Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Complaint_Letter_1186814227-02192021.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Last Saved By: Friner, Name
of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Fri Feb 19 09:43:01
2021, Security: 0
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\AC73CBBE-DA25-4A70-8E2D-32FC9C1340A0
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\44250683266319400000[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\27B40000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Complaint_Letter_1186814227-02192021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:54
2020, mtime=Tue Feb 23 14:23:54 2021, atime=Tue Feb 23 14:23:54 2021, length=61440, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Tue Feb 23 14:23:54 2021, atime=Tue Feb 23 14:23:53 2021, length=8192, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
||
C:\Users\user\Desktop\E7B40000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 59134 bytes, 1 file
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\44250678185879600000[1].htm
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\B1CE0000
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\CabD164.tmp
|
Microsoft Cabinet archive data, 59134 bytes, 1 file
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\TarD165.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\05Q27A4H.txt
|
ASCII text
|
downloaded
|
||
C:\Users\user\Desktop\72CE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
There are 9 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\KLSD.ggsso,DllRegisterServer
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\KLSD.ggsso1,DllRegisterServer
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\KLSD.ggsso2,DllRegisterServer
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\KLSD.ggsso3,DllRegisterServer
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\KLSD.ggsso4,DllRegisterServer
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\System32\rundll32.exe
|
rundll32 ..\KLSD.ggsso,DllRegisterServer
|
||
C:\Windows\System32\rundll32.exe
|
rundll32 ..\KLSD.ggsso1,DllRegisterServer
|
||
C:\Windows\System32\rundll32.exe
|
rundll32 ..\KLSD.ggsso2,DllRegisterServer
|
||
C:\Windows\System32\rundll32.exe
|
rundll32 ..\KLSD.ggsso3,DllRegisterServer
|
||
C:\Windows\System32\rundll32.exe
|
rundll32 ..\KLSD.ggsso4,DllRegisterServer
|
There are 2 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://wus2-000.contentsync.
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
http://sportsmarquee.com/hmffuzbolyio/44250683266319400000.dat
|
70.32.104.19
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://wus2-000.pagecontentsync.
|
unknown
|
||
http://raivens.com/zdmqwymhhza/44250683266319400000.dat
|
159.89.174.35
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
http://erp.demosoftware.biz/focahjqevd/44250683266319400000.dat
|
58.96.102.67
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://ncus-000.contentsync.
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
http://jayshreewoods.com/gvazzbwlvyk/44250683266319400000.dat
|
13.126.100.34
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
||
http://www.windows.com/pctv.
|
unknown
|
||
http://jayshreewoods.com/gvazzbwlvyk/44250678185879600000.dat
|
13.126.100.34
|
||
http://investor.msn.com
|
unknown
|
||
http://www.msnbc.com/news/ticker.txt
|
unknown
|
||
http://sportsmarquee.com/hmffuzbolyio/44250678185879600000.dat
|
70.32.104.19
|
||
http://www.icra.org/vocabulary/.
|
unknown
|
||
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
||
http://www.hotmail.com/oe
|
unknown
|
||
http://investor.msn.com/
|
unknown
|
||
http://raivens.com/zdmqwymhhza/44250678185879600000.dat
|
159.89.174.35
|
||
http://erp.demosoftware.biz/focahjqevd/44250678185879600000.dat
|
58.96.102.67
|
There are 102 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
parama-college.id
|
203.142.76.236
|
||
erp.demosoftware.biz
|
58.96.102.67
|
||
sportsmarquee.com
|
70.32.104.19
|
||
raivens.com
|
159.89.174.35
|
||
jayshreewoods.com
|
13.126.100.34
|
IPs
IP
|
Domain
|
Country
|
Active
|
Malicious
|
|
---|---|---|---|---|---|
13.126.100.34
|
unknown
|
United States
|
unknown
|
||
192.168.2.1
|
unknown
|
unknown
|
unknown
|
||
159.89.174.35
|
unknown
|
United States
|
unknown
|
||
58.96.102.67
|
unknown
|
Australia
|
unknown
|
||
203.142.76.236
|
unknown
|
Indonesia
|
unknown
|
||
70.32.104.19
|
unknown
|
United States
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B004
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B4D6
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B65D
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B776
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B831
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
-0
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5BC05
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5BE57
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
e~6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EBE40
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC081
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC14C
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC246
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC2D2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ng6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
100030
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
100232
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
There are 173 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
E43A7FE000
|
unkown
|
page read and write
|
||
7FF52924F000
|
unkown
|
page readonly
|
||
7FF581B24000
|
unkown
|
page readonly
|
||
1BC01566000
|
unkown
|
page read and write
|
||
129A000
|
unkown
|
page readonly
|
||
1CE1D000000
|
unkown
|
page readonly
|
||
F6A000
|
unkown
|
page read and write
|
||
2DFC000
|
unkown
|
page readonly
|
||
7FF5272DA000
|
unkown
|
page readonly
|
||
65E47E000
|
unkown
|
page read and write
|
||
2EC2000
|
unkown
|
page readonly
|
||
23101783000
|
unkown
|
page read and write
|
||
2EA1000
|
unkown
|
page readonly
|
||
7FF52733E000
|
unkown
|
page readonly
|
||
C269EFE000
|
unkown
|
page read and write
|
||
1F4EA102000
|
unkown
|
page read and write
|
||
29988266000
|
unkown
|
page read and write
|
||
D2E000
|
unkown
|
page read and write
|
||
29988060000
|
heap private
|
page read and write
|
||
65F000
|
unkown
|
page read and write
|
||
1CE1CE13000
|
unkown
|
page read and write
|
||
7FF581B5B000
|
unkown
|
page readonly
|
||
2E10000
|
unkown
|
page readonly
|
||
23102000000
|
unkown
|
page read and write
|
||
1F99C254000
|
unkown
|
page read and write
|
||
7FF5424D4000
|
unkown
|
page readonly
|
||
323F000
|
stack
|
page read and write
|
||
29565FC0000
|
unkown
|
page read and write
|
||
29988258000
|
unkown
|
page read and write
|
||
1BC0152F000
|
unkown
|
page read and write
|
||
7FF503EE4000
|
unkown
|
page readonly
|
||
1F4EA067000
|
unkown
|
page read and write
|
||
7FF5928E4000
|
unkown
|
page readonly
|
||
7FF50DE54000
|
unkown
|
page readonly
|
||
6230000
|
heap private
|
page read and write
|
||
7FF5423E4000
|
unkown
|
page readonly
|
||
1BC0154F000
|
unkown
|
page read and write
|
||
1F99C302000
|
unkown
|
page read and write
|
||
C269D7E000
|
unkown
|
page read and write
|
||
7FF50DB95000
|
unkown
|
page readonly
|
||
7FF578011000
|
unkown
|
page readonly
|
||
B7374FA000
|
unkown
|
page read and write
|
||
1F4EA067000
|
unkown
|
page read and write
|
||
1BC0157F000
|
unkown
|
page read and write
|
||
1BC00CEA000
|
unkown
|
page read and write
|
||
1F99DD70000
|
unkown
|
page readonly
|
||
F77000
|
unkown
|
page read and write
|
||
BA0000
|
unkown
|
page readonly
|
||
1B4FF790000
|
unkown
|
page readonly
|
||
2E3A000
|
unkown
|
page readonly
|
||
2E2D000
|
unkown
|
page readonly
|
||
7FF5036F1000
|
unkown
|
page readonly
|
||
29566001000
|
unkown
|
page read and write
|
||
23102013000
|
unkown
|
page read and write
|
||
1BC01566000
|
unkown
|
page read and write
|
||
2860F655000
|
unkown
|
page read and write
|
||
3110000
|
unkown
|
page readonly
|
||
2CBE000
|
unkown
|
page readonly
|
||
9DBECF7000
|
unkown
|
page read and write
|
||
2317FD7E000
|
unkown
|
page read and write
|
||
65AE000
|
stack
|
page read and write
|
||
2317FDCD000
|
unkown
|
page read and write
|
||
ADA000
|
unkown
|
page read and write
|
||
2317FE50000
|
unkown
|
page read and write
|
||
2860F646000
|
unkown
|
page read and write
|
||
1B4FDC6C000
|
unkown
|
page read and write
|
||
7FF50DD12000
|
unkown
|
page readonly
|
||
1BC0158E000
|
unkown
|
page read and write
|
||
29565FA0000
|
unkown
|
page read and write
|
||
1F4EA113000
|
unkown
|
page read and write
