Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
9177284661-04302021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\Users\user\Desktop\~$9177284661-04302021.xlsm
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\F19E34F0-F5C8-43C4-A6F2-C9BCDF4F2C40
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\195EC58F.jpg
|
[TIFF image data, big-endian, direntries=5], baseline, precision 8, 1080x1080, frames 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\EE720000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\9177284661-04302021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:27:01
2020, mtime=Tue May 4 12:02:35 2021, atime=Tue May 4 12:02:35 2021, length=117952, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 18:52:18 2019, mtime=Tue May 4 12:02:35 2021, atime=Tue May 4 12:02:35 2021, length=12288, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Desktop\D1820000
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EB62A569.jpg
|
[TIFF image data, big-endian, direntries=5], baseline, precision 8, 1080x1080, frames 3
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\46FE0000
|
data
|
dropped
|
||
C:\Users\user\Desktop\27FE0000
|
data
|
dropped
|
There are 2 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://45.144.31.232/44313,6048108796.dat
|
45.144.31.232
|
||
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://ncus.contentsync.
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://wus2.contentsync.
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
http://185.45.193.80/44313,6048108796.dat
|
185.45.193.80
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://ncus.pagecontentsync.
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
https://directory.services.
|
unknown
|
There are 90 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
82.118.21.70
|
unknown
|
Ukraine
|
||
45.144.31.232
|
unknown
|
United Kingdom
|
||
185.45.193.80
|
unknown
|
United Arab Emirates
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'0;
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
(0;
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27258
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2796D
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27CA9
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27E10
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2816C
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
28208
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
il;
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
nt7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF058
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF44E
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF557
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF602
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF6DD
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF779
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
$`7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
There are 132 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
934627E000
|
unkown
|
page read and write
|
||
7FF55F15D000
|
unkown
|
page readonly
|
||
2A476373000
|
unkown
|
page read and write
|
||
23EA9685000
|
heap private
|
page read and write
|
||
2A47635A000
|
unkown
|
page read and write
|
||
7FF5C78F4000
|
unkown
|
page readonly
|
||
7FF5D543A000
|
unkown
|
page readonly
|
||
20909C6D000
|
unkown
|
page read and write
|
||
214D3229000
|
unkown
|
page read and write
|
||
2A476348000
|
unkown
|
page read and write
|
||
2090F412000
|
unkown
|
page read and write
|
||
1143DF7000
|
unkown
|
page read and write
|
||
7FF527426000
|
unkown
|
page readonly
|
||
48A5E7E000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
7FF5210C0000
|
unkown
|
page readonly
|
||
20909D02000
|
unkown
|
page read and write
|
||
7FF572B90000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF5C7A02000
|
unkown
|
page readonly
|
||
7FF5D523F000
|
unkown
|
page readonly
|
||
2A47638A000
|
unkown
|
page read and write
|
||
7FF59E427000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
17B67654000
|
unkown
|
page read and write
|
||
2A47639B000
|
unkown
|
page read and write
|
||
7FF563BA2000
|
unkown
|
page readonly
|
||
7FF572B8A000
|
unkown
|
page readonly
|
||
2A47634A000
|
unkown
|
page read and write
|
||
2090A402000
|
unkown
|
page read and write
|
||
46DD2FF000
|
unkown
|
page read and write
|
||
2A476348000
|
unkown
|
page read and write
|
||
16E1F24D000
|
unkown
|
page read and write
|
||
7FF547833000
|
unkown
|
page readonly
|
||
2090ABC0000
|
unkown
|
page readonly
|
||
2090EF60000
|
unkown
|
page readonly
|
||
2A476344000
|
unkown
|
page read and write
|
||
7FF547797000
|
unkown
|
page readonly
|
||
17B69727000
|
unkown
|
page read and write
|
||
2A475A58000
|
unkown
|
page read and write
|
||
F3C79DF000
|
unkown
|
page read and write
|
||
7FF563BA7000
|
unkown
|
page readonly
|
||
17B69A02000
|
unkown
|
page read and write
|
||
7FF5C3F44000
|
unkown
|
page readonly
|
||
1F0E0130000
|
unkown
|
page readonly
|
||
2A4758F0000
|
unkown
|
page readonly
|
||
5ED3B7F000
|
unkown
|
page read and write
|
||
7FF572E31000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF5477FD000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF5C77B3000
|
unkown
|
page readonly
|
||
23EA9B70000
|
unkown
|
page readonly
|
||
7FF5D40F7000
|
unkown
|
page readonly
|
||
7FF5C792A000
|
unkown
|
page readonly
|
||
F3C7E79000
|
unkown
|
page read and write
|
||
17B67600000
|
unkown
|
page read and write
|
||
2A47633B000
|
unkown
|
page read and write
|
||
7FF527804000
|
unkown
|
page readonly
|
||
7FF55F1F1000
|
unkown
|
page readonly
|
||
46DCCFE000
|
unkown
|
page read and write
|
||
7FF5C7913000
|
unkown
|
page readonly
|
||
7FF5D54DB000
|
unkown
|
page readonly
|
||
2A475A29000
|
unkown
|
page read and write
|
||
17B69A82000
|
unkown
|
page read and write
|
||
2A476368000
|
unkown
|
page read and write
|
||
1732BA02000
|
unkown
|
page read and write
|
||
17B697C8000
|
unkown
|
page read and write
|
||
7FF547786000
|
unkown
|
page readonly
|
||
2A4763B1000
|
unkown
|
page read and write
|
||
2A476341000
|
unkown
|
page read and write
|
||
2090F4B5000
|
unkown
|
page read and write
|
||
7FF55F236000
|
unkown
|
page readonly
|
||
7FF547515000
|
unkown
|
page readonly
|
||
7FF5C3E67000
|
unkown
|
page readonly
|
||
7FF5275B4000
|
unkown
|
page readonly
|
||
7FF5C3D2A000
|
unkown
|
page readonly
|
||
7FF563AB3000
|
unkown
|
page readonly
|
||
2A476349000
|
unkown
|
page read and write
|
||
7FF572DA6000
|
unkown
|
page readonly
|
||
20909C76000
|
unkown
|
page read and write
|
||
7FF5D3F38000
|
unkown
|
page readonly
|
||
7FF5D3906000
|
unkown
|
page readonly
|
||
1F0E0200000
|
unkown
|
page read and write
|
||
7FF5D5328000
|
unkown
|
page readonly
|
||
7FF550C4D000
|
unkown
|
page readonly
|
||
2A475A4B000
|
unkown
|
page read and write
|
||
17B6A110000
|
unkown
|
page read and write
|
||
17B67850000
|
unkown
|
page readonly
|
||
7FF527814000
|
unkown
|
page readonly
|
||
2A475AEC000
|
unkown
|
page read and write
|
||
7FF5C78FF000
|
unkown
|
page readonly
|
||
20909C3D000
|
unkown
|
page read and write
|
||
7FF5C3F54000
|
unkown
|
page readonly
|
||
7FF521167000
|
unkown
|
page readonly
|
||
18C5062D000
|
unkown
|
page read and write
|
||
17B69790000
|
unkown
|
page read and write
|
||
7FF5D5456000
|
unkown
|
page readonly
|
||
2090F4B0000
|
unkown
|
page read and write
|
||
7E4E5FE000
|
unkown
|
page read and write
|
||
18C50620000
|
unkown
|
page read and write
|
||
7FF561A7B000
|
unkown
|
page readonly
|
||
7FF5639B5000
|
unkown
|
page readonly
|
||
2A476313000
|
unkown
|
page read and write
|
||
114378C000
|
unkown
|
page read and write
|
||
7FF527418000
|
unkown
|
page readonly
|
||
7FF52759B000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
2090F0D4000
|
unkown
|
page read and write
|
||
18C50628000
|
unkown
|
page read and write
|
||
48A5EF9000
|
unkown
|
page read and write
|
||
7FF572D35000
|
unkown
|
page readonly
|
||
2A476337000
|
unkown
|
page read and write
|
||
7FF5C3CBB000
|
unkown
|
page readonly
|
||
7FF572E87000
|
unkown
|
page readonly
|
||
23EA92B0000
|
unkown
|
page readonly
|
||
7FF5C78E4000
|
unkown
|
page readonly
|
||
7FF5D3E7C000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
1F0E2400000
|
unkown
|
page readonly
|
||
7FF52780D000
|
unkown
|
page readonly
|
||
214D3170000
|
unkown
|
page write copy
|
||
7FF5276F7000
|
unkown
|
page readonly
|
||
17B69460000
|
unkown
|
page read and write
|
||
7FF55EFDA000
|
unkown
|
page readonly
|
||
2A476343000
|
unkown
|
page read and write
|
||
1F0E0257000
|
unkown
|
page read and write
|
||
7FF5D40E6000
|
unkown
|
page readonly
|
||
23EA9308000
|
heap default
|
page read and write
|
||
7FF572C2D000
|
unkown
|
page readonly
|
||
16E1F270000
|
unkown
|
page read and write
|
||
7FF5C7A07000
|
unkown
|
page readonly
|
||
2A47638B000
|
unkown
|
page read and write
|
||
1F0E1D00000
|
unkown
|
page readonly
|
||
17B6A210000
|
