Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
8100c344_by_Libranalysis.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: van-van, Last Saved
By: vi-vi, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date:
Wed May 12 08:24:11 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\BFE22172-59BF-4A95-AA18-3650190CBF48
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\55D40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\8100c344_by_Libranalysis.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:56
2020, mtime=Wed May 12 11:17:37 2021, atime=Wed May 12 11:17:37 2021, length=177152, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Wed May 12 11:17:36 2021, atime=Wed May 12 11:17:36 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\56D40000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 59863 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\230F0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabEF0.tmp
|
Microsoft Cabinet archive data, 59863 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarEF1.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\640F0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
There are 6 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\ritofm.cvm,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\ritofm.cvm1,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\ritofm.cvm,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\ritofm.cvm1,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
signifysystem.com
|
192.185.39.58
|
|
|
|
fcventasyservicios.cl
|
192.185.32.232
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.39.58
|
signifysystem.com
|
United States
|
|
|
|
192.185.32.232
|
fcventasyservicios.cl
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
,x?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
-x?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C9A6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D0DA
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D2CE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D464
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D5BC
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4D752
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
kp?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
63A0F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
6401A
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
<a8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EFD24
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F00AC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F01D5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F02CE
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F03F7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F051F
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
im8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
117D6A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
118C77
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 176 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF4F466F000
|
unkown
|
page readonly
|
|
|
|
90591FE000
|
unkown
|
page read and write
|
|
|
|
1D73B629000
|
unkown
|
page read and write
|
|
|
|
1B881468000
|
unkown
|
page read and write
|
|
|
|
7AD14FB000
|
unkown
|
page read and write
|
|
|
|
7FF57EB3C000
|
unkown
|
page readonly
|
|
|
|
17626CA0000
|
unkown
|
page readonly
|
|
|
|
1B881429000
|
unkown
|
page read and write
|
|
|
|
7FF4F49FE000
|
unkown
|
page readonly
|
|
|
|
7FF58BA04000
|
unkown
|
page readonly
|
|
|
|
7FF4FE13A000
|
unkown
|
page readonly
|
|
|
|
241E2F36000
|
unkown
|
page read and write
|
|
|
|
7FF57EC41000
|
unkown
|
page readonly
|
|
|
|
1A2B1C00000
|
unkown
|
page read and write
|
|
|
|
19648C29000
|
unkown
|
page read and write
|
|
|
|
7FF5C4FB5000
|
unkown
|
page readonly
|
|
|
|
2BB0000
|
unkown
|
page readonly
|
|
|
|
1A2B1B70000
|
unkown
|
page readonly
|
|
|
|
30EA000
|
heap private
|
page read and write
|
|
|
|
241E2DA0000
|
unkown
|
page read and write
|
|
|
|
7FF57E470000
|
unkown
|
page readonly
|
|
|
|
2F60000
|
unkown
|
page read and write
|
|
|
|
7FF54FBB3000
|
unkown
|
page readonly
|
|
|
|
1F5BEBA2000
|
unkown
|
page read and write
|
|
|
|
7FF54FCD6000
|
unkown
|
page readonly
|
|
|
|
7FF5BBDB3000
|
unkown
|
page readonly
|
|
|
|
22C7306F000
|
unkown
|
page read and write
|
|
|
|
2812000
|
unkown
|
page readonly
|
|
|
|
7FF58B9BE000
|
unkown
|
page readonly
|
|
|
|
84875DE000
|
unkown
|
page read and write
|
|
|
|
1F5BEAF8000
|
unkown
|
page read and write
|
|
|
|
3189000
|
unkown
|
page read and write
|
|
|
|
241E2D80000
|
unkown
|
page readonly
|
|
|
|
205AC902000
|
unkown
|
page read and write
|
|
|
|
7FF560A41000
|
unkown
|
page readonly
|
|
|
|
1A2B1ED0000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE44000
|
unkown
|
page readonly
|
|
|
|
7FF58B9C5000
|
unkown
|
page readonly
|
|
|
|
241E3600000
|
unkown
|
page readonly
|
|
|
|
19648BA0000
|
unkown
|
page write copy
|
|
|
|
56D37FE000
|
unkown
|
page read and write
|
|
|
|
1F5BE9D0000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown
|
page readonly
|
|
|
|
7FF4FDEAB000
|
unkown
|
page readonly
|
|
|
|
7FF54FD44000
|
unkown
|
page readonly
|
|
|
|
3499000
|
unkown
|
page read and write
|
|
|
|
1F5C1210000
|
unkown
|
page read and write
|
|
|
|
1D73B400000
|
heap private
|
page read and write
|
|
|
|
7FF560B46000
|
unkown
|
page readonly
|
|
|
|
7FF54FB03000
|
unkown
|
page readonly
|
|
|
|
2804000
|
unkown
|
page readonly
|
|
|
|
86CCB7A000
|
unkown
|
page read and write
|
|
|
|
7FF560BA2000
|
unkown
|
page readonly
|
|
|
|
19648C3F000
|
unkown
|
page read and write
|
|
|
|
214F3FE000
|
unkown
|
page read and write
|
|
|
|
7FF5BCE76000
|
unkown
|
page readonly
|
|
|
|
7FF4FE0FB000
|
unkown
|
page readonly
|
|
|
|
7FF538D9A000
|
unkown
|
page readonly
|
|
|
|
1F5C09DF000
|
unkown
|
page read and write
|
|
|
|
84874DB000
|
unkown
|
page read and write
|
|
|
|
7FF5BCE17000
|
unkown
|
page readonly
|
|
|
|
7FF57E725000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
1F5C2042000
|
unkown
|
page read and write
|
|
|
|
7FF4FE1D4000
|
unkown
|
page readonly
|
|
|
|
205AA902000
|
unkown
|
page read and write
|
|
|
|
2B67000
|
unkown
|
page readonly
|
|
|
|
1B881500000
|
unkown
|
page read and write
|
|
|
|
7FF57EBCD000
|
unkown
|
page readonly
|
|
|
|
1D73B713000
|
unkown
|
page read and write
|
|
|
|
7FF5BBEBB000
|
unkown
|
page readonly
|
|
|
|
7FF5C48B1000
|
unkown
|
page readonly
|
|
|
|
56D367B000
|
unkown
|
page read and write
|
|
|
|
22C73013000
|
unkown
|
page read and write
|
|
|
|
7FF560BC3000
|
unkown
|
page readonly
|
|
|
|
1F5C1110000
|
unkown
|
page read and write
|
|
|
|
9058FF9000
|
unkown
|
page read and write
|
|
|
|
241E2F22000
|
unkown
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
7FF5BCE5F000
|
unkown
|
page readonly
|
|
|
|
6210000
|
unkown
|
page readonly
|
|
|
|
7FF5BD221000
|
unkown
|
page readonly
|
|
|
|
2E00000
|
unkown
|
page readonly
|
|
|
|
240C7DB0000
|
heap default
|
page read and write
|
|
|
|
2B90000
|
unkown
|
page read and write
|
|
|
|
205AC91E000
|
unkown
|
page read and write
|
|
|
|
7FF5BBFA1000
|
unkown
|
page readonly
|
|
|
|
7FF5BCCAA000
|
unkown
|
page readonly
|
|
|
|
24B45130000
|
unkown
|
page read and write
|
|
|
|
7FF5BD3A2000
|
unkown
|
page readonly
|
|
|
|
19648C56000
|
unkown
|
page read and write
|
|
|
|
3700000
|
heap private
|
page read and write
|
|
|
|
7FF5BCBBB000
|
unkown
|
page readonly
|
|
|
|
7FF57EA4B000
|
unkown
|
page readonly
|
|
|
|
241E2DB0000
|
unkown
|
page read and write
|
|
|
|
7FF5BD3CB000
|
unkown
|
page readonly
|
|
|
|
214F27D000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF29000
|
unkown
|
page readonly
|
|
|
|
7FF5BCC34000
|
unkown
|
page readonly
|
|
|
|
3707000
|
heap private
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
17626C90000
|
heap private
|
page read and write
|
|
|
|
22C74F30000
|
unkown
|
page read and write
|
|
|
|
347A000
|
unkown
|
page read and write
|
|
|
|
7FF54FC8F000
|
unkown
|
page readonly
|
|
|
|
280F000
|
unkown
|
page readonly
|
|
|
|
7FF57EA31000
|
unkown
|
page readonly
|
|
|
|
205AC760000
|
unkown
|
page readonly
|
|
|
|
7FF538DE4000
|
unkown
|
page readonly
|
|
|
|
2D2D000
|
unkown
|
page read and write
|
|
|
|
241E26A6000
|
unkown
|
page read and write
|
|
|
|
7FF5608BC000
|
unkown
|
page readonly
|
|
|
|
7FF57EB7C000
|
unkown
|
page readonly
|
|
|
|
1F5C1410000
|
unkown
|
page read and write
|
|
|
|
7FF5BD444000
|
unkown
|
page readonly
|
|
|
|
24B44A4E000
|
unkown
|
page read and write
|
|
|
|
1F5C0900000
|
unkown
|
page read and write
|
|
|
|
311D000
|
unkown
|
page read and write
|
|
|
|
7FF5BCC5D000
|
unkown
|
page readonly
|
|
|
|
24B44B08000
|
unkown
|
page read and write
|
|
|
|