|
||
2317F384000
|
unkown
|
page read and write
|
||
6470000
|
unkown
|
page readonly
|
||
7FF5928D4000
|
unkown
|
page readonly
|
||
C86396B000
|
unkown
|
page read and write
|
||
E43A8FD000
|
unkown
|
page read and write
|
||
F40000
|
heap private
|
page read and write
|
||
2317F060000
|
heap default
|
page read and write
|
||
2E0C000
|
unkown
|
page readonly
|
||
FED000
|
unkown
|
page read and write
|
||
2E27000
|
unkown
|
page readonly
|
||
7FF52918C000
|
unkown
|
page readonly
|
||
7FF5782E2000
|
unkown
|
page readonly
|
||
F40000
|
heap default
|
page read and write
|
||
84D000
|
unkown
|
page read and write
|
||
7FF581BAE000
|
unkown
|
page readonly
|
||
29988870000
|
unkown
|
page readonly
|
||
7FF541CF6000
|
unkown
|
page readonly
|
||
7FF542420000
|
unkown
|
page readonly
|
||
9DBE69C000
|
unkown
|
page read and write
|
||
2317F270000
|
unkown
|
page read and write
|
||
3260000
|
unkown
|
page readonly
|
||
845000
|
unkown
|
page read and write
|
||
23101410000
|
unkown
|
page readonly
|
||
8B1978C000
|
unkown
|
page read and write
|
||
C86477B000
|
unkown
|
page read and write
|
||
1F4EA013000
|
unkown
|
page read and write
|
||
76E000
|
stack
|
page read and write
|
||
7FF529257000
|
unkown
|
page readonly
|
||
2860F688000
|
unkown
|
page read and write
|
||
1B4FDD00000
|
unkown
|
page read and write
|
||
1E8F7FB000
|
unkown
|
page read and write
|
||
2EA1000
|
unkown
|
page readonly
|
||
7FF4EFE30000
|
unkown
|
page readonly
|
||
231016D0000
|
unkown
|
page read and write
|
||
2317F374000
|
unkown
|
page read and write
|
||
1BC0158D000
|
unkown
|
page read and write
|
||
65E5F5000
|
unkown
|
page read and write
|
||
7FF50DC73000
|
unkown
|
page readonly
|
||
7FF542480000
|
unkown
|
page readonly
|
||
9F6000
|
unkown
|
page read and write
|
||
2317F190000
|
unkown
|
page readonly
|
||
29566100000
|
unkown
|
page readonly
|
||
7FF50DD75000
|
unkown
|
page readonly
|
||
360000
|
unkown
|
page readonly
|
||
BA5000
|
unkown
|
page read and write
|
||
7FF581986000
|
unkown
|
page readonly
|
||
2317F353000
|
unkown
|
page read and write
|
||
23102110000
|
unkown
|
page read and write
|
||
7FF4F05C5000
|
unkown
|
page readonly
|
||
7FF5424F9000
|
unkown
|
page readonly
|
||
1BC00CCF000
|
unkown
|
page read and write
|
||
29988C00000
|
unkown
|
page readonly
|
||
2317FE60000
|
unkown
|
page readonly
|
||
8B19CFB000
|
unkown
|
page read and write
|
||
2ED3000
|
unkown
|
page readonly
|
||
2317F26F000
|
unkown
|
page read and write
|
||
1BC01545000
|
unkown
|
page read and write
|
||
1BC0153D000
|
unkown
|
page read and write
|
||
29566240000
|
heap private
|
page read and write
|
||
1B4FDC6A000
|
unkown
|
page read and write
|
||
1BC01564000
|
unkown
|
page read and write
|
||
7FF52701C000
|
unkown
|
page readonly
|
||
FE5000
|
unkown
|
page read and write
|
||
1BC0155C000
|
unkown
|
page read and write
|
||
C86467B000
|
unkown
|
page read and write
|
||
2EC8000
|
unkown
|
page readonly
|
||
7FF578190000
|
unkown
|
page readonly
|
||
7FF4F05C0000
|
unkown
|
page readonly
|
||
1BC01538000
|
unkown
|
page read and write
|
||
7FF54256A000
|
unkown
|
page readonly
|
||
299881C0000
|
unkown
|
page read and write
|
||
2E03000
|
unkown
|
page readonly
|
||
7FF54223B000
|
unkown
|
page readonly
|
||
10BF000
|
stack
|
page read and write
|
||
2DED000
|
unkown
|
page readonly
|
||
7FF529296000
|
unkown
|
page readonly
|
||
23101625000
|
unkown
|
page read and write
|
||
7FF528DE6000
|
unkown
|
page readonly
|
||
EDB000
|
stack
|
page read and write
|
||
1BC00CDF000
|
unkown
|
page read and write
|
||
BB0000
|
heap default
|
page read and write
|
||
1BC01560000
|
unkown
|
page read and write
|
||
1BC01560000
|
unkown
|
page read and write
|
||
1CE1CDE0000
|
unkown
|
page readonly
|
||
2860F670000
|
unkown
|
page read and write
|
||
3BE000
|
unkown
|
page read and write
|
||
2E25000
|
unkown
|
page readonly
|
||
D64000
|
heap private
|
page read and write
|
||
7FF5424B7000
|
unkown
|
page readonly
|
||
29566015000
|
unkown
|
page read and write
|
||
7FF581A58000
|
unkown
|
page readonly
|
||
2317FD55000
|
unkown
|
page read and write
|
||
7FF5273D1000
|
unkown
|
page readonly
|
||
1F4EA067000
|
unkown
|
page read and write
|
||
1CE1CE63000
|
unkown
|
page read and write
|
||
7FF5290C3000
|
unkown
|
page readonly
|
||
1BC01546000
|
unkown
|
page read and write
|
||
7FF503EFE000
|
unkown
|
page readonly
|
||
7FF503EEE000
|
unkown
|
page readonly
|
||
23102110000
|
unkown
|
page read and write
|
||
7FF581A4B000
|
unkown
|
page readonly
|
||
B736C7E000
|
unkown
|
page read and write
|
||
7FF58192F000
|
unkown
|
page readonly
|
||
2317FD49000
|
unkown
|
page read and write
|
||
F82000
|
unkown
|
page read and write
|
||
23102510000
|
unkown
|
page read and write
|
||
7FF526FAF000
|
unkown
|
page readonly
|
||
1BC01531000
|
unkown
|
page read and write
|
||
645000
|
unkown
|
page read and write
|
||
B80000
|
heap default
|
page read and write
|
||
C863EF9000
|
unkown
|
page read and write
|
||
7FF581B87000
|
unkown
|
page readonly
|
||
2E25000
|
unkown
|
page readonly
|
||
7EE000
|
unkown
|
page read and write
|
||
7FF542040000
|
unkown
|
page readonly
|
||
1BC0158D000
|
unkown
|
page read and write
|
||
7FF577EAC000
|
unkown
|
page readonly
|
||
64D000
|
unkown
|
page read and write
|
||
2317FC02000
|
unkown
|
page read and write
|
||
2E52000
|
unkown
|
page readonly
|
||
7FF5271DB000
|
unkown
|
page readonly
|
||
1BC00BE0000
|
unkown
|
page readonly
|
||
2DB000
|
stack
|
page read and write
|
||
29566245000
|
heap private
|
page read and write
|
||
7FF50DBC9000
|
unkown
|
page readonly
|
||
50A000
|
unkown
|
page read and write
|
||
7FF50DC51000
|
unkown
|
page readonly
|
||
2D00000
|
unkown
|
page readonly
|
||
7FF577FB6000
|
unkown
|
page readonly
|
||
2317F400000
|
unkown
|
page readonly
|
||
1B4FDC53000
|
unkown
|
page read and write
|
||
EE0000
|
unkown
|
page read and write
|
||
849000
|
unkown
|
page read and write
|
||
1BC0152B000
|
unkown
|
page read and write
|
||
23101802000
|
unkown
|
page read and write
|
||
1CE1CE6F000
|
unkown
|
page read and write
|
||
1BC00BD0000
|
unkown
|
page readonly
|
||
31E0000
|
unkown
|
page readonly
|
||
2317FD7B000
|
unkown
|
page read and write
|
||
3480000
|
heap private
|
page read and write
|
||
1F4EA029000
|
unkown
|
page read and write
|
||
6240000
|
unkown
|
page readonly
|
||
2860F560000
|
unkown
|
page readonly
|
||
2DC9000
|
unkown
|
page readonly
|
||
68F0000
|
unkown
|
page read and write
|
||
651000
|
unkown
|
page read and write
|
||
1B4FDC6A000
|
unkown
|
page read and write
|
||
7FF52730C000
|
unkown
|
page readonly
|
||
7FF58180C000
|
unkown
|
page readonly
|
||
7FF503D8B000
|
unkown
|
page readonly
|
||
29988313000
|
unkown
|
page read and write
|
||
1BC01587000
|
unkown
|
page read and write
|
||
1BC01593000
|
unkown
|
page read and write
|
||
C86407A000
|
unkown
|
page read and write
|
||
1CE1CDF0000
|
unkown
|
page read and write
|
||
1BC00CAF000
|
unkown
|
page read and write
|
||
7FF50DD6E000
|
unkown
|
page readonly
|
||
7FF526FAA000
|
unkown
|
page readonly
|
||
164CABD0000
|
unkown
|
page readonly
|
||
1BC015C1000
|
unkown
|
page read and write
|
||
23101612000
|
unkown
|
page read and write
|
||
C8639EF000
|
unkown
|
page read and write
|
||
7FF4F06A4000
|
unkown
|
page readonly
|
||
1BC0155C000
|
unkown
|
page read and write
|
||
7FF52929D000
|
unkown
|
page readonly
|
||
2317FE10000
|
unkown
|
page read and write
|
||
1F4EA059000
|
unkown
|
page read and write
|
||
299881A0000
|
unkown
|
page readonly
|
||
7FF528DF5000
|
unkown
|
page readonly
|
||
7FF581B7F000
|
unkown
|
page readonly
|
||
F65000
|
unkown
|
page read and write
|
||
1BC01533000
|
unkown
|
page read and write
|
||
7FF50DDED000
|
unkown
|
page readonly
|
||
29566250000
|
unkown
|
page readonly
|
||
2EC8000
|
unkown
|
page readonly
|
||
2B43000
|
unkown
|
page readonly
|
||
164CC5A0000
|
unkown
|
page read and write
|
||
2DD3000
|
unkown
|
page readonly
|
||
1F4EA066000
|
unkown
|
page read and write
|
||
2B43000
|
unkown
|
page readonly
|
||
2EB4000
|
unkown
|
page readonly
|
||
231016C7000
|
unkown
|
page read and write
|
||
7FF5423EC000
|
unkown
|
page readonly
|
||
1BC01A00000
|
unkown
|
page read and write
|
||
770000
|
unkown
|
page read and write
|
||
23102310000
|
unkown
|
page read and write
|
||
29988308000
|
unkown
|
page read and write
|
||
7FF581B4E000
|
unkown
|
page readonly
|
||
7FF4F0604000
|
unkown
|
page readonly
|
||
1BC0158D000
|
unkown
|
page read and write
|
||
23102210000
|
unkown
|
page read and write
|
||
7FF527105000
|
unkown
|
page readonly
|
||
7FF5424EE000
|
unkown
|
page readonly
|
||
7FF5424AC000
|
unkown
|
page readonly
|
||
1BC00D02000
|
unkown
|
page read and write
|
||
