Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
survey-1378794827.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Thu Nov 25 10:07:14 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\survey-1378794827.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Thu Nov 25 10:07:14 2021, Security: 0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\910AAA36-0A15-4C10-8D87-FDCB55CCE8C8
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CBE1DD72.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF6F5851CED86FA606.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFDA9BDA7C10ADA3A7.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\A5B1.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF6B851E0CDFC5B426.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFC61FD91824AB246B.TMP
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://roaming.edog.
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://api.aadrm.com
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://api.addins.store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
https://srkcampus.org/OYcMRJbL/ji.html
|
192.185.129.7
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://outlook.office365.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://klevvrtech.com/zxywJAC24KJ/ji.html
|
192.185.79.2
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
https://rstebet.co.id/fbmKk6n48G/ji.html
|
103.247.11.218
|
|
There are 102 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
klevvrtech.com
|
192.185.79.2
|
|
|
|
rstebet.co.id
|
103.247.11.218
|
|
|
|
srkcampus.org
|
192.185.129.7
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.129.7
|
srkcampus.org
|
United States
|
|
|
|
192.185.79.2
|
klevvrtech.com
|
United States
|
|
|
|
103.247.11.218
|
rstebet.co.id
|
Indonesia
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
qg,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
rg,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
RemoteClearDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
|
Last
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
FilePath
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
StartDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
EndDate
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Properties
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
|
Url
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
|
LastClean
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableWinHttpCertAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableIsOwnerRegex
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableSessionAwareHttpClose
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALForExtendedApps
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
DisableADALSetSilentAuth
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableGuestCredProvider
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
|
msoridDisableOstringReplace
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\1C02F
|
1C02F
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSForms
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
|
MSComctlLib
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
|
%~,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\315AD
|
315AD
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\31FCF
|
31FCF
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General
|
FileFormatBallotBoxTelemetrySent
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
|
en-US
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingConfigurableSettings
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastSyncTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
|
RoamingLastWriteTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
|
LastBootTime
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109E60090400000000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
8k,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2EE55
|
2EE55
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
n{,
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3AF14
|
3AF14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3BFB6
|
3BFB6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
There are 99 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF53CC8F000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF075000
|
unkown image
|
page readonly
|
|
|
|
2155A390000
|
unkown image
|
page readonly
|
|
|
|
7FF56B95D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D269F000
|
unkown image
|
page readonly
|
|
|
|
63F1C7E000
|
stack
|
page read and write
|
|
|
|
1FF027A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5907D3000
|
unkown image
|
page readonly
|
|
|
|
237114FC000
|
unkown
|
page read and write
|
|
|
|
2655000
|
unkown image
|
page readonly
|
|
|
|
25F4000
|
unkown image
|
page readonly
|
|
|
|
2C70000
|
unkown
|
page read and write
|
|
|
|
2928000
|
unkown
|
page read and write
|
|
|
|
7FAB0000
|
unkown image
|
page readonly
|
|
|
|
7DF59B092000
|
unkown image
|
page readonly
|
|
|
|
23711254000
|
unkown
|
page read and write
|
|
|
|
23711370000
|
unkown
|
page read and write
|
|
|
|
7FF590840000
|
unkown image
|
page readonly
|
|
|
|
7DF506C90000
|
unkown image
|
page readonly
|
|
|
|
237114BD000
|
unkown
|
page read and write
|
|
|
|
77E0000
|
unkown
|
page read and write
|
|
|
|
2651000
|
unkown image
|
page readonly
|
|
|
|
86F35FD000
|
stack
|
page read and write
|
|
|
|
2581000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2B1D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2755000
|
unkown image
|
page readonly
|
|
|
|
7FF52B35F000
|
unkown image
|
page readonly
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
7FF546413000
|
unkown image
|
page readonly
|
|
|
|
28E0000
|
unkown
|
page read and write
|
|
|
|
2370C518000
|
unkown
|
page read and write
|
|
|
|
24CF8150000
|
unkown
|
page read and write
|
|
|
|
23711274000
|
unkown
|
page read and write
|
|
|
|
24CF823C000
|
unkown
|
page read and write
|
|
|
|
5413CFE000
|
stack
|
page read and write
|
|
|
|
1F4EF740000
|
unkown
|
page read and write
|
|
|
|
24CF8780000
|
unkown image
|
page readonly
|
|
|
|
7FF54F93E000
|
unkown image
|
page readonly
|
|
|
|
24021E02000
|
unkown
|
page read and write
|
|
|
|
7FF54645D000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
7FF54F648000
|
unkown image
|
page readonly
|
|
|
|
7FF546593000
|
unkown image
|
page readonly
|
|
|
|
1E8D7E00000
|
unkown
|
page read and write
|
|
|
|
2B90000
|
unkown image
|
page readonly
|
|
|
|
7FF585766000
|
unkown image
|
page readonly
|
|
|
|
25FD000
|
unkown image
|
page readonly
|
|
|
|
2370BC40000
|
unkown
|
page read and write
|
|
|
|
7FF53CBC9000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2B29000
|
unkown image
|
page readonly
|
|
|
|
7FF56B910000
|
unkown image
|
page readonly
|
|
|
|
63F1B7A000
|
stack
|
page read and write
|
|
|
|
7FF52B35B000
|
unkown image
|
page readonly
|
|
|
|
7FAC0000
|
unkown image
|
page readonly
|
|
|
|
1E8D8550000
|
unkown
|
page read and write
|
|
|
|
1B3BAA80000
|
unkown
|
page read and write
|
|
|
|
7DF565480000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB6F000
|
unkown image
|
page readonly
|
|
|
|
7FAC0000
|
unkown image
|
page readonly
|
|
|
|
25BB000
|
unkown image
|
page readonly
|
|
|
|
2B6A000
|
heap private
|
page read and write
|
|
|
|
7FF53CC48000
|
unkown image
|
page readonly
|
|
|
|
25C1000
|
unkown image
|
page readonly
|
|
|
|
7DF5525A0000
|
unkown image
|
page readonly
|
|
|
|
2155A458000
|
unkown
|
page read and write
|
|
|
|
7FF546608000
|
unkown image
|
page readonly
|
|
|
|
1F8229E0000
|
heap default
|
page read and write
|
|
|
|
1F4EF380000
|
unkown
|
page read and write
|
|
|
|
1B3BA9CE000
|
unkown
|
page read and write
|
|
|
|
7FF5CECE3000
|
unkown image
|
page readonly
|
|
|
|
7FF52B0FD000
|
unkown image
|
page readonly
|
|
|
|
7FF4F129C000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2B25000
|
unkown image
|
page readonly
|
|
|
|
86F347F000
|
stack
|
page read and write
|
|
|
|
2B60000
|
heap private
|
page read and write
|
|
|
|
6AC610F000
|
stack
|
page read and write
|
|
|
|
1F822A1D000
|
unkown
|
page read and write
|
|
|
|
24CF8000000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
24CF7FE0000
|
unkown image
|
page read and write
|
|
|
|
5A0000
|
unkown image
|
page read and write
|
|
|
|
7FF5CF06F000
|
unkown image
|
page readonly
|
|
|
|
24021620000
|
heap default
|
page read and write
|
|
|
|
7FF545C9E000
|
unkown image
|
page readonly
|
|
|
|
1A34FDB0000
|
unkown
|
page read and write
|
|
|
|
24021908000
|
unkown
|
page read and write
|
|
|
|
7FF546510000
|
unkown image
|
page readonly
|
|
|
|
9E83DFF000
|
stack
|
page read and write
|
|
|
|
265C000
|
unkown image
|
page readonly
|
|
|
|
7DF552580000
|
unkown image
|
page readonly
|
|
|
|
25ED000
|
unkown image
|
page readonly
|
|
|
|
290EC902000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
2258000
|
unkown image
|
page readonly
|
|
|
|
2C00000
|
unkown
|
page read and write
|
|
|
|
255D000
|
unkown image
|
page readonly
|
|
|
|
1E8D7EB8000
|
unkown
|
page read and write
|
|
|
|
7FF5CF204000
|
unkown image
|
page readonly
|
|
|
|
24CF8270000
|
unkown
|
page read and write
|
|
|
|
2155AC02000
|
unkown
|
page read and write
|
|
|
|
7DF5A6162000
|
unkown image
|
page readonly
|
|
|
|
7FF5856AC000
|
unkown image
|
page readonly
|
|
|
|
2370D090000
|
unkown
|
page read and write
|
|
|
|
1B3BB7F0000
|
unkown
|
page read and write
|
|
|
|
290EC87C000
|
unkown
|
page read and write
|
|
|
|
2486000
|
unkown image
|
page readonly
|
|
|
|
7FF5907A9000
|
unkown image
|