2B35000
|
unkown
|
page readonly
|
|
|
|
D986BF9000
|
unkown
|
page read and write
|
|
|
|
3F947FE000
|
unkown
|
page read and write
|
|
|
|
1D73B66E000
|
unkown
|
page read and write
|
|
|
|
241E2F13000
|
unkown
|
page read and write
|
|
|
|
1F5BEACA000
|
unkown
|
page read and write
|
|
|
|
1B88146A000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF21000
|
unkown
|
page readonly
|
|
|
|
7FF5C4D8F000
|
unkown
|
page readonly
|
|
|
|
1A2B1E00000
|
unkown
|
page readonly
|
|
|
|
7FF560C79000
|
unkown
|
page readonly
|
|
|
|
7FF5C4FF4000
|
unkown
|
page readonly
|
|
|
|
7FF560BFA000
|
unkown
|
page readonly
|
|
|
|
7FF54FCA4000
|
unkown
|
page readonly
|
|
|
|
214F37F000
|
unkown
|
page read and write
|
|
|
|
7FF58B9CB000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE0B000
|
unkown
|
page readonly
|
|
|
|
7FF54FCB4000
|
unkown
|
page readonly
|
|
|
|
22C74F30000
|
unkown
|
page read and write
|
|
|
|
64AE000
|
unkown
|
page read and write
|
|
|
|
86CC7FB000
|
unkown
|
page read and write
|
|
|
|
7FF5C5004000
|
unkown
|
page readonly
|
|
|
|
7FF54FCC8000
|
unkown
|
page readonly
|
|
|
|
8487879000
|
unkown
|
page read and write
|
|
|
|
277D000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE54000
|
unkown
|
page readonly
|
|
|
|
7FF5BCDCB000
|
unkown
|
page readonly
|
|
|
|
2F1B000
|
unkown
|
page read and write
|
|
|
|
9058F7F000
|
unkown
|
page read and write
|
|
|
|
2B3C000
|
unkown
|
page readonly
|
|
|
|
7FF5BD308000
|
unkown
|
page readonly
|
|
|
|
7FF5BBD09000
|
unkown
|
page readonly
|
|
|
|
2823000
|
unkown
|
page readonly
|
|
|
|
22C75187000
|
unkown
|
page read and write
|
|
|
|
1D73B550000
|
unkown
|
page readonly
|
|
|
|
7FF4F47C1000
|
unkown
|
page readonly
|
|
|
|
1D73B650000
|
unkown
|
page read and write
|
|
|
|
7FF58BA3D000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
27F1000
|
unkown
|
page readonly
|
|
|
|
1F5C0E82000
|
unkown
|
page read and write
|
|
|
|
2730000
|
unkown
|
page readonly
|
|
|
|
7FF560A21000
|
unkown
|
page readonly
|
|
|
|
7FF57EB9A000
|
unkown
|
page readonly
|
|
|
|
7FF53187A000
|
unkown
|
page readonly
|
|
|
|
861197B000
|
unkown
|
page read and write
|
|
|
|
19648AD0000
|
unkown
|
page readonly
|
|
|
|
2B43000
|
unkown
|
page readonly
|
|
|
|
1D73B64D000
|
unkown
|
page read and write
|
|
|
|
241E2FD4000
|
unkown
|
page read and write
|
|
|
|
241E3403000
|
unkown
|
page read and write
|
|
|
|
7FF54FD51000
|
unkown
|
page readonly
|
|
|
|
64E0000
|
unkown
|
page readonly
|
|
|
|
7FF560A25000
|
unkown
|
page readonly
|
|
|
|
1F5C1710000
|
unkown
|
page read and write
|
|
|
|
1F5BEAA6000
|
unkown
|
page read and write
|
|
|
|
7FF560C68000
|
unkown
|
page readonly
|
|
|
|
1F5BEA5C000
|
unkown
|
page read and write
|
|
|
|
7FF4FDF49000
|
unkown
|
page readonly
|
|
|
|
7FF58B21D000
|
unkown
|
page readonly
|
|
|
|
7FF5BD251000
|
unkown
|
page readonly
|
|
|
|
240C99C0000
|
unkown
|
page readonly
|
|
|
|
31A9000
|
unkown
|
page read and write
|
|
|
|
241E2F6A000
|
unkown
|
page read and write
|
|
|
|
7FF58B983000
|
unkown
|
page readonly
|
|
|
|
7FF5BCDD4000
|
unkown
|
page readonly
|
|
|
|
22C730DA000
|
unkown
|
page read and write
|
|
|
|
1F5C1310000
|
unkown
|
page read and write
|
|
|
|
24B44A58000
|
unkown
|
page read and write
|
|
|
|
241E2F6A000
|
unkown
|
page read and write
|
|
|
|
7FF57EB5B000
|
unkown
|
page readonly
|
|
|
|
7FF560C05000
|
unkown
|
page readonly
|
|
|
|
6610000
|
unkown
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
1F5BEA13000
|
unkown
|
page read and write
|
|
|
|
241E2F5A000
|
unkown
|
page read and write
|
|
|
|
241E2FD4000
|
unkown
|
page read and write
|
|
|
|
7FF4FE11F000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
7FF531874000
|
unkown
|
page readonly
|
|
|
|
7FF5BD303000
|
unkown
|
page readonly
|
|
|
|
205AC760000
|
unkown
|
page read and write
|
|
|
|
1F5BEB2E000
|
unkown
|
page read and write
|
|
|
|
277954E0000
|
unkown
|
page write copy
|
|
|
|
7FF5BCCFE000
|
unkown
|
page readonly
|
|
|
|
205ACA00000
|
unkown
|
page readonly
|
|
|
|
22C75100000
|
unkown
|
page read and write
|
|
|
|
7FF4FD94D000
|
unkown
|
page readonly
|
|
|
|
27795613000
|
unkown
|
page read and write
|
|
|
|
22C74ED0000
|
heap private
|
page read and write
|
|
|
|
7FF5BCD6C000
|
unkown
|
page readonly
|
|
|
|
7AD0A7F000
|
unkown
|
page read and write
|
|
|
|
7FF53183B000
|
unkown
|
page readonly
|
|
|
|
7C1FAFB000
|
unkown
|
page read and write
|
|
|
|
2745000
|
unkown
|
page readonly
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
1F5BEAFD000
|
unkown
|
page read and write
|
|
|
|
22C74B70000
|
unkown
|
page readonly
|
|
|
|
241E2652000
|
unkown
|
page read and write
|
|
|
|
205AC933000
|
unkown
|
page read and write
|
|
|
|
7FF5BBEC7000
|
unkown
|
page readonly
|
|
|
|
1B881457000
|
unkown
|
page read and write
|
|
|
|
27795713000
|
unkown
|
page read and write
|
|
|
|
7FF57EC34000
|
unkown
|
page readonly
|
|
|
|
1F5BEB60000
|
unkown
|
page read and write
|
|
|
|
1F5C2000000
|
unkown
|
page read and write
|
|
|
|
7FF5BBEF4000
|
unkown
|
page readonly
|
|
|
|
241E2F55000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF26000
|
unkown
|
page readonly
|
|
|
|
7FF58B68A000
|
unkown
|
page readonly
|
|
|
|
1F5BEA61000
|
unkown
|
page read and write
|
|
|
|
7C1FB7A000
|
unkown
|
page read and write
|
|
|
|
86CCD7F000
|
unkown
|
page read and write
|
|
|
|
17626A00000
|
unkown
|
page read and write
|
|
|
|
3710000
|
unkown
|
page readonly
|
|
|
|
7FF57EBAF000
|
unkown
|
page readonly
|
|
|
|
7FF5BD1DF000
|
unkown
|
page readonly
|
|
|
|
7FF538BF1000
|
unkown
|
page readonly
|
|
|
|
7FF57EB55000
|
unkown
|
page readonly
|
|
|
|
205AA7A0000
|
unkown
|
page write copy
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
1F5C1210000
|
unkown
|
page read and write
|
|
|
|
205AD013000
|
unkown
|
page read and write
|
|
|
|
1F5C1110000
|
unkown
|
page read and write
|
|
|
|
7FF5C4F52000
|
unkown
|
page readonly
|
|
|
|
7FF5BD0BC000
|
unkown
|
page readonly
|
|
|
|
3260000
|
unkown
|
page readonly
|
|
|
|
241E2FA6000
|
unkown
|
page read and write
|
|
|
|
27795629000
|
unkown
|
page read and write
|
|
|
|
905917D000
|
unkown
|
page read and write
|
|
|
|
7FF5BD4E4000
|
unkown
|
page readonly
|
|
|
|
1F5C04A0000
|
unkown
|
page readonly
|
|
|
|
1F5C1510000
|
unkown
|
page read and write
|
|
|
|
1F5BEABE000
|
unkown
|
page read and write
|
|
|
|
24B44A50000
|
unkown
|
page read and write
|
|
|
|
7FF5BD405000
|
unkown
|
page readonly
|
|
|
|
22C74F30000
|
unkown
|
page read and write
|
|
|
|
7FF4F48A8000
|
unkown
|
page readonly
|
|
|
|
9058BEE000
|
unkown
|
page read and write
|
|
|
|
7FF5BBEB0000
|
unkown
|
page readonly
|
|
|
|
29F2000
|
unkown
|
page readonly
|
|
|
|
2775000
|
unkown
|
page readonly
|
|
|
|
7FF5C4D6B000
|
unkown
|
page readonly
|
|
|
|
19648AC0000
|
heap default
|
page read and write
|
|
|
|
22C74A70000
|
unkown
|
page read and write
|
|
|
|
86118FF000
|
unkown
|
page read and write
|
|
|
|
56D39FE000
|
unkown
|
page read and write
|
|
|
|
1F5BEB72000
|
unkown
|
page read and write
|
|
|
|
1F5BEA58000
|
unkown
|
page read and write
|
|
|
|
3450000
|
heap default
|
page read and write
|
|
|
|
7AD167B000
|
unkown
|
page read and write
|
|
|
|
7FF4FE128000
|
unkown
|
page readonly
|
|
|
|
1F5BEABF000
|
unkown
|
page read and write
|
|
|
|
205AA8DF000
|
unkown
|
page read and write
|
|
|
|
7AD17FC000
|
unkown
|
page read and write
|
|
|
|
1F5BEAD4000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF0E000
|
unkown
|
page readonly
|
|
|
|
7FF58B8BB000
|
unkown
|
page readonly
|
|
|
|
56D3775000
|
unkown
|
page read and write
|
|
|
|
1F5C0F42000
|
unkown
|
page read and write
|
|
|
|
2C13000
|
unkown
|
page readonly
|
|
|
|
241E3402000
|
unkown
|
page read and write
|
|
|
|
3189000
|
unkown
|
page read and write
|
|
|
|
1F5BEBA5000
|
unkown
|
page read and write
|
|
|
|
7FF4F4A16000
|
unkown
|
page readonly
|
|
|
|
D986AFE000
|
unkown
|
page read and write
|
|
|
|
7FF58B9BA000
|
unkown
|
page readonly
|
|
|
|
241E25A0000
|
unkown
|
page readonly
|
|
|
|
7FF5BCDFE000
|
unkown
|
page readonly
|
|
|
|
7FF5C4EF6000
|
unkown
|
page readonly
|
|
|
|
1B881402000
|
unkown
|
page read and write
|
|
|
|
7FF560C5E000
|
unkown
|
page readonly
|
|
|
|
241E2F4C000
|
unkown
|
page read and write
|
|
|
|
3499000
|
unkown
|
page read and write
|
|
|
|
7FF5C4B89000
|
unkown
|
page readonly
|
|
|
|
7FF5BD468000
|
unkown
|
page readonly
|
|
|
|
24B44A48000
|
unkown
|
page read and write
|
|
|
|
275C000
|
unkown
|
page readonly
|
|
|
|
24B44A4B000
|
unkown
|
page read and write
|
|
|
|
7FF57EBC9000
|
unkown
|
page readonly
|
|
|
|
241E2F53000
|
unkown
|
page read and write
|
|
|
|
7FF5BCDEA000
|
unkown
|
page readonly
|
|
|
|
1B881400000
|
unkown
|
page read and write
|
|
|
|
7FF57E716000
|
unkown
|