2860F4E0000
|
heap private
|
page read and write
|
||
1BC01567000
|
unkown
|
page read and write
|
||
C863CFF000
|
unkown
|
page read and write
|
||
2860FE02000
|
unkown
|
page read and write
|
||
2D00000
|
unkown
|
page readonly
|
||
23102110000
|
unkown
|
page read and write
|
||
1BC01568000
|
unkown
|
page read and write
|
||
1050000
|
unkown
|
page read and write
|
||
7FF5928EF000
|
unkown
|
page readonly
|
||
3C0000
|
unkown
|
page read and write
|
||
3E0000
|
heap private
|
page read and write
|
||
2ACE000
|
unkown
|
page readonly
|
||
E43A67F000
|
unkown
|
page read and write
|
||
164CAC02000
|
unkown
|
page read and write
|
||
1BC00C00000
|
unkown
|
page read and write
|
||
404000
|
unkown
|
page read and write
|
||
29988287000
|
unkown
|
page read and write
|
||
1B4FDC6C000
|
unkown
|
page read and write
|
||
7FF503B5A000
|
unkown
|
page readonly
|
||
2CBE000
|
unkown
|
page readonly
|
||
7F0000
|
unkown
|
page read and write
|
||
1B4FDC68000
|
unkown
|
page read and write
|
||
7FF542246000
|
unkown
|
page readonly
|
||
1BC0156D000
|
unkown
|
page read and write
|
||
23101684000
|
unkown
|
page read and write
|
||
BA9000
|
unkown
|
page read and write
|
||
7FF592771000
|
unkown
|
page readonly
|
||
62A000
|
heap default
|
page read and write
|
||
7FF503F06000
|
unkown
|
page readonly
|
||
1B4FDC68000
|
unkown
|
page read and write
|
||
65F000
|
unkown
|
page read and write
|
||
1F4EB9A0000
|
unkown
|
page read and write
|
||
7FF529304000
|
unkown
|
page readonly
|
||
790000
|
unkown
|
page readonly
|
||
2317FE20000
|
unkown
|
page read and write
|
||
C269CF9000
|
unkown
|
page read and write
|
||
7FF54244B000
|
unkown
|
page readonly
|
||
BF0000
|
unkown
|
page readonly
|
||
4A60000
|
unkown
|
page read and write
|
||
2E19000
|
unkown
|
page readonly
|
||
2E56000
|
unkown
|
page readonly
|
||
2956602A000
|
unkown
|
page read and write
|
||
BAD000
|
unkown
|
page read and write
|
||
7FF581BB8000
|
unkown
|
page readonly
|
||
1BC01566000
|
unkown
|
page read and write
|
||
1BC0155C000
|
unkown
|
page read and write
|
||
2317FDB4000
|
unkown
|
page read and write
|
||
2317FE10000
|
unkown
|
page read and write
|
||
7FF5272DE000
|
unkown
|
page readonly
|
||
E43A3EA000
|
unkown
|
page read and write
|
||
1BC0156C000
|
unkown
|
page read and write
|
||
1BC0155C000
|
unkown
|
page read and write
|
||
C8640FB000
|
unkown
|
page read and write
|
||
2317F3B5000
|
unkown
|
page read and write
|
||
23102210000
|
unkown
|
page read and write
|
||
F6E000
|
unkown
|
page read and write
|
||
2317FD5F000
|
unkown
|
page read and write
|
||
FE9000
|
unkown
|
page read and write
|
||
1CE1D602000
|
unkown
|
page read and write
|
||
1CE1CDC0000
|
heap default
|
page read and write
|
||
8B19AFF000
|
unkown
|
page read and write
|
||
3450000
|
unkown
|
page read and write
|
||
1CE1CD60000
|
heap private
|
page read and write
|
||
2998823C000
|
unkown
|
page read and write
|
||
2DD3000
|
unkown
|
page readonly
|
||
1BC0153B000
|
unkown
|
page read and write
|
||
7FF503D71000
|
unkown
|
page readonly
|
||
2998828D000
|
unkown
|
page read and write
|
||
1F4EA06B000
|
unkown
|
page read and write
|
||
C8641FB000
|
unkown
|
page read and write
|
||
9DBEEFF000
|
unkown
|
page read and write
|
||
7FF5927F4000
|
unkown
|
page readonly
|
||
1BC0157E000
|
unkown
|
page read and write
|
||
7FF578244000
|
unkown
|
page readonly
|
||
2317F1D0000
|
unkown
|
page read and write
|
||
C269DFA000
|
unkown
|
page read and write
|
||
7FF527324000
|
unkown
|
page readonly
|
||
F89000
|
unkown
|
page read and write
|
||
1BC00CF9000
|
unkown
|
page read and write
|
||
7FF5781FB000
|
unkown
|
page readonly
|
||
2317F241000
|
unkown
|
page read and write
|
||
2317FD4B000
|
unkown
|
page read and write
|
||
BA9000
|
unkown
|
page read and write
|
||
2E10000
|
unkown
|
page readonly
|
||
2317F2B7000
|
unkown
|
page read and write
|
||
7FF59278E000
|
unkown
|
page readonly
|
||
B70000
|
unkown
|
page read and write
|
||
1BC01531000
|
unkown
|
page read and write
|
||
7FF529071000
|
unkown
|
page readonly
|
||
23101700000
|
unkown
|
page read and write
|
||
1F4E9F10000
|
unkown
|
page write copy
|
||
7FF528F97000
|
unkown
|
page readonly
|
||
2EC2000
|
unkown
|
page readonly
|
||
B736FF7000
|
unkown
|
page read and write
|
||
65F000
|
unkown
|
page read and write
|
||
1BC0158E000
|
unkown
|
page read and write
|
||
DA0000
|
unkown
|
page readonly
|
||
7FF581827000
|
unkown
|
page readonly
|
||
23102210000
|
unkown
|
page read and write
|
||
7FF527356000
|
unkown
|
page readonly
|
||
7FF5273C4000
|
unkown
|
page readonly
|
||
2E25000
|
unkown
|
page readonly
|
||
1BC0156C000
|
unkown
|
page read and write
|
||
600000
|
unkown
|
page readonly
|
||
2B43000
|
unkown
|
page readonly
|
||
2E3F000
|
unkown
|
page readonly
|
||
7FF54247A000
|
unkown
|
page readonly
|
||
7FF529220000
|
unkown
|
page readonly
|
||
649000
|
unkown
|
page read and write
|
||
F20000
|
unkown
|
page read and write
|
||
7FF52916D000
|
unkown
|
page readonly
|
||
3F0000
|
unkown
|
page readonly
|
||
F60000
|
unkown
|
page read and write
|
||
C86437B000
|
unkown
|
page read and write
|
||
1B4FDC6A000
|
unkown
|
page read and write
|
||
E6E000
|
stack
|
page read and write
|
||
869000
|
unkown
|
page read and write
|
||
7FF52921A000
|
unkown
|
page readonly
|
||
1F4EA069000
|
unkown
|
page read and write
|
||
1BC01564000
|
unkown
|
page read and write
|
||
E9A000
|
unkown
|
page read and write
|
||
2317F2E0000
|
unkown
|
page read and write
|
||
164CAC13000
|
unkown
|
page read and write
|
||
720000
|
unkown
|
page readonly
|
||
8B19BF5000
|
unkown
|
page read and write
|
||
2EC2000
|
unkown
|
page readonly
|
||
C86457B000
|
unkown
|
page read and write
|
||
7FF581BA4000
|
unkown
|
page readonly
|
||
2DF5000
|
unkown
|
page readonly
|
||
1F99C22B000
|
unkown
|
page read and write
|
||
7FF50DDCE000
|
unkown
|
page readonly
|
||
7FF578207000
|
unkown
|
page readonly
|
||
7FF4F061F000
|
unkown
|
page readonly
|
||
2CB2000
|
unkown
|
page readonly
|
||
2E3A000
|
unkown
|
page readonly
|
||
2ED3000
|
unkown
|
page readonly
|
||
1F99C202000
|
unkown
|
page read and write
|
||
7FF50DDE1000
|
unkown
|
page readonly
|
||
23101842000
|
unkown
|
page read and write
|
||
4C30000
|
unkown
|
page readonly
|
||
2E2D000
|
unkown
|
page readonly
|
||
7FF526F9C000
|
unkown
|
page readonly
|
||
7FF529264000
|
unkown
|
page readonly
|
||
80DF7F9000
|
unkown
|
page read and write
|
||
7FF542046000
|
unkown
|
page readonly
|
||
2E2F000
|
unkown
|
page readonly
|
||
1BC00A10000
|
heap private
|
page read and write
|
||
7FF5780F8000
|
unkown
|
page readonly
|
||
1CE1CE4D000
|
unkown
|
page read and write
|
||
29988400000
|
unkown
|
page readonly
|
||
164CAD13000
|
unkown
|
page read and write
|
||
7FF4F0195000
|
unkown
|
page readonly
|
||
C863C7A000
|
unkown
|
page read and write
|
||
BC2000
|
unkown
|
page read and write
|
||
7FF527359000
|
unkown
|
page readonly
|
||
2E27000
|
unkown
|
page readonly
|
||
1CE1D800000
|
unkown
|
page readonly
|
||
7FF503B67000
|
unkown
|
page readonly
|
||
1BC01565000
|
unkown
|
page read and write
|
||
2317FBE0000
|
heap private
|
page read and write
|
||
1BC01549000
|
unkown
|
page read and write
|
||
1002000
|
unkown
|
page read and write
|
||
1B4FE0D0000
|
unkown
|
page readonly
|
||
1B4FDC3F000
|
unkown
|
page read and write
|
||
2EC8000
|
unkown
|
page readonly
|
||
9B0000
|
heap private
|
page read and write
|
||
7FF5272EB000
|
unkown
|
page readonly
|
||
2317FD62000
|
unkown
|
page read and write
|
||
370000
|
unkown
|
page readonly
|
||
7FF57826D000
|
unkown
|
page readonly
|
||
65E97E000
|
unkown
|
page read and write
|
||
7FF5780EB000
|
unkown
|
page readonly
|
||
7FF50DD7B000
|
unkown
|
page readonly
|
||
7FF52709B000
|
unkown
|
page readonly
|
||
1BC00D08000
|
unkown
|
page read and write
|
||
7FF50DDE9000
|
unkown
|
page readonly
|
||
C8646FB000
|
unkown
|
page read and write
|
||
7FF50DA47000
|
unkown
|
page readonly
|
||
649000
|
unkown
|
page read and write
|
||
7FF5927DD000
|
unkown
|
page readonly
|
||
7FF503ED4000
|
unkown
|
page readonly
|
||
164CAAB0000
|
unkown
|
page readonly
|
||
2317F254000
|
unkown
|
page read and write
|
||
7FF542097000
|
unkown
|
page readonly
|
||
AB0000
|
unkown
|
page read and write
|
||
2317F374000
|
unkown
|
page read and write
|
||
BC0000
|
unkown
|
page readonly
|
||
2E2F000
|
unkown
|
page readonly
|
||
1F99C213000
|
unkown
|
page read and write
|
||
7FF581B9A000
|
unkown
|
page readonly
|
||
231016D3000
|
unkown
|
page read and write
|
||
7FF54237B000
|
unkown
|
page readonly
|
||
7FF50D5D1000
|
unkown
|
page readonly
|
||
1BC01566000
|
unkown
|
page read and write
|
||
299880D0000
|
unkown
|
page readonly
|
||
7FF592974000
|
unkown
|
page readonly