page readonly
|
|
|
|
7FF54F90D000
|
unkown image
|
page readonly
|
|
|
|
2370BC6F000
|
unkown
|
page read and write
|
|
|
|
7930000
|
unkown
|
page read and write
|
|
|
|
2402184E000
|
unkown
|
page read and write
|
|
|
|
1A34F802000
|
unkown
|
page read and write
|
|
|
|
4804000
|
heap private
|
page read and write
|
|
|
|
290EC710000
|
unkown image
|
page readonly
|
|
|
|
24CF8020000
|
unkown image
|
page readonly
|
|
|
|
23711300000
|
unkown
|
page read and write
|
|
|
|
7FF5CF155000
|
unkown image
|
page readonly
|
|
|
|
1F4EEB13000
|
unkown
|
page read and write
|
|
|
|
1F4EF3C3000
|
unkown
|
page read and write
|
|
|
|
7FF5D2BB6000
|
unkown image
|
page readonly
|
|
|
|
7DF59B0B0000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA20000
|
unkown image
|
page readonly
|
|
|
|
7FF4F1294000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF1EB000
|
unkown image
|
page readonly
|
|
|
|
23711400000
|
unkown
|
page read and write
|
|
|
|
1E8D7E6E000
|
unkown
|
page read and write
|
|
|
|
1F4EF38C000
|
unkown
|
page read and write
|
|
|
|
63F1CFF000
|
stack
|
page read and write
|
|
|
|
79B32FE000
|
stack
|
page read and write
|
|
|
|
1F822A20000
|
unkown
|
page read and write
|
|
|
|
7FAB2000
|
unkown image
|
page readonly
|
|
|
|
7FF585674000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
7FF4F12C5000
|
unkown image
|
page readonly
|
|
|
|
79B387F000
|
stack
|
page read and write
|
|
|
|
256D000
|
unkown image
|
page readonly
|
|
|
|
1F4EF365000
|
unkown
|
page read and write
|
|
|
|
7FF546303000
|
unkown image
|
page readonly
|
|
|
|
7FF52B278000
|
unkown image
|
page readonly
|
|
|
|
290EC740000
|
heap default
|
page read and write
|
|
|
|
2667000
|
unkown image
|
page readonly
|
|
|
|
2370C330000
|
unkown
|
page read and write
|
|
|
|
7FF52B013000
|
unkown image
|
page readonly
|
|
|
|
1B3BA9E9000
|
unkown
|
page read and write
|
|
|
|
A66000
|
unkown image
|
page readonly
|
|
|
|
2590000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2BAF000
|
unkown image
|
page readonly
|
|
|
|
7DF59B092000
|
unkown image
|
page readonly
|
|
|
|
24CF8229000
|
unkown
|
page read and write
|
|
|
|
1A34FDB0000
|
unkown
|
page read and write
|
|
|
|
7FF5D2BA8000
|
unkown image
|
page readonly
|
|
|
|
B2A10FE000
|
stack
|
page read and write
|
|
|
|
1F4EE9E0000
|
heap default
|
page read and write
|
|
|
|
7DF540C70000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE38F000
|
unkown image
|
page readonly
|
|
|
|
7FF52B35F000
|
unkown image
|
page readonly
|
|
|
|
7FF53CA5E000
|
unkown image
|
page readonly
|
|
|
|
2370BC77000
|
unkown
|
page read and write
|
|
|
|
2651000
|
unkown image
|
page readonly
|
|
|
|
2370BB80000
|
unkown image
|
page readonly
|
|
|
|
2586000
|
unkown image
|
page readonly
|
|
|
|
7FF58579F000
|
unkown image
|
page readonly
|
|
|
|
7FF56B920000
|
unkown image
|
page readonly
|
|
|
|
1A34F5C0000
|
heap private
|
page read and write
|
|
|
|
2CB1000
|
unkown
|
page read and write
|
|
|
|
237114F5000
|
unkown
|
page read and write
|
|
|
|
7FF546500000
|
unkown image
|
page readonly
|
|
|
|
290EC829000
|
unkown
|
page read and write
|
|
|
|
290EC813000
|
unkown
|
page read and write
|
|
|
|
F1B3A7E000
|
stack
|
page read and write
|
|
|
|
264B000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF20B000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
216647E000
|
stack
|
page read and write
|
|
|
|
7FF59082F000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF1E6000
|
unkown image
|
page readonly
|
|
|
|
7DF55BF50000
|
unkown image
|
page readonly
|
|
|
|
7FF52B299000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6162000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE16D000
|
unkown image
|
page readonly
|
|
|
|
2655000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB4D000
|
unkown image
|
page readonly
|
|
|
|
1A34FC00000
|
unkown image
|
page readonly
|
|
|
|
7FF546568000
|
unkown image
|
page readonly
|
|
|
|
86F32FF000
|
stack
|
page read and write
|
|
|
|
7FF5D2AFC000
|
unkown image
|
page readonly
|
|
|
|
7FF58553D000
|
unkown image
|
page readonly
|
|
|
|
7FF5903D5000
|
unkown image
|
page readonly
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
2370BD02000
|
unkown
|
page read and write
|
|
|
|
7FF5D28E3000
|
unkown image
|
page readonly
|
|
|
|
7FF53CC6D000
|
unkown image
|
page readonly
|
|
|
|
237114ED000
|
unkown
|
page read and write
|
|
|
|
2589000
|
unkown image
|
page readonly
|
|
|
|
2371142C000
|
unkown
|
page read and write
|
|
|
|
7F7A2000
|
unkown image
|
page readonly
|
|
|
|
1FF03002000
|
unkown
|
page read and write
|
|
|
|
2494000
|
unkown image
|
page readonly
|
|
|
|
7FF5854A7000
|
unkown image
|
page readonly
|
|
|
|
24CF8400000
|
unkown image
|
page readonly
|
|
|
|
7FF5D28DC000
|
unkown image
|
page readonly
|
|
|
|
2998000
|
unkown
|
page read and write
|
|
|
|
7DF565470000
|
unkown image
|
page readonly
|
|
|
|
2667000
|
unkown image
|
page readonly
|
|
|
|
2155A400000
|
unkown
|
page read and write
|
|
|
|
7FF5D2A9D000
|
unkown image
|
page readonly
|
|
|
|
1A34F600000
|
unkown image
|
page readonly
|
|
|
|
25C9000
|
unkown image
|
page readonly
|
|
|
|
7FCF0000
|
unkown image
|
page readonly
|
|
|
|
7FF53CBF5000
|
unkown image
|
page readonly
|
|
|
|
7FF585697000
|
unkown image
|
page readonly
|
|
|
|
7DF540C62000
|
unkown image
|
page readonly
|
|
|
|
7DF55BF42000
|
unkown image
|
page readonly
|
|
|
|
7FF56B989000
|
unkown image
|
page readonly
|
|
|
|
1FF0284B000
|
unkown
|
page read and write
|
|
|
|
24021A00000
|
unkown image
|
page readonly
|
|
|
|
7DF581352000
|
unkown image
|
page readonly
|
|
|
|
9320E7C000
|
stack
|
page read and write
|
|
|
|
7FF5D287A000
|
unkown image
|
page readonly
|
|
|
|
1E8D82E0000
|
unkown image
|
page readonly
|
|
|
|
2CB8000
|
unkown
|
page read and write
|
|
|
|
290EC850000
|
unkown
|
page read and write
|
|
|
|
1F4EF3B0000
|
unkown
|
page read and write
|
|
|
|
1F4EF35F000
|
unkown
|
page read and write
|
|
|
|
7DF5E84E2000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2AF7000
|
unkown image
|
page readonly
|
|
|
|
2258000
|
unkown image
|
page readonly
|
|
|
|
7FF5907A5000
|
unkown image
|
page readonly
|
|
|
|
7DF552592000
|
unkown image
|
page readonly
|
|
|
|
1F822A06000
|
unkown
|
page read and write
|
|
|
|
7FF5D2940000
|
unkown image
|
page readonly
|
|
|
|
4FCB6FD000
|
stack
|
page read and write
|
|
|
|
932071C000
|
unkown
|
page read and write
|
|
|
|
2155A465000
|
unkown
|
page read and write
|
|
|
|
1F822A11000
|
unkown
|
page read and write
|
|
|
|
2155A442000
|
unkown
|
page read and write
|
|
|
|
7FF5D2ADC000
|
unkown image
|
page readonly
|
|
|
|
7FF59079D000
|
unkown image
|
page readonly
|
|
|
|
1F4EF36E000
|
unkown
|
page read and write
|
|
|
|
2960000
|
heap default
|
page read and write
|
|
|
|
7FF54663B000
|
unkown image
|
page readonly
|
|
|
|
2370BBD0000
|
heap default
|
page read and write
|
|
|
|
2370BC8B000
|
unkown
|
page read and write
|
|
|
|
256D000
|
unkown image
|
page readonly
|
|
|
|
24CF8200000
|
unkown
|
page read and write
|
|
|
|
86B000
|
unkown
|
page read and write
|
|
|
|
7FF54664F000
|
unkown image
|
page readonly
|
|
|
|
25DD000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2452000
|
unkown image
|
page readonly
|
|
|
|
83E000
|
stack
|
page read and write
|
|
|
|
1F4EF3C0000
|
unkown
|
page read and write
|
|
|
|
24CF8600000
|
unkown image
|
page readonly
|
|
|
|
1F4EF38B000
|
unkown
|
page read and write
|
|
|
|
7FF5D28DA000
|
unkown image
|
page readonly
|
|
|
|
7FF53CB9C000
|
unkown image
|
page readonly
|
|
|
|
1F4EF900000
|
unkown
|
page read and write
|
|
|
|
2155A47E000
|
unkown
|
page read and write
|
|
|
|
25CC000
|
unkown image
|
page readonly
|
|
|
|
23711120000
|
unkown
|
page read and write
|
|
|
|
1A34F5D0000
|
unkown image
|
page readonly
|
|
|
|
7DF5E8500000
|
unkown image
|
page readonly
|
|
|
|
7DF581352000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA58000
|
unkown
|
page read and write
|
|
|
|
1A350000000
|
unkown
|
page read and write
|
|
|
|
7DF552582000
|
unkown image
|
page readonly
|
|
|
|
1F4EF802000
|
unkown
|
page read and write
|
|
|
|
7FF546360000
|
unkown image
|
page readonly
|
|
|
|
2402183C000
|
unkown
|
page read and write
|
|
|
|
7FF5D2390000
|
unkown image
|
page readonly
|
|
|
|
290EC876000
|
unkown
|
page read and write
|
|
|
|
9E844FE000
|
stack
|
page read and write
|
|
|
|
7FF5907B3000
|
unkown image
|
page readonly
|
|
|
|
216687D000
|
stack
|
page read and write
|
|
|
|
7FF54F933000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2465000
|
unkown image
|
page readonly
|
|
|
|
2155A46B000
|
unkown
|
page read and write
|
|
|
|
2B7F000
|
stack
|
page read and write
|
|
|
|
2155A431000
|
unkown
|
page read and write
|
|
|
|
7FF5CF1F0000
|
unkown image
|
page readonly
|
|
|
|
2370CB30000
|
unkown image
|
page read and write
|
|
|
|
23711452000
|
unkown
|
page read and write
|
|
|
|
7FF5DE3BE000
|
unkown image
|
page readonly
|
|
|
|
1E8D8470000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
7FF546113000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF1FD000
|
unkown image
|
page readonly
|
|
|
|
2981000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page read and write
|
|
|
|
7FF585682000
|
unkown image
|
page readonly
|
|
|
|
2370BC79000
|
unkown
|
page read and write
|
|
|
|
7DF506C82000
|
unkown image
|
page readonly
|
|
|
|
1F4EF36A000
|
unkown
|
page read and write
|
|
|
|
7FF54662D000
|
unkown image
|
page readonly
|
|
|
|
1FF02913000
|
unkown
|
page read and write
|
|
|
|
2402184B000
|
unkown
|
page read and write
|
|
|
|
265C000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
