Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
Giam Gia Dien dich Covid-19.docx
|
Microsoft Word 2007+
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\66796C8F-B35E-4D79-8859-ED4428147AB3
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\31990A3A.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x2248, frames
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\462875DD.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x2248, frames
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4E26524C.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x2248, frames
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{052071EC-7EE4-48FD-8E75-870D08322BDF}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{7A43107D-BD67-4CB9-B371-FBE9DF1698C1}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{C15F1D1B-BFCF-4AAA-9EF6-16EE60EE8874}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{EE3D3D5E-8DA2-48AF-AC16-FD6E2E3754DA}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Giam Gia Dien dich Covid-19.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:54
2020, mtime=Thu May 6 14:55:00 2021, atime=Thu May 6 14:54:51 2021, length=3831871, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
||
C:\Users\user\Desktop\~$am Gia Dien dich Covid-19.docx
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\8D7893DF.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x2248, frames
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AAD15C54.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x2248, frames
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F6DE19D6.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x2248, frames
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A7F4CFE5-FD14-491B-BD17-FD822CEDA35F}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{AD3EC32A-61B9-479D-AE81-4807857507A1}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B4FD7973-97C0-4A14-814E-1968BCE52029}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{B91DB962-9907-4C39-AB19-BE7338F7A7B8}.tmp
|
data
|
dropped
|
There are 11 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://ecs.office.com/config/v2/Office
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://ncus.contentsync.
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://wus2.contentsync.
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://ncus.pagecontentsync.
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
https://directory.services.
|
unknown
|
||
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
||
https://staging.cortana.ai
|
unknown
|
There are 90 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
192.168.2.1
|
unknown
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
%
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
!%
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
v'
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
j+
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
4BEAA
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
1
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
UpdateComplete
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Options Version
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Data
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Data
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Cambria Math
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Segoe UI
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Microsoft JhengHei
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
55C9F
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
File Path
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Datetime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Position
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ChartToolsSuperTooltipHidden
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastPurgeTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
VisiFlm
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
AutoGrammar
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
PreferredView
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
@Microsoft JhengHei
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
WORDFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Name
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Path
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Extensions
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
55C9F
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Datetime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
|
Settings
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
''6
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
,#6
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
#%6
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ReviewToken
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
EC88D
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
VBAFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Arial Unicode MS
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Batang
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@BatangChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@DFKai-SB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Dotum
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@DotumChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@FangSong
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Gulim
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@GulimChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Gungsuh
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@GungsuhChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@KaiTi
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Malgun Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Meiryo
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Meiryo UI
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Microsoft JhengHei
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Microsoft YaHei
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU_HKSCS
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU_HKSCS-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MingLiU-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS Mincho
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS PGothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS PMincho
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@MS UI Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@NSimSun
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@PMingLiU
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@PMingLiU-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimHei
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimSun
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@SimSun-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Agency FB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Aharoni
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Algerian
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Andalus
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Angsana New
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
AngsanaUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Aparajita
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arabic Typesetting
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Black
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Narrow
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Rounded MT Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Arial Unicode MS
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Baskerville Old Face
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Batang
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
BatangChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bauhaus 93
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bell MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Berlin Sans FB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Berlin Sans FB Demi
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bernard MT Condensed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Blackadder ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Black
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Condensed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bodoni MT Poster Compressed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Book Antiqua
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bookman Old Style
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bookshelf Symbol 7
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Bradley Hand ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Britannic Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Broadway
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Browallia New
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
BrowalliaUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Brush Script MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calibri
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calibri Light
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Californian FB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Calisto MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cambria
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cambria Math
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Candara
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Castellar
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Centaur
