Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Dridex-06-bc1b.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\AO965P\PN546Y\718.5
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$Dridex-06-bc1b.xlsm
|
data
|
dropped
|
|
|
|
C:\LO400F\PI909U\960
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\3BA17549-6936-488A-A3B4-7EF0154B3CE5
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9C55CF47.png
|
PNG image data, 415 x 291, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\9E8890DE.png
|
PNG image data, 650 x 85, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F8437211.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\NR7DA722.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\Excel8.0\MSForms.exd
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\QP101F\TL941X\960
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\SD120E\EP146E\960
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58936 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\MAS3QXWU.htm
|
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\841CAADE.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D1372147.png
|
PNG image data, 650 x 85, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D6FDFA9C.png
|
PNG image data, 415 x 291, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\9DFE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabF70C.tmp
|
Microsoft Cabinet archive data, 58936 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarF70D.tmp
|
data
|
dropped
|
|
There are 14 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
'C:\Windows\System32\regsvr32.exe' -s C:\AO965P\PN546Y\718.5.
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
'C:\Windows\System32\regsvr32.exe' -s C:\LO400F\PI909U\960.
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
'C:\Windows\System32\regsvr32.exe' -s C:\SD120E\EP146E\960.
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
'C:\Windows\System32\regsvr32.exe' -s C:\QP101F\TL941X\960.
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://contentstorage.omex.office.net/addinclassifier/officeentities
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://crbug.com/740629)
|
unknown
|
|
|
|
https://github.com/google/closure-compiler/issues/544
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 93 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
compagniamaestro.com
|
199.192.21.36
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
199.192.21.36
|
unknown
|
United States
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
7n3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
8n3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1CDBC
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
s<8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE772
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FontCachePath
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EFC68
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F0B37
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
3o8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
NULL
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
There are 418 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
F7E213B000
|
unkown
|
page read and write
|
|
|
|
7FF591EED000
|
unkown
|
page readonly
|
|
|
|
7FF5490D4000
|
unkown
|
page readonly
|
|
|
|
8EA2C7F000
|
unkown
|
page read and write
|
|
|
|
1BFA2280000
|
unkown
|
page readonly
|
|
|
|
277F2E47000
|
unkown
|
page read and write
|
|
|
|
1D11DB000
|
unkown
|
page read and write
|
|
|
|
16DA28C0000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
1D00000
|
unkown
|
page readonly
|
|
|
|
7FF51AB8B000
|
unkown
|
page readonly
|
|
|
|
2E0091C0000
|
unkown
|
page readonly
|
|
|
|
7FF5234F7000
|
unkown
|
page readonly
|
|
|
|
2E009302000
|
unkown
|
page read and write
|
|
|
|
1BFA0255000
|
unkown
|
page read and write
|
|
|
|
8EA27FC000
|
unkown
|
page read and write
|
|
|
|
1BFA3410000
|
unkown
|
page read and write
|
|
|
|
227A1E50000
|
unkown
|
page read and write
|
|
|
|
8EA21FB000
|
unkown
|
page read and write
|
|
|
|
F7E2A7B000
|
unkown
|
page read and write
|
|
|
|
1BFA2158000
|
unkown
|
page read and write
|
|
|
|
1EB2F024000
|
unkown
|
page read and write
|
|
|
|
7FF51A8A7000
|
unkown
|
page readonly
|
|
|
|
A510275000
|
unkown
|
page read and write
|
|
|
|
277F2E59000
|
unkown
|
page read and write
|
|
|
|
1BFA2142000
|
unkown
|
page read and write
|
|
|
|
7FF54923D000
|
unkown
|
page readonly
|
|
|
|
7FF591DF3000
|
unkown
|
page readonly
|
|
|
|
7FF5A092D000
|
unkown
|
page readonly
|
|
|
|
7A05AFE000
|
unkown
|
page read and write
|
|
|
|
7FF547AAA000
|
unkown
|
page readonly
|
|
|
|
2279CDF0000
|
unkown
|
page read and write
|
|
|
|
7FF529C24000
|
unkown
|
page readonly
|
|
|
|
21291650000
|
unkown
|
page read and write
|
|
|
|
2026000
|
unkown
|
page readonly
|
|
|
|
1BFA026F000
|
unkown
|
page read and write
|
|
|
|
2279CF58000
|
unkown
|
page read and write
|
|
|
|
7FF51AAB8000
|
unkown
|
page readonly
|
|
|
|
E8F3B9B000
|
unkown
|
page read and write
|
|
|
|
2CBA56A0000
|
unkown
|
page readonly
|
|
|
|
1BFA2600000
|
unkown
|
page read and write
|
|
|
|
7FF591D2C000
|
unkown
|
page readonly
|
|
|
|
26582140000
|
unkown
|
page write copy
|
|
|
|
2E00924F000
|
unkown
|
page read and write
|
|
|
|
7FF529B4C000
|
unkown
|
page readonly
|
|
|
|
955C67E000
|
unkown
|
page read and write
|
|
|
|
16DA2470000
|
unkown
|
page read and write
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
2E009308000
|
unkown
|
page read and write
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
2CBA5066000
|
unkown
|
page read and write
|
|
|
|
227A1B10000
|
unkown
|
page read and write
|
|
|
|
1BFA02D0000
|
unkown
|
page read and write
|
|
|
|
7FF58486E000
|
unkown
|
page readonly
|
|
|
|
227A1E50000
|
unkown
|
page readonly
|
|
|
|
2279C641000
|
unkown
|
page read and write
|
|
|
|
7FF5E8DA2000
|
unkown
|
page readonly
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
7FF591D31000
|
unkown
|
page readonly
|
|
|
|
23EB000
|
stack
|
page read and write
|
|
|
|
7FF59200B000
|
unkown
|
page readonly
|
|
|
|
7FF5E8E8E000
|
unkown
|
page readonly
|
|
|
|
227A1C22000
|
unkown
|
page read and write
|
|
|
|
1BFA0376000
|
unkown
|
page read and write
|
|
|
|
1EB2EFB0000
|
unkown
|
page read and write
|
|
|
|
7FF51AB7D000
|
unkown
|
page readonly
|
|
|
|
277F2E31000
|
unkown
|
page read and write
|
|
|
|
7FF549195000
|
unkown
|
page readonly
|
|
|
|
227A1BC0000
|
unkown
|
page read and write
|
|
|
|
1BFA0291000
|
unkown
|
page read and write
|
|
|
|
182BD846000
|
unkown
|
page read and write
|
|
|
|
8EA22FB000
|
unkown
|
page read and write
|
|
|
|
7FF529C0B000
|
unkown
|
page readonly
|
|
|
|
E8F4277000
|
unkown
|
page read and write
|
|
|
|
1BFA029F000
|
unkown
|
page read and write
|
|
|
|
7FF5E8E7F000
|
unkown
|
page readonly
|
|
|
|
7FF591AEF000
|
unkown
|
page readonly
|
|
|
|
7FF54792E000
|
unkown
|
page readonly
|
|
|
|
7FF52363F000
|
unkown
|
page readonly
|
|
|
|
1BFA3610000
|
unkown
|
page read and write
|
|
|
|
7FF51AAD5000
|
unkown
|
page readonly
|
|
|
|
7FF58492D000
|
unkown
|
page readonly
|
|
|
|
7FF523365000
|
unkown
|
page readonly
|
|
|
|
2E009247000
|
unkown
|
page read and write
|
|
|
|
7FF59C415000
|
unkown
|
page readonly
|
|
|
|
227A1C82000
|
unkown
|
page read and write
|
|
|
|
182BD913000
