000
|
unkown
|
page readonly
|
|
|
|
7FF532C43000
|
unkown
|
page readonly
|
|
|
|
7FF58CD2E000
|
unkown
|
page readonly
|
|
|
|
7FF5DB99F000
|
unkown
|
page readonly
|
|
|
|
2C21000
|
unkown
|
page read and write
|
|
|
|
16B91930000
|
unkown
|
page readonly
|
|
|
|
23626165000
|
unkown
|
page read and write
|
|
|
|
2C00000
|
heap default
|
page read and write
|
|
|
|
7FF532C17000
|
unkown
|
page readonly
|
|
|
|
7FF58CFA7000
|
unkown
|
page readonly
|
|
|
|
18999600000
|
unkown
|
page read and write
|
|
|
|
7FF532C46000
|
unkown
|
page readonly
|
|
|
|
23C43A50000
|
unkown
|
page readonly
|
|
|
|
231B7C27000
|
heap default
|
page read and write
|
|
|
|
23626180000
|
unkown
|
page read and write
|
|
|
|
20C02070000
|
heap private
|
page read and write
|
|
|
|
7FF58CFB4000
|
unkown
|
page readonly
|
|
|
|
19218B60000
|
unkown
|
page read and write
|
|
|
|
7FF58CDE6000
|
unkown
|
page readonly
|
|
|
|
23626800000
|
unkown
|
page readonly
|
|
|
|
7FF58F2BD000
|
unkown
|
page readonly
|
|
|
|
30CD000
|
unkown
|
page read and write
|
|
|
|
7FF551F16000
|
unkown
|
page readonly
|
|
|
|
277B000
|
unkown
|
page readonly
|
|
|
|
19218A50000
|
unkown
|
page read and write
|
|
|
|
7FF5DBAEF000
|
unkown
|
page readonly
|
|
|
|
19218C63000
|
unkown
|
page read and write
|
|
|
|
7FF5DB76C000
|
unkown
|
page readonly
|
|
|
|
7FF58CF3D000
|
unkown
|
page readonly
|
|
|
|
7FF526C4D000
|
unkown
|
page readonly
|
|
|
|
2223000
|
unkown
|
page readonly
|
|
|
|
19213BE0000
|
unkown
|
page read and write
|
|
|
|
281F000
|
unkown
|
page readonly
|
|
|
|
2362616D000
|
unkown
|
page read and write
|
|
|
|
28CA000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB36000
|
unkown
|
page readonly
|
|
|
|
7FF5DB5AF000
|
unkown
|
page readonly
|
|
|
|
7FF5A62E6000
|
unkown
|
page readonly
|
|
|
|
7FF526C97000
|
unkown
|
page readonly
|
|
|
|
23C437D0000
|
unkown
|
page read and write
|
|
|
|
7FF58EFE1000
|
unkown
|
page readonly
|
|
|
|
7FF5DBAFF000
|
unkown
|
page readonly
|
|
|
|
19218A74000
|
unkown
|
page read and write
|
|
|
|
19213502000
|
unkown
|
page read and write
|
|
|
|
7FF526C86000
|
unkown
|
page readonly
|
|
|
|
F77C0FB000
|
unkown
|
page read and write
|
|
|
|
7FF57050D000
|
unkown
|
page readonly
|
|
|
|
7FF570475000
|
unkown
|
page readonly
|
|
|
|
7FF57FAAF000
|
unkown
|
page readonly
|
|
|
|
7FF5383DA000
|
unkown
|
page readonly
|
|
|
|
7FF57039F000
|
unkown
|
page readonly
|
|
|
|
23626654000
|
unkown
|
page read and write
|
|
|
|
23626186000
|
unkown
|
page read and write
|
|
|
|
19218A80000
|
unkown
|
page read and write
|
|
|
|
7FF58F327000
|
unkown
|
page readonly
|
|
|
|
16B8FA54000
|
unkown
|
page read and write
