Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
statistic-2067311372.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$statistic-2067311372.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4A881418.png
|
PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\87BF5DB3.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\A86749E6.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F7429539.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\suspendedpage[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\79C10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 19:05:17 2019, mtime=Tue May 4 19:56:50 2021, atime=Tue May 4 19:56:50 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\statistic-2067311372.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:24:16
2020, mtime=Tue May 4 19:56:50 2021, atime=Tue May 4 19:56:50 2021, length=107618, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\BAC10000
|
data
|
dropped
|
|
|
|
C:\Users\user\jordji.nbvt11
|
HTML document, ASCII text
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\suspendedpage[1].htm
|
HTML document, ASCII text
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\48501294.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\63EBE985.png
|
PNG image data, 485 x 185, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C6DA5ADB.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E002D9C2.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CFDE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabEA41.tmp
|
Microsoft Cabinet archive data, 58596 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarEA42.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\A0EE0000
|
data
|
dropped
|
|
There are 17 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\jordji.nbvt1,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\jordji.nbvt11,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\jordji.nbvt1,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\jordji.nbvt11,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://fwdssp.com/?dn=referer_detect&pid=5POL4F2O4
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
anaheimdermatologists.com
|
192.185.5.2
|
|
|
|
industrialarttextile.com
|
192.254.233.89
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.5.2
|
anaheimdermatologists.com
|
United States
|
|
|
|
192.254.233.89
|
industrialarttextile.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
m)
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
!m)
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1BDBE
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C57E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C753
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C87C
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1CA12
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1CB5A
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
f#*
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2F331
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2FB4F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
em3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED9DB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDD74
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDEBB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDF67
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE060
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE13B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ey3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
10510D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
10601A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 161 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1C027970000
|
unkown
|
page read and write
|
|
|
|
7FF53F109000
|
unkown
|
page readonly
|
|
|
|
7FF54A690000
|
unkown
|
page readonly
|
|
|
|
124C3FE000
|
unkown
|
page read and write
|
|
|
|
32E9000
|
unkown
|
page read and write
|
|
|
|
187DC668000
|
unkown
|
page read and write
|
|
|
|
1C027AC4000
|
unkown
|
page read and write
|
|
|
|
7FF577CB0000
|
unkown
|
page readonly
|
|
|
|
5F1C1FE000
|
unkown
|
page read and write
|
|
|
|
7FF59F6C6000
|
unkown
|
page readonly
|
|
|
|
5F1C2FC000
|
unkown
|
page read and write
|
|
|
|
7FF577D85000
|
unkown
|
page readonly
|
|
|
|
F527FC000
|
unkown
|
page read and write
|
|
|
|
7FF59F658000
|
unkown
|
page readonly
|
|
|
|
2B78000
|
unkown
|
page readonly
|
|
|
|
23BF444A000
|
heap default
|
page read and write
|
|
|
|
23BF43DC000
|
unkown
|
page read and write
|
|
|
|
7FF513BB3000
|
unkown
|
page readonly
|
|
|
|
7FF59F671000
|
unkown
|
page readonly
|
|
|
|
1FEBC829000
|
unkown
|
page read and write
|
|
|
|
27518513000
|
unkown
|
page read and write
|
|
|
|
2D2F000
|
unkown
|
page read and write
|
|
|
|
2A7B000
|
unkown
|
page readonly
|
|
|
|
7FF50F76C000
|
unkown
|
page readonly
|
|
|
|
7FF53F2D3000
|
unkown
|
page readonly
|
|
|
|
7FF5A4876000
|
unkown
|
page readonly
|
|
|
|
2791000
|
unkown
|
page readonly
|
|
|
|
32CA000
|
unkown
|
page read and write
|
|
|
|
23BF444A000
|
unkown
|
page read and write
|
|
|
|
23837861000
|
unkown
|
page read and write
|
|
|
|
23BF444A000
|
unkown
|
page read and write
|
|
|
|
654F94B000
|
unkown
|
page read and write
|
|
|
|
1C027C00000
|
unkown
|
page read and write
|
|
|
|
7FF54A6EC000
|
unkown
|
page readonly
|
|
|
|
2A34000
|
unkown
|
page readonly
|
|
|
|
23BF446A000
|
unkown
|
page read and write
|
|
|
|
7FF59F5F1000
|
unkown
|
page readonly
|
|
|
|
285A000
|
unkown
|
page readonly
|
|
|
|
B00000
|
unkown
|
page readonly
|
|
|
|
23837840000
|
unkown
|
page read and write
|
|
|
|
7FF54A696000
|
unkown
|
page readonly
|
|
|
|
1C027BD0000
|
unkown
|
page read and write
|
|
|
|
7FF54A5FC000
|
unkown
|
page readonly
|
|
|
|
1C027EC0000
|
unkown
|
page readonly
|
|
|
|
7FF50EF6B000
|
unkown
|
page readonly
|
|
|
|
1C022BF3000
|
unkown
|
page read and write
|
|
|
|
2B7F000
|
unkown
|
page readonly
|
|
|
|
187DC550000
|
unkown
|
page read and write
|
|
|
|
7FF513869000
|
unkown
|
page readonly
|
|
|
|
CA0187C000
|
unkown
|
page read and write
|
|
|
|
7FF50EC63000
|