|
||
7FF542497000
|
unkown
|
page readonly
|
||
7FF581A31000
|
unkown
|
page readonly
|
||
7FF59289B000
|
unkown
|
page readonly
|
||
7FF529274000
|
unkown
|
page readonly
|
||
2E56000
|
unkown
|
page readonly
|
||
2317F278000
|
unkown
|
page read and write
|
||
3F0000
|
heap default
|
page read and write
|
||
1BC0158D000
|
unkown
|
page read and write
|
||
2860F657000
|
unkown
|
page read and write
|
||
1BC0158F000
|
unkown
|
page read and write
|
||
1F4E9E30000
|
heap default
|
page read and write
|
||
7FF578261000
|
unkown
|
page readonly
|
||
7FF503F09000
|
unkown
|
page readonly
|
||
7FF5781EA000
|
unkown
|
page readonly
|
||
1BC00B70000
|
unkown
|
page read and write
|
||
1CE1CE55000
|
unkown
|
page read and write
|
||
F50000
|
unkown
|
page readonly
|
||
BAE000
|
unkown
|
page read and write
|
||
2DC9000
|
unkown
|
page readonly
|
||
2317F2D2000
|
unkown
|
page read and write
|
||
1CE1CE9E000
|
unkown
|
page read and write
|
||
1BC00CB3000
|
unkown
|
page read and write
|
||
2E41000
|
unkown
|
page readonly
|
||
1BC01531000
|
unkown
|
page read and write
|
||
1BC0151B000
|
unkown
|
page read and write
|
||
1BC00D16000
|
unkown
|
page read and write
|
||
29988A02000
|
unkown
|
page read and write
|
||
7FF5271E3000
|
unkown
|
page readonly
|
||
164CAE00000
|
unkown
|
page readonly
|
||
2860F629000
|
unkown
|
page read and write
|
||
2860F708000
|
unkown
|
page read and write
|
||
7FF5782DA000
|
unkown
|
page readonly
|
||
7FF503EA7000
|
unkown
|
page readonly
|
||
7FF581B67000
|
unkown
|
page readonly
|
||
7FF581C41000
|
unkown
|
page readonly
|
||
164CC9F0000
|
unkown
|
page read and write
|
||
9DBE79D000
|
unkown
|
page read and write
|
||
2E03000
|
unkown
|
page readonly
|
||
EF0000
|
unkown
|
page read and write
|
||
7FF52734E000
|
unkown
|
page readonly
|
||
231016CA000
|
unkown
|
page read and write
|
||
1B4FDD13000
|
unkown
|
page read and write
|
||
B7369FB000
|
unkown
|
page read and write
|
||
7FF529184000
|
unkown
|
page readonly
|
||
2317F213000
|
unkown
|
page read and write
|
||
B7371F8000
|
unkown
|
page read and write
|
||
7FF581B13000
|
unkown
|
page readonly
|
||
7FF528FA0000
|
unkown
|
page readonly
|
||
7FF5782E1000
|
unkown
|
page readonly
|
||
2D00000
|
unkown
|
page readonly
|
||
7FF5270D4000
|
unkown
|
page readonly
|
||
7FF4F0639000
|
unkown
|
page readonly
|
||
2EA5000
|
unkown
|
page readonly
|
||
1BC01577000
|
unkown
|
page read and write
|
||
2860F550000
|
unkown
|
page readonly
|
||
7FF5271E8000
|
unkown
|
page readonly
|
||
7FF4F0340000
|
unkown
|
page readonly
|
||
2B43000
|
unkown
|
page readonly
|
||
1CE1DB40000
|
unkown
|
page readonly
|
||
1B4FF690000
|
unkown
|
page read and write
|
||
7FF577EBF000
|
unkown
|
page readonly
|
||
2317F26E000
|
unkown
|
page read and write
|
||
7FF52930A000
|
unkown
|
page readonly
|
||
7FF52927F000
|
unkown
|
page readonly
|
||
33F2000
|
unkown
|
page read and write
|
||
23101900000
|
unkown
|
page read and write
|
||
2ED3000
|
unkown
|
page readonly
|
||
1BC00B90000
|
unkown
|
page readonly
|
||
7FF5422B4000
|
unkown
|
page readonly
|
||
2ED3000
|
unkown
|
page readonly
|
||
FE9000
|
unkown
|
page read and write
|
||
23101783000
|
unkown
|
page read and write
|
||
2317F272000
|
unkown
|
page read and write
|
||
2DF5000
|
unkown
|
page readonly
|
||
9F2000
|
unkown
|
page read and write
|
||
1F99C120000
|
heap private
|
page read and write
|
||
7FF527101000
|
unkown
|
page readonly
|
||
F6D000
|
unkown
|
page read and write
|
||
7FF5780F3000
|
unkown
|
page readonly
|
||
C75000
|
unkown
|
page read and write
|
||
2DC9000
|
unkown
|
page readonly
|
||
2EA5000
|
unkown
|
page readonly
|
||
1BC0155E000
|
unkown
|
page read and write
|
||
BC9000
|
unkown
|
page read and write
|
||
2E0C000
|
unkown
|
page readonly
|
||
3E0000
|
unkown
|
page readonly
|
||
7FF5928BF000
|
unkown
|
page readonly
|
||
2D00000
|
unkown
|
page readonly
|
||
F89000
|
unkown
|
page read and write
|
||
5FB0000
|
unkown
|
page read and write
|
||
1BC00CCF000
|
unkown
|
page read and write
|
||
35B000
|
stack
|
page read and write
|
||
1CE1CE00000
|
unkown
|
page read and write
|
||
2317FDD7000
|
unkown
|
page read and write
|
||
7FF581B50000
|
unkown
|
page readonly
|
||
1BC01580000
|
unkown
|
page read and write
|
||
7FF542388000
|
unkown
|
page readonly
|
||
7FF527351000
|
unkown
|
page readonly
|
||
7FF4F04A1000
|
unkown
|
page readonly
|
||
1BC0156E000
|
unkown
|
page read and write
|
||
7FF5816B2000
|
unkown
|
page readonly
|
||
1F4EA067000
|
unkown
|
page read and write
|
||
2317FE30000
|
unkown
|
page read and write
|
||
7FF541D81000
|
unkown
|
page readonly
|
||
2317FDDF000
|
unkown
|
page read and write
|
||
7FF58190B000
|
unkown
|
page readonly
|
||
2317F2ED000
|
unkown
|
page read and write
|
||
7FF577EBA000
|
unkown
|
page readonly
|
||
1F99E0D0000
|
unkown
|
page read and write
|
||
2317F2E4000
|
unkown
|
page read and write
|
||
7FF541CF0000
|
unkown
|
page readonly
|
||
1BC00BE0000
|
unkown
|
page read and write
|
||
AE0000
|
unkown
|
page readonly
|
||
2860F700000
|
unkown
|
page read and write
|
||
1E8FAFE000
|
unkown
|
page read and write
|
||
1BC01545000
|
unkown
|
page read and write
|
||
920000
|
unkown
|
page readonly
|
||
1BC0157F000
|
unkown
|
page read and write
|
||
1CE1CE2A000
|
unkown
|
page read and write
|
||
1009000
|
unkown
|
page read and write
|
||
7FF592909000
|
unkown
|
page readonly
|
||
80DF8FF000
|
unkown
|
page read and write
|
||
BAD000
|
unkown
|
page read and write
|
||
C863F7B000
|
unkown
|
page read and write
|
||
2DED000
|
unkown
|
page readonly
|
||
D5378F9000
|
unkown
|
page read and write
|
||
7FF541FE2000
|
unkown
|
page readonly
|
||
1BC00C27000
|
unkown
|
page read and write
|
||
2CBE000
|
unkown
|
page readonly
|
||
1BC01A02000
|
unkown
|
page read and write
|
||
7FF4F05BA000
|
unkown
|
page readonly
|
||
29566016000
|
unkown
|
page read and write
|
||
7FF52928E000
|
unkown
|
page readonly
|
||
7FF529312000
|
unkown
|
page readonly
|
||
B80000
|
unkown
|
page read and write
|
||
1BC01547000
|
unkown
|
page read and write
|
||
662000
|
unkown
|
page read and write
|
||
2E5B000
|
unkown
|
page readonly
|
||
7FF50DA3F000
|
unkown
|
page readonly
|
||
5C70000
|
unkown
|
page readonly
|
||
2DF5000
|
unkown
|
page readonly
|
||
1009000
|
unkown
|
page read and write
|
||
7FF529311000
|
unkown
|
page readonly
|
||
7FF581971000
|
unkown
|
page readonly
|
||
2DDA000
|
unkown
|
page readonly
|
||
7FF57825E000
|
unkown
|
page readonly
|
||
7FF59288A000
|
unkown
|
page readonly
|
||
1BC01575000
|
unkown
|
page read and write
|
||
1F99C1E0000
|
unkown
|
page readonly
|
||
1CE1CE4A000
|
unkown
|
page read and write
|
||
1BC00A80000
|
unkown
|
page readonly
|
||
64D000
|
unkown
|
page read and write
|
||
2CB2000
|
unkown
|
page readonly
|
||
2E41000
|
unkown
|
page readonly
|
||
7FF581B3C000
|
unkown
|
page readonly
|
||
7FF503F01000
|
unkown
|
page readonly
|
||
2B43000
|
unkown
|
page readonly
|
||
1BC01576000
|
unkown
|
page read and write
|
||
9DBEAF5000
|
unkown
|
page read and write
|
||
7FF526943000
|
unkown
|
page readonly
|
||
2E10000
|
unkown
|
page readonly
|
||
2E25000
|
unkown
|
page readonly
|
||
2317F332000
|
unkown
|
page read and write
|
||
A3B000
|
unkown
|
page read and write
|
||
7FF52924C000
|
unkown
|
page readonly
|
||
2E27000
|
unkown
|
page readonly
|
||
1BC015C1000
|
unkown
|
page read and write
|
||
7FF50DD70000
|
unkown
|
page readonly
|
||
9BA000
|
heap private
|
page read and write
|
||
23102110000
|
unkown
|
page read and write
|
||
1F4EA06A000
|
unkown
|
page read and write
|
||
7FF541FEE000
|
unkown
|
page readonly
|
||
29988255000
|
unkown
|
page read and write
|
||
E43A87E000
|
unkown
|
page read and write
|
||
B7372FA000
|
unkown
|
page read and write
|
||
7FF52735D000
|
unkown
|
page readonly
|
||
8B19FFF000
|
unkown
|
page read and write
|
||
1BC00CCF000
|
unkown
|
page read and write
|
||
7FF503E95000
|
unkown
|
page readonly
|
||
C86417A000
|
unkown
|
page read and write
|
||
7FF526FF5000
|
unkown
|
page readonly
|
||
1BC01600000
|
unkown
|
page readonly
|
||
164CAC29000
|
unkown
|
page read and write
|
||
7FF50DA3A000
|
unkown
|
page readonly
|
||
7FF581C42000
|
unkown
|
page readonly
|
||
7FF50DE5A000
|
unkown
|
page readonly
|
||
2E3F000
|
unkown
|
page readonly
|
||
F61000
|
unkown
|
page read and write
|
||
7FF581B1B000
|
unkown
|
page readonly
|
||
2317F2B5000
|
unkown
|
page read and write
|
||
23101882000
|
unkown
|
page read and write
|
||
1BC0157E000
|
unkown
|
page read and write
|
||
2317FD38000
|
unkown
|
page read and write
|
||
7FF52701F000
|
unkown
|
page readonly
|
||
C8643FA000
|
unkown
|
page read and write
|
||
23102410000
|
unkown
|
page read and write
|
||
2860F570000
|
unkown
|
page read and write
