Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Refusal-1605078281-01212021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Refusal-1605078281-01212021.xlsm.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:53
2020, mtime=Fri Jan 22 18:18:58 2021, atime=Fri Jan 22 18:18:58 2021, length=25980, window=hide
|
dropped
|
||
C:\Users\user\Desktop\~$Refusal-1605078281-01212021.xlsm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\3004DB52-1097-432F-8F3D-E32CBC0917F7
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2B0F7EF2.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A76F8775.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\CCE31C44.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\95C10000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Fri Jan 22 18:18:58 2021, atime=Fri Jan 22 18:18:58 2021, length=12288, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Desktop\76C10000
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5D39844F.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AAFDA006.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BE8DDBD9.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\58DE0000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Refusal-1605078281-01212021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:13
2020, mtime=Fri Jan 22 18:13:40 2021, atime=Fri Jan 22 18:13:40 2021, length=26105, window=hide
|
dropped
|
||
C:\Users\user\Desktop\E8DE0000
|
data
|
dropped
|
There are 7 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\Flopers.GGRRDDFF,DllRegisterServer
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://wus2-000.contentsync.
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://wus2-000.pagecontentsync.
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://ncus-000.contentsync.
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://contentstorage.omex.office.net/addinclassifier/officeentities
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
https://directory.services.
|
unknown
|
||
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
leafybuy.com
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
~83
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
83
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1BE99
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C465
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C5FB
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C6A7
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
$'3
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
29D21
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
29E2B
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
k:8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED549
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED7C9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED8A3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED920
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
<!8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F5310
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F5496
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
There are 153 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
7FF5BF637000
|
unkown
|
page readonly
|
||
1F8A0310000
|
unkown
|
page read and write
|
||
7FF50C0FB000
|
unkown
|
page readonly
|
||
7FF5AE049000
|
unkown
|
page readonly
|
||
2C2457A000
|
unkown
|
page read and write
|
||
1CCD4EF0000
|
unkown
|
page read and write
|
||
1F89CD60000
|
heap default
|
page read and write
|
||
141CCD15000
|
unkown
|
page read and write
|
||
7FF50C271000
|
unkown
|
page readonly
|
||
1A3866A0000
|
heap private
|
page read and write
|
||
26794E3F000
|
unkown
|
page read and write
|
||
1CCD503D000
|
unkown
|
page read and write
|
||
1CCCF7E0000
|
unkown
|
page readonly
|
||
27139C44000
|
unkown
|
page read and write
|
||
21302A13000
|
unkown
|
page read and write
|
||
1A386EB0000
|
unkown
|
page readonly
|
||
1A3867F0000
|
unkown
|
page readonly
|
||
27139C3A000
|
unkown
|
page read and write
|
||
281A1602000
|
unkown
|
page read and write
|
||
7FF5C632E000
|
unkown
|
page readonly
|
||
7FF5E18FA000
|
unkown
|
page readonly
|
||
1CCD4E41000
|
unkown
|
page read and write
|
||
1CCD4F50000
|
unkown
|
page read and write
|
||
1F89F302000
|
unkown
|
page read and write
|
||
141CCB50000
|
unkown
|
page read and write
|
||
7FF5BF5CE000
|
unkown
|
page readonly
|
||
6330000
|
unkown
|
page read and write
|
||
13EE2002000
|
unkown
|
page read and write
|
||
7FF5454B9000
|
unkown
|
page readonly
|
||
1F89EF2B000
|
unkown
|
page read and write
|
||
7FF50C2AC000
|
unkown
|
page readonly
|
||
7FF4EF66E000
|
unkown
|
page readonly
|
||
60E887C000
|
unkown
|
page read and write
|
||
7FF56E03E000
|
unkown
|
page readonly
|
||
1F89F302000
|
unkown
|
page read and write
|
||
7FF533405000
|
unkown
|
page readonly
|
||
2741DC2A000
|
unkown
|
page read and write
|
||
2C244F9000
|
unkown
|
page read and write
|
||
5D80000
|
unkown
|
page readonly
|
||
1CCCF874000
|
unkown
|
page read and write
|
||
2741DB90000
|
heap private
|
page read and write
|
||
7FF5E2DD6000
|
unkown
|
page readonly
|
||
7FF54E04A000
|
unkown
|
page readonly
|
||
1672D2BF000
|
unkown
|
page read and write
|
||
7FF5A404C000
|
unkown
|
page readonly
|
||
7FF57E0E1000
|
unkown
|
page readonly
|
||
7FF5C62AA000
|
unkown
|
page readonly
|
||
7FF57E086000
|
unkown
|
page readonly
|
||
7FF5E2C3A000
|
unkown
|
page readonly
|
||
1CCD4CD0000
|
unkown
|
page readonly
|
||
26B0000
|
unkown
|
page readonly
|
||
24C3000
|
unkown
|
page readonly
|
||
CE137FF000
|
unkown
|
page read and write
|
||
1F89F300000
|
unkown
|
page read and write
|
||
56690FF000
|
unkown
|
page read and write
|
||
7FF5B2ED9000
|
unkown
|
page readonly
|
||
2616000
|
unkown
|
page readonly
|
||
7FF50C24C000
|
unkown
|
page readonly
|
||
7FF5A3CCA000
|
unkown
|
page readonly
|
||
7FF5336D7000
|
unkown
|
page readonly
|
||
1F8A0410000
|
unkown
|
page read and write
|
||
7FF5E18AC000
|
unkown
|
page readonly
|
||
27139C31000
|
unkown
|
page read and write
|
||
1F89CD70000
|
unkown
|
page write copy
|
||
7FF54E0AA000
|
unkown
|
page readonly
|
||
7FF5E2CA1000
|
unkown
|
page readonly
|
||
1672D2F0000
|
unkown
|
page read and write
|
||
7FF533615000
|
unkown
|
page readonly
|
||
60E847E000
|
unkown
|
page read and write
|
||
2EA715D0000
|
unkown
|
page read and write
|
||
20783FA000
|
unkown
|
page read and write
|
||
7FF533105000
|
unkown
|
page readonly
|
||
1A204F20000
|
unkown
|
page readonly
|
||
1CCD4EF4000
|
unkown
|
page readonly
|
||
7FF539261000
|
unkown
|
page readonly
|
||
2C25000
|
unkown
|
page read and write
|
||
36182FE000
|
unkown
|
page read and write
|
||
7FF5390FC000
|
unkown
|
page readonly
|
||
29E0000
|
heap private
|
page read and write
|
||
21302900000
|
heap default
|
page read and write
|
||
7FF5B2DFA000
|
unkown
|
page readonly
|
||
29E7000
|
heap private
|
page read and write
|
||
1F89CF35000
|
unkown
|
page read and write
|
||
7FF50C365000
|
unkown
|
page readonly
|
||
7FF5A4170000
|
unkown
|
page readonly
|
||
7FF533055000
|
unkown
|
page readonly
|
||
7FF54E127000
|
unkown
|
page readonly
|
||
7FF5C636C000
|
unkown
|
page readonly
|
||
27139C64000
|
unkown
|
page read and write
|
||
7FF533699000
|
unkown
|
page readonly
|
||
7FF5E2D76000
|
unkown
|
page readonly
|
||
21302B02000
|
unkown
|
page read and write
|
||
27139C5C000
|
unkown
|
page read and write
|
||
20782FE000
|
unkown
|
page read and write
|
||
1A205055000
|
unkown
|
page read and write
|
||
281A0E02000
|
unkown
|
page read and write
|
||
7FF539037000
|
unkown
|
page readonly
|
||
1E1D61E0000
|
unkown
|
page read and write
|
||
2A784FA000
|
unkown
|
page read and write
|
||
7FF57DEB8000
|
unkown
|
page readonly
|
||
1A386856000
|
unkown
|
page read and write
|
||
21302A02000
|
unkown
|
page read and write
|
||
7FF5A4115000
|
unkown
|
page readonly
|
||
13EE2690000
|
unkown
|
page readonly
|
||
7FF578375000
|
unkown
|
page readonly
|
||
141CAC83000
|
unkown
|
page read and write
|
||
2C2D000
|
unkown
|
page read and write
|
||
2614000
|
unkown
|
page readonly
|
||
141CCAD0000
|
unkown
|
page read and write
|
||
1F89CF76000
|
unkown
|
page read and write
|
||
26794E02000
|
unkown
|
page read and write
|
||
7FF5E2C2A000
|
unkown
|
page readonly
|
||
7FF545569000
|
unkown
|
page readonly
|
||
7FF50C2E8000
|
unkown
|
page readonly
|
||
7FF5A4174000
|
unkown
|
page readonly
|
||
1CCD52A0000
|
unkown
|
page readonly
|
||
7FF56E049000
|
unkown
|
page readonly
|
||
1CCD0100000
|
unkown
|
page read and write
|
||
7FF5C6127000
|
unkown
|
page readonly
|
||
21303400000
|
unkown
|
page readonly
|
||
E033C79000
|
unkown
|
page read and write
|
||
7FF5BECF9000
|
unkown
|
page readonly
|
||
141CAC88000
|
unkown
|
page read and write
|
||
7FF57DFEC000
|
unkown
|