page readonly
|
|
|
|
1F5C0969000
|
unkown
|
page read and write
|
|
|
|
7FF54F580000
|
unkown
|
page readonly
|
|
|
|
8611C7F000
|
unkown
|
page read and write
|
|
|
|
2C13000
|
unkown
|
page readonly
|
|
|
|
2D29000
|
unkown
|
page read and write
|
|
|
|
260E000
|
unkown
|
page readonly
|
|
|
|
1F5C0966000
|
unkown
|
page read and write
|
|
|
|
1F5C092B000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF18000
|
unkown
|
page readonly
|
|
|
|
7FF5BCB77000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCD5000
|
unkown
|
page readonly
|
|
|
|
7C1FBFB000
|
unkown
|
page read and write
|
|
|
|
7AD0DFA000
|
unkown
|
page read and write
|
|
|
|
3484000
|
unkown
|
page read and write
|
|
|
|
241E26EB000
|
unkown
|
page read and write
|
|
|
|
7FF4FE1DA000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
205AA730000
|
heap private
|
page read and write
|
|
|
|
205AA897000
|
unkown
|
page read and write
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
1F5C09DD000
|
unkown
|
page read and write
|
|
|
|
7FF58B8C8000
|
unkown
|
page readonly
|
|
|
|
7FF5BC972000
|
unkown
|
page readonly
|
|
|
|
1F5BEB13000
|
unkown
|
page read and write
|
|
|
|
241E2629000
|
unkown
|
page read and write
|
|
|
|
1A2B1B80000
|
unkown
|
page readonly
|
|
|
|
7FF5BCFD9000
|
unkown
|
page readonly
|
|
|
|
1F5C1110000
|
unkown
|
page read and write
|
|
|
|
241E2F56000
|
unkown
|
page read and write
|
|
|
|
7FF58B67C000
|
unkown
|
page readonly
|
|
|
|
31A2000
|
unkown
|
page read and write
|
|
|
|
1F5C1410000
|
unkown
|
page read and write
|
|
|
|
7FF5C4DF1000
|
unkown
|
page readonly
|
|
|
|
241E26D0000
|
unkown
|
page read and write
|
|
|
|
241E2E02000
|
unkown
|
page read and write
|
|
|
|
90590FB000
|
unkown
|
page read and write
|
|
|
|
24B44C00000
|
unkown
|
page readonly
|
|
|
|
19648D02000
|
unkown
|
page read and write
|
|
|
|
1A2B1C4B000
|
unkown
|
page read and write
|
|
|
|
7FF5BD225000
|
unkown
|
page readonly
|
|
|
|
7FF5BC96E000
|
unkown
|
page readonly
|
|
|
|
7C1F59E000
|
unkown
|
page read and write
|
|
|
|
7FF5BBE73000
|
unkown
|
page readonly
|
|
|
|
240C7DC0000
|
unkown
|
page readonly
|
|
|
|
1A2B2600000
|
unkown
|
page readonly
|
|
|
|
1F5C0981000
|
unkown
|
page read and write
|
|
|
|
7FF54FCD9000
|
unkown
|
page readonly
|
|
|
|
7AD127A000
|
unkown
|
page read and write
|
|
|
|
7FF4F49AB000
|
unkown
|
page readonly
|
|
|
|
7FF560BA0000
|
unkown
|
page readonly
|
|
|
|
3475000
|
unkown
|
page read and write
|
|
|
|
1964A6B0000
|
unkown
|
page readonly
|
|
|
|
2B50000
|
unkown
|
page readonly
|
|
|
|
7FF5BD392000
|
unkown
|
page readonly
|
|
|
|
3280000
|
heap default
|
page read and write
|
|
|
|
241E2708000
|
unkown
|
page read and write
|
|
|
|
1F5C0940000
|
unkown
|
page read and write
|
|
|
|
7FF538E19000
|
unkown
|
page readonly
|
|
|
|
7FF58BAA4000
|
unkown
|
page readonly
|
|
|
|
7FF5BD42F000
|
unkown
|
page readonly
|
|
|
|
241E2F6A000
|
unkown
|
page read and write
|
|
|
|
241E2716000
|
unkown
|
page read and write
|
|
|
|
2B20000
|
unkown
|
page readonly
|
|
|
|
1A2B1C50000
|
unkown
|
page read and write
|
|
|
|
30E7000
|
heap private
|
page read and write
|
|
|
|
7FF4FE0B3000
|
unkown
|
page readonly
|
|
|
|
27795602000
|
unkown
|
page read and write
|
|
|
|
9058EFA000
|
unkown
|
page read and write
|
|
|
|
19648BF0000
|
unkown
|
page readonly
|
|
|
|
1F5C0A20000
|
unkown
|
page read and write
|
|
|
|
86CCBFE000
|
unkown
|
page read and write
|
|
|
|
241E2F50000
|
unkown
|
page read and write
|
|
|
|
1D73B68D000
|
unkown
|
page read and write
|
|
|
|
7FF4F47C5000
|
unkown
|
page readonly
|
|
|
|
7FF5BCDCF000
|
unkown
|
page readonly
|
|
|
|
1B881513000
|
unkown
|
page read and write
|
|
|
|
240C7E3F000
|
unkown
|
page read and write
|
|
|
|
2818000
|
unkown
|
page readonly
|
|
|
|
241E2F30000
|
unkown
|
page read and write
|
|
|
|
7FF4FE11C000
|
unkown
|
page readonly
|
|
|
|
24B449D0000
|
heap default
|
page read and write
|
|
|
|
7FF5BCE05000
|
unkown
|
page readonly
|
|
|
|
7AD147A000
|
unkown
|
page read and write
|
|
|
|
22C75116000
|
unkown
|
page read and write
|
|
|
|
205AA813000
|
unkown
|
page read and write
|
|
|
|
1D73B708000
|
unkown
|
page read and write
|
|
|
|
241E25E0000
|
unkown
|
page readonly
|
|
|
|
7FF57EA4E000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
7FF4FDDAC000
|
unkown
|
page readonly
|
|
|
|
1F5BEBA3000
|
unkown
|
page read and write
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
3F94A7D000
|
unkown
|
page read and write
|
|
|
|
7FF5C4D88000
|
unkown
|
page readonly
|
|
|
|
A9EFB7A000
|
unkown
|
page read and write
|
|
|
|
1F5C0C00000
|
unkown
|
page read and write
|
|
|
|
7FF5BCD64000
|
unkown
|
page readonly
|
|
|
|
2F80000
|
unkown
|
page read and write
|
|
|
|
7FF5BCDFA000
|
unkown
|
page readonly
|
|
|
|
347E000
|
unkown
|
page read and write
|
|
|
|
2B73000
|
unkown
|
page readonly
|
|
|
|
1F5BEA29000
|
unkown
|
page read and write
|
|
|
|
2B2D000
|
unkown
|
page readonly
|
|
|
|
1B881360000
|
unkown
|
page readonly
|
|
|
|
64D4000
|
heap private
|
page read and write
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
7FF5C5094000
|
unkown
|
page readonly
|
|
|
|
22C74EB0000
|
unkown
|
page read and write
|
|
|
|
241E2F5A000
|
unkown
|
page read and write
|
|
|
|
24B45400000
|
unkown
|
page readonly
|
|
|
|
7FF5BC9C0000
|
unkown
|
page readonly
|
|
|
|
205AA883000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF9A000
|
unkown
|
page readonly
|
|
|
|
205AC700000
|
heap private
|
page read and write
|
|
|
|
7FF4F4942000
|
unkown
|
page readonly
|
|
|
|
2492000
|
unkown
|
page readonly
|
|
|
|
1F5C0A20000
|
unkown
|
page read and write
|
|
|
|
7FF4F489B000
|
unkown
|
page readonly
|
|
|
|
241E2F55000
|
unkown
|
page read and write
|
|
|
|
4F2D7FF000
|
unkown
|
page read and write
|
|
|
|
214EF2F000
|
unkown
|
page read and write
|
|
|
|
1F5C1610000
|
unkown
|
page read and write
|
|
|
|
241E2F5D000
|
unkown
|
page read and write
|
|
|
|
7FF5BBB6C000
|
unkown
|
page readonly
|
|
|
|
1A2B1B60000
|
heap default
|
page read and write
|
|
|
|
7FF560B08000
|
unkown
|
page readonly
|
|
|
|
7FF58B9F8000
|
unkown
|
page readonly
|
|
|
|
7FF560C54000
|
unkown
|
page readonly
|
|
|
|
241E2F5B000
|
unkown
|
page read and write
|
|
|
|
7FF4FDF11000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F50000
|
unkown
|
page readonly
|
|
|
|
7FF5C4EB3000
|
unkown
|
page readonly
|
|
|
|
1A2B1C02000
|
unkown
|
page read and write
|
|
|
|
7FF57E9F3000
|
unkown
|
page readonly
|
|
|
|
7FF5BD236000
|
unkown
|
page readonly
|
|
|
|
7FF5BCEF1000
|
unkown
|
page readonly
|
|
|
|
1F5C1610000
|
unkown
|
page read and write
|
|
|
|
7FF538E1D000
|
unkown
|
page readonly
|
|
|
|
241E2F53000
|
unkown
|
page read and write
|
|
|
|
A9EF8FE000
|
unkown
|
page read and write
|
|
|
|
7FF538E16000
|
unkown
|
page readonly
|
|
|
|
1B881310000
|
unkown
|
page write copy
|
|
|
|
318A000
|
unkown
|
page read and write
|
|
|
|
1F5BEAC9000
|
unkown
|
page read and write
|
|
|
|
7FF58B221000
|
unkown
|
page readonly
|
|
|
|
7FF560BDF000
|
unkown
|
page readonly
|
|
|
|
241E2F5D000
|
unkown
|
page read and write
|
|
|
|
22C730A4000
|
unkown
|
page read and write
|
|
|
|
1F5C0F00000
|
unkown
|
page read and write
|
|
|
|
241E2F50000
|
unkown
|
page read and write
|
|
|
|
241E2DA0000
|
unkown
|
page read and write
|
|
|
|
1F5C1710000
|
unkown
|
page read and write
|
|
|
|
1F5BEB5F000
|
unkown
|
page read and write
|
|
|
|
17626A6A000
|
unkown
|
page read and write
|
|
|
|
241E2688000
|
unkown
|
page read and write
|
|
|
|
7FF57E8C7000
|
unkown
|
page readonly
|
|
|
|
1A2B2402000
|
unkown
|
page read and write
|
|
|
|
7FF5BBDB8000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
7FF54FB5B000
|
unkown
|
page readonly
|
|
|
|
22C730C1000
|
unkown
|
page read and write
|
|
|
|
7FF5BD3EC000
|
unkown
|
page readonly
|
|
|
|
7FF4FE161000
|
unkown
|
page readonly
|
|
|
|
7FF4F47F9000
|
unkown
|
page readonly
|
|
|
|
56D3AFF000
|
unkown
|
page read and write
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
7FF58B9C0000
|
unkown
|
page readonly
|
|
|
|
205AA841000
|
unkown
|
page read and write
|
|
|
|
241E2DC0000
|
unkown
|
page readonly
|
|
|
|
7FF5C4FDF000
|
unkown
|
page readonly
|
|
|
|
9058AEB000
|
unkown
|
page read and write
|
|
|
|
7FF5C4EB8000
|
unkown
|
page readonly
|
|
|
|
24B44A3C000
|
unkown
|
page read and write
|
|
|
|
1D73B540000
|
unkown
|
page readonly
|
|
|
|
1F5BEAD2000
|
unkown
|
page read and write
|
|
|
|
7FF53191A000
|
unkown
|
page readonly
|
|
|
|
2B4C000
|
unkown
|
page readonly
|
|
|
|
8611A75000
|
unkown
|
page read and write
|
|
|
|
7FF538E91000
|
unkown
|
page readonly
|
|
|
|
241E2658000
|
unkown
|
page read and write
|
|
|
|
29FE000
|
unkown
|
page readonly
|
|
|
|
7FF54FC4C000
|
unkown
|
page readonly