|
unkown
|
page read and write
|
|
|
|
182BD902000
|
unkown
|
page read and write
|
|
|
|
7FF5E8E03000
|
unkown
|
page readonly
|
|
|
|
1BFA2146000
|
unkown
|
page read and write
|
|
|
|
1BFA0170000
|
unkown
|
page readonly
|
|
|
|
1EB2EE20000
|
heap private
|
page read and write
|
|
|
|
7FF52320F000
|
unkown
|
page readonly
|
|
|
|
1D167F000
|
unkown
|
page read and write
|
|
|
|
2029000
|
unkown
|
page readonly
|
|
|
|
1BFA0324000
|
unkown
|
page read and write
|
|
|
|
7FF549178000
|
unkown
|
page readonly
|
|
|
|
1BFA02A5000
|
unkown
|
page read and write
|
|
|
|
7FF529822000
|
unkown
|
page readonly
|
|
|
|
2279D400000
|
unkown
|
page read and write
|
|
|
|
2129163C000
|
unkown
|
page read and write
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
1BFA24C5000
|
unkown
|
page read and write
|
|
|
|
7FF591EF7000
|
unkown
|
page readonly
|
|
|
|
7FF547623000
|
unkown
|
page readonly
|
|
|
|
7FF54924E000
|
unkown
|
page readonly
|
|
|
|
28B58887000
|
unkown
|
page read and write
|
|
|
|
7FF5842D5000
|
unkown
|
page readonly
|
|
|
|
7FF5473B3000
|
unkown
|
page readonly
|
|
|
|
21291713000
|
unkown
|
page read and write
|
|
|
|
1BFA02BE000
|
unkown
|
page read and write
|
|
|
|
21291540000
|
heap private
|
page read and write
|
|
|
|
7FF523514000
|
unkown
|
page readonly
|
|
|
|
7FF59C494000
|
unkown
|
page readonly
|
|
|
|
36A42FE000
|
unkown
|
page read and write
|
|
|
|
1F10000
|
unkown
|
page readonly
|
|
|
|
1EB2F102000
|
unkown
|
page read and write
|
|
|
|
1EB2EFB0000
|
unkown
|
page read and write
|
|
|
|
277F2E5C000
|
unkown
|
page read and write
|
|
|
|
182BD84D000
|
unkown
|
page read and write
|
|
|
|
7FF523624000
|
unkown
|
page readonly
|
|
|
|
277F2D00000
|
heap default
|
page read and write
|
|
|
|
8EA207A000
|
unkown
|
page read and write
|
|
|
|
2279C68C000
|
unkown
|
page read and write
|
|
|
|
28B58F40000
|
unkown
|
page write copy
|
|
|
|
1BFA0040000
|
heap default
|
page read and write
|
|
|
|
1BFA2484000
|
unkown
|
page read and write
|
|
|
|
1BFA216A000
|
unkown
|
page read and write
|
|
|
|
1BFA0200000
|
unkown
|
page read and write
|
|
|
|
26582070000
|
unkown
|
page readonly
|
|
|
|
1BFA2250000
|
unkown
|
page readonly
|
|
|
|
182BDA00000
|
unkown
|
page readonly
|
|
|
|
227A1CA4000
|
unkown
|
page read and write
|
|
|
|
204A000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D3E000
|
unkown
|
page readonly
|
|
|
|
21292000000
|
unkown
|
page readonly
|
|
|
|
2279C702000
|
unkown
|
page read and write
|
|
|
|
1BFA24CE000
|
unkown
|
page read and write
|
|
|
|
7FF5299B7000
|
unkown
|
page readonly
|
|
|
|
1BFA02CF000
|
unkown
|
page read and write
|
|
|
|
8EA29FB000
|
unkown
|
page read and write
|
|
|
|
7FF547A6C000
|
unkown
|
page readonly
|
|
|
|
7FF51A82A000
|
unkown
|
page readonly
|
|
|
|
7FF547B5F000
|
unkown
|
page readonly
|
|
|
|
7FF52333D000
|
unkown
|
page readonly
|
|
|
|
7FF591DF8000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B74000
|
unkown
|
page readonly
|
|
|
|
7FF584A50000
|
unkown
|
page readonly
|
|
|
|
7FF584998000
|
unkown
|
page readonly
|
|
|
|
1BFA2682000
|
unkown
|
page read and write
|
|
|
|
7FF59BCF9000
|
unkown
|
page readonly
|
|
|
|
8B5A7FB000
|
unkown
|
page read and write
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
7FF59BD14000
|
unkown
|
page readonly
|
|
|
|
7FF51AA93000
|
unkown
|
page readonly
|
|
|
|
2011000
|
unkown
|
page readonly
|
|
|
|
8B5A9F9000
|
unkown
|
page read and write
|
|
|
|
F5B077B000
|
unkown
|
page read and write
|
|
|
|
7FF5294B1000
|
unkown
|
page readonly
|
|
|
|
7FF5E8EBF000
|
unkown
|
page readonly
|
|
|
|
277F2E26000
|
unkown
|
page read and write
|
|
|
|
7FF584A6B000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DF5000
|
unkown
|
page readonly
|
|
|
|
2279CDC1000
|
unkown
|
page read and write
|
|
|
|
7FF584A38000
|
unkown
|
page readonly
|
|
|
|
A5106FF000
|
unkown
|
page read and write
|
|
|
|
277F2E5E000
|
unkown
|
page read and write
|
|
|
|
2CBA5000000
|
unkown
|
page read and write
|
|
|
|
227A1F50000
|
unkown
|
page readonly
|
|
|
|
7FF52360B000
|
unkown
|
page readonly
|
|
|
|
7A05BFE000
|
unkown
|
page read and write
|
|
|
|
ABF0FF000
|
unkown
|
page read and write
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
36A427B000
|
unkown
|
page read and write
|
|
|
|
7FF529BFF000
|
unkown
|
page readonly
|
|
|
|
1EB2F200000
|
unkown
|
page readonly
|
|
|
|
275A000
|
heap default
|
page read and write
|
|
|
|
7FF51A95C000
|
unkown
|
page readonly
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
7FF5A095E000
|
unkown
|
page readonly
|
|
|
|
F5B11FF000
|
unkown
|
page read and write
|
|
|
|
1BFA0386000
|
unkown
|
page read and write
|
|
|
|
7FF584A64000
|
unkown
|
page readonly
|
|
|
|
F5B0AFE000
|
unkown
|
page read and write
|
|
|
|
1BFA02FD000
|
unkown
|
page read and write
|
|
|
|
7FF59201D000
|
unkown
|
page readonly
|
|
|
|
7FF591D3D000
|
unkown
|
page readonly
|
|
|
|
7FF529947000
|
unkown
|
page readonly
|
|
|
|
7FF591F6D000
|
unkown
|
page readonly
|
|
|
|
7FF4EB50A000
|
unkown
|
page readonly
|
|
|
|
2920000
|
unkown
|
page readonly
|
|
|
|
208D000
|
unkown
|
page readonly
|
|
|
|
7FF58464F000
|
unkown
|
page readonly
|
|
|
|
7FF5849B5000
|
unkown
|
page readonly
|
|
|
|
7FF52980F000
|
unkown
|
page readonly
|
|
|
|
7FF5A0AC9000
|
unkown
|
page readonly
|
|
|
|
7FF4EB4ED000
|
unkown
|
page readonly
|
|
|
|
7FF59C49B000
|
unkown
|
page readonly
|
|
|
|
1BFA2702000
|
unkown
|
page read and write
|
|
|
|
7FF5E8704000
|
unkown
|
page readonly
|
|
|
|
F7E2E7E000
|
unkown
|
page read and write
|
|
|
|
7FF5A0953000
|
unkown
|
page readonly
|
|
|
|
7FF5233DD000
|
unkown
|
page readonly
|
|
|
|
1BFA0345000
|
unkown
|
page read and write
|
|
|
|
2CBA5002000
|
unkown
|
page read and write
|
|
|
|
1BFA2115000
|
unkown
|
page read and write
|
|
|
|
227A1E50000
|
unkown
|
page read and write
|
|
|
|
2CBA5076000
|
unkown
|
page read and write
|
|
|
|
7FF547B5F000
|
unkown
|
page readonly
|
|
|
|
7FF529BF8000
|
unkown
|
page readonly
|
|
|
|
1BFA2106000
|
unkown
|
page read and write
|
|
|
|
36A44FE000
|
unkown
|
page read and write
|
|
|
|
2279C590000
|
unkown
|
page read and write
|
|
|
|
227A1E00000
|
unkown
|
page read and write
|
|
|
|
7FF5849C3000
|
unkown
|
page readonly
|
|
|
|
227A1BF4000
|
unkown
|
page write copy
|
|
|
|
955C4FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B48000
|
unkown
|
page readonly
|
|
|
|
7FF54904E000
|
unkown
|
page readonly
|
|
|
|
7FF52352C000
|
unkown
|
page readonly
|
|
|
|
7FF4EB590000
|
unkown
|
page readonly
|
|
|
|
7FF5A0659000
|
unkown
|
page readonly
|
|
|
|
16DA0910000
|
heap private
|
page read and write
|
|
|
|
2079000
|
unkown
|
page readonly
|
|
|
|
1EB2F590000
|
unkown
|
page readonly
|
|
|
|
7FF5918A3000
|
unkown
|
page readonly
|
|
|
|
7FF591F47000
|
unkown
|
page readonly
|
|
|
|
1BFA026E000
|
unkown
|
page read and write
|
|
|
|
7FF584937000
|
unkown
|
page readonly
|
|
|
|
1BFA2200000
|
unkown
|
page readonly
|
|
|
|
F5B0FFF000
|
unkown
|
page read and write
|
|
|
|
227A1B20000
|
unkown
|
page read and write
|
|
|
|
1BFA03E9000
|
unkown
|
page read and write
|
|
|
|
227A1B11000
|
unkown
|
page read and write
|
|
|
|
1BFA2187000
|
unkown
|
page read and write
|
|
|
|
7FF51AA74000
|
unkown
|
page readonly
|
|
|
|
182BDAD0000
|
unkown
|
page readonly
|
|
|
|
8B5A67B000
|
unkown
|
page read and write
|
|