|
||
1F4EA066000
|
unkown
|
page read and write
|
||
D70000
|
unkown
|
page readonly
|
||
64D000
|
unkown
|
page read and write
|
||
1BC00BE0000
|
unkown
|
page read and write
|
||
7FF592106000
|
unkown
|
page readonly
|
||
7FF503E32000
|
unkown
|
page readonly
|
||
669000
|
unkown
|
page read and write
|
||
65EA7E000
|
unkown
|
page read and write
|
||
1BC01531000
|
unkown
|
page read and write
|
||
FEE000
|
unkown
|
page read and write
|
||
7FF50DD87000
|
unkown
|
page readonly
|
||
7FF527348000
|
unkown
|
page readonly
|
||
7FF50DDA8000
|
unkown
|
page readonly
|
||
2860F647000
|
unkown
|
page read and write
|
||
2DFC000
|
unkown
|
page readonly
|
||
7FF581916000
|
unkown
|
page readonly
|
||
2EB4000
|
unkown
|
page readonly
|
||
33EE000
|
unkown
|
page read and write
|
||
84D000
|
unkown
|
page read and write
|
||
1F4EA067000
|
unkown
|
page read and write
|
||
7FF581B55000
|
unkown
|
page readonly
|
||
7FF503D98000
|
unkown
|
page readonly
|
||
7FF50DD9C000
|
unkown
|
page readonly
|
||
7FF52732A000
|
unkown
|
page readonly
|
||
7FF5424AF000
|
unkown
|
page readonly
|
||
5FF0000
|
unkown
|
page read and write
|
||
2E0C000
|
unkown
|
page readonly
|
||
400000
|
unkown
|
page read and write
|
||
7FF4F06AA000
|
unkown
|
page readonly
|
||
D60000
|
heap private
|
page read and write
|
||
1CE1CE3C000
|
unkown
|
page read and write
|
||
2317FDD6000
|
unkown
|
page read and write
|
||
2E41000
|
unkown
|
page readonly
|
||
2DDA000
|
unkown
|
page readonly
|
||
7FF529173000
|
unkown
|
page readonly
|
||
2860F64F000
|
unkown
|
page read and write
|
||
7FF581975000
|
unkown
|
page readonly
|
||
C8642FB000
|
unkown
|
page read and write
|
||
C863FFD000
|
unkown
|
page read and write
|
||
7FF542200000
|
unkown
|
page readonly
|
||
7FF4F062E000
|
unkown
|
page readonly
|
||
1BC0153D000
|
unkown
|
page read and write
|
||
65B0000
|
unkown
|
page readonly
|
||
1BC00C89000
|
unkown
|
page read and write
|
||
2317FD5A000
|
unkown
|
page read and write
|
||
80DF779000
|
unkown
|
page read and write
|
||
2DFC000
|
unkown
|
page readonly
|
||
50E000
|
unkown
|
page read and write
|
||
7FF503D93000
|
unkown
|
page readonly
|
||
29565ED0000
|
unkown
|
page readonly
|
||
2CB2000
|
unkown
|
page readonly
|
||
23101800000
|
unkown
|
page read and write
|
||
2E5B000
|
unkown
|
page readonly
|
||
7FF542280000
|
unkown
|
page readonly
|
||
7FF5270E1000
|
unkown
|
page readonly
|
||
2860F713000
|
unkown
|
page read and write
|
||
2317FDD9000
|
unkown
|
page read and write
|
||
2EA5000
|
unkown
|
page readonly
|
||
1F99DC70000
|
unkown
|
page read and write
|
||
C269E7E000
|
unkown
|
page read and write
|
||
2E3A000
|
unkown
|
page readonly
|
||
7FF54246A000
|
unkown
|
page readonly
|
||
2956601E000
|
unkown
|
page read and write
|
||
D5373FB000
|
unkown
|
page read and write
|
||
7FF527280000
|
unkown
|
page readonly
|
||
C71000
|
unkown
|
page read and write
|
||
B7373FF000
|
unkown
|
page read and write
|
||
D53787F000
|
unkown
|
page read and write
|
||
FED000
|
unkown
|
page read and write
|
||
1BC00B60000
|
unkown
|
page readonly
|
||
2317F070000
|
unkown
|
page readonly
|
||
610000
|
unkown
|
page read and write
|
||
2E2D000
|
unkown
|
page readonly
|
||
2E52000
|
unkown
|
page readonly
|
||
2DFC000
|
unkown
|
page readonly
|
||
1BC015CE000
|
unkown
|
page read and write
|
||
1BC015CF000
|
unkown
|
page read and write
|
||
1BC00C70000
|
unkown
|
page read and write
|
||
2317FD05000
|
unkown
|
page read and write
|
||
299880C0000
|
heap default
|
page read and write
|
||
7FF581BC6000
|
unkown
|
page readonly
|
||
1BC00A70000
|
heap default
|
page read and write
|
||
7FF526FFB000
|
unkown
|
page readonly
|
||
23101743000
|
unkown
|
page read and write
|
||
7FF577A51000
|
unkown
|
page readonly
|
||
2E3A000
|
unkown
|
page readonly
|
||
7FF529299000
|
unkown
|
page readonly
|
||
2D00000
|
unkown
|
page readonly
|
||
23102410000
|
unkown
|
page read and write
|
||
7FF578015000
|
unkown
|
page readonly
|
||
1BC015A6000
|
unkown
|
page read and write
|
||
31A000
|
unkown
|
page read and write
|
||
2317F2A5000
|
unkown
|
page read and write
|
||
D53767E000
|
unkown
|
page read and write
|
||
B736EF7000
|
unkown
|
page read and write
|
||
2EA1000
|
unkown
|
page readonly
|
||
7FF526FF0000
|
unkown
|
page readonly
|
||
7FF5926E1000
|
unkown
|
page readonly
|
||
2EB4000
|
unkown
|
page readonly
|
||
F65000
|
unkown
|
page read and write
|
||
EEF000
|
stack
|
page read and write
|
||
1BC0155E000
|
unkown
|
page read and write
|
||
2DDA000
|
unkown
|
page readonly
|
||
23102110000
|
unkown
|
page read and write
|
||
7FF50DB91000
|
unkown
|
page readonly
|
||
1BC0158E000
|
unkown
|
page read and write
|
||
1BC01541000
|
unkown
|
page read and write
|
||
1B4FDBA0000
|
heap default
|
page read and write
|
||
FE9000
|
unkown
|
page read and write
|
||
164CAC54000
|
unkown
|
page read and write
|
||
FCA000
|
heap default
|
page read and write
|
||
231016C5000
|
unkown
|
page read and write
|
||
1F4EA067000
|
unkown
|
page read and write
|
||
23101632000
|
unkown
|
page read and write
|
||
2E33000
|
unkown
|
page readonly
|
||
2317F2DA000
|
unkown
|
page read and write
|
||
7FF581B2F000
|
unkown
|
page readonly
|
||
23101743000
|
unkown
|
page read and write
|
||
2ED3000
|
unkown
|
page readonly
|
||
1F4EA067000
|
unkown
|
page read and write
|
||
2317F32C000
|
unkown
|
page read and write
|
||
1F4EA002000
|
unkown
|
page read and write
|
||
1BC00C84000
|
unkown
|
page read and write
|
||
7FF50DC6B000
|
unkown
|
page readonly
|
||
7FF52920A000
|
unkown
|
page readonly
|
||
E43A779000
|
unkown
|
page read and write
|
||
1BC0152B000
|
unkown
|
page read and write
|
||
2956602A000
|
unkown
|
page read and write
|
||
29988261000
|
unkown
|
page read and write
|
||
7FF527139000
|
unkown
|
page readonly
|
||
7FF503E90000
|
unkown
|
page readonly
|
||
2317FDA0000
|
unkown
|
page read and write
|
||
64E000
|
unkown
|
page read and write
|
||
2317FDFF000
|
unkown
|
page read and write
|
||
BC9000
|
unkown
|
page read and write
|
||
2317F2B9000
|
unkown
|
page read and write
|
||
7FF50DB36000
|
unkown
|
page readonly
|
||
2317F2DC000
|
unkown
|
page read and write
|
||
7FF4F05AA000
|
unkown
|
page readonly
|
||
7FF5270E2000
|
unkown
|
page readonly
|
||
B1B000
|
stack
|
page read and write
|
||
7FF4F05BE000
|
unkown
|
page readonly
|
||
7FF5819A1000
|
unkown
|
page readonly
|
||
7FF5780D1000
|
unkown
|
page readonly
|
||
2E52000
|
unkown
|
page readonly
|
||
3250000
|
heap private
|
page read and write
|
||
7FF4F052C000
|
unkown
|
page readonly
|
||
1F99C180000
|
heap default
|
page read and write
|
||
2860F540000
|
heap default
|
page read and write
|
||
1BC015A2000
|
unkown
|
page read and write
|
||
2E2F000
|
unkown
|
page readonly
|
||
7FF5273D2000
|
unkown
|
page readonly
|
||
7FF50DD9F000
|
unkown
|
page readonly
|
||
7FF50DDDE000
|
unkown
|
page readonly
|
||
1BC01A02000
|
unkown
|
page read and write
|
||
2317F2BA000
|
unkown
|
page read and write
|
||
7FF527028000
|
unkown
|
page readonly
|
||
2E10000
|
unkown
|
page readonly
|
||
B736DF5000
|
unkown
|
page read and write
|
||
7FF50DE62000
|
unkown
|
page readonly
|
||
2317FDA8000
|
unkown
|
page read and write
|
||
1BC01545000
|
unkown
|
page read and write
|
||
FED000
|
unkown
|
page read and write
|
||
7FF592465000
|
unkown
|
page readonly
|
||
7FF52921E000
|
unkown
|
page readonly
|
||
7FF5271C1000
|
unkown
|
page readonly
|
||
1BC01500000
|
unkown
|
page read and write
|
||
7FF4EFE36000
|
unkown
|
page readonly
|
||
2CBE000
|
unkown
|
page readonly
|
||
2DDA000
|
unkown
|
page readonly
|
||
6580000
|
unkown
|
page read and write
|
||
7FF581BC9000
|
unkown
|
page readonly
|
||
2E3F000
|
unkown
|
page readonly
|
||
80DF67F000
|
unkown
|
page read and write
|
||
1BC01587000
|
unkown
|
page read and write
|
||
65E6FB000
|
unkown
|
page read and write
|
||
1B4FDD02000
|
unkown
|
page read and write
|
||
620000
|
heap default
|
page read and write
|
||
5F30000
|
unkown
|
page readonly
|
||
1F4EA100000
|
unkown
|
page read and write
|
||
2E5B000
|
unkown
|
page readonly
|
||
F6D000
|
unkown
|
page read and write
|
||
7FF503E8E000
|
unkown
|
page readonly
|
||
7FF578258000
|
unkown
|
page readonly
|
||
2317F229000
|
unkown
|
page read and write
|
||
325A000
|
heap private
|
page read and write
|
||
1B4FDC02000
|
unkown
|
page read and write
|
||
7FF592456000
|
unkown
|
page readonly
|
||
7FF4F05EC000
|
unkown
|
page readonly
|
||
2E2D000
|
unkown
|
page readonly
|
||
2317F1E0000
|
unkown
|
page readonly
|
||
7FF527282000
|
unkown
|
page readonly
|
||
164CAA40000
|
heap private
|
page read and write
|
||
2E27000
|
unkown
|
page readonly
|
||
7FF503C56000
|
unkown
|
page readonly
|
||
9B7000
|
heap private
|
