Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
855_28042020.doc
|
Rich Text Format data, unknown version
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\855_28042020.doc.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:41
2020, mtime=Tue Feb 23 14:49:54 2021, atime=Tue Feb 23 14:49:51 2021, length=233718, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\1482DEE8-6AFF-4FA7-A5EC-FC31A1C9BCCB
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{493A25AD-4274-46D2-B660-9B9CC5F79F69}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{F0795CF8-46C6-4803-9D64-32515AF0A3BA}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$5_28042020.doc
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{4A8E8FD7-B28F-4AE5-86AD-026C320EA73C}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B9C27487-05CF-4B4D-9079-2A6225ABAACB}.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\855_28042020.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:15
2020, mtime=Wed Aug 26 14:08:15 2020, atime=Tue Feb 23 14:44:33 2021, length=233718, window=hide
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
|
|
|
|
C:\Windows\splwow64.exe
|
C:\Windows\splwow64.exe 12288
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://ichiseled.com/files/whe.exe
|
5.188.168.36
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://wus2-000.contentsync.
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://wus2-000.pagecontentsync.
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://ncus-000.contentsync.
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
There are 91 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
ichiseled.com
|
5.188.168.36
|
|
IPs
|
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
|---|---|---|---|---|---|
|
5.188.168.36
|
unknown
|
Luxembourg
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
#w*
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
$w*
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
jx*
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
r|*
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
1656D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Cambria Math
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
1D0E8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
File Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Datetime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Position
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VisiFlm
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AutoGrammar
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AutosaveInterval
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
PreferredView
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
WORDFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
1D0E8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Position
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Datetime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Settings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
,8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
8-8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
//8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
EC938
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Arial Unicode MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Batang
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@BatangChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@DFKai-SB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Dotum
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@DotumChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@FangSong
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Gulim
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@GulimChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Gungsuh
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@GungsuhChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@KaiTi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Malgun Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Meiryo
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Meiryo UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Microsoft JhengHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Microsoft YaHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU_HKSCS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU_HKSCS-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS Mincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS PGothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS PMincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS UI Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@NSimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@PMingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@PMingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimSun-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Agency FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Aharoni
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Algerian
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Andalus
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Angsana New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
AngsanaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Aparajita
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arabic Typesetting
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Black
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Narrow
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Rounded MT Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Unicode MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Baskerville Old Face
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Batang
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
BatangChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bauhaus 93
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bell MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Berlin Sans FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Berlin Sans FB Demi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bernard MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blackadder ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Black
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Poster Compressed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Book Antiqua
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bookman Old Style
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bookshelf Symbol 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bradley Hand ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Britannic Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Broadway
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Browallia New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
BrowalliaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Brush Script MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calibri
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calibri Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Californian FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calisto MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cambria
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cambria Math
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Candara
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Castellar
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Centaur
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century Schoolbook
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Chiller
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Colonna MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Comic Sans MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Consolas
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Constantia
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cooper Black
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Copperplate Gothic Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Copperplate Gothic Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Corbel
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cordia New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
CordiaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Courier New
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Curlz MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DaunPenh
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
David
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DFKai-SB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DilleniaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DokChampa
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Dotum
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DotumChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Ebrima
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Edwardian Script ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Elephant
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Engravers MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Bold ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Demi ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Light ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Medium ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Estrangelo Edessa
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
EucrosiaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Euphemia
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FangSong
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Felix Titling
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Footlight MT Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Forte
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Book
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Demi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Demi Cond
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Heavy
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Medium
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Medium Cond
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FrankRuehl
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FreesiaUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Freestyle Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
French Script MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gabriola
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Garamond
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gautami
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Georgia
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gigi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT Ext Condensed Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans Ultra Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans Ultra Bold Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gisha
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gloucester MT Extra Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Goudy Old Style
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Goudy Stout
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gulim
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
GulimChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gungsuh
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