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Century Schoolbook
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Chiller
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Colonna MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Comic Sans MS
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Consolas
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Constantia
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cooper Black
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Copperplate Gothic Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Copperplate Gothic Light
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Corbel
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Cordia New
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
CordiaUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Courier New
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Curlz MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DaunPenh
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
David
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DFKai-SB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DilleniaUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DokChampa
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Dotum
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
DotumChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Ebrima
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Edwardian Script ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Elephant
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Engravers MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Bold ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Demi ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Light ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Eras Medium ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Estrangelo Edessa
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
EucrosiaUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Euphemia
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FangSong
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Felix Titling
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Footlight MT Light
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Forte
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Book
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Demi
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Demi Cond
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Heavy
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Medium
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Franklin Gothic Medium Cond
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FrankRuehl
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
FreesiaUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Freestyle Script
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
French Script MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gabriola
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Garamond
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gautami
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Georgia
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gigi
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT Condensed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans MT Ext Condensed Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans Ultra Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gill Sans Ultra Bold Condensed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gisha
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gloucester MT Extra Condensed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Goudy Old Style
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Goudy Stout
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gulim
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
GulimChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Gungsuh
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
GungsuhChe
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Haettenschweiler
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Harlow Solid Italic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Harrington
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
High Tower Text
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Impact
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Imprint MT Shadow
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Informal Roman
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
IrisUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Iskoola Pota
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
JasmineUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Jokerman
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Juice ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
KaiTi
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kalinga
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kartika
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Khmer UI
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
KodchiangUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kokila
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kristen ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Kunstler Script
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lao UI
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Latha
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Leelawadee
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Levenim MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
LilyUPC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Bright
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Calligraphy
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Console
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Fax
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Handwriting
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans Typewriter
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Lucida Sans Unicode
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Magneto
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Maiandra GD
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Malgun Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mangal
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Marlett
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Matura MT Script Capitals
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Meiryo
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Meiryo UI
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Himalaya
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft JhengHei
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft New Tai Lue
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft PhagsPa
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Sans Serif
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Tai Le
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Uighur
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft YaHei
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Microsoft Yi Baiti
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU_HKSCS
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU_HKSCS-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MingLiU-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Miriam
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Miriam Fixed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mistral
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Modern No. 20
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Mongolian Baiti
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Monotype Corsiva
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MoolBoran
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Mincho
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Outlook
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS PGothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS PMincho
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Reference Sans Serif
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS Reference Specialty
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MS UI Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MT Extra
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MV Boli
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Narkisim
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Niagara Engraved
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Niagara Solid
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NSimSun
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Nyala
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
OCR A Extended
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Old English Text MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Onyx
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Palace Script MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Palatino Linotype
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Papyrus
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Parchment
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Perpetua
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Perpetua Titling MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Plantagenet Cherokee
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Playbill
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
PMingLiU
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
