Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Copy-384955799-05102021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$Copy-384955799-05102021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\89B4D802-5FE5-4832-8A2A-1145B195F850
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\678D365D.jpg
|
[TIFF image data, big-endian, direntries=5], baseline, precision 8, 1080x1080, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\75C40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Copy-384955799-05102021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:53
2020, mtime=Wed May 12 09:37:50 2021, atime=Wed May 12 09:37:50 2021, length=121120, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Wed May 12 09:37:49 2021, atime=Wed May 12 09:37:49 2021, length=16384, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\47C40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\6D75894A.jpg
|
[TIFF image data, big-endian, direntries=5], baseline, precision 8, 1080x1080, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\E1EE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\A2EE0000
|
data
|
dropped
|
|
There are 3 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://185.14.31.59/
|
unknown
|
|
|
|
http://167.114.48.59/44313,6048108796.dat
|
167.114.48.59
|
|
|
|
http://185.14.31.59/44313,6048108796.dat
|
185.14.31.59
|
|
|
|
http://45.138.157.63/44313,6048108796.dat
|
45.138.157.63
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://ecs.office.com/config/v2/Office
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
There are 91 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
45.138.157.63
|
unknown
|
Russian Federation
|
|
|
|
185.14.31.59
|
unknown
|
Ukraine
|
|
|
|
167.114.48.59
|
unknown
|
Canada
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
t3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
u3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B999
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C10B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C486
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C6A9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C7A3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
>l
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
)k8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDBCE
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE051
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE179
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE273
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE33E
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
:w8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
There are 132 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF551350000
|
unkown
|
page readonly
|
|
|
|
D3A4BF9000
|
unkown
|
page read and write
|
|
|
|
233BC162000
|
unkown
|
page read and write
|
|
|
|
7FF5B747D000
|
unkown
|
page readonly
|
|
|
|
25BC3000000
|
unkown
|
page readonly
|
|
|
|
2139AA57000
|
unkown
|
page read and write
|
|
|
|
233BC11F000
|
unkown
|
page read and write
|
|
|
|
233BC540000
|
unkown