|
|
277F2E29000
|
unkown
|
page read and write
|
|
|
|
7FF5234F0000
|
unkown
|
page readonly
|
|
|
|
1EB2EE80000
|
heap default
|
page read and write
|
|
|
|
2075000
|
unkown
|
page readonly
|
|
|
|
227A1BC0000
|
unkown
|
page write copy
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
1EB2EE90000
|
unkown
|
page readonly
|
|
|
|
1BFA2583000
|
unkown
|
page read and write
|
|
|
|
7FF523518000
|
unkown
|
page readonly
|
|
|
|
955C3FB000
|
unkown
|
page read and write
|
|
|
|
7FF529B79000
|
unkown
|
page readonly
|
|
|
|
7FF52361D000
|
unkown
|
page readonly
|
|
|
|
182BDF30000
|
unkown
|
page readonly
|
|
|
|
227A1CAE000
|
unkown
|
page read and write
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
7FF4EB490000
|
unkown
|
page readonly
|
|
|
|
2E00922A000
|
unkown
|
page read and write
|
|
|
|
1BFA2583000
|
unkown
|
page read and write
|
|
|
|
277F2E7A000
|
unkown
|
page read and write
|
|
|
|
7FF4EB5BF000
|
unkown
|
page readonly
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
1BFA2240000
|
unkown
|
page read and write
|
|
|
|
955C77E000
|
unkown
|
page read and write
|
|
|
|
7FF51AB9B000
|
unkown
|
page readonly
|
|
|
|
1BFA214A000
|
unkown
|
page read and write
|
|
|
|
1BFA031F000
|
unkown
|
page read and write
|
|
|
|
1D15FA000
|
unkown
|
page read and write
|
|
|
|
7FF549153000
|
unkown
|
page readonly
|
|
|
|
182BD802000
|
unkown
|
page read and write
|
|
|
|
ABE96C000
|
unkown
|
page read and write
|
|
|
|
7FF51AB9D000
|
unkown
|
page readonly
|
|
|
|
2279CF18000
|
unkown
|
page read and write
|
|
|
|
277F2E7D000
|
unkown
|
page read and write
|
|
|
|
28B58868000
|
unkown
|
page read and write
|
|
|
|
16DA0A13000
|
unkown
|
page read and write
|
|
|
|
227A1B34000
|
unkown
|
page read and write
|
|
|
|
7FF591F18000
|
unkown
|
page readonly
|
|
|
|
7FF4EB4CD000
|
unkown
|
page readonly
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
21291685000
|
unkown
|
page read and write
|
|
|
|
2279CE00000
|
unkown
|
page read and write
|
|
|
|
1BFA2110000
|
unkown
|
page read and write
|
|
|
|
7FF547638000
|
unkown
|
page readonly
|
|
|
|
277F2D10000
|
unkown
|
page readonly
|
|
|
|
277F2E4D000
|
unkown
|
page read and write
|
|
|
|
7FF547A99000
|
unkown
|
page readonly
|
|
|
|
7FF5478AD000
|
unkown
|
page readonly
|
|
|
|
2E00928A000
|
unkown
|
page read and write
|
|
|
|
7FF5235FF000
|
unkown
|
page readonly
|
|
|
|
1BFA214E000
|
unkown
|
page read and write
|
|
|
|
2E009313000
|
unkown
|
page read and write
|
|
|
|
2279D5F0000
|
unkown
|
page readonly
|
|
|
|
7FF5E8EBF000
|
unkown
|
page readonly
|
|
|
|
7FF58466A000
|
unkown
|
page readonly
|
|
|
|
7FF5A09DF000
|
unkown
|
page readonly
|
|
|
|
277F2E83000
|
unkown
|
page read and write
|
|
|
|
7FF523606000
|
unkown
|
page readonly
|
|
|
|
227A1AF0000
|
unkown
|
page read and write
|
|
|
|
7FF547B18000
|
unkown
|
page readonly
|
|
|
|
7FF548F13000
|
unkown
|
page readonly
|
|
|
|
1BFA026B000
|
unkown
|
page read and write
|
|
|
|
8EA1F7A000
|
unkown
|
page read and write
|
|
|
|
2279D620000
|
unkown
|
page readonly
|
|
|
|
28B587D0000
|
unkown
|
page read and write
|
|
|
|
7FF5E896F000
|
unkown
|
page readonly
|
|
|
|
7FF529B83000
|
unkown
|
page readonly
|
|
|
|
F7E2D7C000
|
unkown
|
page read and write
|
|
|
|
2CBA5113000
|
unkown
|
page read and write
|
|
|
|
1BFA2106000
|
unkown
|
page read and write
|
|
|
|
1BFA1CA0000
|
unkown
|
page readonly
|
|
|
|
1BFA2117000
|
unkown
|
page read and write
|
|
|
|
1BFA2602000
|
unkown
|
page read and write
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
7FF591F8A000
|
unkown
|
page readonly
|
|
|
|
1BFA3010000
|
unkown
|
page read and write
|
|
|
|
1BFA0213000
|
unkown
|
page read and write
|
|
|
|
1BFA028C000
|
unkown
|
page read and write
|
|
|
|
1BFA0365000
|
unkown
|
page read and write
|
|
|
|
1BFA0313000
|
unkown
|
page read and write
|
|
|
|
277F2E69000
|
unkown
|
page read and write
|
|
|
|
7FF591F83000
|
unkown
|
page readonly
|
|
|
|
2279D600000
|
unkown
|
page readonly
|
|
|
|
7FF5A0A9C000
|
unkown
|
page readonly
|
|
|
|
7FF59BCFC000
|
unkown
|
page readonly
|
|
|
|
2034000
|
unkown
|
page readonly
|
|
|
|
7FF5849AD000
|
unkown
|
page readonly
|
|
|
|
1BFA2116000
|
unkown
|
page read and write
|
|
|
|
7FF523558000
|
unkown
|
page readonly
|
|
|
|
277F2E5A000
|
unkown
|
page read and write
|
|
|
|
1BFA21CC000
|
unkown
|
page read and write
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
ABEE7E000
|
unkown
|
page read and write
|
|
|
|
206C000
|
unkown
|
page readonly
|
|
|
|
7FF523347000
|
unkown
|
page readonly
|
|
|
|
7FF591BE3000
|
unkown
|
page readonly
|
|
|
|
7A0587E000
|
unkown
|
page read and write
|
|
|
|
2CBA5A00000
|
unkown
|
page readonly
|
|
|
|
7FF529C2E000
|
unkown
|
page readonly
|
|
|
|
227A19D0000
|
unkown
|
page read and write
|
|
|
|
7FF5A0A97000
|
unkown
|
page readonly
|
|
|
|
7FF584A3F000
|
unkown
|
page readonly
|
|
|
|
227A1C00000
|
unkown
|
page read and write
|
|
|
|
7FF54918D000
|
unkown
|
page readonly
|
|
|
|
7FF51AAE3000
|
unkown
|
page readonly
|
|
|
|
2658226B000
|
unkown
|
page read and write
|
|
|
|
7FF51AAEA000
|
unkown
|
page readonly
|
|
|
|
7FF591B71000
|
unkown
|
page readonly
|
|
|
|
2E009200000
|
unkown
|
page read and write
|
|
|
|
7FF52358A000
|
unkown
|
page readonly
|
|
|
|
7FF584787000
|
unkown
|
page readonly
|
|
|
|
7FF59C3C8000
|
unkown
|
page readonly
|
|
|
|
182BDF40000
|
unkown
|
page read and write
|
|
|
|
227A1E10000
|
unkown
|
page read and write
|
|
|
|
7FF51A93D000
|
unkown
|
page readonly
|
|
|
|
ABF07D000
|
unkown
|
page read and write
|
|
|
|
28B58902000
|
unkown
|
page read and write
|
|
|
|
7FF584A7B000
|
unkown
|
page readonly
|
|
|
|
7A05CFF000
|
unkown
|
page read and write
|
|
|
|
955C5FE000
|
unkown
|
page read and write
|
|
|
|
8EA297D000
|
unkown
|
page read and write
|
|
|
|
7FF52362B000
|
unkown
|
page readonly
|
|
|
|
2CBA5102000
|
unkown
|
page read and write
|
|
|
|
955BFFB000
|
unkown
|
page read and write
|
|
|
|
7FF5E8E9D000
|
unkown
|
page readonly
|
|
|
|
7FF54925F000
|
unkown
|
page readonly
|
|
|
|
7FF547B4B000
|
unkown
|
page readonly
|
|
|
|
7FF591BE0000
|
unkown
|
page readonly
|
|
|
|
7FF547A57000
|
unkown
|
page readonly
|
|
|
|
28B588BB000
|
unkown
|
page read and write
|
|
|
|
21291646000
|
unkown
|
page read and write
|
|
|
|
1BFA02F7000
|
unkown
|
page read and write
|
|
|
|
2E009270000
|
unkown
|
page read and write
|
|
|
|
28B588C3000
|
unkown
|
page read and write
|
|
|
|
1BFA21F5000
|
unkown
|
page read and write
|
|
|
|
182BD900000
|
unkown
|
page read and write
|
|
|
|
2069000
|
unkown
|
page readonly
|
|
|
|
2279C69E000
|
unkown
|
page read and write
|
|
|
|
227A19E0000
|
unkown
|
page read and write
|
|
|
|
7FF4EB5A4000
|
unkown
|
page readonly
|
|
|
|
7FF529B14000
|
unkown
|
page readonly
|
|
|
|
1BFA3010000
|
unkown
|
page read and write
|
|
|
|
277F2E40000
|
unkown
|
page read and write
|
|
|
|
1BFA0367000
|
unkown
|
page read and write
|
|
|
|
1BFA01C0000
|
heap private
|
page read and write
|
|
|
|
227A1CB0000
|
unkown
|
page read and write
|
|
|
|
7FF54925B000
|
unkown
|
page readonly
|
|
|
|
227A1BC4000
|
unkown
|
page readonly
|
|
|
|
21291622000
|
unkown
|
page read and write
|
|
|
|
1BFA0365000
|
unkown
|
page read and write
|
|
|
|
7FF58465D000
|
unkown
|
page readonly
|
|
|
|
7FF4EB525000
|
unkown
|
page readonly
|
|
|
|
2E009300000
|
unkown
|