|
|
|
|
7FF58B651000
|
unkown
|
page readonly
|
|
|
|
7FF5DB9C7000
|
unkown
|
page readonly
|
|
|
|
7FF5A61D5000
|
unkown
|
page readonly
|
|
|
|
3250000
|
heap private
|
page read and write
|
|
|
|
25DD000
|
unkown
|
page readonly
|
|
|
|
23C4355A000
|
unkown
|
page read and write
|
|
|
|
7FF55DA3B000
|
unkown
|
page readonly
|
|
|
|
21B0CE80000
|
heap default
|
page read and write
|
|
|
|
7FF53297B000
|
unkown
|
page readonly
|
|
|
|
23626173000
|
unkown
|
page read and write
|
|
|
|
7FF5DBAD9000
|
unkown
|
page readonly
|
|
|
|
19218A90000
|
unkown
|
page read and write
|
|
|
|
2F30000
|
unkown
|
page readonly
|
|
|
|
7FF5A6371000
|
unkown
|
page readonly
|
|
|
|
4238DFE000
|
unkown
|
page read and write
|
|
|
|
18999702000
|
unkown
|
page read and write
|
|
|
|
25C5000
|
unkown
|
page readonly
|
|
|
|
7FF58B5F7000
|
unkown
|
page readonly
|
|
|
|
2232A850000
|
unkown
|
page readonly
|
|
|
|
2232A500000
|
unkown
|
page readonly
|
|
|
|
7FF5705CA000
|
unkown
|
page readonly
|
|
|
|
257920B0000
|
unkown
|
page readonly
|
|
|
|
D8FFC7A000
|
unkown
|
page read and write
|
|
|
|
16B8FABF000
|
unkown
|
page read and write
|
|
|
|
7FF58B664000
|
unkown
|
page readonly
|
|
|
|
25B1000
|
unkown
|
page readonly
|
|
|
|
235E7300000
|
unkown
|
page readonly
|
|
|
|
7FF5DB779000
|
unkown
|
page readonly
|
|
|
|
20C02400000
|
unkown
|
page readonly
|
|
|
|
7FF57F8F8000
|
unkown
|
page readonly
|
|
|
|
2362589E000
|
unkown
|
page read and write
|
|
|
|
23625F50000
|
unkown
|
page read and write
|
|
|
|
7FF5A62BF000
|
unkown
|
page readonly
|
|
|
|
16B91B49000
|
unkown
|
page read and write
|
|
|
|
20C02200000
|
unkown
|
page read and write
|
|
|
|
7FF551FF2000
|
unkown
|
page readonly
|
|
|
|
7FF5A6245000
|
unkown
|
page readonly
|
|
|
|
3254000
|
heap private
|
page read and write
|
|
|
|
2417000
|
unkown
|
page readonly
|
|
|
|
16B91CC7000
|
unkown
|
page read and write
|
|
|
|
7FF58F29A000
|
unkown
|
page readonly
|
|
|
|
23626157000
|
unkown
|
page read and write
|
|
|
|
269407E000
|
unkown
|
page read and write
|
|
|
|
7FF526BBA000
|
unkown
|
page readonly
|
|
|
|
23626186000
|
unkown
|
page read and write
|
|
|
|
19213BF0000
|
unkown
|
page read and write
|
|
|
|
7FF532A46000
|
unkown
|
page readonly
|
|
|
|
7FF5DBAD0000
|
unkown
|
page readonly
|
|
|
|
2D668E40000
|
heap default
|
page read and write
|
|
|
|
23C434DD000
|
unkown
|
page read and write
|
|
|
|
7FF5383C4000
|
unkown
|
page readonly
|
|
|
|
7FF5DBAE4000
|
unkown
|
page readonly
|
|
|
|
23626154000
|
unkown
|
page read and write
|
|
|
|
7FF58B59F000
|
unkown
|
page readonly
|
|
|
|
7FF58CD8A000
|
unkown
|
page readonly
|
|
|
|
7FF57FCE7000
|
unkown
|