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
2B7A000
|
unkown
|
page readonly
|
|
|
|
6920000
|
unkown
|
page read and write
|
|
|
|
3F94EFE000
|
unkown
|
page read and write
|
|
|
|
7FF5BCA99000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F4C000
|
unkown
|
page readonly
|
|
|
|
7AD12FB000
|
unkown
|
page read and write
|
|
|
|
7FF54FC8C000
|
unkown
|
page readonly
|
|
|
|
241F000
|
unkown
|
page readonly
|
|
|
|
347D000
|
unkown
|
page read and write
|
|
|
|
4F2CF6F000
|
unkown
|
page read and write
|
|
|
|
7FF54FB5E000
|
unkown
|
page readonly
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
24B44A4A000
|
unkown
|
page read and write
|
|
|
|
7FF5C4E91000
|
unkown
|
page readonly
|
|
|
|
7FF5BC9D5000
|
unkown
|
page readonly
|
|
|
|
1B881413000
|
unkown
|
page read and write
|
|
|
|
7FF560CEA000
|
unkown
|
page readonly
|
|
|
|
7C1F9FA000
|
unkown
|
page read and write
|
|
|
|
2777000
|
unkown
|
page readonly
|
|
|
|
1F5C0D83000
|
unkown
|
page read and write
|
|
|
|
7FF5608D7000
|
unkown
|
page readonly
|
|
|
|
241E2702000
|
unkown
|
page read and write
|
|
|
|
22C730C3000
|
unkown
|
page read and write
|
|
|
|
17626A6A000
|
unkown
|
page read and write
|
|
|
|
27796FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5C5018000
|
unkown
|
page readonly
|
|
|
|
205AC90A000
|
unkown
|
page read and write
|
|
|
|
7FF54F835000
|
unkown
|
page readonly
|
|
|
|
7FF5BBEB5000
|
unkown
|
page readonly
|
|
|
|
84878F9000
|
unkown
|
page read and write
|
|
|
|
7FF54FCBF000
|
unkown
|
page readonly
|
|
|
|
1B88146F000
|
unkown
|
page read and write
|
|
|
|
7FF57EBA4000
|
unkown
|
page readonly
|
|
|
|
7FF5C4DE6000
|
unkown
|
page readonly
|
|
|
|
7FF5BBD91000
|
unkown
|
page readonly
|
|
|
|
205AC964000
|
unkown
|
page read and write
|
|
|
|
1A2B1C13000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF1E000
|
unkown
|
page readonly
|
|
|
|
22C73080000
|
unkown
|
page read and write
|
|
|
|
7FF5C4DD1000
|
unkown
|
page readonly
|
|
|
|
1F5C1410000
|
unkown
|
page read and write
|
|
|
|
22C730FA000
|
unkown
|
page read and write
|
|
|
|
1B881230000
|
heap default
|
page read and write
|
|
|
|
7FF560762000
|
unkown
|
page readonly
|
|
|
|
7FF5BB711000
|
unkown
|
page readonly
|
|
|
|
7FF538C81000
|
unkown
|
page readonly
|
|
|
|
7FF5BCD01000
|
unkown
|
page readonly
|
|
|
|
7FF4FE134000
|
unkown
|
page readonly
|
|
|
|
2B9B000
|
unkown
|
page readonly
|
|
|
|
848797E000
|
unkown
|
page read and write
|
|
|
|
241E3402000
|
unkown
|
page read and write
|
|
|
|
370A000
|
heap private
|
page read and write
|
|
|
|
7FF54FD52000
|
unkown
|
page readonly
|
|
|
|
241E2F94000
|
unkown
|
page read and write
|
|
|
|
7C1F8F9000
|
unkown
|
page read and write
|
|
|
|
7FF57EBC6000
|
unkown
|
page readonly
|
|
|
|
1A2B1C8A000
|
unkown
|
page read and write
|
|
|
|
7FF5BBC6B000
|
unkown
|
page readonly
|
|
|
|
1F5BEB02000
|
unkown
|
page read and write
|
|
|
|
240C8120000
|
unkown
|
page readonly
|
|
|
|
7FF538C9B000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
3F94DF7000
|
unkown
|
page read and write
|
|
|
|
7FF5BCE79000
|
unkown
|
page readonly
|
|
|
|
7FF5BD3DF000
|
unkown
|
page readonly
|
|
|
|
27A2000
|
unkown
|
page readonly
|
|
|
|
7AD177F000
|
unkown
|
page read and write
|
|
|
|
8611B77000
|
unkown
|
page read and write
|
|
|
|
7FF54FCAA000
|
unkown
|
page readonly
|
|
|
|
7FF53854E000
|
unkown
|
page readonly
|
|
|
|
7FF538DA0000
|
unkown
|
page readonly
|
|
|
|
7FF5BD2FB000
|
unkown
|
page readonly
|
|
|
|
7FF4F499E000
|
unkown
|
page readonly
|
|
|
|
7FF58B697000
|
unkown
|
page readonly
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
7FF5C4DD5000
|
unkown
|
page readonly
|
|
|
|
7AD117C000
|
unkown
|
page read and write
|
|
|
|
240C7E00000
|
unkown
|
page read and write
|
|
|
|
22C730CB000
|
unkown
|
page read and write
|
|
|
|
69E0000
|
unkown
|
page read and write
|
|
|
|
7FF54FC6B000
|
unkown
|
page readonly
|
|
|
|
7FF5C501E000
|
unkown
|
page readonly
|
|
|
|
7AD0CF9000
|
unkown
|
page read and write
|
|
|
|
1F5BEA7B000
|
unkown
|
page read and write
|
|
|
|
1F5C0D00000
|
unkown
|
page read and write
|
|
|
|
1D73B685000
|
unkown
|
page read and write
|
|
|
|
7FF57EB67000
|
unkown
|
page readonly
|
|
|
|
7FF5C4EAB000
|
unkown
|
page readonly
|
|
|
|
7FF531898000
|
unkown
|
page readonly
|
|
|
|
D986B79000
|
unkown
|
page read and write
|
|
|
|
1F5C1010000
|
unkown
|
page read and write
|
|
|
|
7FF538DCF000
|
unkown
|
page readonly
|
|
|
|
7FF54FC97000
|
unkown
|
page readonly
|
|
|
|
7FF5BCA15000
|
unkown
|
page readonly
|
|
|
|
7FF5BCC51000
|
unkown
|
page readonly
|
|
|
|
7FF54FC5A000
|
unkown
|
page readonly
|
|
|
|
30E0000
|
heap private
|
page read and write
|
|
|
|
7FF560BCB000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE2C000
|
unkown
|
page readonly
|
|
|
|
1F5C094B000
|
unkown
|
page read and write
|
|
|
|
7FF5BC757000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
2602000
|
unkown
|
page readonly
|
|
|
|
7FF538E0E000
|
unkown
|
page readonly
|
|
|
|
27F5000
|
unkown
|
page readonly
|
|
|
|
22C730BC000
|
unkown
|
page read and write
|
|
|
|
7FF560CF2000
|
unkown
|
page readonly
|
|
|
|
7FF4FE166000
|
unkown
|
page readonly
|
|
|
|
345A000
|
heap default
|
page read and write
|
|
|
|
241E3000000
|
unkown
|
page readonly
|
|
|
|
241E2F59000
|
unkown
|
page read and write
|
|
|
|
7FF531830000
|
unkown
|
page readonly
|
|
|
|
7FF5BD3FE000
|
unkown
|
page readonly
|
|
|
|
7FF560C6E000
|
unkown
|
page readonly
|
|
|
|
7FF5BD4EA000
|
unkown
|
page readonly
|
|
|
|
241E2F51000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page readonly
|
|
|
|
7FF58BA1E000
|
unkown
|
page readonly
|
|
|
|
1F5C0A50000
|
unkown
|
page readonly
|
|
|
|
7FF4FDDBF000
|
unkown
|
page readonly
|
|
|
|
9058E7A000
|
unkown
|
page read and write
|
|
|
|
7FF5609BB000
|
unkown
|
page readonly
|
|
|
|
7FF5BD3CF000
|
unkown
|
page readonly
|
|
|
|
D98678B000
|
unkown
|
page read and write
|
|
|
|
7FF560A34000
|
unkown
|
page readonly
|
|
|
|
17626B30000
|
unkown
|
page readonly
|
|
|
|
214EEAA000
|
unkown
|
page read and write
|
|
|
|
7FF4F465C000
|
unkown
|
page readonly
|
|
|
|
1F5C0CA4000
|
unkown
|
page read and write
|
|
|
|
2BD0000
|
unkown
|
page read and write
|
|
|
|
240C8000000
|
unkown
|
page readonly
|
|
|
|
7FF58B9D7000
|
unkown
|
page readonly
|
|
|
|
A9EFAFF000
|
unkown
|
page read and write
|
|
|
|
7AD137B000
|
unkown
|
page read and write
|
|
|
|
7FF5BCDDF000
|
unkown
|
page readonly
|
|
|
|
1F5BE9C0000
|
unkown
|
page readonly
|
|
|
|
7FF5BD476000
|
unkown
|
page readonly
|
|
|
|
3260000
|
unkown
|
page readonly
|
|
|
|
1D73B655000
|
unkown
|
page read and write
|
|
|
|
7FF5BCD08000
|
unkown
|
page readonly
|
|
|
|
7FF4FDDBA000
|
unkown
|
page readonly
|
|
|
|
1F5C092E000
|
unkown
|
page read and write
|
|
|
|
241E2F7F000
|
unkown
|
page read and write
|
|
|
|
1F5C0969000
|
unkown
|
page read and write
|
|
|
|
323E000
|
unkown
|
page read and write
|
|
|
|
7FF538D8C000
|
unkown
|
page readonly
|
|
|
|
7FF531183000
|
unkown
|
page readonly
|
|
|
|
241E2F50000
|
unkown
|
page read and write
|
|
|
|
22C72F60000
|
heap default
|
page read and write
|
|
|
|
7FF56045D000
|
unkown
|
page readonly
|
|
|
|
1F5C0A10000
|
unkown
|
page readonly
|
|
|
|
7FF560BCF000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
19648C4B000
|
unkown
|
page read and write
|
|
|
|
7AD187D000
|
unkown
|
page read and write
|
|
|
|
7FF5C50A1000
|
unkown
|
page readonly
|
|
|
|
3160000
|
heap default
|
page read and write
|
|
|
|
3F94CFE000
|
unkown
|
page read and write
|
|
|
|
17626A58000
|
unkown
|
page read and write
|
|
|
|
7AD0C7E000
|
unkown
|
page read and write
|
|
|
|
7FF5C500E000
|
unkown
|
page readonly
|
|
|
|
1F5C0F82000
|
unkown
|
page read and write
|
|
|
|
7FF5BD1D8000
|
unkown
|
page readonly
|
|
|
|
1D73C000000
|
unkown
|
page readonly
|
|
|
|
318E000
|
unkown
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
27795530000
|
unkown
|
page readonly
|
|
|
|
17626A5F000
|
unkown
|
page read and write
|
|
|
|
7FF560C00000
|
unkown
|
page readonly
|
|
|
|
3F94B75000
|
unkown
|
page read and write
|
|
|
|
7FF5BD0D7000
|
unkown
|
page readonly
|
|
|
|
56D33CE000
|
unkown
|
page read and write
|
|
|
|
241E2F28000
|
unkown
|
page read and write
|
|
|
|
176269E0000
|
unkown
|
page read and write
|
|
|
|
2783000
|
unkown
|
page readonly
|
|
|
|
7FF58BA14000
|
unkown
|
page readonly
|
|
|
|
7FF5BCDEC000
|
unkown
|
page readonly
|
|
|
|
7FF538DEA000
|
unkown
|
page readonly
|
|
|
|
7AD0EFB000
|
unkown
|
page read and write
|
|
|
|
241E2520000
|
heap private
|
page read and write
|
|
|
|
86CCAFE000
|
unkown
|
page read and write
|
|
|
|
241E26C3000
|
unkown
|
page read and write
|
|
|
|
205AC6F0000
|
unkown
|
page readonly
|
|
|
|
8611D7E000
|
unkown
|
page read and write
|