page read and write
|
|
|
|
2658226B000
|
unkown
|
page read and write
|
|
|
|
1BFA21B0000
|
unkown
|
page read and write
|
|
|
|
8B5A97A000
|
unkown
|
page read and write
|
|
|
|
28B58740000
|
heap private
|
page read and write
|
|
|
|
7FF52993D000
|
unkown
|
page readonly
|
|
|
|
7FF529C06000
|
unkown
|
page readonly
|
|
|
|
26582400000
|
unkown
|
page readonly
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
1BFA2802000
|
unkown
|
page read and write
|
|
|
|
7FF523533000
|
unkown
|
page readonly
|
|
|
|
1BFA2157000
|
unkown
|
page read and write
|
|
|
|
2860000
|
unkown
|
page readonly
|
|
|
|
2279C6FD000
|
unkown
|
page read and write
|
|
|
|
7FF5235A3000
|
unkown
|
page readonly
|
|
|
|
8EA24FD000
|
unkown
|
page read and write
|
|
|
|
2279D630000
|
unkown
|
page readonly
|
|
|
|
277F2CA0000
|
heap private
|
page read and write
|
|
|
|
7FF548D29000
|
unkown
|
page readonly
|
|
|
|
36A3D6B000
|
unkown
|
page read and write
|
|
|
|
7FF51AAA8000
|
unkown
|
page readonly
|
|
|
|
7FF5234DF000
|
unkown
|
page readonly
|
|
|
|
7FF529B8A000
|
unkown
|
page readonly
|
|
|
|
7FF5479AF000
|
unkown
|
page readonly
|
|
|
|
7FF59C480000
|
unkown
|
page readonly
|
|
|
|
955C2FA000
|
unkown
|
page read and write
|
|
|
|
182BD852000
|
unkown
|
page read and write
|
|
|
|
7FF59C3E5000
|
unkown
|
page readonly
|
|
|
|
8B5A6FE000
|
unkown
|
page read and write
|
|
|
|
182BD83C000
|
unkown
|
page read and write
|
|
|
|
7FF549218000
|
unkown
|
page readonly
|
|
|
|
1BFA0366000
|
unkown
|
page read and write
|
|
|
|
7FF59C47B000
|
unkown
|
page readonly
|
|
|
|
2E009213000
|
unkown
|
page read and write
|
|
|
|
227A1F70000
|
unkown
|
page readonly
|
|
|
|
20EB000
|
unkown
|
page readonly
|
|
|
|
7FF529C3F000
|
unkown
|
page readonly
|
|
|
|
2E009F40000
|
unkown
|
page readonly
|
|
|
|
7FF591899000
|
unkown
|
page readonly
|
|
|
|
212915D0000
|
unkown
|
page read and write
|
|
|
|
7FF549023000
|
unkown
|
page readonly
|
|
|
|
1BFA026B000
|
unkown
|
page read and write
|
|
|
|
182BD813000
|
unkown
|
page read and write
|
|
|
|
955C0F9000
|
unkown
|
page read and write
|
|
|
|
36A45FC000
|
unkown
|
page read and write
|
|
|
|
7FF529B6D000
|
unkown
|
page readonly
|
|
|
|
7FF523522000
|
unkown
|
page readonly
|
|
|
|
7FF547B26000
|
unkown
|
page readonly
|
|
|
|
21291702000
|
unkown
|
page read and write
|
|
|
|
7FF54924B000
|
unkown
|
page readonly
|
|
|
|
7FF54921F000
|
unkown
|
page readonly
|
|
|
|
7FF523390000
|
unkown
|
page readonly
|
|
|
|
1BFA03E8000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
8EA257D000
|
unkown
|
page read and write
|
|
|
|
7FF547813000
|
unkown
|
page readonly
|
|
|
|
2094000
|
unkown
|
page readonly
|
|
|
|
182BD7F0000
|
unkown
|
page readonly
|
|
|
|
7FF59C163000
|
unkown
|
page readonly
|
|
|
|
1BFA0376000
|
unkown
|
page read and write
|
|
|
|
7FF529B50000
|
unkown
|
page readonly
|
|
|
|
20FC000
|
unkown
|
page readonly
|
|
|
|
7FF5491C5000
|
unkown
|
page readonly
|
|
|
|
28B5882A000
|
unkown
|
page read and write
|
|
|
|
1BFA2602000
|
unkown
|
page read and write
|
|
|
|
1BFA24D3000
|
unkown
|
page read and write
|
|
|
|
1BFA24A4000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B5B000
|
unkown
|
page readonly
|
|
|
|
28B588CC000
|
unkown
|
page read and write
|
|
|
|
7FF547A53000
|
unkown
|
page readonly
|
|
|
|
2279C65E000
|
unkown
|
page read and write
|
|
|
|
28B5883E000
|
unkown
|
page read and write
|
|
|
|
955BEF7000
|
unkown
|
page read and write
|
|
|
|
227A1AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5233B7000
|
unkown
|
page readonly
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
277F3000000
|
unkown
|
page readonly
|
|
|
|
8EA26FC000
|
unkown
|
page read and write
|
|
|
|
2CBA4EC0000
|
heap private
|
page read and write
|
|
|
|
7FF5E8EBD000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DCC000
|
unkown
|
page readonly
|
|
|
|
7FF59C49E000
|
unkown
|
page readonly
|
|
|
|
7FF529BA3000
|
unkown
|
page readonly
|
|
|
|
1BFA3410000
|
unkown
|
page read and write
|
|
|
|
2CBA5013000
|
unkown
|
page read and write
|
|
|
|
2CBA5063000
|
unkown
|
page read and write
|
|
|
|
7FF4EB59D000
|
unkown
|
page readonly
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
2E0094D0000
|
unkown
|
page readonly
|
|
|
|
1BFA21F7000
|
unkown
|
page read and write
|
|
|
|
ABEDFE000
|
unkown
|
page read and write
|
|
|
|
7FF547973000
|
unkown
|
page readonly
|
|
|
|
2CBA505B000
|
unkown
|
page read and write
|
|
|
|
1BFA2185000
|
unkown
|
page read and write
|
|
|
|
8EA20FB000
|
unkown
|
page read and write
|
|
|
|
2CBA502A000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B56000
|
unkown
|
page readonly
|
|
|
|
1BF9FFE0000
|
heap private
|
page read and write
|
|
|
|
7FF51A932000
|
unkown
|
page readonly
|
|
|
|
26582256000
|
unkown
|
page read and write
|
|
|
|
227A1CA8000
|
unkown
|
page read and write
|
|
|
|
7FF529C3F000
|
unkown
|
page readonly
|
|
|
|
7A055AE000
|
unkown
|
page read and write
|
|
|
|
1BFA2742000
|
unkown
|
page read and write
|
|
|
|
1BFA01B0000
|
unkown
|
page readonly
|
|
|
|
277F2DE0000
|
unkown
|
page readonly
|
|
|
|
1F34000
|
unkown
|
page readonly
|
|
|
|
7FF591E77000
|
unkown
|
page readonly
|
|
|
|
7FF59C3F3000
|
unkown
|
page readonly
|
|
|
|
1BFA2439000
|
unkown
|
page read and write
|
|
|
|
182BD855000
|
unkown
|
page read and write
|
|
|
|
7FF59203D000
|
unkown
|
page readonly
|
|
|
|
23AC000
|
unkown
|
page read and write
|
|
|
|
A5105FF000
|
unkown
|
page read and write
|
|
|
|
1BFA0295000
|
unkown
|
page read and write
|
|
|
|
277F2E55000
|
unkown
|
page read and write
|
|
|
|
7FF5A09A3000
|
unkown
|
page readonly
|
|
|
|
955C97E000
|
unkown
|
page read and write
|
|
|
|
277F2E56000
|
unkown
|
page read and write
|
|
|
|
1BFA02BC000
|
unkown
|
page read and write
|
|
|
|
A5102FE000
|
unkown
|
page read and write
|
|
|
|
7FF591FFF000
|
unkown
|
page readonly
|
|
|
|
2279C4A0000
|
unkown
|
page readonly
|
|
|
|
1BFA0302000
|
unkown
|
page read and write
|
|
|
|
7FF5E8E78000
|
unkown
|
page readonly
|
|
|
|
7FF549157000
|
unkown
|
page readonly
|
|
|
|
16DA0980000
|
unkown
|
page write copy
|
|
|
|
2CBA5400000
|
unkown
|
page readonly
|
|
|
|
7FF52344D000
|
unkown
|
page readonly
|
|
|
|
1EB2F660000
|
unkown
|
page read and write
|
|
|
|
1EB2F802000
|
unkown
|
page read and write
|
|
|
|
26582229000
|
unkown
|
page read and write
|
|
|
|
F5B0EFF000
|
unkown
|
page read and write
|
|
|
|
7FF59C4AB000
|
unkown
|
page readonly
|
|
|
|
2CBA5054000
|
unkown
|
page read and write
|
|
|
|
20F1000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CD6000
|
unkown
|
page readonly
|
|
|
|
7FF51AA1E000
|
unkown
|
page readonly
|
|
|
|
1BFA0354000
|
unkown
|
page read and write
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
7FF4EB578000
|
unkown
|
page readonly
|
|
|
|
1BFA2002000
|
unkown
|
page read and write
|
|
|
|
7FF591CFF000
|
unkown
|
page readonly
|
|
|
|
227A19A0000
|
unkown
|
page readonly
|
|
|
|
ABEF7E000
|
unkown
|
page read and write
|
|
|
|
7FF5A0A87000
|
unkown
|
page readonly
|
|
|
|
7FF5E8E8B000
|
unkown
|
page readonly
|
|
|
|
7FF547B4E000
|
unkown
|
page readonly
|
|
|
|
7FF591D2A000
|
unkown
|
page readonly
|
|
|
|
1BFA2210000
|
unkown
|
page read and write
|
|
|
|
7FF52363F000
|
unkown
|
page readonly
|
|
|
|
1BFA3310000
|
unkown
|
page read and write
|
|
|
|
2279CF02000
|
unkown
|
page read and write