page readonly
|
|
|
|
7FF5A6387000
|
unkown
|
page readonly
|
|
|
|
30AA000
|
heap default
|
page read and write
|
|
|
|
420B0FD000
|
unkown
|
page read and write
|
|
|
|
7FF570536000
|
unkown
|
page readonly
|
|
|
|
7FF5383BD000
|
unkown
|
page readonly
|
|
|
|
16B92010000
|
unkown
|
page read and write
|
|
|
|
332A000
|
heap private
|
page read and write
|
|
|
|
16B91BEC000
|
unkown
|
page read and write
|
|
|
|
7FF5705A7000
|
unkown
|
page readonly
|
|
|
|
EA07CFE000
|
unkown
|
page read and write
|
|
|
|
19213D18000
|
unkown
|
page read and write
|
|
|
|
1921348A000
|
unkown
|
page read and write
|
|
|
|
235E73F0000
|
unkown
|
page read and write
|
|
|
|
253F000
|
unkown
|
page readonly
|
|
|
|
7FF551E00000
|
unkown
|
page readonly
|
|
|
|
4238F7C000
|
unkown
|
page read and write
|
|
|
|
7FF5A6208000
|
unkown
|
page readonly
|
|
|
|
7FF58B4E8000
|
unkown
|
page readonly
|
|
|
|
1921348F000
|
unkown
|
page read and write
|
|
|
|
7FF53831E000
|
unkown
|
page readonly
|
|
|
|
2D77000
|
heap private
|
page read and write
|
|
|
|
19213C00000
|
unkown
|
page read and write
|
|
|
|
7FF5A5B02000
|
unkown
|
page readonly
|
|
|
|
16B8FA82000
|
unkown
|
page read and write
|
|
|
|
2232A66C000
|
unkown
|
page read and write
|
|
|
|
255A000
|
unkown
|
page readonly
|
|
|
|
7FF57F90A000
|
unkown
|
page readonly
|
|
|
|
7FF5DBAC7000
|
unkown
|
page readonly
|
|
|
|
16B8FBA2000
|
unkown
|
page read and write
|
|
|
|
7FF58CEC7000
|
unkown
|
page readonly
|
|
|
|
7FF526A86000
|
unkown
|
page readonly
|
|
|
|
7FF58B467000
|
unkown
|
page readonly
|
|
|
|
7FF55D7FC000
|
unkown
|
page readonly
|
|
|
|
23C44137000
|
unkown
|
page read and write
|
|
|
|
7FF532B7A000
|
unkown
|
page readonly
|
|
|
|
2D668E50000
|
unkown
|
page readonly
|
|
|
|
2232A5D0000
|
unkown
|
page readonly
|
|
|
|
A352179000
|
unkown
|
page read and write
|
|
|
|
7FF532C57000
|
unkown
|
page readonly
|
|
|
|
192136D0000
|
unkown
|
page readonly
|
|
|
|
2232A713000
|
unkown
|
page read and write
|
|
|
|
7FF55D281000
|
unkown
|
page readonly
|
|
|
|
7FF58B5C6000
|
unkown
|
page readonly
|
|
|
|
26944FE000
|
unkown
|
page read and write
|
|
|
|
2362615A000
|
unkown
|
page read and write
|
|
|
|
7FF5DB5A8000
|
unkown
|
page readonly
|
|
|
|
7FF5A6374000
|
unkown
|
page readonly
|
|
|
|
7FF5DBBE3000
|
unkown
|
page readonly
|
|
|
|
30D7000
|
unkown
|
page read and write
|
|
|
|
25790700000
|
unkown
|
page read and write
|
|
|
|
2D668F20000
|
unkown
|
page write copy
|
|
|
|
7FF5A615A000
|
unkown
|
page readonly
|
|
|
|
23626154000
|
unkown
|
page read and write
|
|
|
|
16B91D45000
|
unkown
|
page read and write
|
|
|
|
23626002000
|
unkown
|
page read and write
|