unkown
|
page read and write
|
||
2090A3C0000
|
unkown
|
page read and write
|
||
7FF59E377000
|
unkown
|
page readonly
|
||
2A476341000
|
unkown
|
page read and write
|
||
7FF5D4D07000
|
unkown
|
page readonly
|
||
7FF520FDF000
|
unkown
|
page readonly
|
||
17B6A310000
|
unkown
|
page read and write
|
||
214D3200000
|
unkown
|
page read and write
|
||
17B67786000
|
unkown
|
page read and write
|
||
2A47635F000
|
unkown
|
page read and write
|
||
2A47632A000
|
unkown
|
page read and write
|
||
7FF55F233000
|
unkown
|
page readonly
|
||
7FF5211CE000
|
unkown
|
page readonly
|
||
20909BE0000
|
unkown
|
page read and write
|
||
17B69A00000
|
unkown
|
page read and write
|
||
7FF521274000
|
unkown
|
page readonly
|
||
2A476322000
|
unkown
|
page read and write
|
||
7FF5277AE000
|
unkown
|
page readonly
|
||
2A475A3C000
|
unkown
|
page read and write
|
||
7FF5C3E70000
|
unkown
|
page readonly
|
||
17B6A410000
|
unkown
|
page read and write
|
||
2A47633E000
|
unkown
|
page read and write
|
||
7FF52752F000
|
unkown
|
page readonly
|
||
7FF5C791D000
|
unkown
|
page readonly
|
||
2A475A81000
|
unkown
|
page read and write
|
||
20909C90000
|
unkown
|
page read and write
|
||
5BA3BFB000
|
unkown
|
page read and write
|
||
17B67510000
|
unkown
|
page readonly
|
||
7FF54780B000
|
unkown
|
page readonly
|
||
7FF550D07000
|
unkown
|
page readonly
|
||
7FF572B48000
|
unkown
|
page readonly
|
||
7FF54751F000
|
unkown
|
page readonly
|
||
16E1F24E000
|
unkown
|
page read and write
|
||
18C50618000
|
unkown
|
page read and write
|
||
B10577F000
|
unkown
|
page read and write
|
||
2A476344000
|
unkown
|
page read and write
|
||
2A476344000
|
unkown
|
page read and write
|
||
17B6971A000
|
unkown
|
page read and write
|
||
7FF572D05000
|
unkown
|
page readonly
|
||
17B6A110000
|
unkown
|
page read and write
|
||
7FF55F1F4000
|
unkown
|
page readonly
|
||
7FF5C3CCE000
|
unkown
|
page readonly
|
||
7FF5212B7000
|
unkown
|
page readonly
|
||
7FF527776000
|
unkown
|
page readonly
|
||
46DC7EB000
|
unkown
|
page read and write
|
||
23EA9F20000
|
unkown
|
page read and write
|
||
2A47638A000
|
unkown
|
page read and write
|
||
214D326F000
|
unkown
|
page read and write
|
||
7FF5D5506000
|
unkown
|
page readonly
|
||
7FF5C3CF4000
|
unkown
|
page readonly
|
||
1732B950000
|
unkown
|
page write copy
|
||
2A476347000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF55F242000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2090EF90000
|
unkown
|
page read and write
|
||
17B69700000
|
unkown
|
page read and write
|
||
7FF572BC0000
|
unkown
|
page readonly
|
||
7FF54756B000
|
unkown
|
page readonly
|
||
2A476368000
|
unkown
|
page read and write
|
||
7FF550AF6000
|
unkown
|
page readonly
|
||
7FF5C3E79000
|
unkown
|
page readonly
|
||
7FF563AC6000
|
unkown
|
page readonly
|
||
214D326E000
|
unkown
|
page read and write
|
||
7FF5504F7000
|
unkown
|
page readonly
|
||
7FF5C7764000
|
unkown
|
page readonly
|
||
2A476382000
|
unkown
|
page read and write
|
||
1F0E0650000
|
unkown
|
page readonly
|
||
7FF55F13F000
|
unkown
|
page readonly
|
||
7FF563657000
|
unkown
|
page readonly
|
||
2A476341000
|
unkown
|
page read and write
|
||
7FF572CC8000
|
unkown
|
page readonly
|
||
2A476399000
|
unkown
|
page read and write
|
||
17B6767B000
|
unkown
|
page read and write
|
||
20909BC1000
|
unkown
|
page read and write
|
||
16E1F24A000
|
unkown
|
page read and write
|
||
16E1F24B000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF59E3D4000
|
unkown
|
page readonly
|
||
7FF572C2F000
|
unkown
|
page readonly
|
||
16E1F213000
|
unkown
|
page read and write
|
||
7FF5C3E37000
|
unkown
|
page readonly
|
||
2A47635F000
|
unkown
|
page read and write
|
||
7FF5D53C5000
|
unkown
|
page readonly
|
||
2A476337000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
6CF8DFA000
|
unkown
|
page read and write
|
||
2A476381000
|
unkown
|
page read and write
|
||
17B67800000
|
unkown
|
page write copy
|
||
7FF5D40A7000
|
unkown
|
page readonly
|
||
2A476325000
|
unkown
|
page read and write
|
||
17B67629000
|
unkown
|
page read and write
|
||
7FF59E3D1000
|
unkown
|
page readonly
|
||
F3C84FD000
|
unkown
|
page read and write
|
||
17B67777000
|
unkown
|
page read and write
|
||
B1053FB000
|
unkown
|
page read and write
|
||
2A476341000
|
unkown
|
page read and write
|
||
7FF5C77C7000
|
unkown
|
page readonly
|
||
7FF527698000
|
unkown
|
page readonly
|
||
7FF563A9F000
|
unkown
|
page readonly
|
||
2A47634E000
|
unkown
|
page read and write
|
||
2090A559000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
2A476854000
|
unkown
|
page read and write
|
||
7FF5211BF000
|
unkown
|
page readonly
|
||
2090F1F0000
|
unkown
|
page read and write
|
||
1F0E02E0000
|
unkown
|
page read and write
|
||
20909BE3000
|
unkown
|
page read and write
|
||
93464FA000
|
unkown
|
page read and write
|
||
1143FFF000
|
unkown
|
page read and write
|
||
17B67613000
|
unkown
|
page read and write
|
||
17B6978A000
|
unkown
|
page read and write
|
||
7FF527047000
|
unkown
|
page readonly
|
||
5BA427D000
|
unkown
|
page read and write
|
||
7FF5D50D8000
|
unkown
|
page readonly
|
||
7FF5729FC000
|
unkown
|
page readonly
|
||
17B698C9000
|
unkown
|
page read and write
|
||
2090F0B0000
|
unkown
|
page read and write
|
||
7FF5D51E5000
|
unkown
|
page readonly
|
||
7FF5D4036000
|
unkown
|
page readonly
|
||
17B67679000
|
unkown
|
page read and write
|
||
163D9D30000
|
unkown
|
page readonly
|
||
2090F0F4000
|
unkown
|
page read and write
|
||
2A476360000
|
unkown
|
page read and write
|
||
18C505E0000
|
unkown
|
page readonly
|
||
20909C8B000
|
unkown
|
page read and write
|
||
1F0E0284000
|
unkown
|
page read and write
|
||
7FF563AED000
|
unkown
|
page readonly
|
||
7FF550D02000
|
unkown
|
page readonly
|
||
7FF52774F000
|
unkown
|
page readonly
|
||
7FF521277000
|
unkown
|
page readonly
|
||
2A47633B000
|
unkown
|
page read and write
|
||
7FF5C3DD8000
|
unkown
|
page readonly
|
||
17B697FA000
|
unkown
|
page read and write
|
||
7FF572E47000
|
unkown
|
page readonly
|
||
2A47637B000
|
unkown
|
page read and write
|
||
17B67713000
|
unkown
|
page read and write
|
||
7FF572E34000
|
unkown
|
page readonly
|
||
2A476348000
|
unkown
|
page read and write
|
||
7FF55F186000
|
unkown
|
page readonly
|
||
1732B880000
|
unkown
|
page readonly
|
||
2A47638A000
|
unkown
|
page read and write
|
||
2090F1A4000
|
unkown
|
page readonly
|
||
2A476369000
|
unkown
|
page read and write
|
||
7FF5C3C65000
|
unkown
|
page readonly
|
||
7FF572CC1000
|
unkown
|
page readonly
|
||
2090F41B000
|
unkown
|
page read and write
|
||
7FF5D545D000
|
unkown
|
page readonly
|
||
7FF5D3901000
|
unkown
|
page readonly
|
||
1F0E023F000
|
unkown
|
page read and write
|
||
1732BA00000
|
unkown
|
page read and write
|
||
1F0E2389000
|
unkown
|
page read and write
|
||
7FF5C78B7000
|
unkown
|
page readonly
|
||
2A476348000
|
unkown
|
page read and write
|
||
2A476361000
|
unkown
|
page read and write
|
||
7FF563BA7000
|
unkown
|
page readonly
|
||
7FF550CC7000
|
unkown
|
page readonly
|
||
2A475A5A000
|
unkown
|
page read and write
|
||
1DF98E00000
|
unkown
|
page read and write
|
||
7FF55E8B2000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2A4760E0000
|
unkown
|
page readonly
|
||
2A47635F000
|
unkown
|
page read and write
|
||
20909C86000
|
unkown
|
page read and write
|
||
17B69900000
|
unkown
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
17B69943000
|
unkown
|
page read and write
|
||
2A476341000
|
unkown
|
page read and write
|
||
7FF550A2B000
|
unkown
|
page readonly
|
||
7FF572DB2000
|
unkown
|
page readonly
|
||
20505960000
|
unkown
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
7FF5C3DA0000
|
unkown
|
page readonly
|
||
18C5062D000
|
unkown
|
page read and write
|
||
20505A4D000
|
unkown
|
page read and write
|
||
2A476360000
|
unkown
|
page read and write
|
||
214D3267000
|
unkown
|
page read and write
|
||
7FF52782A000
|
unkown
|
page readonly
|
||
2090F210000
|
unkown
|
page read and write
|
||
7FF55F058000
|
unkown
|
page readonly
|
||
7FF5508DA000
|
unkown
|
page readonly
|
||
7FF572673000
|
unkown
|
page readonly
|
||
46DD7FB000
|
unkown
|
page read and write
|
||
20505A00000
|
unkown
|
page read and write
|
||
17B676CF000
|
unkown
|
page read and write
|
||
16E1F26C000
|
unkown
|
page read and write
|
||
2A475A9F000
|
unkown
|
page read and write
|
||
214D3254000
|
unkown
|
page read and write
|
||
2A47639E000
|
unkown
|
page read and write
|
||
2A476356000
|
unkown
|
page read and write
|
||
7FF5D5467000
|
unkown
|
page readonly
|
||
17B69748000
|
unkown
|
page read and write
|
||
20505C00000
|
unkown
|
page readonly
|
||
7FF5D3862000
|
unkown
|
page readonly
|
||
5BA3F7A000
|
unkown
|
page read and write
|
||
7FF52127B000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF5612C1000
|
unkown
|
page readonly
|
||
17B697E8000
|
unkown
|
page read and write
|
||
7FF59E3EB000
|
unkown
|
page readonly
|
||
2A47633B000
|
unkown
|
page read and write
|
||
17B694D0000
|
unkown
|
page read and write
|
||