|
|
|
|
1BFA21C8000
|
unkown
|
page read and write
|
|
|
|
1BFA2210000
|
unkown
|
page read and write
|
|
|
|
7FF58488D000
|
unkown
|
page readonly
|
|
|
|
7FF5230EF000
|
unkown
|
page readonly
|
|
|
|
28B587B0000
|
unkown
|
page readonly
|
|
|
|
277F2F02000
|
unkown
|
page read and write
|
|
|
|
7FF59C476000
|
unkown
|
page readonly
|
|
|
|
2279C430000
|
heap private
|
page read and write
|
|
|
|
2E0091E0000
|
unkown
|
page read and write
|
|
|
|
7FF529AF7000
|
unkown
|
page readonly
|
|
|
|
7FF591F58000
|
unkown
|
page readonly
|
|
|
|
26582269000
|
unkown
|
page read and write
|
|
|
|
ABF1FD000
|
unkown
|
page read and write
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
28B58800000
|
unkown
|
page read and write
|
|
|
|
277F2E41000
|
unkown
|
page read and write
|
|
|
|
1BFA2230000
|
unkown
|
page read and write
|
|
|
|
2040000
|
unkown
|
page readonly
|
|
|
|
182BE002000
|
unkown
|
page read and write
|
|
|
|
7FF584662000
|
unkown
|
page readonly
|
|
|
|
7FF52322A000
|
unkown
|
page readonly
|
|
|
|
7FF584930000
|
unkown
|
page readonly
|
|
|
|
7FF549199000
|
unkown
|
page readonly
|
|
|
|
21291600000
|
unkown
|
page read and write
|
|
|
|
7FF4EB5AE000
|
unkown
|
page readonly
|
|
|
|
205B000
|
unkown
|
page readonly
|
|
|
|
7FF5E8C52000
|
unkown
|
page readonly
|
|
|
|
1BFA3010000
|
unkown
|
page read and write
|
|
|
|
F5B0DFE000
|
unkown
|
page read and write
|
|
|
|
1BFA3000000
|
unkown
|
page read and write
|
|
|
|
2658226A000
|
unkown
|
page read and write
|
|
|
|
2680000
|
unkown
|
page readonly
|
|
|
|
7FF584A5D000
|
unkown
|
page readonly
|
|
|
|
E8F407E000
|
unkown
|
page read and write
|
|
|
|
1EB2F03D000
|
unkown
|
page read and write
|
|
|
|
7FF5A0AF5000
|
unkown
|
page readonly
|
|
|
|
F7E28FC000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C0A000
|
unkown
|
page readonly
|
|
|
|
7FF523477000
|
unkown
|
page readonly
|
|
|
|
2279C666000
|
unkown
|
page read and write
|
|
|
|
7FF5A0668000
|
unkown
|
page readonly
|
|
|
|
E8F3FF5000
|
unkown
|
page read and write
|
|
|
|
277F3460000
|
unkown
|
page read and write
|
|
|
|
7FF5A08DD000
|
unkown
|
page readonly
|
|
|
|
1BFA2782000
|
unkown
|
page read and write
|
|
|
|
182BD908000
|
unkown
|
page read and write
|
|
|
|
8EA2BFC000
|
unkown
|
page read and write
|
|
|
|
7FF529C2B000
|
unkown
|
page readonly
|
|
|
|
2850000
|
unkown
|
page readonly
|
|
|
|
227A1EA0000
|
unkown
|
page readonly
|
|
|
|
28B587C0000
|
unkown
|
page readonly
|
|
|
|
21292340000
|
unkown
|
page readonly
|
|
|
|
227A1F30000
|
unkown
|
page readonly
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
7FF529C3B000
|
unkown
|
page readonly
|
|
|
|
7FF51AB84000
|
unkown
|
page readonly
|
|
|
|
7FF59202E000
|
unkown
|
page readonly
|
|
|
|
7FF522E95000
|
unkown
|
page readonly
|
|
|
|
20F5000
|
unkown
|
page readonly
|
|
|
|
2061000
|
unkown
|
page readonly
|
|
|
|
1EB2F002000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B8F000
|
unkown
|
page readonly
|
|
|
|
2E0091D0000
|
unkown
|
page readonly
|
|
|
|
1BFA2583000
|
unkown
|
page read and write
|
|
|
|
7FF529C10000
|
unkown
|
page readonly
|
|
|
|
277F2E3A000
|
unkown
|
page read and write
|
|
|
|
7FF547AA3000
|
unkown
|
page readonly
|
|
|
|
8EA1EFF000
|
unkown
|
page read and write
|
|
|
|
7FF59C3FA000
|
unkown
|
page readonly
|
|
|
|
16DA0970000
|
heap default
|
page read and write
|
|
|
|
7FF5849B9000
|
unkown
|
page readonly
|
|
|
|
1BFA2169000
|
unkown
|
page read and write
|
|
|
|
ABECFF000
|
unkown
|
page read and write
|
|
|
|
277F2E66000
|
unkown
|
page read and write
|
|
|
|
16DA0A29000
|
unkown
|
page read and write
|
|
|
|
7FF51A89D000
|
unkown
|
page readonly
|
|
|
|
7FF5479D4000
|
unkown
|
page readonly
|
|
|
|
7FF5E8E0A000
|
unkown
|
page readonly
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
1D147F000
|
unkown
|
page read and write
|
|
|
|
1BFA2642000
|
unkown
|
page read and write
|
|
|
|
1EB2EF80000
|
unkown
|
page read and write
|
|
|
|
2650000
|
unkown
|
page read and write
|
|
|
|
28B59200000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B7B000
|
unkown
|
page readonly
|
|
|
|
7FF548D23000
|
unkown
|
page readonly
|
|
|
|
1BFA0229000
|
unkown
|
page read and write
|
|
|
|
2030000
|
unkown
|
page readonly
|
|
|
|
8EA217A000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B86000
|
unkown
|
page readonly
|
|
|
|
227A1C3F000
|
unkown
|
page read and write
|
|
|
|
227A1C63000
|
unkown
|
page read and write
|
|
|
|
7A059FE000
|
unkown
|
page read and write
|
|
|
|
277F3602000
|
unkown
|
page read and write
|
|
|
|
7FF591BB4000
|
unkown
|
page readonly
|
|
|
|
7FF5847A5000
|
unkown
|
page readonly
|
|
|
|
7FF51AB6B000
|
unkown
|
page readonly
|
|
|
|
1BFA21F5000
|
unkown
|
page read and write
|
|
|
|
2279C570000
|
unkown
|
page readonly
|
|
|
|
2279D430000
|
unkown
|
page read and write
|
|
|
|
7FF51AAAC000
|
unkown
|
page readonly
|
|
|
|
7FF4EB5AB000
|
unkown
|
page readonly
|
|
|
|
7FF4EB5BD000
|
unkown
|
page readonly
|
|
|
|
7FF5A0AC5000
|
unkown
|
page readonly
|
|
|
|
7FF529965000
|
unkown
|
page readonly
|
|
|
|
2CBA4F30000
|
unkown
|
page readonly
|
|
|
|
227A1C40000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
2107000
|
unkown
|
page readonly
|
|
|
|
F5B09FC000
|
unkown
|
page read and write
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
182BD800000
|
unkown
|
page read and write
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
227A1C89000
|
unkown
|
page read and write
|
|
|
|
8EA1E7A000
|
unkown
|
page read and write
|
|
|
|
7FF591F22000
|
unkown
|
page readonly
|
|
|
|
7FF547A8D000
|
unkown
|
page readonly
|
|
|
|
1FFD000
|
unkown
|
page readonly
|
|
|
|
1BFA0367000
|
unkown
|
page read and write
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
7FF591EF0000
|
unkown
|
page readonly
|
|
|
|
21291800000
|
unkown
|
page readonly
|
|
|
|
7FF52362E000
|
unkown
|
page readonly
|
|
|
|
7FF5A0A04000
|
unkown
|
page readonly
|
|
|
|
16DA2570000
|
unkown
|
page readonly
|
|
|
|
28B58813000
|
unkown
|
page read and write
|
|
|
|
7FF584A46000
|
unkown
|
page readonly
|
|
|
|
7FF4EB35D000
|
unkown
|
page readonly
|
|
|
|
ABF2FD000
|
unkown
|
page read and write
|
|
|
|
2279CF59000
|
unkown
|
page read and write
|
|
|
|
1BFA2111000
|
unkown
|
page read and write
|
|
|
|
1BFA0276000
|
unkown
|
page read and write
|
|
|
|
F7E2B7C000
|
unkown
|
page read and write
|
|
|
|
8EA1C7B000
|
unkown
|
page read and write
|
|
|
|
182BE200000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B60000
|
unkown
|
page readonly
|
|
|
|
7FF5E8E25000
|
unkown
|
page readonly
|
|
|
|
F5B0BFF000
|
unkown
|
page read and write
|
|
|
|
227A1C57000
|
unkown
|
page read and write
|
|
|
|
1BFA2170000
|
unkown
|
page read and write
|
|
|
|
7FF59C3A7000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B7E000
|
unkown
|
page readonly
|
|
|
|
227A1BE4000
|
unkown
|
page readonly
|
|
|
|
2279D510000
|
unkown
|
page read and write
|
|
|
|
207D000
|
unkown
|
page readonly
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
16DA0CD0000
|
unkown
|
page readonly
|
|
|
|
F7E2C7E000
|
unkown
|
page read and write
|
|
|
|
1BFA2220000
|
unkown
|
page read and write
|
|
|
|
227A1BF7000
|
unkown
|
page write copy
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
7FF5231E0000
|
unkown
|
page readonly
|
|
|
|
2129162A000
|
unkown
|
page read and write
|
|