page read and write
|
||
1BC01A02000
|
unkown
|
page read and write
|
||
3EA000
|
heap private
|
page read and write
|
||
164CAC40000
|
unkown
|
page read and write
|
||
7FF52911B000
|
unkown
|
page readonly
|
||
2E41000
|
unkown
|
page readonly
|
||
7FF503E8A000
|
unkown
|
page readonly
|
||
1BC00CA9000
|
unkown
|
page read and write
|
||
7FF581A53000
|
unkown
|
page readonly
|
||
2E41000
|
unkown
|
page readonly
|
||
2DFC000
|
unkown
|
page readonly
|
||
862000
|
unkown
|
page read and write
|
||
1F4E9DD0000
|
heap private
|
page read and write
|
||
1F99C400000
|
unkown
|
page readonly
|
||
3257000
|
heap private
|
page read and write
|
||
23101600000
|
unkown
|
page read and write
|
||
2317FDF3000
|
unkown
|
page read and write
|
||
10D0000
|
unkown
|
page read and write
|
||
2860F702000
|
unkown
|
page read and write
|
||
BFE000
|
stack
|
page read and write
|
||
7FF581B3A000
|
unkown
|
page readonly
|
||
1BC0155D000
|
unkown
|
page read and write
|
||
2956601E000
|
unkown
|
page read and write
|
||
64E000
|
unkown
|
page read and write
|
||
2E03000
|
unkown
|
page readonly
|
||
7FF503E9B000
|
unkown
|
page readonly
|
||
7FF581AF0000
|
unkown
|
page readonly
|
||
7FF581AE2000
|
unkown
|
page readonly
|
||
64A000
|
unkown
|
page read and write
|
||
2EC8000
|
unkown
|
page readonly
|
||
7FF52920C000
|
unkown
|
page readonly
|
||
2ED3000
|
unkown
|
page readonly
|
||
F50000
|
unkown
|
page readonly
|
||
7FF528A96000
|
unkown
|
page readonly
|
||
7FF50DDBA000
|
unkown
|
page readonly
|
||
1CE1CE50000
|
unkown
|
page read and write
|
||
B8A000
|
heap default
|
page read and write
|
||
1BC01A03000
|
unkown
|
page read and write
|
||
7FF542571000
|
unkown
|
page readonly
|
||
2E3F000
|
unkown
|
page readonly
|
||
231016D6000
|
unkown
|
page read and write
|
||
7FF526FB7000
|
unkown
|
page readonly
|
||
2E03000
|
unkown
|
page readonly
|
||
7FF59297A000
|
unkown
|
page readonly
|
||
2317F1F0000
|
unkown
|
page readonly
|
||
1BC01576000
|
unkown
|
page read and write
|
||
82A000
|
heap default
|
page read and write
|
||
2317F790000
|
unkown
|
page read and write
|
||
2E52000
|
unkown
|
page readonly
|
||
1F4EA041000
|
unkown
|
page read and write
|
||
C86447A000
|
unkown
|
page read and write
|
||
1F4E9E40000
|
unkown
|
page readonly
|
||
1E8FA7E000
|
unkown
|
page read and write
|
||
7FF4F0636000
|
unkown
|
page readonly
|
||
7FF529225000
|
unkown
|
page readonly
|
||
1CE1CE9B000
|
unkown
|
page read and write
|
||
1BC01568000
|
unkown
|
page read and write
|
||
4720000
|
unkown
|
page readonly
|
||
1F4EBAA0000
|
unkown
|
page readonly
|
||
7FF57823A000
|
unkown
|
page readonly
|
||
7FF50DD10000
|
unkown
|
page readonly
|
||
7FF542454000
|
unkown
|
page readonly
|
||
2317F2DC000
|
unkown
|
page read and write
|
||
7FF4F0628000
|
unkown
|
page readonly
|
||
7FF581C34000
|
unkown
|
page readonly
|
||
7FF581B1F000
|
unkown
|
page readonly
|
||
720000
|
heap default
|
page read and write
|
||
C8647FC000
|
unkown
|
page read and write
|
||
7FF50DC78000
|
unkown
|
page readonly
|
||
231016A4000
|
unkown
|
page read and write
|
||
7FF4F06B2000
|
unkown
|
page readonly
|
||
6640000
|
unkown
|
page read and write
|
||
7FF5927FC000
|
unkown
|
page readonly
|
||
FEA000
|
unkown
|
page read and write
|
||
FE5000
|
unkown
|
page read and write
|
||
84E000
|
unkown
|
page read and write
|
||
FB0000
|
unkown
|
page read and write
|
||
7FF5270A6000
|
unkown
|
page readonly
|
||
1BC01538000
|
unkown
|
page read and write
|
||
1BC00C5A000
|
unkown
|
page read and write
|
||
2317F000000
|
heap private
|
page read and write
|
||
7FF5422B6000
|
unkown
|
page readonly
|
||
851000
|
unkown
|
page read and write
|
||
23101420000
|
unkown
|
page readonly
|
||
7FF503CB1000
|
unkown
|
page readonly
|
||
7FF5927E3000
|
unkown
|
page readonly
|
||
2E33000
|
unkown
|
page readonly
|
||
1BC00C4B000
|
unkown
|
page read and write
|
||
2317FE10000
|
unkown
|
page read and write
|
||
2317F256000
|
unkown
|
page read and write
|
||
7FF54245F000
|
unkown
|
page readonly
|
||
D5377F9000
|
unkown
|
page read and write
|
||
2E0C000
|
unkown
|
page readonly
|
||
FEE000
|
unkown
|
page read and write
|
||
7FF503CB5000
|
unkown
|
page readonly
|
||
1BC01587000
|
unkown
|
page read and write
|
||
2E03000
|
unkown
|
page readonly
|
||
1BC01545000
|
unkown
|
page read and write
|
||
7A0000
|
unkown
|
page read and write
|
||
7FF5928F8000
|
unkown
|
page readonly
|
||
645000
|
unkown
|
page read and write
|
||
1BC00D13000
|
unkown
|
page read and write
|
||
2317F140000
|
unkown
|
page write copy
|
||
E00000
|
unkown
|
page readonly
|
||
1BC00C13000
|
unkown
|
page read and write
|
||
F4A000
|
heap default
|
page read and write
|
||
7FF581AF2000
|
unkown
|
page readonly
|
||
7FF503B4C000
|
unkown
|
page readonly
|
||
2317FD86000
|
unkown
|
page read and write
|
||
1BC01597000
|
unkown
|
page read and write
|
||
1CE1CF08000
|
unkown
|
page read and write
|
||
107E000
|
unkown
|
page read and write
|
||
231016C7000
|
unkown
|
page read and write
|
||
7FF58181F000
|
unkown
|
page readonly
|
||
23102110000
|
unkown
|
page read and write
|
||
2DF5000
|
unkown
|
page readonly
|
||
2317F335000
|
unkown
|
page read and write
|
||
2E2F000
|
unkown
|
page readonly
|
||
5F20000
|
heap private
|
page read and write
|
||
7FF503EC8000
|
unkown
|
page readonly
|
||
7FF5272E0000
|
unkown
|
page readonly
|
||
2317FE10000
|
unkown
|
page read and write
|
||
B736CFE000
|
unkown
|
page read and write
|
||
2317F373000
|
unkown
|
page read and write
|
||
7FF4F0180000
|
unkown
|
page readonly
|
||
1BC00B50000
|
unkown
|
page readonly
|
||
7FF581BBE000
|
unkown
|
page readonly
|
||
2E10000
|
unkown
|
page readonly
|
||
FF1000
|
unkown
|
page read and write
|
||
7FF52705E000
|
unkown
|
page readonly
|
||
7FF4F0411000
|
unkown
|
page readonly
|
||
1BC0152E000
|
unkown
|
page read and write
|
||
FED000
|
unkown
|
page read and write
|
||
1BC00CC5000
|
unkown
|
page read and write
|
||
2ED3000
|
unkown
|
page readonly
|
||
1B4FDE00000
|
unkown
|
page readonly
|
||
1BC012B0000
|
unkown
|
page readonly
|
||
1BC0158F000
|
unkown
|
page read and write
|
||
849000
|
unkown
|
page read and write
|
||
65E877000
|
unkown
|
page read and write
|
||
2860F652000
|
unkown
|
page read and write
|
||
8B19A7F000
|
unkown
|
page read and write
|
||
BB1000
|
unkown
|
page read and write
|
||
2ED3000
|
unkown
|
page readonly
|
||
69B0000
|
unkown
|
page read and write
|
||
7FF529237000
|
unkown
|
page readonly
|
||
E43A6FF000
|
unkown
|
page read and write
|
||
2EA1000
|
unkown
|
page readonly
|
||
1BC00C3C000
|
unkown
|
page read and write
|
||
1F99C4D0000
|
unkown
|
page readonly
|
||
1BC00C50000
|
unkown
|
page read and write
|
||
2E25000
|
unkown
|
page readonly
|
||
7FF54232A000
|
unkown
|
page readonly
|
||
2ACE000
|
unkown
|
page readonly
|
||
7FF503E53000
|
unkown
|
page readonly
|
||
29988229000
|
unkown
|
page read and write
|
||
1BC0153D000
|
unkown
|
page read and write
|
||
2956601E000
|
unkown
|
page read and write
|
||
F47000
|
heap private
|
page read and write
|
||
7FF4F05AC000
|
unkown
|
page readonly
|
||
7FF59287C000
|
unkown
|
page readonly
|
||
2E5B000
|
unkown
|
page readonly
|
||
7FF527334000
|
unkown
|
page readonly
|
||
28610000000
|
unkown
|
page readonly
|
||
1F99C23F000
|
unkown
|
page read and write
|
||
C8645FB000
|
unkown
|
page read and write
|
||
23102010000
|
unkown
|
page read and write
|
||
2860F64B000
|
unkown
|
page read and write
|
||
3C0000
|
unkown
|
page read and write
|
||
BD0000
|
unkown
|
page read and write
|
||
600000
|
unkown
|
page read and write
|
||
3E7000
|
heap private
|
page read and write
|
||
1B4FDC6C000
|
unkown
|
page read and write
|
||
343E000
|
stack
|
page read and write
|
||
1BC01A1D000
|
unkown
|
page read and write
|
||
1B4FDED0000
|
unkown
|
page readonly
|
||
7FF5813B1000
|
unkown
|
page readonly
|
||
2E56000
|
unkown
|
page readonly
|
||
2E52000
|
unkown
|
page readonly
|
||
1CE1CF13000
|
unkown
|
page read and write
|
||
7FF592981000
|
unkown
|
page readonly
|
||
D53777B000
|
unkown
|
page read and write
|
||
2EA5000
|
unkown
|
page readonly
|
||
C863E7B000
|
unkown
|
page read and write
|
||
7FF5422C1000
|
unkown
|
page readonly
|
||
7FF503E30000
|
unkown
|
page readonly
|
||
7FF578269000
|
unkown
|
page readonly
|
||
231016D6000
|
unkown
|
page read and write
|
||
2E3F000
|
unkown
|
page readonly
|
||
7FF526B3D000
|
unkown
|
page readonly
|
||
2EB4000
|
unkown
|
page readonly
|
||
10CE000
|
unkown
|
page read and write
|
||
2DD3000
|
unkown
|
page readonly
|
||
7FF503F0D000
|
unkown
|
page readonly
|
||
2317F2B2000
|
unkown
|
page read and write
|
||
2317F3B4000
|
unkown
|
page read and write
|
||
7FF50DDB4000
|
unkown
|
page readonly
|
||
23102010000
|
unkown
|