page readonly
|
||
2650000
|
unkown
|
page readonly
|
||
E1C88FE000
|
unkown
|
page read and write
|
||
1672D310000
|
unkown
|
page readonly
|
||
260B000
|
unkown
|
page readonly
|
||
7FF4EF5E6000
|
unkown
|
page readonly
|
||
1CCD4D00000
|
unkown
|
page read and write
|
||
7FF54DE03000
|
unkown
|
page readonly
|
||
42D4FFF000
|
unkown
|
page read and write
|
||
7FF50C287000
|
unkown
|
page readonly
|
||
27139C45000
|
unkown
|
page read and write
|
||
7FF5E2DAF000
|
unkown
|
page readonly
|
||
281A0E2A000
|
unkown
|
page read and write
|
||
7FF5E2970000
|
unkown
|
page readonly
|
||
1A386A00000
|
unkown
|
page readonly
|
||
1F89CF45000
|
unkown
|
page read and write
|
||
2741E0D0000
|
unkown
|
page readonly
|
||
7FF5B2BFA000
|
unkown
|
page readonly
|
||
7FF578317000
|
unkown
|
page readonly
|
||
7FF57DE27000
|
unkown
|
page readonly
|
||
21D33C02000
|
unkown
|
page read and write
|
||
7FF5C6394000
|
unkown
|
page readonly
|
||
7FF5BF5A8000
|
unkown
|
page readonly
|
||
7FF533855000
|
unkown
|
page readonly
|
||
7FF57E0DD000
|
unkown
|
page readonly
|
||
56691FF000
|
unkown
|
page read and write
|
||
2741DED0000
|
unkown
|
page readonly
|
||
7FF54E0DF000
|
unkown
|
page readonly
|
||
1F8A0310000
|
unkown
|
page read and write
|
||
21302A4E000
|
unkown
|
page read and write
|
||
1E1D4A00000
|
unkown
|
page readonly
|
||
7FF539033000
|
unkown
|
page readonly
|
||
7FF5E2CDC000
|
unkown
|
page readonly
|
||
1F89CEE0000
|
unkown
|
page read and write
|
||
1F89ECC0000
|
unkown
|
page read and write
|
||
CC5C47E000
|
unkown
|
page read and write
|
||
281A0E00000
|
unkown
|
page read and write
|
||
1E1D47A0000
|
unkown
|
page readonly
|
||
2A7867D000
|
unkown
|
page read and write
|
||
7FF54549E000
|
unkown
|
page readonly
|
||
7FF5E2DDC000
|
unkown
|
page readonly
|
||
7FF545462000
|
unkown
|
page readonly
|
||
7FF5ADEBC000
|
unkown
|
page readonly
|
||
7FF57DF38000
|
unkown
|
page readonly
|
||
7FF4EF58A000
|
unkown
|
page readonly
|
||
7FF5ADC1F000
|
unkown
|
page readonly
|
||
7FF4EF5B5000
|
unkown
|
page readonly
|
||
1F8A0610000
|
unkown
|
page read and write
|
||
E1C89FE000
|
unkown
|
page read and write
|
||
7FF50C1E7000
|
unkown
|
page readonly
|
||
7FF533585000
|
unkown
|
page readonly
|
||
27139C13000
|
unkown
|
page read and write
|
||
1672D236000
|
unkown
|
page read and write
|
||
21D33A20000
|
unkown
|
page readonly
|
||
7FF5E24DF000
|
unkown
|
page readonly
|
||
27139C2A000
|
unkown
|
page read and write
|
||
21D33D02000
|
unkown
|
page read and write
|
||
1F8A0710000
|
unkown
|
page read and write
|
||
7FF545504000
|
unkown
|
page readonly
|
||
7FF5E1956000
|
unkown
|
page readonly
|
||
7FF5ADFE7000
|
unkown
|
page readonly
|
||
7FF5ADF52000
|
unkown
|
page readonly
|
||
7FF5E2D72000
|
unkown
|
page readonly
|
||
7FF5BF41F000
|
unkown
|
page readonly
|
||
22D4000
|
unkown
|
page readonly
|
||
1F89F012000
|
unkown
|
page read and write
|
||
7FF568C1C000
|
unkown
|
page readonly
|
||
1F89E970000
|
unkown
|
page readonly
|
||
7FF5337B4000
|
unkown
|
page readonly
|
||
1F8A0710000
|
unkown
|
page read and write
|
||
7FF50C140000
|
unkown
|
page readonly
|
||
2C2447E000
|
unkown
|
page read and write
|
||
7FF53926A000
|
unkown
|
page readonly
|
||
1F8A0110000
|
unkown
|
page read and write
|
||
1CCCF8F9000
|
unkown
|
page read and write
|
||
7FF57DDFC000
|
unkown
|
page readonly
|
||
7FF50C034000
|
unkown
|
page readonly
|
||
141CAB20000
|
heap private
|
page read and write
|
||
7FF4EF335000
|
unkown
|
page readonly
|
||
281A1460000
|
unkown
|
page read and write
|
||
27139C61000
|
unkown
|
page read and write
|
||
1E1D4913000
|
unkown
|
page read and write
|
||
1F89F0CB000
|
unkown
|
page read and write
|
||
CC5C57D000
|
unkown
|
page read and write
|
||
1F89EF1A000
|
unkown
|
page read and write
|
||
1CCCF855000
|
unkown
|
page read and write
|
||
7FF57E070000
|
unkown
|
page readonly
|
||
1F89EF54000
|
unkown
|
page read and write
|
||
1F89EFFF000
|
unkown
|
page read and write
|
||
7FF5C61CA000
|
unkown
|
page readonly
|
||
1CCCF7F0000
|
unkown
|
page read and write
|
||
1CCD501F000
|
unkown
|
page read and write
|
||
7FF5B2E70000
|
unkown
|
page readonly
|
||
7FF578501000
|
unkown
|
page readonly
|
||
2C23F9B000
|
unkown
|
page read and write
|
||
5668AF7000
|
unkown
|
page read and write
|
||
7FF57E057000
|
unkown
|
page readonly
|
||
7FF4EF527000
|
unkown
|
page readonly
|
||
7FF5E2DB9000
|
unkown
|
page readonly
|
||
27139C79000
|
unkown
|
page read and write
|
||
1F89F242000
|
unkown
|
page read and write
|
||
27139C6C000
|
unkown
|
page read and write
|
||
207827F000
|
unkown
|
page read and write
|
||
2606000
|
unkown
|
page readonly
|
||
7FF57DF1E000
|
unkown
|
page readonly
|
||
7FF5A3CD0000
|
unkown
|
page readonly
|
||
7FF5ADFD5000
|
unkown
|
page readonly
|
||
7FF5B2E77000
|
unkown
|
page readonly
|
||
7FF50C13E000
|
unkown
|
page readonly
|
||
7FF54542B000
|
unkown
|
page readonly
|
||
1F89F202000
|
unkown
|
page read and write
|
||
7FF5E1887000
|
unkown
|
page readonly
|
||
26C4000
|
unkown
|
page readonly
|
||
2741DCBC000
|
unkown
|
page read and write
|
||
60E837F000
|
unkown
|
page read and write
|
||
7DE89BF000
|
unkown
|
page read and write
|
||
1672D29F000
|
unkown
|
page read and write
|
||
7FF50C12A000
|
unkown
|
page readonly
|
||
7FF577CA8000
|
unkown
|
page readonly
|
||
1672D490000
|
unkown
|
page read and write
|
||
7FF57E047000
|
unkown
|
page readonly
|
||
1F89CE55000
|
unkown
|
page read and write
|
||
7FF50C341000
|
unkown
|
page readonly
|
||
7FF57DF40000
|
unkown
|
page readonly
|
||
1F8A1010000
|
unkown
|
page read and write
|
||
1A387002000
|
unkown
|
page read and write
|
||
7FF5E1970000
|
unkown
|
page readonly
|
||
7FF5BF3FE000
|
unkown
|
page readonly
|
||
1F89D0D0000
|
unkown
|
page readonly
|
||
20788FB000
|
unkown
|
page read and write
|
||
7FF5E172A000
|
unkown
|
page readonly
|
||
1F8A0710000
|
unkown
|
page read and write
|
||
7FF50C2E2000
|
unkown
|
page readonly
|
||
2C37000
|
unkown
|
page read and write
|
||
7FF5E2E04000
|
unkown
|
page readonly
|
||
1E1D61A0000
|
unkown
|
page read and write
|
||
1672D480000
|
heap private
|
page read and write
|
||
1B3646A0000
|
unkown
|
page readonly
|
||
1F8A0210000
|
unkown
|
page read and write
|
||
2078D7D000
|
unkown
|
page read and write
|
||
1A206A00000
|
unkown
|
page read and write
|
||
7FF4EF5EC000
|
unkown
|
page readonly
|
||
7FF57847C000
|
unkown
|
page readonly
|
||
E1C83DE000
|
unkown
|
page read and write
|
||
1A3867E0000
|
unkown
|
page readonly
|
||
7FF5BF5D5000
|
unkown
|
page readonly
|
||
27139C3D000
|
unkown
|
page read and write
|
||
5F30000
|
unkown
|
page readonly
|
||
7FF5E101F000
|
unkown
|
page readonly
|
||
141CAE00000
|
unkown
|
page readonly
|
||
7FF5B2533000
|
unkown
|
page readonly
|
||
7FF539090000
|
unkown
|
page readonly
|
||
7FF57DE40000
|
unkown
|
page readonly
|
||
7FF5ADF85000
|
unkown
|
page readonly
|
||
7FF532FAC000
|
unkown
|
page readonly
|
||
7FF539024000
|
unkown
|
page readonly
|
||
25D9000
|
unkown
|
page readonly
|
||
7FF5BF699000
|
unkown
|
page readonly
|
||
7FF5A4165000
|
unkown
|
page readonly
|
||
7FF5E190E000
|
unkown
|
page readonly
|
||
7FF50C2E6000
|
unkown
|
page readonly
|
||
2741DE00000
|
unkown
|
page readonly
|
||
21D33C13000
|
unkown
|
page read and write
|
||
7FF50C356000
|
unkown
|
page readonly
|
||
7FF57DD7D000
|
unkown
|
page readonly
|
||
44DE000
|
unkown
|
page read and write
|
||
26B6000
|
unkown
|
page readonly
|
||
141CCB50000
|
unkown
|
page read and write
|
||
7DE8CF9000
|
unkown
|
page read and write
|
||
1A38683C000
|
unkown
|
page read and write
|
||
CC5C2FE000
|
unkown
|
page read and write
|
||
1F89F183000
|
unkown
|
page read and write
|
||
141CAD02000
|
unkown
|
page read and write
|
||
7FF5BF347000
|
unkown
|
page readonly
|
||
13EE204C000
|
unkown
|
page read and write
|
||
1CCCF887000
|
unkown
|
page read and write
|
||
2A780FB000
|
unkown
|
page read and write
|
||
7FF5C6160000
|
unkown
|
page readonly
|
||
1CCCF8AA000
|
unkown
|
page read and write
|
||
26794F02000
|
unkown
|
page read and write
|
||
27139C49000
|
unkown
|
page read and write
|
||
1F89CF34000
|
unkown
|
page read and write
|
||
27139AB0000
|
unkown
|
page readonly
|
||
1CCD0159000
|
unkown
|
page read and write
|
||
7FF5BF360000
|
unkown
|
page readonly
|
||
27139C5F000
|
unkown
|
page read and write
|
||
7FF5ADEC7000
|
unkown
|
page readonly
|
||
7FF50C10C000
|
unkown
|
page readonly
|
||
281A0D40000
|
unkown
|
page readonly
|
||
13EE208D000
|
unkown
|
page read and write
|
||
7FF5E18EA000
|
unkown
|
page readonly
|
||
21D33B40000
|
unkown
|
page readonly
|
||
21D339B0000
|
heap private
|
page read and write
|
||
A8EC17B000
|
unkown
|
page read and write
|
||
1CCD5260000
|
unkown
|
page readonly
|
||
1A205200000
|
unkown
|
page write copy
|
||
141CAC79000
|
unkown
|
