Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
instruct_11.21.doc.docm
|
Microsoft Word 2007+
|
initial sample
|
 |
|
|
C:\Users\Public\~$wPowNext.hta
|
data
|
dropped
|
 |
|
|
C:\Users\Public\~WRD0000.tmp
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\24FED24A-A137-4984-A755-6A68F4E24F72
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C4F64A59.gif
|
GIF image data, version 89a, 774 x 198
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRF{C8F000F6-2878-4270-8CA4-E7B38F5CB954}.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{D1BBD753-2A54-49B7-9D6A-D5C5939D5159}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{F8C6CC2A-BDEA-4097-B472-52AC1B92BF84}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\error[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\warning[1]
|
GIF image data, version 89a, 36 x 38
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\error[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Public.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Wed
Apr 11 22:38:20 2018, mtime=Fri Nov 12 19:13:31 2021, atime=Thu Jun 27 13:51:23 2019, length=4096, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\instruct_11.21.doc.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:50
2020, mtime=Fri Nov 12 19:13:29 2021, atime=Fri Nov 12 19:13:26 2021, length=34817, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\powPowNext.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Fri Nov 12 19:13:31
2021, mtime=Fri Nov 12 19:13:31 2021, atime=Fri Nov 12 19:13:31 2021, length=3346, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
modified
|
|
|
|
C:\Users\user\Desktop\~$struct_11.21.doc.docm
|
data
|
dropped
|
|
|
|
C:\users\public\powPowNext.hta (copy)
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\warning[1]
|
GIF image data, version 89a, 36 x 38
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\error[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C6D3C2DB.gif
|
GIF image data, version 89a, 774 x 198
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{21724630-2B33-445C-A10E-E71E570B535F}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{70B53CFD-265E-4516-AFB0-C6E692CB3FB3}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A92381E7-919A-4DD3-B53A-282AF29674DF}.tmp
|
data
|
dropped
|
|
There are 16 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE" /Automation -Embedding
|
|
|
|
C:\Windows\explorer.exe
|
c:\windows\explorer c:\users\public\powPowNext.hta
|
|
|
|
C:\Windows\explorer.exe
|
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
|
|
|
|
C:\Windows\SysWOW64\mshta.exe
|
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Public\powPowNext.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /Automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\mshta.exe
|
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Public\powPowNext.hta"
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://shoulderelliottd.com/boolk/QlaJk8C6vYqIyEwbdypBHv3yJR/wrWWNCD/77427/bebys8?cid=Bm9cAP&wP8zhkK
|
unknown
|
|
|
|
http://en.wF
|
unknown
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://roaming.edog.
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://api.aadrm.com
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://outlook.office365.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
There are 95 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
shoulderelliottd.com
|
194.62.42.144
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
194.62.42.144
|
shoulderelliottd.com
|
Russian Federation
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
|
r=?
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
|
s=?
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
|
5`?
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\StartupItems
|
5e?
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\4A7B7
|
4A7B7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Word8.0
|
MSForms
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Word8.0
|
MSComctlLib
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Name
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Path
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Extensions
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Place MRU
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 21
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\4AF87
|
4AF87
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
|
File Path
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
|
Datetime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
|
Position
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Custom Dictionaries
|
1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Shared Tools\Proofing Tools\1.0\Custom Dictionaries
|
UpdateComplete
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
WORDFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Name
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Path
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Extensions
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Name
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Path
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\16.0\Word\Text Converters\Import
|
Extensions
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Resiliency\DocumentRecovery\4A7B7
|
4A7B7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
CacheReady
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
LastRequest
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
CacheReady
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
LastUpdate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ServicesManagerCache\ServicesCatalog
|
NextUpdate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Place MRU\Change
|
ChangeId
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\File MRU\Change
|
ChangeId
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100C0400000000000F01FEC\Usage
|
SpellingAndGrammarFiles_1036
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F10090400000000000F01FEC\Usage
|
SpellingAndGrammarFiles_1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109F100A0C00000000000F01FEC\Usage
|
SpellingAndGrammarFiles_3082
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Reading Locations\Document 0
|
Datetime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Data
|
Settings
|
|
|
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
|
LangID
|
|
|
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
|
C:\Windows\SysWOW64\mshta.exe.FriendlyAppName
|
|
|
|
HKEY_CURRENT_USER_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
|
C:\Windows\SysWOW64\mshta.exe.ApplicationCompany
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hta\OpenWithProgids
|
htafile
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
ni-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
6k-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
8m-
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2D6CF
|
2D6CF
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 21
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 21
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2DF67
|
2DF67
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
WORDFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2D6CF
|
2D6CF
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
There are 152 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
7FF52A429000
|
unkown image
|
page readonly
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
7FF580441000
|
unkown image
|
page readonly
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
656D000
|
unkown
|
page read and write
|
|
|
|
23739EA0000
|
unkown image
|
page readonly
|
|
|
|
7FF5A8EC3000
|
unkown image
|
page readonly
|
|
|
|
144C1EA0000
|
heap default
|
page read and write
|
|
|
|
1FD99EB0000
|
unkown
|
page read and write
|
|
|
|
31A2000
|
unkown
|
page read and write
|
|
|
|
3215000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
8B24000
|
unkown
|
page read and write
|
|
|
|
7FF58054A000
|
unkown image
|
page readonly
|
|
|
|
27E5000
|
unkown image
|
page readonly
|
|
|
|
7FF5A95A8000
|
unkown image
|
page readonly
|
|
|
|
2F4DC7B000
|
stack
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
unkown image
|
page readonly
|
|
|
|
BC06000
|
unkown
|
page read and write
|
|
|
|
8B24000
|
unkown
|
page read and write
|
|
|
|
7FF4ECEA8000
|
unkown image
|
page readonly
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
8A91000
|
unkown
|
page read and write
|
|
|
|
7FF4ECE30000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECADA000
|
unkown image
|
page readonly
|
|
|
|
7FF503122000
|
unkown image
|
page readonly
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
63F77FE000
|
stack
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
7DF4935A0000
|
unkown image
|
page readonly
|
|
|
|
1FD9A100000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
7FF580644000
|
unkown image
|
page readonly
|
|
|
|
7FF529FC5000
|
unkown image
|
page readonly
|
|
|
|
64DD000
|
unkown
|
page read and write
|
|
|
|
6575000
|
unkown
|
page read and write
|
|
|
|
7DF578FB0000
|
unkown image
|
page readonly
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
8A8F000
|
unkown
|
page read and write
|
|
|
|
A505000
|
unkown
|
page read and write
|
|
|
|
653E000
|
unkown
|
page read and write
|
|
|
|
7FF55EFF5000
|
unkown image
|
page readonly
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
8A73000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5805A4000
|
unkown image
|
page readonly
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
6860000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
7DF5956D0000
|
unkown image
|
page readonly
|
|
|
|
64E1000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
35F0000
|
unkown image
|
page readonly
|
|
|
|
1894BE49000
|
unkown
|
page read and write
|
|
|
|
28EB000
|
unkown image
|
page readonly
|
|
|
|
7FF52A303000
|
unkown image
|
page readonly
|
|
|
|
7DF578FC2000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE6F0000
|
unkown image
|
page readonly
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD0E000
|
unkown image
|
page readonly
|
|
|
|
F1D000
|
unkown
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
7FF4ED019000
|
unkown image
|
page readonly
|
|
|
|
7FF580421000
|
unkown image
|
page readonly
|
|
|
|
7FF58056B000
|
unkown image
|
page readonly
|
|
|
|
8AAC000
|
unkown
|
page read and write
|
|
|
|
98971F8000
|
stack
|
page read and write
|
|
|
|
8B24000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
8B07000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
7F742000
|
unkown image
|
page readonly
|
|
|
|
6531000
|
unkown
|
page read and write
|
|
|
|
144C203C000
|
unkown
|
page read and write
|
|
|
|
290F000
|
unkown image
|
page readonly
|
|
|
|
BBEA000
|
unkown
|
page read and write
|
|
|
|
8B24000