|
|
|
7FF4F49F4000
|
unkown
|
page readonly
|
|
|
|
7FF538DAB000
|
unkown
|
page readonly
|
|
|
|
7FF5BD4F2000
|
unkown
|
page readonly
|
|
|
|
3121000
|
unkown
|
page read and write
|
|
|
|
1B881600000
|
unkown
|
page readonly
|
|
|
|
318E000
|
unkown
|
page read and write
|
|
|
|
1F5BEA00000
|
unkown
|
page read and write
|
|
|
|
7FF4F49A5000
|
unkown
|
page readonly
|
|
|
|
2F80000
|
unkown
|
page readonly
|
|
|
|
2823000
|
unkown
|
page readonly
|
|
|
|
4F2D477000
|
unkown
|
page read and write
|
|
|
|
7FF4F41FD000
|
unkown
|
page readonly
|
|
|
|
7FF57EA9D000
|
unkown
|
page readonly
|
|
|
|
1964A5B0000
|
unkown
|
page read and write
|
|
|
|
1A2B1C29000
|
unkown
|
page read and write
|
|
|
|
2723000
|
unkown
|
page readonly
|
|
|
|
24B44CD0000
|
unkown
|
page readonly
|
|
|
|
241E2F5C000
|
unkown
|
page read and write
|
|
|
|
7FF5BBB7A000
|
unkown
|
page readonly
|
|
|
|
1A2B1C70000
|
unkown
|
page read and write
|
|
|
|
36E0000
|
unkown
|
page read and write
|
|
|
|
2B65000
|
unkown
|
page readonly
|
|
|
|
205AAAD0000
|
unkown
|
page readonly
|
|
|
|
205AA790000
|
heap default
|
page read and write
|
|
|
|
7FF57EB4A000
|
unkown
|
page readonly
|
|
|
|
1F5C1010000
|
unkown
|
page read and write
|
|
|
|
7FF4FDFD1000
|
unkown
|
page readonly
|
|
|
|
7FF54F9D7000
|
unkown
|
page readonly
|
|
|
|
7AD0B7A000
|
unkown
|
page read and write
|
|
|
|
3290000
|
unkown
|
page readonly
|
|
|
|
7FF560C4A000
|
unkown
|
page readonly
|
|
|
|
7FF57EB7F000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
19648C00000
|
unkown
|
page read and write
|
|
|
|
240C7E13000
|
unkown
|
page read and write
|
|
|
|
22C74F40000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
1F5C091D000
|
unkown
|
page read and write
|
|
|
|
7FF531187000
|
unkown
|
page readonly
|
|
|
|
1D73B649000
|
unkown
|
page read and write
|
|
|
|
1D73B63C000
|
unkown
|
page read and write
|
|
|
|
7FF560A59000
|
unkown
|
page readonly
|
|
|
|
7FF53185F000
|
unkown
|
page readonly
|
|
|
|
1A2B1D08000
|
unkown
|
page read and write
|
|
|
|
24B44A47000
|
unkown
|
page read and write
|
|
|
|
27795400000
|
heap default
|
page read and write
|
|
|
|
7FF5BD44A000
|
unkown
|
page readonly
|
|
|
|
4F2D67A000
|
unkown
|
page read and write
|
|
|
|
241E2DA0000
|
unkown
|
page read and write
|
|
|
|
1D73B600000
|
unkown
|
page read and write
|
|
|
|
7FF57E2FE000
|
unkown
|
page readonly
|
|
|
|
7FF5BD40B000
|
unkown
|
page readonly
|
|
|
|
22C7303F000
|
unkown
|
page read and write
|
|
|
|
7FF4FE15E000
|
unkown
|
page readonly
|
|
|
|
7FF531835000
|
unkown
|
page readonly
|
|
|
|
1F5C03A0000
|
unkown
|
page read and write
|
|
|
|
7FF5BC753000
|
unkown
|
page readonly
|
|
|
|
3487000
|
unkown
|
page read and write
|
|
|
|
7FF4F4A8A000
|
unkown
|
page readonly
|
|
|
|
7FF4FDF15000
|
unkown
|
page readonly
|
|
|
|
4F2DAFC000
|
unkown
|
page read and write
|
|
|
|
19648E00000
|
unkown
|
page readonly
|
|
|
|
24B44A55000
|
unkown
|
page read and write
|
|
|
|
1F5BEC00000
|
unkown
|
page readonly
|
|
|
|
241E2F54000
|
unkown
|
page read and write
|
|
|
|
7FF560B4D000
|
unkown
|
page readonly
|
|
|
|
7FF5BBC76000
|
unkown
|
page readonly
|
|
|
|
7FF4FDFF3000
|
unkown
|
page readonly
|
|
|
|
84879FC000
|
unkown
|
page read and write
|
|
|
|
1F5C0D43000
|
unkown
|
page read and write
|
|
|
|
2BE1000
|
unkown
|
page readonly
|
|
|
|
22C75102000
|
unkown
|
page read and write
|
|
|
|
7FF58B819000
|
unkown
|
page readonly
|
|
|
|
241E2580000
|
heap default
|
page read and write
|
|
|
|
7FF5607D9000
|
unkown
|
page readonly
|
|
|
|
22C74EC0000
|
unkown
|
page readonly
|
|
|
|
7C1F97F000
|
unkown
|
page read and write
|
|
|
|
7FF5BC8DE000
|
unkown
|
page readonly
|
|
|
|
241E2F43000
|
unkown
|
page read and write
|
|
|
|
24B44B13000
|
unkown
|
page read and write
|
|
|
|
2BF4000
|
unkown
|
page readonly
|
|
|
|
1B882EA0000
|
unkown
|
page readonly
|
|
|
|
7FF5BC701000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
7FF4FE0F5000
|
unkown
|
page readonly
|
|
|
|
241E26BC000
|
unkown
|
page read and write
|
|
|
|
A9EFA7C000
|
unkown
|
page read and write
|
|
|
|
3360000
|
unkown
|
page readonly
|
|
|
|
24B44970000
|
heap private
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
6550000
|
unkown
|
page read and write
|
|
|
|
241E2670000
|
unkown
|
page read and write
|
|
|
|
1F5BEA3F000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C7A000
|
unkown
|
page readonly
|
|
|
|
7FF5C4E01000
|
unkown
|
page readonly
|
|
|
|
241E2F00000
|
unkown
|
page read and write
|
|
|
|
205AA8E7000
|
unkown
|
page read and write
|
|
|
|
7FF54FBCC000
|
unkown
|
page readonly
|
|
|
|
1F5BE930000
|
unkown
|
page write copy
|
|
|
|
7FF538DFF000
|
unkown
|
page readonly
|
|
|
|
241E2F5B000
|
unkown
|
page read and write
|
|
|
|
24B44A59000
|
unkown
|
page read and write
|
|
|
|
7FF5BD3D4000
|
unkown
|
page readonly
|
|
|
|
2B1C000
|
unkown
|
page readonly
|
|
|
|
1F5C09DB000
|
unkown
|
page read and write
|
|
|
|
7AD11FB000
|
unkown
|
page read and write
|
|
|
|
7AD0E7A000
|
unkown
|
page read and write
|
|
|
|
7FF5BBB87000
|
unkown
|
page readonly
|
|
|
|
1F5C1210000
|
unkown
|
page read and write
|
|
|
|
7FF5BD39C000
|
unkown
|
page readonly
|
|
|
|
24B44A4D000
|
unkown
|
page read and write
|
|
|
|
3492000
|
unkown
|
page read and write
|
|
|
|
1F5C09DD000
|
unkown
|
page read and write
|
|
|
|
241E2590000
|
unkown
|
page readonly
|
|
|
|
7FF5608CA000
|
unkown
|
page readonly
|
|
|
|
7FF53188E000
|
unkown
|
page readonly
|
|
|
|
241E2F83000
|
unkown
|
page read and write
|
|
|
|
1F5C1410000
|
unkown
|
page read and write
|
|
|
|
7FF54FD4A000
|
unkown
|
page readonly
|
|
|
|
7FF538960000
|
unkown
|
page readonly
|
|
|
|
1F5C0E02000
|
unkown
|
page read and write
|
|
|
|
241E2F6B000
|
unkown
|
page read and write
|
|
|
|
7FF5BC9C6000
|
unkown
|
page readonly
|
|
|
|
7FF57EB4E000
|
unkown
|
page readonly
|
|
|
|
86CCC79000
|
unkown
|
page read and write
|
|
|
|
7FF5BD454000
|
unkown
|
page readonly
|
|
|
|
241E2FD4000
|
unkown
|
page read and write
|
|
|
|
7FF4FE0EE000
|
unkown
|
page readonly
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
7FF54FC60000
|
unkown
|
page readonly
|
|
|
|
24B44A49000
|
unkown
|
page read and write
|
|
|
|
17626A5F000
|
unkown
|
page read and write
|
|
|
|
205AA8BA000
|
unkown
|
page read and write
|
|
|
|
22C7302B000
|
unkown
|
page read and write
|
|
|
|
7FF5BBEFA000
|
unkown
|
page readonly
|
|
|
|
17626C95000
|
heap private
|
page read and write
|
|
|
|
2B96000
|
unkown
|
page readonly
|
|
|
|
241E2F22000
|
unkown
|
page read and write
|
|
|
|
7FF4F4A0E000
|
unkown
|
page readonly
|
|
|
|
7FF5BCCFB000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE37000
|
unkown
|
page readonly
|
|
|
|
9059079000
|
unkown
|
page read and write
|
|
|
|
7FF4F49CF000
|
unkown
|
page readonly
|
|
|
|
1A2B1C3C000
|
unkown
|
page read and write
|
|
|
|
7FF538E92000
|
unkown
|
page readonly
|
|
|
|
7FF538C9E000
|
unkown
|
page readonly
|
|
|
|
24B44A00000
|
unkown
|
page read and write
|
|
|
|
7FF4FE1E1000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F9A000
|
unkown
|
page readonly
|
|
|
|
205AC802000
|
unkown
|
page read and write
|
|
|
|
277F000
|
unkown
|
page readonly
|
|
|
|
22C72F00000
|
heap private
|
page read and write
|
|
|
|
7FF58BA39000
|
unkown
|
page readonly
|
|
|
|
241E2F8C000
|
unkown
|
page read and write
|
|
|
|
1F5C0A20000
|
unkown
|
page readonly
|
|
|
|
1F5C0F02000
|
unkown
|
page read and write
|
|
|
|
7FF58B77B000
|
unkown
|
page readonly
|
|
|
|
7FF538D9E000
|
unkown
|
page readonly
|
|
|
|
7FF5C5021000
|
unkown
|
page readonly
|
|
|
|
7FF5BBF04000
|
unkown
|
page readonly
|
|
|
|
7FF54FCCE000
|
unkown
|
page readonly
|
|
|
|
7FF560B92000
|
unkown
|
page readonly
|
|
|
|
7FF5BD400000
|
unkown
|
page readonly
|
|
|
|
7FF5BCC41000
|
unkown
|
page readonly
|
|
|
|
7FF4FE0EA000
|
unkown
|
page readonly
|
|
|
|
241E2F58000
|
unkown
|
page read and write
|
|
|
|
1D73B460000
|
heap default
|
page read and write
|
|
|
|
7FF5BD417000
|
unkown
|
page readonly
|
|
|
|
22C74F60000
|
unkown
|
page readonly
|
|
|
|
1F5C09DF000
|
unkown
|
page read and write
|
|
|
|
3185000
|
unkown
|
page read and write
|
|
|
|
241E2F73000
|
unkown
|
page read and write
|
|
|
|
7C1FCFF000
|
unkown
|
page read and write
|
|
|
|
7FF57EB87000
|
unkown
|
page readonly
|
|
|
|
1B881468000
|
unkown
|
page read and write
|
|
|
|
7FF5BD3C3000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F7F000
|
unkown
|
page readonly
|
|
|
|
1F5BEB1C000
|
unkown
|
page read and write
|
|
|
|
241E2613000
|
unkown
|
page read and write
|
|
|
|
2B81000
|
unkown
|
page readonly
|
|
|
|
241E26D8000
|
unkown
|
page read and write
|
|
|
|
7FF54F826000
|
unkown
|
page readonly
|
|
|
|
1F5C0C53000
|
unkown
|
page read and write
|
|
|
|
7FF560C17000
|
unkown
|