page read and write
|
||
1F89CDE0000
|
unkown
|
page readonly
|
||
7FF539305000
|
unkown
|
page readonly
|
||
7FF577C97000
|
unkown
|
page readonly
|
||
7FF54E0D5000
|
unkown
|
page readonly
|
||
2C25000
|
unkown
|
page read and write
|
||
1CCD4F70000
|
unkown
|
page read and write
|
||
1F89CF55000
|
unkown
|
page read and write
|
||
7FF5ADDE8000
|
unkown
|
page readonly
|
||
1E1D46C0000
|
unkown
|
page readonly
|
||
7FF50C1E3000
|
unkown
|
page readonly
|
||
2622000
|
unkown
|
page readonly
|
||
141CAD14000
|
unkown
|
page read and write
|
||
CE132FE000
|
unkown
|
page read and write
|
||
7DE8C7A000
|
unkown
|
page read and write
|
||
1672D23E000
|
unkown
|
page read and write
|
||
7FF56DFBC000
|
unkown
|
page readonly
|
||
207907C000
|
unkown
|
page read and write
|
||
7FF5ADF4D000
|
unkown
|
page readonly
|
||
1F8A0310000
|
unkown
|
page read and write
|
||
1CCD4E64000
|
unkown
|
page read and write
|
||
7FF5BF5FD000
|
unkown
|
page readonly
|
||
C703FB000
|
unkown
|
page read and write
|
||
1F89ED30000
|
unkown
|
page read and write
|
||
7FF53380F000
|
unkown
|
page readonly
|
||
7FF577CAD000
|
unkown
|
page readonly
|
||
1CCD0000000
|
unkown
|
page read and write
|
||
1672DFF0000
|
unkown
|
page read and write
|
||
2EA71E02000
|
unkown
|
page read and write
|
||
7FF53914F000
|
unkown
|
page readonly
|
||
7FF5ADC7E000
|
unkown
|
page readonly
|
||
1F89CE97000
|
unkown
|
page read and write
|
||
60E867C000
|
unkown
|
page read and write
|
||
1CCD4E28000
|
unkown
|
page read and write
|
||
7FF5E19D9000
|
unkown
|
page readonly
|
||
7FF5A384F000
|
unkown
|
page readonly
|
||
1672D288000
|
unkown
|
page read and write
|
||
1CCD0102000
|
unkown
|
page read and write
|
||
7FF5BF458000
|
unkown
|
page readonly
|
||
1FCD27D000
|
unkown
|
page read and write
|
||
1E1D4857000
|
unkown
|
page read and write
|
||
7FF4EF5BF000
|
unkown
|
page readonly
|
||
1CCCFF30000
|
unkown
|
page read and write
|
||
7FF5E2BEF000
|
unkown
|
page readonly
|
||
1E1D4650000
|
heap private
|
page read and write
|
||
21302F90000
|
unkown
|
page readonly
|
||
1F89CEDA000
|
unkown
|
page read and write
|
||
F4240FE000
|
unkown
|
page read and write
|
||
1F89CE91000
|
unkown
|
page read and write
|
||
566907E000
|
unkown
|
page read and write
|
||
7FF539077000
|
unkown
|
page readonly
|
||
7FF57E011000
|
unkown
|
page readonly
|
||
1F89CF02000
|
unkown
|
page read and write
|
||
7FF54E0FD000
|
unkown
|
page readonly
|
||
7FF533805000
|
unkown
|
page readonly
|
||
7FF5B2ED1000
|
unkown
|
page readonly
|
||
25E1000
|
unkown
|
page readonly
|
||
7FF56DF58000
|
unkown
|
page readonly
|
||
207887B000
|
unkown
|
page read and write
|
||
7FF57E16E000
|
unkown
|
page readonly
|
||
CC5C07F000
|
unkown
|
page read and write
|
||
7FF4EF2E3000
|
unkown
|
page readonly
|
||
7FF539108000
|
unkown
|
page readonly
|
||
2EA71628000
|
unkown
|
page read and write
|
||
1672D2AE000
|
unkown
|
page read and write
|
||
141CCB50000
|
unkown
|
page read and write
|
||
7FF5ADE6C000
|
unkown
|
page readonly
|
||
281A0BF0000
|
heap private
|
page read and write
|
||
7FF5454F5000
|
unkown
|
page readonly
|
||
7FF578509000
|
unkown
|
page readonly
|
||
7FF57E072000
|
unkown
|
page readonly
|
||
7FF50C087000
|
unkown
|
page readonly
|
||
207847F000
|
unkown
|
page read and write
|
||
7FF5B2E29000
|
unkown
|
page readonly
|
||
7FF539319000
|
unkown
|
page readonly
|
||
7FF57DD8F000
|
unkown
|
page readonly
|
||
1F89CED9000
|
unkown
|
page read and write
|
||
5668FFE000
|
unkown
|
page read and write
|
||
1672D489000
|
heap private
|
page read and write
|
||
2632000
|
unkown
|
page readonly
|
||
7FF5A415C000
|
unkown
|
page readonly
|
||
1672DA30000
|
unkown
|
page readonly
|
||
7FF5E1929000
|
unkown
|
page readonly
|
||
1A386710000
|
unkown
|
page readonly
|
||
1672D249000
|
unkown
|
page read and write
|
||
7FF53382D000
|
unkown
|
page readonly
|
||
281A0D30000
|
unkown
|
page readonly
|
||
1E1D4864000
|
unkown
|
page read and write
|
||
1CCD50B7000
|
unkown
|
page read and write
|
||
7FF5C6385000
|
unkown
|
page readonly
|
||
2EA71677000
|
unkown
|
page read and write
|
||
7FF56DFAE000
|
unkown
|
page readonly
|
||
2610000
|
unkown
|
page readonly
|
||
7FF5ADFAD000
|
unkown
|
page readonly
|
||
7FF5C62A7000
|
unkown
|
page readonly
|
||
1CCCF82A000
|
unkown
|
page read and write
|
||
2741E350000
|
unkown
|
page read and write
|
||
CE131FE000
|
unkown
|
page read and write
|
||
7FF50C2AA000
|
unkown
|
page readonly
|
||
7FF539364000
|
unkown
|
page readonly
|
||
1A205000000
|
unkown
|
page read and write
|
||
7FF5E1915000
|
unkown
|
page readonly
|
||
7FF53933C000
|
unkown
|
page readonly
|
||
2C31000
|
unkown
|
page read and write
|
||
1A386850000
|
unkown
|
page read and write
|
||
7FF50C370000
|
unkown
|
page readonly
|
||
1A20503F000
|
unkown
|
page read and write
|
||
7FF54DE60000
|
unkown
|
page readonly
|
||
1F8A0010000
|
unkown
|
page read and write
|
||
1CCD4F40000
|
unkown
|
page read and write
|
||
26794CE0000
|
heap default
|
page read and write
|
||
20787FB000
|
unkown
|
page read and write
|
||
1CCCF871000
|
unkown
|
page read and write
|
||
7FF5E1974000
|
unkown
|
page readonly
|
||
29EA000
|
heap private
|
page read and write
|
||
7FF545478000
|
unkown
|
page readonly
|
||
1CCD4FD0000
|
unkown
|
page readonly
|
||
7FF5B2E46000
|
unkown
|
page readonly
|
||
7FF5454EC000
|
unkown
|
page readonly
|
||
7FF538B35000
|
unkown
|
page readonly
|
||
1F89EFFA000
|
unkown
|
page read and write
|
||
7FF5B2E15000
|
unkown
|
page readonly
|
||
281A0D80000
|
unkown
|
page read and write
|
||
3618175000
|
unkown
|
page read and write
|
||
7FF53346D000
|
unkown
|
page readonly
|
||
27139C58000
|
unkown
|
page read and write
|
||
7FF57DD8C000
|
unkown
|
page readonly
|
||
1F89CEA2000
|
unkown
|
page read and write
|
||
1CCD505F000
|
unkown
|
page read and write
|
||
1E1D4800000
|
unkown
|
page read and write
|
||
7FF57E05C000
|
unkown
|
page readonly
|
||
1E1D483D000
|
unkown
|
page read and write
|
||
141CACA4000
|
unkown
|
page read and write
|
||
7FF5392FE000
|
unkown
|
page readonly
|
||
7FF5454D1000
|
unkown
|
page readonly
|
||
7FF50C291000
|
unkown
|
page readonly
|
||
7FF57E082000
|
unkown
|
page readonly
|
||
7FF57DEAC000
|
unkown
|
page readonly
|
||
141CCE00000
|
unkown
|
page readonly
|
||
2078BFB000
|
unkown
|
page read and write
|
||
141CAED0000
|
unkown
|
page readonly
|
||
1F89EF15000
|
unkown
|
page read and write
|
||
7FF54E191000
|
unkown
|
page readonly
|
||
2A7817E000
|
unkown
|
page read and write
|
||
1A386800000
|
unkown
|
page read and write
|
||
1CCD0900000
|
unkown
|
page readonly
|
||
1672D2D6000
|
unkown
|
page read and write
|
||
1A204FF0000
|
unkown
|
page readonly
|
||
27139C59000
|
unkown
|
page read and write
|
||
1F89CE86000
|
unkown
|
page read and write
|
||
27139C00000
|
unkown
|
page read and write
|
||
234A000
|
unkown
|
page readonly
|
||
A8ECBFF000
|
unkown
|
page read and write
|
||
141CAC3F000
|
unkown
|
page read and write
|
||
7FF5A3F9A000
|
unkown
|
page readonly
|
||
1CCD0118000
|
unkown
|
page read and write
|
||
7FF50C2D0000
|
unkown
|
page readonly
|
||
7FF5337D6000
|
unkown
|
page readonly
|
||
7FF50C30E000
|
unkown
|
page readonly
|
||
CE134FB000
|
unkown
|
page read and write
|
||
1672E050000
|
unkown
|
page read and write
|
||
13EE202A000
|
unkown
|
page read and write
|
||
7FF57E179000
|
unkown
|
page readonly
|
||
281A0D80000
|
unkown
|
page read and write
|
||
27139B80000
|
unkown
|
page readonly
|
||
7FF5ADD74000
|
unkown
|
page readonly
|
||
7FF50C2C8000
|
unkown
|
page readonly
|
||
2741DD13000
|
unkown
|
page read and write
|
||
2EA71679000
|
unkown
|
page read and write
|
||
2741E390000
|
unkown
|
page write copy
|
||
1E1D4902000
|
unkown
|
page read and write
|
||
2EA71B90000
|
unkown
|
page readonly
|
||
1672D0A0000
|
unkown
|
page read and write
|
||
7FF50BA1F000
|
unkown
|
page readonly
|
||
7FF50C047000
|
unkown
|
page readonly
|
||
7FF4EF52A000
|
unkown
|
page readonly
|
||
7DE893F000
|
unkown
|
page read and write
|
||
7FF5E1643000
|
unkown
|
page readonly
|
||
1CCCF86C000
|
unkown
|
page read and write
|
||
141CACD9000
|
unkown
|
page read and write
|
||
27139C41000
|
unkown
|
page read and write
|
||
2C2D000
|
unkown
|
page read and write
|
||
7FF5AE040000
|
unkown
|
page readonly
|
||
7FF57E117000
|
unkown
|
page readonly
|
||
2505000
|
unkown
|
page readonly
|
||
2741DCE5000
|
unkown
|
page read and write
|
||
42D4A8A000
|
unkown
|
page read and write
|
||
7FF4EF54A000
|
unkown
|
page readonly
|
||
7FF57E068000
|
unkown
|
page readonly
|
||
7FF5E2DF5000
|
unkown
|
page readonly
|
||
1A205013000
|
unkown
|
page read and write
|
||
5E50000
|
unkown
|
page readonly
|
||
7FF56DED5000
|
unkown
|
page readonly
|
||
2741E340000
|
unkown
|
page readonly
|
||
27139C3A000
|
unkown
|
page read and write
|
||
21D33C57000
|
