Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
document-1019153116.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Fri Feb 19 09:21:15 2021, Security: 0
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\5DA27A90-0499-4C71-A14E-2D9A16E3C67F
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\88720000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 18:52:18 2019, mtime=Mon Feb 22 16:14:23 2021, atime=Mon Feb 22 16:14:23 2021, length=8192, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-1019153116.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:26:59
2020, mtime=Mon Feb 22 16:14:23 2021, atime=Mon Feb 22 16:14:23 2021, length=91136, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Desktop\C9720000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\7FDE0000
|
data
|
dropped
|
||
C:\Users\user\Desktop\50EE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\iopjvdf.vock,DllRegisterServer
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\System32\rundll32.exe
|
rundll32 ..\iopjvdf.vock,DllRegisterServer
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://wus2-000.contentsync.
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://wus2-000.pagecontentsync.
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://ncus-000.contentsync.
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
https://directory.services.
|
unknown
|
||
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
||
https://staging.cortana.ai
|
unknown
|
||
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
||
http://www.windows.com/pctv.
|
unknown
|
||
http://investor.msn.com
|
unknown
|
||
http://www.msnbc.com/news/ticker.txt
|
unknown
|
||
http://www.icra.org/vocabulary/.
|
unknown
|
||
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
||
http://www.hotmail.com/oe
|
unknown
|
||
https://marknadsundersokning.nu/ds/1902.gif
|
unknown
|
||
http://investor.msn.com/
|
unknown
|
There are 99 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
marknadsundersokning.nu
|
195.74.38.127
|
IPs
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
---|---|---|---|---|---|
195.74.38.127
|
unknown
|
Sweden
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
)s=
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
*s=
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
270A3
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
276BD
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2792E
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27A19
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
s&=
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
35239
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
353CF
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
wo0
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDBDE
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDEBB
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDFF3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE0BE
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
iy0
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F6326
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F6519
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
There are 156 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
7FF515826000
|
unkown
|
page readonly
|
||
29821560000
|
unkown
|
page read and write
|
||
1F8198B000
|
unkown
|
page read and write
|
||
7FF51575B000
|
unkown
|
page readonly
|
||
7FF5F18BB000
|
unkown
|
page readonly
|
||
13DF0DE0000
|
heap default
|
page read and write
|
||
2681B79A000
|
unkown
|
page read and write
|
||
19EFB536000
|
unkown
|
page read and write
|
||
7FF5A4FC4000
|
unkown
|
page readonly
|
||
198E52B7000
|
unkown
|
page read and write
|
||
7FF5A4F1F000
|
unkown
|
page readonly
|
||
7FF58632D000
|
unkown
|
page readonly
|
||
19EFB640000
|
unkown
|
page read and write
|
||
19EFC110000
|
unkown
|
page read and write
|
||
2681B75B000
|
unkown
|
page read and write
|
||
19EFBA00000
|
unkown
|
page read and write
|
||
4FB000
|
stack
|
page read and write
|
||
2A4B000
|
unkown
|
page readonly
|
||
29821F59000
|
unkown
|
page read and write
|
||
7FF56712E000
|
unkown
|
page readonly
|
||
7FF58ABC3000
|
unkown
|
page readonly
|
||
7FF565927000
|
unkown
|
page readonly
|
||
1FEF47F0000
|
heap private
|
page read and write
|
||
2998A3D0000
|
unkown
|
page read and write
|
||
19EFB816000
|
unkown
|
page read and write
|
||
2681B738000
|
unkown
|
page read and write
|
||
7FF558DF6000
|
unkown
|
page readonly
|
||
7FF56593B000
|
unkown
|
page readonly
|
||
7FF5862FD000
|
unkown
|
page readonly
|
||
E06527E000
|
unkown
|
page read and write
|
||
2681B787000
|
unkown
|
page read and write
|
||
19EF966C000
|
unkown
|
page read and write
|
||
F4BB7DB000
|
unkown
|
page read and write
|
||
19EF96E9000
|
unkown
|
page read and write
|
||
13DF0E6C000
|
unkown
|
page read and write
|
||
2998A459000
|
unkown
|
page read and write
|
||
19EFB55A000
|
unkown
|
page read and write
|
||
7FF58ABC1000
|
unkown
|
page readonly
|
||
7FF586228000
|
unkown
|
page readonly
|
||
29826EC2000
|
unkown
|
page read and write
|
||
7FF515227000
|
unkown
|
page readonly
|
||
7FF5F1A83000
|
unkown
|
page readonly
|
||
2982168B000
|
unkown
|
page read and write
|
||
17AE2D80000
|
unkown
|
page read and write
|
||
7FF5A4EF9000
|
unkown
|
page readonly
|
||
7FF586265000
|
unkown
|
page readonly
|
||
29826CF0000
|
unkown
|
page read and write
|
||
1F8277C000
|
unkown
|
page read and write
|
||
7FF5A4EF4000
|
unkown
|
page readonly
|
||
29821DD0000
|
unkown
|
page readonly
|
||
7FF5F19B8000
|
unkown
|
page readonly
|
||
19EFB8D4000
|
unkown
|
page read and write
|
||
849000
|
unkown
|
page read and write
|
||
2681B7A2000
|
unkown
|
page read and write
|
||
2681B784000
|
unkown
|
page read and write
|
||
7FF5863E2000
|
unkown
|
page readonly
|
||
19EFC210000
|
unkown
|
page read and write
|
||
4BA000
|
unkown
|
page read and write
|
||
2681B7A2000
|
unkown
|
page read and write
|
||
7FF558D4D000
|
unkown
|
page readonly
|
||
29821530000
|
heap default
|
page read and write
|
||
2998A449000
|
unkown
|
page read and write
|
||
7FF5A4DBD000
|
unkown
|
page readonly
|
||
BC75BEC000
|
unkown
|
page read and write
|
||
29826E2D000
|
unkown
|
page read and write
|
||
2A0E000
|
unkown
|
page readonly
|
||
19EF9629000
|
unkown
|
page read and write
|
||
298226C0000
|
unkown
|
page readonly
|
||
2681B7D4000
|
unkown
|
page read and write
|
||
29826DD0000
|
unkown
|
page readonly
|
||
17AE2E62000
|
unkown
|
page read and write
|
||
19EFB800000
|
unkown
|
page read and write
|
||
19EFB8D3000
|
unkown
|
page read and write
|
||
7FF558D5E000
|
unkown
|
page readonly
|
||
29826EAE000
|
unkown
|
page read and write
|
||
1FEF4860000
|
unkown
|
page readonly
|
||
2681B785000
|
unkown
|
page read and write
|
||
2998A44E000
|
unkown
|
page read and write
|
||
7FF5F1B77000
|
unkown
|
page readonly
|
||
7FF5A0AB5000
|
unkown
|
page readonly
|
||
7FF5A0BF9000
|
unkown
|
page readonly
|
||
2AA5000
|
unkown
|
page readonly
|
||
2681AEF6000
|
unkown
|
page read and write
|
||
2681BC02000
|
unkown
|
page read and write
|
||
7FF51597D000
|
unkown
|
page readonly
|
||
F8B27E000
|
unkown
|
page read and write
|
||
7FF5A4F5D000
|
unkown
|
page readonly
|
||
1FEF4A4A000
|
unkown
|
page read and write
|
||
7FF5A4F6E000
|
unkown
|
page readonly
|
||
19EFB5B0000
|
unkown
|
page read and write
|
||
19EF9550000
