Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Calculation-1972568702-01262021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\Users\user\Desktop\~$Calculation-1972568702-01262021.xlsm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\E7E79C12-1EE9-4759-8A01-580DF683B6A5
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2409CBB.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\29FD7780.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A0588B22.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\20C10000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Calculation-1972568702-01262021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 13:47:06
2020, mtime=Wed Jan 27 04:10:49 2021, atime=Wed Jan 27 04:10:49 2021, length=26179, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:34:24 2019, mtime=Wed Jan 27 04:10:49 2021, atime=Wed Jan 27 04:10:49 2021, length=12288, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
||
C:\Users\user\Desktop\E0C10000
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\BE1117B2.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C6B1200B.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\CAD60290.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\E7FE0000
|
data
|
dropped
|
||
C:\Users\user\Desktop\98FE0000
|
data
|
dropped
|
There are 7 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\Flopers.GGRRDDFF,DllRegisterServer
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://test.limulustest.ru/invzovg/5319402.jpg
|
188.225.73.5
|
||
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://wus2-000.contentsync.
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://wus2-000.pagecontentsync.
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://ncus-000.contentsync.
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://contentstorage.omex.office.net/addinclassifier/officeentities
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
https://directory.services.
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
test.limulustest.ru
|
188.225.73.5
|
IPs
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
---|---|---|---|---|---|
188.225.73.5
|
unknown
|
Russian Federation
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
lp#
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
mp#
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1B978
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1BEE7
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C07D
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C129
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
&!$
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
293DA
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
294D4
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'58
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF48C
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF74A
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF844
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF8D0
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{=8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F72EF
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F7436
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
There are 159 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
D6E59FB000
|
unkown
|
page read and write
|
||
5D8B8FB000
|
unkown
|
page read and write
|
||
17CF0D00000
|
unkown
|
page read and write
|
||
23576068000
|
unkown
|
page read and write
|
||
2407BD30000
|
unkown
|
page readonly
|
||
7FF5891BA000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
28D6B495000
|
unkown
|
page read and write
|
||
28D6E210000
|
unkown
|
page read and write
|
||
7FF5891D5000
|
unkown
|
page readonly
|
||
2B74B013000
|
unkown
|
page read and write
|
||
D6E63FB000
|
unkown
|
page read and write
|
||
28D6D31A000
|
unkown
|
page read and write
|
||
28D6B59B000
|
unkown
|
page read and write
|
||
D6E5CFD000
|
unkown
|
page read and write
|
||
28D6B493000
|
unkown
|
page read and write
|
||
D6E54F9000
|
unkown
|
page read and write
|
||
450F000
|
stack
|
page read and write
|
||
2561000
|
unkown
|
page readonly
|
||
7FF4F868B000
|
unkown
|
page readonly
|
||
28D6B4AB000
|
unkown
|
page read and write
|
||
23575F60000
|
unkown
|
page readonly
|
||
28D6D6D7000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
28D6B495000
|
unkown
|
page read and write
|
||
2407C100000
|
unkown
|
page read and write
|
||
231B1C53000
|
unkown
|
page read and write
|
||
7FF5BBC4D000
|
unkown
|
page readonly
|
||
2407C228000
|
unkown
|
page read and write
|
||
7FF5D4304000
|
unkown
|
page readonly
|
||
28D6E110000
|
unkown
|
page read and write
|
||
2407AC3D000
|
unkown
|
page read and write
|
||
7FF5D7814000
|
unkown
|
page readonly
|
||
7FF5D42AE000
|
unkown
|
page readonly
|
||
2407B518000
|
unkown
|
page read and write
|
||
7FF4F2784000
|
unkown
|
page readonly
|
||
28D6B55D000
|
unkown
|
page read and write
|
||
2574000
|
unkown
|
page readonly
|
||
7FF5D442F000
|
unkown
|
page readonly
|
||
7FF50CCEF000
|
unkown
|
page readonly
|
||
28D6D902000
|
unkown
|
page read and write
|
||
7FF4F27A3000
|
unkown
|
page readonly
|
||
7FF4F27E9000
|
unkown
|
page readonly
|
||
D6E627A000
|
unkown
|
page read and write
|
||
2B74AF20000
|
heap default
|
page read and write
|
||
7FF4F25AD000
|
unkown
|
page readonly
|
||
23576013000
|
unkown
|
page read and write
|
||
28D6D942000
|
unkown
|
page read and write
|
||
7FF5D8150000
|
unkown
|
page readonly
|
||
28A2000
|
unkown
|
page read and write
|
||
285146D0000
|
unkown
|
page readonly
|
||
7FF5BBC59000
|
unkown
|
page readonly
|
||
17CF0370000
|
unkown
|
page readonly
|
||
2407C22E000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
28D6B200000
|
heap private
|
page read and write
|
||
7FF5891B3000
|
unkown
|
page readonly
|
||
7FF4F86A4000
|
unkown
|
page readonly
|
||
7FF50C8FF000
|
unkown
|
page readonly
|
||
7FF5D4327000
|
unkown
|
page readonly
|
||
28AE000
|
unkown
|
page read and write
|
||
28D6B48C000
|
unkown
|
page read and write
|
||
28B8000
|
unkown
|
page read and write
|
||
2851425C000
|
unkown
|
page read and write
|
||
7FF5E328F000
|
unkown
|
page readonly
|
||
44CE000
|
unkown
|
page read and write
|
||
2407C41F000
|
unkown
|
page read and write
|
||
7FF4F827A000
|
unkown
|
page readonly
|
||
7FF4F245D000
|
unkown
|
page readonly
|
||
7FF50BBA4000
|
unkown
|
page readonly
|
||
28D6B479000
|
unkown
|
page read and write
|
||
28AE000
|
unkown
|
page read and write
|
||
86E417E000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
7FF58922F000
|
unkown
|
page readonly
|
||
2096785C000
|
unkown
|
page read and write
|
||
7FF5E3570000
|
unkown
|
page readonly
|
||
7FF5D4373000
|
unkown
|
page readonly
|
||
28D6B413000
|
unkown
|
page read and write
|
||
23576590000
|
unkown
|
page readonly
|
||
2407C43E000
|
unkown
|
page read and write
|
||
28D6D600000
|
unkown
|
page read and write
|
||
28D6D700000
|
unkown
|
page read and write
|
||
7FF5D7F1D000
|
unkown
|
page readonly
|
||
5D8B77C000
|
unkown
|
page read and write
|
||
28D6E010000
|
unkown
|
page read and write
|
||
28D6B270000
|
unkown
|
page readonly
|
||
7FF5E35B7000
|
unkown
|
page readonly
|
||
231B1C90000
|
unkown
|
page read and write
|
||
28D6D982000
|
unkown
|
page read and write
|
||
28D6B491000
|
unkown
|
page read and write