GungsuhChe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Haettenschweiler
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Harlow Solid Italic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Harrington
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
High Tower Text
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Impact
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Imprint MT Shadow
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Informal Roman
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
IrisUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Iskoola Pota
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
JasmineUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Jokerman
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Juice ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
KaiTi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kalinga
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kartika
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Khmer UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
KodchiangUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kokila
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kristen ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kunstler Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lao UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Latha
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Leelawadee
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Levenim MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
LilyUPC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Bright
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Calligraphy
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Console
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Fax
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Handwriting
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans Typewriter
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans Unicode
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Magneto
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Maiandra GD
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Malgun Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mangal
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Marlett
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Matura MT Script Capitals
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Meiryo
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Meiryo UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Himalaya
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft JhengHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft New Tai Lue
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft PhagsPa
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Sans Serif
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Tai Le
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Uighur
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft YaHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Yi Baiti
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU_HKSCS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU_HKSCS-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Miriam
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Miriam Fixed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mistral
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Modern No. 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mongolian Baiti
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Monotype Corsiva
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MoolBoran
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Mincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Outlook
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS PGothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS PMincho
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Reference Sans Serif
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Reference Specialty
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS UI Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MT Extra
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MV Boli
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Narkisim
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Niagara Engraved
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Niagara Solid
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NSimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Nyala
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
OCR A Extended
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Old English Text MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Onyx
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Palace Script MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Palatino Linotype
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Papyrus
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Parchment
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Perpetua
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Perpetua Titling MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Plantagenet Cherokee
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Playbill
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
PMingLiU
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
PMingLiU-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Poor Richard
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Pristina
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Raavi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rage Italic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Ravie
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell Extra Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rod
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Sakkal Majalla
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Script MT Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe Print
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Light
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Semibold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Symbol
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Shonar Bangla
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Showcard Gothic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Shruti
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimHei
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Simplified Arabic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Simplified Arabic Fixed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimSun
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimSun-ExtB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Snap ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Stencil
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Sylfaen
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Symbol
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tahoma
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tempus Sans ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Times New Roman
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Traditional Arabic
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Trebuchet MS
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tunga
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT Condensed
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT Condensed Extra Bold
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Utsaah
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vani
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Verdana
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vijaya
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Viner Hand ITC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vivaldi
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vladimir Script
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vrinda
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Webdings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wide Latin
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F786B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
WORDFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F786B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F786B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F786B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
EquationEditorFilesIntl_1033
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
EquationEditorFilesIntl_1033
|
|
There are 430 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF596F58000
|
unkown
|
page readonly
|
|
|
|
16304013000
|
unkown
|
page read and write
|
|
|
|
7FF5EAEEE000
|
unkown
|
page readonly
|
|
|
|
24183C70000
|
unkown
|
page read and write
|
|
|
|
1A98F81F000
|
heap private
|
page read and write
|
|
|
|
2794B800000
|
unkown
|
page read and write
|
|
|
|
1DD0FF00000
|
unkown
|
page read and write
|
|
|
|
7FF5196E9000
|
unkown
|
page readonly
|
|
|
|
7FF554763000
|
unkown
|
page readonly
|
|
|
|
7FF5C14A2000
|
unkown
|
page readonly
|
|
|
|
7FF596DCF000
|
unkown
|
page readonly
|
|
|
|
7FF51EF55000
|
unkown
|
page readonly
|
|
|
|
7FF57F2BC000
|
unkown
|
page readonly
|
|
|
|
1AAAFD00000
|
unkown
|
page read and write
|
|
|
|
7FF5C6C77000
|
unkown
|
page readonly
|
|
|
|
255286D0000
|
unkown
|
page readonly
|
|
|
|
609AB7E000
|
unkown
|
page read and write
|
|
|
|
18A58655000
|
unkown
|
page read and write
|
|
|
|
286D5F9000
|
unkown
|
page read and write
|
|
|
|
2794D70B000
|
unkown
|
page read and write
|
|
|
|
7FF5195E0000
|
unkown
|
page readonly
|
|
|
|
274BC05E000
|
unkown
|
page read and write
|
|
|
|
21C87456000
|
unkown
|
page read and write
|
|
|
|
7FF536635000
|
unkown
|
page readonly
|
|
|
|
7FF5C17D2000
|
unkown
|
page readonly
|
|
|
|
4A8E07E000
|
unkown
|
page read and write
|
|
|
|
2794B8F0000
|
unkown
|
page read and write
|
|
|
|
7FF5EAF45000
|
unkown
|
page readonly
|
|
|
|
1AAB4B10000
|
unkown
|
page read and write
|
|
|
|
1A98D9B0000
|
heap default
|
page read and write
|
|
|
|
7FF5EAEA8000
|
unkown
|
page readonly
|
|
|
|
7FF51EF47000
|
unkown
|
page readonly
|
|
|
|
2794D771000
|
unkown
|
page read and write
|
|
|
|
7FF51F28E000
|
unkown
|
page readonly
|
|
|
|
274BC07B000
|
unkown
|
page read and write
|
|
|
|
7FF5941BC000
|
unkown
|
page readonly
|
|
|
|
7FF51236C000
|
unkown
|
page readonly
|
|
|
|
7FF555069000
|
unkown
|
page readonly
|
|
|
|
1AAAF3B0000
|
unkown
|
page readonly
|
|
|
|
7FF57C102000
|
unkown
|
page readonly
|
|
|
|
15DDB5C0000
|
unkown
|
page readonly
|
|
|
|
7FF596EB5000
|
unkown
|
page readonly
|
|
|
|
7FF51F237000
|
unkown
|
page readonly
|
|
|
|
7FF5BE245000
|
unkown
|
page readonly
|
|
|
|
1AAB4A40000
|
unkown
|
page read and write
|
|
|
|
7FF5AA79F000
|
unkown
|
page readonly
|
|
|
|
1AAAFF01000
|
unkown
|
page read and write
|
|
|
|
7FF51F1A8000
|
unkown
|
page readonly
|
|
|
|
7FF55507D000
|
unkown
|
page readonly
|
|
|
|
C24777B000
|
unkown
|
page read and write
|
|
|
|
7FF518D6E000
|
unkown
|
page readonly
|
|
|
|
7FF596FBC000
|
unkown
|
page readonly
|
|
|
|
2794DACD000
|
unkown
|
page read and write
|
|
|
|
1AAAFC15000
|
unkown
|
page read and write
|
|
|
|
2794D721000
|
unkown
|
page read and write
|
|
|
|