|
unkown
|
page write copy
|
||
7FF5A4B8C000
|
unkown
|
page readonly
|
||
2AD3000
|
unkown
|
page readonly
|
||
7FF5A0BED000
|
unkown
|
page readonly
|
||
7FF5F1A25000
|
unkown
|
page readonly
|
||
7FF5A4F69000
|
unkown
|
page readonly
|
||
73D000
|
unkown
|
page read and write
|
||
17AE2E8E000
|
unkown
|
page read and write
|
||
7FF5A4F04000
|
unkown
|
page readonly
|
||
7FF567212000
|
unkown
|
page readonly
|
||
17AE2D20000
|
unkown
|
page read and write
|
||
7FF5F1409000
|
unkown
|
page readonly
|
||
7FF5F1AC7000
|
unkown
|
page readonly
|
||
7FF567006000
|
unkown
|
page readonly
|
||
19EFAFA0000
|
unkown
|
page read and write
|
||
7FF55887E000
|
unkown
|
page readonly
|
||
1FEF4A00000
|
unkown
|
page read and write
|
||
7FF58B34B000
|
unkown
|
page readonly
|
||
2787000
|
unkown
|
page readonly
|
||
19EFB8A8000
|
unkown
|
page read and write
|
||
6C4A8FF000
|
unkown
|
page read and write
|
||
19EF96B3000
|
unkown
|
page read and write
|
||
7FF558CF4000
|
unkown
|
page readonly
|
||
7FF5A4D16000
|
unkown
|
page readonly
|
||
2681B755000
|
unkown
|
page read and write
|
||
F8B1FA000
|
unkown
|
page read and write
|
||
29821DC0000
|
unkown
|
page readonly
|
||
7FF5A5006000
|
unkown
|
page readonly
|
||
17AE2E8E000
|
unkown
|
page read and write
|
||
7FF566F3F000
|
unkown
|
page readonly
|
||
1F820FD000
|
unkown
|
page read and write
|
||
2681B76C000
|
unkown
|
page read and write
|
||
7FF5A4CEF000
|
unkown
|
page readonly
|
||
29826C87000
|
unkown
|
page readonly
|
||
2681AEED000
|
unkown
|
page read and write
|
||
7FF5A04DB000
|
unkown
|
page readonly
|
||
17AE2E2E000
|
unkown
|
page read and write
|
||
7FF5F1B37000
|
unkown
|
page readonly
|
||
17AE2EAE000
|
unkown
|
page read and write
|
||
2681B738000
|
unkown
|
page read and write
|
||
17AE2E38000
|
unkown
|
page read and write
|
||
19EFB5D8000
|
unkown
|
page read and write
|
||
7FF5F16D2000
|
unkown
|
page readonly
|
||
7FF5A47DF000
|
unkown
|
page readonly
|
||
20FFF400000
|
unkown
|
page write copy
|
||
19EF9748000
|
unkown
|
page read and write
|
||
19EFB565000
|
unkown
|
page read and write
|
||
2681B77D000
|
unkown
|
page read and write
|
||
2681AD60000
|
unkown
|
page readonly
|
||
7FF5A4ED8000
|
unkown
|
page readonly
|
||
7FF5F1B27000
|
unkown
|
page readonly
|
||
A0628FA000
|
unkown
|
page read and write
|
||
2681AE00000
|
unkown
|
page read and write
|
||
2681B78D000
|
unkown
|
page read and write
|
||
7FF565150000
|
unkown
|
page readonly
|
||
19EFB83A000
|
unkown
|
page read and write
|
||
7FF5A5003000
|
unkown
|
page readonly
|
||
8B39CFF000
|
unkown
|
page read and write
|
||
19EF9698000
|
unkown
|
page read and write
|
||
7FF565885000
|
unkown
|
page readonly
|
||
1FEF4A13000
|
unkown
|
page read and write
|
||
7FF51575F000
|
unkown
|
page readonly
|
||
19EF969A000
|
unkown
|
page read and write
|
||
2B18000
|
unkown
|
page readonly
|
||
17AE2E38000
|
unkown
|
page read and write
|
||
7FF5A0BF7000
|
unkown
|
page readonly
|
||
7FF5A0757000
|
unkown
|
page readonly
|
||
7FF5F1B63000
|
unkown
|
page readonly
|
||
7FF5F1B34000
|
unkown
|
page readonly
|
||
19EFB513000
|
unkown
|
page read and write
|
||
7FF5A4C59000
|
unkown
|
page readonly
|
||
7FF5A4B72000
|
unkown
|
page readonly
|
||
2681B721000
|
unkown
|
page read and write
|
||
F4BBAFE000
|
unkown
|
page read and write
|
||
7FF5A4CD8000
|
unkown
|
page readonly
|
||
7FF5A4F11000
|
unkown
|
page readonly
|
||
F8B37C000
|
unkown
|
page read and write
|
||
19EFC210000
|
unkown
|
page read and write
|
||
29821689000
|
unkown
|
page read and write
|
||
7FF5A0B25000
|
unkown
|
page readonly
|
||
7FF58630A000
|
unkown
|
page readonly
|
||
29821667000
|
unkown
|
page read and write
|
||
7FF515A23000
|
unkown
|
page readonly
|
||
1F8237B000
|
unkown
|
page read and write
|
||
19EFC010000
|
unkown
|
page read and write
|
||
1FEF4930000
|
unkown
|
page readonly
|
||
29826CF0000
|
unkown
|
page read and write
|
||
19EFC510000
|
unkown
|
page read and write
|
||
7FF5A4F67000
|
unkown
|
page readonly
|
||
17AE30C0000
|
unkown
|
page read and write
|
||
2681B776000
|
unkown
|
page read and write
|
||
2681B75B000
|
unkown
|
page read and write
|
||
7FF558E02000
|
unkown
|
page readonly
|
||
19EF9777000
|
unkown
|
page read and write
|
||
2998A44B000
|
unkown
|
page read and write
|
||
29826D50000
|
unkown
|
page readonly
|
||
7FF585E91000
|
unkown
|
page readonly
|
||
20FFF1F0000
|
unkown
|
page readonly
|
||
1FEF4A8C000
|
unkown
|
page read and write
|
||
8B39E7A000
|
unkown
|
page read and write
|
||
7FF565934000
|
unkown
|
page readonly
|
||
7FF58B1C8000
|
unkown
|
page readonly
|
||
7FF558CE4000
|
unkown
|
page readonly
|
||
29826BD0000
|
unkown
|
page read and write
|
||
19EFC110000
|
unkown
|
page read and write
|
||
2681B773000
|
unkown
|
page read and write
|
||
2681BE00000
|
unkown
|
page readonly
|
||
19EFB540000
|
unkown
|
page read and write
|
||
7FF5F1A64000
|
unkown
|
page readonly
|
||
17AE36D0000
|
unkown
|
page readonly
|
||
7FF558DF3000
|
unkown
|
page readonly
|
||
F4BC0F7000
|
unkown
|
page read and write
|
||
BC769FC000
|
unkown
|
page read and write
|
||
29826CD0000
|
unkown
|
page read and write
|
||
2681B7A7000
|
unkown
|
page read and write
|
||
7FF558CD7000
|
unkown
|
page readonly
|
||
7FF5F184F000
|
unkown
|
page readonly
|
||
82D000
|
unkown
|
page read and write
|
||
29821540000
|
unkown
|
page readonly
|
||
2681B790000
|
unkown
|
page read and write
|
||
8B39DF9000
|
unkown
|
page read and write
|
||
17AE2E40000
|
unkown
|
page read and write
|
||
7FF515907000
|
unkown
|
page readonly
|
||
7FF5A4E81000
|
unkown
|
page readonly
|
||
2681B765000
|
unkown
|
page read and write
|
||
A06297F000
|
unkown
|
page read and write
|
||
1FEF4A29000
|
unkown
|
page read and write
|
||
7FF566EE5000
|
unkown
|
page readonly
|
||
29826BC0000
|
unkown
|
page read and write
|
||
7FF566DE6000
|
unkown
|
page readonly
|
||
7FF5F1988000
|
unkown
|
page readonly
|
||
29826EB0000
|
unkown
|
page read and write
|
||
2681AE4C000
|
unkown
|
page read and write
|
||
17AE2DC0000
|
unkown
|
page readonly
|
||
7FF566EEF000
|
unkown
|
page readonly
|
||
19EF9677000
|
unkown
|
page read and write
|
||
19EFB857000
|
unkown
|
page read and write
|
||
2681AE29000
|
unkown
|
page read and write
|
||
2681AE50000
|
unkown
|
page read and write
|
||
7FF5159F4000
|
unkown
|
page readonly
|
||
2681B774000
|
unkown
|
page read and write
|
||
B625A77000
|
unkown
|
page read and write
|
||
7FF5A4CE5000
|
unkown
|
page readonly
|
||
7FF5A4F56000
|
unkown
|
page readonly
|
||
2681B769000
|
unkown
|
page read and write
|
||
19EFC510000
|
unkown
|
page read and write
|
||
2681B761000
|
unkown
|
page read and write
|
||
19EF96CD000
|
unkown
|
page read and write
|
||
F4BC1FF000
|
unkown
|
page read and write
|
||
7FF515606000
|
unkown
|
page readonly
|
||
17AE2E8E000
|
unkown
|
page read and write
|
||
13DF0E6B000
|
unkown
|
page read and write
|
||
7FF5159FB000
|
unkown
|
page readonly
|
||
1F827FC000
|
unkown
|
page read and write
|
||
2AFD000
|
unkown
|
page readonly
|
||
19EFB900000
|
unkown
|
page read and write
|
||
7FF5F1966000
|
unkown
|
page readonly
|
||
29821F13000
|
unkown
|
page read and write
|
||
7FF5F18AE000
|
unkown
|
page readonly
|
||
2681B763000
|
unkown
|
page read and write
|
||
19EFC010000
|
unkown
|
page read and write
|
||
19EFB8CC000
|
unkown
|
page read and write
|
||
19EFB0A0000
|
unkown
|
page readonly
|
||
BC76BFF000
|
unkown
|