PMingLiU-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Poor Richard
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Pristina
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Raavi
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rage Italic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Ravie
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell Condensed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rockwell Extra Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Rod
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Sakkal Majalla
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Script MT Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe Print
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe Script
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Light
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Semibold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Segoe UI Symbol
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Shonar Bangla
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Showcard Gothic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Shruti
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimHei
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Simplified Arabic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Simplified Arabic Fixed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimSun
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SimSun-ExtB
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Snap ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Stencil
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Sylfaen
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Symbol
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tahoma
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tempus Sans ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Times New Roman
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Traditional Arabic
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Trebuchet MS
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tunga
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT Condensed
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Tw Cen MT Condensed Extra Bold
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Utsaah
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vani
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Verdana
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vijaya
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Viner Hand ITC
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vivaldi
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vladimir Script
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Vrinda
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Webdings
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wide Latin
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings 2
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Wingdings 3
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
@Microsoft JhengHei
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F7031
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
WORDFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
NULL
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Version
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
F7031
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
Settings
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ZoomApp
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTF
|
||
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
MTTA
|
There are 440 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
A34797E000
|
unkown
|
page read and write
|
||
27C3E4C6000
|
unkown
|
page read and write
|
||
7FF55D3AA000
|
unkown
|
page readonly
|
||
2CD61A00000
|
unkown
|
page readonly
|
||
3E6417B000
|
unkown
|
page read and write
|
||
7E1287C000
|
unkown
|
page read and write
|
||
14B38A3F000
|
unkown
|
page read and write
|
||
7FF5B1743000
|
unkown
|
page readonly
|
||
7FF55D3E7000
|
unkown
|
page readonly
|
||
7FF5D5E61000
|
unkown
|
page readonly
|
||
7FF5DAAEC000
|
unkown
|
page readonly
|
||
14B38B3C000
|
unkown
|
page read and write
|
||
27C3EB81000
|
unkown
|
page read and write
|
||
7FF5D9F7A000
|
unkown
|
page readonly
|
||
7FF5DAB36000
|
unkown
|
page readonly
|
||
14B3D000000
|
unkown
|
page read and write
|
||
7FF5D64E1000
|
unkown
|
page readonly
|
||
19DBF800000
|
unkown
|
page read and write
|
||
7FF55D404000
|
unkown
|
page readonly
|
||
19DBF852000
|
unkown
|
page read and write
|
||
7FF59C782000
|
unkown
|
page readonly
|
||
14B3AC00000
|
unkown
|
page read and write
|
||
14B38B1D000
|
unkown
|
page read and write
|
||
7FF50D819000
|
unkown
|
page readonly
|
||
7FF5905BD000
|
unkown
|
page readonly
|
||
7E12AFF000
|
unkown
|
page read and write
|
||
1A1A9B90000
|
unkown
|
page readonly
|
||
21F59ABD000
|
unkown
|
page read and write
|
||
27C3EBDC000
|
unkown
|
page read and write
|
||
45886F7000
|
unkown
|
page read and write
|
||
7FF590573000
|
unkown
|
page readonly
|
||
14B3AE42000
|
unkown
|
page read and write
|
||
7FF59C70D000
|
unkown
|
page readonly
|
||
2CD632A0000
|
unkown
|
page readonly
|
||
7FF5D837A000
|
unkown
|
page readonly
|
||
36440BB000
|
unkown
|
page read and write
|
||
2414CA29000
|
unkown
|
page read and write
|
||
7FF5CA16D000
|
unkown
|
page readonly
|
||
7FF50DAB2000
|
unkown
|
page readonly
|
||
27C3EB7A000
|
unkown
|
page read and write
|
||
7FF50D962000
|
unkown
|
page readonly
|
||
7FF590230000
|
unkown
|
page readonly
|
||
DF000F7000
|
unkown
|
page read and write
|
||
7E122F7000
|
unkown
|
page read and write
|
||
7FF5D9E71000
|
unkown
|
page readonly
|
||
7FF5D660B000
|
unkown
|
page readonly
|
||
27C3EB2C000
|
unkown
|
page read and write
|
||
7FF5D9EDD000
|
unkown
|
page readonly
|
||
27C3EB58000
|
unkown
|
page read and write
|
||
7FF5904B1000
|
unkown
|
page readonly
|
||
7FF5D9C5A000
|
unkown
|
page readonly
|
||
1A1ABC00000
|
unkown
|
page readonly
|
||
7FF55237A000
|
unkown
|
page readonly
|
||
7601E7F000
|
unkown
|
page read and write
|
||
7FF5C994D000
|
unkown
|
page readonly
|
||
7FF5D6503000
|
unkown
|
page readonly
|
||
14B3A9D8000
|
unkown
|
page read and write
|
||
14B3A4A0000
|
unkown
|
page readonly
|
||
364413E000
|
unkown
|
page read and write
|
||
7FF59056E000
|
unkown
|
page readonly
|
||
7FF5ACC9D000
|
unkown
|
page readonly
|
||
7FF55CF70000
|
unkown
|
page readonly
|
||
3E631FF000
|
unkown
|
page read and write
|
||
7FF5DA680000
|
unkown
|
page readonly
|
||
27C3EB2A000
|
unkown
|
page read and write
|
||
7FF5B1748000
|
unkown
|
page readonly
|
||
7FF5523FD000
|
unkown
|
page readonly
|
||
14B3AD83000
|
unkown
|
page read and write
|
||
14B3AF82000
|
unkown
|
page read and write
|
||
7FF5D8374000
|
unkown
|
page readonly
|
||
51C587B000
|
unkown
|
page read and write
|
||
7FF5523B8000
|
unkown
|
page readonly
|
||
7FF50D79F000
|
unkown
|
page readonly
|
||
19DBF914000
|
unkown
|
page read and write
|
||
14B3A979000
|
unkown
|
page read and write
|
||
7FF5D9C5F000
|
unkown
|
page readonly
|
||
3E642FC000
|
unkown
|
page read and write
|
||
7FF50D599000
|
unkown
|
page readonly
|
||
7FF5ACC4F000
|
unkown
|
page readonly
|
||
3E63E7B000
|
unkown
|
page read and write
|
||
7FF5DAAD7000
|
unkown
|
page readonly
|
||
7FF5D66EA000
|
unkown
|
page readonly
|
||
7FF5D9B69000
|
unkown
|
page readonly
|
||
14B3A925000
|
unkown
|
page read and write
|
||
7FF5ACB6D000
|
unkown
|
page readonly
|
||
21F59ABD000
|
unkown
|
page read and write
|
||
7FF5904C1000
|
unkown
|
page readonly
|
||
14B3B510000
|
unkown
|
page read and write
|
||
1A1A9D19000
|
unkown
|
page read and write
|
||
2414CA58000
|
unkown
|
page read and write
|
||
7FF59BFE3000
|
unkown
|
page readonly
|
||
7FF5CA0EE000
|
unkown
|
page readonly
|
||
7FF5D62CF000
|
unkown
|
page readonly
|
||
2965808F000
|
unkown
|
page read and write
|
||
7FF5D9FD4000
|
unkown
|
page readonly
|
||
7FF59014E000
|
unkown
|
page readonly
|
||
14B3AA50000
|
unkown
|
page readonly
|
||
85BA1FE000
|
unkown
|
page read and write
|
||
14B38B5E000
|
unkown
|
page read and write
|
||
2414CA13000
|
unkown
|
page read and write
|
||
7FF50D68F000
|
unkown
|
page readonly
|
||
7FF5D9DC6000
|
unkown
|
page readonly
|
||
14B3A90C000
|
unkown
|
page read and write
|
||
7FF5ACC99000
|
unkown
|
page readonly
|
||
7FF5D9F30000
|
unkown
|
page readonly
|
||
760217C000
|
unkown
|
page read and write
|
||
7FF50D2C1000
|
unkown
|
page readonly
|
||
7FF5D80EB000
|
unkown
|
page readonly
|
||
7FF5521A5000
|
unkown
|
page readonly
|
||
7FF5D9F7C000
|
unkown
|
page readonly
|
||
7FF5DABB2000
|
unkown
|
page readonly
|
||
27C3EB61000
|
unkown
|
page read and write
|
||
14B3A9C1000
|
unkown
|
page read and write
|
||
14B3A9EE000
|
unkown
|
page read and write
|
||
7FF5D83AD000
|
unkown
|
page readonly
|
||
7FF5901DE000
|
unkown
|
page readonly
|
||
27C3EB58000
|
unkown
|
page read and write
|
||
7FF55D4A1000
|
unkown
|
page readonly
|
||
7FF5B186C000
|
unkown
|
page readonly
|
||
7FF5B18B6000
|
unkown
|
page readonly
|
||
7FF5D65C3000
|
unkown
|
page readonly
|
||
3E63DFC000
|
unkown
|
page read and write
|
||
7FF5B1857000
|
unkown
|
page readonly
|
||
7FF5D665E000
|
unkown
|
page readonly
|
||
7FF5B173B000
|
unkown
|
page readonly
|
||
7FF552288000
|
unkown
|
page readonly
|
||
14B3AD43000
|
unkown
|
page read and write
|
||
27C3EB81000
|
unkown
|
page read and write
|
||
7FF50D77B000
|
unkown
|
page readonly
|
||
7FF5903E7000
|