|
unkown
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
320C000
|
unkown
|
page read and write
|
|
|
|
7FF503213000
|
unkown image
|
page readonly
|
|
|
|
7FF55F41E000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECD78000
|
unkown image
|
page readonly
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
2905000
|
unkown image
|
page readonly
|
|
|
|
7FF52A201000
|
unkown image
|
page readonly
|
|
|
|
668B000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
8AC6000
|
unkown
|
page read and write
|
|
|
|
6521000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
2F73000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
2373A5A0000
|
unkown image
|
page readonly
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
8A33000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
7FF502C59000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED033000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECF8C000
|
unkown image
|
page readonly
|
|
|
|
7FF563E4B000
|
unkown image
|
page readonly
|
|
|
|
1FD9A602000
|
unkown
|
page read and write
|
|
|
|
7FF55F464000
|
unkown image
|
page readonly
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
64E2000
|
unkown
|
page read and write
|
|
|
|
7DF5182F0000
|
unkown image
|
page readonly
|
|
|
|
6894000
|
unkown
|
page read and write
|
|
|
|
A7E4000
|
unkown
|
page read and write
|
|
|
|
E10000
|
unkown image
|
page readonly
|
|
|
|
7DF5BE6F2000
|
unkown image
|
page readonly
|
|
|
|
7D7000
|
unkown
|
page read and write
|
|
|
|
31FB000
|
unkown
|
page read and write
|
|
|
|
7FF55F496000
|
unkown image
|
page readonly
|
|
|
|
7FF580597000
|
unkown image
|
page readonly
|
|
|
|
688F000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC21000
|
unkown image
|
page readonly
|
|
|
|
6524000
|
unkown
|
page read and write
|
|
|
|
56AD000
|
stack
|
page read and write
|
|
|
|
7DF5745B0000
|
unkown image
|
page readonly
|
|
|
|
2373A04C000
|
unkown
|
page read and write
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
7DF5745A0000
|
unkown image
|
page readonly
|
|
|
|
7FF50311C000
|
unkown image
|
page readonly
|
|
|
|
BCA6000
|
unkown
|
page read and write
|
|
|
|
BCA4000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
31F3000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
6551000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
144C204E000
|
unkown
|
page read and write
|
|
|
|
7FF52A38F000
|
unkown image
|
page readonly
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
3620000
|
heap private
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
2899000
|
unkown image
|
page readonly
|
|
|
|
7F740000
|
unkown image
|
page readonly
|
|
|
|
7F5F1000
|
unkown
|
page execute read
|
|
|
|
1FD99916000
|
unkown
|
page read and write
|
|
|
|
7FF5802D7000
|
unkown image
|
page readonly
|
|
|
|
E4AF2FC000
|
stack
|
page read and write
|
|
|
|
8B0C000
|
unkown
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
ED0000
|
heap default
|
page read and write
|
|
|
|
7FF580403000
|
unkown image
|
page readonly
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
7FF5A9654000
|
unkown image
|
page readonly
|
|
|
|
1FD9A199000
|
unkown
|
page read and write
|
|
|
|
7FF52A3AA000
|
unkown image
|
page readonly
|
|
|
|
BCA6000
|
unkown
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
8AF8000
|
unkown
|
page read and write
|
|
|
|
2F4DD7B000
|
stack
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
65E4000
|
unkown
|
page read and write
|
|
|
|
2936000
|
unkown image
|
page readonly
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
7FF52A37B000
|
unkown image
|
page readonly
|
|
|
|
A9C0000
|
unkown
|
page read and write
|
|
|
|
7FF563E40000
|
unkown image
|
page readonly
|
|
|
|
688E000
|
unkown
|
page read and write
|
|
|
|
7FF563D21000
|
unkown image
|
page readonly
|
|
|
|
1FD9A19C000
|
unkown
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
652A000
|
unkown
|
page read and write
|
|
|
|
7FF55F38C000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
63F78F7000
|
stack
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
F11000
|
unkown
|
page read and write
|
|
|
|
BCA7000
|
unkown
|
page read and write
|
|
|
|
1FD99863000
|
unkown
|
page read and write
|
|
|
|
7FF502C5C000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
8AAC000
|
unkown
|
page read and write
|
|
|
|
556D000
|
stack
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
2E79000
|
unkown
|
page read and write
|
|
|
|
2373A215000
|
heap private
|
page read and write
|
|
|
|
1894BE13000
|
unkown
|
page read and write
|
|
|
|
6575000
|
unkown
|
page read and write
|
|
|
|
1FD9A1BA000
|
unkown
|
page read and write
|
|
|
|
12C0000
|
unkown image
|
page readonly
|
|
|
|
3216000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
1480000
|
unkown image
|
page readonly
|
|
|
|
1FD9A180000
|
unkown
|
page read and write
|
|
|
|
8A73000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
7FF52A3E7000
|
unkown image
|
page readonly
|
|
|
|
1894BF02000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
6536000
|
unkown
|
page read and write
|
|
|
|
7DF502120000
|
unkown image
|
page readonly
|
|
|
|
7FF529F70000
|
unkown image
|
page readonly
|
|
|
|
2373A04E000
|
unkown
|
page read and write
|
|
|
|
7FF50326A000
|
unkown image
|
page readonly
|
|
|
|
7FF563BC0000
|
unkown image
|
page readonly
|
|
|
|
2373A04C000
|
unkown
|
page read and write
|
|
|
|
1FD9A199000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
8AA7000
|
unkown
|
page read and write
|
|
|
|
6568000
|
unkown
|
page read and write
|
|
|
|
27DF000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
7DF53F530000
|
unkown image
|
page readonly
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
8B07000
|
unkown
|
page read and write
|
|
|
|
2373A031000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
A7E4000
|
unkown
|
page read and write
|
|
|
|
7FF52A37F000
|
unkown image
|
page readonly
|
|
|
|
740000
|
unkown image
|
page readonly
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
unkown image
|
page read and write
|
|
|
|
7DF5BE6E2000
|
unkown image
|
page readonly
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
7DF502130000
|
unkown image
|
page readonly
|
|
|
|
2373A029000
|
heap default
|
page read and write
|
|
|
|
720000
|
unkown image
|
page read and write
|
|
|
|
1894BC20000
|
unkown image
|
page readonly
|
|
|
|
688C000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
1D644687000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
7FF5A8EC7000
|
unkown image
|
page readonly
|
|
|
|
7FF563E3E000
|
unkown image
|
page readonly
|
|
|
|
7FF5031D4000
|
unkown image
|
page readonly
|
|
|
|
57AA000
|
stack
|
page read and write
|
|
|
|
8B07000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
31F2000
|
unkown
|
page read and write
|
|
|
|
A820000
|
heap private
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
654A000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
8B2C000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
7DF53F520000
|
unkown image
|
page readonly
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
A7F0000
|
unkown
|
page read and write
|
|
|
|
7DF5956F0000
|
unkown image
|
page readonly
|
|
|
|
7FF580126000
|
unkown image
|
page readonly
|
|
|
|
2373A04E000
|
unkown
|
page read and write
|
|
|
|
7DF5956E0000
|
unkown image
|
page readonly
|
|
|
|
8B11000
|
unkown
|
page read and write
|
|
|
|
265C000
|
unkown image
|
page readonly
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
1D64464D000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
566E000
|
stack
|
page read and write
|
|
|
|
7FF5031E8000
|
unkown image
|
page readonly
|
|
|
|
7FF563D8D000
|
unkown image
|
page readonly
|
|
|
|
3627000
|
heap private
|
page read and write
|
|
|
|
9896FF7000
|
stack
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
1FD9A18A000
|
unkown
|
page read and write
|
|
|
|
8AB5000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
8B24000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
7FF502E4A000
|
unkown image
|
page readonly
|
|
|
|
8A91000
|
unkown
|
page read and write
|
|
|
|
668B000
|
unkown
|
page read and write
|
|
|
|
7FF5030EC000
|
unkown image
|
page readonly
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
1FD9A14C000
|
unkown
|
page read and write
|
|
|
|
26F7000
|
unkown image
|
page readonly
|
|
|
|
7DF53F530000
|
unkown image
|
page readonly
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
7FF55F48E000
|
unkown image
|
page readonly
|
|
|
|
320F000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
3214000
|
unkown
|
page read and write
|
|
|
|
8B07000
|
unkown
|
page read and write
|
|
|
|
1894BE4B000
|
unkown
|
page read and write
|
|
|
|
6551000
|
unkown
|
page read and write
|
|
|
|
8AFA000
|
unkown
|
page read and write
|
|
|
|
31F4000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
8AFC000
|
unkown
|
page read and write
|
|
|
|
7FF4ECFCC000
|
unkown image
|
page readonly
|
|
|
|
7FF5A95B4000
|
unkown image
|
page readonly
|
|
|
|
7FF57FDA4000
|
unkown image
|
page readonly
|
|
|
|
6869000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
7FF580120000
|
unkown image
|
page readonly
|
|
|
|
144C2802000
|
unkown
|
page read and write
|
|
|
|
1FD998A7000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
BD4F000
|
unkown
|
page read and write
|
|
|
|
1D644E02000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
688D000
|
unkown
|
page read and write
|
|
|
|
1FD9A66A000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
7FF5805CE000
|
unkown image
|
page readonly
|
|
|
|
E30000
|
heap private
|
page read and write
|
|
|
|
1894BF00000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown image
|
page readonly
|
|
|
|
7DF578FD0000
|
unkown image
|
page readonly
|
|
|
|
31ED000
|
unkown
|
page read and write
|
|
|
|
291F000
|
unkown image
|
page readonly
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
A510000
|
unkown
|
page read and write
|
|
|
|
58EF000
|
stack
|
page read and write
|
|
|
|
B09000
|
heap default
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
7F750000
|
unkown image
|
page readonly
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
A7E4000
|
unkown
|
page read and write
|
|
|
|
2373A000000
|
unkown image
|
page readonly
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
7DF502122000
|
unkown image
|
page readonly
|
|
|
|
7FF502DEA000
|
unkown image
|
page readonly
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
1FD99790000
|
unkown
|
page read and write
|
|
|
|
7DF502176000
|
unkown image
|
page readonly
|
|
|
|
7DF578FC0000
|
unkown image
|
page readonly
|
|
|
|
6888000
|
unkown
|
page read and write
|
|
|
|
7F730000
|
unkown image
|
page readonly
|
|
|
|
53B0000
|
unkown
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
2373A220000
|
unkown image
|
page readonly
|
|
|
|
320F000
|
unkown
|