unkown
|
page read and write
|
||
7FF54555E000
|
unkown
|
page readonly
|
||
7FF54DFA7000
|
unkown
|
page readonly
|
||
F423A8B000
|
unkown
|
page read and write
|
||
7FF4EF679000
|
unkown
|
page readonly
|
||
80A000
|
unkown
|
page read and write
|
||
7FF5ADF38000
|
unkown
|
page readonly
|
||
1F89CE00000
|
unkown
|
page read and write
|
||
1F89CF36000
|
unkown
|
page read and write
|
||
7FF5E19CE000
|
unkown
|
page readonly
|
||
1F89EF7F000
|
unkown
|
page read and write
|
||
7FF5E2960000
|
unkown
|
page readonly
|
||
7FF5E2E07000
|
unkown
|
page readonly
|
||
7FF5ADF1A000
|
unkown
|
page readonly
|
||
2C24379000
|
unkown
|
page read and write
|
||
7FF57843E000
|
unkown
|
page readonly
|
||
1CCCF902000
|
unkown
|
page read and write
|
||
13EE1E80000
|
heap private
|
page read and write
|
||
141CAB90000
|
unkown
|
page write copy
|
||
7FF5E1977000
|
unkown
|
page readonly
|
||
1F89EF9F000
|
unkown
|
page read and write
|
||
1E1D4848000
|
unkown
|
page read and write
|
||
7FF57DE2E000
|
unkown
|
page readonly
|
||
7FF57E114000
|
unkown
|
page readonly
|
||
1CCD0118000
|
unkown
|
page read and write
|
||
7DE8DFF000
|
unkown
|
page read and write
|
||
7FF57E09A000
|
unkown
|
page readonly
|
||
7FF5AE03E000
|
unkown
|
page readonly
|
||
25F2000
|
unkown
|
page readonly
|
||
7FF57E170000
|
unkown
|
page readonly
|
||
1FCD5F7000
|
unkown
|
page read and write
|
||
7FF539331000
|
unkown
|
page readonly
|
||
1F89F053000
|
unkown
|
page read and write
|
||
7FF54E10C000
|
unkown
|
page readonly
|
||
7FF5391D3000
|
unkown
|
page readonly
|
||
7FF56DF85000
|
unkown
|
page readonly
|
||
2EA71657000
|
unkown
|
page read and write
|
||
7FF57D85C000
|
unkown
|
page readonly
|
||
7FF53911A000
|
unkown
|
page readonly
|
||
7FF5ADF6A000
|
unkown
|
page readonly
|
||
27139C2F000
|
unkown
|
page read and write
|
||
1F89CF77000
|
unkown
|
page read and write
|
||
566917F000
|
unkown
|
page read and write
|
||
21302A76000
|
unkown
|
page read and write
|
||
7FF53912E000
|
unkown
|
page readonly
|
||
7FF5E19D9000
|
unkown
|
page readonly
|
||
13EE2100000
|
unkown
|
page read and write
|
||
27139C57000
|
unkown
|
page read and write
|
||
1FCCF5B000
|
unkown
|
page read and write
|
||
7FF5C5F33000
|
unkown
|
page readonly
|
||
21D356A0000
|
unkown
|
page readonly
|
||
2EA71600000
|
unkown
|
page read and write
|
||
13EE2802000
|
unkown
|
page read and write
|
||
7FF5E2DE6000
|
unkown
|
page readonly
|
||
A8EC3FF000
|
unkown
|
page read and write
|
||
7FF5BF56A000
|
unkown
|
page readonly
|
||
1F89CD00000
|
heap private
|
page read and write
|
||
7FF4EF2E7000
|
unkown
|
page readonly
|
||
7FF57848C000
|
unkown
|
page readonly
|
||
7FF4EF5FC000
|
unkown
|
page readonly
|
||
2078AFB000
|
unkown
|
page read and write
|
||
3617D6B000
|
unkown
|
page read and write
|
||
7FF53923C000
|
unkown
|
page readonly
|
||
7FF545437000
|
unkown
|
page readonly
|
||
1672D100000
|
unkown
|
page readonly
|
||
7FF5454A5000
|
unkown
|
page readonly
|
||
26794F13000
|
unkown
|
page read and write
|
||
7FF54E11C000
|
unkown
|
page readonly
|
||
141CCD00000
|
unkown
|
page read and write
|
||
7FF5BF355000
|
unkown
|
page readonly
|
||
1CCD5093000
|
unkown
|
page read and write
|
||
27139C63000
|
unkown
|
page read and write
|
||
7FF5A40FA000
|
unkown
|
page readonly
|
||
7FF5BF5DF000
|
unkown
|
page readonly
|
||
1CCCF760000
|
heap private
|
page read and write
|
||
7FF57E0AE000
|
unkown
|
page readonly
|
||
26794C80000
|
heap private
|
page read and write
|
||
7FF5C6302000
|
unkown
|
page readonly
|
||
281A0D80000
|
unkown
|
page read and write
|
||
7FF578459000
|
unkown
|
page readonly
|
||
2C24679000
|
unkown
|
page read and write
|
||
7FF5335F3000
|
unkown
|
page readonly
|
||
26794E00000
|
unkown
|
page read and write
|
||
7FF5ADF40000
|
unkown
|
page readonly
|
||
1F89F084000
|
unkown
|
page read and write
|
||
266A000
|
unkown
|
page readonly
|
||
7FF5B2E0E000
|
unkown
|
page readonly
|
||
7FF54E0A2000
|
unkown
|
page readonly
|
||
A8EC4FF000
|
unkown
|
page read and write
|
||
7FF5B2ED9000
|
unkown
|
page readonly
|
||
21302A3D000
|
unkown
|
page read and write
|
||
7FF57E027000
|
unkown
|
page readonly
|
||
7FF57E179000
|
unkown
|
page readonly
|
||
7FF5BF1D3000
|
unkown
|
page readonly
|
||
13EE2070000
|
unkown
|
page read and write
|
||
5F2F000
|
stack
|
page read and write
|
||
7FF57DEDE000
|
unkown
|
page readonly
|
||
7FF5B2ECE000
|
unkown
|
page readonly
|
||
7FF5C63F9000
|
unkown
|
page readonly
|
||
25CE000
|
unkown
|
page readonly
|
||
13EE2200000
|
unkown
|
page readonly
|
||
7FF5C62F0000
|
unkown
|
page readonly
|
||
7FF5393C9000
|
unkown
|
page readonly
|
||
1E1D61E0000
|
unkown
|
page read and write
|
||
7FF57DCF0000
|
unkown
|
page readonly
|
||
281A0E13000
|
unkown
|
page read and write
|
||
13EE2A00000
|
unkown
|
page readonly
|
||
7FF5337B8000
|
unkown
|
page readonly
|
||
281A0D50000
|
unkown
|
page read and write
|
||
7FF4EF614000
|
unkown
|
page readonly
|
||
7FF539235000
|
unkown
|
page readonly
|
||
5EE3000
|
heap private
|
page read and write
|
||
1E1D482A000
|
unkown
|
page read and write
|
||
1F89F000000
|
unkown
|
page read and write
|
||
1CCD5200000
|
unkown
|
page readonly
|
||
1CCD4E40000
|
unkown
|
page read and write
|
||
7FF5A3EFA000
|
unkown
|
page readonly
|
||
2EA71713000
|
unkown
|
page read and write
|
||
7FF57DE35000
|
unkown
|
page readonly
|
||
7FF5E2D62000
|
unkown
|
page readonly
|
||
7FF5A410E000
|
unkown
|
page readonly
|
||
1A204EB0000
|
heap private
|
page read and write
|
||
7FF5393C9000
|
unkown
|
page readonly
|
||
1CCD4E60000
|
unkown
|
page read and write
|
||
7FF5454E6000
|
unkown
|
page readonly
|
||
1CCD0810000
|
unkown
|
page read and write
|
||
1CCD0C90000
|
unkown
|
page read and write
|
||
1CCD504A000
|
unkown
|
page read and write
|
||
7FF54DE55000
|
unkown
|
page readonly
|
||
F4241FE000
|
unkown
|
page read and write
|
||
7FF5391B8000
|
unkown
|
page readonly
|
||
7FF5BF616000
|
unkown
|
page readonly
|
||
7FF4EF582000
|
unkown
|
page readonly
|
||
2EA72000000
|
unkown
|
page readonly
|
||
7FF5ADDCF000
|
unkown
|
page readonly
|
||
7FF57D850000
|
unkown
|
page readonly
|
||
1F89F077000
|
unkown
|
page read and write
|
||
7FF54E0A6000
|
unkown
|
page readonly
|
||
1E1D4847000
|
unkown
|
page read and write
|
||
1F89ECD0000
|
heap private
|
page read and write
|
||
1F89CE97000
|
unkown
|
page read and write
|
||
1672D29D000
|
unkown
|
page read and write
|
||
13EE2000000
|
unkown
|
page read and write
|
||
27139C26000
|
unkown
|
page read and write
|
||
7FF5C6349000
|
unkown
|
page readonly
|
||
7FF5A4177000
|
unkown
|
page readonly
|
||
2713A402000
|
unkown
|
page read and write
|
||
7FF53929A000
|
unkown
|
page readonly
|
||
CE135FC000
|
unkown
|
page read and write
|
||
20789FB000
|
unkown
|
page read and write
|
||
1672D23E000
|
unkown
|
page read and write
|
||
2A2C000
|
unkown
|
page read and write
|
||
213028A0000
|
heap private
|
page read and write
|
||
2741DC00000
|
unkown
|
page read and write
|
||
7FF57E0F6000
|
unkown
|
page readonly
|
||
1E1D47B0000
|
unkown
|
page read and write
|
||
281A0C50000
|
heap default
|
page read and write
|
||
1F89EFE6000
|
unkown
|
page read and write
|
||
1F89CDC0000
|
unkown
|
page readonly
|
||
1F89EFB4000
|
unkown
|
page read and write
|
||
1672D320000
|
unkown
|
page readonly
|
||
7FF5BF592000
|
unkown
|
page readonly
|
||
7FF5BF68E000
|
unkown
|
page readonly
|
||
7FF57DD07000
|
unkown
|
page readonly
|
||
1A386881000
|
unkown
|
page read and write
|
||
1F89CF86000
|
unkown
|
page read and write
|
||
27139C62000
|
unkown
|
page read and write
|
||
2C34000
|
unkown
|
page read and write
|
||
2665000
|
unkown
|
page readonly
|
||
7FF5E16A0000
|
unkown
|
page readonly
|
||
2741E940000
|
unkown
|
page readonly
|
||
1CCD0950000
|
unkown
|
page readonly
|
||
7FF533846000
|
unkown
|
page readonly
|
||
141CCB80000
|
unkown
|
page readonly
|
||
7FF5337C2000
|
unkown
|
page readonly
|
||
21D33C25000
|
unkown
|
page read and write
|
||
7FF5ADC96000
|
unkown
|
page readonly
|
||
7FF4EF468000
|
unkown
|
page readonly
|
||
2EA71700000
|
unkown
|
page read and write
|
||
213029F0000
|
unkown
|
page readonly
|
||
7FF5C5F35000
|
unkown
|
page readonly
|
||
7FF4EF588000
|
unkown
|
page readonly
|
||
5E60000
|
unkown
|
page read and write
|
||
1F89EFD5000
|
unkown
|
page read and write
|
||
7FF578418000
|
unkown
|
page readonly
|
||
21303080000
|
unkown
|
page readonly
|
||
1CCD4D20000
|
unkown
|
page read and write
|
||
1F89F0A4000
|
unkown
|
page read and write
|
||
7FF57D905000
|
unkown
|
page readonly
|
||
7FF50C27A000
|
unkown
|
page readonly
|
||
1F8A0010000
|
unkown
|
page read and write
|
||
7FF5E17E7000
|
unkown
|
page readonly
|
||
CC5C17E000
|
unkown
|
page read and write
|
||
7FF5A3FED000
|
unkown
|
page readonly
|
||
7FF4EF5C9000
|
unkown
|
page readonly
|