17B69B02000
|
unkown
|
page read and write
|
||
17B69800000
|
unkown
|
page read and write
|
||
7FF59E3D7000
|
unkown
|
page readonly
|
||
7FF59E3E4000
|
unkown
|
page readonly
|
||
23EAA190000
|
unkown
|
page read and write
|
||
1DF98DA0000
|
heap default
|
page read and write
|
||
F3C82F8000
|
unkown
|
page read and write
|
||
17B698A4000
|
unkown
|
page read and write
|
||
7FF521207000
|
unkown
|
page readonly
|
||
23EA92F6000
|
heap default
|
page read and write
|
||
7FF5C3CBF000
|
unkown
|
page readonly
|
||
7FF572E44000
|
unkown
|
page readonly
|
||
16E1F26C000
|
unkown
|
page read and write
|
||
17B6A110000
|
unkown
|
page read and write
|
||
17B676C8000
|
unkown
|
page read and write
|
||
2A47634D000
|
unkown
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
46DCFFB000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
1DF98E29000
|
unkown
|
page read and write
|
||
7FF5C3F97000
|
unkown
|
page readonly
|
||
2A475AD4000
|
unkown
|
page read and write
|
||
7FF527763000
|
unkown
|
page readonly
|
||
20505A6C000
|
unkown
|
page read and write
|
||
7FF547799000
|
unkown
|
page readonly
|
||
5BA397A000
|
unkown
|
page read and write
|
||
17B67746000
|
unkown
|
page read and write
|
||
20505A3C000
|
unkown
|
page read and write
|
||
7FF5212A6000
|
unkown
|
page readonly
|
||
7FF563AF9000
|
unkown
|
page readonly
|
||
2A476802000
|
unkown
|
page read and write
|
||
20505CD0000
|
unkown
|
page readonly
|
||
2A475A13000
|
unkown
|
page read and write
|
||
20909B40000
|
unkown
|
page readonly
|
||
2090F4B8000
|
unkown
|
page read and write
|
||
16E1F860000
|
unkown
|
page readonly
|
||
6CF8E7F000
|
unkown
|
page read and write
|
||
7FF5509DF000
|
unkown
|
page readonly
|
||
7FF521267000
|
unkown
|
page readonly
|
||
2A476337000
|
unkown
|
page read and write
|
||
2090F4B5000
|
unkown
|
page read and write
|
||
17B69B82000
|
unkown
|
page read and write
|
||
7FF5D54EA000
|
unkown
|
page readonly
|
||
7FF5D40A1000
|
unkown
|
page readonly
|
||
2090F180000
|
unkown
|
page write copy
|
||
2A476338000
|
unkown
|
page read and write
|
||
20D48EC7000
|
heap default
|
page read and write
|
||
7FF527739000
|
unkown
|
page readonly
|
||
2A47634D000
|
unkown
|
page read and write
|
||
7FF5C7810000
|
unkown
|
page readonly
|
||
2A476399000
|
unkown
|
page read and write
|
||
2A476090000
|
unkown
|
page write copy
|
||
214D4BA0000
|
unkown
|
page read and write
|
||
16E1F229000
|
unkown
|
page read and write
|
||
2090F1E0000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
16E1F0A0000
|
unkown
|
page readonly
|
||
2090F4AE000
|
unkown
|
page read and write
|
||
1F0E0281000
|
unkown
|
page read and write
|
||
2A476361000
|
unkown
|
page read and write
|
||
1F0E2318000
|
unkown
|
page read and write
|
||
7FF5C3EBA000
|
unkown
|
page readonly
|
||
7FF5D40A4000
|
unkown
|
page readonly
|
||
7FF572BE4000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
20D48CE0000
|
unkown
|
page readonly
|
||
17B676F2000
|
unkown
|
page read and write
|
||
2A47633F000
|
unkown
|
page read and write
|
||
7FF520F85000
|
unkown
|
page readonly
|
||
2A47633F000
|
unkown
|
page read and write
|
||
2A47639A000
|
unkown
|
page read and write
|
||
1C73F7F000
|
unkown
|
page read and write
|
||
2A476337000
|
unkown
|
page read and write
|
||
214D3268000
|
unkown
|
page read and write
|
||
2A476363000
|
unkown
|
page read and write
|
||
7FF520AA7000
|
unkown
|
page readonly
|
||
1732BA6C000
|
unkown
|
page read and write
|
||
16E1FC00000
|
unkown
|
page readonly
|
||
7FF561A77000
|
unkown
|
page readonly
|
||
7FF5C79B4000
|
unkown
|
page readonly
|
||
2A47634A000
|
unkown
|
page read and write
|
||
16E1F200000
|
unkown
|
page read and write
|
||
7FF572A45000
|
unkown
|
page readonly
|
||
5BA417E000
|
unkown
|
page read and write
|
||
7FF5C3C82000
|
unkown
|
page readonly
|
||
2A475880000
|
heap private
|
page read and write
|
||
1F0E2080000
|
unkown
|
page readonly
|
||
7FF5C7211000
|
unkown
|
page readonly
|
||
7FF550BB7000
|
unkown
|
page readonly
|
||
2A476344000
|
unkown
|
page read and write
|
||
7FF5B8F9B000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
2090F462000
|
unkown
|
page read and write
|
||
7FF5211E2000
|
unkown
|
page readonly
|
||
17B694D0000
|
unkown
|
page read and write
|
||
1732B870000
|
heap default
|
page read and write
|
||
2A476343000
|
unkown
|
page read and write
|
||
7FF5C79DA000
|
unkown
|
page readonly
|
||
2A475A50000
|
unkown
|
page read and write
|
||
7FF5C7946000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
18C50612000
|
unkown
|
page read and write
|
||
7FF5C71C6000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
1DF992D0000
|
unkown
|
page readonly
|
||
17B67674000
|
unkown
|
page read and write
|
||
1DF990D0000
|
unkown
|
page readonly
|
||
7FF5D4016000
|
unkown
|
page readonly
|
||
2090F210000
|
unkown
|
page readonly
|
||
7FF5619CE000
|
unkown
|
page readonly
|
||
18C50620000
|
unkown
|
page read and write
|
||
2A476347000
|
unkown
|
page read and write
|
||
7FF563651000
|
unkown
|
page readonly
|
||
7FF563AE6000
|
unkown
|
page readonly
|
||
2A476349000
|
unkown
|
page read and write
|
||
7FF5C77F6000
|
unkown
|
page readonly
|
||
1DF98F02000
|
unkown
|
page read and write
|
||
7FF5C7815000
|
unkown
|
page readonly
|
||
2A476378000
|
unkown
|
page read and write
|
||
7FF5275EA000
|
unkown
|
page readonly
|
||
16E1F28B000
|
unkown
|
page read and write
|
||
7FF52758E000
|
unkown
|
page readonly
|
||
7FF5C3F57000
|
unkown
|
page readonly
|
||
2A475A57000
|
unkown
|
page read and write
|
||
2A475AAA000
|
unkown
|
page read and write
|
||
214D3269000
|
unkown
|
page read and write
|
||
5B8A99F000
|
unkown
|
page read and write
|
||
1DF98E59000
|
unkown
|
page read and write
|
||
2A476344000
|
unkown
|
page read and write
|
||
2A475AA6000
|
unkown
|
page read and write
|
||
1F0E0313000
|
unkown
|
page read and write
|
||
2090A518000
|
unkown
|
page read and write
|
||
2A47681D000
|
unkown
|
page read and write
|
||
17B690F0000
|
unkown
|
page readonly
|
||
2090AAE0000
|
unkown
|
page read and write
|
||
7FF5C3756000
|
unkown
|
page readonly
|
||
9345F9B000
|
unkown
|
page read and write
|
||
1F0E0229000
|
unkown
|
page read and write
|
||
7FF5D54CD000
|
unkown
|
page readonly
|
||
2A476361000
|
unkown
|
page read and write
|
||
2A475A49000
|
unkown
|
page read and write
|
||
7FF5212B2000
|
unkown
|
page readonly
|
||
2090A559000
|
unkown
|
page read and write
|
||
7FF5C7A07000
|
unkown
|
page readonly
|
||
2090A518000
|
unkown
|
page read and write
|
||
7FF572D60000
|
unkown
|
page readonly
|
||
2A475B02000
|
unkown
|
page read and write
|
||
2A476344000
|
unkown
|
page read and write
|
||
17B69853000
|
unkown
|
page read and write
|
||
2A476100000
|
unkown
|
page read and write
|
||
7FF59E335000
|
unkown
|
page readonly
|
||
48A5BBE000
|
unkown
|
page read and write
|
||
7FF572E82000
|
unkown
|
page readonly
|
||
F3C8178000
|
unkown
|
page read and write
|
||
1732BA29000
|
unkown
|
page read and write
|
||
7FF5D51EF000
|
unkown
|
page readonly
|
||
7FF5C774B000
|
unkown
|
page readonly
|
||
205058D0000
|
heap private
|
page read and write
|
||
46DCA7D000
|
unkown
|
page read and write
|
||
7FF5C3F86000
|
unkown
|
page readonly
|
||
7FF5619FD000
|
unkown
|
page readonly
|
||
1732BA42000
|
unkown
|
page read and write
|
||
7FF572C27000
|
unkown
|
page readonly
|
||
2A476202000
|
unkown
|
page read and write
|
||
20D48C80000
|
unkown
|
page readonly
|
||
7FF5619C3000
|
unkown
|
page readonly
|
||
7FF5D54D7000
|
unkown
|
page readonly
|
||
46DCEFF000
|
unkown
|
page read and write
|
||
163D9E4A000
|
unkown
|
page read and write
|
||
7FF5D50E6000
|
unkown
|
page readonly
|
||
9346379000
|
unkown
|
page read and write
|
||
7FF55F247000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
2A47633F000
|
unkown
|
page read and write
|
||
7FF59E379000
|
unkown
|
page readonly
|
||
7FF59E346000
|
unkown
|
page readonly
|
||
1F0E2349000
|
unkown
|
page read and write
|
||
7FF563811000
|
unkown
|
page readonly
|
||
1DF98E13000
|
unkown
|
page read and write
|
||
2090F1A7000
|
unkown
|
page readonly
|
||
48A5F7B000
|
unkown
|
page read and write
|
||
18C505A0000
|
unkown
|
page read and write
|
||
1F0E0400000
|
unkown
|
page write copy
|
||
17B69470000
|
heap private
|
page read and write
|
||
20D48E65000
|
heap private
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2A476380000
|
unkown
|
page read and write
|
||
2A47634D000
|
unkown
|
page read and write
|
||
23EA92C7000
|
heap default
|
page read and write
|
||
7FF5D523B000
|
unkown
|
page readonly
|
||
CC4A1FA000
|
unkown
|
page read and write
|
||
163DB7A0000
|
unkown
|
page read and write
|
||
1732BA70000
|
unkown
|
page read and write
|
||
17B6769F000
|
unkown
|
page read and write
|
||
7FF550CBD000
|
unkown
|
page readonly
|
||
17B677B9000
|
unkown
|
page read and write
|
||
2A47633E000
|
unkown
|
page read and write
|
||
23EA9EB0000
|
unkown
|
page read and write
|
||
5BA3CFB000
|
unkown
|
page read and write
|
||
B10567E000
|
unkown
|