page read and write
|
||
29821663000
|
unkown
|
page read and write
|
||
29826CE0000
|
unkown
|
page read and write
|
||
5F0000
|
unkown
|
page read and write
|
||
7FF566A07000
|
unkown
|
page readonly
|
||
834000
|
unkown
|
page read and write
|
||
19EFB640000
|
unkown
|
page read and write
|
||
834000
|
unkown
|
page read and write
|
||
19EFB690000
|
unkown
|
page readonly
|
||
19EF9738000
|
unkown
|
page read and write
|
||
7FF515848000
|
unkown
|
page readonly
|
||
2998A46F000
|
unkown
|
page read and write
|
||
2998A413000
|
unkown
|
page read and write
|
||
7FF5671D4000
|
unkown
|
page readonly
|
||
7FF5A0C93000
|
unkown
|
page readonly
|
||
2681B757000
|
unkown
|
page read and write
|
||
BA0000
|
heap private
|
page read and write
|
||
29826D30000
|
unkown
|
page readonly
|
||
29826EB5000
|
unkown
|
page read and write
|
||
19EFB640000
|
unkown
|
page read and write
|
||
29821DE0000
|
unkown
|
page readonly
|
||
7FF51560A000
|
unkown
|
page readonly
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
7FF5A0A96000
|
unkown
|
page readonly
|
||
7FF5F191F000
|
unkown
|
page readonly
|
||
2681B72E000
|
unkown
|
page read and write
|
||
7FF5F1350000
|
unkown
|
page readonly
|
||
293C000
|
unkown
|
page readonly
|
||
7FF58B35A000
|
unkown
|
page readonly
|
||
828000
|
unkown
|
page read and write
|
||
19EFB8D1000
|
unkown
|
page read and write
|
||
29821800000
|
unkown
|
page readonly
|
||
1FEF4A4E000
|
unkown
|
page read and write
|
||
7FF58AF30000
|
unkown
|
page readonly
|
||
19EF966F000
|
unkown
|
page read and write
|
||
29821F02000
|
unkown
|
page read and write
|
||
7FF58B198000
|
unkown
|
page readonly
|
||
29826E8B000
|
unkown
|
page read and write
|
||
7FF5F1A54000
|
unkown
|
page readonly
|
||
19EF968F000
|
unkown
|
page read and write
|
||
19EFB943000
|
unkown
|
page read and write
|
||
BC76CFB000
|
unkown
|
page read and write
|
||
7FF515962000
|
unkown
|
page readonly
|
||
19EF9675000
|
unkown
|
page read and write
|
||
2998A2E0000
|
unkown
|
page readonly
|
||
1FEF4950000
|
unkown
|
page read and write
|
||
B625B7F000
|
unkown
|
page read and write
|
||
19EFB530000
|
unkown
|
page read and write
|
||
82D000
|
unkown
|
page read and write
|
||
29826B98000
|
unkown
|
page read and write
|
||
19EFB508000
|
unkown
|
page read and write
|
||
2998A429000
|
unkown
|
page read and write
|
||
19EF966F000
|
unkown
|
page read and write
|
||
7FF565937000
|
unkown
|
page readonly
|
||
19EF966F000
|
unkown
|
page read and write
|
||
19EFC010000
|
unkown
|
page read and write
|
||
19EF9730000
|
unkown
|
page read and write
|
||
17AE30B0000
|
unkown
|
page read and write
|
||
19EFBB02000
|
unkown
|
page read and write
|
||
2681AE71000
|
unkown
|
page read and write
|
||
29826E87000
|
unkown
|
page read and write
|
||
19EFB8C9000
|
unkown
|
page read and write
|
||
2681B75B000
|
unkown
|
page read and write
|
||
7FF51595A000
|
unkown
|
page readonly
|
||
2681B721000
|
unkown
|
page read and write
|
||
19EF95A0000
|
unkown
|
page readonly
|
||
29826C97000
|
unkown
|
page write copy
|
||
1F81E7F000
|
unkown
|
page read and write
|
||
29826BC0000
|
unkown
|
page read and write
|
||
7FF5A4FD7000
|
unkown
|
page readonly
|
||
F4BBFF8000
|
unkown
|
page read and write
|
||
20FFF8F0000
|
unkown
|
page readonly
|
||
A06252E000
|
unkown
|
page read and write
|
||
29822A00000
|
unkown
|
page read and write
|
||
2AE2000
|
unkown
|
page readonly
|
||
19EFC010000
|
unkown
|
page read and write
|
||
2681B753000
|
unkown
|
page read and write
|
||
BC75E7D000
|
unkown
|
page read and write
|
||
7FF5A5017000
|
unkown
|
page readonly
|
||
19EFBA42000
|
unkown
|
page read and write
|
||
19EF96C4000
|
unkown
|
page read and write
|
||
19EFB630000
|
unkown
|
page readonly
|
||
20FFF110000
|
heap default
|
page read and write
|
||
2681AE4E000
|
unkown
|
page read and write
|
||
19EF9470000
|
heap default
|
page read and write
|
||
19EF96EB000
|
unkown
|
page read and write
|
||
2681B773000
|
unkown
|
page read and write
|
||
19EFB56D000
|
unkown
|
page read and write
|
||
2681B590000
|
unkown
|
page readonly
|
||
7FF5F1B77000
|
unkown
|
page readonly
|
||
17AE2EAE000
|
unkown
|
page read and write
|
||
7FF58B2D9000
|
unkown
|
page readonly
|
||
29826EB0000
|
unkown
|
page read and write
|
||
7FF5F18D4000
|
unkown
|
page readonly
|
||
29821550000
|
unkown
|
page readonly
|
||
F4BBEFE000
|
unkown
|
page read and write
|
||
17AE2EB4000
|
unkown
|
page read and write
|
||
19EFB8D1000
|
unkown
|
page read and write
|
||
80A000
|
heap default
|
page read and write
|
||
2681AF13000
|
unkown
|
page read and write
|
||
17AE2EB4000
|
unkown
|
page read and write
|
||
13DF0E00000
|
unkown
|
page read and write
|
||
7FF515A32000
|
unkown
|
page readonly
|
||
7FF558D32000
|
unkown
|
page readonly
|
||
2998A48B000
|
unkown
|
page read and write
|
||
7FF57022B000
|
unkown
|
page readonly
|
||
198E52C6000
|
unkown
|
page read and write
|
||
13DF0F02000
|
unkown
|
page read and write
|
||
7FF5A47FD000
|
unkown
|
page readonly
|
||
2681B761000
|
unkown
|
page read and write
|
||
2ABB000
|
unkown
|
page readonly
|
||
20FFF0B0000
|
heap private
|
page read and write
|
||
29826E62000
|
unkown
|
page read and write
|
||
7FF558E07000
|
unkown
|
page readonly
|
||
CC0000
|
unkown
|
page readonly
|
||
19EFB877000
|
unkown
|
page read and write
|
||
2681B700000
|
unkown
|
page read and write
|
||
7FF558AF9000
|
unkown
|
page readonly
|
||
E0657FF000
|
unkown
|
page read and write
|
||
17AE2EB4000
|
unkown
|
page read and write
|
||
19EFB55C000
|
unkown
|
page read and write
|
||
13DF0E56000
|
unkown
|
page read and write
|
||
A062A79000
|
unkown
|
page read and write
|
||
7FF5A4D5B000
|
unkown
|
page readonly
|
||
7FF566DEA000
|
unkown
|
page readonly
|
||
19EF9675000
|
unkown
|
page read and write
|
||
2998A451000
|
unkown
|
page read and write
|
||
2998A456000
|
unkown
|
page read and write
|
||
7FF558DC4000
|
unkown
|
page readonly
|
||
19EFB569000
|
unkown
|
page read and write
|
||
7FF5658BD000
|
unkown
|
page readonly
|
||
F8ADAB000
|
unkown
|
page read and write
|
||
2ADE000
|
unkown
|
page readonly
|
||
7FF5A4B42000
|
unkown
|
page readonly
|
||
19EF966E000
|
unkown
|
page read and write
|
||
1F823FA000
|
unkown
|
page read and write
|
||
B6256FE000
|
unkown
|
page read and write
|
||
19EF969A000
|
unkown
|
page read and write
|
||
19EFB536000
|
unkown
|
page read and write
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
19EFB83E000
|
unkown
|
page read and write
|
||
17AE2EE0000
|
unkown
|
page readonly
|
||
2681B759000
|
unkown
|
page read and write
|
||
19EFB8D1000
|
unkown
|
page read and write
|
||
17AE3120000
|
heap private
|
page read and write
|
||
8B39F7D000
|
unkown
|
page read and write
|
||
2681AD70000
|
unkown
|
page readonly
|
||
1F8297B000
|
unkown
|
page read and write
|
||
2A32000
|
unkown
|
page readonly
|
||
2998A3C0000
|
unkown
|
page readonly
|
||
7FF5A4F0F000
|
unkown
|
page readonly
|
||
7FF5A4EF0000
|
unkown
|
page readonly
|
||
7FF58B347000
|
unkown
|
page readonly
|
||
2AEF000
|
unkown
|
page readonly
|
||
7FF5861F0000
|
unkown
|
page readonly
|
||
7FF5A0BE6000
|
unkown
|
page readonly
|
||
842000
|
unkown
|
page read and write
|
||
29821600000
|
unkown
|
page read and write
|
||
7FF5A0AB0000
|
unkown
|
page readonly
|
||
7FF5A4DD3000
|
unkown
|
page readonly
|
||
19EF9735000
|
unkown
|
page read and write
|
||
2681B750000
|
unkown
|
page read and write
|
||