||
13EE204E000
|
unkown
|
page read and write
|
||
7FF5BF699000
|
unkown
|
page readonly
|
||
1CCD5000000
|
unkown
|
page read and write
|
||
1FCCFDE000
|
unkown
|
page read and write
|
||
7FF533668000
|
unkown
|
page readonly
|
||
1A386902000
|
unkown
|
page read and write
|
||
7FF5B2E4C000
|
unkown
|
page readonly
|
||
29D0000
|
unkown
|
page readonly
|
||
7FF5E17E3000
|
unkown
|
page readonly
|
||
26796C30000
|
unkown
|
page read and write
|
||
141CCD46000
|
unkown
|
page read and write
|
||
20786FB000
|
unkown
|
page read and write
|
||
7FF57DCB3000
|
unkown
|
page readonly
|
||
60E827F000
|
unkown
|
page read and write
|
||
21D33A10000
|
heap default
|
page read and write
|
||
7FF57E105000
|
unkown
|
page readonly
|
||
7FF54E0E9000
|
unkown
|
page readonly
|
||
5E40000
|
unkown
|
page readonly
|
||
29F0000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
1F8A0510000
|
unkown
|
page read and write
|
||
141CABE0000
|
unkown
|
page readonly
|
||
7FF544BBF000
|
unkown
|
page readonly
|
||
1E1D61F0000
|
unkown
|
page readonly
|
||
7FF5392D8000
|
unkown
|
page readonly
|
||
7FF57E031000
|
unkown
|
page readonly
|
||
7FF54E199000
|
unkown
|
page readonly
|
||
7FF578416000
|
unkown
|
page readonly
|
||
7FF5338C1000
|
unkown
|
page readonly
|
||
1A386E60000
|
unkown
|
page read and write
|
||
1CCD4E2E000
|
unkown
|
page read and write
|
||
7FF5ADFE0000
|
unkown
|
page readonly
|
||
7FF5A4156000
|
unkown
|
page readonly
|
||
1F89F143000
|
unkown
|
page read and write
|
||
7FF5B2E65000
|
unkown
|
page readonly
|
||
A8EBD5B000
|
unkown
|
page read and write
|
||
7FF50C3D1000
|
unkown
|
page readonly
|
||
2741DC89000
|
unkown
|
page read and write
|
||
7FF5BF691000
|
unkown
|
page readonly
|
||
1F89CE13000
|
unkown
|
page read and write
|
||
7FF50C374000
|
unkown
|
page readonly
|
||
7FF5454DC000
|
unkown
|
page readonly
|
||
2C2D000
|
unkown
|
page read and write
|
||
2741E402000
|
unkown
|
page read and write
|
||
2C246FF000
|
unkown
|
page read and write
|
||
7FF5AE049000
|
unkown
|
page readonly
|
||
2EA71470000
|
heap private
|
page read and write
|
||
141CD010000
|
unkown
|
page read and write
|
||
7FF5392D6000
|
unkown
|
page readonly
|
||
2C21000
|
unkown
|
page read and write
|
||
7FF50C31F000
|
unkown
|
page readonly
|
||
2630000
|
unkown
|
page readonly
|
||
E033B7E000
|
unkown
|
page read and write
|
||
141CCAE0000
|
unkown
|
page readonly
|
||
7FF5ADFBC000
|
unkown
|
page readonly
|
||
1A386913000
|
unkown
|
page read and write
|
||
1F89F282000
|
unkown
|
page read and write
|
||
1CCCF899000
|
unkown
|
page read and write
|
||
7FF5BF625000
|
unkown
|
page readonly
|
||
27139AA0000
|
heap default
|
page read and write
|
||
7FF53383C000
|
unkown
|
page readonly
|
||
141CCD02000
|
unkown
|
page read and write
|
||
7FF50C3D9000
|
unkown
|
page readonly
|
||
28E0000
|
unkown
|
page readonly
|
||
36183F7000
|
unkown
|
page read and write
|
||
1E1D4802000
|
unkown
|
page read and write
|
||
1CCCF800000
|
unkown
|
page read and write
|
||
2EA71613000
|
unkown
|
page read and write
|
||
7FF5A413D000
|
unkown
|
page readonly
|
||
1F8A1110000
|
unkown
|
page read and write
|
||
7FF53904C000
|
unkown
|
page readonly
|
||
7FF54DE07000
|
unkown
|
page readonly
|
||
7FF50C2B3000
|
unkown
|
page readonly
|
||
7FF5A40E6000
|
unkown
|
page readonly
|
||
21D355A0000
|
unkown
|
page read and write
|
||
27139C42000
|
unkown
|
page read and write
|
||
281A1000000
|
unkown
|
page readonly
|
||
1F8A0410000
|
unkown
|
page read and write
|
||
7FF5B2DE6000
|
unkown
|
page readonly
|
||
2741DCCD000
|
unkown
|
page read and write
|
||
7FF56D837000
|
unkown
|
page readonly
|
||
7FF5337D8000
|
unkown
|
page readonly
|
||
7FF57D84B000
|
unkown
|
page readonly
|
||
1CCCFE60000
|
unkown
|
page readonly
|
||
1CCCFAD0000
|
unkown
|
page readonly
|
||
7FF545472000
|
unkown
|
page readonly
|
||
1CCD0720000
|
unkown
|
page read and write
|
||
1CCD4F18000
|
unkown
|
page write copy
|
||
1F89CF13000
|
unkown
|
page read and write
|
||
7FF50C08E000
|
unkown
|
page readonly
|
||
7FF5E2D9E000
|
unkown
|
page readonly
|
||
7FF577D91000
|
unkown
|
page readonly
|
||
2A781FE000
|
unkown
|
page read and write
|
||
7FF5BF525000
|
unkown
|
page readonly
|
||
7FF5E1634000
|
unkown
|
page readonly
|
||
1CCD4E20000
|
unkown
|
page read and write
|
||
2741DCC5000
|
unkown
|
page read and write
|
||
1FCD6FF000
|
unkown
|
page read and write
|
||
1FCD375000
|
unkown
|
page read and write
|
||
7FF5B2C5F000
|
unkown
|
page readonly
|
||
7FF5E2E61000
|
unkown
|
page readonly
|
||
60E857D000
|
unkown
|
page read and write
|
||
1672E000000
|
unkown
|
page read and write
|
||
1F89CE9F000
|
unkown
|
page read and write
|
||
26795000000
|
unkown
|
page write copy
|
||
26795050000
|
unkown
|
page readonly
|
||
7FF538EFD000
|
unkown
|
page readonly
|
||
141CACCF000
|
unkown
|
page read and write
|
||
7FF57DE9B000
|
unkown
|
page readonly
|
||
7FF5B2E74000
|
unkown
|
page readonly
|
||
2077FFB000
|
unkown
|
page read and write
|
||
A8ECAFE000
|
unkown
|
page read and write
|
||
7FF5C6308000
|
unkown
|
page readonly
|
||
7FF545569000
|
unkown
|
page readonly
|
||
CC5C1FE000
|
unkown
|
page read and write
|
||
2078A7A000
|
unkown
|
page read and write
|
||
7FF54E116000
|
unkown
|
page readonly
|
||
5668E7E000
|
unkown
|
page read and write
|
||
1E1D4848000
|
unkown
|
page read and write
|
||
7FF56DFD5000
|
unkown
|
page readonly
|
||
7FF50C35C000
|
unkown
|
page readonly
|
||
7FF57E0BF000
|
unkown
|
page readonly
|
||
1CCD4C90000
|
unkown
|
page read and write
|
||
7FF50C2BC000
|
unkown
|
page readonly
|
||
A8EC9FE000
|
unkown
|
page read and write
|
||
7FF56E041000
|
unkown
|
page readonly
|
||
E033AFF000
|
unkown
|
page read and write
|
||
1A386829000
|
unkown
|
page read and write
|
||
7FF5ADED5000
|
unkown
|
page readonly
|
||
1E1D67C0000
|
unkown
|
page readonly
|
||
21D33E00000
|
unkown
|
page readonly
|
||
13EE203C000
|
unkown
|
page read and write
|
||
2EA714E0000
|
unkown
|
page readonly
|
||
26794E71000
|
unkown
|
page read and write
|
||
141CC670000
|
unkown
|
page read and write
|
||
1F89ED20000
|
unkown
|
page readonly
|
||
7FF53352D000
|
unkown
|
page readonly
|
||
7FF57841A000
|
unkown
|
page readonly
|
||
2741DC13000
|
unkown
|
page read and write
|
||
21302A00000
|
unkown
|
page read and write
|
||
1F89CE3F000
|
unkown
|
page read and write
|
||
7FF5337FE000
|
unkown
|
page readonly
|
||
13EE2102000
|
unkown
|
page read and write
|
||
1F89CF36000
|
unkown
|
page read and write
|
||
7FF577D96000
|
unkown
|
page readonly
|
||
1CCCF89B000
|
unkown
|
page read and write
|
||
1F89ED30000
|
unkown
|
page read and write
|
||
1F89F400000
|
unkown
|
page readonly
|
||
27139BA0000
|
unkown
|
page read and write
|
||
1E1D6480000
|
unkown
|
page readonly
|
||
7FF57E0C9000
|
unkown
|
page readonly
|
||
1CCD50AD000
|
unkown
|
page read and write
|
||
26794CF0000
|
unkown
|
page readonly
|
||
26D0000
|
unkown
|
page readonly
|
||
7FF5E2E69000
|
unkown
|
page readonly
|
||
2A7857E000
|
unkown
|
page read and write
|
||
1A386908000
|
unkown
|
page read and write
|
||
42D4B8E000
|
unkown
|
page read and write
|
||
7FF5E2D60000
|
unkown
|
page readonly
|
||
1A205029000
|
unkown
|
page read and write
|
||
2EA71602000
|
unkown
|
page read and write
|
||
24B7000
|
unkown
|
page readonly
|
||
7FF50BEE3000
|
unkown
|
page readonly
|
||
7FF5ADF8F000
|
unkown
|
page readonly
|
||
1F89F07B000
|
unkown
|
page read and write
|
||
1E1D61E0000
|
unkown
|
page read and write
|
||
5668C7A000
|
unkown
|
page read and write
|
||
7FF4EECBF000
|
unkown
|
page readonly
|
||
7FF5BF61C000
|
unkown
|
page readonly
|
||
7FF5BF588000
|
unkown
|
page readonly
|
||
1F89EE02000
|
unkown
|
page read and write
|
||
7FF5C63F0000
|
unkown
|
page readonly
|
||
1CCD50B7000
|
unkown
|
page read and write
|
||
7FF5A41D9000
|
unkown
|
page readonly
|
||
7FF5E2E00000
|
unkown
|
page readonly
|
||
7FF57DD0E000
|
unkown
|
page readonly
|
||
7FF57DF2C000
|
unkown
|
page readonly
|
||
1F8A0213000
|
unkown
|
page read and write
|
||
CE12E7C000
|
unkown
|
page read and write
|
||
7FF533590000
|
unkown
|
page readonly
|
||
42D4EFF000
|
unkown
|
page read and write
|
||
2C2E000
|
unkown
|
page read and write
|
||
7FF54E130000
|
unkown
|
page readonly
|
||
A8EC6FD000
|
unkown
|
page read and write
|
||
1A205250000
|
unkown
|
page readonly
|
||
7FF56DFCC000
|
unkown
|
page readonly
|
||
7FF54E06C000
|
unkown
|
page readonly
|
||
1E1D4918000
|
unkown
|
page read and write
|
||
7FF5E2C2E000
|
unkown
|
page readonly
|
||
7FF54D905000
|
unkown
|
page readonly
|
||
141CAC55000
|
unkown
|
page read and write
|
||
1CCD50B2000
|
unkown
|
page read and write
|
||
207857B000
|
unkown
|
page read and write
|
||
7FF5C62F2000
|
unkown
|
page readonly
|
||
7FF5E19D1000
|
unkown
|
page readonly
|
||
7FF5454CD000
|
unkown
|
page readonly
|