|
page readonly
|
|
|
|
193A14A9000
|
unkown
|
page read and write
|
|
|
|
1F6A5855000
|
unkown
|
page read and write
|
|
|
|
193A1535000
|
unkown
|
page read and write
|
|
|
|
7FF5B73FA000
|
unkown
|
page readonly
|
|
|
|
233BC16F000
|
unkown
|
page read and write
|
|
|
|
AC9A6F5000
|
unkown
|
page read and write
|
|
|
|
7FF5B7453000
|
unkown
|
page readonly
|
|
|
|
7FF5512B4000
|
unkown
|
page readonly
|
|
|
|
7FF56FFE4000
|
unkown
|
page readonly
|
|
|
|
42CD1FE000
|
unkown
|
page read and write
|
|
|
|
7FF5978EA000
|
unkown
|
page readonly
|
|
|
|
7FF5A6CFA000
|
unkown
|
page readonly
|
|
|
|
25BC24C0000
|
unkown
|
page readonly
|
|
|
|
1F6A5851000
|
unkown
|
page read and write
|
|
|
|
7FF5A6C63000
|
unkown
|
page readonly
|
|
|
|
A051BF5000
|
unkown
|
page read and write
|
|
|
|
ABB3CF9000
|
unkown
|
page read and write
|
|
|
|
7FF597AB9000
|
unkown
|
page readonly
|
|
|
|
FBF997E000
|
unkown
|
page read and write
|
|
|
|
2139C4F0000
|
unkown
|
page readonly
|
|
|
|
193A357E000
|
unkown
|
page read and write
|
|
|
|
233BC162000
|
unkown
|
page read and write
|
|
|
|
2537D0E1000
|
unkown
|
page read and write
|
|
|
|
7FF5C9E06000
|
unkown
|
page readonly
|
|
|
|
7FF5C9C8B000
|
unkown
|
page readonly
|
|
|
|
7FF597A1F000
|
unkown
|
page readonly
|
|
|
|
7FF559662000
|
unkown
|
page readonly
|
|
|
|
21B02C80000
|
unkown
|
page readonly
|
|
|
|
7FF5A6D47000
|
unkown
|
page readonly
|
|
|
|
7FF5C9CDD000
|
unkown
|
page readonly
|
|
|
|
7FF597397000
|
unkown
|
page readonly
|
|
|
|
21B047A0000
|
unkown
|
page read and write
|
|
|
|
7FF57007A000
|
unkown
|
page readonly
|
|
|
|
22BC8850000
|
unkown
|
page read and write
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
7FF5A6E02000
|
unkown
|
page readonly
|
|
|
|
193A4610000
|
unkown
|
page read and write
|
|
|
|
FBF9C7E000
|
unkown
|
page read and write
|
|
|
|
233BC141000
|
unkown
|
page read and write
|
|
|
|
2139AA6A000
|
unkown
|
page read and write
|
|
|
|
233BB849000
|
unkown
|
page read and write
|
|
|
|
193A148A000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
25BC2450000
|
heap private
|
page read and write
|
|
|
|
7FF53BD16000
|
unkown
|
page readonly
|
|
|
|
7FF56FF95000
|
unkown
|
page readonly
|
|
|
|
233BB8C4000
|
unkown
|
page read and write
|
|
|
|
4B646FE000
|
unkown
|
page read and write
|
|
|
|
193A145A000
|
unkown
|
page read and write
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
7FF56FFEE000
|
unkown
|
page readonly
|
|
|
|
8B293AA000
|
unkown
|
page read and write
|
|
|
|
193A14D8000
|
unkown
|
page read and write
|
|
|
|
2B7E6E69000
|
unkown
|
page read and write
|
|
|
|
193A356C000
|
unkown
|
page read and write
|
|
|
|
193A1494000
|
unkown
|
page read and write
|
|
|
|
7FF5BCFCF000
|
unkown
|
page readonly
|
|
|
|
2139A9C0000
|
unkown
|
page readonly
|
|
|
|
193A2EF0000
|
unkown
|
page readonly
|
|
|
|
D3A4B7E000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D27000
|
unkown
|
page readonly
|
|
|
|
7FF597B31000
|
unkown
|
page readonly
|
|
|
|
7FF5A6E01000
|
unkown
|
page readonly
|
|
|
|
7FF597A94000
|
unkown
|
page readonly
|
|
|
|