unkown
|
page readonly
|
||
7FF5D8155000
|
unkown
|
page readonly
|
||
7FF50D8BB000
|
unkown
|
page readonly
|
||
7FF59C36A000
|
unkown
|
page readonly
|
||
19DBF790000
|
heap private
|
page read and write
|
||
7FF55D31C000
|
unkown
|
page readonly
|
||
7FF5D65A2000
|
unkown
|
page readonly
|
||
1B282002000
|
unkown
|
page read and write
|
||
7FF50D798000
|
unkown
|
page readonly
|
||
7E12577000
|
unkown
|
page read and write
|
||
14B3D110000
|
unkown
|
page read and write
|
||
27C3EB6D000
|
unkown
|
page read and write
|
||
14B3AA00000
|
unkown
|
page read and write
|
||
7FF5D9DB1000
|
unkown
|
page readonly
|
||
7FF5DAA2C000
|
unkown
|
page readonly
|
||
237A9BB0000
|
heap default
|
page read and write
|
||
7FF5C9DBA000
|
unkown
|
page readonly
|
||
7FF552464000
|
unkown
|
page readonly
|
||
7FF5523D4000
|
unkown
|
page readonly
|
||
14B3A9AC000
|
unkown
|
page read and write
|
||
7FF50D98F000
|
unkown
|
page readonly
|
||
E48567B000
|
unkown
|
page read and write
|
||
2414CA00000
|
unkown
|
page read and write
|
||
29658070000
|
unkown
|
page read and write
|
||
2414CC00000
|
unkown
|
page readonly
|
||
1A1A9CFD000
|
unkown
|
page read and write
|
||
7FF5D80F6000
|
unkown
|
page readonly
|
||
1B282102000
|
unkown
|
page read and write
|
||
28B0F1A0000
|
heap default
|
page read and write
|
||
17576F30000
|
heap private
|
page read and write
|
||
7FF5CA15E000
|
unkown
|
page readonly
|
||
3E63679000
|
unkown
|
page read and write
|
||
7FF5D6605000
|
unkown
|
page readonly
|
||
27C3E4ED000
|
unkown
|
page read and write
|
||
7FF5C9DC7000
|
unkown
|
page readonly
|
||
2CD61869000
|
unkown
|
page read and write
|
||
29658069000
|
unkown
|
page read and write
|
||
7FF59065C000
|
unkown
|
page readonly
|
||
21F599D0000
|
unkown
|
page read and write
|
||
14B3AD43000
|
unkown
|
page read and write
|
||
51C5BFA000
|
unkown
|
page read and write
|
||
14B3D110000
|
unkown
|
page read and write
|
||
7FF50DA31000
|
unkown
|
page readonly
|
||
7FF5B1517000
|
unkown
|
page readonly
|
||
7FF5AC7E6000
|
unkown
|
page readonly
|
||
7FF50D960000
|
unkown
|
page readonly
|
||
14B3A9F0000
|
unkown
|
page read and write
|
||
51C5AFE000
|
unkown
|
page read and write
|
||
27C3EB00000
|
unkown
|
page read and write
|
||
27C3EB85000
|
unkown
|
page read and write
|
||
2965803C000
|
unkown
|
page read and write
|
||
27C3EB41000
|
unkown
|
page read and write
|
||
7FF50D9C0000
|
unkown
|
page readonly
|
||
7FF59051A000
|
unkown
|
page readonly
|
||
7FF5D9DE9000
|
unkown
|
page readonly
|
||
14B38A83000
|
unkown
|
page read and write
|
||
7FF5D65FE000
|
unkown
|
page readonly
|
||
7FF5B1894000
|
unkown
|
page readonly
|
||
364457F000
|
unkown
|
page read and write
|
||
7FF5D9F5F000
|
unkown
|
page readonly
|
||
7FF5ACC6A000
|
unkown
|
page readonly
|
||
1B282013000
|
unkown
|
page read and write
|
||
2414CB02000
|
unkown
|
page read and write
|
||
14B3B010000
|
unkown
|
page read and write
|
||
14B3A9F6000
|
unkown
|
page read and write
|
||
7E12475000
|
unkown
|
page read and write
|
||
14B38AED000
|
unkown
|
page read and write
|
||
14B38B2C000
|
unkown
|
page read and write
|
||
3E636FA000
|
unkown
|
page read and write
|
||
7FF5B18B1000
|
unkown
|
page readonly
|
||
7FF5D97F1000
|
unkown
|
page readonly
|
||
3E6317B000
|
unkown
|
page read and write
|
||
7FF55D3BB000
|
unkown
|
page readonly
|
||
1A1A9B80000
|
unkown
|
page read and write
|
||
27C3E4BF000
|
unkown
|
page read and write
|
||
364447A000
|
unkown
|
page read and write
|
||
7FF590578000
|
unkown
|
page readonly
|
||
27C3E508000
|
unkown
|
page read and write
|
||
7FF55213B000
|
unkown
|
page readonly
|
||
1A1A9C4F000
|
unkown
|
page read and write
|
||
14B3B210000
|
unkown
|
page read and write
|
||
19DC12E0000
|
unkown
|
page read and write
|
||
14B389C0000
|
heap private
|
page read and write
|
||
2414CCD0000
|
unkown
|
page readonly
|
||
7FF5D9DB5000
|
unkown
|
page readonly
|
||
7FF5ACB1E000
|
unkown
|
page readonly
|
||
28B0F200000
|
unkown
|
page read and write
|
||
7FF59C6F8000
|
unkown
|
page readonly
|
||
7FF55D40F000
|
unkown
|
page readonly
|
||
14B3AA00000
|
unkown
|
page read and write
|
||
14B3B000000
|
unkown
|
page read and write
|
||
7FF5906A7000
|
unkown
|
page readonly
|
||
7FF5D6617000
|
unkown
|
page readonly
|
||
27C3E470000
|
unkown
|
page read and write
|
||
27C3E502000
|
unkown
|
page read and write
|
||
7FF55D3C7000
|
unkown
|
page readonly
|
||
14B3D210000
|
unkown
|
page read and write
|
||
7FF59056B000
|
unkown
|
page readonly
|
||
7FF5B18BD000
|
unkown
|
page readonly
|
||
7FF5DA074000
|
unkown
|
page readonly
|
||
27C3EBDC000
|
unkown
|
page read and write
|
||
27C3EB9C000
|
unkown
|
page read and write
|
||
7FF55D2FD000
|
unkown
|
page readonly
|
||
2414E470000
|
unkown
|
page read and write
|
||
7FF5906BA000
|
unkown
|
page readonly
|
||
7FF552320000
|
unkown
|
page readonly
|
||
BA248FF000
|
unkown
|
page read and write
|
||
7FF5DA695000
|
unkown
|
page readonly
|
||
7FF59C695000
|
unkown
|
page readonly
|
||
29658049000
|
unkown
|
page read and write
|
||
14B3AC53000
|
unkown
|
page read and write
|
||
27C3EB16000
|
unkown
|
page read and write
|
||
7FF55D2AB000
|
unkown
|
page readonly
|
||
27C3E4A5000
|
unkown
|
page read and write
|
||
237AA402000
|
unkown
|
page read and write
|
||
29658660000
|
unkown
|
page readonly
|
||
14B387D0000
|
heap private
|
page read and write
|
||
1B283EC0000
|
unkown
|
page read and write
|
||
21F599F0000
|
unkown
|
page read and write
|
||
7FF59069F000
|
unkown
|
page readonly
|
||
237A9BE0000
|
unkown
|
page read and write
|
||
7FF590470000
|
unkown
|
page readonly
|
||
3E63AFB000
|
unkown
|
page read and write
|
||
14B38A29000
|
unkown
|
page read and write
|
||
19DBF83F000
|
unkown
|
page read and write
|
||
7FF5D9DE1000
|
unkown
|
page readonly
|
||
27C3EB77000
|
unkown
|
page read and write
|
||
27C3EB4A000
|
unkown
|
page read and write
|
||
7FF55CF76000
|
unkown
|
page readonly
|
||
27C3E9D0000
|
unkown
|
page readonly
|
||
A34777B000
|
unkown
|
page read and write
|
||
7FF5D9DC4000
|
unkown
|
page readonly
|
||
27C3E413000
|
unkown
|
page read and write
|
||
29658002000
|
unkown
|
page read and write
|
||
E4858FF000
|
unkown
|
page read and write
|
||
7FF5B1665000
|
unkown
|
page readonly
|
||
14B3AD83000
|
unkown
|
page read and write
|
||
14B38A56000
|
unkown
|
page read and write
|
||
14B3AF00000
|
unkown
|
page read and write
|
||
17577100000
|
unkown
|
page read and write
|
||
3E6427A000
|
unkown
|
page read and write
|
||
7FF5D83A9000
|
unkown
|
page readonly
|
||
7FF5C9DAC000
|
unkown
|
page readonly
|
||
7FF5ACC74000
|
unkown
|
page readonly
|
||
27C3E4ED000
|
unkown
|
page read and write
|
||
7FF5D83A1000
|
unkown
|
page readonly
|
||
1A1AB9E0000
|
unkown
|
page read and write
|
||
237AA940000
|
unkown
|
page readonly
|
||
14B38A92000
|
unkown
|
page read and write
|
||
7FF5523F9000
|
unkown
|
page readonly
|
||
7FF5B186F000
|
unkown
|
page readonly
|
||
27C3E429000
|
unkown
|
page read and write
|
||
7FF5523CA000
|
unkown
|
page readonly
|
||
7FF5DAABE000
|
unkown
|
page readonly
|
||
7FF5906DE000
|
unkown
|
page readonly
|
||
29657EB0000
|
heap private
|
page read and write
|
||
27C3EB7B000
|
unkown
|
page read and write
|
||
7FF50D9EF000
|
unkown
|
page readonly
|
||
7FF5B1931000
|
unkown
|
page readonly
|
||
27C3EB85000
|
unkown
|
page read and write
|
||
7FF50D9EC000
|
unkown
|
page readonly
|
||
7FF55D3AE000
|
unkown
|
page readonly
|
||
7FF50DA1E000
|
unkown
|
page readonly
|
||
14B3B310000
|
unkown
|
page read and write
|
||
1A1A9D02000
|
unkown
|
page read and write
|
||
458816E000
|
unkown
|
page read and write
|
||
29658088000
|
unkown
|
page read and write
|
||
7FF5D66E4000
|
unkown
|
page readonly
|
||
14B3D010000
|
unkown
|
page read and write
|
||
7FF5D82D2000
|
unkown
|
page readonly
|
||
28B0F308000
|
unkown
|
page read and write
|
||
1B282055000
|
unkown
|
page read and write
|
||
27C3EB32000
|
unkown
|
page read and write
|
||
7FF59C781000
|
unkown
|
page readonly
|
||
7FF5CA1DA000
|
unkown
|
page readonly
|
||
7FF5D9F8A000
|
unkown
|
page readonly
|
||
7FF50DA04000
|
unkown
|
page readonly
|
||
7FF5B189E000
|
unkown
|
page readonly
|
||
21F59D30000
|
unkown
|
page readonly
|
||
27C3EB77000
|
unkown
|
page read and write
|
||
3E63B7B000
|
unkown
|
page read and write
|
||
7FF552283000
|
unkown
|
page readonly
|
||
7FF59063B000
|
unkown
|
page readonly
|
||
7FF50D9AC000
|
unkown
|
page readonly
|
||
7FF5DA755000
|
unkown
|
page readonly
|
||
7FF5D8335000
|
unkown
|
page readonly
|
||
1757706A000
|
unkown
|
page read and write
|
||
7FF552471000
|
unkown
|
page readonly
|
||
7FF5D9FA7000
|
unkown
|
page readonly
|
||
7FF59063F000
|
unkown
|
page readonly
|
||
7FF5D9F95000
|
unkown
|
page readonly
|
||
27C3EB85000
|
unkown
|
page read and write
|
||
1B281F70000
|
heap default
|
page read and write
|
||
7FF5CA090000
|
unkown
|
page readonly
|
||
27C3EB6D000
|
unkown
|
page read and write
|
||
7FF55D291000
|
unkown
|
page readonly
|
||
14B38B5D000
|
unkown
|
page read and write
|
||
14B3B410000
|
unkown
|
page read and write
|
||
14B38B3C000
|
unkown
|
page read and write
|
||
28B0F300000
|
unkown
|
page read and write
|
||
27C3E9F0000
|
unkown
|
page readonly
|
||
7FF5D6668000
|
unkown
|
page readonly
|
||
7FF50D68A000
|
unkown
|
page readonly
|
||
45884F5000
|
unkown
|
page read and write
|
||
17576FF0000
|
unkown
|
page readonly
|
||
27C3E47F000
|
unkown
|
page read and write
|
||
7FF5C9EB6000
|
unkown
|
page readonly
|
||
7FF5D7FEC000
|
unkown
|
page readonly
|
||
14B3A975000
|
unkown
|