page read and write
|
||
31F0000
|
heap private
|
page read and write
|
||
29988200000
|
unkown
|
page read and write
|
||
84A000
|
unkown
|
page read and write
|
||
2317F28B000
|
unkown
|
page read and write
|
||
231016D6000
|
unkown
|
page read and write
|
||
7FF503C4B000
|
unkown
|
page readonly
|
||
23101743000
|
unkown
|
page read and write
|
||
7FF50DE61000
|
unkown
|
page readonly
|
||
1BC01A02000
|
unkown
|
page read and write
|
||
7FF5272F7000
|
unkown
|
page readonly
|
||
1BC0152D000
|
unkown
|
page read and write
|
||
2860F64D000
|
unkown
|
page read and write
|
||
669000
|
unkown
|
page read and write
|
||
65E4FE000
|
unkown
|
page read and write
|
||
7FF503CE9000
|
unkown
|
page readonly
|
||
2317FD5A000
|
unkown
|
page read and write
|
||
7FF5781EE000
|
unkown
|
page readonly
|
||
7FF503F82000
|
unkown
|
page readonly
|
||
656E000
|
unkown
|
page read and write
|
||
1BC01546000
|
unkown
|
page read and write
|
||
23101653000
|
unkown
|
page read and write
|
||
7FF581729000
|
unkown
|
page readonly
|
||
B2E000
|
unkown
|
page read and write
|
||
2CB2000
|
unkown
|
page readonly
|
||
1BC00BF0000
|
unkown
|
page read and write
|
||
1CE1CE63000
|
unkown
|
page read and write
|
||
AD0000
|
unkown
|
page readonly
|
||
2E3A000
|
unkown
|
page readonly
|
||
7FF4F0463000
|
unkown
|
page readonly
|
||
1080000
|
unkown
|
page readonly
|
||
F0E000
|
unkown
|
page read and write
|
||
29A000
|
unkown
|
page read and write
|
||
299881B0000
|
unkown
|
page readonly
|
||
1E8FCFD000
|
unkown
|
page read and write
|
||
C269C7E000
|
unkown
|
page read and write
|
||
2E2D000
|
unkown
|
page readonly
|
||
7FF527318000
|
unkown
|
page readonly
|
||
7FF50DDD8000
|
unkown
|
page readonly
|
||
7FF4F063D000
|
unkown
|
page readonly
|
||
1F4EA200000
|
unkown
|
page readonly
|
||
7FF5782D4000
|
unkown
|
page readonly
|
||
7FF52730F000
|
unkown
|
page readonly
|
||
7FF592733000
|
unkown
|
page readonly
|
||
845000
|
unkown
|
page read and write
|
||
231016CB000
|
unkown
|
page read and write
|
||
64D000
|
unkown
|
page read and write
|
||
122C000
|
unkown
|
page readonly
|
||
EAE000
|
unkown
|
page read and write
|
||
7FF503F7A000
|
unkown
|
page readonly
|
||
1BC0154A000
|
unkown
|
page read and write
|
||
7FF50D5CD000
|
unkown
|
page readonly
|
||
3110000
|
unkown
|
page readonly
|
||
2DDA000
|
unkown
|
page readonly
|
||
7FF50DD6A000
|
unkown
|
page readonly
|
||
1BC00E00000
|
unkown
|
page readonly
|
||
71D000
|
unkown
|
page read and write
|
||
7FF57824E000
|
unkown
|
page readonly
|
||
1BC0158E000
|
unkown
|
page read and write
|
||
2E0C000
|
unkown
|
page readonly
|
||
7FF57821C000
|
unkown
|
page readonly
|
||
7FF503B5F000
|
unkown
|
page readonly
|
||
2E56000
|
unkown
|
page readonly
|
||
7FF59290D000
|
unkown
|
page readonly
|
||
2317F342000
|
unkown
|
page read and write
|
||
7FF581928000
|
unkown
|
page readonly
|
||
1BC01A54000
|
unkown
|
page read and write
|
||
1BC00CBE000
|
unkown
|
page read and write
|
||
7FF581B4A000
|
unkown
|
page readonly
|
||
2317FD55000
|
unkown
|
page read and write
|
||
2317F200000
|
unkown
|
page read and write
|
||
9DBEDFF000
|
unkown
|
page read and write
|
||
7FF541DD3000
|
unkown
|
page readonly
|
||
7FF50DDC4000
|
unkown
|
page readonly
|
||
D5376FE000
|
unkown
|
page read and write
|
||
7FF542422000
|
unkown
|
page readonly
|
||
C2699FB000
|
unkown
|
page read and write
|
||
7FF5781F0000
|
unkown
|
page readonly
|
||
2998825B000
|
unkown
|
page read and write
|
||
7FF4F060A000
|
unkown
|
page readonly
|
||
1070000
|
unkown
|
page readonly
|
||
7FF527058000
|
unkown
|
page readonly
|
||
7FF4F0524000
|
unkown
|
page readonly
|
||
1BC0155E000
|
unkown
|
page read and write
|
||
7FF592607000
|
unkown
|
page readonly
|
||
9DBEBFB000
|
unkown
|
page read and write
|
||
1B4FDC6C000
|
unkown
|
page read and write
|
||
BAA000
|
unkown
|
page read and write
|
||
2860F64C000
|
unkown
|
page read and write
|
||
2317F2CA000
|
unkown
|
page read and write
|
||
2DD3000
|
unkown
|
page readonly
|
||
7FF592610000
|
unkown
|
page readonly
|
||
7FF577EC7000
|
unkown
|
page readonly
|
||
1E8FC7E000
|
unkown
|
page read and write
|
||
7FF592982000
|
unkown
|
page readonly
|
||
9C0000
|
unkown
|
page readonly
|
||
8B19EFF000
|
unkown
|
page read and write
|
||
2E2F000
|
unkown
|
page readonly
|
||
5C70000
|
unkown
|
page readonly
|
||
7FF526947000
|
unkown
|
page readonly
|
||
F6D000
|
unkown
|
page read and write
|
||
2317F29F000
|
unkown
|
page read and write
|
||
7FF542485000
|
unkown
|
page readonly
|
||
C00000
|
unkown
|
page readonly
|
||
7FF592450000
|
unkown
|
page readonly
|
||
2860F658000
|
unkown
|
page read and write
|
||
7FF54244F000
|
unkown
|
page readonly
|
||
2ACE000
|
unkown
|
page readonly
|
||
65E18B000
|
unkown
|
page read and write
|
||
1BC01564000
|
unkown
|
page read and write
|
||
295660F0000
|
unkown
|
page readonly
|
||
B73737F000
|
unkown
|
page read and write
|
||
1B4FDBB0000
|
unkown
|
page write copy
|
||
2DC9000
|
unkown
|
page readonly
|
||
2E27000
|
unkown
|
page readonly
|
||
BAE000
|
unkown
|
page read and write
|
||
FC0000
|
heap default
|
page read and write
|
||
7FF50DDE6000
|
unkown
|
page readonly
|
||
C8644FB000
|
unkown
|
page read and write
|
||
80DF6FE000
|
unkown
|
page read and write
|
||
1BC01586000
|
unkown
|
page read and write
|
||
2DD3000
|
unkown
|
page readonly
|
||
A7B000
|
stack
|
page read and write
|
||
2DED000
|
unkown
|
page readonly
|
||
7FF581B94000
|
unkown
|
page readonly
|
||
7FF52926A000
|
unkown
|
page readonly
|
||
7FF503EBC000
|
unkown
|
page readonly
|
||
1F4EA000000
|
unkown
|
page read and write
|
||
2860F650000
|
unkown
|
page read and write
|
||
7FF578192000
|
unkown
|
page readonly
|
||
2860F659000
|
unkown
|
page read and write
|
||
7FF4F0337000
|
unkown
|
page readonly
|
||
164CC6A0000
|
unkown
|
page readonly
|
||
1BC015C8000
|
unkown
|
page read and write
|
||
23102310000
|
unkown
|
page read and write
|
||
2EC2000
|
unkown
|
page readonly
|
||
2860F63C000
|
unkown
|
page read and write
|
||
7FF58181A000
|
unkown
|
page readonly
|
||
2860F8D0000
|
unkown
|
page readonly
|
||
1BC01597000
|
unkown
|
page read and write
|
||
F68000
|
unkown
|
page read and write
|
||
2E19000
|
unkown
|
page readonly
|
||
114C000
|
unkown
|
page readonly
|
||
1CE1CF02000
|
unkown
|
page read and write
|
||
1BC01537000
|
unkown
|
page read and write
|
||
164CAD02000
|
unkown
|
page read and write
|
||
2E33000
|
unkown
|
page readonly
|
||
1CE1D0D0000
|
unkown
|
page readonly
|
||
1BC0153D000
|
unkown
|
page read and write
|
||
ED4000
|
heap private
|
page read and write
|
||
7FF52703A000
|
unkown
|
page readonly
|
||
7FF592906000
|
unkown
|
page readonly
|
||
1BC0158D000
|
unkown
|
page read and write
|
||
2ED3000
|
unkown
|
page readonly
|
||
7FF542095000
|
unkown
|
page readonly
|
||
2317F28D000
|
unkown
|
page read and write
|
||
1BC01539000
|
unkown
|
page read and write
|
||
7FF5273CA000
|
unkown
|
page readonly
|
||
2ACE000
|
unkown
|
page readonly
|
||
7FF581AEC000
|
unkown
|
page readonly
|
||
23102010000
|
unkown
|
page read and write
|
||
7FF592890000
|
unkown
|
page readonly
|
||
1BC01A61000
|
unkown
|
page read and write
|
||
1BC01560000
|
unkown
|
page read and write
|
||
2ACE000
|
unkown
|
page readonly
|
||
2317FD94000
|
unkown
|
page read and write
|
||
1B4FDC13000
|
unkown
|
page read and write
|
||
CB0000
|
unkown
|
page readonly
|
||
164CAB80000
|
unkown
|
page write copy
|
||
1E8FB79000
|
unkown
|
page read and write
|
||
29565FF0000
|
heap default
|
page read and write
|
||
1BC0156A000
|
unkown
|
page read and write
|
||
649000
|
unkown
|
page read and write
|
||
1E8FBF9000
|
unkown
|
page read and write
|
||
84D000
|
unkown
|
page read and write
|
||
7FF503F74000
|
unkown
|
page readonly
|
||
7FF5424CA000
|
unkown
|
page readonly
|
||
7FF50DA2C000
|
unkown
|
page readonly
|
||
23102010000
|
unkown
|
page read and write
|
||
F4F000
|
stack
|
page read and write
|
||
7FF54237E000
|
unkown
|
page readonly
|
||
2EC2000
|
unkown
|
page readonly
|
||
C863D7A000
|
unkown
|
page read and write
|
||
E9E000
|
stack
|
page read and write
|
||
1BC0155C000
|
unkown
|
page read and write
|
||
2DC9000
|
unkown
|
page readonly
|
||
31F4000
|
heap private
|
page read and write
|
||
7FF4F05D7000
|
unkown
|
page readonly
|
||
7FF4F0513000
|
unkown
|
page readonly
|
||
23101636000
|
unkown
|
page read and write
|
||
7FF5781B3000
|
unkown
|
page readonly
|
||
7FF526885000
|
unkown
|
page readonly
|
||
1F4EA06B000
|
unkown
|
page read and write
|
||
1BC0153D000
|
unkown
|
page read and write
|
||
23101902000
|
unkown
|
page read and write
|
||
1F4E9F60000
|
unkown
|
page readonly
|
||
1BC0156E000
|
unkown
|
page read and write
|
||
7FF5272A3000
|
unkown
|
page readonly