|
||
FF7DFFB000
|
unkown
|
page read and write
|
||
28514224000
|
unkown
|
page read and write
|
||
28D6B490000
|
unkown
|
page read and write
|
||
7FF52ACBD000
|
unkown
|
page readonly
|
||
28D6B5BC000
|
unkown
|
page read and write
|
||
2407C480000
|
unkown
|
page read and write
|
||
A0A7FFF000
|
unkown
|
page read and write
|
||
7FF4F2430000
|
unkown
|
page readonly
|
||
7FF4F2876000
|
unkown
|
page readonly
|
||
C7DD1FE000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
2407B558000
|
unkown
|
page read and write
|
||
29E01E00000
|
heap private
|
page read and write
|
||
7FF4F2724000
|
unkown
|
page readonly
|
||
24574500000
|
heap private
|
page read and write
|
||
2407BB30000
|
unkown
|
page read and write
|
||
28D6D614000
|
unkown
|
page read and write
|
||
D6E5BFB000
|
unkown
|
page read and write
|
||
28D6D802000
|
unkown
|
page read and write
|
||
7FF5BBD0B000
|
unkown
|
page readonly
|
||
28D6D612000
|
unkown
|
page read and write
|
||
7FF5E367F000
|
unkown
|
page readonly
|
||
7FF58923B000
|
unkown
|
page readonly
|
||
7FF58917D000
|
unkown
|
page readonly
|
||
28D6D320000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
7FF4F242A000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
2407BD50000
|
unkown
|
page readonly
|
||
7FF5BBC13000
|
unkown
|
page readonly
|
||
7FF5BB4F0000
|
unkown
|
page readonly
|
||
7FF5E355F000
|
unkown
|
page readonly
|
||
231B1D02000
|
unkown
|
page read and write
|
||
2096787A000
|
unkown
|
page read and write
|
||
29E02085000
|
unkown
|
page read and write
|
||
7FF52ABD3000
|
unkown
|
page readonly
|
||
7FF52AD94000
|
unkown
|
page readonly
|
||
28D6B475000
|
unkown
|
page read and write
|
||
28D6D6E5000
|
unkown
|
page read and write
|
||
7FF4F25B7000
|
unkown
|
page readonly
|
||
2407AC88000
|
unkown
|
page read and write
|
||
7FF4F7F59000
|
unkown
|
page readonly
|
||
28D6B340000
|
unkown
|
page write copy
|
||
7FF4F289E000
|
unkown
|
page readonly
|
||
28D6D613000
|
unkown
|
page read and write
|
||
7FF5D816E000
|
unkown
|
page readonly
|
||
231B2270000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
28D6B475000
|
unkown
|
page read and write
|
||
D6E55FB000
|
unkown
|
page read and write
|
||
2096785F000
|
unkown
|
page read and write
|
||
E07938B000
|
unkown
|
page read and write
|
||
2880000
|
heap default
|
page read and write
|
||
29E0203C000
|
unkown
|
page read and write
|
||
28D6E313000
|
unkown
|
page read and write
|
||
5D8B87D000
|
unkown
|
page read and write
|
||
7FF4F8270000
|
unkown
|
page readonly
|
||
28D6D614000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
20967863000
|
unkown
|
page read and write
|
||
28D6D31F000
|
unkown
|
page read and write
|
||
7FF4F8275000
|
unkown
|
page readonly
|
||
245750B0000
|
unkown
|
page read and write
|
||
28D6D470000
|
unkown
|
page read and write
|
||
2407C3C0000
|
unkown
|
page readonly
|
||
7FF50CC7A000
|
unkown
|
page readonly
|
||
7FF5E32AA000
|
unkown
|
page readonly
|
||
28D6D614000
|
unkown
|
page read and write
|
||
28D6D3CC000
|
unkown
|
page read and write
|
||
7FF589228000
|
unkown
|
page readonly
|
||
A0A7DF7000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
448F000
|
stack
|
page read and write
|
||
2407C317000
|
unkown
|
page readonly
|
||
7FF5BBBF4000
|
unkown
|
page readonly
|
||
28D6B4B6000
|
unkown
|
page read and write
|
||
28D6B491000
|
unkown
|
page read and write
|
||
2870000
|
unkown
|
page read and write
|
||
7FF5D8077000
|
unkown
|
page readonly
|
||
D6E667A000
|
unkown
|
page read and write
|
||
7FF4F2424000
|
unkown
|
page readonly
|
||
7FF588F18000
|
unkown
|
page readonly
|
||
5B0000
|
unkown
|
page readonly
|
||
7FF58926F000
|
unkown
|
page readonly
|
||
28D6B490000
|
unkown
|
page read and write
|
||
17CF0489000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
7FF5D80AD000
|
unkown
|
page readonly
|
||
7FF5D7E33000
|
unkown
|
page readonly
|
||
28D6B3F0000
|
heap private
|
page read and write
|
||
7FF50CC5D000
|
unkown
|
page readonly
|
||
28D6D612000
|
unkown
|
page read and write
|
||
7FF50CB1E000
|
unkown
|
page readonly
|
||
28D6CEA0000
|
unkown
|
page readonly
|
||
28D6D3AC000
|
unkown
|
page read and write
|
||
FF7DA8B000
|
unkown
|
page read and write
|
||
2407C680000
|
unkown
|
page readonly
|
||
2407C499000
|
unkown
|
page read and write
|
||
20967813000
|
unkown
|
page read and write
|
||
2B74B102000
|
unkown
|
page read and write
|
||
7FF4F8690000
|
unkown
|
page readonly
|
||
28D6D320000
|
unkown
|
page read and write
|
||
231B1AD0000
|
unkown
|
page readonly
|
||
28D6B55A000
|
unkown
|
page read and write
|
||
7FF5BBD1D000
|
unkown
|
page readonly
|
||
28BF000
|
unkown
|
page read and write
|
||
2595000
|
unkown
|
page readonly
|
||
7FF5D4246000
|
unkown
|
page readonly
|
||
2635000
|
unkown
|
page readonly
|
||
29E02102000
|
unkown
|
page read and write
|
||
7FF5D817F000
|
unkown
|
page readonly
|
||
7FF4F2450000
|
unkown
|
page readonly
|
||
7FF52AE59000
|
unkown
|
page readonly
|
||
2096783D000
|
unkown
|
page read and write
|
||
231B1C54000
|
unkown
|
page read and write
|
||
7FF50C488000
|
unkown
|
page readonly
|
||
29E0204E000
|
unkown
|
page read and write
|
||
7FF5D4323000
|
unkown
|
page readonly
|
||
28D6CDA0000
|
unkown
|
page read and write
|
||
7FF50BB25000
|
unkown
|
page readonly
|
||
7FF5E35A2000
|
unkown
|
page readonly
|
||
7FF5BBD1B000
|
unkown
|
page readonly
|
||
23576102000
|
unkown
|
page read and write
|
||
2546000
|
unkown
|
page readonly
|
||
2407BD00000
|
unkown
|
page readonly
|
||
2407C4AC000
|
unkown
|
page read and write
|
||
28C9000
|
unkown
|
page read and write
|
||
28D6D6DD000
|
unkown
|
page read and write
|
||
20967902000
|
unkown
|
page read and write
|
||
28D6B456000
|
unkown
|
page read and write
|
||
2407C240000
|
unkown
|
page read and write
|
||
23575F70000
|
unkown
|
page readonly
|
||
7FF58925B000
|
unkown
|
page readonly
|
||
7FF4F2780000
|
unkown
|
page readonly
|
||
7FF52AE17000
|
unkown
|
page readonly
|
||
28D6E210000
|
unkown
|
page read and write
|
||
24574250000
|
heap default
|
page read and write
|
||
29E02024000
|
unkown
|
page read and write
|
||
17CF0350000
|
heap default
|
page read and write
|
||
231B1C56000
|
unkown
|
page read and write
|
||
5D8AFAB000
|
unkown
|
page read and write
|
||
2096783A000
|
unkown
|
page read and write
|
||
231B1C4D000
|
unkown
|
page read and write
|
||
29E0204F000
|
unkown
|
page read and write
|
||
3F49A7B000
|
unkown
|
page read and write
|
||
2B74AEC0000
|
heap private
|
page read and write
|
||
28D6B539000
|
unkown
|
page read and write
|
||
29E02802000
|
unkown
|
page read and write
|
||
28D6D945000
|
unkown
|
page read and write
|
||
7FF5BBAE6000
|
unkown
|
page readonly
|
||
7FF52A5BC000
|
unkown
|
page readonly
|
||
23575FA0000
|
unkown
|
page readonly
|
||
28D6B46B000
|
unkown
|
page read and write
|
||
209677D0000
|
unkown
|
page readonly
|
||
28D6D3CD000
|
unkown
|
page read and write
|
||
D6E5B7A000
|
unkown
|
page read and write
|
||
231B1D13000
|
unkown
|
page read and write
|
||
7FF5D442D000
|
unkown
|
page readonly
|
||
2407B400000
|
unkown
|
page read and write
|
||
7FF52AE6A000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
D6E57FB000
|
unkown
|
page read and write
|
||
D6E567A000
|
unkown
|
page read and write
|
||
F0D5AFE000
|
unkown
|
page read and write
|
||
28D6D420000
|
unkown
|