page read and write
|
||
28B0F313000
|
unkown
|
page read and write
|
||
7FF5CA1E2000
|
unkown
|
page readonly
|
||
7FF50D983000
|
unkown
|
page readonly
|
||
7FF5C9951000
|
unkown
|
page readonly
|
||
1B282200000
|
unkown
|
page readonly
|
||
14B3D310000
|
unkown
|
page read and write
|
||
2CD61902000
|
unkown
|
page read and write
|
||
7FF59C6DA000
|
unkown
|
page readonly
|
||
28B0FA02000
|
unkown
|
page read and write
|
||
27C3EB97000
|
unkown
|
page read and write
|
||
7FF5D6671000
|
unkown
|
page readonly
|
||
3E63FFB000
|
unkown
|
page read and write
|
||
7FF5DAA24000
|
unkown
|
page readonly
|
||
3E634FE000
|
unkown
|
page read and write
|
||
14B38AAE000
|
unkown
|
page read and write
|
||
29658013000
|
unkown
|
page read and write
|
||
7FF5D63C6000
|
unkown
|
page readonly
|
||
7E1267A000
|
unkown
|
page read and write
|
||
19DBF900000
|
unkown
|
page read and write
|
||
1A1AB9E0000
|
unkown
|
page read and write
|
||
7FF5ACD0A000
|
unkown
|
page readonly
|
||
14B3AC84000
|
unkown
|
page read and write
|
||
3E640FB000
|
unkown
|
page read and write
|
||
7FF50D7F6000
|
unkown
|
page readonly
|
||
7FF5C9F11000
|
unkown
|
page readonly
|
||
1A1A9C29000
|
unkown
|
page read and write
|
||
7FF55237E000
|
unkown
|
page readonly
|
||
7E128FF000
|
unkown
|
page read and write
|
||
7FF5D9DD1000
|
unkown
|
page readonly
|
||
45881ED000
|
unkown
|
page read and write
|
||
27C3EB46000
|
unkown
|
page read and write
|
||
7FF5DAACB000
|
unkown
|
page readonly
|
||
7E1277E000
|
unkown
|
page read and write
|
||
7FF55D3DC000
|
unkown
|
page readonly
|
||
7FF55238B000
|
unkown
|
page readonly
|
||
237A9C4F000
|
unkown
|
page read and write
|
||
28B0F202000
|
unkown
|
page read and write
|
||
29658053000
|
unkown
|
page read and write
|
||
21F59ACE000
|
unkown
|
page read and write
|
||
27C3E486000
|
unkown
|
page read and write
|
||
7FF55204F000
|
unkown
|
page readonly
|
||
29658055000
|
unkown
|
page read and write
|
||
27C3EB4D000
|
unkown
|
page read and write
|
||
14B3B110000
|
unkown
|
page read and write
|
||
7FF590305000
|
unkown
|
page readonly
|
||
1B283B70000
|
unkown
|
page readonly
|
||
7FF55D3B0000
|
unkown
|
page readonly
|
||
7FF5D832E000
|
unkown
|
page readonly
|
||
7FF5DA911000
|
unkown
|
page readonly
|
||
14B3A7F0000
|
unkown
|
page readonly
|
||
14B3AE42000
|
unkown
|
page read and write
|
||
27C3EB60000
|
unkown
|
page read and write
|
||
7FF59030B000
|
unkown
|
page readonly
|
||
7FF5906CF000
|
unkown
|
page readonly
|
||
7FF5C9EAB000
|
unkown
|
page readonly
|
||
1757706A000
|
unkown
|
page read and write
|
||
14B3AD46000
|
unkown
|
page read and write
|
||
7FF50DA28000
|
unkown
|
page readonly
|
||
7FF5DA75B000
|
unkown
|
page readonly
|
||
1A1A9C3F000
|
unkown
|
page read and write
|
||
1A1A9D14000
|
unkown
|
page read and write
|
||
27C3E513000
|
unkown
|
page read and write
|
||
27C3EB16000
|
unkown
|
page read and write
|
||
28B0FC00000
|
unkown
|
page readonly
|
||
7FF5C9F49000
|
unkown
|
page readonly
|
||
7FF5DAB14000
|
unkown
|
page readonly
|
||
7FF5903F0000
|
unkown
|
page readonly
|
||
27C3E44E000
|
unkown
|
page read and write
|
||
27C3E600000
|
unkown
|
page readonly
|
||
1A1AB9F0000
|
unkown
|
page readonly
|
||
7FF5B18A8000
|
unkown
|
page readonly
|
||
7FF50D9D7000
|
unkown
|
page readonly
|
||
7FF5D6676000
|
unkown
|
page readonly
|
||
7FF5ACC2B000
|
unkown
|
page readonly
|
||
2414C940000
|
unkown
|
page write copy
|
||
14B38960000
|
unkown
|
page readonly
|
||
7FF55203C000
|
unkown
|
page readonly
|
||
7FF590610000
|
unkown
|
page readonly
|
||
14B3A944000
|
unkown
|
page read and write
|
||
14B3A3A0000
|
unkown
|
page read and write
|
||
7FF5904A4000
|
unkown
|
page readonly
|
||
7FF50D801000
|
unkown
|
page readonly
|
||
7FF5D7FFA000
|
unkown
|
page readonly
|
||
7FF5D97ED000
|
unkown
|
page readonly
|
||
14B3A9F5000
|
unkown
|
page read and write
|
||
7FF5D6425000
|
unkown
|
page readonly
|
||
7FF5D9FEE000
|
unkown
|
page readonly
|
||
7FF5DAAF7000
|
unkown
|
page readonly
|
||
7FF5901D2000
|
unkown
|
page readonly
|
||
7FF59C69B000
|
unkown
|
page readonly
|
||
28B0F213000
|
unkown
|
page read and write
|
||
1A1A9C00000
|
unkown
|
page read and write
|
||
7FF55D4A2000
|
unkown
|
page readonly
|
||
7FF5523E8000
|
unkown
|
page readonly
|
||
21F59AA8000
|
unkown
|
page read and write
|
||
7FF5D9D68000
|
unkown
|
page readonly
|
||
7FF5CA0FB000
|
unkown
|
page readonly
|
||
8D9FEF9000
|
unkown
|
page read and write
|
||
7FF50D95C000
|
unkown
|
page readonly
|
||
BA246F5000
|
unkown
|
page read and write
|
||
17578B80000
|
unkown
|
page readonly
|
||
3E63EFB000
|
unkown
|
page read and write
|
||
14B3D110000
|
unkown
|
page read and write
|
||
7FF55D127000
|
unkown
|
page readonly
|
||
14B3AE02000
|
unkown
|
page read and write
|
||
85B9DEE000
|
unkown
|
page read and write
|
||
7FF5CA13A000
|
unkown
|
page readonly
|
||
1B283A70000
|
unkown
|
page read and write
|
||
14B3AD43000
|
unkown
|
page read and write
|
||
7FF5AC7F5000
|
unkown
|
page readonly
|
||
2CD61856000
|
unkown
|
page read and write
|
||
14B3A9F0000
|
unkown
|
page read and write
|
||
1757706A000
|
unkown
|
page read and write
|
||
51C5CFF000
|
unkown
|
page read and write
|
||
7FF5B1924000
|
unkown
|
page readonly
|
||
7FF55204A000
|
unkown
|
page readonly
|
||
14B3B710000
|
unkown
|
page read and write
|
||
7FF55D42D000
|
unkown
|
page readonly
|
||
7FF59C6E4000
|
unkown
|
page readonly
|
||
7FF50D522000
|
unkown
|
page readonly
|
||
36445FC000
|
unkown
|
page read and write
|
||
7FF5DA9A1000
|
unkown
|
page readonly
|
||
7FF5D838E000
|
unkown
|
page readonly
|
||
14B38BB2000
|
unkown
|
page read and write
|
||
14B3D210000
|
unkown
|
page read and write
|
||
27C3E43C000
|
unkown
|
page read and write
|
||
7FF5906D8000
|
unkown
|
page readonly
|
||
7FF5D662F000
|
unkown
|
page readonly
|
||
7FF5D8189000
|
unkown
|
page readonly
|
||
27C3EF90000
|
unkown
|
page read and write
|
||
7FF5ACD04000
|
unkown
|
page readonly
|
||
1A1A9CC8000
|
unkown
|
page read and write
|
||
7FF55D426000
|
unkown
|
page readonly
|
||
14B3AA00000
|
unkown
|
page read and write
|
||
2965804B000
|
unkown
|
page read and write
|
||
8D9FF7F000
|
unkown
|
page read and write
|
||
7FF59066A000
|
unkown
|
page readonly
|
||
7FF59C774000
|
unkown
|
page readonly
|
||
7FF5DA081000
|
unkown
|
page readonly
|
||
28B0F400000
|
unkown
|
page readonly
|
||
7FF5D65A0000
|
unkown
|
page readonly
|
||
BA244FF000
|
unkown
|
page read and write
|
||
14B3A9F1000
|
unkown
|
page read and write
|
||
7FF5D8384000
|
unkown
|
page readonly
|
||
27C3E44B000
|
unkown
|
page read and write
|
||
7FF5B184B000
|
unkown
|
page readonly
|
||
7FF5CA161000
|
unkown
|
page readonly
|
||
1B2822D0000
|
unkown
|
page readonly
|
||
14B3A905000
|
unkown
|
page read and write
|
||
27C3EB9C000
|
unkown
|
page read and write
|
||
19DBF813000
|
unkown
|
page read and write
|
||
2414CA02000
|
unkown
|
page read and write
|
||
14B3D110000
|
unkown
|
page read and write
|
||
14B3B610000
|
unkown
|
page read and write
|
||
36444FA000
|
unkown
|
page read and write
|
||
14B3B810000
|
unkown
|
page read and write
|
||
7FF590436000
|
unkown
|
page readonly
|
||
45888FE000
|
unkown
|
page read and write
|
||
7FF5ACA71000
|
unkown
|
page readonly
|
||
14B3A9E6000
|
unkown
|
page read and write
|
||
E48597F000
|
unkown
|
page read and write
|
||
237AA600000
|
unkown
|
page readonly
|
||
7FF50DAA4000
|
unkown
|
page readonly
|
||
1A1A9C69000
|
unkown
|
page read and write
|
||
2CD61730000
|
unkown
|
page readonly
|
||
7FF50D9BE000
|
unkown
|
page readonly
|
||
85BA07E000
|
unkown
|
page read and write
|
||
17577057000
|
unkown
|
page read and write
|
||
7FF551BE1000
|
unkown
|
page readonly
|
||
27C3E4A8000
|
unkown
|
page read and write
|
||
28B0F1D0000
|
unkown
|
page read and write
|
||
27C3EB85000
|
unkown
|
page read and write
|
||
14B3A9F5000
|
unkown
|
page read and write
|
||
14B3B110000
|
unkown
|
page read and write
|
||
1A1AB9E0000
|
unkown
|
page read and write
|
||
14B3AC12000
|
unkown
|
page read and write
|
||
29657F20000
|
unkown
|
page readonly
|
||
14B3AF02000
|
unkown
|
page read and write
|
||
7FF5DABB1000
|
unkown
|
page readonly
|
||
7FF5DA006000
|
unkown
|
page readonly
|
||
7FF5DABA4000
|
unkown
|
page readonly
|
||
1A1A9CCA000
|
unkown
|
page read and write
|
||
7FF5CA158000
|
unkown
|
page readonly
|
||
7FF5D9FBC000
|
unkown
|
page readonly
|
||
14B3A982000
|
unkown
|
page read and write
|
||
7FF5AC8BB000
|
unkown
|
page readonly
|
||
14B3ACC5000
|
unkown
|
page read and write
|
||
14B38ABA000
|
unkown
|
page read and write
|
||
7FF5DAB1F000
|
unkown
|
page readonly
|
||
7FF5DA07A000
|
unkown
|
page readonly
|
||
7FF5ACC57000
|
unkown
|
page readonly
|
||
27C3EB56000
|
unkown
|
page read and write
|
||
7FF5D8211000
|
unkown
|
page readonly
|
||
28B0F253000
|
unkown
|
page read and write
|
||
14B3A909000
|
unkown
|
page read and write
|
||
7FF5DAA13000
|
unkown
|
page readonly
|
||
27C3EB5A000
|
unkown
|
page read and write
|
||
7FF50DA0A000
|
unkown
|
page readonly
|
||
27C3E3E0000
|
unkown
|
page readonly
|
||
7FF5D6638000
|
unkown
|
page readonly
|
||
7FF5D9D6F000
|
unkown
|
page readonly
|
||
3E6357A000
|
unkown
|
page read and write
|
||
7FF5D9F90000
|
unkown
|
page readonly
|
||
14B3B510000
|
unkown
|
page read and write
|
||
1A1A9E00000
|
unkown
|
page readonly
|
||
14B3D010000
|
unkown
|
page read and write
|
||
14B3B810000
|
unkown
|
page read and write
|
||
14B3B110000
|
unkown
|
page read and write
|
||
1757706A000
|
unkown
|
page read and write
|
||
21F59AA8000
|