page read and write
|
|
|
|
7FF55F457000
|
unkown image
|
page readonly
|
|
|
|
7FF52A31C000
|
unkown image
|
page readonly
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
7FF5804B3000
|
unkown image
|
page readonly
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
7FF52A2FD000
|
unkown image
|
page readonly
|
|
|
|
31A5000
|
unkown
|
page read and write
|
|
|
|
BC06000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
8A8D000
|
unkown
|
page read and write
|
|
|
|
98968FB000
|
unkown
|
page read and write
|
|
|
|
7FF4ECFA5000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECEE6000
|
unkown image
|
page readonly
|
|
|
|
2373A036000
|
heap default
|
page read and write
|
|
|
|
31B3000
|
unkown
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC06000
|
unkown image
|
page readonly
|
|
|
|
144C1E50000
|
unkown image
|
page readonly
|
|
|
|
7FF5A957B000
|
unkown image
|
page readonly
|
|
|
|
63F747C000
|
unkown
|
page read and write
|
|
|
|
2373A046000
|
unkown
|
page read and write
|
|
|
|
7FF4ED091000
|
unkown image
|
page readonly
|
|
|
|
8AE3000
|
unkown
|
page read and write
|
|
|
|
1FD997B0000
|
unkown image
|
page readonly
|
|
|
|
7F742000
|
unkown image
|
page readonly
|
|
|
|
278C000
|
unkown image
|
page readonly
|
|
|
|
BBEF000
|
unkown
|
page read and write
|
|
|
|
7FF52A352000
|
unkown image
|
page readonly
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
6545000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
1FD9A602000
|
unkown
|
page read and write
|
|
|
|
8AF8000
|
unkown
|
page read and write
|
|
|
|
7FF52A363000
|
unkown image
|
page readonly
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
144C1E40000
|
heap private
|
page read and write
|
|
|
|
7FF5805D9000
|
unkown image
|
page readonly
|
|
|
|
7DF5956E2000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB76000
|
unkown image
|
page readonly
|
|
|
|
7DF578FB2000
|
unkown image
|
page readonly
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
319B000
|
unkown
|
page read and write
|
|
|
|
D80000
|
unkown
|
page read and write
|
|
|
|
28B3000
|
unkown image
|
page readonly
|
|
|
|
1FD998F4000
|
unkown
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
8B13000
|
unkown
|
page read and write
|
|
|
|
8A3A000
|
unkown
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
7FF563E9F000
|
unkown image
|
page readonly
|
|
|
|
7DF50217B000
|
unkown image
|
page readonly
|
|
|
|
B87000
|
heap default
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
7FF55F42B000
|
unkown image
|
page readonly
|
|
|
|
7FF563E45000
|
unkown image
|
page readonly
|
|
|
|
5026000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
6896000
|
unkown
|
page read and write
|
|
|
|
6895000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
1FD9A195000
|
unkown
|
page read and write
|
|
|
|
2D8F000
|
stack
|
page read and write
|
|
|
|
BBEF000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
BA68A7E000
|
stack
|
page read and write
|
|
|
|
A7EA000
|
unkown
|
page read and write
|
|
|
|
657B000
|
unkown
|
page read and write
|
|
|
|
1FD9A115000
|
unkown
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
8A32000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
B1CF000
|
stack
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
1FD9A192000
|
unkown
|
page read and write
|
|
|
|
1FD998E1000
|
unkown
|
page read and write
|
|
|
|
7FF4ECEB5000
|
unkown image
|
page readonly
|
|
|
|
7FF55EFE0000
|
unkown image
|
page readonly
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
7FF58045B000
|
unkown image
|
page readonly
|
|
|
|
2F80000
|
unkown image
|
page readonly
|
|
|
|
6568000
|
unkown
|
page read and write
|
|
|
|
8B22000
|
unkown
|
page read and write
|
|
|
|
1D644708000
|
unkown
|
page read and write
|
|
|
|
1894BF08000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECF21000
|
unkown image
|
page readonly
|
|
|
|
1FD9A199000
|
unkown
|
page read and write
|
|
|
|
B5A000
|
heap default
|
page read and write
|
|
|
|
657B000
|
unkown
|
page read and write
|
|
|
|
E4AF1F9000
|
stack
|
page read and write
|
|
|
|
144C2046000
|
unkown
|
page read and write
|
|
|
|
7FF58055A000
|
unkown image
|
page readonly
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
7DF5182F2000
|
unkown image
|
page readonly
|
|
|
|
7FF55EFE6000
|
unkown image
|
page readonly
|
|
|
|
1FD998C7000
|
unkown
|
page read and write
|
|
|
|
7FF563E3A000
|
unkown image
|
page readonly
|
|
|
|
688A000
|
unkown
|
page read and write
|
|
|
|
8B22000
|
unkown
|
page read and write
|
|
|
|
7DF53F540000
|
unkown image
|
page readonly
|
|
|
|
F19000
|
unkown
|
page read and write
|
|
|
|
7FF5A95ED000
|
unkown image
|
page readonly
|
|
|
|
7FF503143000
|
unkown image
|
page readonly
|
|
|
|
144C201C000
|
unkown
|
page read and write
|
|
|
|
F30000
|
unkown image
|
page readonly
|
|
|
|
3188000
|
unkown
|
page read and write
|
|
|
|
6550000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
7DF502120000
|
unkown image
|
page readonly
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
7FF502E4F000
|
unkown image
|
page readonly
|
|
|
|
25F6000
|
unkown image
|
page readonly
|
|
|
|
1FD9A112000
|
unkown
|
page read and write
|
|
|
|
2F4DAFE000
|
stack
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
650A000
|
unkown
|
page read and write
|
|
|
|
3167000
|
unkown
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
7FF5A9575000
|
unkown image
|
page readonly
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
8AAC000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
8B1C000
|
unkown
|
page read and write
|
|
|
|
7FF529FC7000
|
unkown image
|
page readonly
|
|
|
|
1D644A00000
|
unkown image
|
page readonly
|
|
|
|
7DF502122000
|
unkown image
|
page readonly
|
|
|
|
B50000
|
unkown image
|
page readonly
|
|
|
|
7DF578FD0000
|
unkown image
|
page readonly
|
|
|
|
316F000
|
unkown
|
page read and write
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
7FF4ECF3C000
|
unkown image
|
page readonly
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
2F4E0FF000
|
stack
|
page read and write
|
|
|
|
7FF4ECF27000
|
unkown image
|
page readonly
|
|
|
|
320F000
|
unkown
|
page read and write
|
|
|
|
63F79FF000
|
stack
|
page read and write
|
|
|
|
1FD9A602000
|
unkown
|
page read and write
|
|
|
|
BBEF000
|
unkown
|
page read and write
|
|
|
|
652C000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
7FF52A314000
|
unkown image
|
page readonly
|
|
|
|
656B000
|
unkown
|
page read and write
|
|
|
|
1FD9A19B000
|
unkown
|
page read and write
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
1FD99913000
|
unkown
|
page read and write
|
|
|
|
BD15000
|
unkown
|
page read and write
|
|
|
|
BC06000
|
unkown
|
page read and write
|
|
|
|
7FF4ED008000
|
unkown image
|
page readonly
|
|
|
|
65D3000
|
unkown
|
page read and write
|
|
|
|
2501000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
A7EE000
|
unkown
|
page read and write
|
|
|
|
6562000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
64D0000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
7FF529F22000
|
unkown image
|
page readonly
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
1D64462A000
|
unkown
|
page read and write
|
|
|
|
2994000
|
unkown image
|
page readonly
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
7FF52A3B0000
|
unkown image
|
page readonly
|
|
|
|
3209000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
64E1000
|
unkown
|
page read and write
|
|
|
|
25A1000
|
unkown image
|
page readonly
|
|
|
|
1894C402000
|
unkown
|
page read and write
|
|
|
|
7FF563E84000
|
unkown image
|
page readonly
|
|
|
|
A7E9000
|
unkown
|
page read and write
|
|
|
|
1FD9A16F000
|
unkown
|
page read and write
|
|
|
|
7FF529F85000
|
unkown image
|
page readonly
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
1FD9A195000
|
unkown
|
page read and write
|
|
|
|
BA68C7F000
|
stack
|
page read and write
|
|
|
|
BD4F000
|
unkown
|
page read and write
|
|
|
|
650A000
|
unkown
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
7FF55F31B000
|
unkown image
|
page readonly
|
|
|
|
65DC000
|
unkown
|
page read and write
|
|
|
|
6525000
|
unkown
|
page read and write
|
|
|
|
98969FE000
|
stack
|
page read and write
|
|
|
|
1FD9A600000
|
unkown
|
page read and write
|
|
|
|
AB70000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
652C000
|
unkown
|
page read and write
|
|
|
|
6886000
|
unkown
|
page read and write
|
|
|
|
7FF52A3DF000
|
unkown image
|
page readonly
|
|
|
|
A7E1000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
1FD99813000
|
unkown
|
page read and write
|
|
|
|
2F4DFFF000
|
stack
|
page read and write
|
|
|
|
1FD9A1AA000
|
unkown
|
page read and write
|
|
|
|
320D000
|
unkown
|
page read and write
|
|
|
|
7FF5A95DE000
|
unkown image
|
page readonly
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
31B3000
|
unkown
|
page read and write
|
|
|
|
AE0000
|
unkown
|
page read and write
|
|
|
|
A510000
|
unkown
|
page read and write
|
|
|
|
12B0000
|
unkown image
|
page readonly
|
|
|
|
1FD9A602000
|
unkown
|
page read and write
|
|
|
|
7FF55F373000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown image
|
page write copy
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
4F80000
|
unkown
|
page read and write
|
|
|
|
6543000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
6550000
|
unkown
|
page read and write
|
|
|
|
6550000
|
unkown
|
page read and write
|
|
|
|
7FF563C91000
|
unkown image
|
page readonly
|
|
|
|
6881000
|
unkown
|
page read and write
|
|
|
|
8A75000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
7FF5031EE000
|
unkown image
|
page readonly
|
|
|
|
656B000
|
unkown
|
page read and write
|
|
|
|
28CD000
|
unkown image
|
page readonly
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
2663000
|
unkown image
|
page readonly
|
|
|
|
322B000
|
unkown
|
page read and write
|
|
|
|
668B000
|
unkown
|
page read and write
|
|
|
|
1FD99908000
|
unkown
|
page read and write
|
|
|
|
1D6444A0000
|
unkown image
|
page readonly
|
|
|
|
BCA5000
|
unkown
|
page read and write
|
|
|
|
AB70000
|
unkown
|
page read and write
|
|
|
|
B6A2000
|
unkown
|
page read and write
|
|
|
|
8AD9000
|
unkown
|
page read and write
|
|
|
|
2373A04E000
|
unkown
|
page read and write
|
|
|
|
7FF55F1A0000
|
unkown image
|
page readonly
|
|
|
|
7FF55F44C000
|
unkown image
|
page readonly
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
3188000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
BBD5000
|
unkown
|
page read and write
|
|
|
|
6536000
|
unkown
|
page read and write
|
|
|
|
8AFC000
|
unkown
|
page read and write
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
7FF55F499000
|
unkown image
|
page readonly
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
7F732000
|
unkown image
|
page readonly
|
|
|
|
31B3000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
256B000
|
unkown image
|
page readonly