7FF512285000
|
unkown
|
page readonly
|
|
|
|
8254DFC000
|
unkown
|
page read and write
|
|
|
|
7FF554CD0000
|
unkown
|
page readonly
|
|
|
|
7FF593EAD000
|
unkown
|
page readonly
|
|
|
|
4BCDD7E000
|
unkown
|
page read and write
|
|
|
|
274BC047000
|
unkown
|
page read and write
|
|
|
|
18A58613000
|
unkown
|
page read and write
|
|
|
|
7FF596BD7000
|
unkown
|
page readonly
|
|
|
|
7FF5AA6D5000
|
unkown
|
page readonly
|
|
|
|
7FF55508C000
|
unkown
|
page readonly
|
|
|
|
2794D7AC000
|
unkown
|
page read and write
|
|
|
|
7FF51961E000
|
unkown
|
page readonly
|
|
|
|
495D57E000
|
unkown
|
page read and write
|
|
|
|
7FF5AA99C000
|
unkown
|
page readonly
|
|
|
|
12AEB7B7000
|
heap default
|
page read and write
|
|
|
|
7FF511C2C000
|
unkown
|
page readonly
|
|
|
|
7FF57F2ED000
|
unkown
|
page readonly
|
|
|
|
787007F000
|
unkown
|
page read and write
|
|
|
|
2794D73C000
|
unkown
|
page read and write
|
|
|
|
838957E000
|
unkown
|
page read and write
|
|
|
|
2794B670000
|
heap default
|
page read and write
|
|
|
|
4A8E37F000
|
unkown
|
page read and write
|
|
|
|
83892FB000
|
unkown
|
page read and write
|
|
|
|
2794DB00000
|
unkown
|
page read and write
|
|
|
|
7FF51931B000
|
unkown
|
page readonly
|
|
|
|
7FF5AA8FC000
|
unkown
|
page readonly
|
|
|
|
786FDDE000
|
unkown
|
page read and write
|
|
|
|
24183C13000
|
unkown
|
page read and write
|
|
|
|
7FF5194AE000
|
unkown
|
page readonly
|
|
|
|
230EB202000
|
unkown
|
page read and write
|
|
|
|
1351FB10000
|
heap private
|
page read and write
|
|
|
|
230EB213000
|
unkown
|
page read and write
|
|
|
|
15DDB470000
|
heap private
|
page read and write
|
|
|
|
C2479FB000
|
unkown
|
page read and write
|
|
|
|
25528925000
|
heap private
|
page read and write
|
|
|
|
7FF51F1CE000
|
unkown
|
page readonly
|
|
|
|
1351F8A0000
|
unkown
|
page readonly
|
|
|
|
7FF51EFFE000
|
unkown
|
page readonly
|
|
|
|
230EB1D0000
|
unkown
|
page readonly
|
|
|
|
7FF596F52000
|
unkown
|
page readonly
|
|
|
|
7FF596BC0000
|
unkown
|
page readonly
|
|
|
|
C247DFB000
|
unkown
|
page read and write
|
|
|
|
7FF597049000
|
unkown
|
page readonly
|
|
|
|
C247D7D000
|
unkown
|
page read and write
|
|
|
|
2794DBC2000
|
unkown
|
page read and write
|
|
|
|
274BBFC0000
|
unkown
|
page readonly
|
|
|
|
7FF596EC7000
|
unkown
|
page readonly
|
|
|
|
7FF5366F1000
|
unkown
|
page readonly
|
|
|
|
1A404130000
|
unkown
|
page read and write
|
|
|
|
16304102000
|
unkown
|
page read and write
|
|
|
|
7FF555111000
|
unkown
|
page readonly
|
|
|
|
7FF51EF4E000
|
unkown
|
page readonly
|
|
|
|
7FF596F40000
|
unkown
|
page readonly
|
|
|
|
4B7B97D000
|
unkown
|
page read and write
|
|
|
|
7FF57F258000
|
unkown
|
page readonly
|
|
|
|
1351F8B8000
|
heap default
|
page read and write
|
|
|
|
7FF5C1864000
|
unkown
|
page readonly
|
|
|
|
15DDB687000
|
unkown
|
page read and write
|
|
|
|
7FF51940A000
|
unkown
|
page readonly
|
|
|
|
1AAAFD18000
|
unkown
|
page read and write
|
|
|
|
7FF51F16C000
|
unkown
|
page readonly
|
|
|
|
274BC075000
|
unkown
|
page read and write
|
|
|
|
1351F8B0000
|
heap default
|
page read and write
|
|
|
|
1AAAF600000
|
unkown
|
page readonly
|
|
|
|
7FF5196E1000
|
unkown
|
page readonly
|
|
|
|
83891F5000
|
unkown
|
page read and write
|
|
|
|
7FF596E08000
|
unkown
|
page readonly
|
|
|
|
7FF596FCC000
|
unkown
|
page readonly
|
|
|
|
7FF51960A000
|
unkown
|
page readonly
|
|
|
|
1A98D970000
|
unkown
|
page readonly
|
|
|
|
7FF532E44000
|
unkown
|
page readonly
|
|
|
|
21C87500000
|
unkown
|
page read and write
|
|
|
|
1DD0FDD0000
|
unkown
|
page read and write
|
|
|
|
7FF51F177000
|
unkown
|
page readonly
|
|
|
|
7FF596B83000
|
unkown
|
page readonly
|
|
|
|
7FF596C7A000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA0E000
|
unkown
|
page readonly
|
|
|
|
7FF555096000
|
unkown
|
page readonly
|
|
|
|
2794D721000
|
unkown
|
page read and write
|
|
|
|
16304064000
|
unkown
|
page read and write
|
|
|
|
7FF5C179A000
|
unkown
|
page readonly
|
|
|
|
B9FFF7E000
|
unkown
|
page read and write
|
|
|
|
7FF570AE8000
|
unkown
|
page readonly
|
|
|
|
12AEB9A0000
|
heap private
|
page read and write
|
|
|
|
7FF5AA986000
|
unkown
|
page readonly
|
|
|
|
495D37F000
|
unkown
|
page read and write
|
|
|
|
7FF5AA910000
|
unkown
|
page readonly
|
|
|
|
7FF51F1BA000
|
unkown
|
page readonly
|
|
|
|
1AAAF6D0000
|
unkown
|
page readonly
|
|
|
|
2794D880000
|
unkown
|
page readonly
|
|
|
|
2794D725000
|
unkown
|
page read and write
|
|
|
|
7FF5DCCB6000
|
unkown
|
page readonly
|
|
|
|
7FF51EF1C000
|
unkown
|
page readonly
|
|
|
|
15DDB689000
|
unkown
|
page read and write
|
|
|
|
7FF5AA553000
|
unkown
|
page readonly
|
|
|
|
2794DA02000
|
unkown
|
page read and write
|
|
|
|
7FF57C186000
|
unkown
|
page readonly
|
|
|
|
255286A0000
|
unkown
|
page read and write
|
|
|
|
274BC03D000
|
unkown
|
page read and write
|
|
|
|
7FF57F242000
|
unkown
|
page readonly
|
|
|
|
1AAB4C1F000
|
unkown
|
page read and write
|
|
|
|
14B77FF000
|
unkown
|
page read and write
|
|
|
|
7FF5C6BD7000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A85000
|
unkown
|
page readonly
|
|
|
|
7FF59417E000
|
unkown
|
page readonly
|
|
|
|
7FF5DCC4A000
|
unkown
|
page readonly
|
|
|
|
2B44658E000
|
heap default
|
page read and write
|
|
|
|
2794DACC000
|
unkown
|
page read and write
|
|
|
|
1AAAF413000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
1AAB4A20000
|
unkown
|
page read and write
|
|
|
|
7FF5C1755000
|
unkown
|
page readonly
|
|
|
|
7FF51F01F000
|
unkown
|
page readonly
|
|
|
|
274BC05F000
|
unkown
|
page read and write
|
|
|
|
7FF51966C000
|
unkown
|
page readonly
|
|
|
|
7FF5941CC000
|
unkown
|
page readonly
|
|
|
|
7FF512349000
|
unkown
|
page readonly
|
|
|
|
2794DAF5000
|
unkown
|
page read and write
|
|
|
|
16303E40000
|
heap default
|
page read and write
|
|
|
|
7FF5C1668000
|
unkown
|
page readonly
|
|
|
|
7FF593F73000
|
unkown
|
page readonly
|
|
|
|
7FF5C16E0000
|
unkown
|
page readonly
|
|
|
|
7FF51237C000
|
unkown
|
page readonly
|
|
|
|
7FF57F2F2000
|
unkown
|
page readonly
|
|
|
|
2794DAE4000
|
unkown
|
page read and write
|
|
|
|
1DD0FE2A000
|
unkown
|
page read and write
|
|
|
|
2794D74F000
|
unkown
|
page read and write
|
|
|
|
1AAAF4B9000
|
unkown
|
page read and write
|
|
|
|
7FF51F20C000
|
unkown
|
page readonly
|
|
|
|
1AAAF49B000
|
unkown
|
page read and write
|
|
|
|
1AAB4C2D000
|
unkown
|
page read and write
|
|
|
|
1AAB4AFC000
|
unkown
|
page readonly
|
|
|
|
2794DA83000
|
unkown
|
page read and write
|
|
|
|
1A98D960000
|
unkown
|
page readonly
|
|
|
|
24184260000
|
unkown
|
page write copy
|
|
|
|
15088A5E000
|
unkown
|
page read and write
|
|
|
|
7FF5BE23E000
|
unkown
|
page readonly
|
|
|
|
21C87508000
|
unkown
|
page read and write
|
|
|
|
609A87B000
|
unkown
|
page read and write
|
|
|
|
7FF554FE7000
|
unkown
|
page readonly
|
|
|
|
7FF596F0B000
|
unkown
|
page readonly
|
|
|
|
1AAAFA60000
|
unkown
|
page readonly
|
|
|
|
1351F946000
|
unkown
|
page read and write
|
|
|
|
274BC200000
|
unkown
|
page readonly
|
|
|
|
16304028000
|
unkown
|
page read and write
|
|
|
|
21C87413000
|
unkown
|
page read and write
|
|
|
|
7FF5EAD20000
|
unkown
|
page readonly
|
|
|
|
7FF57F26A000
|
unkown
|
page readonly
|
|
|
|
7FF57F1F4000
|
unkown
|
page readonly
|
|
|
|
2794B9A0000
|
unkown
|
page read and write
|
|
|
|
1351F908000
|
unkown
|
page read and write
|
|
|
|
230EB302000
|
unkown
|
page read and write
|
|
|
|
1DD11940000
|
unkown
|
page readonly
|
|
|
|
7FF5AA9B7000
|
unkown
|
page readonly
|
|
|
|
1A98DBD0000
|
heap private
|
page read and write
|
|
|
|
21C8743C000
|
unkown
|
page read and write
|
|
|
|
2794E110000
|
unkown
|
page read and write
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
2794B8C0000
|
unkown
|
page read and write
|
|
|
|
4BCDC7F000
|
unkown
|
page read and write
|
|
|
|
15088A27000
|
unkown
|
page read and write
|
|
|
|
1DD11960000
|
unkown
|
page write copy
|
|
|
|
24183D13000
|
unkown
|
page read and write
|
|
|
|
7FF596C5C000
|
unkown
|
page readonly
|
|
|
|
15088840000
|
heap private
|
page read and write
|
|
|
|
2794DAD1000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
1A403A50000
|
unkown
|
page read and write
|
|
|
|
7FF570C08000
|
unkown
|
page readonly
|
|
|
|
7FF53660A000
|
unkown
|
page readonly
|
|
|
|
B9FF93B000
|
unkown
|
page read and write
|
|
|
|
7FF5C6D05000
|
unkown
|
page readonly
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
1AAB4B60000
|
unkown
|
page read and write
|
|
|
|
63E1FF000
|
unkown
|
page read and write
|
|
|
|
7FF51F13A000
|
unkown
|
page readonly
|
|
|
|
1AAAF488000
|
unkown
|
page read and write
|
|
|
|
7FF5366EE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE17C000
|
unkown
|
page readonly
|
|
|
|
7FF51F234000
|
unkown
|
page readonly
|
|
|
|
274BC031000
|
unkown
|
page read and write
|
|
|
|
255286F8000
|
heap default
|
page read and write
|
|
|
|
1351F91C000
|
unkown
|
page read and write
|
|
|
|
7FF570C06000
|
unkown
|
page readonly
|
|
|
|
7FF596F6A000
|
unkown
|
page readonly
|
|
|
|
7FF596FAD000
|
unkown
|
page readonly
|
|
|
|
13520660000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
24183D02000
|
unkown
|
page read and write
|
|
|
|
C24747A000
|
unkown
|
page read and write
|
|
|
|
2794DAF7000
|
unkown
|
page read and write
|
|
|
|
25528920000
|
heap private
|
page read and write
|
|
|
|
15DDB663000
|
unkown
|
page read and write
|
|
|
|
2794DA02000
|
unkown
|
page read and write
|
|
|
|
787017F000
|
unkown
|
page read and write
|
|
|
|
21C87451000
|
unkown
|
page read and write
|
|
|
|
B9FFFFC000
|
unkown
|
page read and write
|
|
|
|
15088980000
|
unkown
|
page readonly
|
|
|
|
2794DACB000
|
unkown
|
page read and write
|
|
|
|
B98057D000
|
unkown
|
page read and write
|
|
|
|
2794DA43000
|
unkown
|
page read and write
|
|
|
|
7FF5191F0000
|
unkown
|
page readonly
|
|
|
|
8254CFF000
|
unkown
|
page read and write
|
|
|
|
7FF519639000
|
unkown
|
page readonly
|
|
|
|
2794B9B1000
|
unkown
|
page read and write
|
|
|
|
24184500000
|
unkown
|
page read and write
|
|
|
|
7FF596EBC000
|
unkown
|
page readonly
|
|
|
|
2794DB42000
|
unkown
|
page read and write
|
|
|
|
2794D840000
|
unkown
|
page read and write
|
|
|
|
1DD11870000
|
unkown
|
page read and write
|
|
|
|
4B7B57F000
|
unkown
|
page read and write
|
|
|
|
21C87400000
|
unkown
|
page read and write
|
|
|
|
7FF5EAAF5000
|
unkown
|
page readonly
|
|
|
|
1A403A4F000
|
unkown
|
page read and write
|
|
|
|
7FF5707F0000
|
unkown
|
page readonly
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
7FF5BDB96000
|
unkown
|
page readonly
|
|
|
|
7FF57BFDA000
|
unkown
|
page readonly
|
|
|
|
2794D860000
|
unkown
|
page readonly
|
|
|
|
2794DACA000
|
unkown
|
page read and write
|
|
|
|
1AAB0890000
|
unkown
|
page read and write
|
|
|
|
7FF51F1E9000
|
unkown
|
page readonly
|
|
|
|
7FF51F216000
|
unkown
|
page readonly
|
|
|
|
21C87E00000
|
unkown
|
page readonly
|
|
|
|
2794DA85000
|
unkown
|
page read and write
|
|
|
|
21C876D0000
|
unkown
|
page readonly
|
|
|
|
7FF519684000
|
unkown
|
page readonly
|
|
|
|
7FF532DB8000
|
unkown
|
page readonly
|
|
|
|
1AAAF48F000
|
unkown
|
page read and write
|
|
|
|
150888B0000
|
unkown
|
page readonly
|
|
|
|
15DDB63F000
|
unkown
|
page read and write
|
|
|
|
7FF5EAEF5000
|
unkown
|
page readonly
|
|
|
|
2794DAC9000
|
unkown
|
page read and write
|
|
|
|
7FF5C65D9000
|
unkown
|
page readonly
|
|
|