7DF540C50000
|
unkown image
|
page readonly
|
|
|
|
1F4EF3C4000
|
unkown
|
page read and write
|
|
|
|
2370CD10000
|
unkown image
|
page readonly
|
|
|
|
7FF5464A5000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF185000
|
unkown image
|
page readonly
|
|
|
|
2370BC58000
|
unkown
|
page read and write
|
|
|
|
1B3BA9DD000
|
unkown
|
page read and write
|
|
|
|
1A34FDB0000
|
unkown
|
page read and write
|
|
|
|
7FF546463000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA16000
|
unkown image
|
page readonly
|
|
|
|
2991000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
76DF000
|
stack
|
page read and write
|
|
|
|
2E9A000
|
heap private
|
page read and write
|
|
|
|
7F7A0000
|
unkown image
|
page readonly
|
|
|
|
25DD000
|
unkown image
|
page readonly
|
|
|
|
23711447000
|
unkown
|
page read and write
|
|
|
|
7FF52B295000
|
unkown image
|
page readonly
|
|
|
|
7DF565460000
|
unkown image
|
page readonly
|
|
|
|
1A34F700000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA00000
|
unkown
|
page read and write
|
|
|
|
93210FC000
|
stack
|
page read and write
|
|
|
|
7FF5460FF000
|
unkown image
|
page readonly
|
|
|
|
7FF54F639000
|
unkown image
|
page readonly
|
|
|
|
7FF590854000
|
unkown image
|
page readonly
|
|
|
|
1F4EEAAB000
|
unkown
|
page read and write
|
|
|
|
7FF5D245D000
|
unkown image
|
page readonly
|
|
|
|
2155A380000
|
heap private
|
page read and write
|
|
|
|
2F40000
|
unkown image
|
page readonly
|
|
|
|
24021902000
|
unkown
|
page read and write
|
|
|
|
1F4EF36A000
|
unkown
|
page read and write
|
|
|
|
7DF498F60000
|
unkown image
|
page readonly
|
|
|
|
7DF59B090000
|
unkown image
|
page readonly
|
|
|
|
7FF4F111A000
|
unkown image
|
page readonly
|
|
|
|
1E8D7D90000
|
heap private
|
page read and write
|
|
|
|
74F0000
|
unkown
|
page read and write
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
7FF5D2987000
|
unkown image
|
page readonly
|
|
|
|
2CA8000
|
unkown
|
page read and write
|
|
|
|
7FF54FAA5000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2913000
|
unkown image
|
page readonly
|
|
|
|
1F822A0F000
|
unkown
|
page read and write
|
|
|
|
7FF546128000
|
unkown image
|
page readonly
|
|
|
|
7FF54F9E4000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
7FF5856E3000
|
unkown image
|
page readonly
|
|
|
|
2370BC91000
|
unkown
|
page read and write
|
|
|
|
7DF4E63B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CECE9000
|
unkown image
|
page readonly
|
|
|
|
5F7000
|
unkown
|
page read and write
|
|
|
|
1FF02800000
|
unkown
|
page read and write
|
|
|
|
7DF5E4B20000
|
unkown image
|
page readonly
|
|
|
|
1F4EF802000
|
unkown
|
page read and write
|
|
|
|
7FF5CEED3000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown image
|
page readonly
|
|
|
|
1FF02849000
|
unkown
|
page read and write
|
|
|
|
2651000
|
unkown image
|
page readonly
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
9320DFE000
|
stack
|
page read and write
|
|
|
|
7FF5907BA000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE2BC000
|
unkown image
|
page readonly
|
|
|
|
1F4EF3BF000
|
unkown
|
page read and write
|
|
|
|
7FF56BA2D000
|
unkown image
|
page readonly
|
|
|
|
2370BC9C000
|
unkown
|
page read and write
|
|
|
|
1F4EF38E000
|
unkown
|
page read and write
|
|
|
|
1B3BA960000
|
unkown
|
page read and write
|
|
|
|
9E841FE000
|
stack
|
page read and write
|
|
|
|
7DF581350000
|
unkown image
|
page readonly
|
|
|
|
7FF546532000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
1F4EF3C4000
|
unkown
|
page read and write
|
|
|
|
1F4EE9C0000
|
unkown image
|
page readonly
|
|
|
|
24021C00000
|
unkown image
|
page readonly
|
|
|
|
1B3BAB00000
|
unkown
|
page read and write
|
|
|
|
1A34F5F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5462D4000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA49000
|
unkown
|
page read and write
|
|
|
|
7FF54F983000
|
unkown image
|
page readonly
|
|
|
|
24021D80000
|
unkown image
|
page readonly
|
|
|
|
7DF463330000
|
unkown image
|
page readonly
|
|
|
|
7FF54F9BF000
|
unkown image
|
page readonly
|
|
|
|
7FF53C2E4000
|
unkown image
|
page readonly
|
|
|
|
769E000
|
stack
|
page read and write
|
|
|
|
2C5E000
|
stack
|
page read and write
|
|
|
|
7FF56BA3B000
|
unkown image
|
page readonly
|
|
|
|
2370BC29000
|
unkown
|
page read and write
|
|
|
|
7DF5F3CC2000
|
unkown image
|
page readonly
|
|
|
|
1F8229F1000
|
unkown
|
page read and write
|
|
|
|
2370BCAF000
|
unkown
|
page read and write
|
|
|
|
1FF02CE0000
|
unkown image
|
page readonly
|
|
|
|
86F33FE000
|
stack
|
page read and write
|
|
|
|
7FF5D2BBB000
|
unkown image
|
page readonly
|
|
|
|
7DF565472000
|
unkown image
|
page readonly
|
|
|
|
2CA8000
|
unkown
|
page read and write
|
|
|
|
9E83CFD000
|
stack
|
page read and write
|
|
|
|
7FF53CBD3000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA55000
|
unkown
|
page read and write
|
|
|
|
2370BC9E000
|
unkown
|
page read and write
|
|
|
|
25A0000
|
unkown image
|
page readonly
|
|
|
|
9320F7C000
|
stack
|
page read and write
|
|
|
|
7FF585784000
|
unkown image
|
page readonly
|
|
|
|
1F4EF365000
|
unkown
|
page read and write
|
|
|
|
2371141E000
|
unkown
|
page read and write
|
|
|
|
2BB7000
|
heap private
|
page read and write
|
|
|
|
23711413000
|
unkown
|
page read and write
|
|
|
|
1F4EF802000
|
unkown
|
page read and write
|
|
|
|
7FF58542A000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE1DD000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE1F2000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6180000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2B3A000
|
unkown image
|
page readonly
|
|
|
|
7FF54FAB3000
|
unkown image
|
page readonly
|
|
|
|
7DF552590000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2AA0000
|
unkown image
|
page readonly
|
|
|
|
21666FE000
|
stack
|
page read and write
|
|
|
|
2370BBA0000
|
unkown image
|
page readonly
|
|
|
|
7F9B0000
|
unkown image
|
page readonly
|
|
|
|
6AC65FF000
|
stack
|
page read and write
|
|
|
|
290ECE50000
|
unkown image
|
page readonly
|
|
|
|
7DF506CA0000
|
unkown image
|
page readonly
|
|
|
|
7DF59B0A2000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEFE3000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA4F000
|
unkown image
|
page readonly
|
|
|
|
1FF0284F000
|
unkown
|
page read and write
|
|
|
|
1F4EF3A0000
|
unkown
|
page read and write
|
|
|
|
2155A440000
|
unkown
|
page read and write
|
|
|
|
25CC000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB6F000
|
unkown image
|
page readonly
|
|
|
|
1A34F7F0000
|
unkown
|
page read and write
|
|
|
|
237114DC000
|
unkown
|
page read and write
|
|
|
|
2155A370000
|
unkown image
|
page read and write
|
|
|
|
23711390000
|
unkown
|
page read and write
|
|
|
|
1F4EEA84000
|
unkown
|
page read and write
|
|
|
|
1B3BAF60000
|
unkown image
|
page readonly
|
|
|
|
7FF546543000
|
unkown image
|
page readonly
|
|
|
|
7FF56B947000
|
unkown image
|
page readonly
|
|
|
|
290ECAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB6B000
|
unkown image
|
page readonly
|
|
|
|
2BB0000
|
heap private
|
page read and write
|
|
|
|
A55000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6160000
|
unkown image
|
page readonly
|
|
|
|
7FF4F0A01000
|
unkown image
|
page readonly
|
|
|
|
237114AF000
|
unkown
|
page read and write
|
|
|
|
1E8D82D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DDE7F000
|
unkown image
|
page readonly
|
|
|
|
21665FE000
|
stack
|
page read and write
|
|
|
|
7FF54663E000
|
unkown image
|
page readonly
|
|
|
|
7FF53CC7B000
|
unkown image
|
page readonly
|
|
|
|
1F4EF35D000
|
unkown
|
page read and write
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE162000
|
unkown image
|
page readonly
|
|
|
|
7FF54659A000
|
unkown image
|
page readonly
|
|
|
|
2155A45C000
|
unkown
|
page read and write
|
|
|
|
2155A47A000
|
unkown
|
page read and write
|
|
|
|
7DF506C80000
|
unkown image
|
page readonly
|
|
|
|
7FF5856CD000
|
unkown image
|
page readonly
|
|
|
|
24021600000
|
unkown image
|
page readonly
|
|
|
|
2B50000
|
unkown
|
page read and write
|
|
|
|
83B000
|
unkown
|
page read and write
|
|
|
|
1F4EEA51000
|
unkown
|
page read and write
|
|
|
|
7DF5A6160000
|
unkown image
|
page readonly
|
|
|
|
7FF585693000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2B08000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE3CB000
|
unkown image
|
page readonly
|
|
|
|
2938000
|
unkown
|
page read and write
|
|
|
|
7FF5D2770000
|
unkown image
|
page readonly
|
|
|
|
7FDF0000
|
unkown image
|
page readonly
|
|
|
|
1B3BA9F5000
|
unkown
|
page read and write
|
|
|
|
7FF5D2BEB000
|
unkown image
|
page readonly
|
|
|
|
24021700000
|
unkown image
|
page readonly
|
|
|
|
93213FE000
|
stack
|
page read and write
|
|
|
|
86F2F7B000
|
stack
|
page read and write
|
|
|
|
7FF53CC7E000
|
unkown image
|
page readonly
|
|
|
|
2880000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2BEF000
|
unkown image
|
page readonly
|
|
|
|
2370C559000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown image
|
page readonly
|
|
|
|
6AC6579000
|
stack
|
page read and write
|
|
|
|
1F4EF3C0000
|
unkown
|
page read and write
|
|
|
|
1E8D7DA0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F12F5000
|
unkown image
|
page readonly
|
|
|
|
7FF546547000
|
unkown image
|
page readonly
|
|
|
|
86F307E000
|
stack
|
page read and write
|
|
|
|
7FF5DE305000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE244000
|
unkown image
|
page readonly
|
|
|
|
25AA000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
1FF0283C000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF094000
|
unkown image