unkown
|
page readonly
|
|
|
|
7FF5775A3000
|
unkown
|
page readonly
|
|
|
|
32C5000
|
unkown
|
page read and write
|
|
|
|
2B37000
|
unkown
|
page readonly
|
|
|
|
1C027BE0000
|
unkown
|
page read and write
|
|
|
|
187DE560000
|
unkown
|
page write copy
|
|
|
|
2A81000
|
unkown
|
page readonly
|
|
|
|
29A0000
|
unkown
|
page readonly
|
|
|
|
23BF4510000
|
unkown
|
page read and write
|
|
|
|
23BF4469000
|
unkown
|
page read and write
|
|
|
|
23BF4535000
|
heap private
|
page read and write
|
|
|
|
296A000
|
unkown
|
page readonly
|
|
|
|
1C0235C0000
|
unkown
|
page readonly
|
|
|
|
23BF4520000
|
unkown
|
page read and write
|
|
|
|
7FF513AC1000
|
unkown
|
page readonly
|
|
|
|
1F320FF0000
|
unkown
|
page read and write
|
|
|
|
2383784B000
|
unkown
|
page read and write
|
|
|
|
5F80000
|
unkown
|
page readonly
|
|
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
29AF000
|
unkown
|
page readonly
|
|
|
|
2681000
|
unkown
|
page readonly
|
|
|
|
7FF5A4806000
|
unkown
|
page readonly
|
|
|
|
7FF59F6C1000
|
unkown
|
page readonly
|
|
|
|
26128C35000
|
heap private
|
page read and write
|
|
|
|
2383782E000
|
unkown
|
page read and write
|
|
|
|
305A000
|
unkown
|
page read and write
|
|
|
|
7FF5A4615000
|
unkown
|
page readonly
|
|
|
|
7FF5A47F9000
|
unkown
|
page readonly
|
|
|
|
3290000
|
unkown
|
page read and write
|
|
|
|
7FF5A4866000
|
unkown
|
page readonly
|
|
|
|
7FF577CAC000
|
unkown
|
page readonly
|
|
|
|
7FF50F862000
|
unkown
|
page readonly
|
|
|
|
23BF4469000
|
unkown
|
page read and write
|
|
|
|
23837845000
|
unkown
|
page read and write
|
|
|
|
2A62000
|
unkown
|
page readonly
|
|
|
|
7FF59F630000
|
unkown
|
page readonly
|
|
|
|
7FF5A4695000
|
unkown
|
page readonly
|
|
|
|
7FF59F5E0000
|
unkown
|
page readonly
|
|
|
|
7FF513AC8000
|
unkown
|
page readonly
|
|
|
|
23BF5200000
|
unkown
|
page read and write
|
|
|
|
124C4FF000
|
unkown
|
page read and write
|
|
|
|
7FF5A3FD5000
|
unkown
|
page readonly
|
|
|
|
23BF43D5000
|
unkown
|
page read and write
|
|
|
|
CA01AFD000
|
unkown
|
page read and write
|
|
|
|
1C022713000
|
unkown
|
page read and write
|
|
|
|
CA01DFF000
|
unkown
|
page read and write
|
|
|
|
27518340000
|
unkown
|
page readonly
|
|
|
|
187DDFE0000
|
unkown
|
page read and write
|
|
|
|
7FF53F00D000
|
unkown
|
page readonly
|
|
|
|
7FF577E16000
|
unkown
|
page readonly
|
|
|
|
27518D00000
|
unkown
|
page read and write
|
|
|
|
6550000
|
heap private
|
page read and write
|
|
|
|
7FF577B41000
|
unkown
|
page readonly
|
|
|
|
2383786F000
|
unkown
|
page read and write
|
|
|
|
B9D000
|
unkown
|
page read and write
|
|
|
|
7FF50EF88000
|
unkown
|
page readonly
|
|
|
|
32D5000
|
unkown
|
page read and write
|
|
|
|
BB43B2B000
|
unkown
|
page read and write
|
|
|
|
1C027AA0000
|
unkown
|
page read and write
|
|
|
|
187DC530000
|
unkown
|
page read and write
|
|
|
|
26128A5D000
|
heap default
|
page read and write
|
|
|
|
7FF59F726000
|
unkown
|
page readonly
|
|
|
|
2803000
|
unkown
|
page readonly
|
|
|
|
7FF50EF7F000
|
unkown
|
page readonly
|
|
|
|
7FF513B96000
|
unkown
|
page readonly
|
|
|
|
23BF4AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5A4798000
|
unkown
|
page readonly
|
|
|
|
1C022D59000
|
unkown
|
page read and write
|
|
|
|
7FF54A6B1000
|
unkown
|
page readonly
|
|
|
|
477A07E000
|
unkown
|
page read and write
|
|
|
|
1C02263D000
|
unkown
|
page read and write
|
|
|
|
26128970000
|
unkown
|
page read and write
|
|
|
|
261A7802000
|
unkown
|
page read and write
|
|
|
|
7FF577DA9000
|
unkown
|
page readonly
|
|
|
|
7FF50F004000
|
unkown
|
page readonly
|
|
|
|
32AA000
|
heap default
|
page read and write
|
|
|
|
9044F7F000
|
unkown
|
page read and write
|
|
|
|
904447B000
|
unkown
|
page read and write
|
|
|
|
23BF4F40000
|
unkown
|
page read and write
|
|
|
|
1FEBD000000
|
unkown
|
page readonly
|
|
|
|
2D6D000
|
unkown
|
page read and write
|
|
|
|
7FF549EE5000
|
unkown
|
page readonly
|
|
|
|
3210000
|
unkown
|
page read and write
|
|
|
|
7FF54A783000
|
unkown
|
page readonly
|
|
|
|
187DC63F000
|
unkown
|
page read and write
|
|
|
|
F529FE000
|
unkown
|
page read and write
|
|
|
|
23837800000
|
unkown
|
page read and write
|
|
|
|
2AC5000
|
unkown
|
page readonly
|
|
|
|
187DC3D0000
|
heap private
|
page read and write
|
|
|
|
23BF4469000
|
unkown
|
page read and write
|
|
|
|
7FF577DA2000
|
unkown
|
page readonly
|
|
|
|
1C023570000
|
unkown
|
page readonly
|
|
|
|
261A7813000
|
unkown
|
page read and write
|
|
|
|
7FF577CA5000
|
unkown
|
page readonly
|
|
|
|
2383786A000
|
unkown
|
page read and write
|
|
|
|
187DC800000
|
unkown
|
page readonly
|
|
|
|
7FF54A5AE000
|
unkown
|
page readonly
|
|
|
|
23BF445B000
|
heap default
|
page read and write
|
|
|
|
7FF5B0A06000
|
unkown
|
page readonly
|
|
|
|
7FF5B0925000
|
unkown
|
page readonly
|
|
|
|
BB43EF9000
|
unkown
|
page read and write
|
|
|
|
1F321590000
|
unkown
|
page readonly
|
|
|
|
2ABF000
|
unkown
|
page readonly
|
|
|
|
2D65000
|
unkown
|
page read and write
|
|
|
|
7FF577D45000
|
unkown
|
page readonly
|
|
|
|
187DC64D000
|
unkown
|
page read and write
|
|
|
|
7FF577634000
|
unkown
|
page readonly
|
|
|
|
5F1BFFD000
|
unkown
|
page read and write
|
|
|
|
7FF54A507000
|
unkown
|
page readonly
|
|
|
|
23BF442A000
|
unkown
|
page read and write
|
|
|
|
187DC430000
|
heap default
|
page read and write
|
|
|
|
7FF577D10000
|
unkown
|
page readonly
|
|
|
|
7FF59F743000
|
unkown
|
page readonly
|
|
|
|
23BF4388000
|
heap default
|
page read and write
|
|
|
|
7FF53F355000
|
unkown
|
page readonly
|
|
|
|
1FEBCE02000
|
unkown
|
page read and write
|
|
|
|
7FF50F5DC000
|
unkown
|
page readonly
|
|
|
|
2D6E000
|
unkown
|
page read and write
|
|
|
|
1C027CAC000
|
unkown
|
page read and write
|
|
|
|
2A27000
|
unkown
|
page readonly
|
|
|
|
28A8000
|
unkown
|
page readonly
|
|
|
|
1C022702000
|
unkown
|
page read and write
|
|
|
|
261A7E02000
|
unkown
|
page read and write
|
|
|
|
7FF5A445A000
|
unkown
|
page readonly
|
|
|
|
1C0233B0000
|
unkown
|
page read and write
|
|
|
|
7FF577CE1000
|
unkown
|
page readonly
|
|
|
|
187DC613000
|
unkown
|
page read and write
|
|
|
|
187DE002000
|
unkown
|