page read and write
|
||
5ED3C79000
|
unkown
|
page read and write
|
||
2A47639F000
|
unkown
|
page read and write
|
||
23EA9EC0000
|
unkown
|
page read and write
|
||
1F0E026F000
|
unkown
|
page read and write
|
||
1732BA6C000
|
unkown
|
page read and write
|
||
23EA9640000
|
unkown
|
page readonly
|
||
7FF5C3A76000
|
unkown
|
page readonly
|
||
17B67734000
|
unkown
|
page read and write
|
||
7FF527782000
|
unkown
|
page readonly
|
||
7FF5D40CA000
|
unkown
|
page readonly
|
||
7FF56393A000
|
unkown
|
page readonly
|
||
2A476368000
|
unkown
|
page read and write
|
||
5BA31BE000
|
unkown
|
page read and write
|
||
7FF52757F000
|
unkown
|
page readonly
|
||
2A476399000
|
unkown
|
page read and write
|
||
214D3202000
|
unkown
|
page read and write
|
||
17B697EB000
|
unkown
|
page read and write
|
||
7FF563B67000
|
unkown
|
page readonly
|
||
7FF527744000
|
unkown
|
page readonly
|
||
2090EFB0000
|
unkown
|
page read and write
|
||
2A476348000
|
unkown
|
page read and write
|
||
2A476380000
|
unkown
|
page read and write
|
||
17B6A410000
|
unkown
|
page read and write
|
||
20D48EDA000
|
unkown
|
page read and write
|
||
7FF55F197000
|
unkown
|
page readonly
|
||
46DCC77000
|
unkown
|
page read and write
|
||
7FF52128A000
|
unkown
|
page readonly
|
||
7FF55F16A000
|
unkown
|
page readonly
|
||
7FF563B93000
|
unkown
|
page readonly
|
||
93462FE000
|
unkown
|
page read and write
|
||
7FF520FDB000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
7FF527542000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
5BA387A000
|
unkown
|
page read and write
|
||
7FF520E86000
|
unkown
|
page readonly
|
||
17B694D0000
|
unkown
|
page readonly
|
||
7FF550C26000
|
unkown
|
page readonly
|
||
7E4E47C000
|
unkown
|
page read and write
|
||
2090A400000
|
unkown
|
page read and write
|
||
2090F4AC000
|
unkown
|
page read and write
|
||
7FF5C790F000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
5B8AE7F000
|
unkown
|
page read and write
|
||
7FF5C79BD000
|
unkown
|
page readonly
|
||
7FF572D81000
|
unkown
|
page readonly
|
||
1732BC00000
|
unkown
|
page readonly
|
||
2A475A00000
|
unkown
|
page read and write
|
||
46DCDFA000
|
unkown
|
page read and write
|
||
2A476390000
|
unkown
|
page read and write
|
||
7FF572D57000
|
unkown
|
page readonly
|
||
7FF547804000
|
unkown
|
page readonly
|
||
7FF527734000
|
unkown
|
page readonly
|
||
2090F1B4000
|
unkown
|
page write copy
|
||
7FF572DDE000
|
unkown
|
page readonly
|
||
2A47637D000
|
unkown
|
page read and write
|
||
7FF572D93000
|
unkown
|
page readonly
|
||
17B67736000
|
unkown
|
page read and write
|
||
7FF561A8A000
|
unkown
|
page readonly
|
||
2A47633F000
|
unkown
|
page read and write
|
||
2A476348000
|
unkown
|
page read and write
|
||
2A476368000
|
unkown
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
2A476383000
|
unkown
|
page read and write
|
||
7FF5C3787000
|
unkown
|
page readonly
|
||
2A47634D000
|
unkown
|
page read and write
|
||
1F0E2389000
|
unkown
|
page read and write
|
||
7FF5D4047000
|
unkown
|
page readonly
|
||
7FF572D54000
|
unkown
|
page readonly
|
||
5BA3AFC000
|
unkown
|
page read and write
|
||
B10547F000
|
unkown
|
page read and write
|
||
2A475A88000
|
unkown
|
page read and write
|
||
20909CF8000
|
unkown
|
page read and write
|
||
214D326C000
|
unkown
|
page read and write
|
||
214D326F000
|
unkown
|
page read and write
|
||
16E1F300000
|
unkown
|
page read and write
|
||
2A475AC3000
|
unkown
|
page read and write
|
||
7FF572DC6000
|
unkown
|
page readonly
|
||
23EA931F000
|
unkown
|
page read and write
|
||
17B677B7000
|
unkown
|
page read and write
|
||
2A47634D000
|
unkown
|
page read and write
|
||
7FF527016000
|
unkown
|
page readonly
|
||
6CF8D79000
|
unkown
|
page read and write
|
||
2A476A00000
|
unkown
|
page readonly
|
||
163D9E57000
|
unkown
|
page read and write
|
||
7FF561A61000
|
unkown
|
page readonly
|
||
2A476347000
|
unkown
|
page read and write
|
||
2A476360000
|
unkown
|
page read and write
|
||
2A476070000
|
unkown
|
page readonly
|
||
17B698C9000
|
unkown
|
page read and write
|
||
7FF5C77AD000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2090F260000
|
unkown
|
page readonly
|
||
7FF5D54C4000
|
unkown
|
page readonly
|
||
7FF5D38FD000
|
unkown
|
page readonly
|
||
7FF5C74B7000
|
unkown
|
page readonly
|
||
2A476335000
|
unkown
|
page read and write
|
||
2A476341000
|
unkown
|
page read and write
|
||
23EAA1A0000
|
unkown
|
page read and write
|
||
7FF5C779A000
|
unkown
|
page readonly
|
||
7FF55E8B8000
|
unkown
|
page readonly
|
||
7FF572C4E000
|
unkown
|
page readonly
|
||
2A4763C3000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
7FF54756F000
|
unkown
|
page readonly
|
||
46DD1FF000
|
unkown
|
page read and write
|
||
F3C83FA000
|
unkown
|
page read and write
|
||
7FF59E3FA000
|
unkown
|
page readonly
|
||
2A476343000
|
unkown
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
20909A50000
|
heap default
|
page read and write
|
||
2A476360000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
7FF572838000
|
unkown
|
page readonly
|
||
7FF5D5320000
|
unkown
|
page readonly
|
||
7FF5D54D4000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
20505A4A000
|
unkown
|
page read and write
|
||
6CF8C7E000
|
unkown
|
page read and write
|
||
7FF52779D000
|
unkown
|
page readonly
|
||
2A47634D000
|
unkown
|
page read and write
|
||
1F0E20F0000
|
unkown
|
page read and write
|
||
7FF5D54C7000
|
unkown
|
page readonly
|
||
7FF5D40B4000
|
unkown
|
page readonly
|
||
7FF572E73000
|
unkown
|
page readonly
|
||
7FF527705000
|
unkown
|
page readonly
|
||
7FF572D7F000
|
unkown
|
page readonly
|
||
20506202000
|
unkown
|
page read and write
|
||
1DF98E40000
|
unkown
|
page read and write
|
||
2090F4B8000
|
unkown
|
page read and write
|
||
17B6A110000
|
unkown
|
page read and write
|
||
20909D13000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
214D326F000
|
unkown
|
page read and write
|
||
7FF527730000
|
unkown
|
page readonly
|
||
7FF55F172000
|
unkown
|
page readonly
|
||
16E1F170000
|
unkown
|
page readonly
|
||
1732BA6C000
|
unkown
|
page read and write
|
||
1143EFE000
|
unkown
|
page read and write
|
||
7FF55F207000
|
unkown
|
page readonly
|
||
5ED3BFF000
|
unkown
|
page read and write
|
||
7FF561A09000
|
unkown
|
page readonly
|
||
23EA9290000
|
unkown
|
page read and write
|
||
B1052F5000
|
unkown
|
page read and write
|
||
5BA3A7A000
|
unkown
|
page read and write
|
||
2A47636A000
|
unkown
|
page read and write
|
||
7FF561AA3000
|
unkown
|
page readonly
|
||
48A5FFF000
|
unkown
|
page read and write
|
||
18C50607000
|
heap default
|
page read and write
|
||
17B697FA000
|
unkown
|
page read and write
|
||
7FF55F21A000
|
unkown
|
page readonly
|
||
2A476337000
|
unkown
|
page read and write
|
||
7FF5D403D000
|
unkown
|
page readonly
|
||
7FF5C3F4D000
|
unkown
|
page readonly
|
||
7E4E67B000
|
unkown
|
page read and write
|
||
46DD07F000
|
unkown
|
page read and write
|
||
2A475A52000
|
unkown
|
page read and write
|
||
1732BA6C000
|
unkown
|
page read and write
|
||
2A4759C0000
|
unkown
|
page readonly
|
||
2A476348000
|
unkown
|
page read and write
|
||
7FF5C3F83000
|
unkown
|
page readonly
|
||
18C5062D000
|
unkown
|
page read and write
|
||
7FF563996000
|
unkown
|
page readonly
|
||
7FF55F036000
|
unkown
|
page readonly
|
||
1F0E20E0000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF527336000
|
unkown
|
page readonly
|
||
5ED3A7A000
|
unkown
|
page read and write
|
||
7FF55F20B000
|
unkown
|
page readonly
|
||
7FF550C59000
|
unkown
|
page readonly
|
||
17B69C00000
|
unkown
|
page readonly
|
||
7FF520E8A000
|
unkown
|
page readonly
|
||
7FF5C794D000
|
unkown
|
page readonly
|
||
16E1F24F000
|
unkown
|
page read and write
|
||
2090F0B8000
|
unkown
|
page read and write
|
||
2090A190000
|
unkown
|
page readonly
|
||
2A476368000
|
unkown
|
page read and write
|
||
7E4E6F9000
|
unkown
|
page read and write
|
||
7FF527668000
|
unkown
|
page readonly
|
||
2A476368000
|
unkown
|
page read and write
|
||
214D3268000
|
unkown
|
page read and write
|
||
2A475ADF000
|
unkown
|
page read and write
|
||
214D3267000
|
unkown
|
page read and write
|
||
7FF572D69000
|
unkown
|
page readonly
|
||
2A476381000
|
unkown
|
page read and write
|
||
2A476376000
|
unkown
|
page read and write
|
||
1F0E0302000
|
unkown
|
page read and write
|
||
163D9E13000
|
unkown
|
page read and write
|
||
7FF55EEB1000
|
unkown
|
page readonly
|
||
18C50845000
|
heap private
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
7FF572B55000
|
unkown
|
page readonly
|
||
7FF563218000
|
unkown
|
page readonly
|
||
7FF550CB7000
|
unkown
|
page readonly
|
||
2090F0D0000
|
unkown
|
page read and write
|
||
23EA931F000
|
unkown
|
page read and write
|
||
2A476385000
|
unkown
|
page read and write
|
||
2A476365000
|
unkown
|
page read and write
|
||
16E1F090000
|
heap default
|
page read and write
|
||
2090F270000
|
unkown
|
page readonly
|
||
2A47638C000
|
unkown
|
page read and write
|
||
7FF547847000
|
unkown
|
page readonly
|
||
2A476369000
|