|
7FF594241000
|
unkown
|
page readonly
|
|
|
|
16304113000
|
unkown
|
page read and write
|
|
|
|
7FF5DCCD2000
|
unkown
|
page readonly
|
|
|
|
7FF519527000
|
unkown
|
page readonly
|
|
|
|
2794D73C000
|
unkown
|
page read and write
|
|
|
|
1AAB4900000
|
unkown
|
page read and write
|
|
|
|
7FF57C1A7000
|
unkown
|
page readonly
|
|
|
|
609ABFF000
|
unkown
|
page read and write
|
|
|
|
7FF596F2C000
|
unkown
|
page readonly
|
|
|
|
C24757E000
|
unkown
|
page read and write
|
|
|
|
274BC03E000
|
unkown
|
page read and write
|
|
|
|
2794DAC5000
|
unkown
|
page read and write
|
|
|
|
1AAAFD59000
|
unkown
|
page read and write
|
|
|
|
7FF519675000
|
unkown
|
page readonly
|
|
|
|
2775CF000
|
unkown
|
page read and write
|
|
|
|
2794B852000
|
unkown
|
page read and write
|
|
|
|
7FF57C176000
|
unkown
|
page readonly
|
|
|
|
7FF554E9F000
|
unkown
|
page readonly
|
|
|
|
255286FE000
|
heap default
|
page read and write
|
|
|
|
274BC061000
|
unkown
|
page read and write
|
|
|
|
D6F107B000
|
unkown
|
page read and write
|
|
|
|
1AAAFD59000
|
unkown
|
page read and write
|
|
|
|
14B777E000
|
unkown
|
page read and write
|
|
|
|
27754C000
|
unkown
|
page read and write
|
|
|
|
609AC7F000
|
unkown
|
page read and write
|
|
|
|
150889D0000
|
unkown
|
page read and write
|
|
|
|
7FF532DB6000
|
unkown
|
page readonly
|
|
|
|
2794D73E000
|
unkown
|
page read and write
|
|
|
|
7FF59418F000
|
unkown
|
page readonly
|
|
|
|
1DD0FE3D000
|
unkown
|
page read and write
|
|
|
|
E07B57E000
|
unkown
|
page read and write
|
|
|
|
16304590000
|
unkown
|
page readonly
|
|
|
|
7FF51964D000
|
unkown
|
page readonly
|
|
|
|
4B7BAFE000
|
unkown
|
page read and write
|
|
|
|
1351F97E000
|
heap default
|
page read and write
|
|
|
|
7FF5AA996000
|
unkown
|
page readonly
|
|
|
|
1AAB0500000
|
unkown
|
page readonly
|
|
|
|
7FF596F85000
|
unkown
|
page readonly
|
|
|
|
1DD0FE89000
|
unkown
|
page read and write
|
|
|
|
1AAAF43F000
|
unkown
|
page read and write
|
|
|
|
1AAAF502000
|
unkown
|
page read and write
|
|
|
|
1A98DB70000
|
unkown
|
page readonly
|
|
|
|
7FF596FB6000
|
unkown
|
page readonly
|
|
|
|
7FF5C18C0000
|
unkown
|
page readonly
|
|
|
|
2794D755000
|
unkown
|
page read and write
|
|
|
|
1AAAF4FB000
|
unkown
|
page read and write
|
|
|
|
12AEB7D9000
|
heap default
|
page read and write
|
|
|
|
7FF5C6CDA000
|
unkown
|
page readonly
|
|
|
|
7FF57BD00000
|
unkown
|
page readonly
|
|
|
|
B3E327B000
|
unkown
|
page read and write
|
|
|
|
2794DAF5000
|
unkown
|
page read and write
|
|
|
|
24184539000
|
unkown
|
page read and write
|
|
|
|
1AAB4B60000
|
unkown
|
page read and write
|
|
|
|
1AAB0310000
|
unkown
|
page read and write
|
|
|
|
7FF5966C3000
|
unkown
|
page readonly
|
|
|
|
7FF5C18BE000
|
unkown
|
page readonly
|
|
|
|
1A403A2A000
|
unkown
|
page read and write
|
|
|
|
1A403B02000
|
unkown
|
page read and write
|
|
|
|
7FF57C145000
|
unkown
|
page readonly
|
|
|
|
2B446588000
|
heap default
|
page read and write
|
|
|
|
230ECD70000
|
unkown
|
page readonly
|
|
|
|
2794D723000
|
unkown
|
page read and write
|
|
|
|
7FF5EAFB0000
|
unkown
|
page readonly
|
|
|
|
7FF57C13E000
|
unkown
|
page readonly
|
|
|
|
1A403A13000
|
unkown
|
page read and write
|
|
|
|
B3E33F9000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC89000
|
unkown
|
page readonly
|
|
|
|
1A403C00000
|
unkown
|
page readonly
|
|
|
|
21C87360000
|
unkown
|
page readonly
|
|
|
|
7FF57F2E7000
|
unkown
|
page readonly
|
|
|
|
7FF57C17C000
|
unkown
|
page readonly
|
|
|
|
7FF532DDE000
|
unkown
|
page readonly
|
|
|
|
7FF5941E2000
|
unkown
|
page readonly
|
|
|
|
1A98D940000
|
unkown
|
page read and write
|
|
|
|
2794B8E9000
|
unkown
|
page read and write
|
|
|
|
2794DAE2000
|
unkown
|
page read and write
|
|
|
|
7FF51EF07000
|
unkown
|
page readonly
|
|
|
|
7FF532E1C000
|
unkown
|
page readonly
|
|
|
|
1AAB4AD4000
|
unkown
|
page readonly
|
|
|
|
2794D721000
|
unkown
|
page read and write
|
|
|
|
24183AA0000
|
unkown
|
page readonly
|
|
|
|
2794D73C000
|
unkown
|
page read and write
|
|
|
|
16303DE0000
|
heap private
|
page read and write
|
|
|
|
2794DAC5000
|
unkown
|
page read and write
|
|
|
|
7FF554FDB000
|
unkown
|
page readonly
|
|
|
|
7FF596DEE000
|
unkown
|
page readonly
|
|
|
|
1A403970000
|
heap private
|
page read and write
|
|
|
|
7FF570BF2000
|
unkown
|
page readonly
|
|
|
|
7FF596EF7000
|
unkown
|
page readonly
|
|
|
|
7FF5AA6E0000
|
unkown
|
page readonly
|
|
|
|
C247A7A000
|
unkown
|
page read and write
|
|
|
|
2794D76B000
|
unkown
|
page read and write
|
|
|
|
4B7B7FD000
|
unkown
|
page read and write
|
|
|
|
274BC02D000
|
unkown
|
page read and write
|
|
|
|
274BBFE0000
|
unkown
|
page read and write
|
|
|
|
7FF51F151000
|
unkown
|
page readonly
|
|
|
|
274BC045000
|
unkown
|
page read and write
|
|
|
|
274BC000000
|
unkown
|
page read and write
|
|
|
|
2794D850000
|
unkown
|
page readonly
|
|
|
|
7FF596CF7000
|
unkown
|
page readonly
|
|
|
|
8389477000
|
unkown
|
page read and write
|
|
|
|
7FF532DEF000
|
unkown
|
page readonly
|
|
|
|
609AE7A000
|
unkown
|
page read and write
|
|
|
|
7FF5C17AC000
|
unkown
|
page readonly
|
|
|
|
1A98DF70000
|
unkown
|
page readonly
|
|
|
|
1AAB4E60000
|
unkown
|
page readonly
|
|
|
|
12AEB790000
|
unkown
|
page read and write
|
|
|
|
7FF5C17C0000
|
unkown
|
page readonly
|
|
|
|
1AAAF478000
|
unkown
|
page read and write
|
|
|
|
2794B8A7000
|
unkown
|
page read and write
|
|
|
|
7FF5DCD2E000
|
unkown
|
page readonly
|
|
|
|
7FF5C17EA000
|
unkown
|
page readonly
|
|
|
|
7FF596F27000
|
unkown
|
page readonly
|
|
|
|
7FF5EAE67000
|
unkown
|
page readonly
|
|
|
|
495D77F000
|
unkown
|
page read and write
|
|
|
|
7FF5BDAB1000
|
unkown
|
page readonly
|
|
|
|
7FF5C17FE000
|
unkown
|
page readonly
|
|
|
|
B98027B000
|
unkown
|
page read and write
|
|
|
|
1AAB4C15000
|
unkown
|
page read and write
|
|
|
|
1351F8FD000
|
unkown
|
page read and write
|
|
|
|
21C87429000
|
unkown
|
page read and write
|
|
|
|
7FF51F000000
|
unkown
|
page readonly
|
|
|
|
B3E357F000
|
unkown
|
page read and write
|
|
|
|
1DD11930000
|
unkown
|
page read and write
|
|
|
|
1DD0FD90000
|
unkown
|
page readonly
|
|
|
|
7FF594158000
|
unkown
|
page readonly
|
|
|
|
2794DAC5000
|
unkown
|
page read and write
|
|
|
|
7FF5BE27C000
|
unkown
|
page readonly
|
|
|
|
274BC074000
|
unkown
|
page read and write
|
|
|
|
7FF5C1432000
|
unkown
|
page readonly
|
|
|
|
1AAAF457000
|
unkown
|
page read and write
|
|
|
|
18A58702000
|
unkown
|
page read and write
|
|
|
|
2794B8EC000
|
unkown
|
page read and write
|
|
|
|
2794D724000
|
unkown
|
page read and write
|
|
|
|
18A58570000
|
unkown
|
page readonly
|
|
|
|
2794D723000
|
unkown
|
page read and write
|
|
|
|
7FF51F088000
|
unkown
|
page readonly
|
|
|
|
16303F20000
|
unkown
|
page readonly
|
|
|
|
1AAB4BB0000
|
unkown
|
page readonly
|
|
|
|
7FF5EAFB9000
|
unkown
|
page readonly
|
|
|
|
7FF51230A000
|
unkown
|
page readonly
|
|
|
|
E07AF1E000
|
unkown
|
page read and write
|
|
|
|
16304200000
|
unkown
|
page readonly
|
|
|
|
7FF554CD7000
|
unkown
|
page readonly
|
|
|
|
7FF5C1836000
|
unkown
|
page readonly
|
|
|
|
2794D602000
|
unkown
|
page read and write
|
|
|
|
7FF532BCA000
|
unkown
|
page readonly
|
|
|
|
230ECC70000
|
unkown
|
page read and write
|
|
|
|
7FF570C7C000
|
unkown
|
page readonly
|
|
|
|
18A5863C000
|
unkown
|
page read and write
|
|
|
|
230EB4D0000
|
unkown
|
page readonly
|
|
|
|
24184600000
|
unkown
|
page readonly
|
|
|
|
4BCDE7E000
|
unkown
|
page read and write
|
|
|
|
7FF51EDA3000
|
unkown
|
page readonly
|
|
|
|
7FF596C4D000
|
unkown
|
page readonly
|
|
|
|
C24787E000
|
unkown
|
page read and write
|
|
|
|
12AEB7B0000
|
heap default
|
page read and write
|
|
|
|
2794D7AA000
|
unkown
|
page read and write
|
|
|
|
7FF5941E7000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A90000
|
unkown
|
page readonly
|
|
|
|
7FF5AA928000
|
unkown
|
page readonly
|
|
|
|
7FF570CEE000
|
unkown
|
page readonly
|
|
|
|
274BC013000
|
unkown
|
page read and write
|
|
|
|
7FF51F1A2000
|
unkown
|
page readonly
|
|
|
|
7FF596CCC000
|
unkown
|
page readonly
|
|
|
|
1DD0FE58000
|
unkown
|
page read and write
|
|
|
|
7FF5BE26D000
|
unkown
|
page readonly
|
|
|
|
1A98DBD5000
|
heap private
|
page read and write
|
|
|
|
2794B874000
|
unkown
|
page read and write
|
|
|
|
1DD0FE5E000
|
unkown
|
page read and write
|
|
|
|
7FF5AA955000
|
unkown
|
page readonly
|
|
|
|
1351F97E000
|
unkown
|
page read and write
|
|
|
|
2794D700000
|
unkown
|
page read and write
|
|
|
|
B3E337E000
|
unkown
|
page read and write
|
|
|
|
274BC057000
|
unkown
|
page read and write
|
|
|
|
2778FF000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
1AAAF3A0000
|
heap default
|
page read and write
|
|
|
|
230EB170000
|
heap default
|
page read and write
|
|
|
|
7FF5AA908000
|
unkown
|
page readonly
|
|
|
|
7FF594199000
|
unkown
|
page readonly
|
|
|
|
15088A02000
|
unkown
|
page read and write
|
|
|
|
1A403B13000
|
unkown
|
page read and write
|
|
|
|
2794DB82000
|
unkown
|
page read and write
|
|
|
|
286D6F9000
|
unkown
|
page read and write
|
|
|
|
12AEB770000
|
unkown
|
page read and write
|
|
|
|
7FF596F17000
|
unkown
|
page readonly
|
|
|
|
7FF570C66000
|
unkown
|
page readonly
|
|
|
|
274BC044000
|
unkown
|
page read and write
|
|
|
|
7FF519666000
|
unkown
|
page readonly
|
|
|
|
21C87380000
|
unkown
|
page read and write
|
|
|
|
7FF555081000
|
unkown
|
page readonly
|
|
|
|
7FF519687000
|
unkown
|
page readonly
|
|
|
|
2794DA83000
|
unkown
|
page read and write
|
|
|
|
15088C00000
|
unkown
|
page readonly
|
|
|
|
7FF5BE117000
|
unkown
|
page readonly
|
|
|
|
21C872F0000
|
heap private
|
page read and write
|
|
|
|
7FF5123F9000
|
unkown
|
page readonly
|
|
|
|
7FF596F01000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CFE000
|
unkown
|
page readonly
|
|
|
|
7FF57F256000
|
unkown
|
page readonly
|
|
|
|
7FF51F201000
|
unkown
|
page readonly
|
|
|
|
7FF570C90000
|
unkown
|
page readonly
|
|
|
|
609ACFE000
|
unkown
|
page read and write
|
|
|
|
1A98D920000
|
unkown
|
page read and write
|
|
|
|
7FF532E35000
|
unkown
|
page readonly
|
|
|
|
7FF5AA9B0000
|
unkown
|
page readonly
|
|
|
|
1A403B08000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC6E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE309000
|
unkown
|
page readonly
|
|
|
|
2794D840000
|
unkown
|
page read and write
|
|
|
|
7FF5941C6000
|
unkown
|
page readonly
|
|
|
|
4B7B0FB000
|
unkown
|
page read and write
|
|
|
|
2794B829000
|
unkown
|
page read and write
|
|
|
|
D6F10FE000
|
unkown
|
page read and write
|
|
|
|
274BC02F000
|
unkown
|
page read and write
|
|
|
|
4BCD58C000
|
unkown
|
page read and write
|
|
|
|
15DDB702000
|
unkown
|
page read and write
|
|
|
|
7FF596E01000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA11000
|
unkown
|
page readonly
|
|
|
|
7FF5191E0000
|
unkown
|
page readonly
|
|
|
|
2794DACB000
|
unkown
|
page read and write
|
|
|
|
7FF5AA93A000
|
unkown
|
page readonly
|
|
|
|
1AAB4A00000
|
unkown
|
page read and write
|
|
|
|
2794DBC4000
|
unkown
|
page read and write
|
|
|
|
24184513000
|
unkown
|
page read and write
|
|
|
|
7FF5DCD31000
|
unkown
|
page readonly
|
|
|
|
2794B99D000
|
unkown
|
page read and write
|
|
|
|
18A58600000
|
unkown
|
page read and write
|
|
|
|
1AAAF473000
|
unkown
|
page read and write
|
|
|
|
2794B857000
|
unkown
|
page read and write
|
|
|
|
C2474FF000
|
unkown
|
page read and write