||
7FF5A3F9E000
|
unkown
|
page readonly
|
||
2078E79000
|
unkown
|
page read and write
|
||
7FF545123000
|
unkown
|
page readonly
|
||
27139C02000
|
unkown
|
page read and write
|
||
1F89CE7A000
|
unkown
|
page read and write
|
||
7FF53932D000
|
unkown
|
page readonly
|
||
1CCD08F0000
|
unkown
|
page readonly
|
||
7FF50C05C000
|
unkown
|
page readonly
|
||
1FCD47B000
|
unkown
|
page read and write
|
||
E1C87FF000
|
unkown
|
page read and write
|
||
1E1D47D0000
|
unkown
|
page read and write
|
||
7FF57E0E6000
|
unkown
|
page readonly
|
||
7FF5E193D000
|
unkown
|
page readonly
|
||
7FF5BF5E9000
|
unkown
|
page readonly
|
||
7FF5A3FC8000
|
unkown
|
page readonly
|
||
27139C83000
|
unkown
|
page read and write
|
||
2C34000
|
unkown
|
page read and write
|
||
21D33C40000
|
unkown
|
page read and write
|
||
7FF5392EA000
|
unkown
|
page readonly
|
||
1CCD0940000
|
unkown
|
page readonly
|
||
7FF50C3D9000
|
unkown
|
page readonly
|
||
1672D2BF000
|
unkown
|
page read and write
|
||
7FF5ADFB1000
|
unkown
|
page readonly
|
||
7FF5B2E5C000
|
unkown
|
page readonly
|
||
207867A000
|
unkown
|
page read and write
|
||
7FF545134000
|
unkown
|
page readonly
|
||
2A785FA000
|
unkown
|
page read and write
|
||
7FF54E06A000
|
unkown
|
page readonly
|
||
7FF53384C000
|
unkown
|
page readonly
|
||
7FF578445000
|
unkown
|
page readonly
|
||
1CCCF913000
|
unkown
|
page read and write
|
||
1CCD4F00000
|
unkown
|
page readonly
|
||
1E1D4790000
|
unkown
|
page readonly
|
||
7FF5BF590000
|
unkown
|
page readonly
|
||
1672DDC0000
|
unkown
|
page read and write
|
||
7FF5A41D9000
|
unkown
|
page readonly
|
||
7FF5E2DCD000
|
unkown
|
page readonly
|
||
2EA71702000
|
unkown
|
page read and write
|
||
281A0E24000
|
unkown
|
page read and write
|
||
141CAC00000
|
unkown
|
page read and write
|
||
7FF53929C000
|
unkown
|
page readonly
|
||
1E1D4889000
|
unkown
|
page read and write
|
||
A8EC5FF000
|
unkown
|
page read and write
|
||
1CCCF889000
|
unkown
|
page read and write
|
||
7FF532F38000
|
unkown
|
page readonly
|
||
5EAE000
|
unkown
|
page read and write
|
||
1F89CEF6000
|
unkown
|
page read and write
|
||
7FF5337D2000
|
unkown
|
page readonly
|
||
7FF5C62B1000
|
unkown
|
page readonly
|
||
26794E13000
|
unkown
|
page read and write
|
||
27139C5E000
|
unkown
|
page read and write
|
||
7FF54DDF4000
|
unkown
|
page readonly
|
||
2741DD02000
|
unkown
|
page read and write
|
||
21D33AF0000
|
unkown
|
page write copy
|
||
1CCD4EF0000
|
unkown
|
page write copy
|
||
1F89F143000
|
unkown
|
page read and write
|
||
7FF5392C0000
|
unkown
|
page readonly
|
||
7FF5ADBB2000
|
unkown
|
page readonly
|
||
7FF57D9B5000
|
unkown
|
page readonly
|
||
1CCD4F1C000
|
unkown
|
page readonly
|
||
7FF50C329000
|
unkown
|
page readonly
|
||
1F8A0610000
|
unkown
|
page read and write
|
||
26BB000
|
unkown
|
page readonly
|
||
13EE2113000
|
unkown
|
page read and write
|
||
13EE1FC0000
|
unkown
|
page readonly
|
||
27139C40000
|
unkown
|
page read and write
|
||
4520000
|
unkown
|
page readonly
|
||
7FF5B2DE8000
|
unkown
|
page readonly
|
||
7FF50C245000
|
unkown
|
page readonly
|
||
2078EFB000
|
unkown
|
page read and write
|
||
E033DFF000
|
unkown
|
page read and write
|
||
7FF4EF483000
|
unkown
|
page readonly
|
||
21303202000
|
unkown
|
page read and write
|
||
7FF50C2D2000
|
unkown
|
page readonly
|
||
1F89EF5D000
|
unkown
|
page read and write
|
||
1F89CEFA000
|
unkown
|
page read and write
|
||
7FF5E1695000
|
unkown
|
page readonly
|
||
7FF5E18AA000
|
unkown
|
page readonly
|
||
21D33C49000
|
unkown
|
page read and write
|
||
7FF57D918000
|
unkown
|
page readonly
|
||
1F8A0510000
|
unkown
|
page read and write
|
||
141CAB80000
|
heap default
|
page read and write
|
||
7FF56DF99000
|
unkown
|
page readonly
|
||
CE136FE000
|
unkown
|
page read and write
|
||
1672D440000
|
unkown
|
page read and write
|
||
7FF539336000
|
unkown
|
page readonly
|
||
E1C82DB000
|
unkown
|
page read and write
|
||
7FF5392A7000
|
unkown
|
page readonly
|
||
1CCCF88E000
|
unkown
|
page read and write
|
||
42D4B0E000
|
unkown
|
page read and write
|
||
7FF5BF630000
|
unkown
|
page readonly
|
||
7FF4EF531000
|
unkown
|
page readonly
|
||
141CC770000
|
unkown
|
page readonly
|
||
141CCB50000
|
unkown
|
page read and write
|
||
7FF5337C0000
|
unkown
|
page readonly
|
||
7FF57DFE5000
|
unkown
|
page readonly
|
||
1F89EF97000
|
unkown
|
page read and write
|
||
1672D273000
|
unkown
|
page read and write
|
||
7FF539281000
|
unkown
|
page readonly
|
||
1A206E60000
|
unkown
|
page read and write
|
||
141CAC29000
|
unkown
|
page read and write
|
||
21302A2A000
|
unkown
|
page read and write
|
||
7FF538ED3000
|
unkown
|
page readonly
|
||
5EB0000
|
unkown
|
page read and write
|
||
1CCD4F60000
|
unkown
|
page read and write
|
||
7FF5ADF56000
|
unkown
|
page readonly
|
||
1E1D4900000
|
unkown
|
page read and write
|
||
7FF5E2D78000
|
unkown
|
page readonly
|
||
27139C7A000
|
unkown
|
page read and write
|
||
1F8A0000000
|
unkown
|
page read and write
|
||
7FF5390EB000
|
unkown
|
page readonly
|
||
1A205002000
|
unkown
|
page read and write
|
||
267967F0000
|
unkown
|
page read and write
|
||
7FF5E1740000
|
unkown
|
page readonly
|
||
F423FFB000
|
unkown
|
page read and write
|
||
7FF578509000
|
unkown
|
page readonly
|
||
20784F9000
|
unkown
|
page read and write
|
||
1CCD4F80000
|
unkown
|
page read and write
|
||
7FF5E2D8A000
|
unkown
|
page readonly
|
||
27139C67000
|
unkown
|
page read and write
|
||
7FF533836000
|
unkown
|
page readonly
|
||
7FF5E195C000
|
unkown
|
page readonly
|
||
7FF539130000
|
unkown
|
page readonly
|
||
27139C5A000
|
unkown
|
page read and write
|
||
7FF5ADFB6000
|
unkown
|
page readonly
|
||
27139C74000
|
unkown
|
page read and write
|
||
7FF5338C9000
|
unkown
|
page readonly
|
||
5EE0000
|
heap private
|
page read and write
|
||
7FF5BF469000
|
unkown
|
page readonly
|
||
CC5BCCB000
|
unkown
|
page read and write
|
||
7FF5BF438000
|
unkown
|
page readonly
|
||
7FF57E110000
|
unkown
|
page readonly
|
||
2078F7C000
|
unkown
|
page read and write
|
||
281A0E5C000
|
unkown
|
page read and write
|
||
20790FF000
|
unkown
|
page read and write
|
||
7FF4EF59A000
|
unkown
|
page readonly
|
||
1F8A0610000
|
unkown
|
page read and write
|
||
7FF5454AF000
|
unkown
|
page readonly
|
||
7FF5C5F31000
|
unkown
|
page readonly
|
||
7FF5E188A000
|
unkown
|
page readonly
|
||
141CCD48000
|
unkown
|
page read and write
|
||
7FF5C635D000
|
unkown
|
page readonly
|
||
7FF50C346000
|
unkown
|
page readonly
|
||
7FF5392D2000
|
unkown
|
page readonly
|
||
7FF539085000
|
unkown
|
page readonly
|
||
7FF54E199000
|
unkown
|
page readonly
|
||
7FF5E2C73000
|
unkown
|
page readonly
|
||
26794F00000
|
unkown
|
page read and write
|
||
7FF5BF5BA000
|
unkown
|
page readonly
|
||
7FF5ADC22000
|
unkown
|
page readonly
|
||
CE1337C000
|
unkown
|
page read and write
|
||
7FF5A414C000
|
unkown
|
page readonly
|
||
7FF56DFC6000
|
unkown
|
page readonly
|
||
1F89CE8C000
|
unkown
|
page read and write
|
||
1B3647F7000
|
heap default
|
page read and write
|
||
1E1D6400000
|
unkown
|
page read and write
|
||
7FF5E295A000
|
unkown
|
page readonly
|
||
7FF4EF3CA000
|
unkown
|
page readonly
|
||
CC5C3FD000
|
unkown
|
page read and write
|
||
7FF50C3CE000
|
unkown
|
page readonly
|
||
7FF5338C9000
|
unkown
|
page readonly
|
||
CC5C67D000
|
unkown
|
page read and write
|
||
5668F7B000
|
unkown
|
page read and write
|
||
7FF5C6361000
|
unkown
|
page readonly
|
||
2741DC7F000
|
unkown
|
page read and write
|
||
7DE88BB000
|
unkown
|
page read and write
|
||
7FF54E0BA000
|
unkown
|
page readonly
|
||
7FF53927A000
|
unkown
|
page readonly
|
||
7FF5ADBAE000
|
unkown
|
page readonly
|
||
1672DFE0000
|
unkown
|
page readonly
|
||
7FF57DD48000
|
unkown
|
page readonly
|
||
7FF4EF610000
|
unkown
|
page readonly
|
||
7DFCCD180000
|
unkown
|
page readonly
|
||
7DE8D7F000
|
unkown
|
page read and write
|
||
7FF539357000
|
unkown
|
page readonly
|
||
7FF54DEEA000
|
unkown
|
page readonly
|
||
27139C2D000
|
unkown
|
page read and write
|
||
42D4F7F000
|
unkown
|
page read and write
|
||
CE1307C000
|
unkown
|
page read and write
|
||
7FF5784FE000
|
unkown
|
page readonly
|
||
7FF5E1967000
|
unkown
|
page readonly
|
||
2741E600000
|
unkown
|
page readonly
|
||
2078FFF000
|
unkown
|
page read and write
|
||
7FF5ADFE4000
|
unkown
|
page readonly
|
||
281A0F02000
|
unkown
|
page read and write
|
||
7FF5BF634000
|
unkown
|
page readonly
|
||
7FF545460000
|
unkown
|
page readonly
|
||
E033D7F000
|
unkown
|
page read and write
|
||
7FF5A40E8000
|
unkown
|
page readonly
|
||
13EE2013000
|
unkown
|
page read and write
|
||
7FF50C0A0000
|
unkown
|
page readonly
|
||
7FF5393BE000
|
unkown
|
page readonly
|
||
1B3649B5000
|
heap private
|
page read and write
|
||
281A1390000
|
unkown
|
page readonly
|
||
1A386813000
|
unkown
|
page read and write