unkown
|
page read and write
|
||
2090F184000
|
unkown
|
page readonly
|
||
2A476802000
|
unkown
|
page read and write
|
||
7FF527660000
|
unkown
|
page readonly
|
||
2A476355000
|
unkown
|
page read and write
|
||
B105577000
|
unkown
|
page read and write
|
||
2090F429000
|
unkown
|
page read and write
|
||
2A476380000
|
unkown
|
page read and write
|
||
7FF5C3B66000
|
unkown
|
page readonly
|
||
5BA357B000
|
unkown
|
page read and write
|
||
23EA92C0000
|
heap default
|
page read and write
|
||
46DD3FA000
|
unkown
|
page read and write
|
||
17B6A410000
|
unkown
|
page read and write
|
||
2A475A4F000
|
unkown
|
page read and write
|
||
7FF5C3E45000
|
unkown
|
page readonly
|
||
7FF5C3DA8000
|
unkown
|
page readonly
|
||
2A476344000
|
unkown
|
page read and write
|
||
2090AF60000
|
unkown
|
page read and write
|
||
1F0E0278000
|
unkown
|
page read and write
|
||
5BA42FC000
|
unkown
|
page read and write
|
||
7FF5D3FEF000
|
unkown
|
page readonly
|
||
1F0E2349000
|
unkown
|
page read and write
|
||
2A47634D000
|
unkown
|
page read and write
|
||
7FF5C7078000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
7FF55F1FD000
|
unkown
|
page readonly
|
||
7FF5C3EB6000
|
unkown
|
page readonly
|
||
20D48E60000
|
heap private
|
page read and write
|
||
7FF572C57000
|
unkown
|
page readonly
|
||
163D9F02000
|
unkown
|
page read and write
|
||
23EAA180000
|
unkown
|
page readonly
|
||
17B694C0000
|
unkown
|
page readonly
|
||
7FF572E37000
|
unkown
|
page readonly
|
||
2A476385000
|
unkown
|
page read and write
|
||
7FF563B57000
|
unkown
|
page readonly
|
||
7FF527817000
|
unkown
|
page readonly
|
||
20909C13000
|
unkown
|
page read and write
|
||
2A476335000
|
unkown
|
page read and write
|
||
7FF5725F9000
|
unkown
|
page readonly
|
||
7FF52126D000
|
unkown
|
page readonly
|
||
2A476335000
|
unkown
|
page read and write
|
||
20D48FC0000
|
unkown
|
page readonly
|
||
93463F9000
|
unkown
|
page read and write
|
||
2A476337000
|
unkown
|
page read and write
|
||
20909C00000
|
unkown
|
page read and write
|
||
7FF5D3F31000
|
unkown
|
page readonly
|
||
7FF55ECF7000
|
unkown
|
page readonly
|
||
7FF5212B7000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
16E1F308000
|
unkown
|
page read and write
|
||
7FF5D38AC000
|
unkown
|
page readonly
|
||
7FF55F007000
|
unkown
|
page readonly
|
||
7FF52102F000
|
unkown
|
page readonly
|
||
7FF5210C8000
|
unkown
|
page readonly
|
||
2A476300000
|
unkown
|
page read and write
|
||
7FF572D64000
|
unkown
|
page readonly
|
||
7FF5639E8000
|
unkown
|
page readonly
|
||
7FF550A7F000
|
unkown
|
page readonly
|
||
7FF572E5A000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF5C7818000
|
unkown
|
page readonly
|
||
46DD17E000
|
unkown
|
page read and write
|
||
7FF5C3C89000
|
unkown
|
page readonly
|
||
2A476348000
|
unkown
|
page read and write
|
||
2A47633B000
|
unkown
|
page read and write
|
||
1C7417D000
|
unkown
|
page read and write
|
||
F3C795C000
|
unkown
|
page read and write
|
||
7FF527852000
|
unkown
|
page readonly
|
||
1C7407A000
|
unkown
|
page read and write
|
||
2090F400000
|
unkown
|
page read and write
|
||
2090F1C0000
|
unkown
|
page read and write
|
||
20505A2A000
|
unkown
|
page read and write
|
||
2090F43D000
|
unkown
|
page read and write
|
||
7FF572DCD000
|
unkown
|
page readonly
|
||
7FF572646000
|
unkown
|
page readonly
|
||
CC4A27F000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
17B676F8000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF5C3CDB000
|
unkown
|
page readonly
|
||
2A47634D000
|
unkown
|
page read and write
|
||
17B69812000
|
unkown
|
page read and write
|
||
7FF5D5423000
|
unkown
|
page readonly
|
||
7FF5C71E0000
|
unkown
|
page readonly
|
||
7FF563212000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
7FF527701000
|
unkown
|
page readonly
|
||
214D31C0000
|
unkown
|
page readonly
|
||
7FF5D528F000
|
unkown
|
page readonly
|
||
7E4E7FE000
|
unkown
|
page read and write
|
||
7FF550BB5000
|
unkown
|
page readonly
|
||
17B69B42000
|
unkown
|
page read and write
|
||
7FF5C7957000
|
unkown
|
page readonly
|
||
7FF56373B000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
17B676F6000
|
unkown
|
page read and write
|
||
17B67500000
|
heap default
|
page read and write
|
||
16E1F400000
|
unkown
|
page readonly
|
||
7FF572DD9000
|
unkown
|
page readonly
|
||
7FF572D74000
|
unkown
|
page readonly
|
||
7FF561290000
|
unkown
|
page readonly
|
||
1F0E02FE000
|
unkown
|
page read and write
|
||
7FF5475BF000
|
unkown
|
page readonly
|
||
2090F0D1000
|
unkown
|
page read and write
|
||
17B6771D000
|
unkown
|
page read and write
|
||
17B6766D000
|
unkown
|
page read and write
|
||
2090F4B5000
|
unkown
|
page read and write
|
||
7FF5D541F000
|
unkown
|
page readonly
|
||
7FF520E78000
|
unkown
|
page readonly
|
||
7FF5210A6000
|
unkown
|
page readonly
|
||
7FF527751000
|
unkown
|
page readonly
|
||
7FF5C7710000
|
unkown
|
page readonly
|
||
2A476360000
|
unkown
|
page read and write
|
||
2A476399000
|
unkown
|
page read and write
|
||
2A476861000
|
unkown
|
page read and write
|
||
23EA9F30000
|
unkown
|
page read and write
|
||
7FF5C78E9000
|
unkown
|
page readonly
|
||
1DF9A980000
|
unkown
|
page readonly
|
||
7FF527796000
|
unkown
|
page readonly
|
||
7FF550C46000
|
unkown
|
page readonly
|
||
93465FB000
|
unkown
|
page read and write
|
||
7FF561A74000
|
unkown
|
page readonly
|
||
7FF550CB4000
|
unkown
|
page readonly
|
||
2A476100000
|
unkown
|
page read and write
|
||
16E1FA02000
|
unkown
|
page read and write
|
||
7FF5D3F08000
|
unkown
|
page readonly
|
||
2090A500000
|
unkown
|
page read and write
|
||
1C73EFF000
|
unkown
|
page read and write
|
||
2A476391000
|
unkown
|
page read and write
|
||
2A476339000
|
unkown
|
page read and write
|
||
1C73E7A000
|
unkown
|
page read and write
|
||
7FF550C32000
|
unkown
|
page readonly
|
||
2A476340000
|
unkown
|
page read and write
|
||
5B8AD7F000
|
unkown
|
page read and write
|
||
7FF572DAA000
|
unkown
|
page readonly
|
||
2A476393000
|
unkown
|
page read and write
|
||
5B8A91F000
|
unkown
|
page read and write
|
||
17B69B00000
|
unkown
|
page read and write
|
||
2A475AF6000
|
unkown
|
page read and write
|
||
20505940000
|
unkown
|
page readonly
|
||
7FF5C3EE7000
|
unkown
|
page readonly
|
||
7FF5D5517000
|
unkown
|
page readonly
|
||
2A47633D000
|
unkown
|
page read and write
|
||
2A475C00000
|
unkown
|
page readonly
|
||
17B69716000
|
unkown
|
page read and write
|
||
6CF898B000
|
unkown
|
page read and write
|
||
7FF5C7959000
|
unkown
|
page readonly
|
||
7FF572BBE000
|
unkown
|
page readonly
|
||
2090F49D000
|
unkown
|
page read and write
|
||
2A476372000
|
unkown
|
page read and write
|
||
2090F0F0000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2090F0E0000
|
unkown
|
page read and write
|
||
2A476340000
|
unkown
|
page read and write
|
||
7FF5729B2000
|
unkown
|
page readonly
|
||
1732BB00000
|
unkown
|
page read and write
|
||
20909C73000
|
unkown
|
page read and write
|
||
7FF55F247000
|
unkown
|
page readonly
|
||
17B6772F000
|
unkown
|
page read and write
|
||
18C50627000
|
unkown
|
page read and write
|
||
17B697AF000
|
unkown
|
page read and write
|
||
7FF54778D000
|
unkown
|
page readonly
|
||
1F0E2202000
|
unkown
|
page read and write
|
||
7FF5729E2000
|
unkown
|
page readonly
|
||
2A476332000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
2090ABF0000
|
unkown
|
page readonly
|
||
934657B000
|
unkown
|
page read and write
|
||
7FF52775F000
|
unkown
|
page readonly
|
||
2A47638A000
|
unkown
|
page read and write
|
||
48A60FC000
|
unkown
|
page read and write
|
||
7FF572B33000
|
unkown
|
page readonly
|
||
20505950000
|
unkown
|
page readonly
|
||
7E4E77F000
|
unkown
|
page read and write
|
||
2A476802000
|
unkown
|
page read and write
|
||
18C50850000
|
unkown
|
page readonly
|
||
7FF5D5306000
|
unkown
|
page readonly
|
||
CC4A2FE000
|
unkown
|
page read and write
|
||
2A476343000
|
unkown
|
page read and write
|
||
17B69983000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
2090EFA0000
|
unkown
|
page read and write
|
||
2A476348000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
2A476382000
|
unkown
|
page read and write
|
||
7FF5D50EA000
|
unkown
|
page readonly
|
||
214D3271000
|
unkown
|
page read and write
|
||
7FF547658000
|
unkown
|
page readonly
|
||
18C505FB000
|
heap default
|
page read and write
|
||
1F0E0450000
|
unkown
|
page readonly
|
||
7FF55F1F7000
|
unkown
|
page readonly
|
||
7FF5C7486000
|
unkown
|
page readonly
|
||
5BA37FA000
|
unkown
|
page read and write
|
||
23EA9230000
|
unkown
|
page read and write
|
||
7FF5C3B6A000
|
unkown
|
page readonly
|
||
1F0E2120000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
2A476344000
|
unkown
|
page read and write
|
||
7FF572B5F000
|
unkown
|
page readonly
|
||
20505B13000
|
unkown
|
page read and write
|
||
2A47636E000
|
unkown
|
page read and write
|
||
1732BA27000
|
unkown
|
page read and write
|
||
2A476364000
|
unkown
|
page read and write
|
||
7FF5277A7000
|
unkown
|
page readonly
|
||
2090F210000