|
|
|
|
7FF532DA0000
|
unkown
|
page readonly
|
|
|
|
1A98F430000
|
heap private
|
page read and write
|
|
|
|
2794DA02000
|
unkown
|
page read and write
|
|
|
|
7FF570CF1000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D67000
|
unkown
|
page readonly
|
|
|
|
2794B93B000
|
unkown
|
page read and write
|
|
|
|
12AEB9A5000
|
heap private
|
page read and write
|
|
|
|
21C8748D000
|
unkown
|
page read and write
|
|
|
|
609AF7B000
|
unkown
|
page read and write
|
|
|
|
7FF59392B000
|
unkown
|
page readonly
|
|
|
|
13520670000
|
unkown
|
page readonly
|
|
|
|
2794E310000
|
unkown
|
page read and write
|
|
|
|
1DD100D0000
|
unkown
|
page readonly
|
|
|
|
7FF5191DA000
|
unkown
|
page readonly
|
|
|
|
7FF570495000
|
unkown
|
page readonly
|
|
|
|
7FF57F2B1000
|
unkown
|
page readonly
|
|
|
|
7FF5C65D5000
|
unkown
|
page readonly
|
|
|
|
7FF57F349000
|
unkown
|
page readonly
|
|
|
|
7FF57F1EA000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CD6000
|
unkown
|
page readonly
|
|
|
|
7FF5966B9000
|
unkown
|
page readonly
|
|
|
|
2794D840000
|
unkown
|
page read and write
|
|
|
|
7FF535F2C000
|
unkown
|
page readonly
|
|
|
|
13520690000
|
unkown
|
page read and write
|
|
|
|
2794B8E9000
|
unkown
|
page read and write
|
|
|
|
495D07E000
|
unkown
|
page read and write
|
|
|
|
7FF51F17C000
|
unkown
|
page readonly
|
|
|
|
1A98F3B0000
|
heap private
|
page read and write
|
|
|
|
1A404202000
|
unkown
|
page read and write
|
|
|
|
2794DAFA000
|
unkown
|
page read and write
|
|
|
|
274BC062000
|
unkown
|
page read and write
|
|
|
|
7FF593FE8000
|
unkown
|
page readonly
|
|
|
|
1AAAFBF3000
|
unkown
|
page read and write
|
|
|
|
7FF5C173C000
|
unkown
|
page readonly
|
|
|
|
7FF5C1516000
|
unkown
|
page readonly
|
|
|
|
21C87427000
|
unkown
|
page read and write
|
|
|
|
7FF57C159000
|
unkown
|
page readonly
|
|
|
|
7FF532E9E000
|
unkown
|
page readonly
|
|
|
|
7FF570397000
|
unkown
|
page readonly
|
|
|
|
7FF593E7A000
|
unkown
|
page readonly
|
|
|
|
1351F96D000
|
unkown
|
page read and write
|
|
|
|
7FF51F188000
|
unkown
|
page readonly
|
|
|
|
7FF596FD5000
|
unkown
|
page readonly
|
|
|
|
12AEB710000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DC9000
|
unkown
|
page readonly
|
|
|
|
1AAB4C3C000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
7FF5EAF26000
|
unkown
|
page readonly
|
|
|
|
21C87600000
|
unkown
|
page readonly
|
|
|
|
7FF5194FD000
|
unkown
|
page readonly
|
|
|
|
7FF57F349000
|
unkown
|
page readonly
|
|
|
|
C24797B000
|
unkown
|
page read and write
|
|
|
|
24183B70000
|
unkown
|
page readonly
|
|
|
|
7FF57C209000
|
unkown
|
page readonly
|
|
|
|
7FF51962F000
|
unkown
|
page readonly
|
|
|
|
7FF5DCCC5000
|
unkown
|
page readonly
|
|
|
|
274BC060000
|
unkown
|
page read and write
|
|
|
|
7FF5366F9000
|
unkown
|
page readonly
|
|
|
|
609A5F7000
|
unkown
|
page read and write
|
|
|
|
7FF5EAE9C000
|
unkown
|
page readonly
|
|
|
|
7FF57C047000
|
unkown
|
page readonly
|
|
|
|
7FF532E47000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D46000
|
unkown
|
page readonly
|
|
|
|
7FF596C56000
|
unkown
|
page readonly
|
|
|
|
7FF5EAE71000
|
unkown
|
page readonly
|
|
|
|
7FF5123EE000
|
unkown
|
page readonly
|
|
|
|
7FF596FC6000
|
unkown
|
page readonly
|
|
|
|
1AAAFBD1000
|
unkown
|
page read and write
|
|
|
|
7FF512308000
|
unkown
|
page readonly
|
|
|
|
18A59000000
|
unkown
|
page readonly
|
|
|
|
21C87370000
|
unkown
|
page readonly
|
|
|
|
7FF532DE5000
|
unkown
|
page readonly
|
|
|
|
18A58E02000
|
unkown
|
page read and write
|
|
|
|
1351FAC0000
|
unkown
|
page read and write
|
|
|
|
1A404400000
|
unkown
|
page readonly
|
|
|
|
7FF5AA5E8000
|
unkown
|
page readonly
|
|
|
|
1351FA80000
|
unkown
|
page readonly
|
|
|
|
7FF570C1A000
|
unkown
|
page readonly
|
|
|
|
7FF5EAF21000
|
unkown
|
page readonly
|
|
|
|
7FF57BFCE000
|
unkown
|
page readonly
|
|
|
|
7FF57C118000
|
unkown
|
page readonly
|
|
|
|
7FF5938A2000
|
unkown
|
page readonly
|
|
|
|
1AAAF3C0000
|
unkown
|
page readonly
|
|
|
|
7FF5DCCBC000
|
unkown
|
page readonly
|
|
|
|
1AAB4B20000
|
unkown
|
page read and write
|
|
|
|
21C87C02000
|
unkown
|
page read and write
|
|
|
|
7FF5EAEC2000
|
unkown
|
page readonly
|
|
|
|
7FF519625000
|
unkown
|
page readonly
|
|
|
|
1351F8FD000
|
unkown
|
page read and write
|
|
|
|
7FF5EAAF1000
|
unkown
|
page readonly
|
|
|
|
7FF570ACA000
|
unkown
|
page readonly
|
|
|
|
16303F30000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D60000
|
unkown
|
page readonly
|
|
|
|
7FF51F225000
|
unkown
|
page readonly
|
|
|
|
7FF57B888000
|
unkown
|
page readonly
|
|
|
|
7FF51EFEA000
|
unkown
|
page readonly
|
|
|
|
7FF555055000
|
unkown
|
page readonly
|
|
|
|
24183CC8000
|
unkown
|
page read and write
|
|
|
|
7FF5941AD000
|
unkown
|
page readonly
|
|
|
|
21C87513000
|
unkown
|
page read and write
|
|
|
|
18A5864F000
|
unkown
|
page read and write
|
|
|
|
274BC067000
|
unkown
|
page read and write
|
|
|
|
18A58580000
|
unkown
|
page readonly
|
|
|
|
274BC05C000
|
unkown
|
page read and write
|
|
|
|
7FF5AA922000
|
unkown
|
page readonly
|
|
|
|
7FF51232E000
|
unkown
|
page readonly
|
|
|
|
7FF593F10000
|
unkown
|
page readonly
|
|
|
|
7FF5AA77E000
|
unkown
|
page readonly
|
|
|
|
7FF570C02000
|
unkown
|
page readonly
|
|
|
|
18A58679000
|
unkown
|
page read and write
|
|
|
|
1AAAFC02000
|
unkown
|
page read and write
|
|
|
|
150889D0000
|
unkown
|
page read and write
|
|
|
|
609A77A000
|
unkown
|
page read and write
|
|
|
|
609AD7E000
|
unkown
|
page read and write
|
|
|
|
2794DAF7000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
7FF5EAE6A000
|
unkown
|
page readonly
|
|
|
|
1351FB19000
|
heap private
|
page read and write
|
|
|
|
2794D74F000
|
unkown
|
page read and write
|
|
|
|
609A1EB000
|
unkown
|
page read and write
|
|
|
|
7FF51EDCD000
|
unkown
|
page readonly
|
|
|
|
1AAB4A24000
|
unkown
|
page read and write
|
|
|
|
2794D5E0000
|
heap private
|
page read and write
|
|
|
|
7FF5123F9000
|
unkown
|
page readonly
|
|
|
|
7FF512366000
|
unkown
|
page readonly
|
|
|
|
16304069000
|
unkown
|
page read and write
|
|
|
|
7FF5550B7000
|
unkown
|
page readonly
|
|
|
|
4A8DFF5000
|
unkown
|
page read and write
|
|
|
|
1A4039E0000
|
unkown
|
page readonly
|
|
|
|
7FF5AA98C000
|
unkown
|
page readonly
|
|
|
|
230EB400000
|
unkown
|
page readonly
|
|
|
|
7FF51EAB4000
|
unkown
|
page readonly
|
|
|
|
15DDB4E0000
|
unkown
|
page readonly
|
|
|
|
7FF59423E000
|
unkown
|
page readonly
|
|
|
|
7FF5EAB88000
|
unkown
|
page readonly
|
|
|
|
7FF57C201000
|
unkown
|
page readonly
|
|
|
|
C2472FE000
|
unkown
|
page read and write
|
|
|
|
1AAB4B60000
|
unkown
|
page read and write
|
|
|
|
1AAB4AD0000
|
unkown
|
page read and write
|
|
|
|
B98037D000
|
unkown
|
page read and write
|
|
|
|
7FF5DCCAC000
|
unkown
|
page readonly
|
|
|
|
2794B83F000
|
unkown
|
page read and write
|
|
|
|
7FF570C35000
|
unkown
|
page readonly
|
|
|
|
274BC058000
|
unkown
|
page read and write
|
|
|
|
1AAAFD02000
|
unkown
|
page read and write
|
|
|
|
7FF536685000
|
unkown
|
page readonly
|
|
|
|
1351F860000
|
unkown
|
page read and write
|
|
|
|
1351FB15000
|
heap private
|
page read and write
|
|
|
|
2794B872000
|
unkown
|
page read and write
|
|
|
|
21C87481000
|
unkown
|
page read and write
|
|
|
|
495D67F000
|
unkown
|
page read and write
|
|
|
|
7FF570C2E000
|
unkown
|
page readonly
|
|
|
|
15088A24000
|
unkown
|
page read and write
|
|
|
|
15DDB600000
|
unkown
|
page read and write
|
|
|
|
2794B8ED000
|
unkown
|
page read and write
|
|
|
|
4B7B6FE000
|
unkown
|
page read and write
|
|
|
|
1DD10460000
|
unkown
|
page readonly
|
|
|
|
25528930000
|
unkown
|
page readonly
|
|
|
|
1AAB48F0000
|
unkown
|
page read and write
|
|
|
|
2794B8EA000
|
unkown
|
page read and write
|
|
|
|
7FF593FCF000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D19000
|
unkown
|
page readonly
|
|
|
|
7FF555119000
|
unkown
|
page readonly
|
|
|
|
1AAB4C60000
|
unkown
|
page read and write
|
|
|
|
1A4039F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE301000
|
unkown
|
page readonly
|
|
|
|
7FF5BDAB6000
|
unkown
|
page readonly
|
|
|
|
1A403A52000
|
unkown
|
page read and write
|
|
|
|
7FF5C6C9A000
|
unkown
|
page readonly
|
|
|
|
2794B813000
|
unkown
|
page read and write
|
|
|
|
7FF597049000
|
unkown
|
page readonly
|
|
|
|
7FF555119000
|
unkown
|
page readonly
|
|
|
|
2794D73C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC9D000
|
unkown
|
page readonly
|
|
|
|
7FF594142000
|
unkown
|
page readonly
|
|
|
|
1A403A70000
|
unkown
|
page read and write
|
|
|
|
274BBEE0000
|
heap default
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
1DD0FE6F000
|
unkown
|
page read and write
|
|
|
|
7FF5C1831000
|
unkown
|
page readonly
|
|
|
|
7FF5EAF09000
|
unkown
|
page readonly
|
|
|
|
2794B853000
|
unkown
|
page read and write
|
|
|
|
12AEB9B0000
|
unkown
|
page readonly
|
|
|
|
7FF596FE7000
|
unkown
|
page readonly
|
|
|
|
1AAB4E00000
|
unkown
|
page readonly
|
|
|
|
2794B8FA000
|
unkown
|
page read and write
|
|
|
|
2794E510000
|
unkown
|
page read and write
|
|
|
|
1DD118B0000
|
unkown
|
page read and write
|
|
|
|
C2477FD000
|
unkown
|
page read and write
|
|
|
|
15DDBE02000
|
unkown
|
page read and write
|
|
|
|
2794DAE0000
|
unkown
|
page read and write
|
|
|
|
2794E310000
|
unkown
|
page read and write
|
|
|
|
7FF596D6B000
|
unkown
|
page readonly
|
|
|
|
7FF596CFE000
|
unkown
|
page readonly
|
|
|
|
7FF5C182D000
|
unkown
|
page readonly
|
|
|
|
1AAB4CAF000
|
unkown
|
page read and write
|
|
|
|
7FF53667C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE0A3000
|
unkown
|
page readonly
|
|
|
|
7FF5DCC48000
|
unkown
|
page readonly
|
|
|
|
7FF5194BA000
|
unkown
|
page readonly
|
|
|
|
7FF5AA6CE000
|
unkown
|
page readonly
|
|
|
|
1A403A4D000
|
unkown
|
page read and write
|
|
|
|
7FF532E2C000
|
unkown
|
page readonly
|
|
|
|
7FF57C1A4000
|
unkown
|
page readonly
|
|
|
|
16304100000
|
unkown
|
page read and write
|
|
|
|
2794D726000
|
unkown
|
page read and write
|
|
|
|
2794E310000
|
unkown
|
page read and write
|
|
|
|
1AAAFC00000
|
unkown
|
page read and write
|
|
|
|
7FF57F33E000
|
unkown
|
page readonly
|
|
|
|
7FF532E16000
|
unkown
|
page readonly
|
|
|
|
2794DAF7000
|
unkown
|
page read and write
|
|
|
|
7FF570ABE000
|
unkown
|
page readonly
|
|
|
|
786FD5A000
|
unkown
|
page read and write
|
|
|
|
16304800000
|
unkown
|
page readonly
|
|
|
|
63E3FC000
|
unkown
|
page read and write
|
|
|
|
C24737E000
|
unkown
|
page read and write
|
|
|
|
7FF5196E9000
|
unkown
|
page readonly
|
|
|
|
7FF5EAF57000
|
unkown
|
page readonly
|
|
|
|
18A5862A000
|
unkown
|
page read and write
|
|
|
|
18A58683000
|
unkown
|
page read and write
|
|
|
|
1AAB0540000
|
unkown
|
page readonly
|
|
|
|
1AAAF3D0000
|
unkown
|
page read and write
|
|
|
|
18A58800000
|
unkown
|
page readonly
|
|
|
|
7FF5BE175000
|
unkown
|
page readonly
|
|
|
|
609AAFF000
|
unkown
|
page read and write
|
|
|
|
1AAB4C53000
|
unkown
|
page read and write
|
|
|
|
7FF532DF9000
|
unkown
|
page readonly
|
|
|
|
4A8DBBC000
|
unkown
|
page read and write
|
|
|
|
7FF596FB1000
|
unkown
|
page readonly
|
|
|
|
15DDB800000
|
unkown
|
page readonly
|
|
|
|
7FF51F16A000
|
unkown
|
page readonly
|
|
|
|
7FF51EEF4000
|
unkown
|
page readonly
|
|
|
|
8254D7E000
|
unkown
|
page read and write
|
|
|
|
7FF570BF0000
|
unkown
|
page readonly
|
|
|
|
7FF532E0D000
|
unkown
|
page readonly
|
|
|
|