page read and write
|
|
|
|
BDF000
|
unkown
|
page read and write
|
|
|
|
7FF5A45E2000
|
unkown
|
page readonly
|
|
|
|
7FF549EF3000
|
unkown
|
page readonly
|
|
|
|
90B000
|
unkown
|
page read and write
|
|
|
|
26128C40000
|
unkown
|
page readonly
|
|
|
|
1C027B50000
|
unkown
|
page read and write
|
|
|
|
2751842A000
|
unkown
|
page read and write
|
|
|
|
23837902000
|
unkown
|
page read and write
|
|
|
|
1C022510000
|
unkown
|
page readonly
|
|
|
|
7FF50EFE2000
|
unkown
|
page readonly
|
|
|
|
7FF5A47A0000
|
unkown
|
page readonly
|
|
|
|
477A57D000
|
unkown
|
page read and write
|
|
|
|
1C027B7C000
|
unkown
|
page readonly
|
|
|
|
7FF59F6AB000
|
unkown
|
page readonly
|
|
|
|
7FF50F7FC000
|
unkown
|
page readonly
|
|
|
|
7FF513AC5000
|
unkown
|
page readonly
|
|
|
|
7FF50EF90000
|
unkown
|
page readonly
|
|
|
|
1C027AB0000
|
unkown
|
page read and write
|
|
|
|
7FF513A80000
|
unkown
|
page readonly
|
|
|
|
CA016FF000
|
unkown
|
page read and write
|
|
|
|
904497F000
|
unkown
|
page read and write
|
|
|
|
23837847000
|
unkown
|
page read and write
|
|
|
|
7FF577B65000
|
unkown
|
page readonly
|
|
|
|
7FF5A47B1000
|
unkown
|
page readonly
|
|
|
|
23BF4465000
|
unkown
|
page read and write
|
|
|
|
5F74000
|
heap private
|
page read and write
|
|
|
|
477A5FF000
|
unkown
|
page read and write
|
|
|
|
2A4A000
|
unkown
|
page readonly
|
|
|
|
7FF53F381000
|
unkown
|
page readonly
|
|
|
|
261A7800000
|
unkown
|
page read and write
|
|
|
|
1C027B78000
|
unkown
|
page write copy
|
|
|
|
F56000
|
unkown
|
page readonly
|
|
|
|
32CD000
|
unkown
|
page read and write
|
|
|
|
904477F000
|
unkown
|
page read and write
|
|
|
|
CA010AB000
|
unkown
|
page read and write
|
|
|
|
7FF53F12D000
|
unkown
|
page readonly
|
|
|
|
3460000
|
unkown
|
page read and write
|
|
|
|
1C027EE0000
|
unkown
|
page readonly
|
|
|
|
7FF53F371000
|
unkown
|
page readonly
|
|
|
|
27518A60000
|
unkown
|
page readonly
|
|
|
|
7FF53F34B000
|
unkown
|
page readonly
|
|
|
|
32E9000
|
unkown
|
page read and write
|
|
|
|
7FF5A4064000
|
unkown
|
page readonly
|
|
|
|
7FF50EFE9000
|
unkown
|
page readonly
|
|
|
|
23837856000
|
unkown
|
page read and write
|
|
|
|
1C0225E0000
|
unkown
|
page readonly
|
|
|
|
7FF577D61000
|
unkown
|
page readonly
|
|
|
|
23BF4539000
|
heap private
|
page read and write
|
|
|
|
1C027E20000
|
unkown
|
page readonly
|
|
|
|
7FF50EFC5000
|
unkown
|
page readonly
|
|
|
|
1FEBC83C000
|
unkown
|
page read and write
|
|
|
|
7FF577C40000
|
unkown
|
page readonly
|
|
|
|
1C027C1F000
|
unkown
|
page read and write
|
|
|
|
7FF59F655000
|
unkown
|
page readonly
|
|
|
|
23838002000
|
unkown
|
page read and write
|
|
|
|
7FF5A41EC000
|
unkown
|
page readonly
|
|
|
|
7FF577B92000
|
unkown
|
page readonly
|
|
|
|
1C02269B000
|
unkown
|
page read and write
|
|
|
|
7FF5A4079000
|
unkown
|
page readonly
|
|
|
|
BB43F7B000
|
unkown
|
page read and write
|
|
|
|
275181F0000
|
heap private
|
page read and write
|
|
|
|
32CD000
|
unkown
|
page read and write
|
|
|
|
32C9000
|
unkown
|
page read and write
|
|
|
|
2612A76F000
|
heap private
|
page read and write
|
|
|
|
7FF54A776000
|
unkown
|
page readonly
|
|
|
|
1FEBC86A000
|
unkown
|
page read and write
|
|
|
|
7FF5A47F2000
|
unkown
|
page readonly
|
|
|
|
7FF513B22000
|
unkown
|
page readonly
|
|
|
|
904487C000
|
unkown
|
page read and write
|
|
|
|
7FF5A486C000
|
unkown
|
page readonly
|
|
|
|
7FF5A476D000
|
unkown
|
page readonly
|
|
|
|
23BF4469000
|
unkown
|
page read and write
|
|
|
|
23837832000
|
unkown
|
page read and write
|
|
|
|
7FF51330F000
|
unkown
|
page readonly
|
|
|
|
23BF43FF000
|
unkown
|
page read and write
|
|
|
|
1C027C3C000
|
unkown
|
page read and write
|
|
|
|
7FF50F884000
|
unkown
|
page readonly
|
|
|
|
23837770000
|
unkown
|
page readonly
|
|
|
|
1C027CB4000
|
unkown
|
page read and write
|
|
|
|
2AB6000
|
unkown
|
page readonly
|
|
|
|
7FF513BA5000
|
unkown
|
page readonly
|
|
|
|
7FF5A478C000
|
unkown
|
page readonly
|
|
|
|
7FF577614000
|
unkown
|
page readonly
|
|
|
|
23837849000
|
unkown
|
page read and write
|
|
|
|
187DCB90000
|
unkown
|
page readonly
|
|
|
|
7FF53F33C000
|
unkown
|
page readonly
|
|
|
|
1C027BE0000
|
unkown
|
page readonly
|
|
|
|
5F70000
|
heap private
|
page read and write
|
|
|
|
7FF59F30D000
|
unkown
|
page readonly
|
|
|
|
1C027C49000
|
unkown
|
page read and write
|
|
|
|
2D65000
|
unkown
|
page read and write
|
|
|
|
26128A2B000
|
heap default
|
page read and write
|
|
|
|
7FF53F435000
|
unkown
|
page readonly
|
|
|
|
26128990000
|
unkown
|
page readonly
|
|
|
|
23837841000
|
unkown
|
page read and write
|
|
|
|
261A7640000
|
heap default
|
page read and write
|
|
|
|
7FF54A698000
|
unkown
|
page readonly
|
|
|
|
1F321013000
|
unkown
|
page read and write
|
|
|
|
7FF513AE1000
|
unkown
|
page readonly
|
|
|
|
7FF5B0698000
|
unkown
|
page readonly
|
|
|
|
23BF43C5000
|
unkown
|
page read and write
|
|
|
|
7FF50F073000
|
unkown
|
page readonly
|
|
|
|
7FF5A47FC000
|
unkown
|
page readonly
|
|
|
|
7FF50E8B6000
|
unkown
|
page readonly
|
|
|
|
124C5FE000
|
unkown
|
page read and write
|
|
|
|
7FF50EFF6000
|
unkown
|
page readonly
|
|
|
|
1C027A80000
|
unkown
|
page read and write
|
|
|
|
7FF577988000
|
unkown
|
page readonly
|
|
|
|
7FF53F330000
|
unkown
|
page readonly
|
|
|
|
2982000
|
unkown
|
page readonly
|
|
|
|
2AB4000
|
unkown
|
page readonly
|
|
|
|
1C0235B0000
|
unkown
|
page readonly
|
|
|
|
7FF50EF13000
|
unkown
|
page readonly
|
|
|
|
7FF5A454F000
|
unkown
|
page readonly
|
|
|
|
7FF54A595000
|
unkown
|
page readonly
|
|
|
|
7FF513AD4000
|
unkown
|
page readonly
|
|
|
|
27518400000
|
unkown
|
page read and write
|
|
|
|
23BF42B0000
|
unkown
|
page readonly
|
|
|
|
1F321052000
|
unkown
|
page read and write
|
|
|
|
1C027E40000
|
unkown
|
page readonly
|
|
|
|
7FF577D3F000
|
unkown
|
page readonly
|
|
|
|
7FF50F455000
|
unkown
|
page readonly
|
|
|
|
7FF5B0989000
|
unkown
|
page readonly
|
|
|
|
1C027AB0000
|
unkown
|
page read and write
|
|
|
|
2CEE000
|
unkown
|
page read and write
|
|
|
|
1FEBC87B000
|
unkown
|
page read and write
|
|
|
|
CA019FB000
|
unkown
|
page read and write
|
|
|
|
187DDFF0000
|
unkown