|
page readonly
|
|
|
|
237110A0000
|
unkown
|
page read and write
|
|
|
|
290ECE60000
|
unkown image
|
page readonly
|
|
|
|
7FF4E503E000
|
unkown image
|
page readonly
|
|
|
|
25CC000
|
unkown image
|
page readonly
|
|
|
|
2155A3E0000
|
heap default
|
page read and write
|
|
|
|
64A000
|
unkown
|
page read and write
|
|
|
|
25D9000
|
unkown image
|
page readonly
|
|
|
|
2B3E000
|
stack
|
page read and write
|
|
|
|
7FF5464C4000
|
unkown image
|
page readonly
|
|
|
|
2370C415000
|
unkown
|
page read and write
|
|
|
|
7FF54FB2F000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF21B000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB3B000
|
unkown image
|
page readonly
|
|
|
|
7DF506C90000
|
unkown image
|
page readonly
|
|
|
|
7FF54F1BE000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF1DF000
|
unkown image
|
page readonly
|
|
|
|
24CF824B000
|
unkown
|
page read and write
|
|
|
|
1A34F823000
|
unkown
|
page read and write
|
|
|
|
7FF58579F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D26F6000
|
unkown image
|
page readonly
|
|
|
|
1F4EF963000
|
unkown
|
page read and write
|
|
|
|
7FF590010000
|
unkown image
|
page readonly
|
|
|
|
1F4EF3BF000
|
unkown
|
page read and write
|
|
|
|
24021829000
|
unkown
|
page read and write
|
|
|
|
75E0000
|
unkown
|
page read and write
|
|
|
|
7DF581342000
|
unkown image
|
page readonly
|
|
|
|
25A0000
|
unkown image
|
page readonly
|
|
|
|
25FD000
|
unkown image
|
page readonly
|
|
|
|
2594000
|
unkown image
|
page readonly
|
|
|
|
63F17BA000
|
unkown
|
page read and write
|
|
|
|
7FF5461F4000
|
unkown image
|
page readonly
|
|
|
|
7DF5E8500000
|
unkown image
|
page readonly
|
|
|
|
7F792000
|
unkown image
|
page readonly
|
|
|
|
4800000
|
heap private
|
page read and write
|
|
|
|
25DD000
|
unkown image
|
page readonly
|
|
|
|
7FF53CA2D000
|
unkown image
|
page readonly
|
|
|
|
7FF54FAD5000
|
unkown image
|
page readonly
|
|
|
|
2CAC000
|
unkown
|
page read and write
|
|
|
|
7FF5DE3CD000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA4F000
|
unkown
|
page read and write
|
|
|
|
7FF53CC60000
|
unkown image
|
page readonly
|
|
|
|
237114D7000
|
unkown
|
page read and write
|
|
|
|
23711260000
|
unkown
|
page read and write
|
|
|
|
1B3BAD60000
|
unkown image
|
page readonly
|
|
|
|
7FF5463A0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F0BC3000
|
unkown image
|
page readonly
|
|
|
|
1A34F5D0000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
7FF5D2BD4000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2BED000
|
unkown image
|
page readonly
|
|
|
|
295F000
|
stack
|
page read and write
|
|
|
|
7FF5D2AD2000
|
unkown image
|
page readonly
|
|
|
|
7F7A2000
|
unkown image
|
page readonly
|
|
|
|
24CF8030000
|
unkown image
|
page readonly
|
|
|
|
1F4EF325000
|
unkown
|
page read and write
|
|
|
|
7FF546507000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEA8E000
|
unkown image
|
page readonly
|
|
|
|
24CF8302000
|
unkown
|
page read and write
|
|
|
|
7FF546181000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2BBE000
|
unkown image
|
page readonly
|
|
|
|
1B3BA9E3000
|
heap default
|
page read and write
|
|
|
|
24CF8313000
|
unkown
|
page read and write
|
|
|
|
2B80000
|
heap private
|
page read and write
|
|
|
|
1E8D7EC7000
|
unkown
|
page read and write
|
|
|
|
1F4EEA53000
|
unkown
|
page read and write
|
|
|
|
1A34F902000
|
unkown
|
page read and write
|
|
|
|
1B3BAB50000
|
unkown
|
page read and write
|
|
|
|
24CF8300000
|
unkown
|
page read and write
|
|
|
|
240215B0000
|
unkown image
|
page read and write
|
|
|
|
1B3BA840000
|
unkown image
|
page readonly
|
|
|
|
54139FC000
|
unkown
|
page read and write
|
|
|
|
2988000
|
unkown
|
page read and write
|
|
|
|
7FF53CBA8000
|
unkown image
|
page readonly
|
|
|
|
7DF59B0A0000
|
unkown image
|
page readonly
|
|
|
|
7FF546585000
|
unkown image
|
page readonly
|
|
|
|
7DF5E4B10000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2AC8000
|
unkown image
|
page readonly
|
|
|
|
7DF5E84F0000
|
unkown image
|
page readonly
|
|
|
|
23711380000
|
unkown
|
page read and write
|
|
|
|
7DF565462000
|
unkown image
|
page readonly
|
|
|
|
7FF54657D000
|
unkown image
|
page readonly
|
|
|
|
2370BB80000
|
unkown image
|
page readonly
|
|
|
|
2370CD30000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3CC0000
|
unkown image
|
page readonly
|
|
|
|
7FF54653C000
|
unkown image
|
page readonly
|
|
|
|
7FF58579D000
|
unkown image
|
page readonly
|
|
|
|
9E842FF000
|
stack
|
page read and write
|
|
|
|
7FF59077D000
|
unkown image
|
page readonly
|
|
|
|
7FF53CBC5000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE2E8000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2AE7000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA4D000
|
unkown image
|
page readonly
|
|
|
|
7FDF2000
|
unkown image
|
page readonly
|
|
|
|
265C000
|
unkown image
|
page readonly
|
|
|
|
290EC770000
|
unkown
|
page read and write
|
|
|
|
1F4EF380000
|
unkown
|
page read and write
|
|
|
|
24CF8050000
|
heap default
|
page read and write
|
|
|
|
2370C502000
|
unkown
|
page read and write
|
|
|
|
7FF5CF127000
|
unkown image
|
page readonly
|
|
|
|
7FF4F0B64000
|
unkown image
|
page readonly
|
|
|
|
2BDD000
|
unkown
|
page read and write
|
|
|
|
290EC85B000
|
unkown
|
page read and write
|
|
|
|
24CF8213000
|
unkown
|
page read and write
|
|
|
|
B2A127E000
|
stack
|
page read and write
|
|
|
|
24CF8A02000
|
unkown
|
page read and write
|
|
|
|
7DF540C62000
|
unkown image
|
page readonly
|
|
|
|
7FF5D276A000
|
unkown image
|
page readonly
|
|
|
|
86F327E000
|
stack
|
page read and write
|
|
|
|
7FF5DDF2E000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2BDE000
|
unkown image
|
page readonly
|
|
|
|
2985000
|
unkown
|
page read and write
|
|
|
|
2590000
|
unkown image
|
page readonly
|
|
|
|
1B3BAB45000
|
heap private
|
page read and write
|
|
|
|
2890000
|
unkown image
|
page readonly
|
|
|
|
1F822950000
|
unkown
|
page read and write
|
|
|
|
7FF5CF21F000
|
unkown image
|
page readonly
|
|
|
|
7FF58578B000
|
unkown image
|
page readonly
|
|
|
|
2370BB70000
|
heap private
|
page read and write
|
|
|
|
1FF02908000
|
unkown
|
page read and write
|
|
|
|
264B000
|
unkown image
|
page readonly
|
|
|
|
1B3BAB40000
|
heap private
|
page read and write
|
|
|
|
7FF5DE3CF000
|
unkown image
|
page readonly
|
|
|
|
4FCBE7E000
|
stack
|
page read and write
|
|
|
|
7FAC2000
|
unkown image
|
page readonly
|
|
|
|
86F36FE000
|
stack
|
page read and write
|
|
|
|
1F822A11000
|
unkown
|
page read and write
|
|
|
|
7DF5E4B12000
|
unkown image
|
page readonly
|
|
|
|
24021813000
|
unkown
|
page read and write
|
|
|
|
7F7B0000
|
unkown image
|
page readonly
|
|
|
|
1B3BA980000
|
heap default
|
page read and write
|
|
|
|
7FF5DE3CF000
|
unkown image
|
page readonly
|
|
|
|
1FF02902000
|
unkown
|
page read and write
|
|
|
|
7FF5464FD000
|
unkown image
|
page readonly
|
|
|
|
7FF52B26C000
|
unkown image
|
page readonly
|
|
|
|
290EC6F0000
|
unkown image
|
page readonly
|
|
|
|
7FF58556F000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3CD2000
|
unkown image
|
page readonly
|
|
|
|
1A34F800000
|
unkown
|
page read and write
|
|
|
|
1E8D7DF0000
|
heap default
|
page read and write
|
|
|
|
7FF54FB40000
|
unkown image
|
page readonly
|
|
|
|
7FF54641E000
|
unkown image
|
page readonly
|
|
|
|
7DF59B0A0000
|
unkown image
|
page readonly
|
|
|
|
7DF4E29E0000
|
unkown image
|
page readonly
|
|
|
|
1F822F30000
|
unkown image
|
page readonly
|
|
|
|
1F4EF3D1000
|
unkown
|
page read and write
|
|
|
|
2923000
|
heap default
|
page read and write
|
|
|
|
2931000
|
unkown
|
page read and write
|
|
|
|
1B3BB550000
|
unkown
|
page read and write
|
|
|
|
7DF5525A0000
|
unkown image
|
page readonly
|
|
|
|
1B3BA820000
|
unkown image
|
page read and write
|
|
|
|
7DF565472000
|
unkown image
|
page readonly
|
|
|
|
2EF0000
|
unkown image
|
page readonly
|
|
|
|
7FF56B29B000
|
unkown image
|
page readonly
|
|
|
|
7FF53CC8B000
|
unkown image
|
page readonly
|
|
|
|
2370C402000
|
unkown
|
page read and write
|
|
|
|
5413F7E000
|
stack
|
page read and write
|
|
|
|
7FF56B7ED000
|
unkown image
|
page readonly
|
|
|
|
1F4EEAE8000
|
unkown
|
page read and write
|
|
|
|
2452000
|
unkown image
|
page readonly
|
|
|
|
2667000
|
unkown image
|
page readonly
|
|
|
|
1B3BAB49000
|
heap private
|
page read and write
|
|
|
|
1B3BAB00000
|
unkown
|
page read and write
|
|
|
|
256D000
|
unkown image
|
page readonly
|
|
|
|
2370BBE0000
|
unkown image
|
page readonly
|
|
|
|
7FF52B2A3000
|
unkown image
|
page readonly
|
|
|
|
7FF52B318000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA5B000
|
unkown
|
page read and write
|
|
|
|
2258000
|
unkown image
|
page readonly
|
|
|
|
7DF5E4B10000
|
unkown image
|
page readonly
|
|
|
|
7DF540C50000
|
unkown image
|
page readonly
|
|
|
|
2370C558000
|
unkown
|
page read and write
|
|
|
|
93211FE000
|
stack
|
page read and write
|
|
|
|
7DF565480000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA4B000
|
unkown
|
page read and write
|
|
|
|
7F7A0000
|
unkown image
|
page readonly
|
|
|
|
1F4EF365000
|
unkown
|
page read and write
|
|
|
|
21664FC000
|
stack
|
page read and write
|
|
|
|
B2A137E000
|
stack
|
page read and write
|
|
|
|
7DF5F3CC0000
|
unkown image
|
page readonly
|
|
|
|
B2A147E000
|
stack
|
page read and write
|
|
|
|
2667000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA4A000
|
unkown
|
page read and write
|
|
|
|
7FF546616000
|
unkown image
|
page readonly
|
|
|
|
7F790000
|
unkown image
|
page readonly
|
|
|
|
1F4EEAE7000
|
unkown
|
page read and write
|
|
|
|
7DF581340000
|
unkown image
|
page readonly
|
|