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
144C2113000
|
unkown
|
page read and write
|
|
|
|
A920000
|
unkown
|
page execute
|
|
|
|
7FF5805DD000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB0E000
|
unkown image
|
page readonly
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
7FF4ED084000
|
unkown image
|
page readonly
|
|
|
|
1894BBF0000
|
unkown image
|
page readonly
|
|
|
|
7DF518302000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECC77000
|
unkown image
|
page readonly
|
|
|
|
A7E4000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
8A87000
|
unkown
|
page read and write
|
|
|
|
8ABC000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
7FF503112000
|
unkown image
|
page readonly
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
8A87000
|
unkown
|
page read and write
|
|
|
|
BD15000
|
unkown
|
page read and write
|
|
|
|
7FF5031B8000
|
unkown image
|
page readonly
|
|
|
|
1FD99865000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
321F000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
8A8D000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
4FB0000
|
unkown
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
BBD5000
|
unkown
|
page read and write
|
|
|
|
7FF563F31000
|
unkown image
|
page readonly
|
|
|
|
1FD9A195000
|
unkown
|
page read and write
|
|
|
|
25CB000
|
unkown image
|
page readonly
|
|
|
|
7FF563F24000
|
unkown image
|
page readonly
|
|
|
|
6890000
|
unkown
|
page read and write
|
|
|
|
27B9000
|
unkown image
|
page readonly
|
|
|
|
1894C380000
|
unkown image
|
page readonly
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
E4AF27F000
|
stack
|
page read and write
|
|
|
|
BC00000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
5010000
|
heap private
|
page read and write
|
|
|
|
144C2000000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
7FF55F31E000
|
unkown image
|
page readonly
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
F1D000
|
unkown
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
BC9E000
|
unkown
|
page read and write
|
|
|
|
7FF5A9570000
|
unkown image
|
page readonly
|
|
|
|
1FD99883000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
7DF5BE700000
|
unkown image
|
page readonly
|
|
|
|
7FF52A49A000
|
unkown image
|
page readonly
|
|
|
|
8AD9000
|
unkown
|
page read and write
|
|
|
|
7FF55F271000
|
unkown image
|
page readonly
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
3214000
|
unkown
|
page read and write
|
|
|
|
BBEA000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
8A8F000
|
unkown
|
page read and write
|
|
|
|
7FF503088000
|
unkown image
|
page readonly
|
|
|
|
A9B0000
|
heap private
|
page read and write
|
|
|
|
29B3000
|
unkown image
|
page readonly
|
|
|
|
F19000
|
unkown
|
page read and write
|
|
|
|
BA684CB000
|
unkown
|
page read and write
|
|
|
|
1894BE8A000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
BCA3000
|
unkown
|
page read and write
|
|
|
|
8B16000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
1FD9A19B000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
7FF52A253000
|
unkown image
|
page readonly
|
|
|
|
7DF43D3F0000
|
unkown image
|
page readonly
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
7FF55F425000
|
unkown image
|
page readonly
|
|
|
|
7FF563EB9000
|
unkown image
|
page readonly
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
6530000
|
unkown
|
page read and write
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
1894BE7F000
|
unkown
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
1D644670000
|
unkown
|
page read and write
|
|
|
|
1100000
|
unkown image
|
page readonly
|
|
|
|
7FF5031C4000
|
unkown image
|
page readonly
|
|
|
|
1FD9A1D6000
|
unkown
|
page read and write
|
|
|
|
7FF563E77000
|
unkown image
|
page readonly
|
|
|
|
1FD99630000
|
heap private
|
page read and write
|
|
|
|
7FF55F49D000
|
unkown image
|
page readonly
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
7DF518310000
|
unkown image
|
page readonly
|
|
|
|
98972FF000
|
stack
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
1D644490000
|
unkown image
|
page readonly
|
|
|
|
A9D0000
|
unkown
|
page read and write
|
|
|
|
A510000
|
unkown
|
page read and write
|
|
|
|
7FF563A00000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
98970FE000
|
stack
|
page read and write
|
|
|
|
7FF4ECFFE000
|
unkown image
|
page readonly
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
BBD6000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
8B02000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown image
|
page readonly
|
|
|
|
31A9000
|
unkown
|
page read and write
|
|
|
|
8A74000
|
unkown
|
page read and write
|
|
|
|
7FF52A494000
|
unkown image
|
page readonly
|
|
|
|
7FF529D03000
|
unkown image
|
page readonly
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
7DF53F532000
|
unkown image
|
page readonly
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
BA68D7F000
|
stack
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
6528000
|
unkown
|
page read and write
|
|
|
|
7FF502D56000
|
unkown image
|
page readonly
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
64E8000
|
unkown
|
page read and write
|
|
|
|
1894BE55000
|
unkown
|
page read and write
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC7D000
|
unkown image
|
page readonly
|
|
|
|
AB90000
|
heap private
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
57EE000
|
stack
|
page read and write
|
|
|
|
5240000
|
unkown image
|
page readonly
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
8B16000
|
unkown
|
page read and write
|
|
|
|
6525000
|
unkown
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
7DF5BE6E0000
|
unkown image
|
page readonly
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
1D644800000
|
unkown image
|
page readonly
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
6540000
|
unkown
|
page read and write
|
|
|
|
6885000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
7FF4F42D9000
|
unkown image
|
page readonly
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
8A78000
|
unkown
|
page read and write
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
BA6854E000
|
stack
|
page read and write
|
|
|
|
6527000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
7FF52A350000
|
unkown image
|
page readonly
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
7FF563EA8000
|
unkown image
|
page readonly
|
|
|
|
7FF57FD9E000
|
unkown image
|
page readonly
|
|
|
|
7FF503095000
|
unkown image
|
page readonly
|
|
|
|
7DF5956D2000
|
unkown image
|
page readonly
|
|
|
|
BC06000
|
unkown
|
page read and write
|
|
|
|
310E000
|
stack
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
1FD9A702000
|
unkown
|
page read and write
|
|
|
|
7FF502CBA000
|
unkown image
|
page readonly
|
|
|
|
1894BD20000
|
unkown image
|
page readonly
|
|
|
|
63F7AFF000
|
stack
|
page read and write
|
|
|
|
144C208A000
|
unkown
|
page read and write
|
|
|
|
7DF502112000
|
unkown image
|
page readonly
|
|
|
|
2920000
|
heap private
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
5024000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
989727E000
|
stack
|
page read and write
|
|
|
|
1FD9A182000
|
unkown
|
page read and write
|
|
|
|
321E000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
8B22000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
1FD9A1BA000
|
unkown
|
page read and write
|
|
|
|
BD04000
|
unkown
|
page read and write
|
|
|
|
2694000
|
unkown image
|
page readonly
|
|
|
|
7FF5031DE000
|
unkown image
|
page readonly
|
|
|
|
7DF5745B0000
|
unkown image
|
page readonly
|
|
|
|
7FF580651000
|
unkown image
|
page readonly
|
|
|
|
65D9000
|
unkown
|
page read and write
|
|
|
|
657B000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
8A77000
|
unkown
|
page read and write
|
|
|
|
657C000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
1FD9A702000
|
unkown
|
page read and write
|
|
|
|
7DF5745A2000
|
unkown image
|
page readonly
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
144C2100000
|
unkown
|
page read and write
|
|
|
|
7DF5BE6F0000
|
unkown image
|
page readonly
|
|
|
|
64E5000
|
unkown
|
page read and write
|
|
|
|
7FF52A271000
|
unkown image
|
page readonly
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
290D000
|
unkown image
|
page readonly
|
|
|
|
1FD9A15B000
|
unkown
|
page read and write
|
|
|
|
1FD9A763000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
7FF5803B1000
|
unkown image
|
page readonly
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
7FF563E6F000
|
unkown image
|
page readonly
|
|
|
|
BBE4000
|
unkown
|
page read and write
|
|
|
|
8B22000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
6533000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
1FD99D80000
|
unkown image
|
page readonly
|
|
|
|
65D5000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
8B11000
|
unkown
|
page read and write
|
|
|
|
7FF55F2C3000
|
unkown image
|
page readonly
|
|
|
|
7FF52A41E000
|
unkown image
|
page readonly
|
|
|
|
1FD998B1000
|
unkown
|
page read and write
|
|
|
|
8AB5000
|
unkown
|
page read and write
|
|
|
|
7FF563A06000
|
unkown image
|
page readonly
|
|
|
|
7FF55F44F000
|
unkown image
|
page readonly
|
|
|
|
7FF563D3E000
|
unkown image
|
page readonly
|
|
|
|
7DF5956E2000
|
unkown image
|
page readonly
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
A9C0000
|
unkown
|
page read and write
|
|
|
|
1FD9A19B000
|
unkown
|
page read and write
|
|
|
|
362B000
|
heap private
|
page read and write
|
|
|
|
1894BE6C000
|
unkown
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
8A77000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
7FF5804CC000
|
unkown image
|
page readonly
|
|
|
|
320B000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
BCA2000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
1FD9A199000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
2D40000
|
unkown image
|
page readonly
|
|
|
|
31A5000
|
unkown
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
A7EB000
|
unkown
|
page read and write
|
|
|
|
8AE3000
|
unkown
|
page read and write
|
|
|
|
BD4F000
|
unkown
|
page read and write
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
2373A020000
|
heap default
|
page read and write
|
|
|
|
7FF4ECF42000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECD5B000
|
unkown image
|
page readonly
|
|
|
|
6539000
|
unkown
|
page read and write
|
|
|
|
7FF503264000
|
unkown image
|
page readonly
|
|
|
|
2985000
|
unkown image
|
page readonly
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
1FD9A199000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
6545000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
7DF5BE6F2000
|
unkown image
|
page readonly
|
|
|
|
1FD9A19C000
|
unkown
|
page read and write
|
|
|
|
27A8000
|
unkown image
|
page readonly
|
|
|
|
3216000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