heap default
|
page read and write
|
||
1A1ABB13000
|
unkown
|
page read and write
|
||
3E63F7B000
|
unkown
|
page read and write
|
||
7FF5521D9000
|
unkown
|
page readonly
|
||
27C3EF40000
|
unkown
|
page write copy
|
||
1757706A000
|
unkown
|
page read and write
|
||
7FF50D697000
|
unkown
|
page readonly
|
||
14B3B210000
|
unkown
|
page read and write
|
||
7FF5905D4000
|
unkown
|
page readonly
|
||
14B3AD43000
|
unkown
|
page read and write
|
||
7FF5B109D000
|
unkown
|
page readonly
|
||
7FF5CA0B3000
|
unkown
|
page readonly
|
||
14B3D010000
|
unkown
|
page read and write
|
||
27C3EB47000
|
unkown
|
page read and write
|
||
E485879000
|
unkown
|
page read and write
|
||
3E6377B000
|
unkown
|
page read and write
|
||
7FF5D9F6F000
|
unkown
|
page readonly
|
||
7FF50DA39000
|
unkown
|
page readonly
|
||
14B3D110000
|
unkown
|
page read and write
|
||
29657F10000
|
heap default
|
page read and write
|
||
14B38A8D000
|
unkown
|
page read and write
|
||
7FF5C9FF3000
|
unkown
|
page readonly
|
||
14B3AE00000
|
unkown
|
page read and write
|
||
7FF5D662C000
|
unkown
|
page readonly
|
||
29657FF0000
|
unkown
|
page readonly
|
||
1A1A9BF0000
|
unkown
|
page readonly
|
||
7FF5B1699000
|
unkown
|
page readonly
|
||
7FF5D839E000
|
unkown
|
page readonly
|
||
7FF5D835F000
|
unkown
|
page readonly
|
||
7FF59064F000
|
unkown
|
page readonly
|
||
1A1ABB02000
|
unkown
|
page read and write
|
||
7FF55D41E000
|
unkown
|
page readonly
|
||
7FF50DAAA000
|
unkown
|
page readonly
|
||
2414C990000
|
unkown
|
page readonly
|
||
51C58FE000
|
unkown
|
page read and write
|
||
27C3E400000
|
unkown
|
page read and write
|
||
14B3A9F2000
|
unkown
|
page read and write
|
||
7FF5B18B9000
|
unkown
|
page readonly
|
||
7FF59C6BC000
|
unkown
|
page readonly
|
||
175772D0000
|
unkown
|
page readonly
|
||
7FF5D9D56000
|
unkown
|
page readonly
|
||
7FF5CA1D4000
|
unkown
|
page readonly
|
||
7FF5CA169000
|
unkown
|
page readonly
|
||
7FF55D314000
|
unkown
|
page readonly
|
||
14B3D110000
|
unkown
|
page read and write
|
||
7FF58FFC3000
|
unkown
|
page readonly
|
||
1757706A000
|
unkown
|
page read and write
|
||
19DBFD20000
|
unkown
|
page readonly
|
||
14B38ADD000
|
unkown
|
page read and write
|
||
7FF55D39C000
|
unkown
|
page readonly
|
||
14B38BA2000
|
unkown
|
page read and write
|
||
27C3EB9C000
|
unkown
|
page read and write
|
||
237A9C6C000
|
unkown
|
page read and write
|
||
14B3AD43000
|
unkown
|
page read and write
|
||
27C3EB5E000
|
unkown
|
page read and write
|
||
7FF5906B4000
|
unkown
|
page readonly
|
||
A34738B000
|
unkown
|
page read and write
|
||
29658200000
|
unkown
|
page readonly
|
||
27C3EB4B000
|
unkown
|
page read and write
|
||
7FF5D841A000
|
unkown
|
page readonly
|
||
7FF5B1606000
|
unkown
|
page readonly
|
||
7FF5D9FF8000
|
unkown
|
page readonly
|
||
2414E570000
|
unkown
|
page readonly
|
||
7FF55CF85000
|
unkown
|
page readonly
|
||
7FF5DAAAC000
|
unkown
|
page readonly
|
||
28B0FF40000
|
unkown
|
page readonly
|
||
27C3EB61000
|
unkown
|
page read and write
|
||
7FF5906E6000
|
unkown
|
page readonly
|
||
14B38AEF000
|
unkown
|
page read and write
|
||
1757706A000
|
unkown
|
page read and write
|
||
27C3E9F0000
|
unkown
|
page read and write
|
||
7FF5523DE000
|
unkown
|
page readonly
|
||
7FF5D6459000
|
unkown
|
page readonly
|
||
7FF590612000
|
unkown
|
page readonly
|
||
DF7FF7E000
|
unkown
|
page read and write
|
||
7FF59C690000
|
unkown
|
page readonly
|
||
1A1A9C6E000
|
unkown
|
page read and write
|
||
7FF50DA2E000
|
unkown
|
page readonly
|
||
7FF59042B000
|
unkown
|
page readonly
|
||
14B3A9F2000
|
unkown
|
page read and write
|
||
14B3A99B000
|
unkown
|
page read and write
|
||
27C3EB47000
|
unkown
|
page read and write
|
||
21F59A30000
|
unkown
|
page readonly
|
||
1A1AB9E0000
|
unkown
|
page read and write
|
||
3E638FA000
|
unkown
|
page read and write
|
||
7FF59066E000
|
unkown
|
page readonly
|
||
14B3AD43000
|
unkown
|
page read and write
|
||
BA245FF000
|
unkown
|
page read and write
|
||
7FF5DAB28000
|
unkown
|
page readonly
|
||
1A1A9B40000
|
unkown
|
page readonly
|
||
14B3D010000
|
unkown
|
page read and write
|
||
3E6397B000
|
unkown
|
page read and write
|
||
27C3EBC2000
|
unkown
|
page read and write
|
||
29658102000
|
unkown
|
page read and write
|
||
7FF5D9E93000
|
unkown
|
page readonly
|
||
237A9C84000
|
unkown
|
page read and write
|
||
1A1A9CD4000
|
unkown
|
page read and write
|
||
BA247F7000
|
unkown
|
page read and write
|
||
19DC13E0000
|
unkown
|
page readonly
|
||
1A1A9BA0000
|
heap private
|
page read and write
|
||
7FF5906C4000
|
unkown
|
page readonly
|
||
7FF5CA144000
|
unkown
|
page readonly
|
||
7FF5ACD11000
|
unkown
|
page readonly
|
||
7FF590670000
|
unkown
|
page readonly
|
||
7FF5DA840000
|
unkown
|
page readonly
|
||
7FF552397000
|
unkown
|
page readonly
|
||
14B3AE02000
|
unkown
|
page read and write
|
||
7FF5DA082000
|
unkown
|
page readonly
|
||
7FF5523C4000
|
unkown
|
page readonly
|
||
7FF5D6508000
|
unkown
|
page readonly
|
||
51C5B7A000
|
unkown
|
page read and write
|
||
27C3EB5C000
|
unkown
|
page read and write
|
||
1A1ABB00000
|
unkown
|
page read and write
|
||
2CD616E0000
|
unkown
|
page write copy
|
||
3E637FF000
|
unkown
|
page read and write
|
||
E48577E000
|
unkown
|
page read and write
|
||
14B3A957000
|
unkown
|
page read and write
|
||
3E641FB000
|
unkown
|
page read and write
|
||
7FF5ACC88000
|
unkown
|
page readonly
|
||
3E635FF000
|
unkown
|
page read and write
|
||
7FF590285000
|
unkown
|
page readonly
|
||
27C3F002000
|
unkown
|
page read and write
|
||
7FF5523AC000
|
unkown
|
page readonly
|
||
2CD61813000
|
unkown
|
page read and write
|
||
3E63CFB000
|
unkown
|
page read and write
|
||
14B38AEF000
|
unkown
|
page read and write
|
||
21F59AA6000
|
heap default
|
page read and write
|
||
27C3E4D6000
|
unkown
|
page read and write
|
||
7FF5DA837000
|
unkown
|
page readonly
|
||
A34787E000
|
unkown
|
page read and write
|
||
7FF59034A000
|
unkown
|
page readonly
|
||
7FF5D6600000
|
unkown
|
page readonly
|
||
7FF5D62D7000
|
unkown
|
page readonly
|
||
14B3B010000
|
unkown
|
page read and write
|
||
27C3EB1C000
|
unkown
|
page read and write
|
||
7FF5523AF000
|
unkown
|
page readonly
|
||
7FF5ACC0A000
|
unkown
|
page readonly
|
||
7FF5B183E000
|
unkown
|
page readonly
|
||
7E11FFB000
|
unkown
|
page read and write
|
||
7FF5D9FE4000
|
unkown
|
page readonly
|
||
7FF59C6EE000
|
unkown
|
page readonly
|
||
237A9C00000
|
unkown
|
page read and write
|
||
7FF5ACC8E000
|
unkown
|
page readonly
|
||
29658056000
|
unkown
|
page read and write
|
||
2CD61770000
|
unkown
|
page read and write
|
||
14B3AF42000
|
unkown
|
page read and write
|
||
7FF5DAB04000
|
unkown
|
page readonly
|
||
14B38B5D000
|
unkown
|
page read and write
|
||
7FF50D9F7000
|
unkown
|
page readonly
|
||
29658029000
|
unkown
|
page read and write
|
||
14B38BE7000
|
unkown
|
page read and write
|
||
7FF5D64FB000
|
unkown
|
page readonly
|
||
27C3E4B2000
|
unkown
|
page read and write
|
||
14B38B1F000
|
unkown
|
page read and write
|
||
7FF5D9E8B000
|
unkown
|
page readonly
|
||
7FF5D8414000
|
unkown
|
page readonly
|
||
27C3EBB8000
|
unkown
|
page read and write
|
||
14B3AD43000
|
unkown
|
page read and write
|
||
21F59D25000
|
heap private
|
page read and write
|
||
7FF5B10A1000
|
unkown
|
page readonly
|
||
7FF5D8330000
|
unkown
|
page readonly
|
||
7FF5906E9000
|
unkown
|
page readonly
|
||
7FF552385000
|
unkown
|
page readonly
|
||
14B38B13000
|
unkown
|
page read and write
|
||
7FF552343000
|
unkown
|
page readonly
|
||
7601FF9000
|
unkown
|
page read and write
|
||
3E6347A000
|
unkown
|
page read and write
|
||
7FF5B1845000
|
unkown
|
page readonly
|
||
7FF59069C000
|
unkown
|
page readonly
|
||
7FF5D832A000
|
unkown
|
page readonly
|
||
7E1237E000
|
unkown
|
page read and write
|
||
85BA0FA000
|
unkown
|
page read and write
|
||
7FF5523F1000
|
unkown
|
page readonly
|
||
14B38A13000
|
unkown
|
page read and write
|
||
29658670000
|
unkown
|
page read and write
|
||
8D9FB2F000
|
unkown
|
page read and write
|
||
7FF5DAB39000
|
unkown
|
page readonly
|
||
7FF590762000
|
unkown
|
page readonly
|
||
7FF50D9BA000
|
unkown
|
page readonly
|
||
14B3B013000
|
unkown
|
page read and write
|
||
14B3A9F4000
|
unkown
|
page read and write
|
||
14B3D210000
|
unkown
|
page read and write
|
||
7FF59067B000
|
unkown
|
page readonly
|
||
3E6407B000
|
unkown
|
page read and write
|
||
7FF5D9C4C000
|
unkown
|
page readonly
|
||
27C3EB86000
|
unkown
|
page read and write
|
||
2CD61829000
|
unkown
|
page read and write
|
||
237A9D08000
|
unkown
|
page read and write
|
||
BA249FF000
|
unkown
|
page read and write
|
||
7FF5905C3000
|
unkown
|
page readonly
|
||
7FF5DAABA000
|
unkown
|
page readonly
|
||
7FF50D7E5000
|
unkown
|
page readonly
|
||
7FF552322000
|
unkown
|
page readonly
|
||
27C3EB60000
|
unkown
|
page read and write
|
||
27C3EB7B000
|
unkown
|
page read and write
|
||
7FF5D63BB000
|
unkown
|
page readonly
|
||
7FF5D9FFE000
|
unkown
|
page readonly
|
||
3E639FA000
|
unkown
|
page read and write
|
||
7FF5521A1000
|
unkown
|
page readonly
|
||
8D9FFFD000
|
unkown
|
page read and write
|
||
7FF5ACB84000
|
unkown
|
page readonly
|
||
27C3E220000
|
heap default
|
page read and write
|
||
7FF552261000
|
unkown
|
page readonly
|
||
7FF50DA36000
|
unkown
|
page readonly
|
||
7FF5DAB3D000
|
unkown
|
page readonly
|
||
3E63BFB000
|
unkown
|
page read and write
|
||
14B3B810000
|
unkown
|
page read and write
|
||
3E63A7B000
|
unkown
|
page read and write
|
||
237A9ED0000
|
unkown
|
page readonly
|
||
7FF50D906000
|
unkown
|