2ACE000
|
unkown
|
page readonly
|
||
7FF56550B000
|
unkown
|
page readonly
|
||
7FF58B10C000
|
unkown
|
page readonly
|
||
17AE2E3F000
|
unkown
|
page read and write
|
||
2681B7A2000
|
unkown
|
page read and write
|
||
19EFB529000
|
unkown
|
page read and write
|
||
7FF558B9A000
|
unkown
|
page readonly
|
||
13DF0E3F000
|
unkown
|
page read and write
|
||
19EF96A6000
|
unkown
|
page read and write
|
||
19EF9691000
|
unkown
|
page read and write
|
||
E0654FF000
|
unkown
|
page read and write
|
||
19EF966E000
|
unkown
|
page read and write
|
||
19EFB564000
|
unkown
|
page read and write
|
||
19EFB8D2000
|
unkown
|
page read and write
|
||
29826CC0000
|
unkown
|
page read and write
|
||
29826EA4000
|
unkown
|
page read and write
|
||
29826B90000
|
unkown
|
page read and write
|
||
17AE2EAE000
|
unkown
|
page read and write
|
||
19EFB510000
|
unkown
|
page read and write
|
||
2681AE8B000
|
unkown
|
page read and write
|
||
7FF567123000
|
unkown
|
page readonly
|
||
19EFB660000
|
unkown
|
page readonly
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
7FF586306000
|
unkown
|
page readonly
|
||
2AC6000
|
unkown
|
page readonly
|
||
2681B79B000
|
unkown
|
page read and write
|
||
7FF5A4DC3000
|
unkown
|
page readonly
|
||
7FF558C41000
|
unkown
|
page readonly
|
||
20FFF200000
|
unkown
|
page read and write
|
||
A06287B000
|
unkown
|
page read and write
|
||
7FF5A4CC3000
|
unkown
|
page readonly
|
||
2681B773000
|
unkown
|
page read and write
|
||
7FF586394000
|
unkown
|
page readonly
|
||
29826E11000
|
unkown
|
page read and write
|
||
7FF5670C5000
|
unkown
|
page readonly
|
||
7FF58617A000
|
unkown
|
page readonly
|
||
19EFC310000
|
unkown
|
page read and write
|
||
2681B786000
|
unkown
|
page read and write
|
||
2681B74F000
|
unkown
|
page read and write
|
||
29826BB4000
|
unkown
|
page read and write
|
||
19EF96C6000
|
unkown
|
page read and write
|
||
13DF0E70000
|
unkown
|
page read and write
|
||
19EF9600000
|
unkown
|
page read and write
|
||
19EFB680000
|
unkown
|
page read and write
|
||
19EFC310000
|
unkown
|
page read and write
|
||
7FF58B387000
|
unkown
|
page readonly
|
||
17AE2E2F000
|
unkown
|
page read and write
|
||
7FF558CB1000
|
unkown
|
page readonly
|
||
29826C84000
|
unkown
|
page readonly
|
||
19EF9787000
|
unkown
|
page read and write
|
||
19EF968E000
|
unkown
|
page read and write
|
||
BB0000
|
unkown
|
page readonly
|
||
198E52CE000
|
unkown
|
page read and write
|
||
29826E3F000
|
unkown
|
page read and write
|
||
2681BC02000
|
unkown
|
page read and write
|
||
19EF95F0000
|
heap private
|
page read and write
|
||
2681B580000
|
unkown
|
page read and write
|
||
2681BC02000
|
unkown
|
page read and write
|
||
2681B75D000
|
unkown
|
page read and write
|
||
1F828FC000
|
unkown
|
page read and write
|
||
19EFC000000
|
unkown
|
page read and write
|
||
2681B763000
|
unkown
|
page read and write
|
||
19EFB650000
|
unkown
|
page read and write
|
||
7FF5A4E95000
|
unkown
|
page readonly
|
||
7FF558DBD000
|
unkown
|
page readonly
|
||
7FF5A0C64000
|
unkown
|
page readonly
|
||
7FF515705000
|
unkown
|
page readonly
|
||
7FF58B331000
|
unkown
|
page readonly
|
||
19EF96BF000
|
unkown
|
page read and write
|
||
13DF0F13000
|
unkown
|
page read and write
|
||
7FF5A086F000
|
unkown
|
page readonly
|
||
19EFB5C3000
|
unkown
|
page read and write
|
||
19EF966F000
|
unkown
|
page read and write
|
||
1F81EFB000
|
unkown
|
page read and write
|
||
7FF515987000
|
unkown
|
page readonly
|
||
7FF585E97000
|
unkown
|
page readonly
|
||
29822500000
|
unkown
|
page read and write
|
||
19EF9693000
|
unkown
|
page read and write
|
||
7FF558B64000
|
unkown
|
page readonly
|
||
5A80000
|
unkown
|
page readonly
|
||
7FF56588E000
|
unkown
|
page readonly
|
||
7FF558BF6000
|
unkown
|
page readonly
|
||
198E51B0000
|
unkown
|
page readonly
|
||
BC75FF7000
|
unkown
|
page read and write
|
||
5C60000
|
unkown
|
page readonly
|
||
29826BD4000
|
unkown
|
page read and write
|
||
17AE2DA0000
|
unkown
|
page read and write
|
||
2982169B000
|
unkown
|
page read and write
|
||
7FF5A4F23000
|
unkown
|
page readonly
|
||
7FF515A26000
|
unkown
|
page readonly
|
||
1FEF4B08000
|
unkown
|
page read and write
|
||
2681B756000
|
unkown
|
page read and write
|
||
198E53A0000
|
unkown
|
page read and write
|
||
13DF0E6C000
|
unkown
|
page read and write
|
||
7FF586337000
|
unkown
|
page readonly
|
||
2681B768000
|
unkown
|
page read and write
|
||
7FF586326000
|
unkown
|
page readonly
|
||
7FF5A0C96000
|
unkown
|
page readonly
|
||
F8B2FD000
|
unkown
|
page read and write
|
||
6C4A9FD000
|
unkown
|
page read and write
|
||
7FF558CE0000
|
unkown
|
page readonly
|
||
739000
|
unkown
|
page read and write
|
||
7FF585C1B000
|
unkown
|
page readonly
|
||
F8B07E000
|
unkown
|
page read and write
|
||
2681B738000
|
unkown
|
page read and write
|
||
29822101000
|
unkown
|
page read and write
|
||
1F821FA000
|
unkown
|
page read and write
|
||
19EFB536000
|
unkown
|
page read and write
|
||
7FF5671EA000
|
unkown
|
page readonly
|
||
2998A44A000
|
unkown
|
page read and write
|
||
2681B7A8000
|
unkown
|
page read and write
|
||
7FF558DB7000
|
unkown
|
page readonly
|
||
29826A80000
|
unkown
|
page read and write
|
||
5C54000
|
heap private
|
page read and write
|
||
17AE2EAE000
|
unkown
|
page read and write
|
||
2681B768000
|
unkown
|
page read and write
|
||
2713000
|
unkown
|
page readonly
|
||
7FF5588E6000
|
unkown
|
page readonly
|
||
B6253AB000
|
unkown
|
page read and write
|
||
19EF9673000
|
unkown
|
page read and write
|
||
2A45000
|
unkown
|
page readonly
|
||
2A91000
|
unkown
|
page readonly
|
||
7FF5585F7000
|
unkown
|
page readonly
|
||
7FF5A4E51000
|
unkown
|
page readonly
|
||
2681AEA7000
|
unkown
|
page read and write
|
||
29826C64000
|
unkown
|
page readonly
|
||
2ABD000
|
unkown
|
page readonly
|
||
19EFB527000
|
unkown
|
page read and write
|
||
7FF5F1937000
|
unkown
|
page readonly
|
||
7FF5F1B2D000
|
unkown
|
page readonly
|
||
7FF5861A7000
|
unkown
|
page readonly
|
||
E0655F7000
|
unkown
|
page read and write
|
||
19EF966E000
|
unkown
|
page read and write
|
||
2681B73D000
|
unkown
|
page read and write
|
||
7FF5671C4000
|
unkown
|
page readonly
|
||
2681B78C000
|
unkown
|
page read and write
|
||
7FF5671C7000
|
unkown
|
page readonly
|
||
7FF5670C7000
|
unkown
|
page readonly
|
||
2681B7B9000
|
unkown
|
page read and write
|
||
7FF58B33D000
|
unkown
|
page readonly
|
||
29826A70000
|
unkown
|
page read and write
|
||
7FF5863E7000
|
unkown
|
page readonly
|
||
7FF558D59000
|
unkown
|
page readonly
|
||
7FF558DC7000
|
unkown
|
page readonly
|
||
7FF5F13B1000
|
unkown
|
page readonly
|
||
7FF58B2C6000
|
unkown
|
page readonly
|
||
2681B77E000
|
unkown
|
page read and write
|
||
29826E5D000
|
unkown
|
page read and write
|
||
2681AE3C000
|
unkown
|
page read and write
|
||
7FF5A4B99000
|
unkown
|
page readonly
|
||
2681BC02000
|
unkown
|
page read and write
|
||
2681BC54000
|
unkown
|
page read and write
|
||
2681ADF0000
|
unkown
|
page read and write
|
||
198E5450000
|
heap private
|
page read and write
|
||
1FEF4A46000
|
unkown
|
page read and write
|
||
B9E000
|
stack
|
page read and write
|
||
2982162A000
|
unkown
|
page read and write
|
||
2681AED9000
|
unkown
|
page read and write
|
||
7FF5658C9000
|
unkown
|
page readonly
|
||
7FF5671D7000
|
unkown
|
page readonly
|
||
5EE000
|
unkown
|
page read and write
|
||
19EFBB00000
|
unkown
|
page read and write
|
||