|
unkown
|
page read and write
|
||
7FF572709000
|
unkown
|
page readonly
|
||
7FF572A1B000
|
unkown
|
page readonly
|
||
2090F44A000
|
unkown
|
page read and write
|
||
2A476341000
|
unkown
|
page read and write
|
||
5ED36BB000
|
unkown
|
page read and write
|
||
7FF54741A000
|
unkown
|
page readonly
|
||
7FF563A25000
|
unkown
|
page readonly
|
||
17B6977B000
|
unkown
|
page read and write
|
||
16E1F190000
|
unkown
|
page read and write
|
||
18C50617000
|
unkown
|
page read and write
|
||
5BA3FFC000
|
unkown
|
page read and write
|
||
20505B08000
|
unkown
|
page read and write
|
||
2A47634D000
|
unkown
|
page read and write
|
||
2A4759D0000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
7FF5272CE000
|
unkown
|
page readonly
|
||
934677E000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
17B676C1000
|
unkown
|
page read and write
|
||
7FF5C3A0E000
|
unkown
|
page readonly
|
||
46DD0FE000
|
unkown
|
page read and write
|
||
2090ABE0000
|
unkown
|
page readonly
|
||
7FF572CF1000
|
unkown
|
page readonly
|
||
7FF5C79F6000
|
unkown
|
page readonly
|
||
2090F4B1000
|
unkown
|
page read and write
|
||
2090F180000
|
unkown
|
page read and write
|
||
1732B810000
|
heap private
|
page read and write
|
||
20505A8D000
|
unkown
|
page read and write
|
||
17B698C5000
|
unkown
|
page read and write
|
||
18C505D0000
|
unkown
|
page readonly
|
||
7FF5C7926000
|
unkown
|
page readonly
|
||
7FF5C3EC2000
|
unkown
|
page readonly
|
||
18C505F0000
|
heap default
|
page read and write
|
||
7FF59E36D000
|
unkown
|
page readonly
|
||
7FF5211D6000
|
unkown
|
page readonly
|
||
7FF5D5436000
|
unkown
|
page readonly
|
||
7FF5C79C7000
|
unkown
|
page readonly
|
||
2A476338000
|
unkown
|
page read and write
|
||
1143BF5000
|
unkown
|
page read and write
|
||
2A476390000
|
unkown
|
page read and write
|
||
2A476343000
|
unkown
|
page read and write
|
||
20506400000
|
unkown
|
page readonly
|
||
1DF98E02000
|
unkown
|
page read and write
|
||
17B68FF0000
|
unkown
|
page read and write
|
||
7FF5C3E9F000
|
unkown
|
page readonly
|
||
2A476343000
|
unkown
|
page read and write
|
||
7FF5D40AD000
|
unkown
|
page readonly
|
||
7FF527846000
|
unkown
|
page readonly
|
||
46DD6FE000
|
unkown
|
page read and write
|
||
214D3302000
|
unkown
|
page read and write
|
||
7FF54781A000
|
unkown
|
page readonly
|
||
2A47634A000
|
unkown
|
page read and write
|
||
B104F0E000
|
unkown
|
page read and write
|
||
7FF5D5469000
|
unkown
|
page readonly
|
||
7FF54775E000
|
unkown
|
page readonly
|
||
2A476400000
|
unkown
|
page readonly
|
||
1F0E2300000
|
unkown
|
page read and write
|
||
2090F1B7000
|
unkown
|
page write copy
|
||
17B6A410000
|
unkown
|
page read and write
|
||
7FF5C3E47000
|
unkown
|
page readonly
|
||
7FF5C7562000
|
unkown
|
page readonly
|
||
F3C7C7F000
|
unkown
|
page read and write
|
||
7FF572E76000
|
unkown
|
page readonly
|
||
2A476341000
|
unkown
|
page read and write
|
||
7FF572B84000
|
unkown
|
page readonly
|
||
16E1F313000
|
unkown
|
page read and write
|
||
23EA9317000
|
unkown
|
page read and write
|
||
2090F210000
|
unkown
|
page read and write
|
||
46DCAFE000
|
unkown
|
page read and write
|
||
214D3269000
|
unkown
|
page read and write
|
||
2A476325000
|
unkown
|
page read and write
|
||
2A476802000
|
unkown
|
page read and write
|
||
934647F000
|
unkown
|
page read and write
|
||
7FF5619C5000
|
unkown
|
page readonly
|
||
2A476337000
|
unkown
|
page read and write
|
||
7FF561A07000
|
unkown
|
page readonly
|
||
2A476100000
|
unkown
|
page read and write
|
||
2A476326000
|
unkown
|
page read and write
|
||
7FF54774F000
|
unkown
|
page readonly
|
||
2A476361000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
B104E8B000
|
unkown
|
page read and write
|
||
214D3270000
|
unkown
|
page read and write
|
||
7E4E4FE000
|
unkown
|
page read and write
|
||
7FF561A6D000
|
unkown
|
page readonly
|
||
7FF550C0F000
|
unkown
|
page readonly
|
||
2A476369000
|
unkown
|
page read and write
|
||
2A4763AA000
|
unkown
|
page read and write
|
||
1F0E02D0000
|
unkown
|
page read and write
|
||
7FF572667000
|
unkown
|
page readonly
|
||
1143AFE000
|
unkown
|
page read and write
|
||
23EA9311000
|
heap default
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
17B67755000
|
unkown
|
page read and write
|
||
7FF5C3F47000
|
unkown
|
page readonly
|
||
20D48DF0000
|
unkown
|
page readonly
|
||
7FF55F0C5000
|
unkown
|
page readonly
|
||
CC4A17E000
|
unkown
|
page read and write
|
||
163D9C00000
|
heap default
|
page read and write
|
||
20909A60000
|
unkown
|
page readonly
|
||
7FF527807000
|
unkown
|
page readonly
|
||
16E1F180000
|
unkown
|
page readonly
|
||
2A4758E0000
|
heap default
|
page read and write
|
||
7FF5C7932000
|
unkown
|
page readonly
|
||
18C50602000
|
unkown
|
page read and write
|
||
7FF572BCB000
|
unkown
|
page readonly
|
||
1732BA6C000
|
unkown
|
page read and write
|
||
163D9CE0000
|
unkown
|
page write copy
|
||
7FF5C3C6F000
|
unkown
|
page readonly
|
||
2A476339000
|
unkown
|
page read and write
|
||
2A475ABD000
|
unkown
|
page read and write
|
||
2A475A4C000
|
unkown
|
page read and write
|
||
F3C7F77000
|
unkown
|
page read and write
|
||
20909CA0000
|
unkown
|
page read and write
|
||
7FF561AB7000
|
unkown
|
page readonly
|
||
7FF547847000
|
unkown
|
page readonly
|
||
7FF527646000
|
unkown
|
page readonly
|
||
7FF5C7295000
|
unkown
|
page readonly
|
||
7FF563AF7000
|
unkown
|
page readonly
|
||
1F0E1C00000
|
unkown
|
page read and write
|
||
7FF547416000
|
unkown
|
page readonly
|
||
2090F0E0000
|
unkown
|
page read and write
|
||
7FF5477F4000
|
unkown
|
page readonly
|
||
2090F455000
|
unkown
|
page read and write
|
||
20505A50000
|
unkown
|
page read and write
|
||
2A476348000
|
unkown
|
page read and write
|
||
7FF572A48000
|
unkown
|
page readonly
|
||
7FF5C759B000
|
unkown
|
page readonly
|
||
2A47634B000
|
unkown
|
page read and write
|
||
20505A13000
|
unkown
|
page read and write
|
||
209099F0000
|
heap private
|
page read and write
|
||
7FF5C3E8F000
|
unkown
|
page readonly
|
||
5BA3DFB000
|
unkown
|
page read and write
|
||
7FF5C3E91000
|
unkown
|
page readonly
|
||
20506740000
|
unkown
|
page readonly
|
||
1143CFB000
|
unkown
|
page read and write
|
||
5BA38FB000
|
unkown
|
page read and write
|
||
7FF59E413000
|
unkown
|
page readonly
|
||
7FF572B86000
|
unkown
|
page readonly
|
||
7FF59E3DD000
|
unkown
|
page readonly
|
||
2A47635A000
|
unkown
|
page read and write
|
||
5BA36FB000
|
unkown
|
page read and write
|
||
7FF55F088000
|
unkown
|
page readonly
|
||
17B69884000
|
unkown
|
page read and write
|
||
2090F330000
|
unkown
|
page readonly
|
||
7FF5619D6000
|
unkown
|
page readonly
|
||
17B6A310000
|
unkown
|
page read and write
|
||
7FF527549000
|
unkown
|
page readonly
|
||
93466FD000
|
unkown
|
page read and write
|
||
7FF5211DA000
|
unkown
|
page readonly
|
||
B104F8E000
|
unkown
|
page read and write
|
||
2A476347000
|
unkown
|
page read and write
|
||
1F0E02FB000
|
unkown
|
page read and write
|
||
2A475AE9000
|
unkown
|
page read and write
|
||
1C740FE000
|
unkown
|
page read and write
|
||
17B6A010000
|
unkown
|
page read and write
|
||
7FF5C3B58000
|
unkown
|
page readonly
|
||
7FF5D40BB000
|
unkown
|
page readonly
|
||
17B69943000
|
unkown
|
page read and write
|
||
2A476120000
|
unkown
|
page readonly
|
||
7FF572D48000
|
unkown
|
page readonly
|
||
7FF5508D6000
|
unkown
|
page readonly
|
||
7FF561A67000
|
unkown
|
page readonly
|
||
5BA3C7B000
|
unkown
|
page read and write
|
||
7FF5C3DD1000
|
unkown
|
page readonly
|
||
5BA3E7C000
|
unkown
|
page read and write
|
||
2A47633E000
|
unkown
|
page read and write
|
||
1F0E3010000
|
unkown
|
page read and write
|
||
2A4763C1000
|
unkown
|
page read and write
|
||
2A476386000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
2A47633D000
|
unkown
|
page read and write
|
||
7FF572D8F000
|
unkown
|
page readonly
|
||
7FF5C3CD0000
|
unkown
|
page readonly
|
||
7FF572DD7000
|
unkown
|
page readonly
|
||
F3C807E000
|
unkown
|
page read and write
|
||
7FF5C3E41000
|
unkown
|
page readonly
|
||
17B6763F000
|
unkown
|
page read and write
|
||
1F0E026E000
|
unkown
|
page read and write
|
||
7FF5D53E7000
|
unkown
|
page readonly
|
||
7FF52777A000
|
unkown
|
page readonly
|
||
2090F489000
|
unkown
|
page read and write
|
||
1DF98D40000
|
heap private
|
page read and write
|
||
7FF59E427000
|
unkown
|
page readonly
|
||
2A4760F0000
|
unkown
|
page readonly
|
||
46DD27F000
|
unkown
|
page read and write
|
||
2A476391000
|
unkown
|
page read and write
|
||
2A476360000
|
unkown
|
page read and write
|
||
5B8ADFF000
|
unkown
|
page read and write
|
||
7FF52757B000
|
unkown
|
page readonly
|
||
7FF563B5D000
|
unkown
|
page readonly
|
||
2A476385000
|
unkown
|
page read and write
|
||
20909C2A000
|
unkown
|
page read and write
|
||
2A475B08000
|
unkown
|
page read and write
|
||
2090AC00000
|
unkown
|
page readonly
|
||
7FF57283F000
|
unkown
|
page readonly
|
||
2A476347000
|
unkown
|
page read and write
|
||
7FF55F204000
|
unkown
|
page readonly
|
||
7FF572B72000