EBE000
|
stack
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
291E000
|
stack
|
page read and write
|
|
|
|
1D64467C000
|
unkown
|
page read and write
|
|
|
|
7FF529BEE000
|
unkown image
|
page readonly
|
|
|
|
321B000
|
unkown
|
page read and write
|
|
|
|
BD01000
|
unkown
|
page read and write
|
|
|
|
7FF5030C6000
|
unkown image
|
page readonly
|
|
|
|
8AD9000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
2F90000
|
unkown image
|
page readonly
|
|
|
|
65DE000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
BD4F000
|
unkown
|
page read and write
|
|
|
|
259D000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
7FF4ECF9A000
|
unkown image
|
page readonly
|
|
|
|
1FD9A199000
|
unkown
|
page read and write
|
|
|
|
1894BBE0000
|
heap private
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
657B000
|
unkown
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
A7E4000
|
unkown
|
page read and write
|
|
|
|
6887000
|
unkown
|
page read and write
|
|
|
|
7FF52A2AB000
|
unkown image
|
page readonly
|
|
|
|
1FD99640000
|
unkown image
|
page readonly
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
1FD9A602000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
BA1000
|
heap default
|
page read and write
|
|
|
|
2B0E000
|
stack
|
page read and write
|
|
|
|
AB80000
|
unkown
|
page read and write
|
|
|
|
29A8000
|
unkown image
|
page readonly
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
7FF55F512000
|
unkown image
|
page readonly
|
|
|
|
5230000
|
heap private
|
page read and write
|
|
|
|
336E000
|
stack
|
page read and write
|
|
|
|
31A5000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
7FF52A39A000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED08A000
|
unkown image
|
page readonly
|
|
|
|
B39000
|
unkown
|
page read and write
|
|
|
|
144C1E30000
|
unkown image
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
2F4DA7C000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
2F4DDFE000
|
stack
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
7DF502112000
|
unkown image
|
page readonly
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
9896EF7000
|
stack
|
page read and write
|
|
|
|
1894BBD0000
|
unkown image
|
page read and write
|
|
|
|
3130000
|
heap default
|
page read and write
|
|
|
|
A86E000
|
stack
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
1894BE3C000
|
unkown
|
page read and write
|
|
|
|
7FF55F488000
|
unkown image
|
page readonly
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
7DF53F540000
|
unkown image
|
page readonly
|
|
|
|
28D5000
|
unkown image
|
page readonly
|
|
|
|
7FF55F40A000
|
unkown image
|
page readonly
|
|
|
|
3223000
|
unkown
|
page read and write
|
|
|
|
BBD5000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
F25000
|
heap private
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
65DD000
|
unkown
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
2373A058000
|
unkown
|
page read and write
|
|
|
|
7FF503272000
|
unkown image
|
page readonly
|
|
|
|
7FF580565000
|
unkown image
|
page readonly
|
|
|
|
7DF53F532000
|
unkown image
|
page readonly
|
|
|
|
1D644613000
|
unkown
|
page read and write
|
|
|
|
EFB000
|
unkown
|
page read and write
|
|
|
|
7DF53F522000
|
unkown image
|
page readonly
|
|
|
|
8AA7000
|
unkown
|
page read and write
|
|
|
|
A510000
|
unkown
|
page read and write
|
|
|
|
1894BE02000
|
unkown
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
144C204B000
|
unkown
|
page read and write
|
|
|
|
F02000
|
unkown
|
page read and write
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
144C200B000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
8AB5000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
2C50000
|
unkown
|
page read and write
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
ABD0000
|
unkown
|
page read and write
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
3179000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
1FD99902000
|
unkown
|
page read and write
|
|
|
|
25B5000
|
unkown image
|
page readonly
|
|
|
|
1FD9A700000
|
unkown
|
page read and write
|
|
|
|
31B3000
|
unkown
|
page read and write
|
|
|
|
7FF52A3B5000
|
unkown image
|
page readonly
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
7F740000
|
unkown image
|
page readonly
|
|
|
|
2C49000
|
stack
|
page read and write
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
7FF563D93000
|
unkown image
|
page readonly
|
|
|
|
332E000
|
stack
|
page read and write
|
|
|
|
7FF52A2B8000
|
unkown image
|
page readonly
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
1FD998EB000
|
unkown
|
page read and write
|
|
|
|
7FF50317E000
|
unkown image
|
page readonly
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
1FD9A002000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
668B000
|
unkown
|
page read and write
|
|
|
|
7FF563BB7000
|
unkown image
|
page readonly
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
A505000
|
unkown
|
page read and write
|
|
|
|
7DF5956D0000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
5020000
|
unkown
|
page read and write
|
|
|
|
7FF52A4A2000
|
unkown image
|
page readonly
|
|
|
|
1FD99690000
|
heap default
|
page read and write
|
|
|
|
7FF529CB2000
|
unkown image
|
page readonly
|
|
|
|
8B07000
|
unkown
|
page read and write
|
|
|
|
65E9000
|
unkown
|
page read and write
|
|
|
|
25F0000
|
unkown image
|
page readonly
|
|
|
|
1FD9A110000
|
unkown
|
page read and write
|
|
|
|
6548000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
3110000
|
unkown image
|
page readonly
|
|
|
|
63F74FE000
|
stack
|
page read and write
|
|
|
|
7F601000
|
unkown
|
page execute read
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
1D644700000
|
unkown
|
page read and write
|
|
|
|
6882000
|
unkown
|
page read and write
|
|
|
|
657C000
|
unkown
|
page read and write
|
|
|
|
652C000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
7FF4ECDDE000
|
unkown image
|
page readonly
|
|
|
|
BC06000
|
unkown
|
page read and write
|
|
|
|
BBEA000
|
unkown
|
page read and write
|
|
|
|
8AE6000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
7FF5A965A000
|
unkown image
|
page readonly
|
|
|
|
1FD9A195000
|
unkown
|
page read and write
|
|
|
|
2373A05C000
|
unkown
|
page read and write
|
|
|
|
321F000
|
unkown
|
page read and write
|
|
|
|
6521000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
28BC000
|
unkown image
|
page readonly
|
|
|
|
277F000
|
unkown image
|
page readonly
|
|
|
|
7FF52A2B3000
|
unkown image
|
page readonly
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
8B1C000
|
unkown
|
page read and write
|
|
|
|
652E000
|
unkown
|
page read and write
|
|
|
|
7FF580577000
|
unkown image
|
page readonly
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
7FF503083000
|
unkown image
|
page readonly
|
|
|
|
4F90000
|
heap private
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
7FF52A25A000
|
unkown image
|
page readonly
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
1FD9A199000
|
unkown
|
page read and write
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
10F0000
|
heap private
|
page read and write
|
|
|
|
7FF55F301000
|
unkown image
|
page readonly
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
7FF5031AC000
|
unkown image
|
page readonly
|
|
|
|
64DF000
|
unkown
|
page read and write
|
|
|
|
8ABC000
|
unkown
|
page read and write
|
|
|
|
293B000
|
unkown image
|
page readonly
|
|
|
|
A7E0000
|
unkown
|
page read and write
|
|
|
|
6568000
|
unkown
|
page read and write
|
|
|
|
65EC000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
653C000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
BCA8000
|
unkown
|
page read and write
|
|
|
|
7FF529F76000
|
unkown image
|
page readonly
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
668B000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
E4AF17F000
|
stack
|
page read and write
|
|
|
|
7FF4ECD7F000
|
unkown image
|
page readonly
|
|
|
|
1D644460000
|
heap private
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
7FF503120000
|
unkown image
|
page readonly
|
|
|
|
1FD99868000
|
unkown
|
page read and write
|
|
|
|
7DF578FC0000
|
unkown image
|
page readonly
|
|
|
|
8B13000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
BC5D000
|
unkown
|
page read and write
|
|
|
|
1FD9A603000
|
unkown
|
page read and write
|
|
|
|
7FF5805BF000
|
unkown image
|
page readonly
|
|
|
|
656C000
|
unkown
|
page read and write
|
|
|
|
654E000
|
unkown
|
page read and write
|
|
|
|
1FD99C00000
|
unkown image
|
page readonly
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
1FD998D8000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
7FF5A95E9000
|
unkown image
|
page readonly
|
|
|
|
656C000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
7FF502E57000
|
unkown image
|
page readonly
|
|
|
|
7FF4ED01D000
|
unkown image
|
page readonly
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
6562000
|
unkown
|
page read and write
|
|
|
|
6880000
|
unkown
|
page read and write
|
|
|
|
1FD9A19A000
|
unkown
|
page read and write
|
|
|
|
8B22000
|
unkown
|
page read and write
|
|
|
|
7FF5A95D8000
|
unkown image
|
page readonly
|
|
|
|
654B000
|
unkown
|
page read and write
|
|
|
|
657B000
|
unkown
|
page read and write
|
|
|
|
7DF574590000
|
unkown image
|
page readonly
|
|
|
|
8B1C000
|
unkown
|
page read and write
|
|
|
|
144C1E70000
|
unkown image
|
page readonly
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
7FF5A9324000
|
unkown image
|
page readonly
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
7FF4ECF0C000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECEED000
|
unkown image
|
page readonly
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
7FF4ECF9E000
|
unkown image
|
page readonly
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
3167000
|
unkown
|
page read and write
|
|
|
|
1D644B80000
|
unkown image
|
page readonly
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
289C000
|
unkown image
|
page readonly
|
|
|
|
5BA0000
|
unkown
|
page read and write
|
|
|
|
8B00000
|
unkown
|
page read and write
|
|
|
|
7FF4ECD66000
|
unkown image
|
page readonly
|
|
|
|
28DC000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
10D0000
|
unkown image
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
BCB8000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
321B000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
291A000
|
unkown image
|
page readonly
|
|
|
|
7FF52A3FA000
|
unkown image
|
page readonly
|
|
|
|
28F9000
|
unkown image
|
page readonly
|
|
|
|
7DF502130000
|
unkown image
|
page readonly
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
7DF574592000
|
unkown image
|
page readonly
|
|
|
|
319B000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
7FF4ECCF2000
|
unkown image
|
page readonly
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