|
||
7FF581C3A000
|
unkown
|
page readonly
|
||
1BC01574000
|
unkown
|
page read and write
|
||
1BC01402000
|
unkown
|
page read and write
|
||
7FF581991000
|
unkown
|
page readonly
|
||
B7370FE000
|
unkown
|
page read and write
|
||
1BC01551000
|
unkown
|
page read and write
|
||
1BC01544000
|
unkown
|
page read and write
|
||
1BC0152B000
|
unkown
|
page read and write
|
||
8B19DF7000
|
unkown
|
page read and write
|
||
2317F393000
|
unkown
|
page read and write
|
||
340000
|
unkown
|
page read and write
|
||
7FF5781F5000
|
unkown
|
page readonly
|
||
2860F800000
|
unkown
|
page readonly
|
||
2E19000
|
unkown
|
page readonly
|
||
23101743000
|
unkown
|
page read and write
|
||
1BC01565000
|
unkown
|
page read and write
|
||
7FF5928BC000
|
unkown
|
page readonly
|
||
7FF578049000
|
unkown
|
page readonly
|
||
7FF527069000
|
unkown
|
page readonly
|
||
1BC0151C000
|
unkown
|
page read and write
|
||
7FF542383000
|
unkown
|
page readonly
|
||
C86427B000
|
unkown
|
page read and write
|
||
2317FD60000
|
unkown
|
page read and write
|
||
2EA1000
|
unkown
|
page readonly
|
||
1040000
|
heap default
|
page read and write
|
||
2DED000
|
unkown
|
page readonly
|
||
BA9000
|
unkown
|
page read and write
|
||
23101743000
|
unkown
|
page read and write
|
||
23102210000
|
unkown
|
page read and write
|
||
1BC01545000
|
unkown
|
page read and write
|
||
7FF5928C7000
|
unkown
|
page readonly
|
||
BA5000
|
unkown
|
page read and write
|
||
7FF581A9D000
|
unkown
|
page readonly
|
||
1B4FDC6C000
|
unkown
|
page read and write
|
||
2EA5000
|
unkown
|
page readonly
|
||
7FF4F0614000
|
unkown
|
page readonly
|
||
1BC01517000
|
unkown
|
page read and write
|
||
F74000
|
unkown
|
page read and write
|
||
1BC0152A000
|
unkown
|
page read and write
|
||
7FF54246C000
|
unkown
|
page readonly
|
||
7FF5423D3000
|
unkown
|
page readonly
|
||
3110000
|
unkown
|
page readonly
|
||
1BC01C00000
|
unkown
|
page readonly
|
||
1BC0151C000
|
unkown
|
page read and write
|
||
1F4EA06B000
|
unkown
|
page read and write
|
||
7FF592895000
|
unkown
|
page readonly
|
||
2E5B000
|
unkown
|
page readonly
|
||
7FF541FF2000
|
unkown
|
page readonly
|
||
7FF50DB2B000
|
unkown
|
page readonly
|
||
7FF4F0186000
|
unkown
|
page readonly
|
||
7FF5270DA000
|
unkown
|
page readonly
|
||
2E19000
|
unkown
|
page readonly
|
||
2860F613000
|
unkown
|
page read and write
|
||
23101673000
|
unkown
|
page read and write
|
||
F1E000
|
stack
|
page read and write
|
||
7FF5036ED000
|
unkown
|
page readonly
|
||
7FF5819A9000
|
unkown
|
page readonly
|
||
1BC01A02000
|
unkown
|
page read and write
|
||
7FF5424F6000
|
unkown
|
page readonly
|
||
1B4FDC00000
|
unkown
|
page read and write
|
||
23102110000
|
unkown
|
page read and write
|
||
29988302000
|
unkown
|
page read and write
|
||
6150000
|
unkown
|
page readonly
|
||
ED0000
|
heap private
|
page read and write
|
||
7FF528A90000
|
unkown
|
page readonly
|
||
7FF578228000
|
unkown
|
page readonly
|
||
2E33000
|
unkown
|
page readonly
|
||
5F24000
|
heap private
|
page read and write
|
||
7FF5422D1000
|
unkown
|
page readonly
|
||
2956602A000
|
unkown
|
page read and write
|
||
80DF3CB000
|
unkown
|
page read and write
|
||
7FF503F81000
|
unkown
|
page readonly
|
||
29566006000
|
heap default
|
page read and write
|
||
2317FD13000
|
unkown
|
page read and write
|
||
7FF59278B000
|
unkown
|
page readonly
|
||
2317F890000
|
unkown
|
page readonly
|
||
6D0000
|
unkown
|
page readonly
|
||
1BC0159D000
|
unkown
|
page read and write
|
||
7FF527034000
|
unkown
|
page readonly
|
||
2317F313000
|
unkown
|
page read and write
|
||
7FF5928FE000
|
unkown
|
page readonly
|
||
6234000
|
heap private
|
page read and write
|
||
1F4EA06E000
|
unkown
|
page read and write
|
||
849000
|
unkown
|
page read and write
|
||
7FF4F050D000
|
unkown
|
page readonly
|
||
164CAC00000
|
unkown
|
page read and write
|
||
7FF4F05F7000
|
unkown
|
page readonly
|
||
7FF578234000
|
unkown
|
page readonly
|
||
7FF577A4D000
|
unkown
|
page readonly
|
||
7FF5813AD000
|
unkown
|
page readonly
|
||
7FF541DD7000
|
unkown
|
page readonly
|
||
7FF528DE0000
|
unkown
|
page readonly
|
||
7FF5424DF000
|
unkown
|
page readonly
|
||
1BC0151B000
|
unkown
|
page read and write
|
||
7FF4F05CB000
|
unkown
|
page readonly
|
||
FAE000
|
unkown
|
page read and write
|
||
7FF529101000
|
unkown
|
page readonly
|
||
2317F290000
|
unkown
|
page read and write
|
||
7FF54248B000
|
unkown
|
page readonly
|
||
1F99C200000
|
unkown
|
page read and write
|
||
7FF581BC1000
|
unkown
|
page readonly
|
||
29988300000
|
unkown
|
page read and write
|
||
BAD000
|
unkown
|
page read and write
|
||
7FF503EDA000
|
unkown
|
page readonly
|
||
2317F342000
|
unkown
|
page read and write
|
||
7FF5424E8000
|
unkown
|
page readonly
|
||
7FF526B41000
|
unkown
|
page readonly
|
||
84D000
|
unkown
|
page read and write
|
||
7FF581B7C000
|
unkown
|
page readonly
|
||
3487000
|
heap private
|
page read and write
|
||
7FF542361000
|
unkown
|
page readonly
|
||
7FF542323000
|
unkown
|
page readonly
|
||
2DF5000
|
unkown
|
page readonly
|
||
2EC8000
|
unkown
|
page readonly
|
||
65E77E000
|
unkown
|
page read and write
|
||
348A000
|
heap private
|
page read and write
|
||
C86487F000
|
unkown
|
page read and write
|
||
1B4FDB40000
|
heap private
|
page read and write
|
||
BAD000
|
unkown
|
page read and write
|
||
2317F2B5000
|
unkown
|
page read and write
|
||
3440000
|
unkown
|
page read and write
|
||
7FF578266000
|
unkown
|
page readonly
|
||
5FB0000
|
unkown
|
page read and write
|
||
2DED000
|
unkown
|
page readonly
|
||
29988213000
|
unkown
|
page read and write
|
||
7FF52706D000
|
unkown
|
page readonly
|
||
B30000
|
unkown
|
page read and write
|
||
1BC00BE0000
|
unkown
|
page read and write
|
||
2E33000
|
unkown
|
page readonly
|
||
2E56000
|
unkown
|
page readonly
|
||
7FF52911E000
|
unkown
|
page readonly
|
||
7FF5424C4000
|
unkown
|
page readonly
|
||
F4A000
|
heap private
|
page read and write
|
||
7FF4F04BB000
|
unkown
|
page readonly
|
||
7FF541F5E000
|
unkown
|
page readonly
|
||
7FF5928A7000
|
unkown
|
page readonly
|
||
2860F600000
|
unkown
|
page read and write
|
||
80DF87E000
|
unkown
|
page read and write
|
||
1BC01590000
|
unkown
|
page read and write
|
||
7FF4F04BE000
|
unkown
|
page readonly
|
||
1BC00C54000
|
unkown
|
page read and write
|
||
9DBE71E000
|
unkown
|
page read and write
|
||
820000
|
heap default
|
page read and write
|
||
7FF527044000
|
unkown
|
page readonly
|
||
7FF542572000
|
unkown
|
page readonly
|
||
7FF581984000
|
unkown
|
page readonly
|
||
2ED3000
|
unkown
|
page readonly
|
||
7FF54247E000
|
unkown
|
page readonly
|
||
7FF577FAB000
|
unkown
|
page readonly
|
||
2CBE000
|
unkown
|
page readonly
|
||
7FF503EBF000
|
unkown
|
page readonly
|
||
7FF5421F7000
|
unkown
|
page readonly
|
||
2317FD00000
|
unkown
|
page read and write
|
||
7FF541D15000
|
unkown
|
page readonly
|
||
1F99C190000
|
unkown
|
page write copy
|
||
2998825E000
|
unkown
|
page read and write
|
||
2CB2000
|
unkown
|
page readonly
|
||
28610340000
|
unkown
|
page readonly
|
||
7FF5928DA000
|
unkown
|
page readonly
|
||
7FF581451000
|
unkown
|
page readonly
|
||
3490000
|
unkown
|
page readonly
|
||
1BC00BC0000
|
unkown
|
page readonly
|
||
7FF4F06B1000
|
unkown
|
page readonly
|
||
23102310000
|
unkown
|
page read and write
|
||
7FF529288000
|
unkown
|
page readonly
|
||
7FF5423CD000
|
unkown
|
page readonly
|
||
1BC01587000
|
unkown
|
page read and write
|
||
869000
|
unkown
|
page read and write
|
||
7FF50DD33000
|
unkown
|
page readonly
|
||
164CAAA0000
|
heap default
|
page read and write
|
||
7FF59287A000
|
unkown
|
page readonly
|
||
7FF57821F000
|
unkown
|
page readonly
|
||
7FF581A96000
|
unkown
|
page readonly
|
||
23102310000
|
unkown
|
page read and write
|
||
7FF52922B000
|
unkown
|
page readonly
|
||
C863DFE000
|
unkown
|
page read and write
|
||
1BC01260000
|
unkown
|
page write copy
|
||
7FF503EF8000
|
unkown
|
page readonly
|
||
1B4FDC29000
|
unkown
|
page read and write
|
||
1CE1CDD0000
|
unkown
|
page readonly
|
||
7FF52704E000
|
unkown
|
page readonly
|
||
C80000
|
unkown
|
page readonly
|
||
2E19000
|
unkown
|
page readonly
|
||
B60000
|
heap default
|
page read and write
|
||
7FF4F05EF000
|
unkown
|
page readonly
|
||
7FF59288E000
|
unkown
|
page readonly
|
||
2EB4000
|
unkown
|
page readonly
|
||
7FF542055000
|
unkown
|
page readonly
|
||
84E000
|
unkown
|
page read and write
|
||
1BC01549000
|
unkown
|
page read and write
|
||
B50000
|
unkown
|
page readonly
|
||
1BC01576000
|
unkown
|
page read and write
|
||
7FF542564000
|
unkown
|
page readonly
|
||
F6D000
|
unkown
|
page read and write
|
||
7FF5272E5000
|
unkown
|
page readonly
|
There are 1433 hidden memdumps, click here to show them.