|
page readonly
|
|
|
|
1F320EF0000
|
heap default
|
page read and write
|
|
|
|
7FF59F2AB000
|
unkown
|
page readonly
|
|
|
|
23BF4EFE000
|
unkown
|
page read and write
|
|
|
|
187DE200000
|
unkown
|
page readonly
|
|
|
|
23BF43E9000
|
unkown
|
page read and write
|
|
|
|
261A7720000
|
unkown
|
page readonly
|
|
|
|
26128880000
|
unkown
|
page readonly
|
|
|
|
7FF50F7E9000
|
unkown
|
page readonly
|
|
|
|
187DDFE0000
|
unkown
|
page read and write
|
|
|
|
23837844000
|
unkown
|
page read and write
|
|
|
|
187DC580000
|
unkown
|
page read and write
|
|
|
|
7FF50EFA1000
|
unkown
|
page readonly
|
|
|
|
7FF50F4BD000
|
unkown
|
page readonly
|
|
|
|
2D40000
|
heap default
|
page read and write
|
|
|
|
1F321002000
|
unkown
|
page read and write
|
|
|
|
2383784E000
|
unkown
|
page read and write
|
|
|
|
7FF53F325000
|
unkown
|
page readonly
|
|
|
|
5F1BCFF000
|
unkown
|
page read and write
|
|
|
|
1FEBC620000
|
unkown
|
page readonly
|
|
|
|
187DC440000
|
unkown
|
page readonly
|
|
|
|
7FF5A43D8000
|
unkown
|
page readonly
|
|
|
|
BE7000
|
heap private
|
page read and write
|
|
|
|
27518260000
|
unkown
|
page readonly
|
|
|
|
7FF577D69000
|
unkown
|
page readonly
|
|
|
|
CA017FE000
|
unkown
|
page read and write
|
|
|
|
7FF50F7EB000
|
unkown
|
page readonly
|
|
|
|
7FF53F3C6000
|
unkown
|
page readonly
|
|
|
|
45E0000
|
unkown
|
page readonly
|
|
|
|
1C027B90000
|
unkown
|
page read and write
|
|
|
|
7FF50F85B000
|
unkown
|
page readonly
|
|
|
|
F52DFF000
|
unkown
|
page read and write
|
|
|
|
7FF50F70A000
|
unkown
|
page readonly
|
|
|
|
2A44000
|
unkown
|
page readonly
|
|
|
|
7FF57766B000
|
unkown
|
page readonly
|
|
|
|
7FF50F783000
|
unkown
|
page readonly
|
|
|
|
1C022677000
|
unkown
|
page read and write
|
|
|
|
7FF577E33000
|
unkown
|
page readonly
|
|
|
|
261289E0000
|
unkown
|
page readonly
|
|
|
|
26128FD0000
|
unkown
|
page readonly
|
|
|
|
23BF4414000
|
unkown
|
page read and write
|
|
|
|
CA014FC000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
1C02266D000
|
unkown
|
page read and write
|
|
|
|
2AEB000
|
unkown
|
page readonly
|
|
|
|
F52CFF000
|
unkown
|
page read and write
|
|
|
|
BDF02FC000
|
unkown
|
page read and write
|
|
|
|
23BF442C000
|
unkown
|
page read and write
|
|
|
|
23837865000
|
unkown
|
page read and write
|
|
|
|
7FF59EE9D000
|
unkown
|
page readonly
|
|
|
|
7FF5B0150000
|
unkown
|
page readonly
|
|
|
|
7FF5B0999000
|
unkown
|
page readonly
|
|
|
|
7FF59F6B9000
|
unkown
|
page readonly
|
|
|
|
2D89000
|
unkown
|
page read and write
|
|
|
|
2383782D000
|
unkown
|
page read and write
|
|
|
|
1F320E90000
|
heap private
|
page read and write
|
|
|
|
7FF59F743000
|
unkown
|
page readonly
|
|
|
|
1F320FE0000
|
unkown
|
page readonly
|
|
|
|
2A7B000
|
unkown
|
page readonly
|
|
|
|
7FF5A47A4000
|
unkown
|
page readonly
|
|
|
|
1C027CB2000
|
unkown
|
page read and write
|
|
|
|
187DC65D000
|
unkown
|
page read and write
|
|
|
|
275184B9000
|
unkown
|
page read and write
|
|
|
|
7FF577999000
|
unkown
|
page readonly
|
|
|
|
7FF5A4771000
|
unkown
|
page readonly
|
|
|
|
7FF59F64F000
|
unkown
|
page readonly
|
|
|
|
7FF577B3E000
|
unkown
|
page readonly
|
|
|
|
7FF50F876000
|
unkown
|
page readonly
|
|
|
|
2D6D000
|
unkown
|
page read and write
|
|
|
|
7FF53F3AC000
|
unkown
|
page readonly
|
|
|
|
BDF01FE000
|
unkown
|
page read and write
|
|
|
|
6960000
|
unkown
|
page read and write
|
|
|
|
1C023590000
|
unkown
|
page readonly
|
|
|
|
7FF50EC15000
|
unkown
|
page readonly
|
|
|
|
1C022420000
|
heap default
|
page read and write
|
|
|
|
187DC62A000
|
unkown
|
page read and write
|
|
|
|
7FF513AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5A464D000
|
unkown
|
page readonly
|
|
|
|
23BF442B000
|
unkown
|
page read and write
|
|
|
|
7FF50F845000
|
unkown
|
page readonly
|
|
|
|
1C027960000
|
unkown
|
page read and write
|
|
|
|
1C022800000
|
unkown
|
page readonly
|
|
|
|
7FF53F3B2000
|
unkown
|
page readonly
|
|
|
|
2E78000
|
unkown
|
page read and write
|
|
|
|
1C027980000
|
unkown
|
page read and write
|
|
|
|
477A2FE000
|
unkown
|
page read and write
|
|
|
|
261A7913000
|
unkown
|
page read and write
|
|
|
|
7FF5B0996000
|
unkown
|
page readonly
|
|
|
|
261A7858000
|
unkown
|
page read and write
|
|
|
|
7FF54A59A000
|
unkown
|
page readonly
|
|
|
|
7FF577DB6000
|
unkown
|
page readonly
|
|
|
|
C3E000
|
unkown
|
page read and write
|
|
|
|
261A8000000
|
unkown
|
page readonly
|
|
|
|
23BF4469000
|
unkown
|
page read and write
|
|
|
|
7FF54A6D5000
|
unkown
|
page readonly
|
|
|
|
1C022D18000
|
unkown
|
page read and write
|
|
|
|
187DC65B000
|
unkown
|
page read and write
|
|
|
|
187DC700000
|
unkown
|
page read and write
|
|
|
|
2B4C000
|
unkown
|
page readonly
|
|
|
|
187DC520000
|
unkown
|
page readonly
|
|
|
|
7FF59F660000
|
unkown
|
page readonly
|
|
|
|
1FEBC900000
|
unkown
|
page read and write
|
|
|
|
187DC713000
|
unkown
|
page read and write
|
|
|
|
7FF513B29000
|
unkown
|
page readonly
|
|
|
|
7FF57799B000
|
unkown
|
page readonly
|
|
|
|
23BF444A000
|
unkown
|
page read and write
|
|
|
|
187DC510000
|
unkown
|
page readonly
|
|
|
|
2383786B000
|
unkown
|
page read and write
|
|
|
|
6554000
|
heap private
|
page read and write
|
|
|
|
F52BFE000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown
|
page readonly
|
|
|
|
7FF50F705000
|
unkown
|
page readonly
|
|
|
|
23BF4460000
|
unkown
|
page read and write
|
|
|
|
1FEBC800000
|
unkown
|
page read and write
|
|
|
|
187DC600000
|
unkown
|
page read and write
|
|
|
|
1C027AC0000
|
unkown
|
page read and write
|
|
|
|
7FF50F829000
|
unkown
|
page readonly
|
|
|
|
7FF577AFF000
|
unkown
|
page readonly
|
|
|
|
23BF4F57000
|
unkown
|
page read and write
|
|
|
|
CA01CFD000
|
unkown
|
page read and write
|
|
|
|
7FF54A6F9000
|
unkown
|
page readonly
|
|
|
|
23BF444B000
|
unkown
|
page read and write
|
|
|
|
23837839000
|
unkown
|
page read and write
|
|
|
|
1C0225F0000
|
unkown
|
page read and write
|
|
|
|
23BF442B000
|
unkown
|
page read and write
|
|
|
|
2AAD000
|
unkown
|
page readonly
|
|
|
|
7FF5B09F6000
|
unkown
|
page readonly
|
|
|
|
7FF577BCB000
|
unkown
|
page readonly
|
|
|
|
7FF577D15000