7FF5595D8000
|
unkown
|
page readonly
|
|
|
|
7FF5B7431000
|
unkown
|
page readonly
|
|
|
|
7FF56EB1E000
|
unkown
|
page readonly
|
|
|
|
7FF5A6CFC000
|
unkown
|
page readonly
|
|
|
|
193A1555000
|
unkown
|
page read and write
|
|
|
|
7FF5BD092000
|
unkown
|
page readonly
|
|
|
|
7FF597A84000
|
unkown
|
page readonly
|
|
|
|
233BB8A0000
|
unkown
|
page read and write
|
|
|
|
193A148F000
|
unkown
|
page read and write
|
|
|
|
7FF5BCDC1000
|
unkown
|
page readonly
|
|
|
|
17F946EC000
|
unkown
|
page read and write
|
|
|
|
17F946A3000
|
unkown
|
page read and write
|
|
|
|
193A2DF0000
|
unkown
|
page read and write
|
|
|
|
7FF5C9DD4000
|
unkown
|
page readonly
|
|
|
|
D3A4AFA000
|
unkown
|
page read and write
|
|
|
|
193A1300000
|
unkown
|
page readonly
|
|
|
|
25BC2600000
|
unkown
|
page read and write
|
|
|
|
17F96510000
|
unkown
|
page read and write
|
|
|
|
7FF53BF7F000
|
unkown
|
page readonly
|
|
|
|
7FF5B734D000
|
unkown
|
page readonly
|
|
|
|
22BC8902000
|
unkown
|
page read and write
|
|
|
|
7FF5C9D9B000
|
unkown
|
page readonly
|
|
|
|
7FF5A6A87000
|
unkown
|
page readonly
|
|
|
|
1B972854000
|
unkown
|
page read and write
|
|
|
|
193A3612000
|
unkown
|
page read and write
|
|
|
|
7FF53BD28000
|
unkown
|
page readonly
|
|
|
|
7FF5BCE81000
|
unkown
|
page readonly
|
|
|
|
2B7E6E69000
|
unkown
|
page read and write
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
2B7E8970000
|
unkown
|
page readonly
|
|
|
|
21B02D50000
|
unkown
|
page write copy
|
|
|
|
233BC1FA000
|
unkown
|
page read and write
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
17F946C7000
|
unkown
|
page read and write
|
|
|
|
7FF5B744B000
|
unkown
|
page readonly
|
|
|
|
21B02E56000
|
unkown
|
page read and write
|
|
|
|
7FF5B7437000
|
unkown
|
page readonly
|
|
|
|
193A1487000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
7FF5B7468000
|
unkown
|
page readonly
|
|
|
|
7FF5B754A000
|
unkown
|
page readonly
|
|
|
|
25BC25A0000
|
unkown
|
page readonly
|
|
|
|
42CD2FA000
|
unkown
|
page read and write
|
|
|
|
7FF55959F000
|
unkown
|
page readonly
|
|
|
|
42CDCFF000
|
unkown
|
page read and write
|
|
|
|
233BC1E9000
|
unkown
|
page read and write
|
|
|
|
7FF53BD0B000
|
unkown
|
page readonly
|
|
|
|
4B6487F000
|
unkown
|
page read and write
|
|
|
|
22BC8881000
|
unkown
|
page read and write
|
|
|
|
233BC151000
|
unkown
|
page read and write
|
|
|
|
17F948D0000
|
unkown
|
page readonly
|
|
|
|
17F96540000
|
unkown
|
page readonly
|
|
|
|
233BC162000
|
unkown
|
page read and write
|
|
|
|
7FF53BF3A000
|
unkown
|
page readonly
|
|
|
|
233BC1FD000
|
unkown
|
page read and write
|
|
|
|
7FF5A6DF4000
|
unkown
|
page readonly
|
|
|
|
2139AA6C000
|
unkown
|
page read and write
|
|
|
|
7FF56EAC7000
|
unkown
|
page readonly
|
|
|
|
233BBFE0000
|
unkown
|
page read and write
|
|
|
|
193A14B5000
|
unkown
|
page read and write
|
|
|
|
D009F7E000
|
unkown
|
page read and write
|
|
|
|
2B7E70D0000
|
unkown
|
page readonly
|
|
|
|
FBF99F7000
|
unkown
|
page read and write
|
|
|
|
233BC15E000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D7E000
|
unkown
|
page readonly
|
|