page readonly
|
||
D6E637A000
|
unkown
|
page read and write
|
||
58BEF5C000
|
unkown
|
page read and write
|
||
D6E587B000
|
unkown
|
page read and write
|
||
580000
|
unkown
|
page read and write
|
||
23575E90000
|
unkown
|
page readonly
|
||
7FF4F2788000
|
unkown
|
page readonly
|
||
7FF5E34F7000
|
unkown
|
page readonly
|
||
2407AC13000
|
unkown
|
page read and write
|
||
2407C327000
|
unkown
|
page write copy
|
||
2980000
|
unkown
|
page read and write
|
||
2407C220000
|
unkown
|
page read and write
|
||
258A000
|
unkown
|
page readonly
|
||
28D6E110000
|
unkown
|
page read and write
|
||
86E43FF000
|
unkown
|
page read and write
|
||
28D6D3BA000
|
unkown
|
page read and write
|
||
23576D40000
|
unkown
|
page readonly
|
||
2407C380000
|
unkown
|
page readonly
|
||
7FF5D813F000
|
unkown
|
page readonly
|
||
17CF046F000
|
unkown
|
page read and write
|
||
7FF50C91A000
|
unkown
|
page readonly
|
||
28D6D6B6000
|
unkown
|
page read and write
|
||
28AE000
|
unkown
|
page read and write
|
||
2407C264000
|
unkown
|
page read and write
|
||
7FF5E3603000
|
unkown
|
page readonly
|
||
7FF5BBD0E000
|
unkown
|
page readonly
|
||
2407BB01000
|
unkown
|
page read and write
|
||
7FF5D4395000
|
unkown
|
page readonly
|
||
28D6E010000
|
unkown
|
page read and write
|
||
28D6B473000
|
unkown
|
page read and write
|
||
7FF5D3F8E000
|
unkown
|
page readonly
|
||
D6E5D7B000
|
unkown
|
page read and write
|
||
7FF5BBC55000
|
unkown
|
page readonly
|
||
7FF4F28AD000
|
unkown
|
page readonly
|
||
29E02013000
|
unkown
|
page read and write
|
||
7FF52A5C2000
|
unkown
|
page readonly
|
||
231B1E00000
|
unkown
|
page readonly
|
||
3F49EFD000
|
unkown
|
page read and write
|
||
2407C2F0000
|
unkown
|
page write copy
|
||
7FF5E33E3000
|
unkown
|
page readonly
|
||
29E0206F000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
FF7DB8E000
|
unkown
|
page read and write
|
||
7FF52AD6F000
|
unkown
|
page readonly
|
||
2407ABF0000
|
unkown
|
page read and write
|
||
7FF4F27DD000
|
unkown
|
page readonly
|
||
7FF5D43F6000
|
unkown
|
page readonly
|
||
2407AC2A000
|
unkown
|
page read and write
|
||
245742A1000
|
unkown
|
page read and write
|
||
D6E617A000
|
unkown
|
page read and write
|
||
4260000
|
unkown
|
page readonly
|
||
231B1C69000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
28D6D315000
|
unkown
|
page read and write
|
||
231B1C51000
|
unkown
|
page read and write
|
||
7FF5E35CC000
|
unkown
|
page readonly
|
||
D6E5EFB000
|
unkown
|
page read and write
|
||
28D6B600000
|
unkown
|
page readonly
|
||
2407BCF0000
|
unkown
|
page readonly
|
||
28D6E210000
|
unkown
|
page read and write
|
||
28D6D612000
|
unkown
|
page read and write
|
||
3F4A0FD000
|
unkown
|
page read and write
|
||
231B1C13000
|
unkown
|
page read and write
|
||
7FF4F27F3000
|
unkown
|
page readonly
|
||
209677E0000
|
unkown
|
page readonly
|
||
7FF4F256F000
|
unkown
|
page readonly
|
||
28D6D882000
|
unkown
|
page read and write
|
||
20967A00000
|
unkown
|
page readonly
|
||
86E407F000
|
unkown
|
page read and write
|
||
263C000
|
unkown
|
page readonly
|
||
D6E537A000
|
unkown
|
page read and write
|
||
20967800000
|
unkown
|
page read and write
|
||
7FF50CC69000
|
unkown
|
page readonly
|
||
7FF5BBAEF000
|
unkown
|
page readonly
|
||
245742D3000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
7FF4F286F000
|
unkown
|
page readonly
|
||
28D6D378000
|
unkown
|
page read and write
|
||
444E000
|
unkown
|
page read and write
|
||
25BD000
|
unkown
|
page readonly
|
||
7FF5E32A2000
|
unkown
|
page readonly
|
||
2407AC71000
|
unkown
|
page read and write
|
||
2357603F000
|
unkown
|
page read and write
|
||
29E02660000
|
unkown
|
page readonly
|
||
2407C090000
|
unkown
|
page read and write
|
||
2407AC00000
|
unkown
|
page read and write
|
||
5D8B5FF000
|
unkown
|
page read and write
|
||
7FF50BAC7000
|
unkown
|
page readonly
|
||
2407C110000
|
unkown
|
page read and write
|
||
7FF5BBD04000
|
unkown
|
page readonly
|
||
17CF0D12000
|
unkown
|
page read and write
|
||
28D6B5BE000
|
unkown
|
page read and write
|
||
7FF5889FA000
|
unkown
|
page readonly
|
||
28D6D783000
|
unkown
|
page read and write
|
||
7FF50B98E000
|
unkown
|
page readonly
|
||
FF7DB0E000
|
unkown
|
page read and write
|
||
7FF50B9AE000
|
unkown
|
page readonly
|
||
7FF4F2815000
|
unkown
|
page readonly
|
||
5E7000
|
heap private
|
page read and write
|
||
7FF5E3678000
|
unkown
|
page readonly
|
||
51B000
|
stack
|
page read and write
|
||
29E02108000
|
unkown
|
page read and write
|
||
28D6D6DF000
|
unkown
|
page read and write
|
||
2647000
|
unkown
|
page readonly
|
||
24000000000
|
unkown
|
page read and write
|
||
7FF50BAD8000
|
unkown
|
page readonly
|
||
A0A779F000
|
unkown
|
page read and write
|
||
7FF4F27FA000
|
unkown
|
page readonly
|
||
25A9000
|
unkown
|
page readonly
|
||
28D6D348000
|
unkown
|
page read and write
|
||
7FF5BBABD000
|
unkown
|
page readonly
|
||
2473000
|
unkown
|
page readonly
|
||
7FF50CD2F000
|
unkown
|
page readonly
|
||
7FF5BBD1F000
|
unkown
|
page readonly
|
||
29E0204D000
|
unkown
|
page read and write
|
||
7FF52AEF0000
|
unkown
|
page readonly
|
||
20967842000
|
unkown
|
page read and write
|
||
7FF4F84E9000
|
unkown
|
page readonly
|
||
7FF4F85F9000
|
unkown
|
page readonly
|
||
7FF4F7F13000
|
unkown
|
page readonly
|
||
24574420000
|
unkown
|
page readonly
|
||
7FF5E36BD000
|
unkown
|
page readonly
|
||
7FF50BB78000
|
unkown
|
page readonly
|
||
7FF5E35F5000
|
unkown
|
page readonly
|
||
2B74B029000
|
unkown
|
page read and write
|
||
17CF04C4000
|
unkown
|
page read and write
|
||
7FF50CCFB000
|
unkown
|
page readonly
|
||
2407D000000
|
unkown
|
page read and write
|
||
7FF5D814B000
|
unkown
|
page readonly
|
||
7FF5E33BD000
|
unkown
|
page readonly
|
||
2B74B03F000
|
unkown
|
page read and write
|
||
23575E80000
|
heap default
|
page read and write
|
||
28D6D902000
|
unkown
|
page read and write
|
||
D6E60FB000
|
unkown
|
page read and write
|
||
28D6D612000
|
unkown
|
page read and write
|
||
28D6D60D000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
7FF50CC37000
|
unkown
|
page readonly
|
||
28D6D31D000
|
unkown
|
page read and write
|
||
58BF67F000
|
unkown
|
page read and write
|
||
7FF5BBC6A000
|
unkown
|
page readonly
|
||
20967852000
|
unkown
|
page read and write
|
||
F0D597F000
|
unkown
|
page read and write
|
||
28D6D612000
|
unkown
|
page read and write
|
||
7FF4F25D3000
|
unkown
|
page readonly
|
||
7FF52A9E9000
|
unkown
|
page readonly
|
||
17CF042A000
|
unkown
|
page read and write
|
||
2860000
|
unkown
|
page readonly
|
||
2407B402000
|
unkown
|
page read and write
|
||
7FF5E360A000
|
unkown
|
page readonly
|
||
7FF5E356A000
|
unkown
|
page readonly
|
||
28D6B49D000
|
unkown
|
page read and write
|
||
2407ABC0000
|
heap default
|
page read and write
|
||
7FF588F68000
|
unkown
|
page readonly
|
||
D6E5FFB000
|
unkown
|
page read and write
|
||
28D6D31D000
|
unkown
|
page read and write
|
||
86E437D000
|
unkown
|
page read and write
|
||
D6E64FF000
|
unkown
|
page read and write
|
||
20967862000
|
unkown
|
page read and write
|
||
28D6B491000
|
unkown
|
page read and write
|
||
23576113000
|
unkown
|
page read and write
|
||
24574350000
|
unkown
|
page readonly
|
||
D6E5DFB000
|
unkown
|
page read and write
|
||
7FF5E329D000
|
unkown
|
page readonly
|
||
29E02113000
|
unkown
|
page read and write
|
||