7FF5C16D7000
|
unkown
|
page readonly
|
|
|
|
15088A13000
|
unkown
|
page read and write
|
|
|
|
7FF57B88E000
|
unkown
|
page readonly
|
|
|
|
7FF596E10000
|
unkown
|
page readonly
|
|
|
|
7FF596F8F000
|
unkown
|
page readonly
|
|
|
|
7FF5BDB91000
|
unkown
|
page readonly
|
|
|
|
15088B02000
|
unkown
|
page read and write
|
|
|
|
2794B91C000
|
unkown
|
page read and write
|
|
|
|
21C88140000
|
unkown
|
page readonly
|
|
|
|
7FF5C142E000
|
unkown
|
page readonly
|
|
|
|
D6F11FE000
|
unkown
|
page read and write
|
|
|
|
7FF5941D5000
|
unkown
|
page readonly
|
|
|
|
2794DAE2000
|
unkown
|
page read and write
|
|
|
|
1AAB4A21000
|
unkown
|
page read and write
|
|
|
|
1AAB4B50000
|
unkown
|
page read and write
|
|
|
|
1AAB4B30000
|
unkown
|
page read and write
|
|
|
|
7FF51F173000
|
unkown
|
page readonly
|
|
|
|
255285B0000
|
unkown
|
page readonly
|
|
|
|
7FF5C15F4000
|
unkown
|
page readonly
|
|
|
|
21C87350000
|
heap default
|
page read and write
|
|
|
|
7FF5C6D3C000
|
unkown
|
page readonly
|
|
|
|
2794D74F000
|
unkown
|
page read and write
|
|
|
|
7FF51965C000
|
unkown
|
page readonly
|
|
|
|
7FF57C112000
|
unkown
|
page readonly
|
|
|
|
838967E000
|
unkown
|
page read and write
|
|
|
|
7FF596FE4000
|
unkown
|
page readonly
|
|
|
|
7FF5BE28C000
|
unkown
|
page readonly
|
|
|
|
7FF5C1819000
|
unkown
|
page readonly
|
|
|
|
7FF59389E000
|
unkown
|
page readonly
|
|
|
|
1A404740000
|
unkown
|
page readonly
|
|
|
|
1DD11A02000
|
unkown
|
page read and write
|
|
|
|
16304002000
|
unkown
|
page read and write
|
|
|
|
2794D7B2000
|
unkown
|
page read and write
|
|
|
|
7FF57BD10000
|
unkown
|
page readonly
|
|
|
|
2794D73D000
|
unkown
|
page read and write
|
|
|
|
2794E110000
|
unkown
|
page read and write
|
|
|
|
230EB23F000
|
unkown
|
page read and write
|
|
|
|
7FF570B31000
|
unkown
|
page readonly
|
|
|
|
2794E210000
|
unkown
|
page read and write
|
|
|
|
2794DACC000
|
unkown
|
page read and write
|
|
|
|
7FF5EAF1D000
|
unkown
|
page readonly
|
|
|
|
24183B80000
|
unkown
|
page readonly
|
|
|
|
18A58560000
|
heap default
|
page read and write
|
|
|
|
7FF5C1860000
|
unkown
|
page readonly
|
|
|
|
1DD0FE02000
|
unkown
|
page read and write
|
|
|
|
7FF57EAED000
|
unkown
|
page readonly
|
|
|
|
2794B7E0000
|
unkown
|
page read and write
|
|
|
|
2794DAD3000
|
unkown
|
page read and write
|
|
|
|
274BC02A000
|
unkown
|
page read and write
|
|
|
|
24183CCB000
|
unkown
|
page read and write
|
|
|
|
1AAB4B60000
|
unkown
|
page read and write
|
|
|
|
7FF593FB0000
|
unkown
|
page readonly
|
|
|
|
7FF5AA95F000
|
unkown
|
page readonly
|
|
|
|
7FF570B0D000
|
unkown
|
page readonly
|
|
|
|
18A58713000
|
unkown
|
page read and write
|
|
|
|
2794D7C5000
|
unkown
|
page read and write
|
|
|
|
7FF5EAEC6000
|
unkown
|
page readonly
|
|
|
|
25528712000
|
heap default
|
page read and write
|
|
|
|
7FF593919000
|
unkown
|
page readonly
|
|
|
|
1DD0FE48000
|
unkown
|
page read and write
|
|
|
|
15088A00000
|
unkown
|
page read and write
|
|
|
|
2794D74F000
|
unkown
|
page read and write
|
|
|
|
7FF57F285000
|
unkown
|
page readonly
|
|
|
|
18A58500000
|
heap private
|
page read and write
|
|
|
|
7FF5C6DC1000
|
unkown
|
page readonly
|
|
|
|
1DD0FE48000
|
unkown
|
page read and write
|
|
|
|
21C8744F000
|
unkown
|
page read and write
|
|
|
|
7FF51F1DF000
|
unkown
|
page readonly
|
|
|
|
C247B7B000
|
unkown
|
page read and write
|
|
|
|
7FF596F56000
|
unkown
|
page readonly
|
|
|
|
21C87470000
|
unkown
|
page read and write
|
|
|
|
7FF57EFC3000
|
unkown
|
page readonly
|
|
|
|
7FF5550A5000
|
unkown
|
page readonly
|
|
|
|
2794D73C000
|
unkown
|
page read and write
|
|
|
|
C24727B000
|
unkown
|
page read and write
|
|
|
|
7FF5C6C9C000
|
unkown
|
page readonly
|
|
|
|
7FF512385000
|
unkown
|
page readonly
|
|
|
|
7FF5AA8A5000
|
unkown
|
page readonly
|
|
|
|
7FF596B85000
|
unkown
|
page readonly
|
|
|
|
24184402000
|
unkown
|
page read and write
|
|
|
|
21C8744B000
|
unkown
|
page read and write
|
|
|
|
7FF536608000
|
unkown
|
page readonly
|
|
|
|
1351F880000
|
unkown
|
page read and write
|
|
|
|
7FF57BCFA000
|
unkown
|
page readonly
|
|
|
|
1AAB4AD0000
|
unkown
|
page write copy
|
|
|
|
7FF5BE295000
|
unkown
|
page readonly
|
|
|
|
8254C7D000
|
unkown
|
page read and write
|
|
|
|
15088A2A000
|
unkown
|
page read and write
|
|
|
|
274BC046000
|
unkown
|
page read and write
|
|
|
|
274BBEF0000
|
unkown
|
page readonly
|
|
|
|
2794D73E000
|
unkown
|
page read and write
|
|
|
|
1AAAFBF0000
|
unkown
|
page read and write
|
|
|
|
7FF5AA94E000
|
unkown
|
page readonly
|
|
|
|
1AAB4B60000
|
unkown
|
page readonly
|
|
|
|
7FF55504E000
|
unkown
|
page readonly
|
|
|
|
2794BA00000
|
unkown
|
page readonly
|
|
|
|
7FF57C116000
|
unkown
|
page readonly
|
|
|
|
7FF5BE286000
|
unkown
|
page readonly
|
|
|
|
2794B913000
|
unkown
|
page read and write
|
|
|
|
1A98D9EB000
|
heap default
|
page read and write
|
|
|
|
7FF5EAF2C000
|
unkown
|
page readonly
|
|
|
|
2794DAE2000
|
unkown
|
page read and write
|
|
|
|
7FF5195F6000
|
unkown
|
page readonly
|
|
|
|
2794D7A9000
|
unkown
|
page read and write
|
|
|
|
2794B8F0000
|
unkown
|
page read and write
|
|
|
|
7FF57F341000
|
unkown
|
page readonly
|
|
|
|
2794D74F000
|
unkown
|
page read and write
|
|
|
|
495CF7C000
|
unkown
|
page read and write
|
|
|
|
1351F95C000
|
heap default
|
page read and write
|
|
|
|
18A59340000
|
unkown
|
page readonly
|
|
|
|
7FF555022000
|
unkown
|
page readonly
|
|
|
|
274BC07A000
|
unkown
|
page read and write
|
|
|
|
16304602000
|
unkown
|
page read and write
|
|
|
|
1DD11930000
|
unkown
|
page read and write
|
|
|
|
2794DA85000
|
unkown
|
page read and write
|
|
|
|
C2473FA000
|
unkown
|
page read and write
|
|
|
|
230EB229000
|
unkown
|
page read and write
|
|
|
|
7FF5C6D57000
|
unkown
|
page readonly
|
|
|
|
2B446530000
|
unkown
|
page read and write
|
|
|
|
7FF596D88000
|
unkown
|
page readonly
|
|
|
|
7FF51F144000
|
unkown
|
page readonly
|
|
|
|
1AAB4B40000
|
unkown
|
page read and write
|
|
|
|
2794B91B000
|
unkown
|
page read and write
|
|
|
|
7FF5C17D8000
|
unkown
|
page readonly
|
|
|
|
7FF5EAEB0000
|
unkown
|
page readonly
|
|
|
|
7FF5123F1000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D4C000
|
unkown
|
page readonly
|
|
|
|
7FF5AA912000
|
unkown
|
page readonly
|
|
|
|
7FF5AA9B4000
|
unkown
|
page readonly
|
|
|
|
1351F730000
|
unkown
|
page read and write
|
|
|
|
495C8AB000
|
unkown
|
page read and write
|
|
|
|
7FF51F190000
|
unkown
|
page readonly
|
|
|
|
7FF570A1A000
|
unkown
|
page readonly
|
|
|
|
1DD0FF02000
|
unkown
|
page read and write
|
|
|
|
1A98F540000
|
heap private
|
page read and write
|
|
|
|
2794B8DF000
|
unkown
|
page read and write
|
|
|
|
7FF5EAFAE000
|
unkown
|
page readonly
|
|
|
|
4B7B87E000
|
unkown
|
page read and write
|
|
|
|
7FF570CF9000
|
unkown
|
page readonly
|
|
|
|
7FF55505F000
|
unkown
|
page readonly
|
|
|
|
2794DACD000
|
unkown
|
page read and write
|
|
|
|
1AAB4E80000
|
unkown
|
page readonly
|
|
|
|
1351FAE0000
|
unkown
|
page read and write
|
|
|
|
1AAB4C97000
|
unkown
|
page read and write
|
|
|
|
C2478FB000
|
unkown
|
page read and write
|
|
|
|
7FF594138000
|
unkown
|
page readonly
|
|
|
|
7FF5C14FE000
|
unkown
|
page readonly
|
|
|
|
7FF5C17B8000
|
unkown
|
page readonly
|
|
|
|
63E5FE000
|
unkown
|
page read and write
|
|
|
|
7FF593DED000
|
unkown
|
page readonly
|
|
|
|
7FF5EAAF3000
|
unkown
|
page readonly
|
|
|
|
1AAAF49D000
|
unkown
|
page read and write
|
|
|
|
2794E210000
|
unkown
|
page read and write
|
|
|
|
7FF594057000
|
unkown
|
page readonly
|
|
|
|
1AAB0300000
|
unkown
|
page read and write
|
|
|
|
B98047E000
|
unkown
|
page read and write
|
|
|
|
7FF570C97000
|
unkown
|
page readonly
|
|
|
|
24183BC0000
|
unkown
|
page readonly
|
|
|
|
18A5866C000
|
unkown
|
page read and write
|
|
|
|
13520450000
|
unkown
|
page read and write
|
|
|
|
7FF57C14F000
|
unkown
|
page readonly
|
|
|
|
7FF57C1A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D64000
|
unkown
|
page readonly
|
|
|
|
1DD0FE62000
|
unkown
|
page read and write
|
|
|
|
274BC026000
|
unkown
|
page read and write
|
|
|
|
1351F95E000
|
unkown
|
page read and write
|
|
|
|
15DDC000000
|
unkown
|
page readonly
|
|
|
|
7FF5C6C81000
|
unkown
|
page readonly
|
|
|
|
274BC06A000
|
unkown
|
page read and write
|
|
|
|
1DD0FDB0000
|
unkown
|
page read and write
|
|
|
|
2794D7B2000
|
unkown
|
page read and write
|
|
|
|
15DDB602000
|
unkown
|
page read and write
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
7FF570B6C000
|
unkown
|
page readonly
|
|
|
|
7FF594249000
|
unkown
|
page readonly
|
|
|
|
7FF5EAEFF000
|
unkown
|
page readonly
|
|
|
|
2794D726000
|
unkown
|
page read and write
|
|
|
|
14B7DFF000
|
unkown
|
page read and write
|
|
|
|
2794E210000
|
unkown
|
page read and write
|
|
|
|
24183CBA000
|
unkown
|
page read and write
|
|
|
|
7FF594134000
|
unkown
|
page readonly
|
|
|
|
2794DACA000
|
unkown
|
page read and write
|
|
|
|
7FF5C162E000
|
unkown
|
page readonly
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
7FF532E26000
|
unkown
|
page readonly
|
|
|
|
2794E113000
|
unkown
|
page read and write
|
|
|
|
7FF57F25A000
|
unkown
|
page readonly
|
|
|
|
15088A3D000
|
unkown
|
page read and write
|
|
|
|
1A98DAB0000
|
unkown
|
page readonly
|
|
|
|
7FF57C041000
|
unkown
|
page readonly
|
|
|
|
7FF57BF2A000
|
unkown
|
page readonly
|
|
|
|
230EB110000
|
heap private
|
page read and write
|
|
|
|
1A98DB80000
|
unkown
|
page readonly
|
|
|
|
1AAB0530000
|
unkown
|
page readonly
|
|
|
|
2794D2A0000
|
unkown
|
page readonly
|
|
|
|
B3E32FE000
|
unkown
|
page read and write
|
|
|
|
150889D0000
|
unkown
|
page read and write
|
|
|
|
7FF593D85000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D36000
|
unkown
|
page readonly
|
|
|
|
7FF55510E000
|
unkown
|
page readonly
|
|
|
|
150888A0000
|
heap default
|
page read and write
|
|
|
|
2794D1A0000
|
unkown
|
page read and write
|
|
|
|
7FF594140000
|
unkown
|
page readonly
|
|
|
|
1AAB4BA0000
|
unkown
|
page readonly
|
|
|
|
7FF57F2E0000
|
unkown
|
page readonly
|
|
|
|
1AAB04F0000
|
unkown
|
page readonly
|
|
|
|
7FF57EFCC000
|
unkown
|
page readonly
|
|
|
|
7FF570C94000
|
unkown
|
page readonly
|
|
|
|
2794E410000
|
unkown
|
page read and write
|
|
|
|
7FF5AEA1C000
|
unkown
|
page readonly
|
|
|
|
1AAAF4AB000
|
unkown
|
page read and write
|
|
|
|
15DDB4D0000
|
heap default
|
page read and write
|
|
|
|
7FF5194D8000
|
unkown
|
page readonly
|
|
|
|
4A8DEFD000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
24183C29000
|
unkown
|
page read and write
|
|
|
|
7FF51F1FD000
|
unkown
|
page readonly
|
|
|
|
12AEB7EA000
|
heap default
|
page read and write
|
|
|
|
7FF57EF5C000
|
unkown
|
page readonly
|
|
|
|
14B76FC000
|
unkown
|
page read and write
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
7FF5AA926000
|
unkown
|
page readonly
|
|
|
|
12AEB8B0000
|
unkown
|
page readonly
|
|
|
|
274BC04E000
|
unkown
|
page read and write
|
|
|
|
63DF7C000
|
unkown
|
page read and write
|
|
|
|
7FF5BE259000
|
unkown
|
page readonly
|
|
|
|
7FF51F227000
|
unkown
|
page readonly
|
|
|
|
2B4467E5000
|
heap private
|
page read and write
|
|
|
|
1DD11C00000
|
unkown
|
page readonly
|
|
|
|
7FF5BE218000
|
unkown
|
page readonly
|
|
|
|
2794D7B2000
|
unkown
|
page read and write
|
|
|
|
2794B87F000
|
unkown
|
page read and write
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
2794D73E000