849000
|
unkown
|
page read and write
|
||
20FFF23F000
|
unkown
|
page read and write
|
||
2998A502000
|
unkown
|
page read and write
|
||
7FF5862E1000
|
unkown
|
page readonly
|
||
7FF5861F8000
|
unkown
|
page readonly
|
||
7FF5A4CBD000
|
unkown
|
page readonly
|
||
17AE2E8C000
|
unkown
|
page read and write
|
||
7FF5A0C57000
|
unkown
|
page readonly
|
||
7FF5A4DBF000
|
unkown
|
page readonly
|
||
7FF5A0A67000
|
unkown
|
page readonly
|
||
19EF96E5000
|
unkown
|
page read and write
|
||
7FF558CB5000
|
unkown
|
page readonly
|
||
2681AD80000
|
unkown
|
page read and write
|
||
198E53F0000
|
unkown
|
page read and write
|
||
7FF5A0BAF000
|
unkown
|
page readonly
|
||
19EF966F000
|
unkown
|
page read and write
|
||
7FF5A0C7A000
|
unkown
|
page readonly
|
||
2681B774000
|
unkown
|
page read and write
|
||
19EF9613000
|
unkown
|
page read and write
|
||
19EFC110000
|
unkown
|
page read and write
|
||
7FF565896000
|
unkown
|
page readonly
|
||
29826C60000
|
unkown
|
page read and write
|
||
7FF58B337000
|
unkown
|
page readonly
|
||
198E52E3000
|
unkown
|
page read and write
|
||
2681AF08000
|
unkown
|
page read and write
|
||
7FF5A4F42000
|
unkown
|
page readonly
|
||
13DF28D0000
|
unkown
|
page read and write
|
||
1F825FB000
|
unkown
|
page read and write
|
||
298215F3000
|
unkown
|
page read and write
|
||
19EFB943000
|
unkown
|
page read and write
|
||
17AE2E77000
|
unkown
|
page read and write
|
||
7FF5A4D02000
|
unkown
|
page readonly
|
||
19EFB554000
|
unkown
|
page read and write
|
||
7FF558D2A000
|
unkown
|
page readonly
|
||
7FF515A37000
|
unkown
|
page readonly
|
||
17AE3CE0000
|
unkown
|
page read and write
|
||
2681ACF0000
|
heap private
|
page read and write
|
||
2681B78E000
|
unkown
|
page read and write
|
||
2681B74F000
|
unkown
|
page read and write
|
||
2D20000
|
unkown
|
page readonly
|
||
F4BBBF5000
|
unkown
|
page read and write
|
||
7FF5A0911000
|
unkown
|
page readonly
|
||
7FF5A0B9F000
|
unkown
|
page readonly
|
||
7FF5A0BA1000
|
unkown
|
page readonly
|
||
13DF0E6B000
|
unkown
|
page read and write
|
||
1FEF4850000
|
heap default
|
page read and write
|
||
7FF5A4E8E000
|
unkown
|
page readonly
|
||
7FF5F1880000
|
unkown
|
page readonly
|
||
198E53D0000
|
unkown
|
page readonly
|
||
2681B789000
|
unkown
|
page read and write
|
||
6C4A879000
|
unkown
|
page read and write
|
||
800000
|
heap default
|
page read and write
|
||
2681B73F000
|
unkown
|
page read and write
|
||
7FF5A4DE7000
|
unkown
|
page readonly
|
||
2681B757000
|
unkown
|
page read and write
|
||
2681B757000
|
unkown
|
page read and write
|
||
7FF5F190A000
|
unkown
|
page readonly
|
||
2681B768000
|
unkown
|
page read and write
|
||
7FF567167000
|
unkown
|
page readonly
|
||
2681AD50000
|
heap default
|
page read and write
|
||
7FF5F19F5000
|
unkown
|
page readonly
|
||
CB0000
|
unkown
|
page readonly
|
||
17AE3CD0000
|
unkown
|
page read and write
|
||
13DF0E6C000
|
unkown
|
page read and write
|
||
2681BC02000
|
unkown
|
page read and write
|
||
7FF5F1B66000
|
unkown
|
page readonly
|
||
19EF9746000
|
unkown
|
page read and write
|
||
7FF565977000
|
unkown
|
page readonly
|
||
17AE2DE0000
|
heap default
|
page read and write
|
||
7FF51570F000
|
unkown
|
page readonly
|
||
17AE2E4D000
|
unkown
|
page read and write
|
||
298218D0000
|
unkown
|
page readonly
|
||
7FF567217000
|
unkown
|
page readonly
|
||
7FF56713A000
|
unkown
|
page readonly
|
||
198E52A0000
|
heap default
|
page read and write
|
||
7FF558E07000
|
unkown
|
page readonly
|
||
2998A270000
|
heap private
|
page read and write
|
||
7FF58ABC8000
|
unkown
|
page readonly
|
||
198E52B7000
|
heap default
|
page read and write
|
||
7FF5862F3000
|
unkown
|
page readonly
|
||
19EF95E0000
|
unkown
|
page read and write
|
||
17AE2E8F000
|
unkown
|
page read and write
|
||
7FF558D01000
|
unkown
|
page readonly
|
||
B62597E000
|
unkown
|
page read and write
|
||
19EFB888000
|
unkown
|
page read and write
|
||
7FF5A4EE7000
|
unkown
|
page readonly
|
||
7FF5A4FCD000
|
unkown
|
page readonly
|
||
7FF58B373000
|
unkown
|
page readonly
|
||
2681B758000
|
unkown
|
page read and write
|
||
5C50000
|
heap private
|
page read and write
|
||
7FF5159F7000
|
unkown
|
page readonly
|
||
1FEF5060000
|
unkown
|
page readonly
|
||
7FF5670E7000
|
unkown
|
page readonly
|
||
1F82A7F000
|
unkown
|
page read and write
|
||
BC7677F000
|
unkown
|
page read and write
|
||
19EFC110000
|
unkown
|
page read and write
|
||
7FF5A4D1A000
|
unkown
|
page readonly
|
||
2681B0D0000
|
unkown
|
page readonly
|
||
19EFB943000
|
unkown
|
page read and write
|
||
2903000
|
unkown
|
page readonly
|
||
BC7657F000
|
unkown
|
page read and write
|
||
2AF4000
|
unkown
|
page readonly
|
||
29826B9E000
|
unkown
|
page read and write
|
||
17AE2EB4000
|
unkown
|
page read and write
|
||
13DF0E6C000
|
unkown
|
page read and write
|
||
B62567E000
|
unkown
|
page read and write
|
||
19EFC013000
|
unkown
|
page read and write
|
||
17AE2E9E000
|
unkown
|
page read and write
|
||
7FF567169000
|
unkown
|
page readonly
|
||
7FF586391000
|
unkown
|
page readonly
|
||
2681B000000
|
unkown
|
page readonly
|
||
29821F18000
|
unkown
|
page read and write
|
||
17AE2EAE000
|
unkown
|
page read and write
|
||
13DF0F00000
|
unkown
|
page read and write
|
||
2681B800000
|
unkown
|
page readonly
|
||
7FF558C10000
|
unkown
|
page readonly
|
||
7FF566F3B000
|
unkown
|
page readonly
|
||
7FF5862EF000
|
unkown
|
page readonly
|
||
7FF515989000
|
unkown
|
page readonly
|
||
19EFB8D2000
|
unkown
|
page read and write
|
||
19EF9739000
|
unkown
|
page read and write
|
||
7FF5F1B21000
|
unkown
|
page readonly
|
||
2A41000
|
unkown
|
page readonly
|
||
7FF586312000
|
unkown
|
page readonly
|
||
7FF5A5012000
|
unkown
|
page readonly
|
||
1FEF5202000
|
unkown
|
page read and write
|
||
19EF966F000
|
unkown
|
page read and write
|
||
13DF1120000
|
unkown
|
page readonly
|
||
19EF9713000
|
unkown
|
page read and write
|
||
2681B794000
|
unkown
|
page read and write
|
||
7FF567203000
|
unkown
|
page readonly
|
||
7FF58B334000
|
unkown
|
page readonly
|
||
29826DF0000
|
unkown
|
page readonly
|
||
298214D0000
|
heap private
|
page read and write
|
||
19EFB536000
|
unkown
|
page read and write
|
||
BA7000
|
heap private
|
page read and write
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
19EFB87B000
|
unkown
|
page read and write
|
||
17AE2EB4000
|
heap default
|
page read and write
|
||
17AE2E3F000
|
unkown
|
page read and write
|
||
5A0000
|
unkown
|
page readonly
|
||
2681AF16000
|
unkown
|
page read and write
|
||
20FFFC50000
|
unkown
|
page read and write
|
||
29821C60000
|
unkown
|
page readonly
|
||
7FF558AD5000
|
unkown
|
page readonly
|
||
29826CB0000
|
unkown
|
page read and write
|
||
29826CF0000
|
unkown
|
page readonly
|
||
2AD8000
|
unkown
|
page readonly
|
||
2681B77F000
|
unkown
|
page read and write
|
||
17AE2E8E000
|
unkown
|
page read and write
|
||
19EFB402000
|
unkown
|
page read and write
|
||
7FF558ADF000
|
unkown
|
page readonly
|
||
2681B77A000
|
unkown
|
page read and write
|
||
1F81C7E000
|
unkown
|
page read and write
|
||
7FF5A0C54000
|
unkown
|
page readonly
|
||
821000
|
unkown
|
page read and write
|
||
7FF58AB29000
|
unkown
|
page readonly
|
||
7FF558D0F000
|
unkown
|
page readonly
|
||
2681B761000
|
unkown
|
page read and write
|
||
29826B90000
|
unkown
|
page read and write
|
||
7FF5862DF000
|
unkown
|
page readonly
|
||
13DF0DF0000
|
unkown
|
page readonly