|
|
|
257904D0000
|
unkown
|
page readonly
|
|
|
|
7FF5DB3BF000
|
unkown
|
page readonly
|
|
|
|
2232A66B000
|
unkown
|
page read and write
|
|
|
|
4238EFA000
|
unkown
|
page read and write
|
|
|
|
16B91CD6000
|
unkown
|
page read and write
|
|
|
|
2F60000
|
unkown
|
page read and write
|
|
|
|
7FF570522000
|
unkown
|
page readonly
|
|
|
|
4238C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A638B000
|
unkown
|
page readonly
|
|
|
|
16B91BF3000
|
unkown
|
page read and write
|
|
|
|
7FF58CE38000
|
unkown
|
page readonly
|
|
|
|
23626152000
|
unkown
|
page read and write
|
|
|
|
16B8FB33000
|
unkown
|
page read and write
|
|
|
|
EBF0B7E000
|
unkown
|
page read and write
|
|
|
|
19213B50000
|
unkown
|
page read and write
|
|
|
|
7FF532B82000
|
unkown
|
page readonly
|
|
|
|
23626100000
|
unkown
|
page read and write
|
|
|
|
22A6000
|
unkown
|
page readonly
|
|
|
|
7FF570405000
|
unkown
|
page readonly
|
|
|
|
19214570000
|
unkown
|
page readonly
|
|
|
|
16B92010000
|
unkown
|
page read and write
|
|
|
|
7FF5A61D8000
|
unkown
|
page readonly
|
|
|
|
23C44120000
|
unkown
|
page read and write
|
|
|
|
2C34000
|
unkown
|
page read and write
|
|
|
|
2C37000
|
unkown
|
page read and write
|
|
|
|
7FF53834D000
|
unkown
|
page readonly
|
|
|
|
4238AFF000
|
unkown
|
page read and write
|
|
|
|
236261B6000
|
unkown
|
page read and write
|
|
|
|
23C43510000
|
unkown
|
page read and write
|
|
|
|
7FF5DBB0D000
|
unkown
|
page readonly
|
|
|
|
7FF526487000
|
unkown
|
page readonly
|
|
|
|
7FF5383B1000
|
unkown
|
page readonly
|
|
|
|
2232A800000
|
unkown
|
page write copy
|
|
|
|
2C25000
|
unkown
|
page read and write
|
|
|
|
19218B54000
|
unkown
|
page write copy
|
|
|
|
16B8FAC3000
|
unkown
|
page read and write
|
|
|
|
2232BFF0000
|
unkown
|
page read and write
|
|
|
|
7FF58CED9000
|
unkown
|
page readonly
|
|
|
|
25790653000
|
unkown
|
page read and write
|
|
|
|
236258EA000
|
unkown
|
page read and write
|
|
|
|
18999689000
|
unkown
|
page read and write
|
|
|
|
7FF54291B000
|
unkown
|
page readonly
|
|
|
|
7FF58CBB8000
|
unkown
|
page readonly
|
|
|
|
7FF532826000
|
unkown
|
page readonly
|
|
|
|
16B91BCC000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
unkown
|
page read and write
|
|
|
|
16B91B07000
|
unkown
|
page read and write
|
|
|
|
7FF532B05000
|
unkown
|
page readonly
|
|
|
|
2C2D000
|
unkown
|
page read and write
|
|
|
|
23C4353B000
|
unkown
|
page read and write
|
|
|
|
7FF55DA24000
|
unkown
|
page readonly
|
|
|
|
7FF5DB31C000
|
unkown
|
page readonly
|
|
|
|
16B91C84000
|
unkown
|
page read and write
|
|
|
|
25FE000
|
unkown
|
page readonly
|
|
|
|
21B0D102000
|
unkown
|
page read and write
|
|
|