|
unkown
|
page read and write
|
|
|
|
7FF570C5D000
|
unkown
|
page readonly
|
|
|
|
7FF57F240000
|
unkown
|
page readonly
|
|
|
|
7FF5C183C000
|
unkown
|
page readonly
|
|
|
|
7FF51EF03000
|
unkown
|
page readonly
|
|
|
|
7FF5AA7D8000
|
unkown
|
page readonly
|
|
|
|
7FF570A7F000
|
unkown
|
page readonly
|
|
|
|
7FF5C16EC000
|
unkown
|
page readonly
|
|
|
|
7FF596B81000
|
unkown
|
page readonly
|
|
|
|
15DDB670000
|
unkown
|
page read and write
|
|
|
|
7FF555010000
|
unkown
|
page readonly
|
|
|
|
15DDB5F0000
|
unkown
|
page readonly
|
|
|
|
24183C00000
|
unkown
|
page read and write
|
|
|
|
277AFF000
|
unkown
|
page read and write
|
|
|
|
1351F790000
|
unkown
|
page readonly
|
|
|
|
1DD11930000
|
unkown
|
page read and write
|
|
|
|
495D17F000
|
unkown
|
page read and write
|
|
|
|
7FF51EFBB000
|
unkown
|
page readonly
|
|
|
|
7FF51EFCC000
|
unkown
|
page readonly
|
|
|
|
7FF597040000
|
unkown
|
page readonly
|
|
|
|
2794E010000
|
unkown
|
page read and write
|
|
|
|
7FF5C6B1A000
|
unkown
|
page readonly
|
|
|
|
7FF5C168B000
|
unkown
|
page readonly
|
|
|
|
7FF57C013000
|
unkown
|
page readonly
|
|
|
|
1AAAF400000
|
unkown
|
page read and write
|
|
|
|
16304051000
|
unkown
|
page read and write
|
|
|
|
1AAB0520000
|
unkown
|
page readonly
|
|
|
|
7FF57F2CC000
|
unkown
|
page readonly
|
|
|
|
7FF554CD3000
|
unkown
|
page readonly
|
|
|
|
7FF5195F2000
|
unkown
|
page readonly
|
|
|
|
7FF5967E2000
|
unkown
|
page readonly
|
|
|
|
7FF5EAF54000
|
unkown
|
page readonly
|
|
|
|
7FF593F05000
|
unkown
|
page readonly
|
|
|
|
1A403A3C000
|
unkown
|
page read and write
|
|
|
|
1630403E000
|
unkown
|
page read and write
|
|
|
|
1A98D7F0000
|
unkown
|
page readonly
|
|
|
|
1AAB0550000
|
unkown
|
page readonly
|
|
|
|
2794B680000
|
unkown
|
page readonly
|
|
|
|
2794E110000
|
unkown
|
page read and write
|
|
|
|
838907E000
|
unkown
|
page read and write
|
|
|
|
1A403A9B000
|
unkown
|
page read and write
|
|
|
|
274BC042000
|
unkown
|
page read and write
|
|
|
|
1A98F720000
|
heap private
|
page read and write
|
|
|
|
7FF5BE21A000
|
unkown
|
page readonly
|
|
|
|
7FF5194F3000
|
unkown
|
page readonly
|
|
|
|
2794B8EC000
|
unkown
|
page read and write
|
|
|
|
1AAB4A0E000
|
unkown
|
page read and write
|
|
|
|
1DD0FE00000
|
unkown
|
page read and write
|
|
|
|
1AAB4A30000
|
unkown
|
page read and write
|
|
|
|
7FF5C6BD3000
|
unkown
|
page readonly
|
|
|
|
2794DB02000
|
unkown
|
page read and write
|
|
|
|
1AAAF513000
|
unkown
|
page read and write
|
|
|
|
15DDBB90000
|
unkown
|
page readonly
|
|
|
|
7FF51EFD8000
|
unkown
|
page readonly
|
|
|
|
7FF51F105000
|
unkown
|
page readonly
|
|
|
|
7FF57C07C000
|
unkown
|
page readonly
|
|
|
|
7FF57BF8F000
|
unkown
|
page readonly
|
|
|
|
7FF5C6A37000
|
unkown
|
page readonly
|
|
|
|
7FF5EAF3C000
|
unkown
|
page readonly
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
7FF570C6C000
|
unkown
|
page readonly
|
|
|
|
7FF532502000
|
unkown
|
page readonly
|
|
|
|
7FF57C209000
|
unkown
|
page readonly
|
|
|
|
7FF532EA9000
|
unkown
|
page readonly
|
|
|
|
25528680000
|
unkown
|
page read and write
|
|
|
|
7FF5C149F000
|
unkown
|
page readonly
|
|
|
|
274BC102000
|
unkown
|
page read and write
|
|
|
|
2794E310000
|
unkown
|
page read and write
|
|
|
|
7FF596F38000
|
unkown
|
page readonly
|
|
|
|
7FF5941E4000
|
unkown
|
page readonly
|
|
|
|
83890FD000
|
unkown
|
page read and write
|
|
|
|
7FF5EAD8A000
|
unkown
|
page readonly
|
|
|
|
1AAAF475000
|
unkown
|
page read and write
|
|
|
|
7FF596C5F000
|
unkown
|
page readonly
|
|
|
|
274BC06D000
|
unkown
|
page read and write
|
|
|
|
1AAAF46E000
|
unkown
|
page read and write
|
|
|
|
2794DACD000
|
unkown
|
page read and write
|
|
|
|
1A98DB90000
|
unkown
|
page readonly
|
|
|
|
7FF53666C000
|
unkown
|
page readonly
|
|
|
|
7FF51F1D5000
|
unkown
|
page readonly
|
|
|
|
7FF51F206000
|
unkown
|
page readonly
|
|
|
|
1AAB4C9F000
|
unkown
|
page read and write
|
|
|
|
7FF5EABEE000
|
unkown
|
page readonly
|
|
|
|
7FF5C1846000
|
unkown
|
page readonly
|
|
|
|
2B446680000
|
unkown
|
page readonly
|
|
|
|
2794D784000
|
unkown
|
page read and write
|
|
|
|
7DFD1A9D1000
|
unkown
|
page readonly
|
|
|
|
1DD0FE58000
|
unkown
|
page read and write
|
|
|
|
7FF532C2F000
|
unkown
|
page readonly
|
|
|
|
1AAB4B07000
|
unkown
|
page write copy
|
|
|
|
7FF5DCD39000
|
unkown
|
page readonly
|
|
|
|
2794DC00000
|
unkown
|
page read and write
|
|
|
|
274BC802000
|
unkown
|
page read and write
|
|
|
|
230ED0C0000
|
unkown
|
page read and write
|
|
|
|
7FF51F291000
|
unkown
|
page readonly
|
|
|
|
1AAB4BE0000
|
unkown
|
page readonly
|
|
|
|
E07B47E000
|
unkown
|
page read and write
|
|
|
|
7FF5AA9A5000
|
unkown
|
page readonly
|
|
|
|
135200C0000
|
unkown
|
page readonly
|
|
|
|
7FF5BDAB4000
|
unkown
|
page readonly
|
|
|
|
2794D70C000
|
unkown
|
page read and write
|
|
|
|
1A4039D0000
|
heap default
|
page read and write
|
|
|
|
274BC05A000
|
unkown
|
page read and write
|
|
|
|
255286F0000
|
heap default
|
page read and write
|
|
|
|
2794B7F0000
|
unkown
|
page readonly
|
|
|
|
2794B95D000
|
unkown
|
page read and write
|
|
|
|
7FF5C6CEA000
|
unkown
|
page readonly
|
|
|
|
2794D74F000
|
unkown
|
page read and write
|
|
|
|
7FF532BD3000
|
unkown
|
page readonly
|
|
|
|
82548AC000
|
unkown
|
page read and write
|
|
|
|
63E2FE000
|
unkown
|
page read and write
|
|
|
|
C247BFB000
|
unkown
|
page read and write
|
|
|
|
274BC077000
|
unkown
|
page read and write
|
|
|
|
7FF51F131000
|
unkown
|
page readonly
|
|
|
|
135206E0000
|
unkown
|
page read and write
|
|
|
|
1DD0FE26000
|
unkown
|
page read and write
|
|
|
|
24183B90000
|
unkown
|
page read and write
|
|
|
|
7FF5C6A24000
|
unkown
|
page readonly
|
|
|
|
7FF57C16D000
|
unkown
|
page readonly
|
|
|
|
7FF532505000
|
unkown
|
page readonly
|
|
|
|
1AAB0410000
|
unkown
|
page read and write
|
|
|
|
7FF51EAB8000
|
unkown
|
page readonly
|
|
|
|
1DD0FE58000
|
unkown
|
page read and write
|
|
|
|
16303E50000
|
unkown
|
page readonly
|
|
|
|
7FF5C6B30000
|
unkown
|
page readonly
|
|
|
|
7FF532E40000
|
unkown
|
page readonly
|
|
|
|
7FF57F2C6000
|
unkown
|
page readonly
|
|
|
|
7FF51F0A7000
|
unkown
|
page readonly
|
|
|
|
15DDB65A000
|
unkown
|
page read and write
|
|
|
|
C247CFD000
|
unkown
|
page read and write
|
|
|
|
2794DB02000
|
unkown
|
page read and write
|
|
|
|
7FF532EA1000
|
unkown
|
page readonly
|
|
|
|
7FF518D68000
|
unkown
|
page readonly
|
|
|
|
1AAB4CB3000
|
unkown
|
page read and write
|
|
|
|
7FF536585000
|
unkown
|
page readonly
|
|
|
|
7FF57F2AD000
|
unkown
|
page readonly
|
|
|
|
1AAB0330000
|
unkown
|
page read and write
|
|
|
|
7FF570C85000
|
unkown
|
page readonly
|
|
|
|
7FF596FE0000
|
unkown
|
page readonly
|
|
|
|
7FF5C18C9000
|
unkown
|
page readonly
|
|
|
|
2794DB05000
|
unkown
|
page read and write
|
|
|
|
1AAAFD13000
|
unkown
|
page read and write
|
|
|
|
B3E34FF000
|
unkown
|
page read and write
|
|
|
|
2794B8F1000
|
unkown
|
page read and write
|
|
|
|
7FF596F23000
|
unkown
|
page readonly
|
|
|
|
18A58708000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC75000
|
unkown
|
page readonly
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
7FF51F21C000
|
unkown
|
page readonly
|
|
|
|
7FF51955C000
|
unkown
|
page readonly
|
|
|
|
7FF51F230000
|
unkown
|
page readonly
|
|
|
|
2794B92E000
|
unkown
|
page read and write
|
|
|
|
7FF5AA6C7000
|
unkown
|
page readonly
|
|
|
|
7FF57C01D000
|
unkown
|
page readonly
|
|
|
|
7FF57F1EE000
|
unkown
|
page readonly
|
|
|
|
63E0FE000
|
unkown
|
page read and write
|
|
|
|
2794D7F6000
|
unkown
|
page read and write
|
|
|
|
4A8E47D000
|
unkown
|
page read and write
|
|
|
|
78701FE000
|
unkown
|
page read and write
|
|
|
|
7FF596DFC000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CD8000
|
unkown
|
page readonly
|
|
|
|
1AAB48B0000
|
unkown
|
page readonly
|
|
|
|
2794DA85000
|
unkown
|
page read and write
|
|
|
|
15DDB662000
|
unkown
|
page read and write
|
|
|
|
2794B7A0000
|
unkown
|
page readonly
|
|
|
|
1AAB4CA8000
|
unkown
|
page read and write
|
|
|
|
14B7EFF000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2FE000
|
unkown
|
page readonly
|
|
|
|
7FF570800000
|
unkown
|
page readonly
|
|
|
|
1AAB4C82000
|
unkown
|
page read and write
|
|
|
|
7FF5940D5000
|
unkown
|
page readonly
|
|
|
|
15088A57000
|
unkown
|
page read and write
|
|
|
|
230EB180000
|
unkown
|
page write copy
|
|
|
|
15DDB5D0000
|
unkown
|
page read and write
|
|
|
|
2794E210000
|
unkown
|
page read and write
|
|
|
|
2794D840000
|
unkown
|
page read and write
|
|
|
|
14B7CF7000
|
unkown
|
page read and write
|
|
|
|
2794D74F000
|
unkown
|
page read and write
|
|
|
|
C2476FB000
|
unkown
|
page read and write
|
|
|
|
15088990000
|
unkown
|
page readonly
|
|
|
|
63DB4C000
|
unkown
|
page read and write
|
|
|
|
2794DC02000
|
unkown
|
page read and write
|
|
|
|
1AAB4C84000
|
unkown
|
page read and write
|
|
|
|
7FF554CE4000
|
unkown
|
page readonly
|
|
|
|
7FF596D05000
|
unkown
|
page readonly
|
|
|
|
7FF5C18C9000
|
unkown
|
page readonly
|
|
|
|
1AAB4A08000
|
unkown
|
page read and write
|
|
|
|
2794DAE2000
|
unkown
|
page read and write
|
|
|
|
274BBFD0000
|
unkown
|
page readonly
|
|
|
|
7FF5C6CD2000
|
unkown
|
page readonly
|
|
|
|
7FF519680000
|
unkown
|
page readonly
|
|
|
|
7FF554D35000
|
unkown
|
page readonly
|
|
|
|
7FF57F2D5000
|
unkown
|
page readonly
|
|
|
|
2794B874000
|
unkown
|
page read and write
|
|
|
|
1AAAF4A2000
|
unkown
|
page read and write
|
|
|
|
13520409000
|
unkown
|
page read and write
|
|
|
|
7FF5941B6000
|
unkown
|
page readonly
|
|
|
|
7FF5C1747000
|
unkown
|
page readonly
|
|
|
|
2794DACA000
|
unkown
|
page read and write
|
|
|
|
21C87502000
|
unkown
|
page read and write
|
|
|
|
2794B95C000
|
unkown
|
page read and write
|
|
|
|
7FF5EAF36000
|
unkown
|
page readonly
|
|
|
|
1AAB4A30000
|
unkown
|
page read and write
|
|
|
|
2794DAF9000
|
unkown
|
page read and write
|
|
|
|
18A58700000
|
unkown
|
page read and write
|
|
|
|
7FF596EE1000
|
unkown
|
page readonly
|
|
|
|
4A8E17B000
|
unkown
|
page read and write
|
|
|
|
1AAB4C86000
|
unkown
|
page read and write
|
|
|
|
1DD10000000
|
unkown
|
page readonly
|
|
|
|
7FF5AA969000
|
unkown
|
page readonly
|
|
|
|
7FF596BDE000
|
unkown
|
page readonly
|
|
|
|
2794E310000
|
unkown
|
page read and write
|
|
|
|
C247C7B000
|
unkown
|
page read and write
|
|
|
|
2794D726000
|
unkown
|
page read and write
|
|
|
|
E07B67E000
|
unkown
|
page read and write
|
|
|
|
2794E510000
|
unkown
|
page read and write
|
|
|
|
2794B873000
|
unkown
|
page read and write
|
|
|
|
2794DAD0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE309000
|
unkown
|
page readonly
|
|
|
|
1DD0FE13000
|
unkown
|
page read and write
|
|
|
|
7FF5550B4000
|
unkown
|
page readonly
|
|
|
|
2794B8E9000
|
unkown
|
page read and write
|
|
|
|
B9FFD7B000
|
unkown
|
page read and write
|
|
|
|
7FF5707EA000
|
unkown
|
page readonly
|
|
|
|
286D1EB000
|
unkown
|
page read and write
|
|
|
|
7FF57B9A8000
|
unkown
|
page readonly
|
|
|
|
4B7BA7D000
|
unkown
|
page read and write
|
|
|
|
7FF57C18C000
|
unkown
|
page readonly
|
|
|
|
15089202000
|
unkown
|
page read and write
|
|
|
|
1A403A00000
|
unkown
|
page read and write
|
|
|
|
18A588D0000
|
unkown
|
page readonly
|
|
|
|
1AAAF340000
|
heap private
|
page read and write
|
|
|
|
7FF5AA7E9000
|
unkown
|
page readonly
|
|
|
|
609A97E000
|
unkown
|
page read and write
|
|
|
|