|
unkown
|
page readonly
|
|
|
|
2B5A000
|
unkown
|
page readonly
|
|
|
|
2B8B000
|
unkown
|
page readonly
|
|
|
|
26128820000
|
unkown
|
page readonly
|
|
|
|
1C022430000
|
unkown
|
page readonly
|
|
|
|
23837832000
|
unkown
|
page read and write
|
|
|
|
1C023490000
|
unkown
|
page read and write
|
|
|
|
2976000
|
unkown
|
page readonly
|
|
|
|
2994000
|
unkown
|
page readonly
|
|
|
|
2A3C000
|
unkown
|
page readonly
|
|
|
|
7FF59F50D000
|
unkown
|
page readonly
|
|
|
|
7FF5779C6000
|
unkown
|
page readonly
|
|
|
|
27518E00000
|
unkown
|
page readonly
|
|
|
|
7FF54A6A0000
|
unkown
|
page readonly
|
|
|
|
1C022B90000
|
unkown
|
page read and write
|
|
|
|
7FF513912000
|
unkown
|
page readonly
|
|
|
|
261289F0000
|
unkown
|
page readonly
|
|
|
|
6560000
|
unkown
|
page readonly
|
|
|
|
23837780000
|
unkown
|
page read and write
|
|
|
|
3220000
|
heap default
|
page read and write
|
|
|
|
261A785B000
|
unkown
|
page read and write
|
|
|
|
F52C7F000
|
unkown
|
page read and write
|
|
|
|
2AD8000
|
unkown
|
page readonly
|
|
|
|
23BF4BB0000
|
unkown
|
page readonly
|
|
|
|
23837846000
|
unkown
|
page read and write
|
|
|
|
1C022613000
|
unkown
|
page read and write
|
|
|
|
7FF513865000
|
unkown
|
page readonly
|
|
|
|
B50000
|
heap default
|
page read and write
|
|
|
|
23BF43E9000
|
unkown
|
page read and write
|
|
|
|
76A000
|
unkown
|
page read and write
|
|
|
|
27518487000
|
unkown
|
page read and write
|
|
|
|
27518390000
|
unkown
|
page write copy
|
|
|
|
9044A7D000
|
unkown
|
page read and write
|
|
|
|
F52D7E000
|
unkown
|
page read and write
|
|
|
|
6300000
|
unkown
|
page read and write
|
|
|
|
7FF54A706000
|
unkown
|
page readonly
|
|
|
|
1C027C60000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
unkown
|
page readonly
|
|
|
|
2A68000
|
unkown
|
page readonly
|
|
|
|
7FF5B0934000
|
unkown
|
page readonly
|
|
|
|
275184C2000
|
unkown
|
page read and write
|
|
|
|
1C027F00000
|
unkown
|
page readonly
|
|
|
|
1F32103D000
|
unkown
|
page read and write
|
|
|
|
1C027A8E000
|
unkown
|
page read and write
|
|
|
|
7FF53F395000
|
unkown
|
page readonly
|
|
|
|
7FF53F3B9000
|
unkown
|
page readonly
|
|
|
|
3487000
|
heap private
|
page read and write
|
|
|
|
1C023580000
|
unkown
|
page readonly
|
|
|
|
2D4A000
|
heap default
|
page read and write
|
|
|
|
7FF59F64C000
|
unkown
|
page readonly
|
|
|
|
261A7DC0000
|
unkown
|
page readonly
|
|
|
|
23BF4540000
|
unkown
|
page read and write
|
|
|
|
23837850000
|
unkown
|
page read and write
|
|
|
|
23BF44C0000
|
unkown
|
page readonly
|
|
|
|
B40000
|
unkown
|
page readonly
|
|
|
|
7FF5A469A000
|
unkown
|
page readonly
|
|
|
|
23BF43CE000
|
unkown
|
page read and write
|
|
|
|
7FF577A29000
|
unkown
|
page readonly
|
|
|
|
7FF5A478F000
|
unkown
|
page readonly
|
|
|
|
2B8B000
|
unkown
|
page readonly
|
|
|
|
187DC676000
|
unkown
|
page read and write
|
|
|
|
1C027C8D000
|
unkown
|
page read and write
|
|
|
|
187DE540000
|
unkown
|
page readonly
|
|
|
|
6470000
|
unkown
|
page readonly
|
|
|
|
2383786D000
|
unkown
|
page read and write
|
|
|
|
7FF50F066000
|
unkown
|
page readonly
|
|
|
|
1C022D18000
|
unkown
|
page read and write
|
|
|
|
1FEBC5B0000
|
heap private
|
page read and write
|
|
|
|
2866000
|
unkown
|
page readonly
|
|
|
|
2D6D000
|
unkown
|
page read and write
|
|
|
|
5E20000
|
unkown
|
page readonly
|
|
|
|
7FF5A4883000
|
unkown
|
page readonly
|
|
|
|
7FF577AF9000
|
unkown
|
page readonly
|
|
|
|
299D000
|
unkown
|
page readonly
|
|
|
|
7FF577B5F000
|
unkown
|
page readonly
|
|
|
|
261A783F000
|
unkown
|
page read and write
|
|
|
|
23BF4520000
|
unkown
|
page read and write
|
|
|
|
1C023390000
|
unkown
|
page read and write
|
|
|
|
7FF53EB95000
|
unkown
|
page readonly
|
|
|
|
187DC64D000
|
unkown
|
page read and write
|
|
|
|
7FF513B2C000
|
unkown
|
page readonly
|
|
|
|
654F9CE000
|
unkown
|
page read and write
|
|
|
|
F52B7F000
|
unkown
|
page read and write
|
|
|
|
7FF5A43EB000
|
unkown
|
page readonly
|
|
|
|
7FF53F134000
|
unkown
|
page readonly
|
|
|
|
CA0197D000
|
unkown
|
page read and write
|
|
|
|
7FF5A4713000
|
unkown
|
page readonly
|
|
|
|
1F321057000
|
unkown
|
page read and write
|
|
|
|
23837868000
|
unkown
|
page read and write
|
|
|
|
23BF4520000
|
unkown
|
page read and write
|
|
|
|
23BF444A000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
heap default
|
page read and write
|
|
|
|
7FF577E1C000
|
unkown
|
page readonly
|
|
|
|
7FF59F625000
|
unkown
|
page readonly
|
|
|
|
7FF53F443000
|
unkown
|
page readonly
|
|
|
|
1C02269D000
|
unkown
|
page read and write
|
|
|
|
26128A00000
|
unkown
|
page readonly
|
|
|
|
1C022D59000
|
unkown
|
page read and write
|
|
|
|
2383787E000
|
unkown
|
page read and write
|
|
|
|
2D6D000
|
unkown
|
page read and write
|
|
|
|
27518600000
|
unkown
|
page readonly
|
|
|
|
1F320F00000
|
unkown
|
page readonly
|
|
|
|
477A37F000
|
unkown
|
page read and write
|
|
|
|
654FFFF000
|
unkown
|
page read and write
|
|
|
|
7FF50F5CA000
|
unkown
|
page readonly
|
|
|
|
7FF59F6BC000
|
unkown
|
page readonly
|
|
|
|
7FF513B9C000
|
unkown
|
page readonly
|
|
|
|
1C022690000
|
unkown
|
page read and write
|
|
|
|
23BF442B000
|
unkown
|
page read and write
|
|
|
|
32CD000
|
unkown
|
page read and write
|
|
|
|
7FF5779FD000
|
unkown
|
page readonly
|
|
|
|
7FF50F7D5000
|
unkown
|
page readonly
|
|
|
|
7FF59F664000
|
unkown
|
page readonly
|
|
|
|
1C0226FC000
|
unkown
|
page read and write
|
|
|
|
7FF53F364000
|
unkown
|
page readonly
|
|
|
|
23837848000
|
unkown
|
page read and write
|
|
|
|
29B5000
|
unkown
|
page readonly
|
|
|
|
7FF5A4523000
|
unkown
|
page readonly
|
|
|
|
1C027A88000
|
unkown
|
page read and write
|
|
|
|
BB44079000
|
unkown
|
page read and write
|
|
|
|
7FF54A6F2000
|
unkown
|
page readonly
|
|
|
|
1C0235D0000
|
unkown
|
page readonly
|
|
|
|
3200000
|
unkown
|
page readonly
|
|
|
|
4779FFF000
|
unkown
|
page read and write
|
|
|
|
23837842000
|
unkown
|
page read and write
|
|
|
|
7FF577BE5000
|
unkown
|
page readonly
|
|
|
|
32CD000
|
unkown
|
page read and write
|
|
|
|
27518330000
|
unkown
|
page readonly
|
|
|
|
B20000
|
unkown
|
page read and write
|
|
|
|