|
||
7FF5C6306000
|
unkown
|
page readonly
|
||
1CCCF7C0000
|
heap default
|
page read and write
|
||
1E1D4813000
|
unkown
|
page read and write
|
||
1CCD50B5000
|
unkown
|
page read and write
|
||
7FF4EF671000
|
unkown
|
page readonly
|
||
7FF5ADDAE000
|
unkown
|
page readonly
|
||
141CCB60000
|
unkown
|
page readonly
|
||
26794DC0000
|
unkown
|
page readonly
|
||
7FF539277000
|
unkown
|
page readonly
|
||
6270000
|
unkown
|
page read and write
|
||
7FF545507000
|
unkown
|
page readonly
|
||
1CCD4E50000
|
unkown
|
page read and write
|
||
7FF50C33D000
|
unkown
|
page readonly
|
||
2C00000
|
heap default
|
page read and write
|
||
25FA000
|
unkown
|
page readonly
|
||
2C243FA000
|
unkown
|
page read and write
|
||
1F8A0210000
|
unkown
|
page read and write
|
||
1F89F0C5000
|
unkown
|
page read and write
|
||
1CCD4E20000
|
unkown
|
page read and write
|
||
2C28000
|
unkown
|
page read and write
|
||
E033CFE000
|
unkown
|
page read and write
|
||
7FF5B2DD0000
|
unkown
|
page readonly
|
||
1A205102000
|
unkown
|
page read and write
|
||
1CCD4F80000
|
unkown
|
page read and write
|
||
7FF5E191F000
|
unkown
|
page readonly
|
||
13EE2050000
|
unkown
|
page read and write
|
||
7FF53907E000
|
unkown
|
page readonly
|
||
7FF54DFA3000
|
unkown
|
page readonly
|
||
7FF5C5FC8000
|
unkown
|
page readonly
|
||
5668D7A000
|
unkown
|
page read and write
|
||
2627000
|
unkown
|
page readonly
|
||
27139D02000
|
unkown
|
page read and write
|
||
7FF5A4146000
|
unkown
|
page readonly
|
||
7FF533630000
|
unkown
|
page readonly
|
||
1F89ED30000
|
unkown
|
page readonly
|
||
7FF5C6376000
|
unkown
|
page readonly
|
||
E1C835E000
|
unkown
|
page read and write
|
||
7FF57E053000
|
unkown
|
page readonly
|
||
7FF5392AC000
|
unkown
|
page readonly
|
||
1F89CEA5000
|
unkown
|
page read and write
|
||
84B000
|
stack
|
page read and write
|
||
7FF50C1C8000
|
unkown
|
page readonly
|
||
CE1347D000
|
unkown
|
page read and write
|
||
1CCD502D000
|
unkown
|
page read and write
|
||
566947D000
|
unkown
|
page read and write
|
||
7FF4EF54C000
|
unkown
|
page readonly
|
||
7FF5452EF000
|
unkown
|
page readonly
|
||
7FF5C62DC000
|
unkown
|
page readonly
|
||
7FF5C6366000
|
unkown
|
page readonly
|
||
281A0E40000
|
unkown
|
page read and write
|
||
7FF5C63F9000
|
unkown
|
page readonly
|
||
1CCD4F80000
|
unkown
|
page readonly
|
||
1672D23E000
|
unkown
|
page read and write
|
||
566927F000
|
unkown
|
page read and write
|
||
7FF53934C000
|
unkown
|
page readonly
|
||
141CCAF0000
|
heap private
|
page read and write
|
||
7FF54E051000
|
unkown
|
page readonly
|
||
1672D2BF000
|
unkown
|
page read and write
|
||
2EA71800000
|
unkown
|
page readonly
|
||
21302C00000
|
unkown
|
page readonly
|
||
7FF57E03B000
|
unkown
|
page readonly
|
||
7FF5392A3000
|
unkown
|
page readonly
|
||
7FF50C377000
|
unkown
|
page readonly
|
||
7FF57DF31000
|
unkown
|
page readonly
|
||
7FF57E0FC000
|
unkown
|
page readonly
|
||
7FF5A4011000
|
unkown
|
page readonly
|
||
7FF50C34C000
|
unkown
|
page readonly
|
||
7FF5BF57C000
|
unkown
|
page readonly
|
||
361807E000
|
unkown
|
page read and write
|
||
21302A68000
|
unkown
|
page read and write
|
||
1F89F07F000
|
unkown
|
page read and write
|
||
267968F0000
|
unkown
|
page readonly
|
||
1F89CF30000
|
unkown
|
page read and write
|
||
27139C6A000
|
unkown
|
page read and write
|
||
1CCD4E44000
|
unkown
|
page read and write
|
||
1CCD50B4000
|
unkown
|
page read and write
|
||
13EE208A000
|
unkown
|
page read and write
|
||
1FCD4FE000
|
unkown
|
page read and write
|
||
27139C4E000
|
unkown
|
page read and write
|
||
7FF5C633F000
|
unkown
|
page readonly
|
||
1F89F03C000
|
unkown
|
page read and write
|
||
7FF4EF5DD000
|
unkown
|
page readonly
|
||
7FF5E18E6000
|
unkown
|
page readonly
|
||
7FF50C367000
|
unkown
|
page readonly
|
||
1CCCFA00000
|
unkown
|
page readonly
|
||
7FF578495000
|
unkown
|
page readonly
|
||
C7047F000
|
unkown
|
page read and write
|
||
7FF50C095000
|
unkown
|
page readonly
|
||
7FF53364F000
|
unkown
|
page readonly
|
||
1CCD5052000
|
unkown
|
page read and write
|
||
27139C66000
|
unkown
|
page read and write
|
||
7FF5E17C8000
|
unkown
|
page readonly
|
||
7FF5A3FE3000
|
unkown
|
page readonly
|
||
7FF54E18E000
|
unkown
|
page readonly
|
||
1F89F200000
|
unkown
|
page read and write
|
||
141CCC02000
|
unkown
|
page read and write
|
||
1B3649B0000
|
heap private
|
page read and write
|
||
1A386870000
|
unkown
|
page read and write
|
||
1A386700000
|
heap default
|
page read and write
|
||
1CCCFFF0000
|
unkown
|
page read and write
|
||
1F89EF13000
|
unkown
|
page read and write
|
||
7FF50C118000
|
unkown
|
page readonly
|
||
1CCD0701000
|
unkown
|
page read and write
|
||
7FF5C637C000
|
unkown
|
page readonly
|
||
7FF5A40E2000
|
unkown
|
page readonly
|
||
1CCD4FC0000
|
unkown
|
page readonly
|
||
1A206B00000
|
unkown
|
page readonly
|
||
C6FFDB000
|
unkown
|
page read and write
|
||
7FF5BF34E000
|
unkown
|
page readonly
|
||
2C242FE000
|
unkown
|
page read and write
|
||
1F89EFF8000
|
unkown
|
page read and write
|
||
21302910000
|
unkown
|
page readonly
|
||
1CCD4F04000
|
unkown
|
page readonly
|
||
7FF5C6335000
|
unkown
|
page readonly
|
||
8B0000
|
unkown
|
page read and write
|
||
2078C7B000
|
unkown
|
page read and write
|
||
7FF5E1891000
|
unkown
|
page readonly
|
||
21302A78000
|
unkown
|
page read and write
|
||
2D00000
|
unkown
|
page readonly
|
||
1F89EF75000
|
unkown
|
page read and write
|
||
1A386900000
|
unkown
|
page read and write
|
||
2741E270000
|
unkown
|
page readonly
|
||
7FF57DCB5000
|
unkown
|
page readonly
|
||
7FF532F34000
|
unkown
|
page readonly
|
||
1CCD4E50000
|
unkown
|
page read and write
|
||
7FF533862000
|
unkown
|
page readonly
|
||
7FF5E2CA7000
|
unkown
|
page readonly
|
||
207877A000
|
unkown
|
page read and write
|
||
7FF4EF5F6000
|
unkown
|
page readonly
|
||
27139E00000
|
unkown
|
page readonly
|
||
13EE1EE0000
|
heap default
|
page read and write
|
||
451E000
|
stack
|
page read and write
|
||
2643000
|
unkown
|
page readonly
|
||
1672D6A0000
|
unkown
|
page readonly
|
||
7FF5E1647000
|
unkown
|
page readonly
|
||
1F89CF55000
|
unkown
|
page read and write
|
||
7FF5A3F5F000
|
unkown
|
page readonly
|
||
7FF5392C2000
|
unkown
|
page readonly
|
||
7FF4EF3E0000
|
unkown
|
page readonly
|
||
7FF50C28A000
|
unkown
|
page readonly
|
||
7FF533401000
|
unkown
|
page readonly
|
||
1F8A0410000
|
unkown
|
page read and write
|
||
A8EC7FE000
|
unkown
|
page read and write
|
||
7FF5BF268000
|
unkown
|
page readonly
|
||
7FF4EF617000
|
unkown
|
page readonly
|
||
21D33C29000
|
unkown
|
page read and write
|
||
7FF5BF5A2000
|
unkown
|
page readonly
|
||
1F89CE78000
|
unkown
|
page read and write
|
||
26794E6F000
|
unkown
|
page read and write
|
||
13EE2108000
|
unkown
|
page read and write
|
||
13EE1FE0000
|
unkown
|
page read and write
|
||
7FF545120000
|
unkown
|
page readonly
|
||
7FF532F2E000
|
unkown
|
page readonly
|
||
7FF5A41CE000
|
unkown
|
page readonly
|
||
7FF5ADF7E000
|
unkown
|
page readonly
|
||
3617DEE000
|
unkown
|
page read and write
|
||
7FF5ADFCC000
|
unkown
|
page readonly
|
||
7FF578476000
|
unkown
|
page readonly
|
||
1E1D6202000
|
unkown
|
page read and write
|
||
1F89CEB7000
|
unkown
|
page read and write
|
||
7FF5C602E000
|
unkown
|
page readonly
|
||
1F89CED8000
|
unkown
|
page read and write
|
||
A8EC2FC000
|
unkown
|
page read and write
|
||
1CCCF8B7000
|
unkown
|
page read and write
|
||
2C245FD000
|
unkown
|
page read and write
|
||
27139C7C000
|
unkown
|
page read and write
|
||
7FF5454D6000
|
unkown
|
page readonly
|
||
1672D1F0000
|
heap default
|
page read and write
|
||
E033A7B000
|
unkown
|
page read and write
|
||
7FF545127000
|
unkown
|
page readonly
|
||
1CCD0920000
|
unkown
|
page readonly
|
||
207837A000
|
unkown
|
page read and write
|
||
27139C60000
|
unkown
|
page read and write
|
||
7FF578333000
|
unkown
|
page readonly
|
||
1B364770000
|
unkown
|
page read and write
|
||
7FF545561000
|
unkown
|
page readonly
|
||
7FF5ADE57000
|
unkown
|
page readonly
|
||
7FF539360000
|
unkown
|
page readonly
|
||
7FF5E2E5E000
|
unkown
|
page readonly
|
||
7FF5ADFC6000
|
unkown
|
page readonly
|
||
2C0A000
|
heap default
|
page read and write
|
||
27139A40000
|
heap private
|
page read and write
|
||
1672D485000
|
heap private
|
page read and write
|
||
1CCD4D10000
|
unkown
|
page read and write
|
||
21D33C00000
|
unkown
|
page read and write
|
||
36184FE000
|
unkown
|
page read and write
|
||
1672D450000
|
unkown
|
page read and write
|
||
7FF5BF606000
|
unkown
|
page readonly
|
||
7FF5C62E8000
|
unkown
|
page readonly
|
||
27139C73000
|
unkown
|
page read and write
|
||
1B364790000
|
unkown
|
page read and write
|
||
7FF57DCB1000
|
unkown
|
page readonly
|
||
26D8000
|
unkown
|
page readonly
|
||
1F89EF7C000
|
unkown
|
page read and write
|
||
1CCD0301000