274BC05B000
|
unkown
|
page read and write
|
|
|
|
1A403A4B000
|
unkown
|
page read and write
|
|
|
|
286D57E000
|
unkown
|
page read and write
|
|
|
|
7FF57C12A000
|
unkown
|
page readonly
|
|
|
|
2794E210000
|
unkown
|
page read and write
|
|
|
|
838937E000
|
unkown
|
page read and write
|
|
|
|
7FF596DAE000
|
unkown
|
page readonly
|
|
|
|
2794E210000
|
unkown
|
page read and write
|
|
|
|
2794E310000
|
unkown
|
page read and write
|
|
|
|
230EB256000
|
unkown
|
page read and write
|
|
|
|
2B446580000
|
heap default
|
page read and write
|
|
|
|
2794D725000
|
unkown
|
page read and write
|
|
|
|
C2475FB000
|
unkown
|
page read and write
|
|
|
|
7FF5C17C2000
|
unkown
|
page readonly
|
|
|
|
1AAB0510000
|
unkown
|
page readonly
|
|
|
|
609B17F000
|
unkown
|
page read and write
|
|
|
|
2794DAF8000
|
unkown
|
page read and write
|
|
|
|
2794E000000
|
unkown
|
page read and write
|
|
|
|
7FF5C180F000
|
unkown
|
page readonly
|
|
|
|
2B446550000
|
unkown
|
page read and write
|
|
|
|
7FF5C17D6000
|
unkown
|
page readonly
|
|
|
|
7FF596D7C000
|
unkown
|
page readonly
|
|
|
|
2794DB42000
|
unkown
|
page read and write
|
|
|
|
14B7BFB000
|
unkown
|
page read and write
|
|
|
|
7FF5C14B1000
|
unkown
|
page readonly
|
|
|
|
15DDB5B0000
|
unkown
|
page readonly
|
|
|
|
7FF596D10000
|
unkown
|
page readonly
|
|
|
|
7FF5195E2000
|
unkown
|
page readonly
|
|
|
|
1351FD30000
|
unkown
|
page readonly
|
|
|
|
7FF596C18000
|
unkown
|
page readonly
|
|
|
|
7FF519656000
|
unkown
|
page readonly
|
|
|
|
2794B96C000
|
unkown
|
page read and write
|
|
|
|
7FF5C6C7A000
|
unkown
|
page readonly
|
|
|
|
7FF5BD9DB000
|
unkown
|
page readonly
|
|
|
|
2794D73C000
|
unkown
|
page read and write
|
|
|
|
B3E347A000
|
unkown
|
page read and write
|
|
|
|
7FF570C49000
|
unkown
|
page readonly
|
|
|
|
15DDB613000
|
unkown
|
page read and write
|
|
|
|
E07AF9E000
|
unkown
|
page read and write
|
|
|
|
7FF5BE216000
|
unkown
|
page readonly
|
|
|
|
1DD0FF13000
|
unkown
|
page read and write
|
|
|
|
2794B93B000
|
unkown
|
page read and write
|
|
|
|
12AEB7BA000
|
heap default
|
page read and write
|
|
|
|
2794DA00000
|
unkown
|
page read and write
|
|
|
|
7FF5AAA19000
|
unkown
|
page readonly
|
|
|
|
15DDB629000
|
unkown
|
page read and write
|
|
|
|
7FF594156000
|
unkown
|
page readonly
|
|
|
|
1AAB4CAA000
|
unkown
|
page read and write
|
|
|
|
7FF5C6A33000
|
unkown
|
page readonly
|
|
|
|
7FF5C6DC9000
|
unkown
|
page readonly
|
|
|
|
7FF57C100000
|
unkown
|
page readonly
|
|
|
|
7FF51F192000
|
unkown
|
page readonly
|
|
|
|
7FF5C17CD000
|
unkown
|
page readonly
|
|
|
|
1AAB4A00000
|
unkown
|
page read and write
|
|
|
|
274BC06B000
|
unkown
|
page read and write
|
|
|
|
13520680000
|
unkown
|
page read and write
|
|
|
|
7FF51946F000
|
unkown
|
page readonly
|
|
|
|
4B7B5FE000
|
unkown
|
page read and write
|
|
|
|
7FF57F2B6000
|
unkown
|
page readonly
|
|
|
|
1AAB48E0000
|
unkown
|
page read and write
|
|
|
|
7FF5AEA1C000
|
unkown
|
page readonly
|
|
|
|
7FF593A83000
|
unkown
|
page readonly
|
|
|
|
163045A0000
|
unkown
|
page read and write
|
|
|
|
274BC084000
|
unkown
|
page read and write
|
|
|
|
1A98D9BB000
|
heap default
|
page read and write
|
|
|
|
2794DAFA000
|
unkown
|
page read and write
|
|
|
|
12AEB980000
|
unkown
|
page readonly
|
|
|
|
1AAB4C49000
|
unkown
|
page read and write
|
|
|
|
D6F12FF000
|
unkown
|
page read and write
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
7FF519521000
|
unkown
|
page readonly
|
|
|
|
1351FB20000
|
unkown
|
page read and write
|
|
|
|
2779FF000
|
unkown
|
page read and write
|
|
|
|
24183C44000
|
unkown
|
page read and write
|
|
|
|
274BC041000
|
unkown
|
page read and write
|
|
|
|
7FF51235D000
|
unkown
|
page readonly
|
|
|
|
7FF532EA9000
|
unkown
|
page readonly
|
|
|
|
7FF5EAEC8000
|
unkown
|
page readonly
|
|
|
|
7FF593896000
|
unkown
|
page readonly
|
|
|
|
241842B0000
|
unkown
|
page readonly
|
|
|
|
7FF593D81000
|
unkown
|
page readonly
|
|
|
|
15088F90000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D2D000
|
unkown
|
page readonly
|
|
|
|
7FF596F42000
|
unkown
|
page readonly
|
|
|
|
7FF53665E000
|
unkown
|
page readonly
|
|
|
|
2794D830000
|
unkown
|
page readonly
|
|
|
|
7FF596F99000
|
unkown
|
page readonly
|
|
|
|
1DD0FDA0000
|
unkown
|
page readonly
|
|
|
|
1DD0FD80000
|
heap default
|
page read and write
|
|
|
|
274BC07E000
|
unkown
|
page read and write
|
|
|
|
7FF5EAFB9000
|
unkown
|
page readonly
|
|
|
|
7FF57C195000
|
unkown
|
page readonly
|
|
|
|
24184190000
|
unkown
|
page readonly
|
|
|
|
7FF555086000
|
unkown
|
page readonly
|
|
|
|
255287F0000
|
unkown
|
page readonly
|
|
|
|
4BCDB7B000
|
unkown
|
page read and write
|
|
|
|
2794B89D000
|
unkown
|
page read and write
|
|
|
|
7FF596E19000
|
unkown
|
page readonly
|
|
|
|
495CCFB000
|
unkown
|
page read and write
|
|
|
|
7FF59703E000
|
unkown
|
page readonly
|
|
|
|
D6F117F000
|
unkown
|
page read and write
|
|
|
|
7FF594019000
|
unkown
|
page readonly
|
|
|
|
E07AE9B000
|
unkown
|
page read and write
|
|
|
|
1DD11950000
|
unkown
|
page readonly
|
|
|
|
16304000000
|
unkown
|
page read and write
|
|
|
|
7FF5366F9000
|
unkown
|
page readonly
|
|
|
|
1A98D850000
|
unkown
|
page readonly
|
|
|
|
1AAB4C00000
|
unkown
|
page read and write
|
|
|
|
7FF5C1867000
|
unkown
|
page readonly
|
|
|
|
2794B89F000
|
unkown
|
page read and write
|
|
|
|
7FF594152000
|
unkown
|
page readonly
|
|
|
|
7FF5C1855000
|
unkown
|
page readonly
|
|
|
|
495D47F000
|
unkown
|
page read and write
|
|
|
|
2794E010000
|
unkown
|
page read and write
|
|
|
|
7FF57C1FE000
|
unkown
|
page readonly
|
|
|
|
7FF5C6BB8000
|
unkown
|
page readonly
|
|
|
|
2794D76E000
|
unkown
|
page read and write
|
|
|
|
7FF596883000
|
unkown
|
page readonly
|
|
|
|
2794E110000
|
unkown
|
page read and write
|
|
|
|
1351FAD0000
|
unkown
|
page read and write
|
|
|
|
7FF5C184C000
|
unkown
|
page readonly
|
|
|
|
1A403B00000
|
unkown
|
page read and write
|
|
|
|
15089060000
|
unkown
|
page read and write
|
|
|
|
2794DB82000
|
unkown
|
page read and write
|
|
|
|
7FF512376000
|
unkown
|
page readonly
|
|
|
|
2794B610000
|
heap private
|
page read and write
|
|
|
|
8388DDB000
|
unkown
|
page read and write
|
|
|
|
18A58590000
|
unkown
|
page read and write
|
|
|
|
1A403CD0000
|
unkown
|
page readonly
|
|
|
|
7FF57F2E4000
|
unkown
|
page readonly
|
|
|
|
63E4FD000
|
unkown
|
page read and write
|
|
|
|
4A8E277000
|
unkown
|
page read and write
|
|
|
|
609AA7B000
|
unkown
|
page read and write
|
|
|
|
7FF5BE133000
|
unkown
|
page readonly
|
|
|
|
B9801FC000
|
unkown
|
page read and write
|
|
|
|
7FF59400A000
|
unkown
|
page readonly
|
|
|
|
1AAAF3E0000
|
unkown
|
page read and write
|
|
|
|
E07B37E000
|
unkown
|
page read and write
|
|
|
|
1AAAF429000
|
unkown
|
page read and write
|
|
|
|
150889A0000
|
unkown
|
page read and write
|
|
|
|
7FF51F0A3000
|
unkown
|
page readonly
|
|
|
|
1AAAFD18000
|
unkown
|
page read and write
|
|
|
|
2794B750000
|
unkown
|
page write copy
|
|
|
|
1351F9B0000
|
unkown
|
page readonly
|
|
|
|
7FF532DCA000
|
unkown
|
page readonly
|
|
|
|
7FF5196DE000
|
unkown
|
page readonly
|
|
|
|
78700FE000
|
unkown
|
page read and write
|
|
|
|
4A8DE7E000
|
unkown
|
page read and write
|
|
|
|
24183CC1000
|
unkown
|
page read and write
|
|
|
|
7FF5195F8000
|
unkown
|
page readonly
|
|
|
|
2794B8EB000
|
unkown
|
page read and write
|
|
|
|
7FF5BE276000
|
unkown
|
page readonly
|
|
|
|
B98067F000
|
unkown
|
page read and write
|
|
|
|
7FF51F299000
|
unkown
|
page readonly
|
|
|
|
7FF594185000
|
unkown
|
page readonly
|
|
|
|
274BBE80000
|
heap private
|
page read and write
|
|
|
|
274BC03A000
|
unkown
|
page read and write
|
|
|
|
286D67E000
|
unkown
|
page read and write
|
|
|
|
7FF570C3F000
|
unkown
|
page readonly
|
|
|
|
24183A30000
|
heap private
|
page read and write
|
|
|
|
230EB200000
|
unkown
|
page read and write
|
|
|
|
7FF536676000
|
unkown
|
page readonly
|
|
|
|
2794DA85000
|
unkown
|
page read and write
|
|
|
|
7FF555012000
|
unkown
|
page readonly
|
|
|
|
2794B8EB000
|
unkown
|
page read and write
|
|
|
|
495D27D000
|
unkown
|
page read and write
|
|
|
|
7FF594249000
|
unkown
|
page readonly
|
|
|
|
7FF5BDABB000
|
unkown
|
page readonly
|
|
|
|
7FF596F7E000
|
unkown
|
page readonly
|
|
|
|
7FF512335000
|
unkown
|
page readonly
|
|
|
|
7FF57F27E000
|
unkown
|
page readonly
|
|
|
|
7FF5AA97D000
|
unkown
|
page readonly
|
|
|
|
2794E110000
|
unkown
|
page read and write
|
|
|
|
2794DB82000
|
unkown
|
page read and write
|
|
|
|
7FF51EF60000
|
unkown
|
page readonly
|
|
|
|
7FF5AA8EA000
|
unkown
|
page readonly
|
|
|
|
7FF5C164F000
|
unkown
|
page readonly
|
|
|
|
277A7F000
|
unkown
|
page read and write
|
|
|
|
2794DAE2000
|
unkown
|
page read and write
|
|
|
|
D6F127F000
|
unkown
|
page read and write
|
|
|
|
7FF570B03000
|
unkown
|
page readonly
|
|
|
|
7FF51F147000
|
unkown
|
page readonly
|
|
|
|
495CE7E000
|
unkown
|
page read and write
|
|
|
|
1A98DBE0000
|
unkown
|
page readonly
|
|
|
|
7FF5C6D0F000
|
unkown
|
page readonly
|
|
|
|
7FF5AA7B8000
|
unkown
|
page readonly
|
|
|
|
7FF5EACE7000
|
unkown
|
page readonly
|
|
|
|
27787E000
|
unkown
|
page read and write
|
|
|
|
2794B8CB000
|
unkown
|
page read and write
|
|
|
|
274BC03B000
|
unkown
|
page read and write
|
|
|
|
24183E00000
|
unkown
|
page readonly
|
|
|
|
7FF5C1805000
|
unkown
|
page readonly
|
|
|
|
7FF55509C000
|
unkown
|
page readonly
|
|
|
|
7FF51F10C000
|
unkown
|
page readonly
|
|
|
|
C247679000
|
unkown
|
page read and write
|
|
|
|
C247AFB000
|
unkown
|
page read and write
|
|
|
|
1AAB4AF8000
|
unkown
|
page write copy
|
|
|
|
7FF536649000
|
unkown
|
page readonly
|
|
|
|
15DDB713000
|
unkown
|
page read and write
|
|
|
|
24183A90000
|
heap default
|
page read and write
|
|
|
|
7FF5C6DBE000
|
unkown
|
page readonly
|
|
|
|
7FF5EAEB2000
|
unkown
|
page readonly
|
|
|
|
7FF5DCD39000
|
unkown
|
page readonly
|
|
|
|
7FF555028000
|
unkown
|
page readonly
|
|
|
|
7FF5AAA19000
|
unkown
|
page readonly
|
|
|
|
7FF51F14A000
|
unkown
|
page readonly
|
|
|
|
1AAB4B04000
|
unkown
|
page write copy
|
|
|
|
1351F8F5000
|
unkown
|
page read and write
|
|
|
|
7FF570CF9000
|
unkown
|
page readonly
|
|
|
|
7FF570C76000
|
unkown
|
page readonly
|
|
|
|
2794B8ED000
|
unkown
|
page read and write
|
|
|
|
1DD0FD20000
|
heap private
|
page read and write
|
|
|
|
1DD0FE48000
|
unkown
|
page read and write
|
|
|
|
1351F8FD000
|
unkown
|
page read and write
|
|
|
|
1AAB4CB1000
|
unkown
|
page read and write
|
|
|
|
2794D70C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCCA6000
|
unkown
|
page readonly
|
|
|
|
12AEB7F3000
|
heap default
|
page read and write
|
|
|
|
7FF51F299000
|
unkown
|
page readonly
|
|
|
|
7FF5939E2000
|
unkown
|
page readonly
|
|
|
|
7FF57F299000
|
unkown
|
page readonly
|
|
|
|
7FF570B37000
|
unkown
|
page readonly
|
|
|
|
7FF5AA083000
|
unkown
|
page readonly
|
|
|
|
7FF51F1A6000
|
unkown
|
page readonly
|
|
|
|
7FF5EAE57000
|
unkown
|
page readonly
|
|
|
|
1DD0FF29000
|
unkown
|
page read and write
|
|
|
|
7FF57BFF8000
|
unkown
|
page readonly
|
|
|
|
B9800FF000
|
unkown
|
page read and write
|
|
|
|
2794DADC000
|
unkown
|
page read and write
|
|
|
|
1351F931000
|
unkown
|
page read and write
|
|
|
|
2B4467E0000
|
heap private
|
page read and write
|
|
|
|
1AAB4A44000
|
unkown
|
page read and write
|
|
There are 1446 hidden memdumps, click here to show them.