|
|
7FF546557000
|
unkown image
|
page readonly
|
|
|
|
1F822A1E000
|
unkown
|
page read and write
|
|
|
|
7FF585355000
|
unkown image
|
page readonly
|
|
|
|
1A34F5B0000
|
unkown image
|
page read and write
|
|
|
|
7FF58561E000
|
unkown image
|
page readonly
|
|
|
|
2DC0000
|
unkown image
|
page readonly
|
|
|
|
7DF55BF52000
|
unkown image
|
page readonly
|
|
|
|
7FE00000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE2C5000
|
unkown image
|
page readonly
|
|
|
|
29E0000
|
unkown image
|
page readonly
|
|
|
|
2155A502000
|
unkown
|
page read and write
|
|
|
|
25C5000
|
unkown image
|
page readonly
|
|
|
|
1B3BA860000
|
unkown image
|
page readonly
|
|
|
|
7C0000
|
unkown image
|
page read and write
|
|
|
|
1B3BA9E6000
|
unkown
|
page read and write
|
|
|
|
720000
|
heap default
|
page read and write
|
|
|
|
7FF54634D000
|
unkown image
|
page readonly
|
|
|
|
1E8D7F13000
|
unkown
|
page read and write
|
|
|
|
7DF581360000
|
unkown image
|
page readonly
|
|
|
|
7FF545CA4000
|
unkown image
|
page readonly
|
|
|
|
25C5000
|
unkown image
|
page readonly
|
|
|
|
7FF54FA9D000
|
unkown image
|
page readonly
|
|
|
|
7FF5DDF2A000
|
unkown image
|
page readonly
|
|
|
|
7FF56B9B5000
|
unkown image
|
page readonly
|
|
|
|
2586000
|
unkown image
|
page readonly
|
|
|
|
2370BC74000
|
unkown
|
page read and write
|
|
|
|
25D5000
|
unkown image
|
page readonly
|
|
|
|
1F4EF37D000
|
unkown
|
page read and write
|
|
|
|
24CF8000000
|
unkown image
|
page readonly
|
|
|
|
2A00000
|
heap default
|
page read and write
|
|
|
|
28BE000
|
stack
|
page read and write
|
|
|
|
86F34FF000
|
stack
|
page read and write
|
|
|
|
7FF56B957000
|
unkown image
|
page readonly
|
|
|
|
240215F0000
|
unkown image
|
page readonly
|
|
|
|
2155A3B0000
|
unkown image
|
page readonly
|
|
|
|
477E000
|
stack
|
page read and write
|
|
|
|
7FF5D2BDB000
|
unkown image
|
page readonly
|
|
|
|
216677F000
|
stack
|
page read and write
|
|
|
|
25C9000
|
unkown image
|
page readonly
|
|
|
|
7FF58568C000
|
unkown image
|
page readonly
|
|
|
|
2155A44D000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown image
|
page readonly
|
|
|
|
28BB000
|
unkown
|
page read and write
|
|
|
|
7FF59086F000
|
unkown image
|
page readonly
|
|
|
|
7FF53CA53000
|
unkown image
|
page readonly
|
|
|
|
2452000
|
unkown image
|
page readonly
|
|
|
|
7DF5E84F2000
|
unkown image
|
page readonly
|
|
|
|
2486000
|
unkown image
|
page readonly
|
|
|
|
2B67000
|
heap private
|
page read and write
|
|
|
|
7FF5DE0A8000
|
unkown image
|
page readonly
|
|
|
|
23711251000
|
unkown
|
page read and write
|
|
|
|
7FF5D298D000
|
unkown image
|
page readonly
|
|
|
|
7FF546343000
|
unkown image
|
page readonly
|
|
|
|
2594000
|
unkown image
|
page readonly
|
|
|
|
7FF4F136D000
|
unkown image
|
page readonly
|
|
|
|
2C60000
|
unkown image
|
page readonly
|
|
|
|
86F317B000
|
stack
|
page read and write
|
|
|
|
7FF52B31F000
|
unkown image
|
page readonly
|
|
|
|
7FF53C943000
|
unkown image
|
page readonly
|
|
|
|
2370BB60000
|
unkown image
|
page read and write
|
|
|
|
7FF59085B000
|
unkown image
|
page readonly
|
|
|
|
1F822D25000
|
heap private
|
page read and write
|
|
|
|
7DF506C82000
|
unkown image
|
page readonly
|
|
|
|
9320FFB000
|
stack
|
page read and write
|
|
|
|
7FF545DF0000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6170000
|
unkown image
|
page readonly
|
|
|
|
7DF506C92000
|
unkown image
|
page readonly
|
|
|
|
22D0000
|
unkown image
|
page readonly
|
|
|
|
7FF56B99A000
|
unkown image
|
page readonly
|
|
|
|
1B3BB7F0000
|
unkown
|
page read and write
|
|
|
|
7FF4F1374000
|
unkown image
|
page readonly
|
|
|
|
2370BC54000
|
unkown
|
page read and write
|
|
|
|
25A0000
|
unkown image
|
page readonly
|
|
|
|
1FF02802000
|
unkown
|
page read and write
|
|
|
|
25ED000
|
unkown image
|
page readonly
|
|
|
|
1FF027D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D29A3000
|
unkown image
|
page readonly
|
|
|
|
25C9000
|
unkown image
|
page readonly
|
|
|
|
1B3BA9C6000
|
unkown
|
page read and write
|
|
|
|
1A34FD80000
|
unkown image
|
page readonly
|
|
|
|
7FF5DDC14000
|
unkown image
|
page readonly
|
|
|
|
23711390000
|
unkown
|
page read and write
|
|
|
|
7FAB2000
|
unkown image
|
page readonly
|
|
|
|
7FF54F633000
|
unkown image
|
page readonly
|
|
|
|
7FF5856EA000
|
unkown image
|
page readonly
|
|
|
|
2155A8D0000
|
unkown image
|
page readonly
|
|
|
|
1F4EF35A000
|
unkown
|
page read and write
|
|
|
|
1E8D8700000
|
unkown
|
page read and write
|
|
|
|
67B000
|
unkown
|
page read and write
|
|
|
|
1F4EF800000
|
unkown
|
page read and write
|
|
|
|
255D000
|
unkown image
|
page readonly
|
|
|
|
86F31FF000
|
stack
|
page read and write
|
|
|
|
9E840FF000
|
stack
|
page read and write
|
|
|
|
2155A457000
|
unkown
|
page read and write
|
|
|
|
7FF5DE096000
|
unkown image
|
page readonly
|
|
|
|
25D9000
|
unkown image
|
page readonly
|
|
|
|
2594000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF21F000
|
unkown image
|
page readonly
|
|
|
|
7FAD0000
|
unkown image
|
page readonly
|
|
|
|
1F4EEAA0000
|
unkown
|
page read and write
|
|
|
|
7FF53CBBD000
|
unkown image
|
page readonly
|
|
|
|
28E0000
|
unkown image
|
page readonly
|
|
|
|
7FF52B2C5000
|
unkown image
|
page readonly
|
|
|
|
24CF8130000
|
unkown image
|
page readonly
|
|
|
|
7FF546341000
|
unkown image
|
page readonly
|
|
|
|
6C0000
|
unkown
|
page read and write
|
|
|
|
1F4EF86A000
|
unkown
|
page read and write
|
|
|
|
7FF5DE2C3000
|
unkown image
|
page readonly
|
|
|
|
25AA000
|
unkown image
|
page readonly
|
|
|
|
1F822D20000
|
heap private
|
page read and write
|
|
|
|
1F4EF35D000
|
unkown
|
page read and write
|
|
|
|
2900000
|
heap default
|
page read and write
|
|
|
|
7DF552590000
|
unkown image
|
page readonly
|
|
|
|
2370CD20000
|
unkown image
|
page readonly
|
|
|
|
2370CB23000
|
unkown
|
page read and write
|
|
|
|
82B000
|
unkown
|
page read and write
|
|
|
|
22D0000
|
unkown image
|
page readonly
|
|
|
|
7FF58578E000
|
unkown image
|
page readonly
|
|
|
|
F1B3E7F000
|
stack
|
page read and write
|
|
|
|
7DF5A6180000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
1F4EEB08000
|
unkown
|
page read and write
|
|
|
|
2155AB40000
|
unkown
|
page read and write
|
|
|
|
7FF54660F000
|
unkown image
|
page readonly
|
|
|
|
1A34F820000
|
unkown
|
page read and write
|
|
|
|
9320CFF000
|
stack
|
page read and write
|
|
|
|
5C60000
|
unkown
|
page read and write
|
|
|
|
2BBA000
|
heap private
|
page read and write
|
|
|
|
7DF5F3CE0000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
23711250000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
1F4EECD0000
|
unkown image
|
page readonly
|
|
|
|
7FF54F71F000
|
unkown image
|
page readonly
|
|
|
|
7FF56B97D000
|
unkown image
|
page readonly
|
|
|
|
2CA3000
|
heap default
|
page read and write
|
|
|
|
7FAB0000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA13000
|
unkown
|
page read and write
|
|
|
|
1A34F710000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF138000
|
unkown image
|
page readonly
|
|
|
|
1B3BAB10000
|
unkown
|
page read and write
|
|
|
|
2371145F000
|
unkown
|
page read and write
|
|
|
|
1B3BA9F5000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2764000
|
unkown image
|
page readonly
|
|
|
|
7FF5D27C1000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF163000
|
unkown image
|
page readonly
|
|
|
|
2155A6D0000
|
unkown image
|
page readonly
|
|
|
|
2CA5000
|
unkown
|
page read and write
|
|
|
|
7FF4F11C7000
|
unkown image
|
page readonly
|
|
|
|
7DF55BF60000
|
unkown image
|
page readonly
|
|
|
|
1B3BA9F5000
|
unkown
|
page read and write
|
|
|
|
7FF5D2A64000
|
unkown image
|
page readonly
|
|
|
|
23711238000
|
unkown
|
page read and write
|
|
|
|
1F4EEAC2000
|
unkown
|
page read and write
|
|
|
|
7FF54FABA000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB28000
|
unkown image
|
page readonly
|
|
|
|
7FF53CB83000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA3C000
|
unkown
|
page read and write
|
|
|
|
2370CC10000
|
unkown
|
page read and write
|
|
|
|
1F4EF3C3000
|
unkown
|
page read and write
|
|
|
|
1B3BA988000
|
heap default
|
page read and write
|
|
|
|
7FF58555C000
|
unkown image
|
page readonly
|
|
|
|
2581000
|
unkown image
|
page readonly
|
|
|
|
1F4EF3AD000
|
unkown
|
page read and write
|
|
|
|
7DF5F3CD2000
|
unkown image
|
page readonly
|
|
|
|
7FF52B257000
|
unkown image
|
page readonly
|
|
|
|
7DF5E84E0000
|
unkown image
|
page readonly
|
|
|
|
2155A43A000
|
unkown
|
page read and write
|
|
|
|
2921000
|
unkown
|
page read and write
|
|
|
|
7FF56B748000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE3BB000
|
unkown image
|
page readonly
|
|
|
|
7FF54FA67000
|
unkown image
|
page readonly
|
|
|
|
7DF404B50000
|
unkown image
|
page readonly
|
|
|
|
7FF4F0C29000
|
unkown image
|
page readonly
|
|
|
|
1B3BB0F0000
|
unkown image
|
page readonly
|
|
|
|
2CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5CF113000
|
unkown image
|
page readonly
|
|
|
|
1F4EF140000
|
unkown
|
page read and write
|
|
|
|
2371123E000
|
unkown
|
page read and write
|
|
|
|
255D000
|
unkown image
|
page readonly
|
|
|
|
7FF54F823000
|
unkown image
|
page readonly
|
|
|
|
2370C500000
|
unkown
|
page read and write
|
|
|
|
7FF53CC8F000
|
unkown image
|
page readonly
|
|
|
|
7FF52ABE4000
|
unkown image
|
page readonly
|
|
|
|
7FF53C4FE000
|
unkown image
|
page readonly
|
|
|
|
7FF52B34E000
|
unkown image
|
page readonly
|
|
|
|
1A34F620000
|
heap default
|
page read and write
|
|
|
|
4FCBCFE000
|
stack
|
page read and write
|
|
|
|
7FF546589000
|
unkown image
|
page readonly
|
|
|
|
2155A425000
|
unkown
|
page read and write
|
|