1FD99856000
|
unkown
|
page read and write
|
|
|
|
7FF4ED092000
|
unkown image
|
page readonly
|
|
|
|
7FF52A3DC000
|
unkown image
|
page readonly
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
7FF4ED016000
|
unkown image
|
page readonly
|
|
|
|
2792000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
321B000
|
unkown
|
page read and write
|
|
|
|
7FF4DE0F9000
|
unkown image
|
page readonly
|
|
|
|
1FD99EB0000
|
unkown
|
page read and write
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
144C2200000
|
unkown image
|
page readonly
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
7FF563E57000
|
unkown image
|
page readonly
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
2932000
|
unkown image
|
page readonly
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
1FD9A197000
|
unkown
|
page read and write
|
|
|
|
B40000
|
unkown image
|
page readonly
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
BD47000
|
unkown
|
page read and write
|
|
|
|
2373A058000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
A9C0000
|
unkown
|
page read and write
|
|
|
|
6563000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
7FF529F1E000
|
unkown image
|
page readonly
|
|
|
|
7FF5031F6000
|
unkown image
|
page readonly
|
|
|
|
23739EA0000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
1FD99883000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
6548000
|
unkown
|
page read and write
|
|
|
|
6680000
|
unkown
|
page read and write
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
A505000
|
unkown
|
page read and write
|
|
|
|
6575000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
65DB000
|
unkown
|
page read and write
|
|
|
|
FD0000
|
unkown
|
page read and write
|
|
|
|
251A000
|
unkown image
|
page readonly
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
6891000
|
unkown
|
page read and write
|
|
|
|
1FD99800000
|
unkown
|
page read and write
|
|
|
|
1FD99620000
|
unkown image
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
7DF574592000
|
unkown image
|
page readonly
|
|
|
|
7FF55EC64000
|
unkown image
|
page readonly
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
8AAC000
|
unkown
|
page read and write
|
|
|
|
7DF578FB0000
|
unkown image
|
page readonly
|
|
|
|
1894BE29000
|
unkown
|
page read and write
|
|
|
|
7DF3FFFE0000
|
unkown image
|
page readonly
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
279E000
|
unkown image
|
page readonly
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
7FF55F46A000
|
unkown image
|
page readonly
|
|
|
|
7DF518310000
|
unkown image
|
page readonly
|
|
|
|
1D64464A000
|
unkown
|
page read and write
|
|
|
|
8A87000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
7FF55F420000
|
unkown image
|
page readonly
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
8AF3000
|
unkown
|
page read and write
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
7FF55F50A000
|
unkown image
|
page readonly
|
|
|
|
1D6445A0000
|
unkown image
|
page readonly
|
|
|
|
8AF8000
|
unkown
|
page read and write
|
|
|
|
7DF5745A0000
|
unkown image
|
page readonly
|
|
|
|
144C2055000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
3214000
|
unkown
|
page read and write
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
318F000
|
unkown
|
page read and write
|
|
|
|
7FF4ECF40000
|
unkown image
|
page readonly
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
1FD9A192000
|
unkown
|
page read and write
|
|
|
|
BA68B77000
|
stack
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
1894C3A0000
|
unkown
|
page read and write
|
|
|
|
8AB5000
|
unkown
|
page read and write
|
|
|
|
6575000
|
unkown
|
page read and write
|
|
|
|
7FF5A959C000
|
unkown image
|
page readonly
|
|
|
|
652E000
|
unkown
|
page read and write
|
|
|
|
BC06000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
7FF52A2AE000
|
unkown image
|
page readonly
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
8B2E000
|
unkown
|
page read and write
|
|
|
|
7FF5805C8000
|
unkown image
|
page readonly
|
|
|
|
8AE6000
|
unkown
|
page read and write
|
|
|
|
29B3000
|
unkown image
|
page readonly
|
|
|
|
BBDB000
|
unkown
|
page read and write
|
|
|
|
2544000
|
unkown image
|
page readonly
|
|
|
|
3214000
|
unkown
|
page read and write
|
|
|
|
1FD9A182000
|
unkown
|
page read and write
|
|
|
|
7FF4ECA79000
|
unkown image
|
page readonly
|
|
|
|
31FC000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
6576000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
3470000
|
unkown image
|
page readonly
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
7FF5805D6000
|
unkown image
|
page readonly
|
|
|
|
7FF5A9661000
|
unkown image
|
page readonly
|
|
|
|
6548000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
7FF5030CD000
|
unkown image
|
page readonly
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
7DF502110000
|
unkown image
|
page readonly
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
6521000
|
unkown
|
page read and write
|
|
|
|
2F4DB7E000
|
stack
|
page read and write
|
|
|
|
A8CE000
|
stack
|
page read and write
|
|
|
|
7FF52A4A1000
|
unkown image
|
page readonly
|
|
|
|
6553000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
8A87000
|
unkown
|
page read and write
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
144C1FA0000
|
unkown
|
page read and write
|
|
|
|
65E7000
|
unkown
|
page read and write
|
|
|
|
BC07000
|
unkown
|
page read and write
|
|
|
|
A510000
|
unkown
|
page read and write
|
|
|
|
7FF4ECFEA000
|
unkown image
|
page readonly
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
7FF503197000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECB39000
|
unkown image
|
page readonly
|
|
|
|
E4AF0FE000
|
stack
|
page read and write
|
|
|
|
7FF4ECF63000
|
unkown image
|
page readonly
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
BC5C000
|
unkown
|
page read and write
|
|
|
|
7FF58054C000
|
unkown image
|
page readonly
|
|
|
|
5013000
|
heap private
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
7FF52A291000
|
unkown image
|
page readonly
|
|
|
|
64D5000
|
unkown
|
page read and write
|
|
|
|
8A91000
|
unkown
|
page read and write
|
|
|
|
64DF000
|
unkown
|
page read and write
|
|
|
|
1300000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
8A91000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
64DB000
|
unkown
|
page read and write
|
|
|
|
31B3000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
7FF52A16B000
|
unkown image
|
page readonly
|
|
|
|
346E000
|
stack
|
page read and write
|
|
|
|
B684000
|
unkown
|
page read and write
|
|
|
|
BBEF000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
7DF5182F2000
|
unkown image
|
page readonly
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
7FF55F437000
|
unkown image
|
page readonly
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
8B29000
|
unkown
|
page read and write
|
|
|
|
321E000
|
unkown
|
page read and write
|
|
|
|
8A30000
|
unkown
|
page read and write
|
|
|
|
2373A210000
|
heap private
|
page read and write
|
|
|
|
6535000
|
unkown
|
page read and write
|
|
|
|
31A5000
|
unkown
|
page read and write
|
|
|
|
2373A420000
|
unkown image
|
page readonly
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
1FD99660000
|
unkown image
|
page readonly
|
|
|
|
7DF518300000
|
unkown image
|
page readonly
|
|
|
|
7DF502110000
|
unkown image
|
page readonly
|
|
|
|
F00000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
28E3000
|
unkown image
|
page readonly
|
|
|
|
6521000
|
unkown
|
page read and write
|
|
|
|
7FF55F47F000
|
unkown image
|
page readonly
|
|
|
|
7F630000
|
unkown image
|
page readonly
|
|
|
|
3223000
|
unkown
|
page read and write
|
|
|
|
144C2002000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
BC18000
|
unkown
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
8A8F000
|
unkown
|
page read and write
|
|
|
|
4F94000
|
heap private
|
page read and write
|
|
|
|
8ABC000
|
unkown
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
7FF563E6C000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECC7A000
|
unkown image
|
page readonly
|
|
|
|
7FF563EAE000
|
unkown image
|
page readonly
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
7FF52A3C7000
|
unkown image
|
page readonly
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
6897000
|
unkown
|
page read and write
|
|
|
|
1D644602000
|
unkown
|
page read and write
|
|
|
|
1FD99770000
|
unkown image
|
page readonly
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
6889000
|
unkown
|
page read and write
|
|
|
|
BBEF000
|
unkown
|
page read and write
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
1FD9A180000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
10F5000
|
heap private
|
page read and write
|
|
|
|
6523000
|
unkown
|
page read and write
|
|
|
|
8A8D000
|
unkown
|
page read and write
|
|
|
|
BD47000
|
unkown
|
page read and write
|
|
|
|
A505000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
321F000
|
unkown
|
page read and write
|
|
|
|
7DF5956E0000
|
unkown image
|
page readonly
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
652E000
|
unkown
|
page read and write
|
|
|
|
7FF4ECFAB000
|
unkown image
|
page readonly
|
|
|
|
A7E8000
|
unkown
|
page read and write
|
|
|
|
24EA000
|
unkown image
|
page readonly
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
6578000
|
unkown
|
page read and write
|
|
|
|
BEE000
|
stack
|
page read and write
|
|
|
|
7FF55F197000
|
unkown image
|
page readonly
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
BC61000
|
unkown
|
page read and write
|
|
|
|
27B3000
|
unkown image
|
page readonly
|
|
|
|
B0CF000
|
stack
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
7DF4BC5B0000
|
unkown image
|
page readonly
|
|
|
|
6545000
|
unkown
|
page read and write
|
|
|
|
6545000
|
unkown
|
page read and write
|
|
|
|
7FF52A1E6000
|
unkown image
|
page readonly
|
|
|
|
7FF5A95BA000
|
unkown image
|
page readonly
|
|
|
|
E4AED1A000
|
unkown
|
page read and write
|
|
|
|
7FF503271000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECFA0000
|
unkown image
|
page readonly
|
|
|
|
27C7000
|
unkown image
|
page readonly
|
|
|
|
BBD0000
|
unkown
|
page read and write
|
|
|
|
7DF5BE6E2000
|
unkown image
|
page readonly
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
2E20000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
68A0000
|
unkown
|
page execute
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
8B1C000
|
unkown
|
page read and write
|
|
|
|
7FF4ED00E000
|
unkown image
|
page readonly
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
7FF529E8E000
|
unkown image
|
page readonly
|
|
|
|
7DF574590000
|
unkown image
|
page readonly
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
65D8000
|
unkown
|
page read and write
|
|
|
|
8B13000
|
unkown
|
page read and write
|
|
|
|
25D2000
|
unkown image
|
page readonly