7FF577CF4000
|
unkown
|
page readonly
|
|
|
|
1FEBC857000
|
unkown
|
page read and write
|
|
|
|
341E000
|
unkown
|
page read and write
|
|
|
|
29A4000
|
unkown
|
page readonly
|
|
|
|
477A47D000
|
unkown
|
page read and write
|
|
|
|
7FF528186000
|
unkown
|
page readonly
|
|
|
|
33DE000
|
unkown
|
page read and write
|
|
|
|
7FF54A766000
|
unkown
|
page readonly
|
|
|
|
2B63000
|
unkown
|
page readonly
|
|
|
|
7FF50F7C4000
|
unkown
|
page readonly
|
|
|
|
7FF59F5F3000
|
unkown
|
page readonly
|
|
|
|
23837862000
|
unkown
|
page read and write
|
|
|
|
2B3F000
|
unkown
|
page readonly
|
|
|
|
23BF4380000
|
heap default
|
page read and write
|
|
|
|
7FF513A96000
|
unkown
|
page readonly
|
|
|
|
7FF53F426000
|
unkown
|
page readonly
|
|
|
|
187DC68E000
|
unkown
|
page read and write
|
|
|
|
26128C30000
|
heap private
|
page read and write
|
|
|
|
23837884000
|
unkown
|
page read and write
|
|
|
|
7FF577BE0000
|
unkown
|
page readonly
|
|
|
|
7FF53F443000
|
unkown
|
page readonly
|
|
|
|
7FF5B0941000
|
unkown
|
page readonly
|
|
|
|
1C027C9A000
|
unkown
|
page read and write
|
|
|
|
F531FE000
|
unkown
|
page read and write
|
|
|
|
7FF577E25000
|
unkown
|
page readonly
|
|
|
|
1C023910000
|
unkown
|
page read and write
|
|
|
|
7FF50EF86000
|
unkown
|
page readonly
|
|
|
|
7FF5B097C000
|
unkown
|
page readonly
|
|
|
|
1FEBC610000
|
heap default
|
page read and write
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
4C30000
|
unkown
|
page readonly
|
|
|
|
1FEBC7E0000
|
unkown
|
page read and write
|
|
|
|
1FEBC813000
|
unkown
|
page read and write
|
|
|
|
26128B20000
|
unkown
|
page readonly
|
|
|
|
261A7A00000
|
unkown
|
page readonly
|
|
|
|
7FF59F735000
|
unkown
|
page readonly
|
|
|
|
1C022D02000
|
unkown
|
page read and write
|
|
|
|
2383784F000
|
unkown
|
page read and write
|
|
|
|
7FF513A74000
|
unkown
|
page readonly
|
|
|
|
7FF50F8E5000
|
unkown
|
page readonly
|
|
|
|
187DC654000
|
unkown
|
page read and write
|
|
|
|
7FF577D48000
|
unkown
|
page readonly
|
|
|
|
1C022500000
|
unkown
|
page readonly
|
|
|
|
7FF50F821000
|
unkown
|
page readonly
|
|
|
|
1C027CB0000
|
unkown
|
page read and write
|
|
|
|
7FF53F1F5000
|
unkown
|
page readonly
|
|
|
|
7FF577B24000
|
unkown
|
page readonly
|
|
|
|
2AA9000
|
unkown
|
page readonly
|
|
|
|
7FF577BDB000
|
unkown
|
page readonly
|
|
|
|
7FF50F04A000
|
unkown
|
page readonly
|
|
|
|
124C2FB000
|
unkown
|
page read and write
|
|
|
|
7FF5B0949000
|
unkown
|
page readonly
|
|
|
|
7FF50EF94000
|
unkown
|
page readonly
|
|
|
|
7FF5A47D5000
|
unkown
|
page readonly
|
|
|
|
907000
|
unkown
|
page read and write
|
|
|
|
23BF4439000
|
unkown
|
page read and write
|
|
|
|
F5247B000
|
unkown
|
page read and write
|
|
|
|
7FF50F8F3000
|
unkown
|
page readonly
|
|
|
|
187DC5C0000
|
unkown
|
page read and write
|
|
|
|
BEA000
|
heap private
|
page read and write
|
|
|
|
7FF577D00000
|
unkown
|
page readonly
|
|
|
|
23BF43DC000
|
unkown
|
page read and write
|
|
|
|
261A7876000
|
unkown
|
page read and write
|
|
|
|
7FF59F4AA000
|
unkown
|
page readonly
|
|
|
|
7FF577DAC000
|
unkown
|
page readonly
|
|
|
|
7FF50F805000
|
unkown
|
page readonly
|
|
|
|
7FF5B0928000
|
unkown
|
page readonly
|
|
|
|
BB43FFE000
|
unkown
|
page read and write
|
|
|
|
27518250000
|
heap default
|
page read and write
|
|
|
|
F52677000
|
unkown
|
page read and write
|
|
|
|
1C027BE0000
|
unkown
|
page read and write
|
|
|
|
23837875000
|
unkown
|
page read and write
|
|
|
|
187DC65D000
|
unkown
|
page read and write
|
|
|
|
261A7829000
|
unkown
|
page read and write
|
|
|
|
9044B7F000
|
unkown
|
page read and write
|
|
|
|
7FF513BB3000
|
unkown
|
page readonly
|
|
|
|
7FF50EF1D000
|
unkown
|
page readonly
|
|
|
|
1C027B84000
|
unkown
|
page write copy
|
|
|
|
7FF5B0930000
|
unkown
|
page readonly
|
|
|
|
2D30000
|
unkown
|
page read and write
|
|
|
|
5EE0000
|
unkown
|
page read and write
|
|
|
|
7AB000
|
unkown
|
page read and write
|
|
|
|
23BF4414000
|
unkown
|
page read and write
|
|
|
|
7FF5A47EC000
|
unkown
|
page readonly
|
|
|
|
7FF5B098C000
|
unkown
|
page readonly
|
|
|
|
7FF513B05000
|
unkown
|
page readonly
|
|
|
|
7FF54A688000
|
unkown
|
page readonly
|
|
|
|
7FF5A4883000
|
unkown
|
page readonly
|
|
|
|
26128A20000
|
heap default
|
page read and write
|
|
|
|
1C027AA4000
|
unkown
|
page read and write
|
|
|
|
68A0000
|
unkown
|
page read and write
|
|
|
|
7FF59F63C000
|
unkown
|
page readonly
|
|
|
|
7FF59F298000
|
unkown
|
page readonly
|
|
|
|
1C022689000
|
unkown
|
page read and write
|
|
|
|
7FF577E33000
|
unkown
|
page readonly
|
|
|
|
7FF50F7E0000
|
unkown
|
page readonly
|
|
|
|
23BF43D5000
|
unkown
|
page read and write
|
|
|
|
1C022BF0000
|
unkown
|
page read and write
|
|
|
|
23BF4750000
|
unkown
|
page readonly
|
|
|
|
7FF50EF17000
|
unkown
|
page readonly
|
|
|
|
7FF577D54000
|
unkown
|
page readonly
|
|
|
|
1FEBC700000
|
unkown
|
page readonly
|
|
|
|
23BF4250000
|
unkown
|
page read and write
|
|
|
|
2971000
|
unkown
|
page readonly
|
|
|
|
BE0000
|
heap private
|
page read and write
|
|
|
|
1F321802000
|
unkown
|
page read and write
|
|
|
|
1F321680000
|
unkown
|
page read and write
|
|
|
|
7FF528186000
|
unkown
|
page readonly
|
|
|
|
23BF445A000
|
unkown
|
page read and write
|
|
|
|
7FF577D0C000
|
unkown
|
page readonly
|
|
|
|
F528FA000
|
unkown
|
page read and write
|
|
|
|
7FF53F358000
|
unkown
|
page readonly
|
|
|
|
2B54000
|
unkown
|
page readonly
|
|
|
|
1F320FD0000
|
unkown
|
page readonly
|
|
|
|
261A7730000
|
unkown
|
page readonly
|
|
|
|
7FF5B0772000
|
unkown
|
page readonly
|
|
|
|
1C027CB4000
|
unkown
|
page read and write
|
|
|
|
7FF549F65000
|
unkown
|
page readonly
|
|
|
|
1FEBC913000
|
unkown
|
page read and write
|
|
|
|
7FF50F7FF000
|
unkown
|
page readonly
|
|
|
|
2D69000
|
unkown
|
page read and write
|
|
|
|
A20000
|
unkown
|
page readonly
|
|
|
|
B10000
|
unkown
|
page readonly
|
|
|
|
23BF5210000
|
unkown
|
page read and write
|
|
|
|
7FF53F10F000
|
unkown
|
page readonly
|
|
|
|
2B6E000
|
unkown
|
page readonly
|
|
|
|
7FF59F409000
|
unkown
|
page readonly
|
|
|
|
7FF577BFD000
|
unkown
|
page readonly
|
|
|
|
7FF50F0F4000
|
unkown