28D6B493000
|
unkown
|
page read and write
|
||
17CF0380000
|
unkown
|
page read and write
|
||
7FF52AED8000
|
unkown
|
page readonly
|
||
7FF5D41CD000
|
unkown
|
page readonly
|
||
28D6B3D0000
|
unkown
|
page read and write
|
||
28D6D612000
|
unkown
|
page read and write
|
||
7FF52AEFD000
|
unkown
|
page readonly
|
||
29E01E60000
|
heap default
|
page read and write
|
||
28D6D6E0000
|
unkown
|
page read and write
|
||
28D6E310000
|
unkown
|
page read and write
|
||
28514940000
|
unkown
|
page readonly
|
||
7FF5891A9000
|
unkown
|
page readonly
|
||
7FF4F86AB000
|
unkown
|
page readonly
|
||
28D6B490000
|
unkown
|
page read and write
|
||
7FF50CBE0000
|
unkown
|
page readonly
|
||
24574505000
|
heap private
|
page read and write
|
||
17CF0413000
|
unkown
|
page read and write
|
||
C7DDBFB000
|
unkown
|
page read and write
|
||
28D6D783000
|
unkown
|
page read and write
|
||
17CF0502000
|
unkown
|
page read and write
|
||
5EA000
|
heap private
|
page read and write
|
||
7FF50B25C000
|
unkown
|
page readonly
|
||
7FF5BBCD8000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
7FF5BBCFD000
|
unkown
|
page readonly
|
||
28D6D665000
|
unkown
|
page read and write
|
||
7FF4F23B6000
|
unkown
|
page readonly
|
||
28D6B491000
|
unkown
|
page read and write
|
||
7FF5E35AC000
|
unkown
|
page readonly
|
||
17CF02F0000
|
heap private
|
page read and write
|
||
7FF50CD1B000
|
unkown
|
page readonly
|
||
2457429A000
|
unkown
|
page read and write
|
||
7FF4F2894000
|
unkown
|
page readonly
|
||
209677F0000
|
unkown
|
page read and write
|
||
2407ABE0000
|
unkown
|
page readonly
|
||
24574320000
|
unkown
|
page read and write
|
||
7FF4F2644000
|
unkown
|
page readonly
|
||
2096786E000
|
unkown
|
page read and write
|
||
2096787D000
|
unkown
|
page read and write
|
||
28D6B472000
|
unkown
|
page read and write
|
||
7FF58926F000
|
unkown
|
page readonly
|
||
F0D58FF000
|
unkown
|
page read and write
|
||
231B1C47000
|
unkown
|
page read and write
|
||
7FF4F8678000
|
unkown
|
page readonly
|
||
2096785E000
|
unkown
|
page read and write
|
||
5B34000
|
heap private
|
page read and write
|
||
2407AC76000
|
unkown
|
page read and write
|
||
28D6B400000
|
unkown
|
page read and write
|
||
2B74B113000
|
unkown
|
page read and write
|
||
231B1C89000
|
unkown
|
page read and write
|
||
7FF5D4312000
|
unkown
|
page readonly
|
||
7FF4F85CC000
|
unkown
|
page readonly
|
||
7FF4F288D000
|
unkown
|
page readonly
|
||
28D6D440000
|
unkown
|
page read and write
|
||
7FF50C912000
|
unkown
|
page readonly
|
||
7FF50B689000
|
unkown
|
page readonly
|
||
7FF4F8603000
|
unkown
|
page readonly
|
||
7FF5E3437000
|
unkown
|
page readonly
|
||
2407B513000
|
unkown
|
page read and write
|
||
7FF5BBB9E000
|
unkown
|
page readonly
|
||
20967873000
|
unkown
|
page read and write
|
||
28D6E210000
|
unkown
|
page read and write
|
||
28D6D696000
|
unkown
|
page read and write
|
||
28A9000
|
unkown
|
page read and write
|
||
28D6B47C000
|
unkown
|
page read and write
|
||
2407C6A0000
|
unkown
|
page readonly
|
||
7FF4F253A000
|
unkown
|
page readonly
|
||
245742A4000
|
unkown
|
page read and write
|
||
2407C380000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
28D6D368000
|
unkown
|
page read and write
|
||
28D6D37D000
|
unkown
|
page read and write
|
||
7FF4F86BF000
|
unkown
|
page readonly
|
||
7FF5D80B9000
|
unkown
|
page readonly
|
||
22B4000
|
unkown
|
page readonly
|
||
28D6D348000
|
unkown
|
page read and write
|
||
28D6D743000
|
unkown
|
page read and write
|
||
28A5000
|
unkown
|
page read and write
|
||
17CF04CB000
|
unkown
|
page read and write
|
||
7FF5BB9AA000
|
unkown
|
page readonly
|
||
28D6B4E8000
|
unkown
|
page read and write
|
||
28D6D3D0000
|
unkown
|
page read and write
|
||
2569000
|
unkown
|
page readonly
|
||
7FF50CD2F000
|
unkown
|
page readonly
|
||
2851423D000
|
unkown
|
page read and write
|
||
28D6D4A0000
|
unkown
|
page readonly
|
||
28D6B260000
|
heap default
|
page read and write
|
||
24574E10000
|
unkown
|
page read and write
|
||
28D6D783000
|
unkown
|
page read and write
|
||
28B2000
|
unkown
|
page read and write
|
||
28D6D882000
|
unkown
|
page read and write
|
||
28D6D743000
|
unkown
|
page read and write
|
||
17CF0360000
|
unkown
|
page readonly
|
||
17CF03B0000
|
unkown
|
page readonly
|
||
7FF5BB3B6000
|
unkown
|
page readonly
|
||
86E40FE000
|
unkown
|
page read and write
|
||
28D6D35D000
|
unkown
|
page read and write
|
||
7FF52AE55000
|
unkown
|
page readonly
|
||
23575F80000
|
unkown
|
page read and write
|
||
2407C380000
|
unkown
|
page read and write
|
||
7FF589167000
|
unkown
|
page readonly
|
||
7FF5BBC85000
|
unkown
|
page readonly
|
||
28D6D800000
|
unkown
|
page read and write
|
||
C7DD97B000
|
unkown
|
page read and write
|
||
29E02067000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
7FF50CC65000
|
unkown
|
page readonly
|
||
7FF5E36AB000
|
unkown
|
page readonly
|
||
20968002000
|
unkown
|
page read and write
|
||
7FF52AE63000
|
unkown
|
page readonly
|
||
2407C484000
|
unkown
|
page read and write
|
||
2407C2F0000
|
unkown
|
page read and write
|
||
7FF50BA15000
|
unkown
|
page readonly
|
||
7FF5D8138000
|
unkown
|
page readonly
|
||
7FF50BB9D000
|
unkown
|
page readonly
|
||
28D6D902000
|
unkown
|
page read and write
|
||
17CF0513000
|
unkown
|
page read and write
|
||
E079879000
|
unkown
|
page read and write
|
||
28514190000
|
heap private
|
page read and write
|
||
231B1C49000
|
unkown
|
page read and write
|
||
231B1C4E000
|
unkown
|
page read and write
|
||
23576200000
|
unkown
|
page readonly
|
||
2407C260000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
A0A80FF000
|
unkown
|
page read and write
|
||
7FF4F259C000
|
unkown
|
page readonly
|
||
7FF52A9E3000
|
unkown
|
page readonly
|
||
7FF5E33C7000
|
unkown
|
page readonly
|
||
28D6B48A000
|
unkown
|
page read and write
|
||
86E3E7B000
|
unkown
|
page read and write
|
||
25A5000
|
unkown
|
page readonly
|
||
28D6D350000
|
unkown
|
page read and write
|
||
2407C0D0000
|
unkown
|
page readonly
|
||
245742A1000
|
unkown
|
page read and write
|
||
28D6E010000
|
unkown
|
page read and write
|
||
245742A2000
|
unkown
|
page read and write
|
||
7FF5D3C74000
|
unkown
|
page readonly
|
||
2407C443000
|
unkown
|
page read and write
|
||
7FF52AD33000
|
unkown
|
page readonly
|
||
7FF50CD14000
|
unkown
|
page readonly
|
||
29E01E70000
|
unkown
|
page readonly
|
||
7FF5BBC28000
|
unkown
|
page readonly
|
||
20967869000
|
unkown
|
page read and write
|
||
7FF4F25D1000
|
unkown
|
page readonly
|
||
24575130000
|
unkown
|
page read and write
|
||
7FF52A9F8000
|
unkown
|
page readonly
|
||
231B1C4A000
|
unkown
|
page read and write
|
||
28D6D460000
|
unkown
|
page read and write
|
||
7FF5E31A5000
|
unkown
|
page readonly
|
||
3F4A3FE000
|
unkown
|
page read and write
|
||
7FF50CA55000
|
unkown
|
page readonly
|
||
7FF5D417A000
|
unkown
|
page readonly
|
||
28D6D60C000
|
unkown
|
page read and write
|
||
20967860000
|
unkown
|
page read and write
|
||
29E0204B000
|
unkown
|
page read and write
|
||
7FF4F25A1000
|
unkown
|
page readonly
|
||
7FF50BBBF000
|
unkown
|
page readonly
|
||
3F49C7B000
|
unkown
|
page read and write
|
||
28D6B58B000
|
unkown
|
page read and write
|
||
7FF50CCE8000
|
unkown
|
page readonly
|
||
2407C220000
|
unkown
|
page read and write
|
||
24574257000
|
heap default
|
page read and write
|
||
7FF4F20F6000