|
|
8EA277B000
|
unkown
|
page read and write
|
|
|
|
1BFA2170000
|
unkown
|
page read and write
|
|
|
|
F7E277F000
|
unkown
|
page read and write
|
|
|
|
1BFA0334000
|
unkown
|
page read and write
|
|
|
|
7FF529AF0000
|
unkown
|
page readonly
|
|
|
|
7FF591D61000
|
unkown
|
page readonly
|
|
|
|
277F2E57000
|
unkown
|
page read and write
|
|
|
|
16DA0A3F000
|
unkown
|
page read and write
|
|
|
|
2750000
|
heap default
|
page read and write
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
16DA0A02000
|
unkown
|
page read and write
|
|
|
|
2279CDE3000
|
unkown
|
page read and write
|
|
|
|
7FF4EB268000
|
unkown
|
page readonly
|
|
|
|
8EA2AFA000
|
unkown
|
page read and write
|
|
|
|
182BD7E0000
|
heap default
|
page read and write
|
|
|
|
7FF4EB57F000
|
unkown
|
page readonly
|
|
|
|
2CBA5670000
|
unkown
|
page readonly
|
|
|
|
7FF592024000
|
unkown
|
page readonly
|
|
|
|
1BFA21F5000
|
unkown
|
page read and write
|
|
|
|
1BFA03A7000
|
unkown
|
page read and write
|
|
|
|
227A1AF0000
|
unkown
|
page read and write
|
|
|
|
7FF549244000
|
unkown
|
page readonly
|
|
|
|
277F2E42000
|
unkown
|
page read and write
|
|
|
|
F5B10FF000
|
unkown
|
page read and write
|
|
|
|
2279D640000
|
unkown
|
page readonly
|
|
|
|
7FF547A78000
|
unkown
|
page readonly
|
|
|
|
1BFA2102000
|
unkown
|
page read and write
|
|
|
|
7FF59203F000
|
unkown
|
page readonly
|
|
|
|
2E00928E000
|
unkown
|
page read and write
|
|
|
|
7FF52356D000
|
unkown
|
page readonly
|
|
|
|
7FF591BCF000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B8B000
|
unkown
|
page readonly
|
|
|
|
1BFA2170000
|
unkown
|
page read and write
|
|
|
|
7FF52354C000
|
unkown
|
page readonly
|
|
|
|
7FF591F2C000
|
unkown
|
page readonly
|
|
|
|
8EA28FC000
|
unkown
|
page read and write
|
|
|
|
7FF51AB70000
|
unkown
|
page readonly
|
|
|
|
28B59540000
|
unkown
|
page readonly
|
|
|
|
8EA23FA000
|
unkown
|
page read and write
|
|
|
|
1BFA2168000
|
unkown
|
page read and write
|
|
|
|
212915C0000
|
unkown
|
page readonly
|
|
|
|
200D000
|
unkown
|
page readonly
|
|
|
|
7FF549226000
|
unkown
|
page readonly
|
|
|
|
2065000
|
unkown
|
page readonly
|
|
|
|
7FF5E8EAE000
|
unkown
|
page readonly
|
|
|
|
7FF547B44000
|
unkown
|
page readonly
|
|
|
|
1BFA0400000
|
unkown
|
page readonly
|
|
|
|
E8F417B000
|
unkown
|
page read and write
|
|
|
|
7FF59C24D000
|
unkown
|
page readonly
|
|
|
|
7FF547A95000
|
unkown
|
page readonly
|
|
|
|
1BFA2172000
|
unkown
|
page read and write
|
|
|
|
7FF4EB480000
|
unkown
|
page readonly
|
|
|
|
21291700000
|
unkown
|
page read and write
|
|
|
|
28B58824000
|
unkown
|
page read and write
|
|
|
|
1EB2F02A000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B8F000
|
unkown
|
page readonly
|
|
|
|
7FF584954000
|
unkown
|
page readonly
|
|
|
|
1BFA213A000
|
unkown
|
page read and write
|
|
|
|
1BFA3010000
|
unkown
|
page read and write
|
|
|
|
2279C600000
|
unkown
|
page read and write
|
|
|
|
8B5A8FE000
|
unkown
|
page read and write
|
|
|
|
2279D650000
|
unkown
|
page readonly
|
|
|
|
7FF5849E3000
|
unkown
|
page readonly
|
|
|
|
7FF547B3D000
|
unkown
|
page readonly
|
|
|
|
2910000
|
heap private
|
page read and write
|
|
|
|
7FF547B1F000
|
unkown
|
page readonly
|
|
|
|
7FF548FFD000
|
unkown
|
page readonly
|
|
|
|
7FF548D38000
|
unkown
|
page readonly
|
|
|
|
227A1C16000
|
unkown
|
page read and write
|
|
|
|
7FF529B75000
|
unkown
|
page readonly
|
|
|
|
227A1C1D000
|
unkown
|
page read and write
|
|
|
|
7FF5E8DB3000
|
unkown
|
page readonly
|
|
|
|
7FF591C0B000
|
unkown
|
page readonly
|
|
|
|
182BD88D000
|
unkown
|
page read and write
|
|
|
|
A51007B000
|
unkown
|
page read and write
|
|
|
|
7FF523361000
|
unkown
|
page readonly
|
|
|
|
1BFA3010000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
7FF51AB5F000
|
unkown
|
page readonly
|
|
|
|
1BFA3410000
|
unkown
|
page read and write
|
|
|
|
26582200000
|
unkown
|
page read and write
|
|
|
|
7FF5E8E86000
|
unkown
|
page readonly
|
|
|
|
7FF52981D000
|
unkown
|
page readonly
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
28B58AD0000
|
unkown
|
page readonly
|
|
|
|
21291656000
|
unkown
|
page read and write
|
|
|
|
F5B08FF000
|
unkown
|
page read and write
|
|
|
|
7FF584A4B000
|
unkown
|
page readonly
|
|
|
|
1D14FF000
|
unkown
|
page read and write
|
|
|
|
182BD88A000
|
unkown
|
page read and write
|
|
|
|
7FF51A966000
|
unkown
|
page readonly
|
|
|
|
1EB2EF70000
|
unkown
|
page readonly
|
|
|
|
7FF5A0B4F000
|
unkown
|
page readonly
|
|
|
|
7FF547B2B000
|
unkown
|
page readonly
|
|
|
|
7FF5A0ADA000
|
unkown
|
page readonly
|
|
|
|
7FF4EB4C7000
|
unkown
|
page readonly
|
|
|
|
28B5886F000
|
unkown
|
page read and write
|
|
|
|
28B58E60000
|
unkown
|
page readonly
|
|
|
|
7FF523583000
|
unkown
|
page readonly
|
|
|
|
8EA25FB000
|
unkown
|
page read and write
|
|
|
|
A5103FB000
|
unkown
|
page read and write
|
|
|
|
7FF591DD4000
|
unkown
|
page readonly
|
|
|
|
8EA1FFA000
|
unkown
|
page read and write
|
|
|
|
7FF51AB9F000
|
unkown
|
page readonly
|
|
|
|
277F2E13000
|
unkown
|
page read and write
|
|
|
|
277F2E58000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
7FF591F37000
|
unkown
|
page readonly
|
|
|
|
2279D001000
|
unkown
|
page read and write
|
|
|
|
28B58F30000
|
unkown
|
page readonly
|
|
|
|
2E009400000
|
unkown
|
page readonly
|
|
|
|
2107000
|
unkown
|
page readonly
|
|
|
|
A5100FE000
|
unkown
|
page read and write
|
|
|
|
1BFA2800000
|
unkown
|
page read and write
|
|
|
|
F7E29FC000
|
unkown
|
page read and write
|
|
|
|
7FF51A96F000
|
unkown
|
page readonly
|
|
|
|
7FF5490B5000
|
unkown
|
page readonly
|
|
|
|
28B587A0000
|
heap default
|
page read and write
|
|
|
|
1BFA031C000
|
unkown
|
page read and write
|
|
|
|
7FF5E8B98000
|
unkown
|
page readonly
|
|
|
|
277F2E3C000
|
unkown
|
page read and write
|
|
|
|
2279C668000
|
unkown
|
page read and write
|
|
|
|
7FF5A0AA8000
|
unkown
|
page readonly
|
|
|
|
2279C663000
|
unkown
|
page read and write
|
|
|
|
182BD84F000
|
unkown
|
page read and write
|
|
|
|
7FF4EB2B8000
|
unkown
|
page readonly
|
|
|
|
7FF5A0AD3000
|
unkown
|
page readonly
|
|
|
|
7FF549073000
|
unkown
|
page readonly
|
|
|
|
7FF4EB5BF000
|
unkown
|
page readonly
|
|
|
|
7FF584A7F000
|
unkown
|
page readonly
|
|
|
|
2279C629000
|
unkown
|
page read and write
|
|
|
|
7FF54916C000
|
unkown
|
page readonly
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
7FF591F10000
|
unkown
|
page readonly
|
|
|
|
7FF5E8EAB000
|
unkown
|
page readonly
|
|
|
|
7FF523547000
|
unkown
|
page readonly
|
|
|
|
227A1C4C000
|
unkown
|
page read and write
|
|
|
|
2E0091B0000
|
heap default
|
page read and write
|
|
|
|
7FF591BBA000
|
unkown
|
page readonly
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
1BFA02FF000
|
unkown
|
page read and write
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
7FF59202B000
|
unkown
|
page readonly
|
|
|
|
26582302000
|
unkown
|
page read and write
|
|
|
|
1BFA0290000
|
unkown
|
page read and write
|
|
|
|
7FF529B58000
|
unkown
|
page readonly
|
|
|
|
2279CB90000
|
unkown
|
page readonly
|
|
|
|
F7E287F000
|
unkown
|
page read and write
|
|
|
|
2670000
|
heap default
|
page read and write
|
|
|
|
E8F3EFE000
|
unkown
|
page read and write
|
|
|
|
2279C655000
|
unkown
|
page read and write
|
|
|
|
26583CA0000
|
unkown
|
page readonly
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
182BE540000