|
page readonly
|
|
|
|
7FF59F6B2000
|
unkown
|
page readonly
|
|
|
|
7FF5B0982000
|
unkown
|
page readonly
|
|
|
|
1C022672000
|
unkown
|
page read and write
|
|
|
|
7FF50EFEC000
|
unkown
|
page readonly
|
|
|
|
7FF5A4082000
|
unkown
|
page readonly
|
|
|
|
23BF5200000
|
unkown
|
page read and write
|
|
|
|
1C0235A0000
|
unkown
|
page readonly
|
|
|
|
7FF53F1A2000
|
unkown
|
page readonly
|
|
|
|
1F321029000
|
unkown
|
page read and write
|
|
|
|
23BF43CC000
|
unkown
|
page read and write
|
|
|
|
23837839000
|
unkown
|
page read and write
|
|
|
|
1C0223C0000
|
heap private
|
page read and write
|
|
|
|
1C022600000
|
unkown
|
page read and write
|
|
|
|
2383787B000
|
unkown
|
page read and write
|
|
|
|
1FEBCA00000
|
unkown
|
page readonly
|
|
|
|
1C023380000
|
unkown
|
page read and write
|
|
|
|
32E2000
|
unkown
|
page read and write
|
|
|
|
7FF50F652000
|
unkown
|
page readonly
|
|
|
|
23BF43CC000
|
unkown
|
page read and write
|
|
|
|
275184CA000
|
unkown
|
page read and write
|
|
|
|
27518C02000
|
unkown
|
page read and write
|
|
|
|
7FF53F34F000
|
unkown
|
page readonly
|
|
|
|
2D71000
|
unkown
|
page read and write
|
|
|
|
F52AFB000
|
unkown
|
page read and write
|
|
|
|
23837874000
|
unkown
|
page read and write
|
|
|
|
7FF50F808000
|
unkown
|
page readonly
|
|
|
|
7FF50F831000
|
unkown
|
page readonly
|
|
|
|
7FF50F869000
|
unkown
|
page readonly
|
|
|
|
309B000
|
unkown
|
page read and write
|
|
|
|
23837863000
|
unkown
|
page read and write
|
|
|
|
2A5E000
|
unkown
|
page readonly
|
|
|
|
7FF50EC5A000
|
unkown
|
page readonly
|
|
|
|
23BF4480000
|
unkown
|
page read and write
|
|
|
|
7FF54A6FC000
|
unkown
|
page readonly
|
|
|
|
27518424000
|
unkown
|
page read and write
|
|
|
|
23837690000
|
unkown
|
page readonly
|
|
|
|
7FF5132DD000
|
unkown
|
page readonly
|
|
|
|
7FF577B1D000
|
unkown
|
page readonly
|
|
|
|
261A7650000
|
unkown
|
page readonly
|
|
|
|
7FF53F314000
|
unkown
|
page readonly
|
|
|
|
2D74000
|
unkown
|
page read and write
|
|
|
|
23BF5190000
|
unkown
|
page readonly
|
|
|
|
1C027BE0000
|
unkown
|
page read and write
|
|
|
|
7FF50EFDC000
|
unkown
|
page readonly
|
|
|
|
1C027AA1000
|
unkown
|
page read and write
|
|
|
|
27518D32000
|
unkown
|
page read and write
|
|
|
|
7FF5A3FCB000
|
unkown
|
page readonly
|
|
|
|
7FF5A45EA000
|
unkown
|
page readonly
|
|
|
|
7FF5A43E9000
|
unkown
|
page readonly
|
|
|
|
7FF5A4671000
|
unkown
|
page readonly
|
|
|
|
1C027CAE000
|
unkown
|
page read and write
|
|
|
|
1C02262A000
|
unkown
|
page read and write
|
|
|
|
187DC702000
|
unkown
|
page read and write
|
|
|
|
7FF59F72C000
|
unkown
|
page readonly
|
|
|
|
2383783D000
|
unkown
|
page read and write
|
|
|
|
1C027BC0000
|
unkown
|
page read and write
|
|
|
|
7FF5A4795000
|
unkown
|
page readonly
|
|
|
|
7DFEE537D000
|
unkown
|
page readonly
|
|
|
|
261A7D90000
|
unkown
|
page readonly
|
|
|
|
348A000
|
heap private
|
page read and write
|
|
|
|
27518990000
|
unkown
|
page readonly
|
|
|
|
C80000
|
unkown
|
page read and write
|
|
|
|
261A75E0000
|
heap private
|
page read and write
|
|
|
|
7FF5B0951000
|
unkown
|
page readonly
|
|
|
|
187DDFE0000
|
unkown
|
page read and write
|
|
|
|
7FF59F695000
|
unkown
|
page readonly
|
|
|
|
7FF50F814000
|
unkown
|
page readonly
|
|
|
|
5F1BEFE000
|
unkown
|
page read and write
|
|
|
|
23BF44D0000
|
unkown
|
page readonly
|
|
|
|
F52EFD000
|
unkown
|
page read and write
|
|
|
|
23BF43FF000
|
unkown
|
page read and write
|
|
|
|
2A92000
|
unkown
|
page readonly
|
|
|
|
7FF513AAC000
|
unkown
|
page readonly
|
|
|
|
29B8000
|
unkown
|
page readonly
|
|
|
|
7FF513ABF000
|
unkown
|
page readonly
|
|
|
|
7FF50F810000
|
unkown
|
page readonly
|
|
|
|
7FF5B091F000
|
unkown
|
page readonly
|
|
|
|
1F321680000
|
unkown
|
page read and write
|
|
|
|
187DC64B000
|
unkown
|
page read and write
|
|
|
|
23837A00000
|
unkown
|
page readonly
|
|
|
|
2A74000
|
unkown
|
page readonly
|
|
|
|
1C022C00000
|
unkown
|
page read and write
|
|
|
|
7FF54A6A4000
|
unkown
|
page readonly
|
|
|
|
7FF53EB8F000
|
unkown
|
page readonly
|
|
|
|
2E40000
|
unkown
|
page readonly
|
|
|
|
23837760000
|
unkown
|
page readonly
|
|
|
|
1C0226BA000
|
unkown
|
page read and write
|
|
|
|
7FF577D04000
|
unkown
|
page readonly
|
|
|
|
7FF5B0A13000
|
unkown
|
page readonly
|
|
|
|
7FF5138CB000
|
unkown
|
page readonly
|
|
|
|
F52FF9000
|
unkown
|
page read and write
|
|
|
|
23837813000
|
unkown
|
page read and write
|
|
|
|
7FF513ABB000
|
unkown
|
page readonly
|
|
|
|
7FF53F3D4000
|
unkown
|
page readonly
|
|
|
|
7FF513B36000
|
unkown
|
page readonly
|
|
|
|
7FF53F379000
|
unkown
|
page readonly
|
|
|
|
1C022674000
|
unkown
|
page read and write
|
|
|
|
3490000
|
unkown
|
page readonly
|
|
|
|
32C5000
|
unkown
|
page read and write
|
|
|
|
23837864000
|
unkown
|
page read and write
|
|
|
|
1C027BB0000
|
unkown
|
page read and write
|
|
|
|
1C027BA0000
|
unkown
|
page read and write
|
|
|
|
1C022C02000
|
unkown
|
page read and write
|
|
|
|
1F321102000
|
unkown
|
page read and write
|
|
|
|
2751846E000
|
unkown
|
page read and write
|
|
|
|
29A6000
|
unkown
|
page readonly
|
|
|
|
23BF51A0000
|
unkown
|
page read and write
|
|
|
|
7FF54A5F5000
|
unkown
|
page readonly
|
|
|
|
32D5000
|
unkown
|
page read and write
|
|
|
|
23837829000
|
unkown
|
page read and write
|
|
|
|
7FF577B2F000
|
unkown
|
page readonly
|
|
|
|
7FF53F360000
|
unkown
|
page readonly
|
|
|
|
7FF5779A4000
|
unkown
|
page readonly
|
|
|
|
1C022D00000
|
unkown
|
page read and write
|
|
|
|
2D69000
|
unkown
|
page read and write
|
|
|
|
BDEFDAC000
|
unkown
|
page read and write
|
|
|
|
27518413000
|
unkown
|
page read and write
|
|
|
|
2B44000
|
unkown
|
page readonly
|
|
|
|
2D74000
|
unkown
|
page read and write
|
|
|
|
3480000
|
heap private
|
page read and write
|
|
|
|
7FF54A783000
|
unkown
|
page readonly
|
|
|
|
1FEBC6F0000
|
unkown
|
page readonly
|
|
|
|
654FDFE000
|
unkown
|
page read and write
|
|
|
|
7FF577D71000
|
unkown
|
page readonly
|
|
|
|
5F1BB7E000
|
unkown
|
page read and write
|
|
|
|
2A2F000
|
unkown
|
page readonly
|
|
|
|
187DC718000
|
unkown
|
page read and write
|
|
|
|
1C023361000
|