|
unkown
|
page readonly
|
||
E0798FE000
|
unkown
|
page read and write
|
||
7FF4F203F000
|
unkown
|
page readonly
|
||
2407B3F3000
|
unkown
|
page read and write
|
||
2407BD40000
|
unkown
|
page readonly
|
||
FF7E177000
|
unkown
|
page read and write
|
||
7FF50CCF6000
|
unkown
|
page readonly
|
||
7FF50BB86000
|
unkown
|
page readonly
|
||
28D6B429000
|
unkown
|
page read and write
|
||
3F4A5FF000
|
unkown
|
page read and write
|
||
231B1D08000
|
unkown
|
page read and write
|
||
FF7E27F000
|
unkown
|
page read and write
|
||
28D6D900000
|
unkown
|
page read and write
|
||
28D6D37B000
|
unkown
|
page read and write
|
||
24574300000
|
unkown
|
page read and write
|
||
7FF5E34AE000
|
unkown
|
page readonly
|
||
3F4A4FF000
|
unkown
|
page read and write
|
||
7FF50BBBF000
|
unkown
|
page readonly
|
||
28D6B495000
|
unkown
|
page read and write
|
||
2407C460000
|
unkown
|
page read and write
|
||
28D6D614000
|
unkown
|
page read and write
|
||
7FF50B9D3000
|
unkown
|
page readonly
|
||
7FF5D423D000
|
unkown
|
page readonly
|
||
7FF5D817F000
|
unkown
|
page readonly
|
||
7FF4F26E7000
|
unkown
|
page readonly
|
||
2407BD20000
|
unkown
|
page readonly
|
||
7FF5E3594000
|
unkown
|
page readonly
|
||
28D6D300000
|
unkown
|
page read and write
|
||
2407C330000
|
unkown
|
page read and write
|
||
28D6B53A000
|
unkown
|
page read and write
|
||
2407AE00000
|
unkown
|
page readonly
|
||
28AA000
|
unkown
|
page read and write
|
||
5D8BCFF000
|
unkown
|
page read and write
|
||
2647000
|
unkown
|
page readonly
|
||
7FF50B698000
|
unkown
|
page readonly
|
||
7FF50B980000
|
unkown
|
page readonly
|
||
7FF50BB8B000
|
unkown
|
page readonly
|
||
7FF50BAF5000
|
unkown
|
page readonly
|
||
2407AB60000
|
heap private
|
page read and write
|
||
28D6B494000
|
unkown
|
page read and write
|
||
7FF4F27B7000
|
unkown
|
page readonly
|
||
7FF52AF0E000
|
unkown
|
page readonly
|
||
231B1C3C000
|
unkown
|
page read and write
|
||
A0A7B75000
|
unkown
|
page read and write
|
||
288A000
|
heap default
|
page read and write
|
||
2566000
|
unkown
|
page readonly
|
||
7FF4F235F000
|
unkown
|
page readonly
|
||
28D6B493000
|
unkown
|
page read and write
|
||
7FF50BAF9000
|
unkown
|
page readonly
|
||
28514400000
|
unkown
|
page readonly
|
||
28D6D320000
|
unkown
|
page read and write
|
||
7FF5BBC0C000
|
unkown
|
page readonly
|
||
2096786C000
|
unkown
|
page read and write
|
||
231B1BA0000
|
unkown
|
page readonly
|
||
28D6D3BF000
|
unkown
|
page read and write
|
||
2407C324000
|
unkown
|
page write copy
|
||
7FF4F85C4000
|
unkown
|
page readonly
|
||
5E0000
|
heap private
|
page read and write
|
||
28D6D6B6000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
F0D5BFD000
|
unkown
|
page read and write
|
||
2B74B200000
|
unkown
|
page write copy
|
||
7FF4F84CD000
|
unkown
|
page readonly
|
||
E0797FB000
|
unkown
|
page read and write
|
||
7FF5891A5000
|
unkown
|
page readonly
|
||
5D8BAFE000
|
unkown
|
page read and write
|
||
28D6B473000
|
unkown
|
page read and write
|
||
2407BC10000
|
unkown
|
page read and write
|
||
231B1AC0000
|
heap default
|
page read and write
|
||
7FF5E3264000
|
unkown
|
page readonly
|
||
28D6D783000
|
unkown
|
page read and write
|
||
245742E8000
|
unkown
|
page read and write
|
||
29E01F50000
|
unkown
|
page readonly
|
||
17CF0467000
|
unkown
|
page read and write
|
||
7FF5D4369000
|
unkown
|
page readonly
|
||
D6E58FB000
|
unkown
|
page read and write
|
||
28D6E210000
|
unkown
|
page read and write
|
||
2407ABD0000
|
unkown
|
page readonly
|
||
25AC000
|
unkown
|
page readonly
|
||
28D6D313000
|
unkown
|
page read and write
|
||
28D6B55B000
|
unkown
|
page read and write
|
||
28D6E110000
|
unkown
|
page read and write
|
||
28D6D316000
|
unkown
|
page read and write
|
||
24574509000
|
heap private
|
page read and write
|
||
D6E647B000
|
unkown
|
page read and write
|
||
28D6B58C000
|
unkown
|
page read and write
|
||
7FF4F86AE000
|
unkown
|
page readonly
|
||
28D6D783000
|
unkown
|
page read and write
|
||
C7DDF7F000
|
unkown
|
page read and write
|
||
28D6B495000
|
unkown
|
page read and write
|
||
7FF5BBCF0000
|
unkown
|
page readonly
|
||
7FF50BB0A000
|
unkown
|
page readonly
|
||
28D6E210000
|
unkown
|
page read and write
|
||
2A80000
|
unkown
|
page readonly
|
||
7FF52AEEB000
|
unkown
|
page readonly
|
||
7FF52AEDF000
|
unkown
|
page readonly
|
||
7FF5E3623000
|
unkown
|
page readonly
|
||
C7DDA7F000
|
unkown
|
page read and write
|
||
28D6B44F000
|
unkown
|
page read and write
|
||
7FF4F2453000
|
unkown
|
page readonly
|
||
28D6B495000
|
unkown
|
page read and write
|
||
28D6B492000
|
unkown
|
page read and write
|
||
17CF0600000
|
unkown
|
page readonly
|
||
28514870000
|
unkown
|
page readonly
|
||
7FF5E33E1000
|
unkown
|
page readonly
|
||
2407C350000
|
unkown
|
page read and write
|
||
7FF5D8098000
|
unkown
|
page readonly
|
||
5B30000
|
heap private
|
page read and write
|
||
86E3FFE000
|
unkown
|
page read and write
|
||
7FF5E35C7000
|
unkown
|
page readonly
|
||
7FF5E35ED000
|
unkown
|
page readonly
|
||
58BF47E000
|
unkown
|
page read and write
|
||
28D6D802000
|
unkown
|
page read and write
|
||
7FF4F267C000
|
unkown
|
page readonly
|
||
231B1C55000
|
unkown
|
page read and write
|
||
254D000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
28D6D6D9000
|
unkown
|
page read and write
|
||
D6E61FB000
|
unkown
|
page read and write
|
||
25B5000
|
unkown
|
page readonly
|
||
23576029000
|
unkown
|
page read and write
|
||
2851422A000
|
unkown
|
page read and write
|
||
29A0000
|
heap default
|
page read and write
|
||
28514980000
|
unkown
|
page read and write
|
||
7FF50CBE7000
|
unkown
|
page readonly
|
||
7FF50BBAB000
|
unkown
|
page readonly
|
||
7FF589236000
|
unkown
|
page readonly
|
||
C7DD4F7000
|
unkown
|
page read and write
|
||
28D6E110000
|
unkown
|
page read and write
|
||
28D6B492000
|
unkown
|
page read and write
|
||
2407AC74000
|
unkown
|
page read and write
|
||
7FF4F20D6000
|
unkown
|
page readonly
|
||
231B2600000
|
unkown
|
page readonly
|
||
7FF50B873000
|
unkown
|
page readonly
|
||
28D6D614000
|
unkown
|
page read and write
|
||
F0D5A7A000
|
unkown
|
page read and write
|
||
23576002000
|
unkown
|
page read and write
|
||
7FF5D80C3000
|
unkown
|
page readonly
|
||
28D6B474000
|
unkown
|
page read and write
|
||
23575E20000
|
heap private
|
page read and write
|
||
29E02A00000
|
unkown
|
page readonly
|
||
2407C340000
|
unkown
|
page read and write
|
||
2407C600000
|
unkown
|
page readonly
|
||
2407AC56000
|
unkown
|
page read and write
|
||
7FF4F869D000
|
unkown
|
page readonly
|
||
7FF50BBAE000
|
unkown
|
page readonly
|
||
7FF50BA34000
|
unkown
|
page readonly
|
||
7FF5D42A4000
|
unkown
|
page readonly
|
||
231B1C70000
|
unkown
|
page read and write
|
||
2407C360000
|
unkown
|
page read and write
|
||
7FF5BBCDF000
|
unkown
|
page readonly
|
||
7FF5E36A4000
|
unkown
|
page readonly
|
||
7FF5D435D000
|
unkown
|
page readonly
|
||
20967861000
|
unkown
|
page read and write
|
||
7FF589240000
|
unkown
|
page readonly
|
||
7FF5E36BF000
|
unkown
|
page readonly
|
||
7FF5E3260000
|
unkown
|
page readonly
|
||
7FF589177000
|
unkown
|
page readonly
|
||
2533000
|
unkown
|
page readonly
|
||
7FF4F2868000
|
unkown
|
page readonly
|
||
28D6D38D000
|
unkown
|
page read and write
|
||
58BF27E000
|
unkown
|
page read and write
|
||
2407AC9B000
|
unkown
|