|
unkown
|
page readonly
|
|
|
|
182BD82A000
|
unkown
|
page read and write
|
|
|
|
227A1E50000
|
unkown
|
page read and write
|
|
|
|
7FF5234EA000
|
unkown
|
page readonly
|
|
|
|
7FF5478FD000
|
unkown
|
page readonly
|
|
|
|
1BFA2210000
|
unkown
|
page read and write
|
|
|
|
7FF591F79000
|
unkown
|
page readonly
|
|
|
|
7FF5A0653000
|
unkown
|
page readonly
|
|
|
|
1EB2EF60000
|
unkown
|
page readonly
|
|
|
|
1BFA0377000
|
unkown
|
page read and write
|
|
|
|
8EA227B000
|
unkown
|
page read and write
|
|
|
|
28B59002000
|
unkown
|
page read and write
|
|
|
|
277F2E79000
|
unkown
|
page read and write
|
|
|
|
7FF5234ED000
|
unkown
|
page readonly
|
|
|
|
1BFA0249000
|
unkown
|
page read and write
|
|
|
|
7FF5E8D34000
|
unkown
|
page readonly
|
|
|
|
7FF59203F000
|
unkown
|
page readonly
|
|
|
|
7FF51AACD000
|
unkown
|
page readonly
|
|
|
|
8EA2B7B000
|
unkown
|
page read and write
|
|
|
|
7FF4EB4F5000
|
unkown
|
page readonly
|
|
|
|
21291613000
|
unkown
|
page read and write
|
|
|
|
7FF529C1D000
|
unkown
|
page readonly
|
|
|
|
7FF59200E000
|
unkown
|
page readonly
|
|
|
|
182BD780000
|
heap private
|
page read and write
|
|
|
|
2279CF00000
|
unkown
|
page read and write
|
|
|
|
7FF591D47000
|
unkown
|
page readonly
|
|
|
|
7FF591E8F000
|
unkown
|
page readonly
|
|
|
|
7FF51AA82000
|
unkown
|
page readonly
|
|
|
|
26582213000
|
unkown
|
page read and write
|
|
|
|
1BFA211A000
|
unkown
|
page read and write
|
|
|
|
2129166F000
|
unkown
|
page read and write
|
|
|
|
7FF5231E4000
|
unkown
|
page readonly
|
|
|
|
F5B037B000
|
unkown
|
page read and write
|
|
|
|
1BFA21DA000
|
unkown
|
page read and write
|
|
|
|
7FF591E0C000
|
unkown
|
page readonly
|
|
|
|
7FF52321D000
|
unkown
|
page readonly
|
|
|
|
41B0000
|
heap private
|
page read and write
|
|
|
|
2E00923C000
|
unkown
|
page read and write
|
|
|
|
F7E257C000
|
unkown
|
page read and write
|
|
|
|
2279CDE0000
|
unkown
|
page read and write
|
|
|
|
7FF591F33000
|
unkown
|
page readonly
|
|
|
|
7FF5847F7000
|
unkown
|
page readonly
|
|
|
|
1BFA216C000
|
unkown
|
page read and write
|
|
|
|
7FF5E8CE2000
|
unkown
|
page readonly
|
|
|
|
7FF5491A3000
|
unkown
|
page readonly
|
|
|
|
7FF591BC0000
|
unkown
|
page readonly
|
|
|
|
7FF4EB58B000
|
unkown
|
page readonly
|
|
|
|
7FF52342E000
|
unkown
|
page readonly
|
|
|
|
7FF5A03E3000
|
unkown
|
page readonly
|
|
|
|
1BFA2106000
|
unkown
|
page read and write
|
|
|
|
28B58913000
|
unkown
|
page read and write
|
|
|
|
7FF591D63000
|
unkown
|
page readonly
|
|
|
|
277F2E02000
|
unkown
|
page read and write
|
|
|
|
1BFA0354000
|
unkown
|
page read and write
|
|
|
|
2E009150000
|
heap private
|
page read and write
|
|
|
|
1BFA2270000
|
unkown
|
page readonly
|
|
|
|
8EA237B000
|
unkown
|
page read and write
|
|
|
|
1BFA2583000
|
unkown
|
page read and write
|
|
|
|
16DA0A56000
|
unkown
|
page read and write
|
|
|
|
1EB2F059000
|
unkown
|
page read and write
|
|
|
|
8EA287A000
|
unkown
|
page read and write
|
|
|
|
36A4175000
|
unkown
|
page read and write
|
|
|
|
26582190000
|
unkown
|
page readonly
|
|
|
|
7FF5491AA000
|
unkown
|
page readonly
|
|
|
|
1BFA0325000
|
unkown
|
page read and write
|
|
|
|
E8F3E7E000
|
unkown
|
page read and write
|
|
|
|
7FF584A7F000
|
unkown
|
page readonly
|
|
|
|
2279CF18000
|
unkown
|
page read and write
|
|
|
|
7FF523579000
|
unkown
|
page readonly
|
|
|
|
227A1E90000
|
unkown
|
page readonly
|
|
|
|
7FF547629000
|
unkown
|
page readonly
|
|
|
|
A5104F7000
|
unkown
|
page read and write
|
|
|
|
7FF529A4D000
|
unkown
|
page readonly
|
|
|
|
7FF5A0843000
|
unkown
|
page readonly
|
|
|
|
7FF51AAD9000
|
unkown
|
page readonly
|
|
|
|
2279D990000
|
unkown
|
page read and write
|
|
|
|
7FF549230000
|
unkown
|
page readonly
|
|
|
|
8EA1CFE000
|
unkown
|
page read and write
|
|
|
|
277F2E6C000
|
unkown
|
page read and write
|
|
|
|
7FF547B30000
|
unkown
|
page readonly
|
|
|
|
1BFA0050000
|
unkown
|
page readonly
|
|
|
|
36A407E000
|
unkown
|
page read and write
|
|
|
|
7FF5E8EBB000
|
unkown
|
page readonly
|
|
|
|
7FF523222000
|
unkown
|
page readonly
|
|
|
|
2519000
|
unkown
|
page read and write
|
|
|
|
16DA0B13000
|
unkown
|
page read and write
|
|
|
|
1BFA2110000
|
unkown
|
page read and write
|
|
|
|
A51017E000
|
unkown
|
page read and write
|
|
|
|
7FF4EB4A3000
|
unkown
|
page readonly
|
|
|
|
1BFA2412000
|
unkown
|
page read and write
|
|
|
|
1BFA2400000
|
unkown
|
page read and write
|
|
|
|
1BFA2210000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
2279C800000
|
unkown
|
page readonly
|
|
|
|
7FF584990000
|
unkown
|
page readonly
|
|
|
|
227A1E30000
|
unkown
|
page read and write
|
|
|
|
1BFA21F5000
|
unkown
|
page read and write
|
|
|
|
7FF5E8EA4000
|
unkown
|
page readonly
|
|
|
|
7FF4EAE05000
|
unkown
|
page readonly
|
|
|
|
7FF547923000
|
unkown
|
page readonly
|
|
|
|
7FF4EADF5000
|
unkown
|
page readonly
|
|
|
|
277F2E6A000
|
unkown
|
page read and write
|
|
|
|
7FF591FA5000
|
unkown
|
page readonly
|
|
|
|
2279C5A0000
|
unkown
|
page read and write
|
|
|
|
2279C613000
|
unkown
|
page read and write
|
|
|
|
7FF591EB4000
|
unkown
|
page readonly
|
|
|
|
2E009222000
|
unkown
|
page read and write
|
|
|
|
28B59100000
|
unkown
|
page read and write
|
|
|
|
7FF5490AF000
|
unkown
|
page readonly
|
|
|
|
1BFA1BA0000
|
unkown
|
page read and write
|
|
|
|
1BFA02DD000
|
unkown
|
page read and write
|
|
|
|
277F2DF0000
|
unkown
|
page readonly
|
|
|
|
7FF591B46000
|
unkown
|
page readonly
|
|
|
|
7FF51AB8E000
|
unkown
|
page readonly
|
|
|
|
7FF591D90000
|
unkown
|
page readonly
|
|
|
|
209D000
|
unkown
|
page readonly
|
|
|
|
21291708000
|
unkown
|
page read and write
|
|
|
|
2279D610000
|
unkown
|
page readonly
|
|
|
|
7FF54925F000
|
unkown
|
page readonly
|
|
|
|
2CBA503F000
|
unkown
|
page read and write
|
|
|
|
7FF5A09E5000
|
unkown
|
page readonly
|
|
|
|
8EA1D7E000
|
unkown
|
page read and write
|
|
|
|
7FF54794E000
|
unkown
|
page readonly
|
|
|
|
277F2E00000
|
unkown
|
page read and write
|
|
|
|
7FF51AA8C000
|
unkown
|
page readonly
|
|
|
|
8B5A87A000
|
unkown
|
page read and write
|
|
|
|
E8F447E000
|
unkown
|
page read and write
|
|
|
|
7A0552B000
|
unkown
|
page read and write
|
|
|
|
7FF549167000
|
unkown
|
page readonly
|
|
|
|
36A3DEE000
|
unkown
|
page read and write
|
|
|
|
212915A0000
|
heap default
|
page read and write
|
|
|
|
2515000
|
unkown
|
page read and write
|
|
|
|
7FF5E8C5D000
|
unkown
|
page readonly
|
|
|
|
7FF591F4C000
|
unkown
|
page readonly
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
7FF591F75000
|
unkown
|
page readonly
|
|
|
|
26582313000
|
unkown
|
page read and write
|
|
|
|
7FF584A6E000
|
unkown
|
page readonly
|
|
|
|
277F2E61000
|
unkown
|
page read and write
|
|
|
|
182BD86C000
|
unkown
|
page read and write
|
|
|
|
7FF4EB276000
|
unkown
|
page readonly
|
|
|
|
227A1CB2000
|
unkown
|
page read and write
|
|
|
|
2E009C00000
|
unkown
|
page readonly
|
|
|
|
2CBA4F20000
|
heap default
|
page read and write
|
|
|
|
8EA1DFA000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
7FF529AED000
|
unkown
|
page readonly
|
|
|
|
26582202000
|
unkown
|
page read and write
|
|
|
|
7FF4EB503000
|
unkown
|
page readonly
|
|
|
|
7FF5E8A1E000
|
unkown
|
page readonly
|
|
|
|
182BD84B000
|
unkown
|
page read and write
|
|
|
|
7FF523575000
|
unkown
|
page readonly
|
|
|
|
227A1C50000
|
unkown
|
page read and write
|
|
|
|