|
unkown
|
page read and write
|
||
2C2427E000
|
unkown
|
page read and write
|
||
1CCD4F80000
|
unkown
|
page read and write
|
||
21302B13000
|
unkown
|
page read and write
|
||
7FF568C1C000
|
unkown
|
page readonly
|
||
1F89E870000
|
unkown
|
page read and write
|
||
7FF578486000
|
unkown
|
page readonly
|
||
7FF5E2B8A000
|
unkown
|
page readonly
|
||
7FF5B2E56000
|
unkown
|
page readonly
|
||
7FF57E088000
|
unkown
|
page readonly
|
||
13EE1EF0000
|
unkown
|
page readonly
|
||
7FF5338BE000
|
unkown
|
page readonly
|
||
2C42000
|
unkown
|
page read and write
|
||
7FF57DD86000
|
unkown
|
page readonly
|
||
1F8A0110000
|
unkown
|
page read and write
|
||
566967E000
|
unkown
|
page read and write
|
||
7FF5A41D1000
|
unkown
|
page readonly
|
||
1E1D67D0000
|
unkown
|
page write copy
|
||
7FF533867000
|
unkown
|
page readonly
|
||
7FF4EF2D4000
|
unkown
|
page readonly
|
||
2A30000
|
unkown
|
page read and write
|
||
2EA714D0000
|
heap default
|
page read and write
|
||
141CACF2000
|
unkown
|
page read and write
|
||
1CCCFFF3000
|
unkown
|
page read and write
|
||
A8EC8FF000
|
unkown
|
page read and write
|
||
1CCCF876000
|
unkown
|
page read and write
|
||
7FF50BF0D000
|
unkown
|
page readonly
|
||
1F89CE91000
|
unkown
|
page read and write
|
||
1A387200000
|
unkown
|
page readonly
|
||
2EA715B0000
|
unkown
|
page readonly
|
||
1F89D000000
|
unkown
|
page readonly
|
||
2741E500000
|
unkown
|
page read and write
|
||
7FF5B2535000
|
unkown
|
page readonly
|
||
7FF54E106000
|
unkown
|
page readonly
|
||
7FF57E0EC000
|
unkown
|
page readonly
|
||
C70379000
|
unkown
|
page read and write
|
||
7FF5ADF2C000
|
unkown
|
page readonly
|
||
2741E380000
|
unkown
|
page readonly
|
||
1E1D4858000
|
unkown
|
page read and write
|
||
29B0000
|
heap default
|
page read and write
|
||
1F89F100000
|
unkown
|
page read and write
|
||
7FF4EF607000
|
unkown
|
page readonly
|
||
1672D430000
|
unkown
|
page read and write
|
||
7FF54DF88000
|
unkown
|
page readonly
|
||
E033BF9000
|
unkown
|
page read and write
|
||
7FF5E18E8000
|
unkown
|
page readonly
|
||
1CCCF813000
|
unkown
|
page read and write
|
||
1F89EFF8000
|
unkown
|
page read and write
|
||
26794E2B000
|
unkown
|
page read and write
|
||
7FF53930F000
|
unkown
|
page readonly
|
||
1CCD4F80000
|
unkown
|
page read and write
|
||
7FF5ADC31000
|
unkown
|
page readonly
|
||
2601000
|
unkown
|
page readonly
|
||
7FF5E2DEC000
|
unkown
|
page readonly
|
||
7FF539274000
|
unkown
|
page readonly
|
||
7FF5E2C7D000
|
unkown
|
page readonly
|
||
7FF50C15F000
|
unkown
|
page readonly
|
||
7FF5391D7000
|
unkown
|
page readonly
|
||
1672D1F6000
|
heap default
|
page read and write
|
||
7FF539346000
|
unkown
|
page readonly
|
||
141CAD13000
|
unkown
|
page read and write
|
||
1CCD0002000
|
unkown
|
page read and write
|
||
7FF57DF49000
|
unkown
|
page readonly
|
||
207897B000
|
unkown
|
page read and write
|
||
1CCD5015000
|
unkown
|
page read and write
|
||
7FF5A40D0000
|
unkown
|
page readonly
|
||
7FF4EF487000
|
unkown
|
page readonly
|
||
27139B90000
|
unkown
|
page readonly
|
||
1672D25D000
|
unkown
|
page read and write
|
||
7FF50C2B7000
|
unkown
|
page readonly
|
||
1A204F10000
|
heap default
|
page read and write
|
||
7FF50C315000
|
unkown
|
page readonly
|
||
7FF5A40D2000
|
unkown
|
page readonly
|
||
1672D3F0000
|
unkown
|
page readonly
|
||
7FF5BECFE000
|
unkown
|
page readonly
|
||
1F89EFF1000
|
unkown
|
page read and write
|
||
7FF5A3CE0000
|
unkown
|
page readonly
|
||
141CCB40000
|
unkown
|
page readonly
|
||
7FF4EF340000
|
unkown
|
page readonly
|
||
36185FC000
|
unkown
|
page read and write
|
||
7FF56DF5A000
|
unkown
|
page readonly
|
||
2078CFB000
|
unkown
|
page read and write
|
||
1CCD0730000
|
unkown
|
page read and write
|
||
1CCCF7D0000
|
unkown
|
page readonly
|
||
7FF5BF60C000
|
unkown
|
page readonly
|
||
7FF4EF586000
|
unkown
|
page readonly
|
||
7FF5C6397000
|
unkown
|
page readonly
|
||
2078B7B000
|
unkown
|
page read and write
|
||
1F89CE91000
|
unkown
|
page read and write
|
||
7FF5392B8000
|
unkown
|
page readonly
|
||
7FF5ADF99000
|
unkown
|
page readonly
|
||
7FF54E047000
|
unkown
|
page readonly
|
||
7FF5BF5A6000
|
unkown
|
page readonly
|
||
60E877F000
|
unkown
|
page read and write
|
||
7FF5E2E69000
|
unkown
|
page readonly
|
||
1CCD0159000
|
unkown
|
page read and write
|
||
7FF5C63EE000
|
unkown
|
page readonly
|
||
281A0C60000
|
unkown
|
page readonly
|
||
1F8A1110000
|
unkown
|
page read and write
|
||
7FF5C6297000
|
unkown
|
page readonly
|
||
141CAC13000
|
unkown
|
page read and write
|
||
1CCD4F30000
|
unkown
|
page read and write
|
||
1F89CF35000
|
unkown
|
page read and write
|
||
1672D1D0000
|
unkown
|
page read and write
|
||
1F89CE29000
|
unkown
|
page read and write
|
||
7FF57DFF7000
|
unkown
|
page readonly
|
||
7FF5A4129000
|
unkown
|
page readonly
|
||
1CCD0113000
|
unkown
|
page read and write
|
||
1672DFD0000
|
unkown
|
page read and write
|
||
1CCD0015000
|
unkown
|
page read and write
|
||
1F8A0110000
|
unkown
|
page read and write
|
||
7FF56E049000
|
unkown
|
page readonly
|
||
C704FE000
|
unkown
|
page read and write
|
||
13EE2053000
|
unkown
|
page read and write
|
||
7FF5E2DA5000
|
unkown
|
page readonly
|
||
26D8000
|
unkown
|
page readonly
|
||
2741DC6F000
|
unkown
|
page read and write
|
||
7FF533755000
|
unkown
|
page readonly
|
||
213029E0000
|
unkown
|
page readonly
|
||
1F89EF95000
|
unkown
|
page read and write
|
||
361827B000
|
unkown
|
page read and write
|
||
7FF5A411F000
|
unkown
|
page readonly
|
||
1CCD5280000
|
unkown
|
page readonly
|
||
566869B000
|
unkown
|
page read and write
|
||
27139C76000
|
unkown
|
page read and write
|
||
27139C69000
|
unkown
|
page read and write
|
||
7FF50C2FA000
|
unkown
|
page readonly
|
||
7FF50C043000
|
unkown
|
page readonly
|
||
1F89CF48000
|
unkown
|
page read and write
|
||
7FF532F3B000
|
unkown
|
page readonly
|
||
7FF54DF00000
|
unkown
|
page readonly
|
||
7FF5E2C58000
|
unkown
|
page readonly
|
||
2078DFC000
|
unkown
|
page read and write
|
||
7FF5393C1000
|
unkown
|
page readonly
|
||
7FF533864000
|
unkown
|
page readonly
|
||
2741DBF0000
|
heap default
|
page read and write
|
||
2EA715C0000
|
unkown
|
page readonly
|
||
7FF4EF5AE000
|
unkown
|
page readonly
|
||
25FD000
|
unkown
|
page readonly
|
||
7FF50C284000
|
unkown
|
page readonly
|
||
7FF57D80D000
|
unkown
|
page readonly
|
||
7FF545185000
|
unkown
|
page readonly
|
||
60E7C8C000
|
unkown
|
page read and write
|
||
1FCD7FF000
|
unkown
|
page read and write
|
||
1B3647F0000
|
heap default
|
page read and write
|
||
1E1D4D90000
|
unkown
|
page readonly
|
||
1F89ED30000
|
unkown
|
page read and write
|
||
1F89EF00000
|
unkown
|
page read and write
|
||
7FF54E0A8000
|
unkown
|
page readonly
|
||
27139C46000
|
unkown
|
page read and write
|
||
26794E55000
|
unkown
|
page read and write
|
||
2741DC44000
|
unkown
|
page read and write
|
||
7FF5A3FAA000
|
unkown
|
page readonly
|
||
1E1D46B0000
|
heap default
|
page read and write
|
||
7FF5ADF42000
|
unkown
|
page readonly
|
||
141CACED000
|
unkown
|
page read and write
|
||
141CACC8000
|
unkown
|
page read and write
|
||
1F89ED50000
|
unkown
|
page readonly
|
||
566937B000
|
unkown
|
page read and write
|
||
7FF539355000
|
unkown
|
page readonly
|
||
7FF54E0CE000
|
unkown
|
page readonly
|
||
7FF57DEFF000
|
unkown
|
page readonly
|
||
7FF54E137000
|
unkown
|
page readonly
|
||
7FF5E1946000
|
unkown
|
page readonly
|
||
7FF57E0B5000
|
unkown
|
page readonly
|
||
1E1D4858000
|
unkown
|
page read and write
|
||
2EA7163C000
|
unkown
|
page read and write
|
||
141CAC6A000
|
unkown
|
page read and write
|
||
1CCD0910000
|
unkown
|
page readonly
|
||
1CCD0930000
|
unkown
|
page readonly
|
||
7FF5B2E3D000
|
unkown
|
page readonly
|
||
20785FB000
|
unkown
|
page read and write
|
||
7FF5782A3000
|
unkown
|
page readonly
|
||
7FF5ADF58000
|
unkown
|
page readonly
|
||
7FF539367000
|
unkown
|
page readonly
|
||
7FF4EF679000
|
unkown
|
page readonly
|
||
2655000
|
unkown
|
page readonly
|
||
1CCCF857000
|
unkown
|
page read and write
|
||
7FF5E18E2000
|
unkown
|
page readonly
|
||
7FF57846D000
|
unkown
|
page readonly
|
||
2A7847A000
|
unkown
|
page read and write
|
||
13EE1FD0000
|
unkown
|
page readonly
|
||
7FF5B2E1F000
|
unkown
|
page readonly
|
||
7FF57837C000
|
unkown
|
page readonly
|
||
1CCCF83D000
|
unkown
|
page read and write
|
||
7FF5A4017000
|
unkown
|
page readonly
|
||
7FF54E134000
|
unkown
|
page readonly
|
||
7FF533819000
|
unkown
|
page readonly
|
||
7FF5E194C000
|
unkown
|
page readonly
|
||
21303060000
|
unkown
|
page read and write
|
||
26794E6E000
|
unkown
|
page read and write
|
||
26794E6D000
|
unkown
|
page read and write
|
||
13EE2056000
|
unkown
|
page read and write
|
||
7FF5ADE60000
|
unkown
|
page readonly
|
There are 1478 hidden memdumps, click here to show them.