page read and write
|
||
17CF1140000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
5C0000
|
unkown
|
page read and write
|
||
D6E657D000
|
unkown
|
page read and write
|
||
28A5000
|
unkown
|
page read and write
|
||
3F49DFF000
|
unkown
|
page read and write
|
||
2407C660000
|
unkown
|
page readonly
|
||
2407AC8E000
|
unkown
|
page read and write
|
||
20967847000
|
unkown
|
page read and write
|
||
7FF5E35D8000
|
unkown
|
page readonly
|
||
7FF4F28AF000
|
unkown
|
page readonly
|
||
2407C380000
|
unkown
|
page read and write
|
||
7FF4F23E1000
|
unkown
|
page readonly
|
||
7FF5D790B000
|
unkown
|
page readonly
|
||
7FF5D440D000
|
unkown
|
page readonly
|
||
2096784B000
|
unkown
|
page read and write
|
||
29E01F60000
|
unkown
|
page read and write
|
||
D6E52FE000
|
unkown
|
page read and write
|
||
D6E597B000
|
unkown
|
page read and write
|
||
28D6D450000
|
unkown
|
page read and write
|
||
25D4000
|
unkown
|
page readonly
|
||
7FF52AE13000
|
unkown
|
page readonly
|
||
28D6D3E3000
|
unkown
|
page read and write
|
||
28D6D338000
|
unkown
|
page read and write
|
||
28D6D376000
|
unkown
|
page read and write
|
||
C7DD0FB000
|
unkown
|
page read and write
|
||
FF7E07E000
|
unkown
|
page read and write
|
||
7FF52AE2C000
|
unkown
|
page readonly
|
||
245750E0000
|
unkown
|
page read and write
|
||
A0A7CFB000
|
unkown
|
page read and write
|
||
2407C2F4000
|
unkown
|
page readonly
|
||
7FF588901000
|
unkown
|
page readonly
|
||
7FF5D431C000
|
unkown
|
page readonly
|
||
20967867000
|
unkown
|
page read and write
|
||
28D6D3DE000
|
unkown
|
page read and write
|
||
7FF52AE27000
|
unkown
|
page readonly
|
||
28D6D30C000
|
unkown
|
page read and write
|
||
86E45FD000
|
unkown
|
page read and write
|
||
28D6B57B000
|
unkown
|
page read and write
|
||
7FF4F27A7000
|
unkown
|
page readonly
|
||
2407C250000
|
unkown
|
page read and write
|
||
D6E4F8B000
|
unkown
|
page read and write
|
||
C7DDAFF000
|
unkown
|
page read and write
|
||
7FF5D808C000
|
unkown
|
page readonly
|
||
2407BB20000
|
unkown
|
page read and write
|
||
28BF000
|
unkown
|
page read and write
|
||
7FF5D4348000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
2407C241000
|
unkown
|
page read and write
|
||
231B1C50000
|
unkown
|
page read and write
|
||
17CF0C02000
|
unkown
|
page read and write
|
||
7FF5BBCE6000
|
unkown
|
page readonly
|
||
28D6D60E000
|
unkown
|
page read and write
|
||
7FF4F8625000
|
unkown
|
page readonly
|
||
28D6D624000
|
unkown
|
page read and write
|
||
2407C44B000
|
unkown
|
page read and write
|
||
7FF4F289B000
|
unkown
|
page readonly
|
||
20967864000
|
unkown
|
page read and write
|
||
28514980000
|
unkown
|
page read and write
|
||
2B74B002000
|
unkown
|
page read and write
|
||
25DD000
|
unkown
|
page readonly
|
||
245742BE000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
7FF5D40F6000
|
unkown
|
page readonly
|
||
86E44FD000
|
unkown
|
page read and write
|
||
2096787C000
|
unkown
|
page read and write
|
||
2B74B250000
|
unkown
|
page readonly
|
||
7FF5E35F9000
|
unkown
|
page readonly
|
||
28D6D32A000
|
unkown
|
page read and write
|
||
7FF4F2770000
|
unkown
|
page readonly
|
||
D6E5F79000
|
unkown
|
page read and write
|
||
7FF52AEE6000
|
unkown
|
page readonly
|
||
23576802000
|
unkown
|
page read and write
|
||
20967840000
|
unkown
|
page read and write
|
||
2432000
|
unkown
|
page readonly
|
||
28D6D315000
|
unkown
|
page read and write
|
||
28D6B57B000
|
unkown
|
page read and write
|
||
7FF5E316F000
|
unkown
|
page readonly
|
||
5D8B6FE000
|
unkown
|
page read and write
|
||
7FF5D41C2000
|
unkown
|
page readonly
|
||
7FF50BAED000
|
unkown
|
page readonly
|
||
7FF5D817B000
|
unkown
|
page readonly
|
||
7FF5D442F000
|
unkown
|
page readonly
|
||
C7DD77A000
|
unkown
|
page read and write
|
||
4350000
|
unkown
|
page readonly
|
||
28D6B491000
|
unkown
|
page read and write
|
||
28D6B4DC000
|
unkown
|
page read and write
|
||
28D6D314000
|
unkown
|
page read and write
|
||
7FF5D43EF000
|
unkown
|
page readonly
|
||
7FF5D4252000
|
unkown
|
page readonly
|
||
663000
|
unkown
|
page read and write
|
||
7FF50C90D000
|
unkown
|
page readonly
|
||
28D6D3FC000
|
unkown
|
page read and write
|
||
425F000
|
stack
|
page read and write
|
||
7FF4F279C000
|
unkown
|
page readonly
|
||
7FF58900D000
|
unkown
|
page readonly
|
||
24574220000
|
unkown
|
page readonly
|
||
28B2000
|
unkown
|
page read and write
|
||
2407C370000
|
unkown
|
page read and write
|
||
2407C3D0000
|
unkown
|
page readonly
|
||
7FF5D43FE000
|
unkown
|
page readonly
|
||
2457430F000
|
unkown
|
page read and write
|
||
2B74CA10000
|
unkown
|
page read and write
|
||
28D6B54B000
|
unkown
|
page read and write
|
||
7FF50CC3C000
|
unkown
|
page readonly
|
||
C7DD679000
|
unkown
|
page read and write
|
||
231B2402000
|
unkown
|
page read and write
|
||
28514C00000
|
unkown
|
page read and write
|
||
28D6B57C000
|
unkown
|
page read and write
|
||
20967802000
|
unkown
|
page read and write
|
||
28D6B55D000
|
unkown
|
page read and write
|
||
7FF5BBC38000
|
unkown
|
page readonly
|
||
2551000
|
unkown
|
page readonly
|
||
5D8B9FD000
|
unkown
|
page read and write
|
||
7FF5D437A000
|
unkown
|
page readonly
|
||
7FF5E3410000
|
unkown
|
page readonly
|
||
20967845000
|
unkown
|
page read and write
|
||
3F4A2FF000
|
unkown
|
page read and write
|
||
7FF5D8164000
|
unkown
|
page readonly
|
||
F0D5B79000
|
unkown
|
page read and write
|
||
7FF589140000
|
unkown
|
page readonly
|
||
28D6D60C000
|
unkown
|
page read and write
|
||
28D6D743000
|
unkown
|
page read and write
|
||
231B1C00000
|
unkown
|
page read and write
|
||
7FF50CD0D000
|
unkown
|
page readonly
|
||
7FF52AF04000
|
unkown
|
page readonly
|
||
7FF50CB3D000
|
unkown
|
page readonly
|
||
FF7E37D000
|
unkown
|
page read and write
|
||
7FF58924D000
|
unkown
|
page readonly
|
||
7FF52AF1B000
|
unkown
|
page readonly
|
||
7FF4F27E5000
|
unkown
|
page readonly
|
||
28D6D430000
|
unkown
|
page read and write
|
||
2242000
|
unkown
|
page readonly
|
||
7FF52AE38000
|
unkown
|
page readonly
|
||
24574510000
|
unkown
|
page read and write
|
||
667000
|
unkown
|
page read and write
|
||
7FF4F2792000
|
unkown
|
page readonly
|
||
C7DD9FF000
|
unkown
|
page read and write
|
||
28D6E110000
|
unkown
|
page read and write
|
||
7FF4F8273000
|
unkown
|
page readonly
|
||
7FF4F27BC000
|
unkown
|
page readonly
|
||
7FF50B983000
|
unkown
|
page readonly
|
||
2B74CB10000
|
unkown
|
page readonly
|
||
2407C4AF000
|
unkown
|
page read and write
|
||
7FF50CC04000
|
unkown
|
page readonly
|
||
209677C0000
|
heap default
|
page read and write
|
||
7FF4F2767000
|
unkown
|
page readonly
|
||
7FF52AE85000
|
unkown
|
page readonly
|
||
28D6D314000
|
unkown
|
page read and write
|
||
28D6D612000
|
unkown
|
page read and write
|
||
25A1000
|
unkown
|
page readonly
|
||
7FF4F28AF000
|
unkown
|
page readonly
|
||
4DA000
|
unkown
|
page read and write
|
||
28D6B531000
|
unkown
|
page read and write
|
||
245742A9000
|
unkown
|
page read and write
|
||
24574720000
|
unkown
|
page readonly
|
||
28D6D320000
|
unkown
|
page read and write
|
||
7FF5BBA27000
|
unkown
|
page readonly
|
||
259B000
|
unkown
|
page readonly
|
||
29E02067000
|
unkown
|
page read and write
|
||
7FF5D80B5000
|
unkown
|
page readonly
|
||
2B74B056000
|
unkown
|
page read and write
|
||
7FF50CA37000
|
unkown
|
page readonly
|
||
7FF588F26000
|