page readonly
|
|
|
|
7FF5C4D76000
|
unkown
|
page readonly
|
|
|
|
22C75002000
|
unkown
|
page read and write
|
|
|
|
241E26EB000
|
unkown
|
page read and write
|
|
|
|
1A2B2940000
|
unkown
|
page readonly
|
|
|
|
7FF4FE158000
|
unkown
|
page readonly
|
|
|
|
7FF5C4E09000
|
unkown
|
page readonly
|
|
|
|
17626910000
|
unkown
|
page readonly
|
|
|
|
205AA857000
|
unkown
|
page read and write
|
|
|
|
7FF538E8A000
|
unkown
|
page readonly
|
|
|
|
241E2F5C000
|
unkown
|
page read and write
|
|
|
|
205AC780000
|
unkown
|
page readonly
|
|
|
|
24B44A53000
|
unkown
|
page read and write
|
|
|
|
22C72F70000
|
unkown
|
page write copy
|
|
|
|
7FF560A36000
|
unkown
|
page readonly
|
|
|
|
240C7F02000
|
unkown
|
page read and write
|
|
|
|
7FF4F49EA000
|
unkown
|
page readonly
|
|
|
|
7FF5BCD53000
|
unkown
|
page readonly
|
|
|
|
1F5BEB1E000
|
unkown
|
page read and write
|
|
|
|
27795668000
|
unkown
|
page read and write
|
|
|
|
7FF538D8A000
|
unkown
|
page readonly
|
|
|
|
2769000
|
unkown
|
page readonly
|
|
|
|
241E2F63000
|
unkown
|
page read and write
|
|
|
|
7FF4F499A000
|
unkown
|
page readonly
|
|
|
|
205AA897000
|
unkown
|
page read and write
|
|
|
|
312E000
|
unkown
|
page read and write
|
|
|
|
1F5C0C12000
|
unkown
|
page read and write
|
|
|
|
4F2D57F000
|
unkown
|
page read and write
|
|
|
|
7FF4FE0F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BBB7F000
|
unkown
|
page readonly
|
|
|
|
7FF57EC42000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE68000
|
unkown
|
page readonly
|
|
|
|
7FF57EC3A000
|
unkown
|
page readonly
|
|
|
|
205AC760000
|
unkown
|
page read and write
|
|
|
|
7FF5C4FFA000
|
unkown
|
page readonly
|
|
|
|
7FF5BD346000
|
unkown
|
page readonly
|
|
|
|
7FF538CF3000
|
unkown
|
page readonly
|
|
|
|
7AD15FC000
|
unkown
|
page read and write
|
|
|
|
2F50000
|
unkown
|
page readonly
|
|
|
|
7FF560501000
|
unkown
|
page readonly
|
|
|
|
1F5C0F82000
|
unkown
|
page read and write
|
|
|
|
1D73B613000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C87000
|
unkown
|
page readonly
|
|
|
|
7FF560C44000
|
unkown
|
page readonly
|
|
|
|
205AD010000
|
unkown
|
page read and write
|
|
|
|
7FF5C4F42000
|
unkown
|
page readonly
|
|
|
|
27795702000
|
unkown
|
page read and write
|
|
|
|
7FF5BD46E000
|
unkown
|
page readonly
|
|
|
|
2F0E000
|
unkown
|
page read and write
|
|
|
|
30AE000
|
unkown
|
page read and write
|
|
|
|
7FF4FDFEB000
|
unkown
|
page readonly
|
|
|
|
22C75187000
|
unkown
|
page read and write
|
|
|
|
1F5BEA80000
|
unkown
|
page read and write
|
|
|
|
7FF5314C9000
|
unkown
|
page readonly
|
|
|
|
7FF5BD0CF000
|
unkown
|
page readonly
|
|
|
|
7FF560BEC000
|
unkown
|
page readonly
|
|
|
|
7FF4F4963000
|
unkown
|
page readonly
|
|
|
|
205AA897000
|
unkown
|
page read and write
|
|
|
|
205AC967000
|
unkown
|
page read and write
|
|
|
|
7FF560C0B000
|
unkown
|
page readonly
|
|
|
|
7FF538DB7000
|
unkown
|
page readonly
|
|
|
|
19648A60000
|
heap private
|
page read and write
|
|
|
|
7FF5C4FDC000
|
unkown
|
page readonly
|
|
|
|
A9EF97F000
|
unkown
|
page read and write
|
|
|
|
7FF5BCC00000
|
unkown
|
page readonly
|
|
|
|
56D32CB000
|
unkown
|
page read and write
|
|
|
|
205AA8DE000
|
unkown
|
page read and write
|
|
|
|
7FF560C2F000
|
unkown
|
page readonly
|
|
|
|
7FF58BAB1000
|
unkown
|
page readonly
|
|
|
|
7FF57E710000
|
unkown
|
page readonly
|
|
|
|
7AD07EB000
|
unkown
|
page read and write
|
|
|
|
7FF5609DF000
|
unkown
|
page readonly
|
|
|
|
7FF4F4940000
|
unkown
|
page readonly
|
|
|
|
1F5C2002000
|
unkown
|
page read and write
|
|
|
|
A9EF87B000
|
unkown
|
page read and write
|
|
|
|
7FF5C5026000
|
unkown
|
page readonly
|
|
|
|
2753000
|
unkown
|
page readonly
|
|
|
|
D986A7F000
|
unkown
|
page read and write
|
|
|
|
7FF560C76000
|
unkown
|
page readonly
|
|
|
|
7FF560C2C000
|
unkown
|
page readonly
|
|
|
|
7FF5C4C7F000
|
unkown
|
page readonly
|
|
|
|
7FF5BCA17000
|
unkown
|
page readonly
|
|
|
|
7FF54FCDD000
|
unkown
|
page readonly
|
|
|
|
65E0000
|
unkown
|
page readonly
|
|
|
|
24B449F0000
|
unkown
|
page readonly
|
|
|
|
65DE000
|
unkown
|
page read and write
|
|
|
|
17626A46000
|
heap default
|
page read and write
|
|
|
|
27795658000
|
unkown
|
page read and write
|
|
|
|
273D000
|
unkown
|
page readonly
|
|
|
|
17626A3B000
|
heap default
|
page read and write
|
|
|
|
9058B6E000
|
unkown
|
page read and write
|
|
|
|
24B44A86000
|
unkown
|
page read and write
|
|
|
|
241E26E8000
|
unkown
|
page read and write
|
|
|
|
205AA800000
|
unkown
|
page read and write
|
|
|
|
241E2F7D000
|
unkown
|
page read and write
|
|
|
|
7FF531884000
|
unkown
|
page readonly
|
|
|
|
7FF54FBC4000
|
unkown
|
page readonly
|
|
|
|
7AD16FB000
|
unkown
|
page read and write
|
|
|
|
1B881468000
|
unkown
|
page read and write
|
|
|
|
1A2B1C8D000
|
unkown
|
page read and write
|
|
|
|
7FF5C50A2000
|
unkown
|
page readonly
|
|
|
|
7FF538B17000
|
unkown
|
page readonly
|
|
|
|
7FF560C37000
|
unkown
|
page readonly
|
|
|
|
22C75147000
|
unkown
|
page read and write
|
|
|
|
1F5C0C84000
|
unkown
|
page read and write
|
|
|
|
24B44A70000
|
unkown
|
page read and write
|
|
|
|
241E2F64000
|
unkown
|
page read and write
|
|
|
|
1D73B800000
|
unkown
|
page readonly
|
|
|
|
2B13000
|
unkown
|
page readonly
|
|
|
|
17626A57000
|
unkown
|
page read and write
|
|
|
|
1F5BE9E0000
|
heap private
|
page read and write
|
|
|
|
241E3461000
|
unkown
|
page read and write
|
|
|
|
7FF57EABC000
|
unkown
|
page readonly
|
|
|
|
7FF5BD259000
|
unkown
|
page readonly
|
|
|
|
7FF560C71000
|
unkown
|
page readonly
|
|
|
|
7FF58BA31000
|
unkown
|
page readonly
|
|
|
|
1D73B690000
|
unkown
|
page read and write
|
|
|
|
241E2F38000
|
unkown
|
page read and write
|
|
|
|
27795700000
|
unkown
|
page read and write
|
|
|
|
1A2B1B00000
|
heap private
|
page read and write
|
|
|
|
241E2FA4000
|
unkown
|
page read and write
|
|
|
|
7FF58B9EC000
|
unkown
|
page readonly
|
|
|
|
7FF538E08000
|
unkown
|
page readonly
|
|
|
|
7FF560A51000
|
unkown
|
page readonly
|
|
|
|
7AD1579000
|
unkown
|
page read and write
|
|
|
|
7FF4FE092000
|
unkown
|
page readonly
|
|
|
|
56D334E000
|
unkown
|
page read and write
|
|
|
|
7FF57EB50000
|
unkown
|
page readonly
|
|
|
|
1F5C09A9000
|
unkown
|
page read and write
|
|
|
|
7FF5BD437000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
7FF53185C000
|
unkown
|
page readonly
|
|
|
|
277970A0000
|
unkown
|
page readonly
|
|
|
|
D986CFE000
|
unkown
|
page read and write
|
|
|
|
241E2800000
|
unkown
|
page readonly
|
|
|
|
D986C7F000
|
unkown
|
page read and write
|
|
|
|
1F5C1610000
|
unkown
|
page read and write
|
|
|
|
7FF5318A9000
|
unkown
|
page readonly
|
|
|
|
7FF5C4DE4000
|
unkown
|
page readonly
|
|
|
|
3191000
|
unkown
|
page read and write
|
|
|
|
86CCA7F000
|
unkown
|
page read and write
|
|
|
|
316A000
|
heap default
|
page read and write
|
|
|
|
7FF57EAB4000
|
unkown
|
page readonly
|
|
|
|
241E2F6B000
|
unkown
|
page read and write
|
|
|
|
7FF58BAAA000
|
unkown
|
page readonly
|
|
|
|
7FF560CF1000
|
unkown
|
page readonly
|
|
|
|
7FF560BFE000
|
unkown
|
page readonly
|
|
|
|
2AEA000
|
unkown
|
page read and write
|
|
|
|
7FF560B03000
|
unkown
|
page readonly
|
|
|
|
22C73072000
|
unkown
|
page read and write
|
|
|
|
241E2F8C000
|
unkown
|
page read and write
|
|
|
|
2760000
|
unkown
|
page readonly
|
|
|
|
1B881440000
|
unkown
|
page read and write
|
|
|
|
7FF531922000
|
unkown
|
page readonly
|
|
|
|
7FF58B8A1000
|
unkown
|
page readonly
|
|
|
|
1F5BEA5E000
|
unkown
|
page read and write
|
|
|
|
241E2D30000
|
unkown
|
page write copy
|
|
|
|
7FF538A3B000
|
unkown
|
page readonly
|
|
|
|
7FF5BBEAE000
|
unkown
|
page readonly
|
|
|
|
7FF4F49D8000
|
unkown
|
page readonly
|
|
|
|
1F5C09A7000
|
unkown
|
page read and write
|
|
|
|
7FF5BC5AE000
|
unkown
|
page readonly
|
|
|
|
205AA8DB000
|
unkown
|
page read and write
|
|
|
|
7FF54FC77000
|
unkown
|
page readonly
|
|
|
|
2C02000
|
unkown
|
page readonly
|
|
|
|
7FF5BCF62000
|
unkown
|
page readonly
|
|
|
|
7FF538D0C000
|
unkown
|
page readonly
|
|
|
|
241E26D8000
|
unkown
|
page read and write
|
|
|
|
17626B40000
|
unkown
|
page readonly
|
|
|
|
1F5C095B000
|
unkown
|
page read and write
|
|
|
|
7FF58B7E1000
|
unkown
|
page readonly
|
|
|
|
7AD0BFA000
|
unkown
|
page read and write
|
|
|
|
7FF4F48A3000
|
unkown
|
page readonly
|
|
|
|
241E2F5C000
|
unkown
|
page read and write
|
|
|
|
7FF58B9EF000
|
unkown
|
page readonly
|
|
|
|
22C732D0000
|
unkown
|
page readonly
|
|
|
|
205AC760000
|
unkown
|
page read and write
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
17626A41000
|
unkown
|
page read and write
|
|
|
|
7FF53189E000
|
unkown
|
page readonly
|
|
|
|
24B44A29000
|
unkown
|
page read and write
|
|
|
|
2F4E000
|
unkown
|
page read and write
|
|
|
|
4F2CFED000
|
unkown
|
page read and write
|
|