|
|
3220000
|
unkown image
|
page readonly
|
|
|
|
7DF55BF50000
|
unkown image
|
page readonly
|
|
|
|
7FF54664B000
|
unkown image
|
page readonly
|
|
|
|
1B3BA840000
|
unkown image
|
page readonly
|
|
|
|
1FF0284A000
|
unkown
|
page read and write
|
|
|
|
7FF53CA7E000
|
unkown image
|
page readonly
|
|
|
|
5413EFB000
|
stack
|
page read and write
|
|
|
|
1F4EF160000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE2DC000
|
unkown image
|
page readonly
|
|
|
|
1E8D7F02000
|
unkown
|
page read and write
|
|
|
|
2155A456000
|
unkown
|
page read and write
|
|
|
|
7FF56BA0F000
|
unkown image
|
page readonly
|
|
|
|
7DF5E84F0000
|
unkown image
|
page readonly
|
|
|
|
2494000
|
unkown image
|
page readonly
|
|
|
|
7FF4F119D000
|
unkown image
|
page readonly
|
|
|
|
24CF824D000
|
unkown
|
page read and write
|
|
|
|
2EA0000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA52000
|
unkown
|
page read and write
|
|
|
|
1FF02851000
|
unkown
|
page read and write
|
|
|
|
7FF5D28AF000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA57000
|
unkown
|
page read and write
|
|
|
|
2667000
|
unkown image
|
page readonly
|
|
|
|
7DF565470000
|
unkown image
|
page readonly
|
|
|
|
6AC6679000
|
stack
|
page read and write
|
|
|
|
7FF546408000
|
unkown image
|
page readonly
|
|
|
|
1F4EF740000
|
unkown
|
page read and write
|
|
|
|
7FF5D2793000
|
unkown image
|
page readonly
|
|
|
|
1F4EEAA7000
|
unkown
|
page read and write
|
|
|
|
24CF828A000
|
unkown
|
page read and write
|
|
|
|
1FF027F0000
|
heap default
|
page read and write
|
|
|
|
7FF56B985000
|
unkown image
|
page readonly
|
|
|
|
7FF52B28D000
|
unkown image
|
page readonly
|
|
|
|
7FF4F12D3000
|
unkown image
|
page readonly
|
|
|
|
F1B3D77000
|
stack
|
page read and write
|
|
|
|
1F4EE980000
|
heap private
|
page read and write
|
|
|
|
7FF5D2721000
|
unkown image
|
page readonly
|
|
|
|
23711230000
|
unkown
|
page read and write
|
|
|
|
1F822D30000
|
unkown image
|
page readonly
|
|
|
|
1F4EEADF000
|
unkown
|
page read and write
|
|
|
|
7FF5D2BEF000
|
unkown image
|
page readonly
|
|
|
|
23711350000
|
unkown
|
page read and write
|
|
|
|
1B3BB760000
|
unkown image
|
page read and write
|
|
|
|
25D9000
|
unkown image
|
page readonly
|
|
|
|
290EC800000
|
unkown
|
page read and write
|
|
|
|
23711270000
|
unkown
|
page read and write
|
|
|
|
1B3BAB30000
|
unkown
|
page read and write
|
|
|
|
2586000
|
unkown image
|
page readonly
|
|
|
|
7FF5462D8000
|
unkown image
|
page readonly
|
|
|
|
1FF02900000
|
unkown
|
page read and write
|
|
|
|
7FF5CECF8000
|
unkown image
|
page readonly
|
|
|
|
7DF581340000
|
unkown image
|
page readonly
|
|
|
|
76E0000
|
unkown
|
page read and write
|
|
|
|
1FF027A0000
|
unkown image
|
page readonly
|
|
|
|
21669FE000
|
stack
|
page read and write
|
|
|
|
1F8229B0000
|
unkown image
|
page readonly
|
|
|
|
7DF581342000
|
unkown image
|
page readonly
|
|
|
|
1FF02813000
|
unkown
|
page read and write
|
|
|
|
1F4EEED0000
|
unkown image
|
page readonly
|
|
|
|
7DF552580000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE39B000
|
unkown image
|
page readonly
|
|
|
|
1F4EF377000
|
unkown
|
page read and write
|
|
|
|
1F4EF902000
|
unkown
|
page read and write
|
|
|
|
7FF5D2AE3000
|
unkown image
|
page readonly
|
|
|
|
7FF58549D000
|
unkown image
|
page readonly
|
|
|
|
7FF4F11B9000
|
unkown image
|
page readonly
|
|
|
|
2D70000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2BCD000
|
unkown image
|
page readonly
|
|
|
|
24021800000
|
unkown
|
page read and write
|
|
|
|
290A000
|
heap default
|
page read and write
|
|
|
|
1F4EF3C0000
|
unkown
|
page read and write
|
|
|
|
1F4EF750000
|
unkown image
|
page read and write
|
|
|
|
25ED000
|
unkown image
|
page readonly
|
|
|
|
1F4EF740000
|
unkown
|
page read and write
|
|
|
|
1F4EF802000
|
unkown
|
page read and write
|
|
|
|
2447000
|
unkown image
|
page readonly
|
|
|
|
1F4EF202000
|
unkown
|
page read and write
|
|
|
|
7DF552582000
|
unkown image
|
page readonly
|
|
|
|
7FF54FAA9000
|
unkown image
|
page readonly
|
|
|
|
2655000
|
unkown image
|
page readonly
|
|
|
|
76F0000
|
unkown
|
page read and write
|
|
|
|
1B3BA9E2000
|
unkown
|
page read and write
|
|
|
|
7DF5E84E2000
|
unkown image
|
page readonly
|
|
|
|
9320B7C000
|
stack
|
page read and write
|
|
|
|
7F7B0000
|
unkown image
|
page readonly
|
|
|
|
23711360000
|
unkown
|
page read and write
|
|
|
|
7FF52B2AA000
|
unkown image
|
page readonly
|
|
|
|
1F4EF37F000
|
unkown
|
page read and write
|
|
|
|
7F790000
|
unkown image
|
page readonly
|
|
|
|
7FF53C753000
|
unkown image
|
page readonly
|
|
|
|
2402184F000
|
unkown
|
page read and write
|
|
|
|
237114F7000
|
unkown
|
page read and write
|
|
|
|
2370C400000
|
unkown
|
page read and write
|
|
|
|
7FF52B344000
|
unkown image
|
page readonly
|
|
|
|
25B5000
|
unkown image
|
page readonly
|
|
|
|
7FF585770000
|
unkown image
|
page readonly
|
|
|
|
7DF540C70000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE2B2000
|
unkown image
|
page readonly
|
|
|
|
1F8228F0000
|
unkown image
|
page read and write
|
|
|
|
7FF4F1360000
|
unkown image
|
page readonly
|
|
|
|
1E8D8590000
|
unkown image
|
page write copy
|
|
|
|
1F4EEA4E000
|
unkown
|
page read and write
|
|
|
|
7DF540C52000
|
unkown image
|
page readonly
|
|
|
|
2155A477000
|
unkown
|
page read and write
|
|
|
|
7FF5856D9000
|
unkown image
|
page readonly
|
|
|
|
2370CB20000
|
unkown
|
page read and write
|
|
|
|
7F690000
|
unkown image
|
page readonly
|
|
|
|
237114A8000
|
unkown
|
page read and write
|
|
|
|
7FF5D28F7000
|
unkown image
|
page readonly
|
|
|
|
7FF54FA77000
|
unkown image
|
page readonly
|
|
|
|
7DF5E84E0000
|
unkown image
|
page readonly
|
|
|
|
1E8D8602000
|
unkown
|
page read and write
|
|
|
|
7FF4F137B000
|
unkown image
|
page readonly
|
|
|
|
2370C340000
|
unkown image
|
page read and write
|
|
|
|
7FF5856D5000
|
unkown image
|
page readonly
|
|
|
|
23711090000
|
unkown
|
page read and write
|
|
|
|
7FF53CBDA000
|
unkown image
|
page readonly
|
|
|
|
25B5000
|
unkown image
|
page readonly
|
|
|
|
2370BD13000
|
unkown
|
page read and write
|
|
|
|
1F4EEA8B000
|
unkown
|
page read and write
|
|
|
|
47C0000
|
unkown
|
page read and write
|
|
|
|
7FF52B32B000
|
unkown image
|
page readonly
|
|
|
|
9E83B7B000
|
stack
|
page read and write
|
|
|
|
1FF0284D000
|
unkown
|
page read and write
|
|
|
|
1A34FE02000
|
unkown
|
page read and write
|
|
|
|
2155A42A000
|
unkown
|
page read and write
|
|
|
|
7FF5D2AC4000
|
unkown image
|
page readonly
|
|
|
|
2589000
|
unkown image
|
page readonly
|
|
|
|
2155AA50000
|
unkown image
|
page readonly
|
|
|
|
1B3BB0E0000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA08000
|
unkown image
|
page readonly
|
|
|
|
290EC720000
|
unkown image
|
page readonly
|
|
|
|
7DF459E10000
|
unkown image
|
page readonly
|
|
|
|
1E8D7EC9000
|
unkown
|
page read and write
|
|
|
|
2370C0D0000
|
unkown image
|
page readonly
|
|
|
|
1F4EF300000
|
unkown
|
page read and write
|
|
|
|
2590000
|
unkown image
|
page readonly
|
|
|
|
7FF54FA88000
|
unkown image
|
page readonly
|
|
|
|
1F4EF35B000
|
unkown
|
page read and write
|
|
|
|
7F792000
|
unkown image
|
page readonly
|
|
|
|
7FF59084D000
|
unkown image
|
page readonly
|
|
|
|
2370C250000
|
unkown image
|
page readonly
|
|
|
|
4FCBB7F000
|
stack
|
page read and write
|
|
|
|
1F4EF372000
|
unkown
|
page read and write
|
|
|
|
9E83FFD000
|
stack
|
page read and write
|
|
|
|
7FF5DE3B4000
|
unkown image
|
page readonly
|
|
|
|
7FF5461B5000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA1B000
|
unkown image
|
page readonly
|
|
|
|
2370C701000
|
unkown
|
page read and write
|
|
|
|
7FF58575F000
|
unkown image
|
page readonly
|
|
|
|
1E8D80D0000
|
unkown image
|
page readonly
|
|
|
|
2AE0000
|
unkown
|
page read and write
|
|
|
|
1B3BA9CE000
|
unkown
|
page read and write
|
|
|
|
23711130000
|
unkown
|
page read and write
|
|
|
|
1F822A07000
|
unkown
|
page read and write
|
|
|
|
1F4EF3B0000
|
unkown
|
page read and write
|
|
|
|
1F8230B0000
|
unkown image
|
page readonly
|
|
|
|
1F8229A0000
|
unkown image
|
page readonly
|
|
|
|
1F4EF319000
|
unkown
|
page read and write
|
|
|
|
290E000
|
stack
|
page read and write
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
2402186F000
|
unkown
|
page read and write
|
|
|
|
25B5000
|
unkown image
|
page readonly
|
|
|
|
2155A46A000
|
unkown
|
page read and write
|
|
|
|
2C80000
|
heap default
|
page read and write
|
|
|
|
1F4EF050000
|
unkown image
|
page readonly
|
|
|
|
7DF5A6170000
|
unkown image
|
page readonly
|
|
|
|
1F822910000
|
unkown image
|
page readonly
|
|
|
|
2370CD00000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE313000
|
unkown image
|
page readonly
|
|
|
|
1F4EE9F0000
|
unkown image
|
page readonly
|
|
|
|
2155A467000
|
unkown
|
page read and write
|
|
|
|
290EC83F000
|
unkown
|
page read and write
|
|
|
|
240215C0000
|
heap private
|
page read and write
|
|
|
|
467E000
|
stack
|
page read and write
|
|
|
|
7FF5DE1E6000
|
unkown image
|
page readonly
|
|
|
|
646000
|
unkown
|
page read and write
|
|
|
|
1F4EEA29000
|
unkown
|
page read and write
|
|
|
|
7FF5D2AC0000
|
unkown image
|
page readonly
|
|
|
|
7FF590836000
|
unkown image
|
page readonly
|
|
|
|
7DF5E4B22000
|
unkown image
|
page readonly
|
|
|
|
28C0000
|
unkown
|
page read and write
|
|
|
|
2486000
|
unkown image
|
page readonly
|
|
|
|
7FF5461FF000
|
unkown image
|
page readonly
|
|
|
|
7DF59B0A2000
|
unkown image
|
page readonly
|
|
|
|
296A000
|
heap default
|
page read and write
|
|
|
|
24CF827D000
|
unkown
|
page read and write
|
|
|
|
1F4EF902000
|
unkown
|
page read and write
|
|
|
|
7FF585758000
|
unkown image