|
|
7FF559575000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
7FF5B740B000
|
unkown
|
page readonly
|
|
|
|
7FF550F25000
|
unkown
|
page readonly
|
|
|
|
193A4110000
|
unkown
|
page read and write
|
|
|
|
7FF5BCF9A000
|
unkown
|
page readonly
|
|
|
|
193A4000000
|
unkown
|
page read and write
|
|
|
|
7FF5975A2000
|
unkown
|
page readonly
|
|
|
|
7FF597A9F000
|
unkown
|
page readonly
|
|
|
|
1B972800000
|
unkown
|
page read and write
|
|
|
|
17F9466D000
|
unkown
|
page read and write
|
|
|
|
193A3743000
|
unkown
|
page read and write
|
|
|
|
17F946F2000
|
unkown
|
page read and write
|
|
|
|
1F6A5902000
|
unkown
|
page read and write
|
|
|
|
7FF55124B000
|
unkown
|
page readonly
|
|
|
|
7FF5BD00E000
|
unkown
|
page readonly
|
|
|
|
233BBF70000
|
unkown
|
page write copy
|
|
|
|
193A1546000
|
unkown
|
page read and write
|
|
|
|
25BC25B0000
|
unkown
|
page read and write
|
|
|
|
193A3250000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D90000
|
unkown
|
page readonly
|
|
|
|
7FF5B7513000
|
unkown
|
page readonly
|
|
|
|
7FF5C9BE9000
|
unkown
|
page readonly
|
|
|
|
7FF5B75C9000
|
unkown
|
page readonly
|
|
|
|
4B6467F000
|
unkown
|
page read and write
|
|
|
|
2B7E6E00000
|
unkown
|
page read and write
|
|
|
|
233BC162000
|
unkown
|
page read and write
|
|
|
|
22BC9200000
|
unkown
|
page readonly
|
|
|
|
1F6A5740000
|
heap default
|
page read and write
|
|
|
|
7FF5C9D7C000
|
unkown
|
page readonly
|
|
|
|
17F94629000
|
unkown
|
page read and write
|
|
|
|
7FF5C9B68000
|
unkown
|
page readonly
|
|
|
|
17F96170000
|
unkown
|
page readonly
|
|
|
|
233BC1F2000
|
unkown
|
page read and write
|
|
|
|
233BC14C000
|
unkown
|
page read and write
|
|
|
|
1F6A5770000
|
unkown
|
page read and write
|
|
|
|
193A1502000
|
unkown
|
page read and write
|
|
|
|
233BC1E4000
|
unkown
|
page read and write
|
|
|
|
193A3546000
|
unkown
|
page read and write
|
|
|
|
7FF56EAF4000
|
unkown
|
page readonly
|
|
|
|
7FF5B7444000
|
unkown
|
page readonly
|
|
|
|
1F6A5760000
|
unkown
|
page readonly
|
|
|
|
193A3882000
|
unkown
|
page read and write
|
|
|
|
17F96510000
|
unkown
|
page read and write
|
|
|
|
7FF56F8E3000
|
unkown
|
page readonly
|
|
|
|
17F96070000
|
unkown
|
page read and write
|
|
|
|
22BC8908000
|
unkown
|
page read and write
|
|
|
|
7FF5BCFD8000
|
unkown
|
page readonly
|
|
|
|
42CD0F9000
|
unkown
|
page read and write
|
|
|
|
7FF5BCFA0000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
FBF987C000
|
unkown
|
page read and write
|
|
|
|
42CD57B000
|
unkown
|
page read and write
|
|
|
|
7FF5B730B000
|
unkown
|
page readonly
|
|
|
|
193A4510000
|
unkown
|
page read and write
|
|
|
|
2139AA6C000
|
unkown
|
page read and write
|
|
|
|
233BC14D000
|
unkown
|
page read and write
|
|
|
|
7FF5B7555000
|
unkown
|
page readonly
|
|
|
|
193A32C0000
|
unkown
|
page read and write
|
|
|
|
193A1440000
|
unkown
|
page read and write
|
|
|
|
193A148A000
|
unkown
|
page read and write
|
|
|
|
193A148A000
|
unkown
|
page read and write
|
|
|
|
193A13D0000
|
unkown
|
page readonly
|
|
|
|
7FF5BCEA3000
|
unkown
|
page readonly
|
|
|
|
7FF5B7227000
|
unkown
|