|
4238BFB000
|
unkown
|
page read and write
|
|
|
|
19218B48000
|
unkown
|
page write copy
|
|
|
|
236258B7000
|
unkown
|
page read and write
|
|
|
|
7FF58F377000
|
unkown
|
page readonly
|
|
|
|
26941FE000
|
unkown
|
page read and write
|
|
|
|
19213B60000
|
unkown
|
page read and write
|
|
|
|
16B91CC4000
|
unkown
|
page read and write
|
|
|
|
7FF5DB8A3000
|
unkown
|
page readonly
|
|
|
|
21B0D000000
|
unkown
|
page read and write
|
|
|
|
23C43830000
|
heap private
|
page read and write
|
|
|
|
23C443E0000
|
unkown
|
page read and write
|
|
|
|
16B91B52000
|
unkown
|
page read and write
|
|
|
|
7FF58CEF1000
|
unkown
|
page readonly
|
|
|
|
1921349F000
|
unkown
|
page read and write
|
|
|
|
23625F60000
|
unkown
|
page read and write
|
|
|
|
2D669000000
|
unkown
|
page read and write
|
|
|
|
23625AD0000
|
unkown
|
page readonly
|
|
|
|
7FF58CE31000
|
unkown
|
page readonly
|
|
|
|
7FF532B5F000
|
unkown
|
page readonly
|
|
|
|
18999580000
|
unkown
|
page readonly
|
|
|
|
19213477000
|
unkown
|
page read and write
|
|
|
|
7FF532C07000
|
unkown
|
page readonly
|
|
|
|
659E000
|
unkown
|
page read and write
|
|
|
|
19214550000
|
unkown
|
page readonly
|
|
|
|
7FF5DB8B8000
|
unkown
|
page readonly
|
|
|
|
16B92210000
|
unkown
|
page read and write
|
|
|
|
23626178000
|
unkown
|
page read and write
|
|
|
|
5E80000
|
unkown
|
page read and write
|
|
|
|
2362611F000
|
unkown
|
page read and write
|
|
|
|
23C43590000
|
unkown
|
page readonly
|
|
|
|
19213429000
|
unkown
|
page read and write
|
|
|
|
23626152000
|
unkown
|
page read and write
|
|
|
|
23626182000
|
unkown
|
page read and write
|
|
|
|
16B92310000
|
unkown
|
page read and write
|
|
|
|
19218BB0000
|
unkown
|
page read and write
|
|
|
|
7FF58B5AF000
|
unkown
|
page readonly
|
|
|
|
7FF58CCE2000
|
unkown
|
page readonly
|
|
|
|
7FF58EE21000
|
unkown
|
page readonly
|
|
|
|
7FF57FB26000
|
unkown
|
page readonly
|
|
|
|
19218900000
|
unkown
|
page readonly
|
|
|
|
F55B7FA000
|
unkown
|
page read and write
|
|
|
|
23C437D0000
|
unkown
|
page read and write
|
|
|
|
231B7BB0000
|
unkown
|
page read and write
|
|
|
|
7FF5A61D0000
|
unkown
|
page readonly
|
|
|
|
19218B4C000
|
unkown
|
page readonly
|
|
|
|
231B7C38000
|
unkown
|
page read and write
|
|
|
|
7FF58B66B000
|
unkown
|
page readonly
|
|
|
|
7FF526965000
|
unkown
|
page readonly
|
|
|
|
7FF58B654000
|
unkown
|
page readonly
|
|
|
|
25791FB0000
|
unkown
|
page read and write
|
|
|
|
273E000
|
unkown
|
page readonly
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
23C43430000
|
unkown
|
page read and write
|
|
|
|
19213413000
|
unkown
|
page read and write
|
|
|
|
7FF5704F1000
|
unkown
|
page readonly