|
||
2681B7DB000
|
unkown
|
page read and write
|
||
7FF5A4BE0000
|
unkown
|
page readonly
|
||
7FF5F1A59000
|
unkown
|
page readonly
|
||
2681AEE1000
|
unkown
|
page read and write
|
||
7FF58B376000
|
unkown
|
page readonly
|
||
2681B75B000
|
unkown
|
page read and write
|
||
7FF5861D6000
|
unkown
|
page readonly
|
||
7FF515943000
|
unkown
|
page readonly
|
||
7FF558D46000
|
unkown
|
page readonly
|
||
13DF0E13000
|
unkown
|
page read and write
|
||
19EF966F000
|
unkown
|
page read and write
|
||
F4BC2FA000
|
unkown
|
page read and write
|
||
198E5280000
|
unkown
|
page read and write
|
||
7FF58B2D7000
|
unkown
|
page readonly
|
||
2998A44F000
|
unkown
|
page read and write
|
||
29821DF0000
|
unkown
|
page read and write
|
||
5BBF000
|
stack
|
page read and write
|
||
7FF5F1B72000
|
unkown
|
page readonly
|
||
19EFB8D1000
|
unkown
|
page read and write
|
||
2681AEBD000
|
unkown
|
page read and write
|
||
2681B7A3000
|
unkown
|
page read and write
|
||
7FF5A0C5D000
|
unkown
|
page readonly
|
||
2681B76C000
|
unkown
|
page read and write
|
||
2681B788000
|
unkown
|
page read and write
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
2998AC02000
|
unkown
|
page read and write
|
||
5B7E000
|
unkown
|
page read and write
|
||
1F81CFF000
|
unkown
|
page read and write
|
||
7FF5658B6000
|
unkown
|
page readonly
|
||
19EFB591000
|
unkown
|
page read and write
|
||
7FF5A4EE4000
|
unkown
|
page readonly
|
||
7FF5F170B000
|
unkown
|
page readonly
|
||
29827000000
|
unkown
|
page readonly
|
||
7FF5A0A3A000
|
unkown
|
page readonly
|
||
198E5460000
|
unkown
|
page readonly
|
||
1F829FB000
|
unkown
|
page read and write
|
||
17AE3C50000
|
unkown
|
page read and write
|
||
29826EAC000
|
unkown
|
page read and write
|
||
2998A48F000
|
unkown
|
page read and write
|
||
29826C60000
|
unkown
|
page write copy
|
||
2A3D000
|
unkown
|
page readonly
|
||
7FF5A4D20000
|
unkown
|
page readonly
|
||
1FEF4B00000
|
unkown
|
page read and write
|
||
7FF5A4D74000
|
unkown
|
page readonly
|
||
560000
|
heap default
|
page read and write
|
||
7FF558B2B000
|
unkown
|
page readonly
|
||
198E52C5000
|
unkown
|
page read and write
|
||
20FFF256000
|
unkown
|
page read and write
|
||
7FF566DD8000
|
unkown
|
page readonly
|
||
7FF5A4DB7000
|
unkown
|
page readonly
|
||
BC75EFE000
|
unkown
|
page read and write
|
||
29821E00000
|
unkown
|
page read and write
|
||
7FF567136000
|
unkown
|
page readonly
|
||
19EF9756000
|
unkown
|
page read and write
|
||
7FF5A0C51000
|
unkown
|
page readonly
|
||
7FF5F1A96000
|
unkown
|
page readonly
|
||
7FF567156000
|
unkown
|
page readonly
|
||
198E52E2000
|
unkown
|
page read and write
|
||
7FF558B7F000
|
unkown
|
page readonly
|
||
2998A472000
|
unkown
|
page read and write
|
||
19EFBA02000
|
unkown
|
page read and write
|
||
7FF5F1B4A000
|
unkown
|
page readonly
|
||
7FF5A4D50000
|
unkown
|
page readonly
|
||
7FF5F1923000
|
unkown
|
page readonly
|
||
17AE2FB0000
|
unkown
|
page readonly
|
||
2998A44D000
|
unkown
|
page read and write
|
||
2681B761000
|
unkown
|
page read and write
|
||
2A3A000
|
unkown
|
page readonly
|
||
7FF5F1621000
|
unkown
|
page readonly
|
||
2998AE00000
|
unkown
|
page readonly
|
||
19EF96B5000
|
unkown
|
page read and write
|
||
7FF515976000
|
unkown
|
page readonly
|
||
19EFB8D1000
|
unkown
|
page read and write
|
||
7FF565883000
|
unkown
|
page readonly
|
||
2681B7A6000
|
unkown
|
page read and write
|
||
29826BB1000
|
unkown
|
page read and write
|
||
7FF5158E7000
|
unkown
|
page readonly
|
||
198E52CE000
|
unkown
|
page read and write
|
||
2681B765000
|
unkown
|
page read and write
|
||
19EF968B000
|
unkown
|
page read and write
|
||
7FF558CFF000
|
unkown
|
page readonly
|
||
7FF58B2CD000
|
unkown
|
page readonly
|
||
2681ADA0000
|
unkown
|
page readonly
|
||
29826ED3000
|
unkown
|
page read and write
|
||
7FF5A04E1000
|
unkown
|
page readonly
|
||
BC760FD000
|
unkown
|
page read and write
|
||
82D000
|
unkown
|
page read and write
|
||
2681AEED000
|
unkown
|
page read and write
|
||
2998A400000
|
unkown
|
page read and write
|
||
1FEF4A3C000
|
unkown
|
page read and write
|
||
2982163F000
|
unkown
|
page read and write
|
||
13DF0E29000
|
unkown
|
page read and write
|
||
2681B738000
|
unkown
|
page read and write
|
||
1F8287D000
|
unkown
|
page read and write
|
||
19EFB5CD000
|
unkown
|
page read and write
|
||
CE0000
|
unkown
|
page read and write
|
||
7FF5159E7000
|
unkown
|
page readonly
|
||
7FF5F1B24000
|
unkown
|
page readonly
|
||
29821D90000
|
unkown
|
page readonly
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
7FF565977000
|
unkown
|
page readonly
|
||
2681B713000
|
unkown
|
page read and write
|
||
13DF0D80000
|
heap private
|
page read and write
|
||
7FF5158E5000
|
unkown
|
page readonly
|
||
2681B74E000
|
unkown
|
page read and write
|
||
19EFB575000
|
unkown
|
page read and write
|
||
7FF5A0BC6000
|
unkown
|
page readonly
|
||
28F7000
|
unkown
|
page readonly
|
||
17AE2EB4000
|
unkown
|
page read and write
|
||
19EFB8D0000
|
unkown
|
page read and write
|
||
29826A90000
|
unkown
|
page read and write
|
||
7FF5A4FC7000
|
unkown
|
page readonly
|
||
7FF58B27F000
|
unkown
|
page readonly
|
||
7FF58B1C1000
|
unkown
|
page readonly
|
||
2998A43C000
|
unkown
|
page read and write
|
||
7FF567142000
|
unkown
|
page readonly
|
||
20FFF229000
|
unkown
|
page read and write
|
||
19EF9480000
|
unkown
|
page readonly
|
||
20FFF202000
|
unkown
|
page read and write
|
||
29821702000
|
unkown
|
page read and write
|
||
19EFB500000
|
unkown
|
page read and write
|
||
BC762FE000
|
unkown
|
page read and write
|
||
29826E1F000
|
unkown
|
page read and write
|
||
17AE2E2E000
|
unkown
|
page read and write
|
||
29821570000
|
unkown
|
page read and write
|
||
7FF558D57000
|
unkown
|
page readonly
|
||
7FF566F8F000
|
unkown
|
page readonly
|
||
13DF10D0000
|
unkown
|
page write copy
|
||
2681B602000
|
unkown
|
page read and write
|
||
1F81D7A000
|
unkown
|
page read and write
|
||
17AE2E40000
|
unkown
|
page read and write
|
||
7FF558B2F000
|
unkown
|
page readonly
|
||
1FEF4C00000
|
unkown
|
page readonly
|
||
2B10000
|
unkown
|
page readonly
|
||
19EFB943000
|
unkown
|
page read and write
|
||
7FF5A0CA7000
|
unkown
|
page readonly
|
||
7FF5863BA000
|
unkown
|
page readonly
|
||
19EFB8D1000
|
unkown
|
page read and write
|
||
7FF5A4D09000
|
unkown
|
page readonly
|
||
20FFF7F0000
|
unkown
|
page read and write
|
||
5FE0000
|
unkown
|
page read and write
|
||
A0624AB000
|
unkown
|
page read and write
|
||
1FEF4B02000
|
unkown
|
page read and write
|
||
7FF5671DB000
|
unkown
|
page readonly
|
||
7FF5A0CA2000
|
unkown
|
page readonly
|
||
7FF5A0751000
|
unkown
|
page readonly
|
||
7FF5A0C6B000
|
unkown
|
page readonly
|
||
7FF5A0AB8000
|
unkown
|
page readonly
|
||
1FEF4A6E000
|
unkown
|
page read and write
|
||
2681B7A9000
|
unkown
|
page read and write
|
||
29821DB0000
|
unkown
|
page readonly
|
||
1FEF5400000
|
unkown
|
page readonly
|
||
2681B735000
|
unkown
|
page read and write
|
||
1F81DFA000
|
unkown
|
page read and write
|
||
13DF0E4D000
|
unkown
|
page read and write
|
||
825000
|
unkown
|
page read and write
|
||
13DF0E02000
|
unkown
|
page read and write
|
||
19EF9746000
|
unkown
|
page read and write
|
||
29826CA0000
|
unkown
|
page read and write
|
||
7FF57022B000
|
unkown
|
page readonly
|
||
E064FDE000
|
unkown
|
page read and write
|
||
7FF5589D6000
|
unkown
|
page readonly
|
||
1F8267B000
|
unkown
|