|
|
2B92000
|
unkown
|
page readonly
|
|
|
|
2719000
|
unkown
|
page readonly
|
|
|
|
2FFE000
|
unkown
|
page read and write
|
|
|
|
1F5BEB1E000
|
unkown
|
page read and write
|
|
|
|
7FF58BA28000
|
unkown
|
page readonly
|
|
|
|
1F5C1310000
|
unkown
|
page read and write
|
|
|
|
7FF4F466A000
|
unkown
|
page readonly
|
|
|
|
17626A6A000
|
unkown
|
page read and write
|
|
|
|
278F000
|
unkown
|
page readonly
|
|
|
|
7FF54FC4A000
|
unkown
|
page readonly
|
|
|
|
7FF5BCBC6000
|
unkown
|
page readonly
|
|
|
|
22C74F30000
|
unkown
|
page read and write
|
|
|
|
7FF5BC962000
|
unkown
|
page readonly
|
|
|
|
1F5C0802000
|
unkown
|
page read and write
|
|
|
|
7FF54FC65000
|
unkown
|
page readonly
|
|
|
|
A9EF9FA000
|
unkown
|
page read and write
|
|
|
|
7AD13FB000
|
unkown
|
page read and write
|
|
|
|
3270000
|
unkown
|
page read and write
|
|
|
|
241E26F3000
|
unkown
|
page read and write
|
|
|
|
7FF5BD42C000
|
unkown
|
page readonly
|
|
|
|
7FF5BB70D000
|
unkown
|
page readonly
|
|
|
|
1F5C1110000
|
unkown
|
page read and write
|
|
|
|
241E2F84000
|
unkown
|
page read and write
|
|
|
|
7FF54FB41000
|
unkown
|
page readonly
|
|
|
|
7FF4F4677000
|
unkown
|
page readonly
|
|
|
|
1B881240000
|
unkown
|
page readonly
|
|
|
|
22C730F3000
|
unkown
|
page read and write
|
|
|
|
2EDA000
|
unkown
|
page read and write
|
|
|
|
241E264B000
|
unkown
|
page read and write
|
|
|
|
7FF58B786000
|
unkown
|
page readonly
|
|
|
|
205AC380000
|
unkown
|
page readonly
|
|
|
|
277953A0000
|
heap private
|
page read and write
|
|
|
|
7FF5C4EFD000
|
unkown
|
page readonly
|
|
|
|
205AA917000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
heap default
|
page read and write
|
|
|
|
7FF5BBFA2000
|
unkown
|
page readonly
|
|
|
|
7FF58B68F000
|
unkown
|
page readonly
|
|
|
|
7FF5BCCE1000
|
unkown
|
page readonly
|
|
|
|
86115FC000
|
unkown
|
page read and write
|
|
|
|
347D000
|
unkown
|
page read and write
|
|
|
|
241E28D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F475B000
|
unkown
|
page readonly
|
|
|
|
240C98C0000
|
unkown
|
page read and write
|
|
|
|
7FF5BBEDC000
|
unkown
|
page readonly
|
|
|
|
24B45202000
|
unkown
|
page read and write
|
|
|
|
1F5C1000000
|
unkown
|
page read and write
|
|
|
|
7FF54FC5E000
|
unkown
|
page readonly
|
|
|
|
1F5C1810000
|
unkown
|
page read and write
|
|
|
|
7FF4FDFF8000
|
unkown
|
page readonly
|
|
|
|
7AD0FF9000
|
unkown
|
page read and write
|
|
|
|
7FF5C4FC7000
|
unkown
|
page readonly
|
|
|
|
3240000
|
unkown
|
page read and write
|
|
|
|
7FF5BCEF2000
|
unkown
|
page readonly
|
|
|
|
2BF0000
|
unkown
|
page readonly
|
|
|
|
7FF538C43000
|
unkown
|
page readonly
|
|
|
|
7FF4F4A11000
|
unkown
|
page readonly
|
|
|
|
7FF57EB94000
|
unkown
|
page readonly
|
|
|
|
205AA8E3000
|
unkown
|
page read and write
|
|
|
|
205AA914000
|
unkown
|
page read and write
|
|
|
|
22C75147000
|
unkown
|
page read and write
|
|
|
|
22C73000000
|
unkown
|
page read and write
|
|
|
|
22C75200000
|
unkown
|
page readonly
|
|
|
|
7FF5608CF000
|
unkown
|
page readonly
|
|
|
|
1F5BEB1F000
|
unkown
|
page read and write
|
|
|
|
7FF5BD34D000
|
unkown
|
page readonly
|
|
|
|
7FF4FE107000
|
unkown
|
page readonly
|
|
|
|
7C1F87A000
|
unkown
|
page read and write
|
|
|
|
241E2D90000
|
unkown
|
page readonly
|
|
|
|
7FF5BCDA0000
|
unkown
|
page readonly
|
|
|
|
3189000
|
unkown
|
page read and write
|
|
|
|
241E3402000
|
unkown
|
page read and write
|
|
|
|
1F5C1310000
|
unkown
|
page read and write
|
|
|
|
272C000
|
unkown
|
page readonly
|
|
|
|
7FF5BBE50000
|
unkown
|
page readonly
|
|
|
|
1A2B1D02000
|
unkown
|
page read and write
|
|
|
|
7FF5C4FAA000
|
unkown
|
page readonly
|
|
|
|
241E2DA0000
|
unkown
|
page readonly
|
|
|
|
7FF4F4766000
|
unkown
|
page readonly
|
|
|
|
347D000
|
unkown
|
page read and write
|
|
|
|
241E2F51000
|
unkown
|
page read and write
|
|
|
|
7FF538966000
|
unkown
|
page readonly
|
|
|
|
1F5BEACA000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF2D000
|
unkown
|
page readonly
|
|
|
|
1F5C0981000
|
unkown
|
page read and write
|
|
|
|
7FF4F4A92000
|
unkown
|
page readonly
|
|
|
|
7FF58B7E5000
|
unkown
|
page readonly
|
|
|
|
7FF58BA0A000
|
unkown
|
page readonly
|
|
|
|
24B45740000
|
unkown
|
page readonly
|
|
|
|
241E26E0000
|
unkown
|
page read and write
|
|
|
|
2882000
|
unkown
|
page readonly
|
|
|
|
7FF5609C6000
|
unkown
|
page readonly
|
|
|
|
205AC900000
|
unkown
|
page read and write
|
|
|
|
1F5BEAF1000
|
unkown
|
page read and write
|
|
|
|
7FF4F49B7000
|
unkown
|
page readonly
|
|
|
|
1D73BC60000
|
unkown
|
page readonly
|
|
|
|
1F5BEB2F000
|
unkown
|
page read and write
|
|
|
|
205AAA00000
|
unkown
|
page readonly
|
|
|
|
7AD0F7B000
|
unkown
|
page read and write
|
|
|
|
7FF57EBBE000
|
unkown
|
page readonly
|
|
|
|
7FF531921000
|
unkown
|
page readonly
|
|
|
|
7FF4FE1E2000
|
unkown
|
page readonly
|
|
|
|
1A2B1C7C000
|
unkown
|
page read and write
|
|
|
|
1B882DA0000
|
unkown
|
page read and write
|
|
|
|
7FF4F4A19000
|
unkown
|
page readonly
|
|
|
|
7FF5BBEAA000
|
unkown
|
page readonly
|
|
|
|
2B6D000
|
unkown
|
page readonly
|
|
|
|
1B8811D0000
|
heap private
|
page read and write
|
|
|
|
7FF5BCE4A000
|
unkown
|
page readonly
|
|
|
|
241E3402000
|
unkown
|
page read and write
|
|
|
|
7FF57EB3A000
|
unkown
|
page readonly
|
|
|
|
7FF5BBCD1000
|
unkown
|
page readonly
|
|
|
|
30D3000
|
heap private
|
page read and write
|
|
|
|
7FF560B9C000
|
unkown
|
page readonly
|
|
|
|
7FF5BD1C6000
|
unkown
|
page readonly
|
|
|
|
7FF531914000
|
unkown
|
page readonly
|
|
|
|
1F5C09AB000
|
unkown
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
7FF4FE090000
|
unkown
|
page readonly
|
|
|
|
205AC280000
|
unkown
|
page read and write
|
|
|
|
2650000
|
unkown
|
page readonly
|
|
|
|
2B7F000
|
unkown
|
page readonly
|
|
|
|
7FF5C4811000
|
unkown
|
page readonly
|
|
|
|
214EFAF000
|
unkown
|
page read and write
|
|
|
|
240C7E55000
|
unkown
|
page read and write
|
|
|
|
1F5BE850000
|
heap default
|
page read and write
|
|
|
|
7FF560461000
|
unkown
|
page readonly
|
|
|
|
241E2F53000
|
unkown
|
page read and write
|
|
|
|
1F5C099A000
|
unkown
|
page read and write
|
|
|
|
7FF4FDDC7000
|
unkown
|
page readonly
|
|
|
|
241E2F5C000
|
unkown
|
page read and write
|
|
|
|
27795600000
|
unkown
|
page read and write
|
|
|
|
7FF58B8C3000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F7B000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
7FF538CED000
|
unkown
|
page readonly
|
|
|
|
7FF5BD241000
|
unkown
|
page readonly
|
|
|
|
7FF5BD3A0000
|
unkown
|
page readonly
|
|
|
|
205AC6E0000
|
unkown
|
page read and write
|
|
|
|
7FF531868000
|
unkown
|
page readonly
|
|
|
|
7FF5BD3EA000
|
unkown
|
page readonly
|
|
|
|
318D000
|
unkown
|
page read and write
|
|
|
|
7FF54F820000
|
unkown
|
page readonly
|
|
|
|
1A2B1B90000
|
unkown
|
page read and write
|
|
|
|
205AA913000
|
unkown
|
page read and write
|
|
|
|
3F94C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5BCCA3000
|
unkown
|
page readonly
|
|
|
|
241E2600000
|
unkown
|
page read and write
|
|
|
|
7FF538DCC000
|
unkown
|
page readonly
|
|
|
|
1D73B470000
|
unkown
|
page readonly
|
|
|
|
27A6000
|
unkown
|
page readonly
|
|
|
|
7FF5BD471000
|
unkown
|
page readonly
|
|
|
|
7C1F51F000
|
unkown
|
page read and write
|
|
|
|
7FF5BCEE4000
|
unkown
|
page readonly
|
|
|
|
7FF4F4201000
|
unkown
|
page readonly
|
|
|
|
1F5C09DF000
|
unkown
|
page read and write
|
|
|
|
205AA900000
|
unkown
|
page read and write
|
|
|
|
241E2F71000
|
unkown
|
page read and write
|
|
|
|
2779563F000
|
unkown
|
page read and write
|
|
|
|
241E2651000
|
unkown
|
page read and write
|
|
|
|
24B44A13000
|
unkown
|
page read and write
|
|
|
|
22C73200000
|
unkown
|
page readonly
|
|
|
|
205AA897000
|
unkown
|
page read and write
|
|
|
|
7FF538DA5000
|
unkown
|
page readonly
|
|
|
|
31A9000
|
unkown
|
page read and write
|
|
|
|
1F5BEA91000
|
unkown
|
page read and write
|
|
|
|
7FF5BD0CA000
|
unkown
|
page readonly
|
|
|
|
7FF5C509A000
|
unkown
|
page readonly
|
|
|
|
7FF5C4FE7000
|
unkown
|
page readonly
|
|
|
|
7FF5C4FBB000
|
unkown
|
page readonly
|
|
|
|
24B44A56000
|
unkown
|
page read and write
|
|
|
|
1A2B1C55000
|
unkown
|
page read and write
|
|
|
|
7C1FA79000
|
unkown
|
page read and write
|
|
|
|
24B449E0000
|
unkown
|
page readonly
|
|
|
|
241E2F41000
|
unkown
|
page read and write
|
|
|
|
241E2F92000
|
unkown
|
page read and write
|
|
|
|
241E2F53000
|
unkown
|
page read and write
|
|
|
|
22C73119000
|
unkown
|
page read and write
|
|
|
|
240C7E29000
|
unkown
|
page read and write
|
|
|
|
7FF5BCE2F000
|
unkown
|
page readonly
|
|
|
|
205AA8A8000
|
unkown
|
page read and write
|
|
|
|
7FF5BBEDF000
|
unkown
|
page readonly
|
|
|
|
7FF4F49A0000
|
unkown
|
page readonly
|
|
|
|
7FF57E9A1000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