page readonly
|
|
|
|
25BC2702000
|
unkown
|
page read and write
|
|
|
|
233BC800000
|
unkown
|
page readonly
|
|
|
|
1B972802000
|
unkown
|
page read and write
|
|
|
|
193A152F000
|
unkown
|
page read and write
|
|
|
|
7FF56EBA2000
|
unkown
|
page readonly
|
|
|
|
7FF5B742C000
|
unkown
|
page readonly
|
|
|
|
2139AA6C000
|
unkown
|
page read and write
|
|
|
|
2139AA6E000
|
unkown
|
page read and write
|
|
|
|
7FF5C9DEE000
|
unkown
|
page readonly
|
|
|
|
1B972813000
|
unkown
|
page read and write
|
|
|
|
7FF5B7405000
|
unkown
|
page readonly
|
|
|
|
7FF5C9BC4000
|
unkown
|
page readonly
|
|
|
|
1F6A584B000
|
unkown
|
page read and write
|
|
|
|
2139AA6C000
|
unkown
|
page read and write
|
|
|
|
7FF56E9B3000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D8A000
|
unkown
|
page readonly
|
|
|
|
193A3900000
|
unkown
|
page read and write
|
|
|
|
7FF550B9E000
|
unkown
|
page readonly
|
|
|
|
7FF5BCFF4000
|
unkown
|
page readonly
|
|
|
|
7FF5595B4000
|
unkown
|
page readonly
|
|
|
|
193A3548000
|
unkown
|
page read and write
|
|
|
|
1F6A584A000
|
unkown
|
page read and write
|
|
|
|
1F6A56E0000
|
heap private
|
page read and write
|
|
|
|
233BC115000
|
unkown
|
page read and write
|
|
|
|
7FF5513BE000
|
unkown
|
page readonly
|
|
|
|
193A1487000
|
unkown
|
page read and write
|
|
|
|
F5E10F9000
|
unkown
|
page read and write
|
|
|
|
7FF597AA8000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D95000
|
unkown
|
page readonly
|
|
|
|
7FF5BD011000
|
unkown
|
page readonly
|
|
|
|
7FF56FF9B000
|
unkown
|
page readonly
|
|
|
|
7FF5C9B6F000
|
unkown
|
page readonly
|
|
|
|
7FF5B763A000
|
unkown
|
page readonly
|
|
|
|
233BC177000
|
unkown
|
page read and write
|
|
|
|
25BC2666000
|
unkown
|
page read and write
|
|
|
|
25BC265E000
|
unkown
|
page read and write
|
|
|
|
7FF5595E6000
|
unkown
|
page readonly
|
|
|
|
7FF56FFD4000
|
unkown
|
page readonly
|
|
|
|
8B297FF000
|
unkown
|
page read and write
|
|
|
|
2139A8F0000
|
unkown
|
page readonly
|
|
|
|
7FF5BCFB7000
|
unkown
|
page readonly
|
|
|
|
233BC141000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
2B7E6E69000
|
unkown
|
page read and write
|
|
|
|
17F945F0000
|
unkown
|
page readonly
|
|
|
|
7FF5A6DFA000
|
unkown
|
page readonly
|
|
|
|
21B02E02000
|
unkown
|
page read and write
|
|
|
|
17F96510000
|
unkown
|
page read and write
|
|
|
|
1F6A5848000
|
unkown
|
page read and write
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
233BC146000
|
unkown
|
page read and write
|
|
|
|
7FF55946B000
|
unkown
|
page readonly
|
|
|
|
7FF570074000
|
unkown
|
page readonly
|
|
|
|
7FF56EAAE000
|
unkown
|
page readonly
|
|
|
|
42CD87A000
|
unkown
|
page read and write
|
|
|
|
7FF5595BA000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
2139AA6B000
|
unkown
|
page read and write
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
7FF55956A000
|
unkown
|
page readonly
|
|
|
|
233BC162000
|
unkown
|
page read and write
|
|
|
|
193A1485000
|
unkown
|
page read and write
|
|
|
|
1F6A584E000
|
unkown
|
page read and write
|
|
|
|
7FF5BCC5C000
|
unkown
|
page readonly
|
|
|
|
7FF570009000
|