page read and write
|
||
19EF9800000
|
unkown
|
page readonly
|
||
2681B76C000
|
unkown
|
page read and write
|
||
B625C7F000
|
unkown
|
page read and write
|
||
7FF558DB4000
|
unkown
|
page readonly
|
||
2998A513000
|
unkown
|
page read and write
|
||
2681B7A6000
|
unkown
|
page read and write
|
||
2998A2D0000
|
heap default
|
page read and write
|
||
7FF558DDA000
|
unkown
|
page readonly
|
||
2681B757000
|
unkown
|
page read and write
|
||
7FF5F1405000
|
unkown
|
page readonly
|
||
29826A00000
|
unkown
|
page read and write
|
||
F8B179000
|
unkown
|
page read and write
|
||
7FF5A4D14000
|
unkown
|
page readonly
|
||
7FF58B1B1000
|
unkown
|
page readonly
|
||
7FF585C21000
|
unkown
|
page readonly
|
||
7FF558CE9000
|
unkown
|
page readonly
|
||
17AE2EB4000
|
unkown
|
page read and write
|
||
2681B753000
|
unkown
|
page read and write
|
||
2681BC61000
|
unkown
|
page read and write
|
||
7FF5A4D4E000
|
unkown
|
page readonly
|
||
2681ADF0000
|
unkown
|
page readonly
|
||
2681B773000
|
unkown
|
page read and write
|
||
F4BBA7E000
|
unkown
|
page read and write
|
||
2681B772000
|
unkown
|
page read and write
|
||
7FF586051000
|
unkown
|
page readonly
|
||
F4BC17F000
|
unkown
|
page read and write
|
||
8B39C7A000
|
unkown
|
page read and write
|
||
20FFF302000
|
unkown
|
page read and write
|
||
BC766FE000
|
unkown
|
page read and write
|
||
7FF565966000
|
unkown
|
page readonly
|
||
19EF96EE000
|
unkown
|
page read and write
|
||
7FF5F1985000
|
unkown
|
page readonly
|
||
19EFB52F000
|
unkown
|
page read and write
|
||
7FF5F1980000
|
unkown
|
page readonly
|
||
19EF9688000
|
unkown
|
page read and write
|
||
1F822FB000
|
unkown
|
page read and write
|
||
7FF5A0C67000
|
unkown
|
page readonly
|
||
2681B789000
|
unkown
|
page read and write
|
||
2998A454000
|
unkown
|
page read and write
|
||
BC764FB000
|
unkown
|
page read and write
|
||
7FF5159ED000
|
unkown
|
page readonly
|
||
2681B75B000
|
unkown
|
page read and write
|
||
E0656FF000
|
unkown
|
page read and write
|
||
8B39D7F000
|
unkown
|
page read and write
|
||
7FF5A0AE8000
|
unkown
|
page readonly
|
||
29826D40000
|
unkown
|
page readonly
|
||
19EF96CB000
|
unkown
|
page read and write
|
||
2681AEB1000
|
unkown
|
page read and write
|
||
2681B78D000
|
unkown
|
page read and write
|
||
A0629FA000
|
unkown
|
page read and write
|
||
7FF5F17E1000
|
unkown
|
page readonly
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
6C4A7F9000
|
unkown
|
page read and write
|
||
29821F58000
|
unkown
|
page read and write
|
||
7FF5F18B0000
|
unkown
|
page readonly
|
||
7FF558CB7000
|
unkown
|
page readonly
|
||
BC768FF000
|
unkown
|
page read and write
|
||
BC7667F000
|
unkown
|
page read and write
|
||
2A17000
|
unkown
|
page readonly
|
||
29821713000
|
unkown
|
page read and write
|
||
29826E00000
|
unkown
|
page read and write
|
||
7FF5A4F2D000
|
unkown
|
page readonly
|
||
5BC0000
|
unkown
|
page read and write
|
||
17AE312A000
|
heap private
|
page read and write
|
||
7FF558C48000
|
unkown
|
page readonly
|
||
2681AF02000
|
unkown
|
page read and write
|
||
2998AA80000
|
unkown
|
page readonly
|
||
B6258FB000
|
unkown
|
page read and write
|
||
7FF56711F000
|
unkown
|
page readonly
|
||
7FF558AF2000
|
unkown
|
page readonly
|
||
1FEF4A55000
|
unkown
|
page read and write
|
||
2998A458000
|
unkown
|
page read and write
|
||
2681AE13000
|
unkown
|
page read and write
|
||
900000
|
unkown
|
page readonly
|
||
198E52B2000
|
unkown
|
page read and write
|
||
2998A600000
|
unkown
|
page readonly
|
||
7FF515A37000
|
unkown
|
page readonly
|
||
17AE3340000
|
unkown
|
page readonly
|
||
7FF558CA7000
|
unkown
|
page readonly
|
||
2681AEEA000
|
unkown
|
page read and write
|
||
17AE2DD0000
|
unkown
|
page readonly
|
||
2998A3B0000
|
unkown
|
page readonly
|
||
7FF565963000
|
unkown
|
page readonly
|
||
29826CF0000
|
unkown
|
page read and write
|
||
7FF586397000
|
unkown
|
page readonly
|
||
19EFB3E0000
|
unkown
|
page readonly
|
||
7FF51594E000
|
unkown
|
page readonly
|
||
7FF5861F5000
|
unkown
|
page readonly
|
||
29821E02000
|
unkown
|
page read and write
|
||
7FF5A4FC1000
|
unkown
|
page readonly
|
||
7FF5A0CA7000
|
unkown
|
page readonly
|
||
19EF96EB000
|
unkown
|
page read and write
|
||
29821E15000
|
unkown
|
page read and write
|
||
13DF0E6C000
|
unkown
|
page read and write
|
||
2681B777000
|
unkown
|
page read and write
|
||
2B18000
|
unkown
|
page readonly
|
||
2681B779000
|
unkown
|
page read and write
|
||
7FF5863A7000
|
unkown
|
page readonly
|
||
7FF56715D000
|
unkown
|
page readonly
|
||
7FF567217000
|
unkown
|
page readonly
|
||
B6257F5000
|
unkown
|
page read and write
|
||
13DF0E6B000
|
unkown
|
page read and write
|
||
198E52AB000
|
heap default
|
page read and write
|
||
2681B790000
|
unkown
|
page read and write
|
||
7FF5A4EC5000
|
unkown
|
page readonly
|
||
2681B76D000
|
unkown
|
page read and write
|
||
29821F00000
|
unkown
|
page read and write
|
||
7FF5A0BCA000
|
unkown
|
page readonly
|
||
7FF5F1AB6000
|
unkown
|
page readonly
|
||
2681B79B000
|
unkown
|
page read and write
|
||
19EFB533000
|
unkown
|
page read and write
|
||
2681AEA7000
|
unkown
|
page read and write
|
||
2681B751000
|
unkown
|
page read and write
|
||
13DF0E6B000
|
unkown
|
page read and write
|
||
7FF5F193F000
|
unkown
|
page readonly
|
||
2681BC61000
|
unkown
|
page read and write
|
||
19EF96B7000
|
unkown
|
page read and write
|
||
7FF5A4E58000
|
unkown
|
page readonly
|
||
7FF558D13000
|
unkown
|
page readonly
|
||
BC761FB000
|
unkown
|
page read and write
|
||
2681B530000
|
unkown
|
page write copy
|
||
7FF5F13AB000
|
unkown
|
page readonly
|
||
2998A453000
|
unkown
|
page read and write
|
||
13DF1000000
|
unkown
|
page readonly
|
||
7FF5A4FEA000
|
unkown
|
page readonly
|
||
7FF5F1845000
|
unkown
|
page readonly
|
||
BC765FE000
|
unkown
|
page read and write
|
||
7FF5A0BB3000
|
unkown
|
page readonly
|
||
29821613000
|
unkown
|
page read and write
|
||
29826CF0000
|
unkown
|
page read and write
|
||
7FF565924000
|
unkown
|
page readonly
|
||
7FF567028000
|
unkown
|
page readonly
|
||
7FF5F1627000
|
unkown
|
page readonly
|
||
19EFBA82000
|
unkown
|
page read and write
|
||
29826A40000
|
unkown
|
page readonly
|
||
CD0000
|
unkown
|
page read and write
|
||
831000
|
unkown
|
page read and write
|
||
2681B77B000
|
unkown
|
page read and write
|
||
19EF9694000
|
unkown
|
page read and write
|
||
29826BB0000
|
unkown
|
page read and write
|
||
19EFBB42000
|
unkown
|
page read and write
|
||
7FF5159E4000
|
unkown
|
page readonly
|
||
17AE2E3B000
|
heap default
|
page read and write
|
||
2A1F000
|
unkown
|
page readonly
|
||
19EF96D5000
|
unkown
|
page read and write
|
||
20FFF213000
|
unkown
|
page read and write
|
||
2681ADD0000
|
unkown
|
page readonly
|
||
2998A452000
|
unkown
|
page read and write
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
19EF9739000
|
unkown
|
page read and write
|
||
17AE3C70000
|
unkown
|
page read and write
|
||
2681B757000
|
unkown
|
page read and write
|
||
17AE30C0000
|
unkown
|
page read and write
|
||
7FF558B40000
|
unkown
|
page readonly
|
||
17AE2EAE000
|
unkown
|
page read and write
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
1F8217B000
|
unkown
|
page read and write
|
||
7FF5F191D000
|
unkown
|
page readonly
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
19EFC110000
|
unkown
|
page read and write
|
||
19EFC410000
|
unkown
|
page read and write
|
||
2998A508000