unkown
|
page readonly
|
||
28D6D320000
|
unkown
|
page read and write
|
||
7FF5D4365000
|
unkown
|
page readonly
|
||
28514A02000
|
unkown
|
page read and write
|
||
7FF52ACE3000
|
unkown
|
page readonly
|
||
7FF52AF1F000
|
unkown
|
page readonly
|
||
A0A771C000
|
unkown
|
page read and write
|
||
7FF589130000
|
unkown
|
page readonly
|
||
28D6D60E000
|
unkown
|
page read and write
|
||
245750C0000
|
unkown
|
page readonly
|
||
7FF5D43FB000
|
unkown
|
page readonly
|
||
28D6D3CB000
|
unkown
|
page read and write
|
||
7FF5D79C5000
|
unkown
|
page readonly
|
||
2427000
|
unkown
|
page readonly
|
||
7FF5D4414000
|
unkown
|
page readonly
|
||
7FF5D4337000
|
unkown
|
page readonly
|
||
7FF50BB7F000
|
unkown
|
page readonly
|
||
25CD000
|
unkown
|
page readonly
|
||
5B80000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
28D6B492000
|
unkown
|
page read and write
|
||
231B1BC0000
|
unkown
|
page read and write
|
||
28D6D430000
|
unkown
|
page read and write
|
||
29E02100000
|
unkown
|
page read and write
|
||
28D6B491000
|
unkown
|
page read and write
|
||
7FF5BBC63000
|
unkown
|
page readonly
|
||
7FF5BBAB2000
|
unkown
|
page readonly
|
||
7FF50B95D000
|
unkown
|
page readonly
|
||
7FF50BACC000
|
unkown
|
page readonly
|
||
23576A00000
|
unkown
|
page readonly
|
||
24574200000
|
unkown
|
page read and write
|
||
D6E527E000
|
unkown
|
page read and write
|
||
5A0000
|
unkown
|
page readonly
|
||
7FF50BBBB000
|
unkown
|
page readonly
|
||
D6E5AFA000
|
unkown
|
page read and write
|
||
28514302000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
2407C42D000
|
unkown
|
page read and write
|
||
2407B500000
|
unkown
|
page read and write
|
||
7FF5E34CD000
|
unkown
|
page readonly
|
||
28D6E110000
|
unkown
|
page read and write
|
||
C7DD87F000
|
unkown
|
page read and write
|
||
24574E00000
|
unkown
|
page read and write
|
||
7FF4F8686000
|
unkown
|
page readonly
|
||
28D6E310000
|
unkown
|
page read and write
|
||
231B1C69000
|
unkown
|
page read and write
|
||
7FF50B262000
|
unkown
|
page readonly
|
||
7FF50CC93000
|
unkown
|
page readonly
|
||
7FF4EC36E000
|
unkown
|
page readonly
|
||
F0D59FA000
|
unkown
|
page read and write
|
||
28B4000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
D6E65FC000
|
unkown
|
page read and write
|
||
28D6B3E0000
|
unkown
|
page readonly
|
||
28D6D783000
|
unkown
|
page read and write
|
||
7FF5E33E5000
|
unkown
|
page readonly
|
||
28D6D34D000
|
unkown
|
page read and write
|
||
28D6B538000
|
unkown
|
page read and write
|
||
2580000
|
unkown
|
page readonly
|
||
28D6D612000
|
unkown
|
page read and write
|
||
28D6D613000
|
unkown
|
page read and write
|
||
17CF0400000
|
unkown
|
page read and write
|
||
28D6B490000
|
unkown
|
page read and write
|
||
7FF52AD0E000
|
unkown
|
page readonly
|
||
7FF5BBA1D000
|
unkown
|
page readonly
|
||
29E0204A000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
17CF0E00000
|
unkown
|
page readonly
|
||
28D6D743000
|
unkown
|
page read and write
|
||
7FF4F275D000
|
unkown
|
page readonly
|
||
20967760000
|
heap private
|
page read and write
|
||
F0D587B000
|
unkown
|
page read and write
|
||
28D6B513000
|
unkown
|
page read and write
|
||
D6E607B000
|
unkown
|
page read and write
|
||
28D6B46D000
|
unkown
|
page read and write
|
||
7FF4F26FF000
|
unkown
|
page readonly
|
||
28D6D38B000
|
unkown
|
page read and write
|
||
A0A7EFF000
|
unkown
|
page read and write
|
||
7FF5D3EDF000
|
unkown
|
page readonly
|
||
231B1A60000
|
heap private
|
page read and write
|
||
2B74CE70000
|
unkown
|
page read and write
|
||
24574E80000
|
unkown
|
page read and write
|
||
7FF50CD1E000
|
unkown
|
page readonly
|
||
28D6B54B000
|
unkown
|
page read and write
|
||
7FF5E3690000
|
unkown
|
page readonly
|
||
20967848000
|
unkown
|
page read and write
|
||
231B1C48000
|
unkown
|
page read and write
|
||
5F0000
|
unkown
|
page readonly
|
||
7FF4F85F5000
|
unkown
|
page readonly
|
||
28514950000
|
unkown
|
page read and write
|
||
28D6D743000
|
unkown
|
page read and write
|
||
7FF5E345D000
|
unkown
|
page readonly
|
||
28D6E310000
|
unkown
|
page read and write
|
||
2096784E000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
28514980000
|
unkown
|
page read and write
|
||
7FF5D442B000
|
unkown
|
page readonly
|
||
245741E0000
|
unkown
|
page read and write
|
||
2407AD02000
|
unkown
|
page read and write
|
||
2407C244000
|
unkown
|
page read and write
|
||
28D6B53A000
|
unkown
|
page read and write
|
||
2407ACF8000
|
unkown
|
page read and write
|
||
7FF50CC73000
|
unkown
|
page readonly
|
||
2407C400000
|
unkown
|
page read and write
|
||
2B74B000000
|
unkown
|
page read and write
|
||
2631000
|
unkown
|
page readonly
|
||
7FF50C484000
|
unkown
|
page readonly
|
||
29E02000000
|
unkown
|
page read and write
|
||
28BF000
|
unkown
|
page read and write
|
||
2357605A000
|
unkown
|
page read and write
|
||
2407B330000
|
unkown
|
page read and write
|
||
58BF57E000
|
unkown
|
page read and write
|
||
7FF58926D000
|
unkown
|
page readonly
|
||
7FF5BBC2C000
|
unkown
|
page readonly
|
||
29E01F40000
|
unkown
|
page readonly
|
||
28D6D430000
|
unkown
|
page readonly
|
||
20967846000
|
unkown
|
page read and write
|
||
7FF5D4325000
|
unkown
|
page readonly
|
||
2407AED0000
|
unkown
|
page readonly
|
||
7FF4F84F7000
|
unkown
|
page readonly
|
||
2407C120000
|
unkown
|
page read and write
|
||
3F4A1FE000
|
unkown
|
page read and write
|
||
7FF4F2668000
|
unkown
|
page readonly
|
||
7FF5E356D000
|
unkown
|
page readonly
|
||
17CF04BA000
|
unkown
|
page read and write
|
||
7FF5E2E18000
|
unkown
|
page readonly
|
||
28D6D480000
|
unkown
|
page readonly
|
||
7FF5D80CA000
|
unkown
|
page readonly
|
||
2B74B450000
|
unkown
|
page readonly
|
||
7FF5BBADC000
|
unkown
|
page readonly
|
||
7FF5E36BB000
|
unkown
|
page readonly
|
||
28D6D6E0000
|
unkown
|
page read and write
|
||
7FF4F25A3000
|
unkown
|
page readonly
|
||
D6E62FD000
|
unkown
|
page read and write
|
||
28D6E000000
|
unkown
|
page read and write
|
||
28D6E110000
|
unkown
|
page read and write
|
||
28D6B47B000
|
unkown
|
page read and write
|
||
2407C4AA000
|
unkown
|
page read and write
|
||
2407AC6C000
|
unkown
|
page read and write
|
||
2407C380000
|
unkown
|
page read and write
|
||
7FF4F2600000
|
unkown
|
page readonly
|
||
7FF4F844A000
|
unkown
|
page readonly
|
||
7FF5D79A6000
|
unkown
|
page readonly
|
||
7FF50BAB3000
|
unkown
|
page readonly
|
||
28D6D34C000
|
unkown
|
page read and write
|
||
7FF52ACEE000
|
unkown
|
page readonly
|
||
20967883000
|
unkown
|
page read and write
|
||
7FF5E3577000
|
unkown
|
page readonly
|
||
D6E56FA000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
7FF5E2E14000
|
unkown
|
page readonly
|
||
28D6B492000
|
unkown
|
page read and write
|
||
231B1C4B000
|
unkown
|
page read and write
|
||
D6E557B000
|
unkown
|
page read and write
|
||
17CF0A60000
|
unkown
|
page readonly
|
||
7FF50CBDD000
|
unkown
|
page readonly
|
||
23576000000
|
unkown
|
page read and write
|
||
2407C250000
|
unkown
|
page read and write
|
||
29E02200000
|
unkown
|
page readonly
|
||
20967829000
|
unkown
|
page read and write
|
||
D6E5E7B000
|
unkown
|
page read and write
|
||
28D6D320000
|
unkown
|
page read and write
|
||
28D6B491000
|
unkown
|
page read and write
|
||
28514200000
|
unkown
|
page read and write
|
||
28D6D349000
|
unkown
|
page read and write
|
||
7FF4F2080000