unkown
|
page readonly
|
|
|
|
7FF59793B000
|
unkown
|
page readonly
|
|
|
|
FBFA0F8000
|
unkown
|
page read and write
|
|
|
|
193A3240000
|
unkown
|
page read and write
|
|
|
|
193A1487000
|
unkown
|
page read and write
|
|
|
|
AC9A7F7000
|
unkown
|
page read and write
|
|
|
|
233BB7D0000
|
unkown
|
page readonly
|
|
|
|
7FF5A68D0000
|
unkown
|
page readonly
|
|
|
|
193A148F000
|
unkown
|
page read and write
|
|
|
|
FBF98FE000
|
unkown
|
page read and write
|
|
|
|
7FF53BE96000
|
unkown
|
page readonly
|
|
|
|
42CDA7D000
|
unkown
|
page read and write
|
|
|
|
193A14A5000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
193A36A4000
|
unkown
|
page read and write
|
|
|
|
193A1487000
|
unkown
|
page read and write
|
|
|
|
7FF5979E2000
|
unkown
|
page readonly
|
|
|
|
233BB800000
|
unkown
|
page read and write
|
|
|
|
233BB8D2000
|
unkown
|
page read and write
|
|
|
|
193A147B000
|
unkown
|
page read and write
|
|
|
|
233BC602000
|
unkown
|
page read and write
|
|
|
|
233BB7C0000
|
heap default
|
page read and write
|
|
|
|
233BC1CA000
|
unkown
|
page read and write
|
|
|
|
7FF597B32000
|
unkown
|
page readonly
|
|
|
|
233BB813000
|
unkown
|
page read and write
|
|
|
|
233BC141000
|
unkown
|
page read and write
|
|
|
|
354A2FA000
|
unkown
|
page read and write
|
|
|
|
193A149C000
|
unkown
|
page read and write
|
|
|
|
22BC884D000
|
unkown
|
page read and write
|
|
|
|
193A3802000
|
unkown
|
page read and write
|
|
|
|
7FF597655000
|
unkown
|
page readonly
|
|
|
|
7FF597AAE000
|
unkown
|
page readonly
|
|
|
|
193A3572000
|
unkown
|
page read and write
|
|
|
|
193A147E000
|
unkown
|
page read and write
|
|
|
|
7FF559661000
|
unkown
|
page readonly
|
|
|
|
2139C3F0000
|
unkown
|
page read and write
|
|
|
|
193A1587000
|
unkown
|
page read and write
|
|
|
|
1B972680000
|
heap default
|
page read and write
|
|
|
|
7FF56FFBC000
|
unkown
|
page readonly
|
|
|
|
7FF5977FB000
|
unkown
|
page readonly
|
|
|
|
193A4710000
|
unkown
|
page read and write
|
|
|
|
233BC143000
|
unkown
|
page read and write
|
|
|
|
7FF5BCDC5000
|
unkown
|
page readonly
|
|
|
|
233BB848000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
1B972A00000
|
unkown
|
page readonly
|
|
|
|
193A3402000
|
unkown
|
page read and write
|
|
|
|
A051EFE000
|
unkown
|
page read and write
|
|
|
|
193A1494000
|
unkown
|
page read and write
|
|
|
|
8B2932E000
|
unkown
|
page read and write
|
|
|
|
7FF5512A3000
|
unkown
|
page readonly
|
|
|
|
7FF570081000
|
unkown
|
page readonly
|
|
|
|
193A4010000
|
unkown
|
page read and write
|
|
|
|
7FF597876000
|
unkown
|
page readonly
|
|
|
|
233BB8AB000
|
unkown
|
page read and write
|
|
|
|
193A32C0000
|
unkown
|
page read and write
|
|
|
|
233BB84F000
|
unkown
|
page read and write
|
|
|
|
7FF5C9D5F000
|
unkown
|
page readonly
|
|
|
|
7FF5B7251000
|
unkown
|
page readonly
|
|
|
|
233BB84C000
|
unkown
|
page read and write
|
|
|
|
1F6A5854000
|
unkown
|
page read and write
|
|
|
|
7FF5595A8000
|
unkown
|
page readonly
|
|
|
|
233BC16F000
|
unkown
|
page read and write
|
|
|
|
7FF53BEF0000
|
unkown
|
page readonly
|
|
|
|
233BC147000
|
unkown
|