|
|
|
|
1D644470000
|
unkown image
|
page readonly
|
|
|
|
1FD998A6000
|
unkown
|
page read and write
|
|
|
|
1FD99A00000
|
unkown image
|
page readonly
|
|
|
|
7FF502EEE000
|
unkown image
|
page readonly
|
|
|
|
656B000
|
unkown
|
page read and write
|
|
|
|
657C000
|
unkown
|
page read and write
|
|
|
|
289F000
|
unkown image
|
page readonly
|
|
|
|
7FF580560000
|
unkown image
|
page readonly
|
|
|
|
7FF55EC5E000
|
unkown image
|
page readonly
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
315C000
|
heap default
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
9896CFC000
|
stack
|
page read and write
|
|
|
|
7FF52A418000
|
unkown image
|
page readonly
|
|
|
|
7FF55F36D000
|
unkown image
|
page readonly
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
6575000
|
unkown
|
page read and write
|
|
|
|
7FF4ECF32000
|
unkown image
|
page readonly
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
144C2024000
|
unkown
|
page read and write
|
|
|
|
7FF58058C000
|
unkown image
|
page readonly
|
|
|
|
7FF5805AA000
|
unkown image
|
page readonly
|
|
|
|
1FD9A19A000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
7FF563E2C000
|
unkown image
|
page readonly
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
1FD9A15E000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
2F4DEF7000
|
stack
|
page read and write
|
|
|
|
1D644622000
|
unkown
|
page read and write
|
|
|
|
23739EC0000
|
unkown image
|
page readonly
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
1894BC40000
|
heap default
|
page read and write
|
|
|
|
1FD9A1CB000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
8B22000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
3211000
|
unkown
|
page read and write
|
|
|
|
7FF50318B000
|
unkown image
|
page readonly
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
7FF52A1B0000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECDD9000
|
unkown image
|
page readonly
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
BD47000
|
unkown
|
page read and write
|
|
|
|
27D7000
|
unkown image
|
page readonly
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
7DF578FC2000
|
unkown image
|
page readonly
|
|
|
|
BC06000
|
unkown
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
8AFB000
|
unkown
|
page read and write
|
|
|
|
BD05000
|
unkown
|
page read and write
|
|
|
|
6522000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
BCA9000
|
unkown
|
page read and write
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
64E3000
|
unkown
|
page read and write
|
|
|
|
7FF4ECFE4000
|
unkown image
|
page readonly
|
|
|
|
7FF563EB6000
|
unkown image
|
page readonly
|
|
|
|
2373A010000
|
unkown image
|
page readonly
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
BA689FB000
|
stack
|
page read and write
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
F20000
|
heap private
|
page read and write
|
|
|
|
3216000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
7FF580652000
|
unkown image
|
page readonly
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
650A000
|
unkown
|
page read and write
|
|
|
|
7FF563E8A000
|
unkown image
|
page readonly
|
|
|
|
A8F0000
|
unkown image
|
page readonly
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
1FD99E60000
|
unkown image
|
page write copy
|
|
|
|
1D644650000
|
unkown
|
page read and write
|
|
|
|
8B2B000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
144C2013000
|
unkown
|
page read and write
|
|
|
|
7DF476E80000
|
unkown image
|
page readonly
|
|
|
|
A880000
|
heap private
|
page read and write
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
65EE000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
7FF55F511000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown image
|
page readonly
|
|
|
|
1FD9988B000
|
unkown
|
page read and write
|
|
|
|
1894BE4D000
|
unkown
|
page read and write
|
|
|
|
321B000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
A7EC000
|
unkown
|
page read and write
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
299C000
|
unkown image
|
page readonly
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
7FF50316C000
|
unkown image
|
page readonly
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown image
|
page readonly
|
|
|
|
7FF563D01000
|
unkown image
|
page readonly
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
A505000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
319B000
|
unkown
|
page read and write
|
|
|
|
65D6000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
23739E80000
|
unkown image
|
page read and write
|
|
|
|
65E2000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
BCA8000
|
unkown
|
page read and write
|
|
|
|
8A6F000
|
unkown
|
page read and write
|
|
|
|
7F730000
|
unkown image
|
page readonly
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
3210000
|
unkown
|
page read and write
|
|
|
|
8B16000
|
unkown
|
page read and write
|
|
|
|
E4AF07F000
|
stack
|
page read and write
|
|
|
|
2373A04C000
|
unkown
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
1FD99861000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
1D644655000
|
unkown
|
page read and write
|
|
|
|
6577000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
6893000
|
unkown
|
page read and write
|
|
|
|
BCF0000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
7FF5A9662000
|
unkown image
|
page readonly
|
|
|
|
AB71000
|
unkown
|
page read and write
|
|
|
|
7F611000
|
unkown
|
page execute read
|
|
|
|
321B000
|
unkown
|
page read and write
|
|
|
|
65D3000
|
unkown
|
page read and write
|
|
|
|
23739FD0000
|
unkown
|
page read and write
|
|
|
|
1FD9A602000
|
unkown
|
page read and write
|
|
|
|
A517000
|
unkown
|
page read and write
|
|
|
|
1FD9985E000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
7DF518300000
|
unkown image
|
page readonly
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
8B2D000
|
unkown
|
page read and write
|
|
|
|
1D64467A000
|
unkown
|
page read and write
|
|
|
|
8AA7000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
heap default
|
page read and write
|
|
|
|
652C000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
1894C200000
|
unkown image
|
page readonly
|
|
|
|
144C1F80000
|
unkown image
|
page readonly
|
|
|
|
F00000
|
unkown
|
page read and write
|
|
|
|
7FF4ECEA3000
|
unkown image
|
page readonly
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
A9E3000
|
heap private
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
1D64463C000
|
unkown
|
page read and write
|
|
|
|
8B1C000
|
unkown
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
3222000
|
unkown
|
page read and write
|
|
|
|
6820000
|
unkown
|
page execute
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC0A000
|
unkown image
|
page readonly
|
|
|
|
7DF53F522000
|
unkown image
|
page readonly
|
|
|
|
8B07000
|
unkown
|
page read and write
|
|
|
|
502F000
|
unkown
|
page read and write
|
|
|
|
2FF5000
|
heap default
|
page read and write
|
|
|
|
8AF4000
|
unkown
|
page read and write
|
|
|
|
BC16000
|
unkown
|
page read and write
|
|
|
|
2A8E000
|
stack
|
page read and write
|
|
|
|
7DF5182F0000
|
unkown image
|
page readonly
|
|
|
|
8B22000
|
unkown
|
page read and write
|
|
|
|
7FF5A95CE000
|
unkown image
|
page readonly
|
|
|
|
BD15000
|
unkown
|
page read and write
|
|
|
|
653C000
|
unkown
|
page read and write
|
|
|
|
7DF5BE700000
|
unkown image
|
page readonly
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
BBEF000
|
unkown
|
page read and write
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
4FA0000
|
unkown image
|
page readonly
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
7FF529D07000
|
unkown image
|
page readonly
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
7FF4ECFF4000
|
unkown image
|
page readonly
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
7FF55F384000
|
unkown image
|
page readonly
|
|
|
|
9896DFB000
|
stack
|
page read and write
|
|
|
|
8B11000
|
unkown
|
page read and write
|
|
|
|
1FD99EB0000
|
unkown
|
page read and write
|
|
|
|
7FF50317A000
|
unkown image
|
page readonly
|
|
|
|
ABC0000
|
heap private
|
page read and write
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
29A2000
|
unkown image
|
page readonly
|
|
|
|
6884000
|
unkown
|
page read and write
|
|
|
|
144C2080000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
1D644713000
|
unkown
|
page read and write
|
|
|
|
1FD9A193000
|
unkown
|
page read and write
|
|
|
|
3164000
|
unkown
|
page read and write
|
|
|
|
7FF55F2E1000
|
unkown image
|
page readonly
|
|
|
|
64DF000
|
unkown
|
page read and write
|
|
|
|
1FD9A66A000
|
unkown
|
page read and write
|
|
|
|
65E1000
|
unkown
|
page read and write
|
|
|
|
2981000
|
unkown image
|
page readonly
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
2FE0000
|
unkown
|
page read and write
|
|
|
|
989697E000
|
stack
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
656A000
|
unkown
|
page read and write
|
|
|
|
7DF4161C0000
|
unkown image
|
page readonly
|
|
|
|
25A3000
|
unkown image
|
page readonly
|
|
|
|
7FF52A404000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECFD8000
|
unkown image
|
page readonly
|
|
|
|
B00000
|
heap default
|
page read and write
|
|
|
|
7FF503180000
|
unkown image
|
page readonly
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
7FF563DAC000
|
unkown image
|
page readonly
|
|
|
|
8AE6000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
688B000
|
unkown
|
page read and write
|
|
|
|
7FF55F474000
|
unkown image
|
page readonly
|
|
|
|
A7E5000
|
unkown
|
page read and write
|
|
|
|
BC33000
|
unkown
|
page read and write
|
|
|
|
7FF5804C4000
|
unkown image
|
page readonly
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
8AD9000
|
unkown
|
page read and write
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
BD04000
|
unkown
|
page read and write
|
|
|
|
BCBD000
|
unkown
|
page read and write
|
|
|
|
8AE3000
|
unkown
|
page read and write
|
|
|
|
25C3000
|
unkown image
|
page readonly
|
|
|
|
64E4000
|
unkown
|
page read and write
|
|
|
|
3216000
|
unkown
|
page read and write
|
|
|
|
23739FB0000
|
unkown
|
page read and write
|
|
|
|
7FF52A1E4000
|
unkown image
|
page readonly
|
|
|
|
31AA000
|
unkown
|
page read and write
|
|
|
|
7DF53F520000
|
unkown image
|
page readonly
|
|
|
|
7FF52A426000
|
unkown image
|
page readonly
|
|
|
|
7FF52A164000
|
unkown image
|
page readonly
|
|
|
|
7FF563E2A000
|
unkown image
|
page readonly
|
|
|
|
5B90000
|
unkown
|
page read and write
|
|
|
|
65ED000
|
unkown
|
page read and write
|
|
|
|
7FF52A40F000
|
unkown image
|
page readonly
|
|
|
|
A7EF000
|
unkown
|
page read and write
|
|
|
|
7FF5805B4000
|
unkown image
|
page readonly
|
|
|
|
1D644600000
|
unkown
|
page read and write
|
|
|
|
7FF563F32000
|
unkown image
|
page readonly
|
|
|
|
BCFA000
|
unkown
|
page read and write
|
|
|
|
F19000
|
unkown
|
page read and write
|
|
|