|
unkown
|
page readonly
|
||
28D6E010000
|
unkown
|
page read and write
|
||
285141F0000
|
heap default
|
page read and write
|
||
28D6D315000
|
unkown
|
page read and write
|
||
17CF0443000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
7FF50BAB7000
|
unkown
|
page readonly
|
||
28514213000
|
unkown
|
page read and write
|
||
24574320000
|
heap default
|
page read and write
|
||
285144D0000
|
unkown
|
page readonly
|
||
28D6E210000
|
unkown
|
page read and write
|
||
20967844000
|
unkown
|
page read and write
|
||
28D6D802000
|
unkown
|
page read and write
|
||
D6E547F000
|
unkown
|
page read and write
|
||
7FF50CC48000
|
unkown
|
page readonly
|
||
28D6D314000
|
unkown
|
page read and write
|
||
7FF5E369D000
|
unkown
|
page readonly
|
||
28514202000
|
unkown
|
page read and write
|
||
231B1BB0000
|
unkown
|
page readonly
|
||
2096786A000
|
unkown
|
page read and write
|
||
3F49FFF000
|
unkown
|
page read and write
|
||
28D6B5BC000
|
unkown
|
page read and write
|
||
7FF50CA2D000
|
unkown
|
page readonly
|
||
7FF58925E000
|
unkown
|
page readonly
|
||
5D8B3FC000
|
unkown
|
page read and write
|
||
28D6B43F000
|
unkown
|
page read and write
|
||
7FF5BBC17000
|
unkown
|
page readonly
|
||
28D6B479000
|
unkown
|
page read and write
|
||
58BEFDE000
|
unkown
|
page read and write
|
||
4510000
|
unkown
|
page readonly
|
||
28D6D320000
|
unkown
|
page read and write
|
||
28D6D31D000
|
unkown
|
page read and write
|
||
28D6D31E000
|
unkown
|
page read and write
|
||
7FF52ACE0000
|
unkown
|
page readonly
|
||
7FF52AF1F000
|
unkown
|
page readonly
|
||
D6E577B000
|
unkown
|
page read and write
|
||
7FF4F85ED000
|
unkown
|
page readonly
|
||
17CF04E5000
|
unkown
|
page read and write
|
||
2407C41A000
|
unkown
|
page read and write
|
||
2407B701000
|
unkown
|
page read and write
|
||
C7DDD7F000
|
unkown
|
page read and write
|
||
2407AD13000
|
unkown
|
page read and write
|
||
C7DDCFF000
|
unkown
|
page read and write
|
||
28D6E110000
|
unkown
|
page read and write
|
||
23576076000
|
unkown
|
page read and write
|
||
20967841000
|
unkown
|
page read and write
|
||
28D6D743000
|
unkown
|
page read and write
|
||
7FF5D3F8A000
|
unkown
|
page readonly
|
||
28D6D842000
|
unkown
|
page read and write
|
||
2407B415000
|
unkown
|
page read and write
|
||
7FF5E3686000
|
unkown
|
page readonly
|
||
28D6D783000
|
unkown
|
page read and write
|
||
28D6B479000
|
unkown
|
page read and write
|
||
2407C498000
|
unkown
|
page read and write
|
||
7FF5BBD1F000
|
unkown
|
page readonly
|
||
2570000
|
unkown
|
page readonly
|
||
7FF4F7F0C000
|
unkown
|
page readonly
|
||
5D8BBFC000
|
unkown
|
page read and write
|
||
7FF4F86BF000
|
unkown
|
page readonly
|
||
28D6D612000
|
unkown
|
page read and write
|
||
2541000
|
unkown
|
page readonly
|
||
24574230000
|
unkown
|
page readonly
|
||
2B74AF30000
|
unkown
|
page readonly
|
||
28D6D202000
|
unkown
|
page read and write
|
||
28D6D31D000
|
unkown
|
page read and write
|
||
7FF5E35B3000
|
unkown
|
page readonly
|
||
7FF50CD2B000
|
unkown
|
page readonly
|
||
28D6D697000
|
unkown
|
page read and write
|
||
231B1D00000
|
unkown
|
page read and write
|
||
28D6B47C000
|
unkown
|
page read and write
|
||
7FF589153000
|
unkown
|
page readonly
|
||
2407B3F0000
|
unkown
|
page read and write
|
||
7FF4EC36E000
|
unkown
|
page readonly
|
||
29B0000
|
unkown
|
page readonly
|
||
2407B518000
|
unkown
|
page read and write
|
||
262B000
|
unkown
|
page readonly
|
||
7FF4F243F000
|
unkown
|
page readonly
|
||
28D6B4F4000
|
unkown
|
page read and write
|
||
28D6B490000
|
unkown
|
page read and write
|
||
24574180000
|
unkown
|
page read and write
|
||
28D6D612000
|
unkown
|
page read and write
|
||
7FF4F2760000
|
unkown
|
page readonly
|
||
86E427F000
|
unkown
|
page read and write
|
||
E07997B000
|
unkown
|
page read and write
|
||
28D6B491000
|
unkown
|
page read and write
|
||
7FF5D4108000
|
unkown
|
page readonly
|
||
D6E5C7B000
|
unkown
|
page read and write
|
||
7FF5D441E000
|
unkown
|
page readonly
|
||
28D6E210000
|
unkown
|
page read and write
|
||
28D6D339000
|
unkown
|
page read and write
|
||
7FF4F259A000
|
unkown
|
page readonly
|
||
2407C314000
|
unkown
|
page readonly
|
||
7FF5E36BF000
|
unkown
|
page readonly
|
||
A0A7A7E000
|
unkown
|
page read and write
|
||
7FF52AD75000
|
unkown
|
page readonly
|
||
7FF5D816B000
|
unkown
|
page readonly
|
||
83E000
|
unkown
|
page read and write
|
||
7FF4F28AB000
|
unkown
|
page readonly
|
||
7FF5D441B000
|
unkown
|
page readonly
|
||
28D6B390000
|
unkown
|
page readonly
|
||
20967849000
|
unkown
|
page read and write
|
||
20967AD0000
|
unkown
|
page readonly
|
||
D6E53FA000
|
unkown
|
page read and write
|
||
7FF50B683000
|
unkown
|
page readonly
|
||
7FF4F287E000
|
unkown
|
page readonly
|
||
7FF50CD00000
|
unkown
|
page readonly
|
||
231B1C29000
|
unkown
|
page read and write
|
||
24574AB0000
|
unkown
|
page readonly
|
||
7FF4F287B000
|
unkown
|
page readonly
|
||
7FF52AE4D000
|
unkown
|
page readonly
|
||
28D6B58C000
|
unkown
|
page read and write
|
||
20967831000
|
unkown
|
page read and write
|
||
C7DDC7F000
|
unkown
|
page read and write
|
||
7FF50CC40000
|
unkown
|
page readonly
|
||
7FF4F2663000
|
unkown
|
page readonly
|
||
7FF58919D000
|
unkown
|
page readonly
|
||
28D6B44D000
|
unkown
|
page read and write
|
||
7FF5BBCEB000
|
unkown
|
page readonly
|
||
28D6E010000
|
unkown
|
page read and write
|
||
7FF4F27C8000
|
unkown
|
page readonly
|
||
28D6B53B000
|
unkown
|
page read and write
|
||
28D6B475000
|
unkown
|
page read and write
|
||
A0A7BFF000
|
unkown
|
page read and write
|
||
7FF5BBC02000
|
unkown
|
page readonly
|
||
28D6D430000
|
unkown
|
page read and write
|
||
28D6D743000
|
unkown
|
page read and write
|
||
28D6D624000
|
unkown
|
page read and write
|
||
20967874000
|
unkown
|
page read and write
|
||
7FF5D433C000
|
unkown
|
page readonly
|
||
2407B502000
|
unkown
|
page read and write
|
||
28D6D612000
|
unkown
|
page read and write
|
||
28D6E210000
|
unkown
|
page read and write
|
||
17CF0B30000
|
unkown
|
page write copy
|
||
245742FD000
|
heap default
|
page read and write
|
||
7FF5E3598000
|
unkown
|
page readonly
|
||
24574E70000
|
unkown
|
page read and write
|
||
7FF50BB03000
|
unkown
|
page readonly
|
||
25B9000
|
unkown
|
page readonly
|
||
7FF4F867F000
|
unkown
|
page readonly
|
||
7FF5D80E5000
|
unkown
|
page readonly
|
||
7FF5D43E8000
|
unkown
|
page readonly
|
||
7FF50BA0F000
|
unkown
|
page readonly
|
||
28D6D612000
|
unkown
|
page read and write
|
||
28D6E410000
|
unkown
|
page read and write
|
||
2407BD10000
|
unkown
|
page readonly
|
||
7FF5D8146000
|
unkown
|
page readonly
|
||
7FF5E36AE000
|
unkown
|
page readonly
|
||
245750D0000
|
unkown
|
page read and write
|
||
7FF50BB90000
|
unkown
|
page readonly
|
||
D6E5A7B000
|
unkown
|
page read and write
|
||
7FF52AF0B000
|
unkown
|
page readonly
|
||
7FF5D7816000
|
unkown
|
page readonly
|
||
7FF4F264D000
|
unkown
|
page readonly
|
||
17CF06D0000
|
unkown
|
page readonly
|
||
28D6E410000
|
unkown
|
page read and write
|
||
7FF5E368B000
|
unkown
|
page readonly
|
||
7FF589254000
|
unkown
|
page readonly
|
||
28D6D60C000
|
unkown
|
page read and write
|
||
2407B260000
|
unkown
|
page readonly
|
||
5AA0000
|
unkown
|
page read and write
|
||
7FF50CAA7000
|
unkown
|
page readonly
|
There are 1224 hidden memdumps, click here to show them.