page read and write
|
|
|
|
7FF56FFC8000
|
unkown
|
page readonly
|
|
|
|
7FF5C9BB1000
|
unkown
|
page readonly
|
|
|
|
7FF53BF67000
|
unkown
|
page readonly
|
|
|
|
193A355E000
|
unkown
|
page read and write
|
|
|
|
1F6A5888000
|
unkown
|
page read and write
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
22BC8913000
|
unkown
|
page read and write
|
|
|
|
7FF53BFAE000
|
unkown
|
page readonly
|
|
|
|
25BC2613000
|
unkown
|
page read and write
|
|
|
|
25BC265B000
|
unkown
|
page read and write
|
|
|
|
7FF56E77A000
|
unkown
|
page readonly
|
|
|
|
233BC1F4000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D0E000
|
unkown
|
page readonly
|
|
|
|
7FF56EB21000
|
unkown
|
page readonly
|
|
|
|
1F6A5850000
|
unkown
|
page read and write
|
|
|
|
2139AA6A000
|
unkown
|
page read and write
|
|
|
|
233BC1F0000
|
unkown
|
page read and write
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
42CD7FA000
|
unkown
|
page read and write
|
|
|
|
7FF5B72E1000
|
unkown
|
page readonly
|
|
|
|
7FF55129D000
|
unkown
|
page readonly
|
|
|
|
7FF5513B8000
|
unkown
|
page readonly
|
|
|
|
2B7E6E02000
|
unkown
|
page read and write
|
|
|
|
354A379000
|
unkown
|
page read and write
|
|
|
|
233BB84A000
|
unkown
|
page read and write
|
|
|
|
193A3684000
|
unkown
|
page read and write
|
|
|
|
7FF5B7180000
|
unkown
|
page readonly
|
|
|
|
7FF597606000
|
unkown
|
page readonly
|
|
|
|
7FF56EA50000
|
unkown
|
page readonly
|
|
|
|
233BC1A3000
|
unkown
|
page read and write
|
|
|
|
1B972760000
|
unkown
|
page write copy
|
|
|
|
22BC87B0000
|
unkown
|
page readonly
|
|
|
|
22BC8813000
|
unkown
|
page read and write
|
|
|
|
42CDDFD000
|
unkown
|
page read and write
|
|
|
|
233BB8BE000
|
unkown
|
page read and write
|
|
|
|
21B03000000
|
unkown
|
page readonly
|
|
|
|
7FF53BF3C000
|
unkown
|
page readonly
|
|
|
|
7FF59751E000
|
unkown
|
page readonly
|
|
|
|
22BC8867000
|
unkown
|
page read and write
|
|
|
|
7FF551231000
|
unkown
|
page readonly
|
|
|
|
21B02E4A000
|
unkown
|
page read and write
|
|
|
|
A051A7E000
|
unkown
|
page read and write
|
|
|
|
2139AA00000
|
unkown
|
page read and write
|
|
|
|
233BC148000
|
unkown
|
page read and write
|
|
|
|
25BC263C000
|
unkown
|
page read and write
|
|
|
|
7FF597B2A000
|
unkown
|
page readonly
|
|
|
|
2139AA29000
|
unkown
|
page read and write
|
|
|
|
7FF56E9B8000
|
unkown
|
page readonly
|
|
|
|
7FF5979AC000
|
unkown
|
page readonly
|
|
|
|
2B7E6DA0000
|
unkown
|
page readonly
|
|
|
|
7FF53BF24000
|
unkown
|
page readonly
|
|
|
|
A051DFF000
|
unkown
|
page read and write
|
|
|
|
17F97010000
|
unkown
|
page read and write
|
|
|
|
7FF5BCF63000
|
unkown
|
page readonly
|
|
|
|
7FF55965A000
|
unkown
|
page readonly
|
|
|
|
7FF56EB9A000
|
unkown
|
page readonly
|
|
|
|
233BB7E0000
|
unkown
|
page readonly
|
|
|
|
7FF5B74F1000
|
unkown
|
page readonly
|
|
|
|
42CD47B000
|
unkown
|
page read and write
|
|
|
|
7FF5BCFEA000
|
unkown
|
page readonly
|
|
|
|
233BB8A7000
|
unkown
|
page read and write
|
|
|
|
7FF5513CD000
|
unkown
|
page readonly
|
|
|
|
193A35FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B74E4000
|
unkown
|