3478000
|
unkown
|
page read and write
|
|
|
|
4F2D9F8000
|
unkown
|
page read and write
|
|
|
|
1F5C0A20000
|
unkown
|
page read and write
|
|
|
|
64D0000
|
heap private
|
page read and write
|
|
|
|
22C73055000
|
unkown
|
page read and write
|
|
|
|
7FF5BCC61000
|
unkown
|
page readonly
|
|
|
|
7C1FC7D000
|
unkown
|
page read and write
|
|
|
|
22C76010000
|
unkown
|
page read and write
|
|
|
|
1A2B1C4D000
|
unkown
|
page read and write
|
|
|
|
1F5BEABE000
|
unkown
|
page read and write
|
|
|
|
7FF560BEA000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F8F000
|
unkown
|
page readonly
|
|
|
|
3185000
|
unkown
|
page read and write
|
|
|
|
4F2D8F8000
|
unkown
|
page read and write
|
|
|
|
1F5BEB3E000
|
unkown
|
page read and write
|
|
|
|
7FF5BD4F1000
|
unkown
|
page readonly
|
|
|
|
86CCCFF000
|
unkown
|
page read and write
|
|
|
|
241E2713000
|
unkown
|
page read and write
|
|
|
|
241E341D000
|
unkown
|
page read and write
|
|
|
|
7FF5BD479000
|
unkown
|
page readonly
|
|
|
|
7FF5BD45E000
|
unkown
|
page readonly
|
|
|
|
7FF560BD4000
|
unkown
|
page readonly
|
|
|
|
3F9477B000
|
unkown
|
page read and write
|
|
|
|
7FF5BBF94000
|
unkown
|
page readonly
|
|
|
|
56D38F7000
|
unkown
|
page read and write
|
|
|
|
7FF4F4881000
|
unkown
|
page readonly
|
|
|
|
7FF5BD1BB000
|
unkown
|
page readonly
|
|
|
|
1B88146D000
|
unkown
|
page read and write
|
|
|
|
7FF5C4FAE000
|
unkown
|
page readonly
|
|
|
|
17626A30000
|
heap default
|
page read and write
|
|
|
|
27795410000
|
unkown
|
page readonly
|
|
|
|
22C72FC0000
|
unkown
|
page readonly
|
|
|
|
848755E000
|
unkown
|
page read and write
|
|
|
|
7FF4F4A1D000
|
unkown
|
page readonly
|
|
|
|
205AC750000
|
unkown
|
page readonly
|
|
|
|
7AD107A000
|
unkown
|
page read and write
|
|
|
|
7FF5BD3FA000
|
unkown
|
page readonly
|
|
|
|
1D73B700000
|
unkown
|
page read and write
|
|
|
|
241E2F50000
|
unkown
|
page read and write
|
|
|
|
22C73113000
|
unkown
|
page read and write
|
|
|
|
2C08000
|
unkown
|
page readonly
|
|
|
|
7FF5BCC36000
|
unkown
|
page readonly
|
|
|
|
7FF538DF4000
|
unkown
|
page readonly
|
|
|
|
241E2F22000
|
unkown
|
page read and write
|
|
|
|
7FF5C480D000
|
unkown
|
page readonly
|
|
|
|
241E2FD4000
|
unkown
|
page read and write
|
|
|
|
7FF58B960000
|
unkown
|
page readonly
|
|
|
|
1F5C09D4000
|
unkown
|
page read and write
|
|
|
|
1F5C0A40000
|
unkown
|
page readonly
|
|
|
|
7FF5BD2E1000
|
unkown
|
page readonly
|
|
|
|
1F5BE7F0000
|
heap private
|
page read and write
|
|
|
|
4F2D375000
|
unkown
|
page read and write
|
|
|
|
241E26A1000
|
unkown
|
page read and write
|
|
|
|
241E263C000
|
unkown
|
page read and write
|
|
|
|
2791000
|
unkown
|
page readonly
|
|
|
|
241E2F52000
|
unkown
|
page read and write
|
|
|
|
1A2B1D13000
|
unkown
|
page read and write
|
|
|
|
7FF4FDEB6000
|
unkown
|
page readonly
|
|
|
|
2B09000
|
unkown
|
page readonly
|
|
|
|
7FF5BBEE8000
|
unkown
|
page readonly
|
|
|
|
1D73BE02000
|
unkown
|
page read and write
|
|
|
|
7FF5C4C6C000
|
unkown
|
page readonly
|
|
|
|
7FF57EAA3000
|
unkown
|
page readonly
|
|
|
|
7FF560AE1000
|
unkown
|
page readonly
|
|
|
|
241E3402000
|
unkown
|
page read and write
|
|
|
|
205AC926000
|
unkown
|
page read and write
|
|
|
|
7FF5C4F9C000
|
unkown
|
page readonly
|
|
|
|
1F5C0D43000
|
unkown
|
page read and write
|
|
|
|
7FF58BA2E000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE00000
|
unkown
|
page readonly
|
|
|
|
1F5BEABE000
|
unkown
|
page read and write
|
|
|
|
7FF5BCEEA000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE6E000
|
unkown
|
page readonly
|
|
|
|
214F2F9000
|
unkown
|
page read and write
|
|
|
|
4F2D278000
|
unkown
|
page read and write
|
|
|
|
1F5C0992000
|
unkown
|
page read and write
|
|
|
|
7FF58BA36000
|
unkown
|
page readonly
|
|
|
|
22C73102000
|
unkown
|
page read and write
|
|
|
|
240C80D0000
|
unkown
|
page write copy
|
|
|
|
24B44B02000
|
unkown
|
page read and write
|
|
|
|
19648C13000
|
unkown
|
page read and write
|
|
|
|
241E2F62000
|
unkown
|
page read and write
|
|
|
|
4F2D777000
|
unkown
|
page read and write
|
|
|
|
1F5BE860000
|
unkown
|
page readonly
|
|
|
|
241E26B0000
|
unkown
|
page read and write
|
|
|
|
240C7E02000
|
unkown
|
page read and write
|
|
|
|
7FF4FE14E000
|
unkown
|
page readonly
|
|
|
|
17626A5F000
|
unkown
|
page read and write
|
|
|
|
7FF5BBE52000
|
unkown
|
page readonly
|
|
|
|
7FF5BCD03000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F84000
|
unkown
|
page readonly
|
|
|
|
241E3454000
|
unkown
|
page read and write
|
|
|
|
7FF538E84000
|
unkown
|
page readonly
|
|
|
|
7FF54FAB1000
|
unkown
|
page readonly
|
|
|
|
7FF5BCDA2000
|
unkown
|
page readonly
|
|
|
|
7FF5C4FB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C4B12000
|
unkown
|
page readonly
|
|
|
|
2B6F000
|
unkown
|
page readonly
|
|
|
|
205AA7F0000
|
unkown
|
page readonly
|
|
|
|
19648C02000
|
unkown
|
page read and write
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
241E2F30000
|
unkown
|
page read and write
|
|
|
|
3471000
|
unkown
|
page read and write
|
|
|
|
7FF5318AD000
|
unkown
|
page readonly
|
|
|
|
278A000
|
unkown
|
page readonly
|
|
|
|
3F94FFE000
|
unkown
|
page read and write
|
|
|
|
7FF5BD234000
|
unkown
|
page readonly
|
|
|
|
22C730C4000
|
unkown
|
page read and write
|
|
|
|
7AD10FF000
|
unkown
|
page read and write
|
|
|
|
1F5C0E00000
|
unkown
|
page read and write
|
|
|
|
4F2CEEC000
|
unkown
|
page read and write
|
|
|
|
7FF4FE169000
|
unkown
|
page readonly
|
|
|
|
7FF560AFB000
|
unkown
|
page readonly
|
|
|
|
7FF4F49CC000
|
unkown
|
page readonly
|
|
|
|
27AB000
|
unkown
|
page readonly
|
|
|
|
7FF5C4F73000
|
unkown
|
page readonly
|
|
|
|
7FF4F4A84000
|
unkown
|
page readonly
|
|
|
|
7FF4FE144000
|
unkown
|
page readonly
|
|
|
|
241E2F51000
|
unkown
|
page read and write
|
|
|
|
7FF538D04000
|
unkown
|
page readonly
|
|
|
|
1A2B1D00000
|
unkown
|
page read and write
|
|
|
|
1F5BEA60000
|
unkown
|
page read and write
|
|
|
|
861187F000
|
unkown
|
page read and write
|
|
|
|
7AD0AFE000
|
unkown
|
page read and write
|
|
|
|
241E3402000
|
unkown
|
page read and write
|
|
|
|
27795800000
|
unkown
|
page readonly
|
|
|
|
205AA829000
|
unkown
|
page read and write
|
|
|
|
241E26A6000
|
unkown
|
page read and write
|
|
|
|
7FF4F4A91000
|
unkown
|
page readonly
|
|
|
|
7FF4FE16D000
|
unkown
|
page readonly
|
|
|
|
241E2F52000
|
unkown
|
page read and write
|
|
|
|
30D0000
|
heap private
|
page read and write
|
|
|
|
7FF538DD7000
|
unkown
|
page readonly
|
|
|
|
7FF538975000
|
unkown
|
page readonly
|
|
|
|
7C1F49B000
|
unkown
|
page read and write
|
|
|
|
240C7D50000
|
heap private
|
page read and write
|
|
|
|
1D73B560000
|
unkown
|
page read and write
|
|
|
|
A9EFBF9000
|
unkown
|
page read and write
|
|
|
|
1F5C0933000
|
unkown
|
page read and write
|
|
|
|
7FF5BBDAB000
|
unkown
|
page readonly
|
|
|
|
7FF5C5029000
|
unkown
|
page readonly
|
|
|
|
7FF54FBAD000
|
unkown
|
page readonly
|
|
|
|
7AD0D7A000
|
unkown
|
page read and write
|
|
|
|
2B2B000
|
unkown
|
page read and write
|
|
|
|
7FF4FD951000
|
unkown
|
page readonly
|
|
|
|
241E2F93000
|
unkown
|
page read and write
|
|
|
|
22C7307E000
|
unkown
|
page read and write
|
|
|
|
7FF560CE4000
|
unkown
|
page readonly
|
|
|
|
1F5BEA54000
|
unkown
|
page read and write
|
|
|
|
24B44A51000
|
unkown
|
page read and write
|
|
|
|
2B59000
|
unkown
|
page readonly
|
|
|
|
1F5C1310000
|
unkown
|
page read and write
|
|
|
|
1F5BE980000
|
unkown
|
page readonly
|
|
|
|
241E25B0000
|
unkown
|
page read and write
|
|
|
|
241E2F61000
|
unkown
|
page read and write
|
|
|
|
24B44B00000
|
unkown
|
page read and write
|
|
|
|
1D73B702000
|
unkown
|
page read and write
|
|
|
|
2FB0000
|
unkown
|
page readonly
|
|
|
|
7FF58B962000
|
unkown
|
page readonly
|
|
|
|
7FF5BCD4D000
|
unkown
|
page readonly
|
|
|
|
2FA0000
|
unkown
|
page readonly
|
|
|
|
1F5C091A000
|
unkown
|
page read and write
|
|
|
|
274C000
|
unkown
|
page readonly
|
|
|
|
7FF58BAB2000
|
unkown
|
page readonly
|
|
|
|
241E3400000
|
unkown
|
page read and write
|
|
|
|
3475000
|
unkown
|
page read and write
|
|
|
|
22C730EE000
|
unkown
|
page read and write
|
|
|
|
7FF5609D8000
|
unkown
|
page readonly
|
|
|
|
7FF4F4A08000
|
unkown
|
page readonly
|
|
|
|
347D000
|
unkown
|
page read and write
|
|
|
|
1B881502000
|
unkown
|
page read and write
|
|
|
|
6150000
|
unkown
|
page readonly
|
|
|
|
7FF57EBB8000
|
unkown
|
page readonly
|
|
|
|
22C74F20000
|
unkown
|
page readonly
|
|
|
|
2779566E000
|
unkown
|
page read and write
|
|
|
|
2BE5000
|
unkown
|
page readonly
|
|
|
|
205AC923000
|
unkown
|
page read and write
|
|
|
|
7FF4F49E4000
|
unkown
|
page readonly
|
|
|
|
1F5C0D43000
|
unkown
|
page read and write
|
|
There are 1392 hidden memdumps, click here to show them.