|
page readonly
|
|
|
|
1F4EE990000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB36000
|
unkown image
|
page readonly
|
|
|
|
7FF590828000
|
unkown image
|
page readonly
|
|
|
|
7DF506C80000
|
unkown image
|
page readonly
|
|
|
|
24CF8255000
|
unkown
|
page read and write
|
|
|
|
7FF5DE388000
|
unkown image
|
page readonly
|
|
|
|
2165FEB000
|
unkown
|
page read and write
|
|
|
|
7FF53CC74000
|
unkown image
|
page readonly
|
|
|
|
1FF02862000
|
unkown
|
page read and write
|
|
|
|
2155A390000
|
unkown image
|
page readonly
|
|
|
|
2B70000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE396000
|
unkown image
|
page readonly
|
|
|
|
7FF546634000
|
unkown image
|
page readonly
|
|
|
|
7DF5E84F2000
|
unkown image
|
page readonly
|
|
|
|
25BB000
|
unkown image
|
page readonly
|
|
|
|
7FF5856A8000
|
unkown image
|
page readonly
|
|
|
|
7FF53CB04000
|
unkown image
|
page readonly
|
|
|
|
2370BED0000
|
unkown image
|
page readonly
|
|
|
|
292C000
|
unkown
|
page read and write
|
|
|
|
290ECCD0000
|
unkown image
|
page readonly
|
|
|
|
2571000
|
unkown image
|
page readonly
|
|
|
|
1A34FA00000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3CE0000
|
unkown image
|
page readonly
|
|
|
|
25C1000
|
unkown image
|
page readonly
|
|
|
|
2155A427000
|
unkown
|
page read and write
|
|
|
|
7FF54FA7C000
|
unkown image
|
page readonly
|
|
|
|
290ED002000
|
unkown
|
page read and write
|
|
|
|
24021913000
|
unkown
|
page read and write
|
|
|
|
79B327E000
|
stack
|
page read and write
|
|
|
|
1E8D8712000
|
unkown
|
page read and write
|
|
|
|
1B3BA830000
|
unkown
|
page read and write
|
|
|
|
541417F000
|
stack
|
page read and write
|
|
|
|
25FD000
|
unkown image
|
page readonly
|
|
|
|
1F8229EB000
|
heap default
|
page read and write
|
|
|
|
29A5000
|
unkown
|
page read and write
|
|
|
|
5A60000
|
unkown image
|
page readonly
|
|
|
|
1E8D7DC0000
|
unkown image
|
page readonly
|
|
|
|
25C1000
|
unkown image
|
page readonly
|
|
|
|
7FF4F135B000
|
unkown image
|
page readonly
|
|
|
|
2447000
|
unkown image
|
page readonly
|
|
|
|
1F822930000
|
unkown image
|
page readonly
|
|
|
|
5414077000
|
stack
|
page read and write
|
|
|
|
7DF540C60000
|
unkown image
|
page readonly
|
|
|
|
1F4EF37B000
|
unkown
|
page read and write
|
|
|
|
5413C7F000
|
stack
|
page read and write
|
|
|
|
7DF59B090000
|
unkown image
|
page readonly
|
|
|
|
1B3BAAA0000
|
unkown image
|
page readonly
|
|
|
|
7FF54F95E000
|
unkown image
|
page readonly
|
|
|
|
7FF4F0B62000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE3AD000
|
unkown image
|
page readonly
|
|
|
|
1B3BA870000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE2FD000
|
unkown image
|
page readonly
|
|
|
|
9E8370B000
|
unkown
|
page read and write
|
|
|
|
2155A484000
|
unkown
|
page read and write
|
|
|
|
7FF5D238D000
|
unkown image
|
page readonly
|
|
|
|
1F822A11000
|
unkown
|
page read and write
|
|
|
|
F1B3C7B000
|
stack
|
page read and write
|
|
|
|
7FF5DE11A000
|
unkown image
|
page readonly
|
|
|
|
79B34FB000
|
stack
|
page read and write
|
|
|
|
2155A3F0000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF033000
|
unkown image
|
page readonly
|
|
|
|
2370BCFD000
|
unkown
|
page read and write
|
|
|
|
290EC6F0000
|
unkown image
|
page readonly
|
|
|
|
1E8D7DA0000
|
unkown image
|
page readonly
|
|
|
|
24021885000
|
unkown
|
page read and write
|
|
|
|
7FF4F12C9000
|
unkown image
|
page readonly
|
|
|
|
1F4EEAE5000
|
unkown
|
page read and write
|
|
|
|
2155A3C0000
|
unkown image
|
page readonly
|
|
|
|
2571000
|
unkown image
|
page readonly
|
|
|
|
290EC913000
|
unkown
|
page read and write
|
|
|
|
6AC64FA000
|
stack
|
page read and write
|
|
|
|
86F2D77000
|
stack
|
page read and write
|
|
|
|
7FF5D2911000
|
unkown image
|
page readonly
|
|
|
|
7FF53CAA3000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEFBD000
|
unkown image
|
page readonly
|
|
|
|
7FF56BA3E000
|
unkown image
|
page readonly
|
|
|
|
2945000
|
unkown
|
page read and write
|
|
|
|
7FF4F134F000
|
unkown image
|
page readonly
|
|
|
|
7FF54661B000
|
unkown image
|
page readonly
|
|
|
|
1F4EF36A000
|
unkown
|
page read and write
|
|
|
|
7FF53CC5B000
|
unkown image
|
page readonly
|
|
|
|
4FCBC77000
|
stack
|
page read and write
|
|
|
|
2371143A000
|
unkown
|
page read and write
|
|
|
|
2370BC13000
|
unkown
|
page read and write
|
|
|
|
7FF5DE335000
|
unkown image
|
page readonly
|
|
|
|
7FF54F1C4000
|
unkown image
|
page readonly
|
|
|
|
7FF5856B8000
|
unkown image
|
page readonly
|
|
|
|
7FF54F9C5000
|
unkown image
|
page readonly
|
|
|
|
1E8D7E13000
|
unkown
|
page read and write
|
|
|
|
23711340000
|
unkown
|
page read and write
|
|
|
|
7FF4F1356000
|
unkown image
|
page readonly
|
|
|
|
7FF56B6F8000
|
unkown image
|
page readonly
|
|
|
|
7FF4F12BD000
|
unkown image
|
page readonly
|
|
|
|
1FF02AD0000
|
unkown image
|
page readonly
|
|
|
|
4FCB97B000
|
stack
|
page read and write
|
|
|
|
7A10000
|
unkown
|
page read and write
|
|
|
|
1FF02CD0000
|
unkown image
|
page readonly
|
|
|
|
1B3BA9F5000
|
heap default
|
page read and write
|
|
|
|
7FF54FB5B000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB5E000
|
unkown image
|
page readonly
|
|
|
|
7FF58576B000
|
unkown image
|
page readonly
|
|
|
|
1F4EF349000
|
unkown
|
page read and write
|
|
|
|
237114BC000
|
unkown
|
page read and write
|
|
|
|
298C000
|
unkown
|
page read and write
|
|
|
|
7DF506C92000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3CD0000
|
unkown image
|
page readonly
|
|
|
|
7DF565460000
|
unkown image
|
page readonly
|
|
|
|
7FF52AF0E000
|
unkown image
|
page readonly
|
|
|
|
1F4EF3A0000
|
unkown
|
page read and write
|
|
|
|
24021852000
|
unkown
|
page read and write
|
|
|
|
1F822910000
|
unkown image
|
page readonly
|
|
|
|
1B3BB780000
|
unkown
|
page readonly
|
|
|
|
541427F000
|
stack
|
page read and write
|
|
|
|
7DF5E4B30000
|
unkown image
|
page readonly
|
|
|
|
63F1BF9000
|
stack
|
page read and write
|
|
|
|
7FF546363000
|
unkown image
|
page readonly
|
|
|
|
7DF540C52000
|
unkown image
|
page readonly
|
|
|
|
7FF5CEFEE000
|
unkown image
|
page readonly
|
|
|
|
5F3000
|
unkown
|
page read and write
|
|
|
|
7FF4F138F000
|
unkown image
|
page readonly
|
|
|
|
7FF53CC56000
|
unkown image
|
page readonly
|
|
|
|
30A0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2984000
|
unkown image
|
page readonly
|
|
|
|
25F4000
|
unkown image
|
page readonly
|
|
|
|
2589000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
F1B371B000
|
unkown
|
page read and write
|
|
|
|
1B3BA9CE000
|
unkown
|
page read and write
|
|
|
|
7FF53C2DE000
|
unkown image
|
page readonly
|
|
|
|
25AA000
|
unkown image
|
page readonly
|
|
|
|
7DF5E4B30000
|
unkown image
|
page readonly
|
|
|
|
2370C260000
|
unkown image
|
page readonly
|
|
|
|
22D0000
|
unkown image
|
page readonly
|
|
|
|
2155A460000
|
unkown
|
page read and write
|
|
|
|
86F291C000
|
unkown
|
page read and write
|
|
|
|
7FF4E503E000
|
unkown image
|
page readonly
|
|
|
|
2370CD40000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
237114F9000
|
unkown
|
page read and write
|
|
|
|
1A34F840000
|
unkown
|
page read and write
|
|
|
|
7DF506CA0000
|
unkown image
|
page readonly
|
|
|
|
1FF0282A000
|
unkown
|
page read and write
|
|
|
|
7DF565462000
|
unkown image
|
page readonly
|
|
|
|
7FF546357000
|
unkown image
|
page readonly
|
|
|
|
237114D7000
|
unkown
|
page read and write
|
|
|
|
1F4EF346000
|
unkown
|
page read and write
|
|
|
|
7DF540C60000
|
unkown image
|
page readonly
|
|
|
|
1F4EEAB1000
|
unkown
|
page read and write
|
|
|
|
2E90000
|
heap private
|
page read and write
|
|
|
|
264B000
|
unkown image
|
page readonly
|
|
|
|
79B33FC000
|
stack
|
page read and write
|
|
|
|
1F4EF35D000
|
unkown
|
page read and write
|
|
|
|
7FF5DE24E000
|
unkown image
|
page readonly
|
|
|
|
1F4EF190000
|
unkown image
|
page write copy
|
|
|
|
290EC86D000
|
unkown
|
page read and write
|
|
|
|
1F4EE990000
|
unkown image
|
page readonly
|
|
|
|
7DF5E4B22000
|
unkown image
|
page readonly
|
|
|
|
7FF53C768000
|
unkown image
|
page readonly
|
|
|
|
B2A157F000
|
stack
|
page read and write
|
|
|
|
1F4EEABB000
|
unkown
|
page read and write
|
|
|
|
7FE02000
|
unkown image
|
page readonly
|
|
|
|
86F38FF000
|
stack
|
page read and write
|
|
|
|
2155A47B000
|
unkown
|
page read and write
|
|
|
|
290EC866000
|
unkown
|
page read and write
|
|
|
|
2988000
|
unkown
|
page read and write
|
|
|
|
7FF585705000
|
unkown image
|
page readonly
|
|
|
|
7FF5D277F000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
7FF546620000
|
unkown image
|
page readonly
|
|
|
|
1FF027C0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2AA7000
|
unkown image
|
page readonly
|
|
|
|
7DF55BF60000
|
unkown image
|
page readonly
|
|
|
|
7DF4A4030000
|
unkown image
|
page readonly
|
|
|
|
23711110000
|
unkown
|
page read and write
|
|
|
|
7FAD0000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE309000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA5A000
|
unkown
|
page read and write
|
|
|
|
7DF55BF42000
|
unkown image
|
page readonly
|
|
|
|
B2A107E000
|
stack
|
page read and write
|
|
|
|
7FF54664D000
|
unkown image
|
page readonly
|
|
|
|
1B3BB790000
|
unkown
|
page read and write
|
|
|
|
7DF581360000
|
unkown image
|
page readonly
|
|
|
|
24CF8308000
|
unkown
|
page read and write
|
|
|
|
7FF5CF14D000
|
unkown image
|
page readonly
|
|
|
|
7FF53CADF000
|
unkown image
|
page readonly
|
|
|
|
23711390000
|
unkown
|
page read and write
|
|
|
|
1A34F829000
|
unkown
|
page read and write
|
|
|
|
1E8D7E43000
|
unkown
|
page read and write
|
|
|
|
7FF5CF00E000
|
unkown image
|
page readonly
|
|
|
|
2581000
|