|
|
|
|
235E744D000
|
unkown
|
page read and write
|
|
|
|
7FF5DBA61000
|
unkown
|
page readonly
|
|
|
|
7FF526C83000
|
unkown
|
page readonly
|
|
|
|
16B92110000
|
unkown
|
page read and write
|
|
|
|
30CD000
|
unkown
|
page read and write
|
|
|
|
16B918E0000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
18999629000
|
unkown
|
page read and write
|
|
|
|
EBF0AFA000
|
unkown
|
page read and write
|
|
|
|
235E7F40000
|
unkown
|
page readonly
|
|
|
|
19214560000
|
unkown
|
page readonly
|
|
|
|
2362611F000
|
unkown
|
page read and write
|
|
|
|
EA08778000
|
unkown
|
page read and write
|
|
|
|
2C31000
|
unkown
|
page read and write
|
|
|
|
2362615C000
|
unkown
|
page read and write
|
|
|
|
16B91BF0000
|
unkown
|
page read and write
|
|
|
|
23C43510000
|
unkown
|
page read and write
|
|
|
|
2232C0F0000
|
unkown
|
page readonly
|
|
|
|
20C02249000
|
unkown
|
page read and write
|
|
|
|
7FF55D996000
|
unkown
|
page readonly
|
|
|
|
7FF5A6306000
|
unkown
|
page readonly
|
|
|
|
7FF57038A000
|
unkown
|
page readonly
|
|
|
|
19218A80000
|
unkown
|
page read and write
|
|
|
|
7FF5DBAB8000
|
unkown
|
page readonly
|
|
|
|
23C44370000
|
unkown
|
page readonly
|
|
|
|
16B91900000
|
heap private
|
page read and write
|
|
|
|
EEBE4FE000
|
unkown
|
page read and write
|
|
|
|
7FF5A6377000
|
unkown
|
page readonly
|
|
|
|
7FF55D888000
|
unkown
|
page readonly
|
|
|
|
7FF5705AD000
|
unkown
|
page readonly
|
|
|
|
236261BC000
|
unkown
|
page read and write
|
|
|
|
16B8FCD0000
|
unkown
|
page readonly
|
|
|
|
7FF551F0E000
|
unkown
|
page readonly
|
|
|
|
7FF58F32D000
|
unkown
|
page readonly
|
|
|
|
7FF5383B4000
|
unkown
|
page readonly
|
|
|
|
2633000
|
unkown
|
page readonly
|
|
|
|
2C49000
|
unkown
|
page read and write
|
|
|
|
16B91960000
|
unkown
|
page read and write
|
|
|
|
19218EB0000
|
unkown
|
page readonly
|
|
|
|
7FF5A63B3000
|
unkown
|
page readonly
|
|
|
|
16B8FBA4000
|
unkown
|
page read and write
|
|
|
|
7FF5700A1000
|
unkown
|
page readonly
|
|
|
|
23625F70000
|
unkown
|
page readonly
|
|
|
|
7FF58F10A000
|
unkown
|
page readonly
|
|
|
|
231B7C4E000
|
unkown
|
page read and write
|
|
|
|
235E7500000
|
unkown
|
page read and write
|
|
|
|
7FF55D1E2000
|
unkown
|
page readonly
|
|
|
|
7FF5DBAD4000
|
unkown
|
page readonly
|
|
|
|
4238A7E000
|
unkown
|
page read and write
|
|
|
|
7FF551FCA000
|
unkown
|
page readonly
|
|
|
|
7FF58CEEF000
|
unkown
|
page readonly
|
|
|
|
2232A668000
|
unkown
|
page read and write
|
|
|
|
F77C17F000
|
unkown
|
page read and write
|
|
|
|
23625790000
|
unkown
|
page readonly
|
|
|
|
7FF551E08000
|
unkown
|
page readonly
|
|
There are 1352 hidden memdumps, click here to show them.