|
unkown
|
page readonly
|
||
163DA000000
|
unkown
|
page readonly
|
||
1F0E2302000
|
unkown
|
page read and write
|
||
7FF527590000
|
unkown
|
page readonly
|
||
1F0E2070000
|
unkown
|
page read and write
|
||
7FF5D40E3000
|
unkown
|
page readonly
|
||
5BA3B7B000
|
unkown
|
page read and write
|
||
7FF5476F5000
|
unkown
|
page readonly
|
||
2A476343000
|
unkown
|
page read and write
|
||
7FF5211FD000
|
unkown
|
page readonly
|
||
2A476339000
|
unkown
|
page read and write
|
||
7FF5275CF000
|
unkown
|
page readonly
|
||
214D30A0000
|
unkown
|
page readonly
|
||
2090F250000
|
unkown
|
page readonly
|
||
20909B30000
|
unkown
|
page readonly
|
||
7FF5C3F92000
|
unkown
|
page readonly
|
||
17B6A010000
|
unkown
|
page read and write
|
||
2A476349000
|
unkown
|
page read and write
|
||
7FF5D4049000
|
unkown
|
page readonly
|
||
23EA98A0000
|
unkown
|
page readonly
|
||
7FF563B51000
|
unkown
|
page readonly
|
||
7FF550C2A000
|
unkown
|
page readonly
|
||
23EA9490000
|
unkown
|
page read and write
|
||
5BA347A000
|
unkown
|
page read and write
|
||
7FF55F18D000
|
unkown
|
page readonly
|
||
7FF563B6B000
|
unkown
|
page readonly
|
||
17B6A310000
|
unkown
|
page read and write
|
||
20D48ED5000
|
unkown
|
page read and write
|
||
20505A55000
|
unkown
|
page read and write
|
||
7FF5C3EDD000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF5C7885000
|
unkown
|
page readonly
|
||
2A476357000
|
unkown
|
page read and write
|
||
2090AA00000
|
unkown
|
page read and write
|
||
17B6767E000
|
unkown
|
page read and write
|
||
17B6A210000
|
unkown
|
page read and write
|
||
2A476802000
|
unkown
|
page read and write
|
||
CC4A07F000
|
unkown
|
page read and write
|
||
163D9E29000
|
unkown
|
page read and write
|
||
7FF547753000
|
unkown
|
page readonly
|
||
1F0E02D5000
|
unkown
|
page read and write
|
||
7FF563B7A000
|
unkown
|
page readonly
|
||
7FF5212A3000
|
unkown
|
page readonly
|
||
7FF550CF3000
|
unkown
|
page readonly
|
||
2A47634A000
|
unkown
|
page read and write
|
||
7FF55F055000
|
unkown
|
page readonly
|
||
2090F4B8000
|
unkown
|
page read and write
|
||
7FF5476F7000
|
unkown
|
page readonly
|
||
2A476803000
|
unkown
|
page read and write
|
||
20909C89000
|
unkown
|
page read and write
|
||
163D9BA0000
|
heap private
|
page read and write
|
||
2A476380000
|
unkown
|
page read and write
|
||
7FF550C13000
|
unkown
|
page readonly
|
||
214D3269000
|
unkown
|
page read and write
|
||
7FF5C3EE9000
|
unkown
|
page readonly
|
||
48A5B3B000
|
unkown
|
page read and write
|
||
2A475AB0000
|
unkown
|
page read and write
|
||
16E1F030000
|
heap private
|
page read and write
|
||
17B67671000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF520F8F000
|
unkown
|
page readonly
|
||
7FF550C57000
|
unkown
|
page readonly
|
||
7FF527843000
|
unkown
|
page readonly
|
||
CC4A0F9000
|
unkown
|
page read and write
|
||
5B8A89C000
|
unkown
|
page read and write
|
||
2A476347000
|
unkown
|
page read and write
|
||
17B69450000
|
unkown
|
page readonly
|
||
2A476345000
|
unkown
|
page read and write
|
||
23EA9690000
|
unkown
|
page read and write
|
||
7FF550B18000
|
unkown
|
page readonly
|
||
17B694D0000
|
unkown
|
page read and write
|
||
7FF5C3ED6000
|
unkown
|
page readonly
|
||
7FF5C3F97000
|
unkown
|
page readonly
|
||
17B67776000
|
unkown
|
page read and write
|
||
214D4CA0000
|
unkown
|
page readonly
|
||
2A47633F000
|
unkown
|
page read and write
|
||
7FF5D40B7000
|
unkown
|
page readonly
|
||
7FF547807000
|
unkown
|
page readonly
|
||
17B6A000000
|
unkown
|
page read and write
|
||
2A476340000
|
unkown
|
page read and write
|
||
20505B02000
|
unkown
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
7FF52776D000
|
unkown
|
page readonly
|
||
7FF547717000
|
unkown
|
page readonly
|
||
1F0E0213000
|
unkown
|
page read and write
|
||
2A476382000
|
unkown
|
page read and write
|
||
7FF550B10000
|
unkown
|
page readonly
|
||
6CF8CFE000
|
unkown
|
page read and write
|
||
7FF52742A000
|
unkown
|
page readonly
|
||
2A475A56000
|
unkown
|
page read and write
|
||
7FF572D9D000
|
unkown
|
page readonly
|
||
7FF5C76DF000
|
unkown
|
page readonly
|
||
2A47634D000
|
unkown
|
page read and write
|
||
F3C81FE000
|
unkown
|
page read and write
|
||
2A47633F000
|
unkown
|
page read and write
|
||
7FF550CDA000
|
unkown
|
page readonly
|
||
2A476337000
|
unkown
|
page read and write
|
||
7FF55F14F000
|
unkown
|
page readonly
|
||
2A476360000
|
unkown
|
page read and write
|
||
7FF5D3971000
|
unkown
|
page readonly
|
||
7FF5C7483000
|
unkown
|
page readonly
|
||
16E1F302000
|
unkown
|
page read and write
|
||
7FF521264000
|
unkown
|
page readonly
|
||
5BA3D7A000
|
unkown
|
page read and write
|
||
17B674A0000
|
heap private
|
page read and write
|
||
934667A000
|
unkown
|
page read and write
|
||
214D3300000
|
unkown
|
page read and write
|
||
2A475A4D000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
17B69602000
|
unkown
|
page read and write
|
||
7FF5C7740000
|
unkown
|
page readonly
|
||
7FF550CF6000
|
unkown
|
page readonly
|
||
214D326E000
|
unkown
|
page read and write
|
||
2A476369000
|
unkown
|
page read and write
|
||
17B675E0000
|
unkown
|
page readonly
|
||
16E1F23C000
|
unkown
|
page read and write
|
||
17B697D9000
|
unkown
|
page read and write
|
||
1F0E2100000
|
unkown
|
page readonly
|
||
20909CAA000
|
unkown
|
page read and write
|
||
7FF5C7072000
|
unkown
|
page readonly
|
||
7FF5D40F7000
|
unkown
|
page readonly
|
||
7FF5C3D0F000
|
unkown
|
page readonly
|
||
7FF5D4004000
|
unkown
|
page readonly
|
||
1DF98DB0000
|
unkown
|
page write copy
|
||
7FF563B54000
|
unkown
|
page readonly
|
||
5BA39FC000
|
unkown
|
page read and write
|
||
214D326C000
|
unkown
|
page read and write
|
||
7FF572C33000
|
unkown
|
page readonly
|
||
214D3267000
|
unkown
|
page read and write
|
||
7FF572658000
|
unkown
|
page readonly
|
||
2A475AA6000
|
unkown
|
page read and write
|
||
7FF563ABD000
|
unkown
|
page readonly
|
||
2A475B13000
|
unkown
|
page read and write
|
||
1F0E02DD000
|
unkown
|
page read and write
|
||
7FF550BD7000
|
unkown
|
page readonly
|
||
17B69750000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2090AC20000
|
unkown
|
page readonly
|
||
2A476386000
|
unkown
|
page read and write
|
||
7FF547650000
|
unkown
|
page readonly
|
||
7FF572A4A000
|
unkown
|
page readonly
|
||
1732D3A0000
|
unkown
|
page read and write
|
||
1732BB13000
|
unkown
|
page read and write
|
||
7FF572E3D000
|
unkown
|
page readonly
|
||
7FF561AB7000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF527727000
|
unkown
|
page readonly
|
||
7FF5C7901000
|
unkown
|
page readonly
|
||
214D3270000
|
unkown
|
page read and write
|
||
17B69A42000
|
unkown
|
page read and write
|
||
2A476110000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
1732B9A0000
|
unkown
|
page readonly
|
||
23EA931F000
|
unkown
|
page read and write
|
||
7FF5C7671000
|
unkown
|
page readonly
|
||
7FF550C1E000
|
unkown
|
page readonly
|
||
2A47635F000
|
unkown
|
page read and write
|
||
23EA9680000
|
heap private
|
page read and write
|
||
7FF547636000
|
unkown
|
page readonly
|
||
7FF5D5442000
|
unkown
|
page readonly
|
||
2A476352000
|
unkown
|
page read and write
|
||
7FF5C78B5000
|
unkown
|
page readonly
|
||
5BA40FD000
|
unkown
|
page read and write
|
||
20505930000
|
heap default
|
page read and write
|
||
7FF561A64000
|
unkown
|
page readonly
|
||
7FF5D542E000
|
unkown
|
page readonly
|
||
2A47635F000
|
unkown
|
page read and write
|
||
2A475A48000
|
unkown
|
page read and write
|
||
7FF563ACA000
|
unkown
|
page readonly
|
||
20D48EE9000
|
unkown
|
page read and write
|
||
7FF5C3D86000
|
unkown
|
page readonly
|
||
2090F0B0000
|
unkown
|
page read and write
|
||
7FF5C3EEE000
|
unkown
|
page readonly
|
||
7FF5D3869000
|
unkown
|
page readonly
|
||
5BA35FF000
|
unkown
|
page read and write
|
||
2A47634B000
|
unkown
|
page read and write
|
||
2A47634A000
|
unkown
|
page read and write
|
||
2A476368000
|
unkown
|
page read and write
|
||
1DF9A880000
|
unkown
|
page read and write
|
||
163D9E00000
|
unkown
|
page read and write
|
||
20D48DB0000
|
unkown
|
page read and write
|
||
1732BB02000
|
unkown
|
page read and write
|
||
2A476377000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2A476341000
|
unkown
|
page read and write
|
||
48A607A000
|
unkown
|
page read and write
|
||
2090A415000
|
unkown
|
page read and write
|
||
7FF5C3E84000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2A476800000
|
unkown
|
page read and write
|
||
2A476374000
|
unkown
|
page read and write
|
||
7FF5639B8000
|
unkown
|
page readonly
|
||
7FF550CC4000
|
unkown
|
page readonly
|
||
7FF5C3EA3000
|
unkown
|
page readonly
|
||
5BA407C000
|
unkown
|
page read and write
|
||
20909B60000
|
unkown
|
page read and write
|
||
163D9C10000
|
unkown
|
page readonly
|
||
7FF563B96000
|
unkown
|
page readonly
|
||
7FF59E366000
|
unkown
|
page readonly
|
||
7FF547037000
|
unkown
|
page readonly
|
||
7FF5B8F9B000
|
unkown
|
page readonly
|
||
7FF572C1A000
|
unkown
|
page readonly
|
||
20505B00000
|