|
unkown
|
page read and write
|
||
837000
|
unkown
|
page read and write
|
||
7FF515956000
|
unkown
|
page readonly
|
||
7FF58639D000
|
unkown
|
page readonly
|
||
7FF5863D6000
|
unkown
|
page readonly
|
||
7FF5A4F36000
|
unkown
|
page readonly
|
||
1FEF4940000
|
unkown
|
page readonly
|
||
590000
|
unkown
|
page readonly
|
||
19EF9671000
|
unkown
|
page read and write
|
||
7FF58B387000
|
unkown
|
page readonly
|
||
7FF585FAF000
|
unkown
|
page readonly
|
||
29826EB8000
|
unkown
|
page read and write
|
||
2681B732000
|
unkown
|
page read and write
|
||
7FF5A4725000
|
unkown
|
page readonly
|
||
1F826FA000
|
unkown
|
page read and write
|
||
1F824FB000
|
unkown
|
page read and write
|
||
17AE2E8E000
|
unkown
|
page read and write
|
||
1F8257B000
|
unkown
|
page read and write
|
||
7FF5157AF000
|
unkown
|
page readonly
|
||
29821F18000
|
unkown
|
page read and write
|
||
7FF5F1ABD000
|
unkown
|
page readonly
|
||
BC763FA000
|
unkown
|
page read and write
|
||
7FF5F1A27000
|
unkown
|
page readonly
|
||
825000
|
unkown
|
page read and write
|
||
19EFB5FB000
|
unkown
|
page read and write
|
||
29826E4C000
|
unkown
|
page read and write
|
||
19EF9788000
|
unkown
|
page read and write
|
||
298216F9000
|
unkown
|
page read and write
|
||
17AE2E3F000
|
unkown
|
page read and write
|
||
19EF966E000
|
unkown
|
page read and write
|
||
7FF558BCF000
|
unkown
|
page readonly
|
||
7FF5155F8000
|
unkown
|
page readonly
|
||
17AE3C80000
|
unkown
|
page read and write
|
||
19EFB52F000
|
unkown
|
page read and write
|
||
7FF558C18000
|
unkown
|
page readonly
|
||
E064F5B000
|
unkown
|
page read and write
|
||
29821690000
|
unkown
|
page read and write
|
||
1FEF4A50000
|
unkown
|
page read and write
|
||
19EF9672000
|
unkown
|
page read and write
|
||
19EFB670000
|
unkown
|
page read and write
|
||
2681B77F000
|
unkown
|
page read and write
|
||
7FF51593F000
|
unkown
|
page readonly
|
||
7FF567020000
|
unkown
|
page readonly
|
||
2681B732000
|
unkown
|
page read and write
|
||
2681B7A2000
|
unkown
|
page read and write
|
||
19EF9675000
|
unkown
|
page read and write
|
||
198E53E0000
|
unkown
|
page readonly
|
||
17AE2EBD000
|
unkown
|
page read and write
|
||
17AE3130000
|
unkown
|
page read and write
|
||
7FF5671CD000
|
unkown
|
page readonly
|
||
7FF558D26000
|
unkown
|
page readonly
|
||
19EF9674000
|
unkown
|
page read and write
|
||
7FF5F1A9A000
|
unkown
|
page readonly
|
||
7FF58B344000
|
unkown
|
page readonly
|
||
19EFB640000
|
unkown
|
page read and write
|
||
7FF5658C7000
|
unkown
|
page readonly
|
||
198E52CE000
|
unkown
|
page read and write
|
||
19EF9735000
|
unkown
|
page read and write
|
||
2AA8000
|
unkown
|
page readonly
|
||
7FF5863A4000
|
unkown
|
page readonly
|
||
F4BBDF7000
|
unkown
|
page read and write
|
||
7FF5A4DAA000
|
unkown
|
page readonly
|
||
2681B75B000
|
unkown
|
page read and write
|
||
7FF5589C8000
|
unkown
|
page readonly
|
||
19EFB58A000
|
unkown
|
page read and write
|
||
7FF5F15F3000
|
unkown
|
page readonly
|
||
19EFB6B0000
|
unkown
|
page readonly
|
||
19EF963F000
|
unkown
|
page read and write
|
||
19EFB983000
|
unkown
|
page read and write
|
||
7FF5589DA000
|
unkown
|
page readonly
|
||
BC7687F000
|
unkown
|
page read and write
|
||
17AE3C60000
|
unkown
|
page readonly
|
||
E06547B000
|
unkown
|
page read and write
|
||
20FFF120000
|
unkown
|
page readonly
|
||
7FF5F1AA2000
|
unkown
|
page readonly
|
||
7FF58B294000
|
unkown
|
page readonly
|
||
2681B75D000
|
unkown
|
page read and write
|
||
13DF29D0000
|
unkown
|
page readonly
|
||
1F8227A000
|
unkown
|
page read and write
|
||
7FF5F1A50000
|
unkown
|
page readonly
|
||
7FF58AB31000
|
unkown
|
page readonly
|
||
7FF515840000
|
unkown
|
page readonly
|
||
7FF5863AB000
|
unkown
|
page readonly
|
||
7FF5A4FD4000
|
unkown
|
page readonly
|
||
19EFB56C000
|
unkown
|
page read and write
|
||
17AE2E27000
|
unkown
|
page read and write
|
||
7FF5F1A8D000
|
unkown
|
page readonly
|
||
2681B793000
|
unkown
|
page read and write
|
||
1FEF4B13000
|
unkown
|
page read and write
|
||
7FF5A4DDF000
|
unkown
|
page readonly
|
||
2681ADF0000
|
unkown
|
page read and write
|
||
7FF56592D000
|
unkown
|
page readonly
|
||
7FF5A4F3A000
|
unkown
|
page readonly
|
||
1F8247B000
|
unkown
|
page read and write
|
||
7FF558D1D000
|
unkown
|
page readonly
|
||
17AE2E19000
|
unkown
|
page read and write
|
||
7FF5A4BE4000
|
unkown
|
page readonly
|
||
2681B7A9000
|
unkown
|
page read and write
|
||
7FF558B4B000
|
unkown
|
page readonly
|
||
17AE3125000
|
heap private
|
page read and write
|
||
7FF515A0A000
|
unkown
|
page readonly
|
||
7FF586339000
|
unkown
|
page readonly
|
||
7FF567206000
|
unkown
|
page readonly
|
||
19EF9688000
|
unkown
|
page read and write
|
||
19EFB5DC000
|
unkown
|
page read and write
|
||
7FF5F1A71000
|
unkown
|
page readonly
|
||
82E000
|
unkown
|
page read and write
|
||
29826C94000
|
unkown
|
page write copy
|
||
BAA000
|
heap private
|
page read and write
|
||
7FF5A4821000
|
unkown
|
page readonly
|
||
A0625AE000
|
unkown
|
page read and write
|
||
29821DA0000
|
unkown
|
page readonly
|
||
7FF565921000
|
unkown
|
page readonly
|
||
F4BBCF9000
|
unkown
|
page read and write
|
||
2681ADE0000
|
unkown
|
page readonly
|
||
2681B752000
|
unkown
|
page read and write
|
||
1F8207B000
|
unkown
|
page read and write
|
||
7FF5863E7000
|
unkown
|
page readonly
|
||
13DF0E6C000
|
unkown
|
page read and write
|
||
19EFB5B9000
|
unkown
|
page read and write
|
||
17AE2EAE000
|
heap default
|
page read and write
|
||
19EF9778000
|
unkown
|
page read and write
|
||
17AE2E38000
|
unkown
|
page read and write
|
||
F8B0FF000
|
unkown
|
page read and write
|
||
2681ADF0000
|
unkown
|
page read and write
|
||
298225E0000
|
unkown
|
page read and write
|
||
7FF5A0BD2000
|
unkown
|
page readonly
|
||
7FF5F1A7F000
|
unkown
|
page readonly
|
||
2681AEC4000
|
unkown
|
page read and write
|
||
298215F0000
|
unkown
|
page read and write
|
||
8B39EFE000
|
unkown
|
page read and write
|
||
198E5455000
|
heap private
|
page read and write
|
||
13DF0E6A000
|
unkown
|
page read and write
|
||
2982165E000
|
unkown
|
page read and write
|
||
6C4A97B000
|
unkown
|
page read and write
|
||
7FF5863D3000
|
unkown
|
page readonly
|
||
2681B757000
|
unkown
|
page read and write
|
||
2681B77D000
|
unkown
|
page read and write
|
||
7FF558B3E000
|
unkown
|
page readonly
|
||
1F81FFA000
|
unkown
|
page read and write
|
||
6C4A67B000
|
unkown
|
page read and write
|
||
17AE3A10000
|
unkown
|
page read and write
|
||
7FF5F1AC9000
|
unkown
|
page readonly
|
||
7FF5A0BBD000
|
unkown
|
page readonly
|
||
7FF58AC01000
|
unkown
|
page readonly
|
||
1F81F7B000
|
unkown
|
page read and write
|
||
19EFB593000
|
unkown
|
page read and write
|
||
2681B79E000
|
unkown
|
page read and write
|
||
2681BC00000
|
unkown
|
page read and write
|
||
7FF56594A000
|
unkown
|
page readonly
|
||
19EF9410000
|
heap private
|
page read and write
|
||
19EF9656000
|
unkown
|
page read and write
|
||
298215D1000
|
unkown
|
page read and write
|
||
17AE3A20000
|
unkown
|
page read and write
|
||
2998A500000
|
unkown
|
page read and write
|
||
7FF58B2A6000
|
unkown
|
page readonly
|
||
2681B785000
|
unkown
|
page read and write
|
||
570000
|
unkown
|
page read and write
|
||
20FFF450000
|
unkown
|
page readonly
|
||
7FF5F15F6000
|
unkown
|
page readonly
|
||
7FF5F1A6F000
|
unkown
|
page readonly
|
There are 1215 hidden memdumps, click here to show them.