unkown image
|
page readonly
|
|
|
|
2B84000
|
heap private
|
page read and write
|
|
|
|
7FF5D2A27000
|
unkown image
|
page readonly
|
|
|
|
7FF53CB97000
|
unkown image
|
page readonly
|
|
|
|
290EC865000
|
unkown
|
page read and write
|
|
|
|
79B2FBC000
|
unkown
|
page read and write
|
|
|
|
2155A45A000
|
unkown
|
page read and write
|
|
|
|
1F4EEAF6000
|
unkown
|
page read and write
|
|
|
|
7FF4F138F000
|
unkown image
|
page readonly
|
|
|
|
2370CCF0000
|
unkown image
|
page readonly
|
|
|
|
24CF8250000
|
unkown
|
page read and write
|
|
|
|
63F1A7F000
|
stack
|
page read and write
|
|
|
|
2667000
|
unkown image
|
page readonly
|
|
|
|
23711230000
|
unkown
|
page read and write
|
|
|
|
7DF55BF40000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF20E000
|
unkown image
|
page readonly
|
|
|
|
2155A462000
|
unkown
|
page read and write
|
|
|
|
7FF5D2777000
|
unkown image
|
page readonly
|
|
|
|
7FF54649F000
|
unkown image
|
page readonly
|
|
|
|
2370C518000
|
unkown
|
page read and write
|
|
|
|
7FF5DE2A4000
|
unkown image
|
page readonly
|
|
|
|
7FE10000
|
unkown image
|
page readonly
|
|
|
|
1F4EF802000
|
unkown
|
page read and write
|
|
|
|
2CC5000
|
unkown
|
page read and write
|
|
|
|
290EC750000
|
unkown image
|
page readonly
|
|
|
|
2447000
|
unkown image
|
page readonly
|
|
|
|
1E8D8460000
|
unkown image
|
page readonly
|
|
|
|
7FF52B330000
|
unkown image
|
page readonly
|
|
|
|
24CF7FF0000
|
heap private
|
page read and write
|
|
|
|
7DF5A6172000
|
unkown image
|
page readonly
|
|
|
|
1F4EEB02000
|
unkown
|
page read and write
|
|
|
|
4FCBDFA000
|
stack
|
page read and write
|
|
|
|
79B377E000
|
stack
|
page read and write
|
|
|
|
1F822A1F000
|
unkown
|
page read and write
|
|
|
|
7DF552592000
|
unkown image
|
page readonly
|
|
|
|
1F4EF39F000
|
unkown
|
page read and write
|
|
|
|
25C5000
|
unkown image
|
page readonly
|
|
|
|
79B3677000
|
stack
|
page read and write
|
|
|
|
1FF02790000
|
heap private
|
page read and write
|
|
|
|
240217F0000
|
unkown
|
page read and write
|
|
|
|
290EC6D0000
|
unkown image
|
page read and write
|
|
|
|
1B3BAAF0000
|
unkown
|
page read and write
|
|
|
|
25BB000
|
unkown image
|
page readonly
|
|
|
|
1F4EEB16000
|
unkown
|
page read and write
|
|
|
|
7FF58577D000
|
unkown image
|
page readonly
|
|
|
|
7FF5D29BC000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA4C000
|
unkown
|
page read and write
|
|
|
|
1F4EF86A000
|
unkown
|
page read and write
|
|
|
|
7FF56BA34000
|
unkown image
|
page readonly
|
|
|
|
2155A46D000
|
unkown
|
page read and write
|
|
|
|
1A34F813000
|
unkown
|
page read and write
|
|
|
|
1FF0284E000
|
unkown
|
page read and write
|
|
|
|
7FF5D28ED000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF12C000
|
unkown image
|
page readonly
|
|
|
|
7FF54FB54000
|
unkown image
|
page readonly
|
|
|
|
2910000
|
heap private
|
page read and write
|
|
|
|
2571000
|
unkown image
|
page readonly
|
|
|
|
7DF59B0B0000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2B33000
|
unkown image
|
page readonly
|
|
|
|
7FF5465B5000
|
unkown image
|
page readonly
|
|
|
|
2155A43C000
|
unkown
|
page read and write
|
|
|
|
7FF54643E000
|
unkown image
|
page readonly
|
|
|
|
93212FD000
|
stack
|
page read and write
|
|
|
|
7DF47F210000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE31A000
|
unkown image
|
page readonly
|
|
|
|
1F8229F7000
|
heap default
|
page read and write
|
|
|
|
7FF59085E000
|
unkown image
|
page readonly
|
|
|
|
4FCB87C000
|
stack
|
page read and write
|
|
|
|
B2A0DAB000
|
unkown
|
page read and write
|
|
|
|
63F1AFE000
|
stack
|
page read and write
|
|
|
|
6AC608C000
|
unkown
|
page read and write
|
|
|
|
2900000
|
heap default
|
page read and write
|
|
|
|
2E97000
|
heap private
|
page read and write
|
|
|
|
7DF5A6172000
|
unkown image
|
page readonly
|
|
|
|
7FF52B326000
|
unkown image
|
page readonly
|
|
|
|
F1B3F7C000
|
stack
|
page read and write
|
|
|
|
1E8D7D80000
|
unkown image
|
page read and write
|
|
|
|
240215D0000
|
unkown image
|
page readonly
|
|
|
|
F1B379E000
|
stack
|
page read and write
|
|
|
|
1B3BA9E6000
|
heap default
|
page read and write
|
|
|
|
7FF585566000
|
unkown image
|
page readonly
|
|
|
|
2983000
|
heap default
|
page read and write
|
|
|
|
23711260000
|
unkown
|
page read and write
|
|
|
|
4FCBA77000
|
stack
|
page read and write
|
|
|
|
2925000
|
unkown
|
page read and write
|
|
|
|
25F4000
|
unkown image
|
page readonly
|
|
|
|
7DF581350000
|
unkown image
|
page readonly
|
|
|
|
4680000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF159000
|
unkown image
|
page readonly
|
|
|
|
1F4EF384000
|
unkown
|
page read and write
|
|
|
|
2155A413000
|
unkown
|
page read and write
|
|
|
|
240215D0000
|
unkown image
|
page readonly
|
|
|
|
237114F3000
|
unkown
|
page read and write
|
|
|
|
1F822A0F000
|
unkown
|
page read and write
|
|
|
|
7FF5D2B55000
|
unkown image
|
page readonly
|
|
|
|
1F4EE970000
|
unkown image
|
page read and write
|
|
|
|
290EC802000
|
unkown
|
page read and write
|
|
|
|
7FF58579B000
|
unkown image
|
page readonly
|
|
|
|
24021846000
|
unkown
|
page read and write
|
|
|
|
7FF5DE2C7000
|
unkown image
|
page readonly
|
|
|
|
7FF59083B000
|
unkown image
|
page readonly
|
|
|
|
5BA0000
|
unkown image
|
page readonly
|
|
|
|
1F4EF379000
|
unkown
|
page read and write
|
|
|
|
7FF546528000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF16A000
|
unkown image
|
page readonly
|
|
|
|
1F4EF363000
|
unkown
|
page read and write
|
|
|
|
1F4EE9B0000
|
unkown image
|
page readonly
|
|
|
|
47BE000
|
stack
|
page read and write
|
|
|
|
290EC6E0000
|
heap private
|
page read and write
|
|
|
|
7FF56BA4F000
|
unkown image
|
page readonly
|
|
|
|
2370BBB0000
|
unkown image
|
page readonly
|
|
|
|
7FF54664F000
|
unkown image
|
page readonly
|
|
|
|
24021855000
|
unkown
|
page read and write
|
|
|
|
7FF585532000
|
unkown image
|
page readonly
|
|
|
|
2370CB01000
|
unkown
|
page read and write
|
|
|
|
24021900000
|
unkown
|
page read and write
|
|
|
|
2494000
|
unkown image
|
page readonly
|
|
|
|
1FF02780000
|
unkown image
|
page read and write
|
|
|
|
7DF55BF52000
|
unkown image
|
page readonly
|
|
|
|
7FF54FA63000
|
unkown image
|
page readonly
|
|
|
|
7FF56B993000
|
unkown image
|
page readonly
|
|
|
|
1F822A0F000
|
unkown
|
page read and write
|
|
|
|
1A34F858000
|
unkown
|
page read and write
|
|
|
|
2155A463000
|
unkown
|
page read and write
|
|
|
|
7FF53CB87000
|
unkown image
|
page readonly
|
|
|
|
7FF53CAE5000
|
unkown image
|
page readonly
|
|
|
|
1FF02F50000
|
unkown
|
page read and write
|
|
|
|
7FF59086F000
|
unkown image
|
page readonly
|
|
|
|
7FF5D2A3F000
|
unkown image
|
page readonly
|
|
|
|
79B357E000
|
stack
|
page read and write
|
|
|
|
7FF56B706000
|
unkown image
|
page readonly
|
|
|
|
7FF5CF117000
|
unkown image
|
page readonly
|
|
|
|
2370C513000
|
unkown
|
page read and write
|
|
|
|
7DF5E4B12000
|
unkown image
|
page readonly
|
|
|
|
7FF546403000
|
unkown image
|
page readonly
|
|
|
|
7FF52B34B000
|
unkown image
|
page readonly
|
|
|
|
1F822970000
|
unkown
|
page read and write
|
|
|
|
7DF55BF40000
|
unkown image
|
page readonly
|
|
|
|
7FF5D29A8000
|
unkown image
|
page readonly
|
|
|
|
7FF56B933000
|
unkown image
|
page readonly
|
|
|
|
7FF5D28E1000
|
unkown image
|
page readonly
|
|
|
|
7FF546373000
|
unkown image
|
page readonly
|
|
|
|
7DF450450000
|
unkown image
|
page readonly
|
|
|
|
63B000
|
unkown
|
page read and write
|
|
|
|
7FF58534F000
|
unkown image
|
page readonly
|
|
|
|
1E8D7DD0000
|
unkown image
|
page readonly
|
|
|
|
7FF4F1348000
|
unkown image
|
page readonly
|
|
|
|
1F4EEA70000
|
unkown
|
page read and write
|
|
|
|
7FF5D27BC000
|
unkown image
|
page readonly
|
|
|
|
1FF0288C000
|
unkown
|
page read and write
|
|
|
|
7FF53CC4F000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3CC2000
|
unkown image
|
page readonly
|
|
|
|
4FCB77E000
|
stack
|
page read and write
|
|
|
|
7FF5CF1D8000
|
unkown image
|
page readonly
|
|
|
|
2C8A000
|
heap default
|
page read and write
|
|
|
|
1FF02E60000
|
unkown image
|
page readonly
|
|
|
|
7DF43EB20000
|
unkown image
|
page readonly
|
|
|
|
1B3BB7A0000
|
unkown
|
page read and write
|
|
|
|
2928000
|
unkown
|
page read and write
|
|
|
|
7DF4F1B90000
|
unkown image
|
page readonly
|
|
|
|
23711390000
|
unkown
|
page read and write
|
|
|
|
7FF546119000
|
unkown image
|
page readonly
|
|
|
|
7DF5E4B20000
|
unkown image
|
page readonly
|
|
|
|
2914000
|
heap private
|
page read and write
|
|
|
|
7FF4F137E000
|
unkown image
|
page readonly
|
|
|
|
7FF53C759000
|
unkown image
|
page readonly
|
|
|
|
7FF5DE2D7000
|
unkown image
|
page readonly
|
|
|
|
7FF546371000
|
unkown image
|
page readonly
|
|
|
|
2370BC00000
|
unkown
|
page read and write
|
|
|
|
4FCB67B000
|
unkown
|
page read and write
|
|
|
|
2452000
|
unkown image
|
page readonly
|
|
|
|
237114E7000
|
unkown
|
page read and write
|
|
|
|
9E843FE000
|
stack
|
page read and write
|
|
|
|
86F2E7A000
|
stack
|
page read and write
|
|
|
|
3E0000
|
unkown image
|
page readonly
|
|
|
|
1F4EF34F000
|
unkown
|
page read and write
|
|
|
|
2BD9000
|
unkown
|
page read and write
|
|
|
|
7FF5DE39E000
|
unkown image
|
page readonly
|
|
|
|
7FAC2000
|
unkown image
|
page readonly
|
|
|
|
7DF5F3CD0000
|
unkown image
|
page readonly
|
|
|
|
1E8D7E29000
|
unkown
|
page read and write
|
|
|
|
2155A446000
|
unkown
|
page read and write
|
|
|
|
7FF5D2AB0000
|
unkown image
|
page readonly
|
|
|
|
7FF54655C000
|
unkown image
|
page readonly
|
|
|
|
7FF5463ED000
|
unkown image
|
page readonly
|
|
|
|
7FF5907D5000
|
unkown image
|
page readonly
|
|
There are 1418 hidden memdumps, click here to show them.