unkown
|
page read and write
|
|
|
|
9044C7E000
|
unkown
|
page read and write
|
|
|
|
1C027930000
|
unkown
|
page readonly
|
|
|
|
7FF50EFB1000
|
unkown
|
page readonly
|
|
|
|
7FF53F231000
|
unkown
|
page readonly
|
|
|
|
23837830000
|
unkown
|
page read and write
|
|
|
|
7FF50EFA9000
|
unkown
|
page readonly
|
|
|
|
7FF57766D000
|
unkown
|
page readonly
|
|
|
|
7FF50F86C000
|
unkown
|
page readonly
|
|
|
|
23837680000
|
heap default
|
page read and write
|
|
|
|
CA01BFE000
|
unkown
|
page read and write
|
|
|
|
7FF577D3B000
|
unkown
|
page readonly
|
|
|
|
BDF027E000
|
unkown
|
page read and write
|
|
|
|
23BF43CC000
|
unkown
|
page read and write
|
|
|
|
7FF577D20000
|
unkown
|
page readonly
|
|
|
|
326E000
|
unkown
|
page read and write
|
|
|
|
1F321690000
|
unkown
|
page read and write
|
|
|
|
5F1C0FC000
|
unkown
|
page read and write
|
|
|
|
32D7000
|
unkown
|
page read and write
|
|
|
|
7FF513B1C000
|
unkown
|
page readonly
|
|
|
|
187DC602000
|
unkown
|
page read and write
|
|
|
|
23BF442B000
|
unkown
|
page read and write
|
|
|
|
7FF53F3BC000
|
unkown
|
page readonly
|
|
|
|
7FF577D2B000
|
unkown
|
page readonly
|
|
|
|
2AA4000
|
unkown
|
page readonly
|
|
|
|
1C027E30000
|
unkown
|
page readonly
|
|
|
|
23BF446B000
|
unkown
|
page read and write
|
|
|
|
7FF549EEC000
|
unkown
|
page readonly
|
|
|
|
7FF577DC4000
|
unkown
|
page readonly
|
|
|
|
26128950000
|
unkown
|
page read and write
|
|
|
|
27518502000
|
unkown
|
page read and write
|
|
|
|
7FF59F2A9000
|
unkown
|
page readonly
|
|
|
|
26F3000
|
unkown
|
page readonly
|
|
|
|
2383783A000
|
unkown
|
page read and write
|
|
|
|
2D6A000
|
unkown
|
page read and write
|
|
|
|
1C027B87000
|
unkown
|
page write copy
|
|
|
|
2612A460000
|
heap private
|
page read and write
|
|
|
|
2D89000
|
unkown
|
page read and write
|
|
|
|
7FF5B09A4000
|
unkown
|
page readonly
|
|
|
|
7FF50F073000
|
unkown
|
page readonly
|
|
|
|
7FF50ED89000
|
unkown
|
page readonly
|
|
|
|
23BF443B000
|
unkown
|
page read and write
|
|
|
|
654FC7E000
|
unkown
|
page read and write
|
|
|
|
7FF5A477C000
|
unkown
|
page readonly
|
|
|
|
7FF50F056000
|
unkown
|
page readonly
|
|
|
|
7FF50F05C000
|
unkown
|
page readonly
|
|
|
|
30F0000
|
unkown
|
page readonly
|
|
|
|
1C022F01000
|
unkown
|
page read and write
|
|
|
|
1FEBC7D0000
|
unkown
|
page readonly
|
|
|
|
23BF44A0000
|
unkown
|
page read and write
|
|
|
|
23837860000
|
unkown
|
page read and write
|
|
|
|
5F1B71C000
|
unkown
|
page read and write
|
|
|
|
65500FF000
|
unkown
|
page read and write
|
|
|
|
2612A670000
|
heap private
|
page read and write
|
|
|
|
7FF513B31000
|
unkown
|
page readonly
|
|
|
|
2A53000
|
unkown
|
page readonly
|
|
|
|
23BF5180000
|
unkown
|
page read and write
|
|
|
|
29DB000
|
unkown
|
page readonly
|
|
|
|
1C022D13000
|
unkown
|
page read and write
|
|
|
|
7FF577A23000
|
unkown
|
page readonly
|
|
|
|
7FF54A018000
|
unkown
|
page readonly
|
|
|
|
1FEBC902000
|
unkown
|
page read and write
|
|
|
|
7FF53F1D5000
|
unkown
|
page readonly
|
|
|
|
3280000
|
unkown
|
page readonly
|
|
|
|
9044E7F000
|
unkown
|
page read and write
|
|
|
|
654FEFE000
|
unkown
|
page read and write
|
|
|
|
2999000
|
unkown
|
page readonly
|
|
|
|
1C022C15000
|
unkown
|
page read and write
|
|
|
|
BDF017D000
|
unkown
|
page read and write
|
|
|
|
1C027BE0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0965000
|
unkown
|
page readonly
|
|
|
|
1F321200000
|
unkown
|
page readonly
|
|
|
|
7FF577C21000
|
unkown
|
page readonly
|
|
|
|
2612A470000
|
heap private
|
page read and write
|
|
|
|
2A6F000
|
unkown
|
page readonly
|
|
|
|
7FF5A3FC2000
|
unkown
|
page readonly
|
|
|
|
1C027B50000
|
unkown
|
page write copy
|
|
|
|
1F321680000
|
unkown
|
page read and write
|
|
|
|
32CE000
|
unkown
|
page read and write
|
|
|
|
27518350000
|
unkown
|
page read and write
|
|
|
|
23BF4530000
|
heap private
|
page read and write
|
|
|
|
4779B6B000
|
unkown
|
page read and write
|
|
|
|
7FF50F451000
|
unkown
|
page readonly
|
|
|
|
261289A0000
|
unkown
|
page readonly
|
|
|
|
7FF577629000
|
unkown
|
page readonly
|
|
|
|
2612A560000
|
heap private
|
page read and write
|
|
|
|
1C027A80000
|
unkown
|
page read and write
|
|
|
|
7FF50F8DC000
|
unkown
|
page readonly
|
|
|
|
2B84000
|
unkown
|
page readonly
|
|
|
|
2D77000
|
unkown
|
page read and write
|
|
|
|
23BF4390000
|
heap default
|
page read and write
|
|
|
|
1C027C2D000
|
unkown
|
page read and write
|
|
|
|
1F321000000
|
unkown
|
page read and write
|
|
|
|
29C8000
|
unkown
|
page readonly
|
|
|
|
2B72000
|
unkown
|
page readonly
|
|
|
|
1C0226B2000
|
unkown
|
page read and write
|
|
|
|
7FF549EEE000
|
unkown
|
page readonly
|
|
|
|
261A7902000
|
unkown
|
page read and write
|
|
|
|
1FEBC802000
|
unkown
|
page read and write
|
|
|
|
9044D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5B0209000
|
unkown
|
page readonly
|
|
|
|
7FF5B0A13000
|
unkown
|
page readonly
|
|
|
|
2751843E000
|
unkown
|
page read and write
|
|
|
|
345E000
|
unkown
|
page read and write
|
|
|
|
23837620000
|
heap private
|
page read and write
|
|
|
|
1C022657000
|
unkown
|
page read and write
|
|
|
|
7FF50F8F3000
|
unkown
|
page readonly
|
|
|
|
7FF50EFFE000
|
unkown
|
page readonly
|
|
|
|
2D69000
|
unkown
|
page read and write
|
|
|
|
477A17E000
|
unkown
|
page read and write
|
|
|
|
2E74000
|
unkown
|
page read and write
|
|
|
|
23BF51B0000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
unkown
|
page readonly
|
|
|
|
23BF4F50000
|
unkown
|
page read and write
|
|
|
|
27518380000
|
unkown
|
page readonly
|
|
|
|
1C027B54000
|
unkown
|
page readonly
|
|
|
|
7FF50F685000
|
unkown
|
page readonly
|
|
|
|
7FF50F8D6000
|
unkown
|
page readonly
|
|
|
|
904467B000
|
unkown
|
page read and write
|
|
|
|
7FF577D9B000
|
unkown
|
page readonly
|
|
|
|
C7E000
|
unkown
|
page read and write
|
|
|
|
7FF577D50000
|
unkown
|
page readonly
|
|
|
|
261A7DA0000
|
unkown
|
page read and write
|
|
|
|
5F1BDFE000
|
unkown
|
page read and write
|
|
|
|
2383787D000
|
unkown
|
page read and write
|
|
|
|
124BD0C000
|
unkown
|
page read and write
|
|
There are 934 hidden memdumps, click here to show them.