unkown
|
page read and write
|
||
7FF5C76D5000
|
unkown
|
page readonly
|
||
1F0E02A8000
|
unkown
|
page read and write
|
||
18C50611000
|
unkown
|
page read and write
|
||
5ED3AFF000
|
unkown
|
page read and write
|
||
23EAA1F0000
|
unkown
|
page read and write
|
||
1732BA70000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
1F0E00C0000
|
heap private
|
page read and write
|
||
1C73FF9000
|
unkown
|
page read and write
|
||
17B694F0000
|
unkown
|
page readonly
|
||
214D3267000
|
unkown
|
page read and write
|
||
1F0E0271000
|
unkown
|
page read and write
|
||
5BA313B000
|
unkown
|
page read and write
|
||
7FF521165000
|
unkown
|
page readonly
|
||
16E1F246000
|
unkown
|
page read and write
|
||
2A476367000
|
unkown
|
page read and write
|
||
7FF5639B0000
|
unkown
|
page readonly
|
||
18C50620000
|
unkown
|
page read and write
|
||
2A476802000
|
unkown
|
page read and write
|
||
163D9E02000
|
unkown
|
page read and write
|
||
1F0E031A000
|
unkown
|
page read and write
|
||
7FF5C79B7000
|
unkown
|
page readonly
|
||
2090F210000
|
unkown
|
page read and write
|
||
2090F200000
|
unkown
|
page read and write
|
||
F3C7D75000
|
unkown
|
page read and write
|
||
17B69712000
|
unkown
|
page read and write
|
||
7FF5C7848000
|
unkown
|
page readonly
|
||
5ED37BF000
|
unkown
|
page read and write
|
||
7FF5D3F21000
|
unkown
|
page readonly
|
||
7FF55F050000
|
unkown
|
page readonly
|
||
2A47633F000
|
unkown
|
page read and write
|
||
1732BA6C000
|
unkown
|
page read and write
|
||
7FF5C77AF000
|
unkown
|
page readonly
|
||
2A47633B000
|
unkown
|
page read and write
|
||
2090AC10000
|
unkown
|
page readonly
|
||
16E1F251000
|
unkown
|
page read and write
|
||
7FF5C7299000
|
unkown
|
page readonly
|
||
20505A82000
|
unkown
|
page read and write
|
||
7FF5D53C7000
|
unkown
|
page readonly
|
||
2A476802000
|
unkown
|
page read and write
|
||
18C50840000
|
heap private
|
page read and write
|
||
2A476360000
|
unkown
|
page read and write
|
||
20909B50000
|
unkown
|
page read and write
|
||
7FF55F166000
|
unkown
|
page readonly
|
||
7FF563967000
|
unkown
|
page readonly
|
||
1F0E20F0000
|
unkown
|
page read and write
|
||
1732D4A0000
|
unkown
|
page readonly
|
||
20909E00000
|
unkown
|
page readonly
|
||
20D48DD0000
|
unkown
|
page read and write
|
||
2A476386000
|
unkown
|
page read and write
|
||
17B69773000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
214D326A000
|
unkown
|
page read and write
|
||
7FF5277A9000
|
unkown
|
page readonly
|
||
2A476100000
|
unkown
|
page readonly
|
||
7FF5508C8000
|
unkown
|
page readonly
|
||
5BA367A000
|
unkown
|
page read and write
|
||
2090A513000
|
unkown
|
page read and write
|
||
7FF5C79B1000
|
unkown
|
page readonly
|
||
7FF547836000
|
unkown
|
page readonly
|
||
23EA9689000
|
heap private
|
page read and write
|
||
2090F0BE000
|
unkown
|
page read and write
|
||
7FF527691000
|
unkown
|
page readonly
|
||
2A475ABC000
|
unkown
|
page read and write
|
||
7FF5C79F3000
|
unkown
|
page readonly
|
||
5BA34FE000
|
unkown
|
page read and write
|
||
2A476345000
|
unkown
|
page read and write
|
||
7FF5211C3000
|
unkown
|
page readonly
|
||
2A47634A000
|
unkown
|
page read and write
|
||
7FF5D5512000
|
unkown
|
page readonly
|
||
20D48EEA000
|
unkown
|
page read and write
|
||
7FF5C3EAD000
|
unkown
|
page readonly
|
||
2A476341000
|
unkown
|
page read and write
|
||
2A476343000
|
unkown
|
page read and write
|
||
2A47634D000
|
unkown
|
page read and write
|
||
23EA9AA0000
|
unkown
|
page readonly
|
||
7FF5D5503000
|
unkown
|
page readonly
|
||
2A476368000
|
unkown
|
page read and write
|
||
1F0E026D000
|
unkown
|
page read and write
|
||
7FF550CCB000
|
unkown
|
page readonly
|
||
2A47636C000
|
unkown
|
page read and write
|
||
2A476348000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
16E1F202000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF561AA6000
|
unkown
|
page readonly
|
||
20909C56000
|
unkown
|
page read and write
|
||
7FF547408000
|
unkown
|
page readonly
|
||
7FF572B2D000
|
unkown
|
page readonly
|
||
2A476349000
|
unkown
|
page read and write
|
||
7FF550A2F000
|
unkown
|
page readonly
|
||
214D3030000
|
heap private
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF547766000
|
unkown
|
page readonly
|
||
7FF5C74B1000
|
unkown
|
page readonly
|
||
46DD4FD000
|
unkown
|
page read and write
|
||
7FF563AA1000
|
unkown
|
page readonly
|
||
7FF5619F6000
|
unkown
|
page readonly
|
||
214D3240000
|
unkown
|
page read and write
|
||
2A476361000
|
unkown
|
page read and write
|
||
17B697FE000
|
unkown
|
page read and write
|
||
5BA41FA000
|
unkown
|
page read and write
|
||
214D326D000
|
unkown
|
page read and write
|
||
7FF5D5517000
|
unkown
|
page readonly
|
||
7FF527707000
|
unkown
|
page readonly
|
||
7FF5C3E74000
|
unkown
|
page readonly
|
||
1732BA57000
|
unkown
|
page read and write
|
||
7FF572A09000
|
unkown
|
page readonly
|
||
46DCB7A000
|
unkown
|
page read and write
|
||
18C506F0000
|
unkown
|
page read and write
|
||
2A47634D000
|
unkown
|
page read and write
|
||
18C504B0000
|
unkown
|
page readonly
|
||
5BA377A000
|
unkown
|
page read and write
|
||
7FF521187000
|
unkown
|
page readonly
|
||
7FF5C773E000
|
unkown
|
page readonly
|
||
163D9E40000
|
unkown
|
page read and write
|
||
214D3090000
|
heap default
|
page read and write
|
||
2090F2F0000
|
unkown
|
page readonly
|
||
2090F1D0000
|
unkown
|
page read and write
|
||
23EAA170000
|
unkown
|
page read and write
|
||
7FF550D07000
|
unkown
|
page readonly
|
||
16E1F249000
|
unkown
|
page read and write
|
||
7FF547772000
|
unkown
|
page readonly
|
||
17B69943000
|
unkown
|
page read and write
|
||
7FF5211F6000
|
unkown
|
page readonly
|
||
7FF5C79C4000
|
unkown
|
page readonly
|
||
214D3213000
|
unkown
|
page read and write
|
||
7FF527857000
|
unkown
|
page readonly
|
||
7FF547842000
|
unkown
|
page readonly
|
||
7FF527525000
|
unkown
|
page readonly
|
||
2A47633A000
|
unkown
|
page read and write
|
||
2A4763CB000
|
unkown
|
page read and write
|
||
7FF54776A000
|
unkown
|
page readonly
|
||
2A475A54000
|
unkown
|
page read and write
|
||
7FF572B79000
|
unkown
|
page readonly
|
||
7FF55F199000
|
unkown
|
page readonly
|
||
7FF59E416000
|
unkown
|
page readonly
|
||
2A476343000
|
unkown
|
page read and write
|
||
7FF55ECF1000
|
unkown
|
page readonly
|
||
7FF55F153000
|
unkown
|
page readonly
|
||
2A47634D000
|
unkown
|
page read and write
|
||
7FF527857000
|
unkown
|
page readonly
|
||
1143A7E000
|
unkown
|
page read and write
|
||
1F0E20F0000
|
unkown
|
page read and write
|
||
163DB8A0000
|
unkown
|
page readonly
|
||
1F0E02C5000
|
unkown
|
page read and write
|
||
214D3269000
|
unkown
|
page read and write
|
||
18C5062D000
|
unkown
|
page read and write
|
||
18C50580000
|
unkown
|
page read and write
|
||
2A476364000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
20D48EC0000
|
heap default
|
page read and write
|
||
2A47633E000
|
unkown
|
page read and write
|
||
7FF55F141000
|
unkown
|
page readonly
|
||
23EA93C0000
|
unkown
|
page readonly
|
||
2A47634D000
|
unkown
|
page read and write
|
||
1F0E20F0000
|
unkown
|
page read and write
|
||
7FF5C78E0000
|
unkown
|
page readonly
|
||
5B8AC7F000
|
unkown
|
page read and write
|
||
1F0E2090000
|
heap private
|
page read and write
|
||
2A4759E0000
|
unkown
|
page read and write
|
||
17B67675000
|
unkown
|
page read and write
|
||
2A476337000
|
unkown
|
page read and write
|
||
1DF99000000
|
unkown
|
page readonly
|
||
2A476380000
|
unkown
|
page read and write
|
||
7FF59E3E7000
|
unkown
|
page readonly
|
||
1F0E0120000
|
heap default
|
page read and write
|
||
2A476339000
|
unkown
|
page read and write
|
||
2090ABD0000
|
unkown
|
page readonly
|
||
7FF5477F7000
|
unkown
|
page readonly
|
||
7FF55EDDB000
|
unkown
|
page readonly
|
||
2A475AEB000
|
unkown
|
page read and write
|
||
2090F310000
|
unkown
|
page readonly
|
||
2090A502000
|
unkown
|
page read and write
|
||
20909BF0000
|
unkown
|
page read and write
|
||
7FF563B64000
|
unkown
|
page readonly
|
||
214D3313000
|
unkown
|
page read and write
|
||
214D3400000
|
unkown
|
page readonly
|
||
7FF572C43000
|
unkown
|
page readonly
|
||
7FF521209000
|
unkown
|
page readonly
|
||
7FF5C3F6A000
|
unkown
|
page readonly
|
||
1732BA13000
|
unkown
|
page read and write
|
||
2A47633A000
|
unkown
|
page read and write
|
||
7FF563AD2000
|
unkown
|
page readonly
|
||
CC49DCB000
|
unkown
|
page read and write
|
||
7FF572654000
|
unkown
|
page readonly
|
||
7FF563AAF000
|
unkown
|
page readonly
|
||
2A476364000
|
unkown
|
page read and write
|
||
2A47633F000
|
unkown
|
page read and write
|
||
7E4E57D000
|
unkown
|
page read and write
|
||
2A476341000
|
unkown
|
page read and write
|
||
2A47636D000
|
unkown
|
page read and write
|
||
5ED373F000
|
unkown
|
page read and write
|
||
5BA3EFD000
|
unkown
|
page read and write
|
||
2A475A70000
|
unkown
|
page read and write
|
||
2A476338000
|
unkown
|
page read and write
|
||
7FF5509D5000
|
unkown
|
page readonly
|
There are 1532 hidden memdumps, click here to show them.