2CBA5200000
|
unkown
|
page readonly
|
|
|
|
7FF5E8CCD000
|
unkown
|
page readonly
|
|
|
|
277F2E60000
|
unkown
|
page read and write
|
|
|
|
7FF584987000
|
unkown
|
page readonly
|
|
|
|
2279CE02000
|
unkown
|
page read and write
|
|
|
|
277F2E76000
|
unkown
|
page read and write
|
|
|
|
7FF59C468000
|
unkown
|
page readonly
|
|
|
|
2279C693000
|
unkown
|
page read and write
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
2E009255000
|
unkown
|
page read and write
|
|
|
|
1BFA3110000
|
unkown
|
page read and write
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
1EB2EFB0000
|
unkown
|
page read and write
|
|
|
|
26582240000
|
unkown
|
page read and write
|
|
|
|
7FF4EB4B7000
|
unkown
|
page readonly
|
|
|
|
E8F437F000
|
unkown
|
page read and write
|
|
|
|
1BFA0274000
|
unkown
|
page read and write
|
|
|
|
7FF523610000
|
unkown
|
page readonly
|
|
|
|
7FF5A0A83000
|
unkown
|
page readonly
|
|
|
|
277F2E5F000
|
unkown
|
page read and write
|
|
|
|
2CBA5680000
|
unkown
|
page read and write
|
|
|
|
7FF59C4AF000
|
unkown
|
page readonly
|
|
|
|
227A1BE7000
|
unkown
|
page readonly
|
|
|
|
F5B0CFD000
|
unkown
|
page read and write
|
|
|
|
7FF529A2E000
|
unkown
|
page readonly
|
|
|
|
16DA0B00000
|
unkown
|
page read and write
|
|
|
|
2CBA55A0000
|
unkown
|
page readonly
|
|
|
|
16DA0A00000
|
unkown
|
page read and write
|
|
|
|
2CBA5802000
|
unkown
|
page read and write
|
|
|
|
7FF54902E000
|
unkown
|
page readonly
|
|
|
|
7FF59C4AF000
|
unkown
|
page readonly
|
|
|
|
36A43F7000
|
unkown
|
page read and write
|
|
|
|
1BFA3010000
|
unkown
|
page read and write
|
|
|
|
227A1B20000
|
unkown
|
page read and write
|
|
|
|
1BFA2543000
|
unkown
|
page read and write
|
|
|
|
1BFA3610000
|
unkown
|
page read and write
|
|
|
|
2279CF13000
|
unkown
|
page read and write
|
|
|
|
7FF52982A000
|
unkown
|
page readonly
|
|
|
|
7FF51AB05000
|
unkown
|
page readonly
|
|
|
|
955C1FE000
|
unkown
|
page read and write
|
|
|
|
955BAAC000
|
unkown
|
page read and write
|
|
|
|
1BFA2702000
|
unkown
|
page read and write
|
|
|
|
1BFA218F000
|
unkown
|
page read and write
|
|
|
|
1EB2F000000
|
unkown
|
page read and write
|
|
|
|
21291E02000
|
unkown
|
page read and write
|
|
|
|
7FF58498C000
|
unkown
|
page readonly
|
|
|
|
1D1579000
|
unkown
|
page read and write
|
|
|
|
2CBA506C000
|
unkown
|
page read and write
|
|
|
|
7FF5A0ABD000
|
unkown
|
page readonly
|
|
|
|
1BFA24D1000
|
unkown
|
page read and write
|
|
|
|
1BFA02ED000
|
unkown
|
page read and write
|
|
|
|
7FF5E8A1A000
|
unkown
|
page readonly
|
|
|
|
1BFA2453000
|
unkown
|
page read and write
|
|
|
|
227A1EB0000
|
unkown
|
page readonly
|
|
|
|
7FF591DDD000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DAC000
|
unkown
|
page readonly
|
|
|
|
1BFA2170000
|
unkown
|
page read and write
|
|
|
|
7FF59C3DD000
|
unkown
|
page readonly
|
|
|
|
8EA267A000
|
unkown
|
page read and write
|
|
|
|
7FF523363000
|
unkown
|
page readonly
|
|
|
|
1BFA2126000
|
unkown
|
page read and write
|
|
|
|
1BFA0120000
|
unkown
|
page write copy
|
|
|
|
7FF51AB66000
|
unkown
|
page readonly
|
|
|
|
7FF52363B000
|
unkown
|
page readonly
|
|
|
|
7FF529B47000
|
unkown
|
page readonly
|
|
|
|
7FF547A67000
|
unkown
|
page readonly
|
|
|
|
7FF54922B000
|
unkown
|
page readonly
|
|
|
|
7FF591CCA000
|
unkown
|
page readonly
|
|
|
|
1BFA0240000
|
unkown
|
page read and write
|
|
|
|
955C57F000
|
unkown
|
page read and write
|
|
|
|
227A1E20000
|
unkown
|
page read and write
|
|
|
|
7FF5E8DED000
|
unkown
|
page readonly
|
|
|
|
7FF51AB9F000
|
unkown
|
page readonly
|
|
|
|
1D16FF000
|
unkown
|
page read and write
|
|
|
|
7FF523537000
|
unkown
|
page readonly
|
|
|
|
7FF5E8D94000
|
unkown
|
page readonly
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
7FF5294B5000
|
unkown
|
page readonly
|
|
|
|
227A1C30000
|
unkown
|
page read and write
|
|
|
|
1BFA3310000
|
unkown
|
page read and write
|
|
|
|
7FF51AA97000
|
unkown
|
page readonly
|
|
|
|
7FF51AB58000
|
unkown
|
page readonly
|
|
|
|
7FF591F14000
|
unkown
|
page readonly
|
|
|
|
7FF523125000
|
unkown
|
page readonly
|
|
|
|
16DA09D0000
|
unkown
|
page readonly
|
|
|
|
2055000
|
unkown
|
page readonly
|
|
|
|
2E009A02000
|
unkown
|
page read and write
|
|
|
|
1BFA2500000
|
unkown
|
page read and write
|
|
|
|
7FF59C3BC000
|
unkown
|
page readonly
|
|
|
|
1BFA3510000
|
unkown
|
page read and write
|
|
|
|
1EB2F013000
|
unkown
|
page read and write
|
|
|
|
1BFA3010000
|
unkown
|
page read and write
|
|
|
|
2279C713000
|
unkown
|
page read and write
|
|
|
|
16DA0B02000
|
unkown
|
page read and write
|
|
|
|
212918D0000
|
unkown
|
page readonly
|
|
|
|
8EA2A7A000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
1BFA01D0000
|
unkown
|
page read and write
|
|
|
|
8EA247B000
|
unkown
|
page read and write
|
|
|
|
7FF591811000
|
unkown
|
page readonly
|
|
|
|
7FF58477D000
|
unkown
|
page readonly
|
|
|
|
26583BA0000
|
unkown
|
page read and write
|
|
|
|
1BFA3210000
|
unkown
|
page read and write
|
|
|
|
2279C580000
|
unkown
|
page readonly
|
|
|
|
26582060000
|
heap default
|
page read and write
|
|
|
|
1BFA218A000
|
unkown
|
page read and write
|
|
|
|
7FF5A0B6D000
|
unkown
|
page readonly
|
|
|
|
1BFA2700000
|
unkown
|
page read and write
|
|
|
|
7FF59C3E9000
|
unkown
|
page readonly
|
|
|
|
7FF5849CA000
|
unkown
|
page readonly
|
|
|
|
1BFA0367000
|
unkown
|
page read and write
|
|
|
|
7FF547B5B000
|
unkown
|
page readonly
|
|
|
|
2279C490000
|
heap default
|
page read and write
|
|
|
|
8B5A77E000
|
unkown
|
page read and write
|
|
|
|
7FF4EB4F9000
|
unkown
|
page readonly
|
|
|
|
212915B0000
|
unkown
|
page readonly
|
|
|
|
7FF51A3ED000
|
unkown
|
page readonly
|
|
|
|
7FF5A097E000
|
unkown
|
page readonly
|
|
|
|
2771000
|
heap default
|
page read and write
|
|
|
|
7FF5E8DB7000
|
unkown
|
page readonly
|
|
|
|
7FF591F00000
|
unkown
|
page readonly
|
|
|
|
7FF5479B5000
|
unkown
|
page readonly
|
|
|
|
7FF592006000
|
unkown
|
page readonly
|
|
|
|
1BFA2112000
|
unkown
|
page read and write
|
|
|
|
1BFA2118000
|
unkown
|
page read and write
|
|
|
|
26582000000
|
heap private
|
page read and write
|
|
|
|
7FF4EB586000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DF9000
|
unkown
|
page readonly
|
|
|
|
955C6FE000
|
unkown
|
page read and write
|
|
|
|
1BFA2111000
|
unkown
|
page read and write
|
|
|
|
7FF59C46F000
|
unkown
|
page readonly
|
|
|
|
16DA0C00000
|
unkown
|
page readonly
|
|
|
|
2279CE15000
|
unkown
|
page read and write
|
|
|
|
227A1B14000
|
unkown
|
page read and write
|
|
|
|
7FF52363D000
|
unkown
|
page readonly
|
|
|
|
7FF591FF8000
|
unkown
|
page readonly
|
|
|
|
227A1CAE000
|
unkown
|
page read and write
|
|
|
|
227A19F0000
|
unkown
|
page read and write
|
|
|
|
7FF547AC5000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DD8000
|
unkown
|
page readonly
|
|
|
|
28B58A00000
|
unkown
|
page readonly
|
|
|
|
1BFA21C1000
|
unkown
|
page read and write
|
|
|
|
7FF59203B000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DC7000
|
unkown
|
page readonly
|
|
|
|
227A1B30000
|
unkown
|
page read and write
|
|
|
|
227A1AF8000
|
unkown
|
page read and write
|
|
|
|
7FF5235F8000
|
unkown
|
page readonly
|
|
|
|
7FF591D33000
|
unkown
|
page readonly
|
|
|
|
7FF5E8DB5000
|
unkown
|
page readonly
|
|
|
|
1BFA2100000
|
unkown
|
page read and write
|
|
There are 1141 hidden memdumps, click here to show them.