page readonly
|
||
DF7FC7F000
|
unkown
|
page read and write
|
||
85B9D6B000
|
unkown
|
page read and write
|
||
7FF5AC997000
|
unkown
|
page readonly
|
||
7FF55227B000
|
unkown
|
page readonly
|
||
7FF590287000
|
unkown
|
page readonly
|
||
1A1AB5A0000
|
unkown
|
page read and write
|
||
7FF5DAAEF000
|
unkown
|
page readonly
|
||
7FF5C9F15000
|
unkown
|
page readonly
|
||
7FF5ACD12000
|
unkown
|
page readonly
|
||
DF7F99C000
|
unkown
|
page read and write
|
||
7FF5D666E000
|
unkown
|
page readonly
|
||
27C3EB6C000
|
unkown
|
page read and write
|
||
7FF50D811000
|
unkown
|
page readonly
|
||
14B389B0000
|
unkown
|
page readonly
|
||
7FF55D201000
|
unkown
|
page readonly
|
||
7FF50D7F4000
|
unkown
|
page readonly
|
||
7FF50D90D000
|
unkown
|
page readonly
|
||
7FF5D6654000
|
unkown
|
page readonly
|
||
7FF5D82D0000
|
unkown
|
page readonly
|
||
76020F9000
|
unkown
|
page read and write
|
||
21F59ACD000
|
unkown
|
page read and write
|
||
14B3A9DC000
|
unkown
|
page read and write
|
||
7FF5523F6000
|
unkown
|
page readonly
|
||
1A1A9AF0000
|
unkown
|
page write copy
|
||
28B0F23C000
|
unkown
|
page read and write
|
||
45880EB000
|
unkown
|
page read and write
|
||
14B3B710000
|
unkown
|
page read and write
|
||
7601F7F000
|
unkown
|
page read and write
|
||
7FF5D667D000
|
unkown
|
page readonly
|
||
7FF5D833B000
|
unkown
|
page readonly
|
||
14B3AD00000
|
unkown
|
page read and write
|
||
14B38B1D000
|
unkown
|
page read and write
|
||
7FF590513000
|
unkown
|
page readonly
|
||
1757703F000
|
unkown
|
page read and write
|
||
14B38AC5000
|
unkown
|
page read and write
|
||
7FF5ACC4C000
|
unkown
|
page readonly
|
||
27C3EB20000
|
unkown
|
page read and write
|
||
7FF5D9FDA000
|
unkown
|
page readonly
|
||
27C3EB89000
|
unkown
|
page read and write
|
||
7FF5C9DBF000
|
unkown
|
page readonly
|
||
27C3EB79000
|
unkown
|
page read and write
|
||
2CD615A0000
|
heap private
|
page read and write
|
||
14B38B4C000
|
unkown
|
page read and write
|
||
7FF5D8233000
|
unkown
|
page readonly
|
||
19DBFAD0000
|
unkown
|
page write copy
|
||
1B282029000
|
unkown
|
page read and write
|
||
51C5C7D000
|
unkown
|
page read and write
|
||
7FF5B1932000
|
unkown
|
page readonly
|
||
28B0F4D0000
|
unkown
|
page readonly
|
||
2CD61800000
|
unkown
|
page read and write
|
||
21F59D20000
|
heap private
|
page read and write
|
||
7FF5DAA0D000
|
unkown
|
page readonly
|
||
7FF5D9F64000
|
unkown
|
page readonly
|
||
7FF5D83A6000
|
unkown
|
page readonly
|
||
7FF5DA963000
|
unkown
|
page readonly
|
||
29658100000
|
unkown
|
page read and write
|
||
7FF5ACB01000
|
unkown
|
page readonly
|
||
7FF5ACC20000
|
unkown
|
page readonly
|
||
7FF5B1721000
|
unkown
|
page readonly
|
||
7FF5901E2000
|
unkown
|
page readonly
|
||
7FF50D9C5000
|
unkown
|
page readonly
|
||
7FF5D9F32000
|
unkown
|
page readonly
|
||
21F59A20000
|
unkown
|
page readonly
|
||
7FF590644000
|
unkown
|
page readonly
|
||
7FF5CA0F0000
|
unkown
|
page readonly
|
||
1A1ABB46000
|
unkown
|
page read and write
|
||
7FF5523EE000
|
unkown
|
page readonly
|
||
237A9C13000
|
unkown
|
page read and write
|
||
7FF5CA11C000
|
unkown
|
page readonly
|
||
7FF590687000
|
unkown
|
page readonly
|
||
7FF5ACC1E000
|
unkown
|
page readonly
|
||
7601BBB000
|
unkown
|
page read and write
|
||
27C3E9E0000
|
unkown
|
page readonly
|
||
7FF5CA0F5000
|
unkown
|
page readonly
|
||
36441BE000
|
unkown
|
page read and write
|
||
2414C930000
|
heap default
|
page read and write
|
||
28B0F245000
|
unkown
|
page read and write
|
||
7FF5D8347000
|
unkown
|
page readonly
|
||
28B0F1C0000
|
unkown
|
page readonly
|
||
7FF5D8398000
|
unkown
|
page readonly
|
||
27C3E451000
|
unkown
|
page read and write
|
||
7FF5B1840000
|
unkown
|
page readonly
|
||
27C3EB2F000
|
unkown
|
page read and write
|
||
7FF55D3F4000
|
unkown
|
page readonly
|
||
7FF5D66F2000
|
unkown
|
page readonly
|
||
7FF5D7B91000
|
unkown
|
page readonly
|
||
14B3A802000
|
unkown
|
page read and write
|
||
DF7FD7F000
|
unkown
|
page read and write
|
||
7FF59C6D4000
|
unkown
|
page readonly
|
||
7FF55D418000
|
unkown
|
page readonly
|
||
17577013000
|
unkown
|
page read and write
|
||
14B3A913000
|
unkown
|
page read and write
|
||
51C597E000
|
unkown
|
page read and write
|
||
1A1A9CE5000
|
unkown
|
page read and write
|
||
3E63D7F000
|
unkown
|
page read and write
|
||
27C3E9F0000
|
unkown
|
page read and write
|
||
27C3EFA0000
|
unkown
|
page readonly
|
||
27C3E300000
|
unkown
|
page readonly
|
||
14B3B010000
|
unkown
|
page read and write
|
||
1A1A9CD2000
|
unkown
|
page read and write
|
||
1757706A000
|
unkown
|
page read and write
|
||
17576F90000
|
heap default
|
page read and write
|
||
14B389A0000
|
unkown
|
page read and write
|
||
7FF5D5E5D000
|
unkown
|
page readonly
|
||
7FF5B1878000
|
unkown
|
page readonly
|
||
27C3F200000
|
unkown
|
page readonly
|
||
27C3EB56000
|
unkown
|
page read and write
|
||
1A1ABB44000
|
unkown
|
page read and write
|
||
7FF5DA686000
|
unkown
|
page readonly
|
||
17578A80000
|
unkown
|
page read and write
|
||
A3477F9000
|
unkown
|
page read and write
|
||
14B3D310000
|
unkown
|
page read and write
|
||
7FF50D9AA000
|
unkown
|
page readonly
|
||
7FF5AC9A0000
|
unkown
|
page readonly
|
||
1A1AB6A0000
|
unkown
|
page readonly
|
||
2414CA40000
|
unkown
|
page read and write
|
||
7FF50D21D000
|
unkown
|
page readonly
|
||
7FF5D6679000
|
unkown
|
page readonly
|
||
14B38B6D000
|
unkown
|
page read and write
|
||
14B3C000000
|
unkown
|
page read and write
|
||
14B3AA20000
|
unkown
|
page readonly
|
||
7FF5D7FFF000
|
unkown
|
page readonly
|
||
17576FA0000
|
unkown
|
page write copy
|
||
27C3EB6D000
|
unkown
|
page read and write
|
||
1A1ABA02000
|
unkown
|
page read and write
|
||
27C3F000000
|
unkown
|
page read and write
|
||
19DBFA00000
|
unkown
|
page readonly
|
||
7FF5ACB1B000
|
unkown
|
page readonly
|
||
7FF5B1661000
|
unkown
|
page readonly
|
||
27C3EB64000
|
unkown
|
page read and write
|
||
14B38BA3000
|
unkown
|
page read and write
|
||
7FF5ACB73000
|
unkown
|
page readonly
|
||
7FF5B1884000
|
unkown
|
page readonly
|
||
27C3E9F0000
|
unkown
|
page read and write
|
||
1A1A9A20000
|
unkown
|
page readonly
|
||
1A1A9C13000
|
unkown
|
page read and write
|
||
7FF5D664A000
|
unkown
|
page readonly
|
||
21F59A90000
|
heap default
|
page read and write
|
||
14B3C002000
|
unkown
|
page read and write
|
||
29658108000
|
unkown
|
page read and write
|
||
29658A00000
|
unkown
|
page readonly
|
||
7FF5ACC25000
|
unkown
|
page readonly
|
||
27C3E3F0000
|
unkown
|
page read and write
|
||
7FF5B150A000
|
unkown
|
page readonly
|
||
237A9B50000
|
heap private
|
page read and write
|
||
27C3EB6D000
|
unkown
|
page read and write
|
||
7FF5D9F2C000
|
unkown
|
page readonly
|
||
7FF5DAB2E000
|
unkown
|
page readonly
|
||
7E1227E000
|
unkown
|
page read and write
|
||
17577113000
|
unkown
|
page read and write
|
||
7FF55D3DF000
|
unkown
|
page readonly
|
||
7FF5D82F3000
|
unkown
|
page readonly
|
||
7FF5ACAC3000
|
unkown
|
page readonly
|
||
7FF50D994000
|
unkown
|
page readonly
|
||
7FF5D9AF2000
|
unkown
|
page readonly
|
||
14B38AC3000
|
unkown
|
page read and write
|
||
7FF5D62BC000
|
unkown
|
page readonly
|
||
29658069000
|
unkown
|
page read and write
|
||
7FF5D822B000
|
unkown
|
page readonly
|
||
14B38AB0000
|
unkown
|
page read and write
|
||
27C3EC00000
|
unkown
|
page readonly
|
||
7FF5DAAC0000
|
unkown
|
page readonly
|
||
14B3A9BD000
|
unkown
|
page read and write
|
||
7FF5C9FF8000
|
unkown
|
page readonly
|
||
14B38BA0000
|
unkown
|
page read and write
|
||
7FF50D8C3000
|
unkown
|
page readonly
|
||
7FF59C6BF000
|
unkown
|
page readonly
|
||
7FF590245000
|
unkown
|
page readonly
|
||
7FF5CA0EA000
|
unkown
|
page readonly
|
||
14B3A90C000
|
unkown
|
page read and write
|
||
27C3E230000
|
unkown
|
page readonly
|
||
14B38A00000
|
unkown
|
page read and write
|
||
7FF5DA9BE000
|
unkown
|
page readonly
|
||
7FF50D8C8000
|
unkown
|
page readonly
|
||
1A1ABC20000
|
unkown
|
page readonly
|
||
7FF50DA14000
|
unkown
|
page readonly
|
||
7FF5D8238000
|
unkown
|
page readonly
|
||
1A1ABB86000
|
unkown
|
page read and write
|
||
14B38BB3000
|
unkown
|
page read and write
|
||
7FF55D2AE000
|
unkown
|
page readonly
|
||
14B3B110000
|
unkown
|
page read and write
|
||
E4856FE000
|
unkown
|
page read and write
|
||
7FF5D8422000
|
unkown
|
page readonly
|
||
14B3A928000
|
unkown
|
page read and write
|
||
7FF552472000
|
unkown
|
page readonly
|
||
28B0F302000
|
unkown
|
page read and write
|
||
14B3AE02000
|
unkown
|
page read and write
|
||
3E63C7D000
|
unkown
|
page read and write
|
||
27C3E9B0000
|
unkown
|
page readonly
|
||
14B3B510000
|
unkown
|
page read and write
|
||
7FF5B17E2000
|
unkown
|
page readonly
|
||
7FF59C6FE000
|
unkown
|
page readonly
|
||
2CD61600000
|
heap default
|
page read and write
|
||
7FF5CA092000
|
unkown
|
page readonly
|
||
28B0F270000
|
unkown
|
page read and write
|
||
7FF5DA9BB000
|
unkown
|
page readonly
|
||
296586C0000
|
unkown
|
page readonly
|
||
2CD61610000
|
unkown
|
page readonly
|
||
7FF5D9F9B000
|
unkown
|
page readonly
|
||
2414C8D0000
|
heap private
|
page read and write
|
||
237A9C29000
|
unkown
|
page read and write
|
||
7FF5905DC000
|
unkown
|
page readonly
|
||
7FF50D7E1000
|
unkown
|
page readonly
|
||
27C3EB97000
|
unkown
|
page read and write
|
||
29658802000
|
unkown
|
page read and write
|
||
7FF55D253000
|
unkown
|
page readonly
|
||
28B0F140000
|
heap private
|
page read and write
|
||
2CD631A0000
|
unkown
|
page read and write
|
||
1B282000000
|
unkown
|
page read and write
|
||
237A9D00000