|
7DF578FB2000
|
unkown image
|
page readonly
|
|
|
|
7FF563EBD000
|
unkown image
|
page readonly
|
|
|
|
B88000
|
unkown
|
page read and write
|
|
|
|
3223000
|
unkown
|
page read and write
|
|
|
|
ED8000
|
heap default
|
page read and write
|
|
|
|
730000
|
unkown image
|
page readonly
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
6554000
|
unkown
|
page read and write
|
|
|
|
7FF563E94000
|
unkown image
|
page readonly
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
144C1E50000
|
unkown image
|
page readonly
|
|
|
|
653C000
|
unkown
|
page read and write
|
|
|
|
8B07000
|
unkown
|
page read and write
|
|
|
|
31FD000
|
unkown
|
page read and write
|
|
|
|
320F000
|
unkown
|
page read and write
|
|
|
|
3188000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
1D644683000
|
unkown
|
page read and write
|
|
|
|
1D6445C0000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
7FF5031CA000
|
unkown image
|
page readonly
|
|
|
|
7FF4ECFB7000
|
unkown image
|
page readonly
|
|
|
|
7DF472460000
|
unkown image
|
page readonly
|
|
|
|
BC1D000
|
unkown
|
page read and write
|
|
|
|
7FF4ECF5C000
|
unkown image
|
page readonly
|
|
|
|
2907000
|
unkown image
|
page readonly
|
|
|
|
BC34000
|
unkown
|
page read and write
|
|
|
|
7FF563F2A000
|
unkown image
|
page readonly
|
|
|
|
7FF58058F000
|
unkown image
|
page readonly
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
25B0000
|
unkown image
|
page readonly
|
|
|
|
7FF529F12000
|
unkown image
|
page readonly
|
|
|
|
7FF529BF4000
|
unkown image
|
page readonly
|
|
|
|
654D000
|
unkown
|
page read and write
|
|
|
|
7FF5802E0000
|
unkown image
|
page readonly
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
7FF52A176000
|
unkown image
|
page readonly
|
|
|
|
1894BE50000
|
unkown
|
page read and write
|
|
|
|
BBFF000
|
unkown
|
page read and write
|
|
|
|
1FD99824000
|
unkown
|
page read and write
|
|
|
|
8AA7000
|
unkown
|
page read and write
|
|
|
|
1FD9A19C000
|
unkown
|
page read and write
|
|
|
|
7DF518302000
|
unkown image
|
page readonly
|
|
|
|
BBFB000
|
unkown
|
page read and write
|
|
|
|
F10000
|
unkown
|
page read and write
|
|
|
|
8A8D000
|
unkown
|
page read and write
|
|
|
|
BC0F000
|
unkown
|
page read and write
|
|
|
|
7FF52A3BB000
|
unkown image
|
page readonly
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
BC3B000
|
unkown
|
page read and write
|
|
|
|
1FD9983C000
|
unkown
|
page read and write
|
|
|
|
7FF563A15000
|
unkown image
|
page readonly
|
|
|
|
2373A048000
|
unkown
|
page read and write
|
|
|
|
8AE3000
|
unkown
|
page read and write
|
|
|
|
1FD99670000
|
unkown image
|
page readonly
|
|
|
|
1D644702000
|
unkown
|
page read and write
|
|
|
|
657E000
|
unkown
|
page read and write
|
|
|
|
65D0000
|
unkown
|
page read and write
|
|
|
|
2CEF000
|
stack
|
page read and write
|
|
|
|
144C2050000
|
unkown
|
page read and write
|
|
|
|
7FF5031FD000
|
unkown image
|
page readonly
|
|
|
|
64E0000
|
unkown
|
page read and write
|
|
|
|
2913000
|
unkown image
|
page readonly
|
|
|
|
7FF4DE0F9000
|
unkown image
|
page readonly
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
BCD0000
|
unkown
|
page read and write
|
|
|
|
1FD998C0000
|
unkown
|
page read and write
|
|
|
|
1894BF13000
|
unkown
|
page read and write
|
|
|
|
1FD9985C000
|
unkown
|
page read and write
|
|
|
|
7FF503107000
|
unkown image
|
page readonly
|
|
|
|
7F620000
|
unkown
|
page execute read
|
|
|
|
F1D000
|
unkown
|
page read and write
|
|
|
|
7FF52A39C000
|
unkown image
|
page readonly
|
|
|
|
65EF000
|
unkown
|
page read and write
|
|
|
|
BCDA000
|
unkown
|
page read and write
|
|
|
|
144C2580000
|
unkown image
|
page readonly
|
|
|
|
6538000
|
unkown
|
page read and write
|
|
|
|
7DF5BE6E0000
|
unkown image
|
page readonly
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
BC55000
|
unkown
|
page read and write
|
|
|
|
7FF5A95C4000
|
unkown image
|
page readonly
|
|
|
|
7DF5745A2000
|
unkown image
|
page readonly
|
|
|
|
BCA1000
|
unkown
|
page read and write
|
|
|
|
BD16000
|
unkown
|
page read and write
|
|
|
|
64D1000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
2C4C000
|
unkown
|
page read and write
|
|
|
|
28AB000
|
unkown image
|
page readonly
|
|
|
|
2373A058000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC6A000
|
unkown image
|
page readonly
|
|
|
|
321F000
|
unkown
|
page read and write
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
31B3000
|
unkown
|
page read and write
|
|
|
|
1894C000000
|
unkown image
|
page readonly
|
|
|
|
144C2108000
|
unkown
|
page read and write
|
|
|
|
653A000
|
unkown
|
page read and write
|
|
|
|
7FF55F41A000
|
unkown image
|
page readonly
|
|
|
|
BC2E000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
6883000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
8B16000
|
unkown
|
page read and write
|
|
|
|
BC5A000
|
unkown
|
page read and write
|
|
|
|
144C1E80000
|
unkown image
|
page readonly
|
|
|
|
321F000
|
unkown
|
page read and write
|
|
|
|
680C000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
BCC9000
|
unkown
|
page read and write
|
|
|
|
7FF52A3F4000
|
unkown image
|
page readonly
|
|
|
|
1FD9A621000
|
unkown
|
page read and write
|
|
|
|
A9D0000
|
unkown
|
page read and write
|
|
|
|
65E5000
|
unkown
|
page read and write
|
|
|
|
657C000
|
unkown
|
page read and write
|
|
|
|
319B000
|
unkown
|
page read and write
|
|
|
|
8B24000
|
unkown
|
page read and write
|
|
|
|
7FF5A959F000
|
unkown image
|
page readonly
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
A7E7000
|
unkown
|
page read and write
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
1D644450000
|
unkown image
|
page read and write
|
|
|
|
A8E0000
|
heap private
|
page read and write
|
|
|
|
1D644470000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
7FF52A384000
|
unkown image
|
page readonly
|
|
|
|
7FF580135000
|
unkown image
|
page readonly
|
|
|
|
65DA000
|
unkown
|
page read and write
|
|
|
|
7FF4F42D9000
|
unkown image
|
page readonly
|
|
|
|
144C2070000
|
unkown
|
page read and write
|
|
|
|
BC28000
|
unkown
|
page read and write
|
|
|
|
1D6444C0000
|
heap default
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
1894BC10000
|
unkown image
|
page readonly
|
|
|
|
1FD9A183000
|
unkown
|
page read and write
|
|
|
|
1FD998EB000
|
unkown
|
page read and write
|
|
|
|
BA685CE000
|
stack
|
page read and write
|
|
|
|
3970000
|
unkown image
|
page readonly
|
|
|
|
A9E0000
|
heap private
|
page read and write
|
|
|
|
25CE000
|
unkown image
|
page readonly
|
|
|
|
BCE1000
|
unkown
|
page read and write
|
|
|
|
669D000
|
unkown
|
page read and write
|
|
|
|
BCD5000
|
unkown
|
page read and write
|
|
|
|
8ABC000
|
unkown
|
page read and write
|
|
|
|
6892000
|
unkown
|
page read and write
|
|
|
|
BBF4000
|
unkown
|
page read and write
|
|
|
|
316D000
|
unkown
|
page read and write
|
|
|
|
1FD9A602000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
322E000
|
unkown
|
page read and write
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
7DF5956F0000
|
unkown image
|
page readonly
|
|
|
|
BCC3000
|
unkown
|
page read and write
|
|
|
|
668B000
|
unkown
|
page read and write
|
|
|
|
BC60000
|
unkown
|
page read and write
|
|
|
|
7FF563CE3000
|
unkown image
|
page readonly
|
|
|
|
316F000
|
unkown
|
page read and write
|
|
|
|
7FF4ECC6F000
|
unkown image
|
page readonly
|
|
|
|
7FF5031F9000
|
unkown image
|
page readonly
|
|
|
|
8A77000
|
unkown
|
page read and write
|
|
|
|
3201000
|
unkown
|
page read and write
|
|
|
|
31F4000
|
unkown
|
page read and write
|
|
|
|
7FF55F504000
|
unkown image
|
page readonly
|
|
|
|
8AE6000
|
unkown
|
page read and write
|
|
|
|
31F2000
|
unkown
|
page read and write
|
|
|
|
1FD99640000
|
unkown image
|
page readonly
|
|
|
|
BCAE000
|
unkown
|
page read and write
|
|
|
|
7FF52A127000
|
unkown image
|
page readonly
|
|
|
|
7FF52A3AE000
|
unkown image
|
page readonly
|
|
|
|
5300000
|
unkown image
|
page readonly
|
|
|
|
A7E2000
|
unkown
|
page read and write
|
|
|
|
144C2102000
|
unkown
|
page read and write
|
|
|
|
7FF58064A000
|
unkown image
|
page readonly
|
|
|
|
65EB000
|
unkown
|
page read and write
|
|
|
|
1894BBF0000
|
unkown image
|
page readonly
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
1130000
|
unkown image
|
page readonly
|
|
|
|
BCE5000
|
unkown
|
page read and write
|
|
|
|
7FF5804AD000
|
unkown image
|
page readonly
|
|
|
|
1070000
|
unkown
|
page read and write
|
|
|
|
7FF55F40C000
|
unkown image
|
page readonly
|
|
|
|
8A8F000
|
unkown
|
page read and write
|
|
|
|
2781000
|
unkown image
|
page readonly
|
|
|
|
106E000
|
stack
|
page read and write
|
|
|
|
7FF58055E000
|
unkown image
|
page readonly
|
|
|
|
A515000
|
unkown
|
page read and write
|
|
|
|
63F777B000
|
stack
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
BBE4000
|
unkown
|
page read and write
|
|
|
|
656B000
|
unkown
|
page read and write
|
|
|
|
E4AED9E000
|
stack
|
page read and write
|
|
|
|
7FF52A1F1000
|
unkown image
|
page readonly
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
7FF503185000
|
unkown image
|
page readonly
|
|
|
|
63F757E000
|
stack
|
page read and write
|
|
|
|
144C2400000
|
unkown image
|
page readonly
|
|
|
|
3223000
|
unkown
|
page read and write
|
|
|
|
BCFE000
|
unkown
|
page read and write
|
|
|
|
1894BE00000
|
unkown
|
page read and write
|
|
|
|
1FD9A195000
|
unkown
|
page read and write
|
|
|
|
BC22000
|
unkown
|
page read and write
|
|
|
|
BC49000
|
unkown
|
page read and write
|
|
|
|
BC4F000
|
unkown
|
page read and write
|
|
|
|
7FF563D3B000
|
unkown image
|
page readonly
|
|
|
|
27CF000
|
unkown image
|
page readonly
|
|
|
|
681A000
|
unkown
|
page read and write
|
|
|
|
6569000
|
unkown
|
page read and write
|
|
|
|
7FF563DA4000
|
unkown image
|
page readonly
|
|
|
|
6542000
|
unkown
|
page read and write
|
|
|
|
31A5000
|
unkown
|
page read and write
|
|
|
|
5017000
|
heap private
|
page read and write
|
|
|
|
7F732000
|
unkown image
|
page readonly
|
|
|
|
7DF5956D2000
|
unkown image
|
page readonly
|
|
|
|
7FF502DE6000
|
unkown image
|
page readonly
|
|
|
|
2E20000
|
unkown image
|
page readonly
|
|
|
|
1FD99EC0000
|
unkown image
|
page read and write
|
|
|
|
3178000
|
unkown
|
page read and write
|
|
|
|
8AC8000
|
unkown
|
page read and write
|
|
|
|
6561000
|
unkown
|
page read and write
|
|
|
|
7FF58045E000
|
unkown image
|
page readonly
|
|
|
|
6570000
|
unkown
|
page read and write
|
|
|
|
2373A05E000
|
unkown
|
page read and write
|
|
|
|
BC41000
|
unkown
|
page read and write
|
|
|
|
7FF4ECA7C000
|
unkown image
|
page readonly
|
|
|
|
BC07000
|
unkown
|
page read and write
|
|
|
|
668F000
|
unkown
|
page read and write
|
|
|
|
680E000
|
unkown
|
page read and write
|
|
|
|
BCB3000
|
unkown
|
page read and write
|
|
|
|
64DF000
|
unkown
|
page read and write
|
|
|
|
BBFA000
|
unkown
|
page read and write
|
|
There are 1978 hidden memdumps, click here to show them.