|
unkown
|
page read and write
|
||
3E6387A000
|
unkown
|
page read and write
|
||
14B38B2C000
|
unkown
|
page read and write
|
||
A3476FE000
|
unkown
|
page read and write
|
||
1B281F80000
|
unkown
|
page write copy
|
||
7FF50D786000
|
unkown
|
page readonly
|
||
1A1A99B0000
|
heap private
|
page read and write
|
||
7FF59075A000
|
unkown
|
page readonly
|
||
14B3B210000
|
unkown
|
page read and write
|
||
27C3E4E3000
|
unkown
|
page read and write
|
||
14B3B410000
|
unkown
|
page read and write
|
||
7FF5D9F22000
|
unkown
|
page readonly
|
||
7FF55D49A000
|
unkown
|
page readonly
|
||
DF7FCFB000
|
unkown
|
page read and write
|
||
7FF5ACC37000
|
unkown
|
page readonly
|
||
237A9D02000
|
unkown
|
page read and write
|
||
17577002000
|
unkown
|
page read and write
|
||
19DBF802000
|
unkown
|
page read and write
|
||
A3479FC000
|
unkown
|
page read and write
|
||
7FF5CA11F000
|
unkown
|
page readonly
|
||
17577200000
|
unkown
|
page readonly
|
||
27C3EB41000
|
unkown
|
page read and write
|
||
45885FB000
|
unkown
|
page read and write
|
||
14B3A935000
|
unkown
|
page read and write
|
||
7FF50DAB1000
|
unkown
|
page readonly
|
||
8D9FBAA000
|
unkown
|
page read and write
|
||
7FF5D9FBF000
|
unkown
|
page readonly
|
||
7FF5B14FC000
|
unkown
|
page readonly
|
||
7FF50D952000
|
unkown
|
page readonly
|
||
7FF58FF71000
|
unkown
|
page readonly
|
||
237A9BD0000
|
unkown
|
page readonly
|
||
7FF5D9C67000
|
unkown
|
page readonly
|
||
7FF55D3FA000
|
unkown
|
page readonly
|
||
7FF50D9CB000
|
unkown
|
page readonly
|
||
19DBF7F0000
|
heap default
|
page read and write
|
||
28B0F24D000
|
unkown
|
page read and write
|
||
19DBFB20000
|
unkown
|
page readonly
|
||
7FF5B150F000
|
unkown
|
page readonly
|
||
7FF5AC8B5000
|
unkown
|
page readonly
|
||
14B38910000
|
unkown
|
page write copy
|
||
1A1ABB86000
|
unkown
|
page read and write
|
||
7FF5C9FEB000
|
unkown
|
page readonly
|
||
21F59AA1000
|
unkown
|
page read and write
|
||
14B38B9E000
|
unkown
|
page read and write
|
||
2965804E000
|
unkown
|
page read and write
|
||
29658113000
|
unkown
|
page read and write
|
||
7FF551BDD000
|
unkown
|
page readonly
|
||
14B38AEB000
|
unkown
|
page read and write
|
||
7FF5D65FA000
|
unkown
|
page readonly
|
||
14B3A970000
|
unkown
|
page read and write
|
||
14B38AB5000
|
unkown
|
page read and write
|
||
27C3EBC0000
|
unkown
|
page read and write
|
||
21F59AB8000
|
unkown
|
page read and write
|
||
1A1AC010000
|
unkown
|
page read and write
|
||
7FF59C709000
|
unkown
|
page readonly
|
||
7FF5D9FC7000
|
unkown
|
page readonly
|
||
28B0F286000
|
unkown
|
page read and write
|
||
14B3ACA4000
|
unkown
|
page read and write
|
||
DF001FF000
|
unkown
|
page read and write
|
||
27C3EB61000
|
unkown
|
page read and write
|
||
45887FF000
|
unkown
|
page read and write
|
||
7FF5ACC96000
|
unkown
|
page readonly
|
||
2CD6183F000
|
unkown
|
page read and write
|
||
7FF552057000
|
unkown
|
page readonly
|
||
7FF5D8007000
|
unkown
|
page readonly
|
||
27C3EB85000
|
unkown
|
page read and write
|
||
8D9FE7E000
|
unkown
|
page read and write
|
||
14B3AA00000
|
unkown
|
page readonly
|
||
7FF5B17E0000
|
unkown
|
page readonly
|
||
14B38A93000
|
unkown
|
page read and write
|
||
7FF5C9FD1000
|
unkown
|
page readonly
|
||
7FF552380000
|
unkown
|
page readonly
|
||
27C3EB9C000
|
unkown
|
page read and write
|
||
7601EFA000
|
unkown
|
page read and write
|
||
237A9C45000
|
unkown
|
page read and write
|
||
7FF59065A000
|
unkown
|
page readonly
|
||
7FF590675000
|
unkown
|
page readonly
|
||
7FF5D9E98000
|
unkown
|
page readonly
|
||
19DBF829000
|
unkown
|
page read and write
|
||
27C3EB64000
|
unkown
|
page read and write
|
||
7FF590761000
|
unkown
|
page readonly
|
||
7FF5DABAA000
|
unkown
|
page readonly
|
||
7FF5ACC64000
|
unkown
|
page readonly
|
||
1B281FD0000
|
unkown
|
page readonly
|
||
1A1A9C8C000
|
unkown
|
page read and write
|
||
21F59900000
|
unkown
|
page readonly
|
||
27C3EB45000
|
unkown
|
page read and write
|
||
7FF5B188A000
|
unkown
|
page readonly
|
||
7FF5D9ED6000
|
unkown
|
page readonly
|
||
7FF5CA14E000
|
unkown
|
page readonly
|
||
85BA179000
|
unkown
|
page read and write
|
||
14B3A900000
|
unkown
|
page read and write
|
||
14B3B010000
|
unkown
|
page read and write
|
||
21F59AB7000
|
unkown
|
page read and write
|
||
14B3A9B5000
|
unkown
|
page read and write
|
||
7FF55D303000
|
unkown
|
page readonly
|
||
760207F000
|
unkown
|
page read and write
|
||
27C3EB81000
|
unkown
|
page read and write
|
||
7FF5CA1E1000
|
unkown
|
page readonly
|
||
7FF5DAAAA000
|
unkown
|
page readonly
|
||
7FF5B1803000
|
unkown
|
page readonly
|
||
7FF5B192A000
|
unkown
|
page readonly
|
||
A3478FC000
|
unkown
|
page read and write
|
||
7FF590754000
|
unkown
|
page readonly
|
||
E4857FA000
|
unkown
|
page read and write
|
||
17577102000
|
unkown
|
page read and write
|
||
7FF5DA009000
|
unkown
|
page readonly
|
||
7FF5CA107000
|
unkown
|
page readonly
|
||
7FF5904A6000
|
unkown
|
page readonly
|
||
14B3B410000
|
unkown
|
page read and write
|
||
7FF55D3B5000
|
unkown
|
page readonly
|
||
17577029000
|
unkown
|
page read and write
|
||
27C3EB32000
|
unkown
|
page read and write
|
||
14B38C00000
|
unkown
|
page readonly
|
||
7FF5D9F5B000
|
unkown
|
page readonly
|
||
7FF5D9D4B000
|
unkown
|
page readonly
|
||
7FF5D66F1000
|
unkown
|
page readonly
|
||
237A9BC0000
|
unkown
|
page readonly
|
||
14B3A955000
|
unkown
|
page read and write
|
||
1B281F10000
|
heap private
|
page read and write
|
||
2CD61802000
|
unkown
|
page read and write
|
||
27C3E4A9000
|
unkown
|
page read and write
|
||
29658000000
|
unkown
|
page read and write
|
||
237A9D13000
|
unkown
|
page read and write
|
||
7FF5B15FB000
|
unkown
|
page readonly
|
||
1A1A9C53000
|
unkown
|
page read and write
|
||
7FF50D98B000
|
unkown
|
page readonly
|
||
7FF5CA166000
|
unkown
|
page readonly
|
||
7FF50D221000
|
unkown
|
page readonly
|
||
14B3A9D6000
|
unkown
|
page read and write
|
||
28B0F229000
|
unkown
|
page read and write
|
||
14B38B2D000
|
unkown
|
page read and write
|
||
7FF5ACB8C000
|
unkown
|
page readonly
|
||
27C3E4EA000
|
unkown
|
page read and write
|
||
7FF5CA128000
|
unkown
|
page readonly
|
||
237A9E00000
|
unkown
|
page readonly
|
||
7FF5D7B8D000
|
unkown
|
page readonly
|
||
7FF55D130000
|
unkown
|
page readonly
|
||
51C5A7A000
|
unkown
|
page read and write
|
||
1A1A9A10000
|
heap default
|
page read and write
|
||
28B0F1B0000
|
unkown
|
page readonly
|
||
7FF50D99F000
|
unkown
|
page readonly
|
||
7FF5D6644000
|
unkown
|
page readonly
|
||
7FF5DAB0A000
|
unkown
|
page readonly
|
||
7E129F8000
|
unkown
|
page read and write
|
||
8D9FAAA000
|
unkown
|
page read and write
|
||
7FF5D9F53000
|
unkown
|
page readonly
|
||
7FF5D9F8E000
|
unkown
|
page readonly
|
||
27C3EB79000
|
unkown
|
page read and write
|
||
7FF5DA001000
|
unkown
|
page readonly
|
||
19DBF902000
|
unkown
|
page read and write
|
||
14B38A9E000
|
unkown
|
page read and write
|
||
7FF5B18AE000
|
unkown
|
page readonly
|
||
19DBF834000
|
unkown
|
page read and write
|
||
14B38AA8000
|
unkown
|
page read and write
|
||
237A9C3C000
|
unkown
|
page read and write
|
||
7FF55D39A000
|
unkown
|
page readonly
|
||
7FF5D835C000
|
unkown
|
page readonly
|
||
2414C9D0000
|
unkown
|
page read and write
|
||
7FF59C77A000
|
unkown
|
page readonly
|
||
17577000000
|
unkown
|
page read and write
|
||
7FF5D8421000
|
unkown
|
page readonly
|
||
14B3A90B000
|
unkown
|
page read and write
|
||
14B3B310000
|
unkown
|
page read and write
|
||
51C59F9000
|
unkown
|
page read and write
|
||
7FF590236000
|
unkown
|
page readonly
|
||
DF7FE75000
|
unkown
|
page read and write
|
||
14B38AB0000
|
unkown
|
page read and write
|
||
7FF59C6C8000
|
unkown
|
page readonly
|
||
7FF5D9891000
|
unkown
|
page readonly
|
||
14B38830000
|
heap default
|
page read and write
|
||
7FF5AC7E0000
|
unkown
|
page readonly
|
||
1B28203F000
|
unkown
|
page read and write
|
||
29658051000
|
unkown
|
page read and write
|
||
7FF5D8151000
|
unkown
|
page readonly
|
||
7FF5DAAC5000
|
unkown
|
page readonly
|
||
14B3A921000
|
unkown
|
page read and write
|
||
27C3F002000
|
unkown
|
page read and write
|
||
7FF5D62CA000
|
unkown
|
page readonly
|
||
21F59ABD000
|
unkown
|
page read and write
|
||
27C3EBBC000
|
unkown
|
page read and write
|
||
BA2447B000
|
unkown
|
page read and write
|
||
27C3E1C0000
|
heap private
|
page read and write
|
||
7FF55D494000
|
unkown
|
page readonly
|
||
7FF58FFC7000
|
unkown
|
page readonly
|
||
7FF59BFE7000
|
unkown
|
page readonly
|
||
7FF5ACC1A000
|
unkown
|
page readonly
|
||
27C3E4FD000
|
unkown
|
page read and write
|
||
1A1A9CA6000
|
unkown
|
page read and write
|
||
7FF50D8A1000
|
unkown
|
page readonly
|
||
7FF5B183A000
|
unkown
|
page readonly
|
||
7FF50D67C000
|
unkown
|
page readonly
|
||
237A9C55000
|
unkown
|
page read and write
|
||
7FF5ACC0C000
|
unkown
|
page readonly
|
||
7FF5ACC7F000
|
unkown
|
page readonly
|
||
7FF590551000
|
unkown
|
page readonly
|
||
27C3EA02000
|
unkown
|
page read and write
|
||
A34767F000
|
unkown
|
page read and write
|
||
27C3EB22000
|
unkown
|
page read and write
|
||
7FF55D429000
|
unkown
|
page readonly
|
||
7FF5CA134000
|
unkown
|
page readonly
|
||
7FF5D8368000
|
unkown
|
page readonly
|
||
7FF552146000
|
unkown
|
page readonly
|
||
BA2457B000
|
unkown
|
page read and write
|
||
14B38840000
|
unkown
|
page readonly
|
||
7FF5D6421000
|
unkown
|
page readonly
|
||
14B38B3D000
|
unkown
|
page read and write
|
||
7FF55246A000
|
unkown
|
page readonly
|
There are 1164 hidden memdumps, click here to show them.