page readonly
|
|
|
|
17F96789000
|
unkown
|
page read and write
|
|
|
|
7FF551441000
|
unkown
|
page readonly
|
|
|
|
233BC142000
|
unkown
|
page read and write
|
|
|
|
7FF56EAB0000
|
unkown
|
page readonly
|
|
|
|
233BB8F8000
|
unkown
|
page read and write
|
|
|
|
2139AA02000
|
unkown
|
page read and write
|
|
|
|
233BC14C000
|
unkown
|
page read and write
|
|
|
|
193A148D000
|
unkown
|
page read and write
|
|
|
|
7FF559654000
|
unkown
|
page readonly
|
|
|
|
1F6A6200000
|
unkown
|
page readonly
|
|
|
|
2139AA6A000
|
unkown
|
page read and write
|
|
|
|
17F94672000
|
unkown
|
page read and write
|
|
|
|
7FF597A0F000
|
unkown
|
page readonly
|
|
|
|
7FF53BFA4000
|
unkown
|
page readonly
|
|
|
|
193A4510000
|
unkown
|
page read and write
|
|
|
|
233BC146000
|
unkown
|
page read and write
|
|
|
|
193A1485000
|
unkown
|
page read and write
|
|
|
|
7FF559587000
|
unkown
|
page readonly
|
|
|
|
7FF56EABB000
|
unkown
|
page readonly
|
|
|
|
2537D310000
|
heap private
|
page read and write
|
|
|
|
7FF5C9A5F000
|
unkown
|
page readonly
|
|
|
|
17F94600000
|
unkown
|
page read and write
|
|
|
|
233BB8E2000
|
unkown
|
page read and write
|
|
|
|
7FF56EB94000
|
unkown
|
page readonly
|
|
|
|
2139AA13000
|
unkown
|
page read and write
|
|
|
|
7FF5B759A000
|
unkown
|
page readonly
|
|
|
|
193A1494000
|
unkown
|
page read and write
|
|
|
|
233BC156000
|
unkown
|
page read and write
|
|
|
|
17F94613000
|
unkown
|
page read and write
|
|
|
|
7FF597657000
|
unkown
|
page readonly
|
|
|
|
22BC87A0000
|
heap default
|
page read and write
|
|
|
|
7FF5C9BC6000
|
unkown
|
page readonly
|
|
|
|
7FF5C9A67000
|
unkown
|
page readonly
|
|
|
|
193A148D000
|
unkown
|
page read and write
|
|
|
|
ABB3D7F000
|
unkown
|
page read and write
|
|
|
|
7FF5B721A000
|
unkown
|
page readonly
|
|
|
|
7FF53C03A000
|
unkown
|
page readonly
|
|
|
|
25BC262A000
|
unkown
|
page read and write
|
|
|
|
193A3579000
|
unkown
|
page read and write
|
|
|
|
233BB760000
|
heap private
|
page read and write
|
|
|
|
7FF5B72FE000
|
unkown
|
page readonly
|
|
|
|
193A1496000
|
unkown
|
page read and write
|
|
|
|
233BC1FB000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D0A000
|
unkown
|
page readonly
|
|
|
|
7FF5C9E7A000
|
unkown
|
page readonly
|
|
|
|
17F96700000
|
unkown
|
page read and write
|
|
|
|
7FF597288000
|
unkown
|
page readonly
|
|
|
|
7FF53BDA1000
|
unkown
|
page readonly
|
|
|
|
7FF53BF55000
|
unkown
|
page readonly
|
|
|
|
7FF5511F3000
|
unkown
|
page readonly
|
|
|
|
7FF597A6C000
|
unkown
|
page readonly
|
|
|
|
193A14FC000
|
unkown
|
page read and write
|
|
|
|
7FF5B745F000
|
unkown
|
page readonly
|
|
|
|
7FF5BD091000
|
unkown
|
page readonly
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
21B048A0000
|
unkown
|
page readonly
|
|
|
|
7FF5BCC6A000
|
unkown
|
page readonly
|
|
|
|
42CCDBE000
|
unkown
|
page read and write
|
|
|
|
233BB916000
|
unkown
|
page read and write
|
|
|
|
7FF5C9DDA000
|
unkown
|
page readonly
|
|
|
|
193A356F000
|
unkown
|
page read and write
|
|
|
|
FBFA1F9000
|
unkown
|
page read and write
|
|
|
|
7FF53BF13000
|
unkown
|
page readonly
|
|
|
|
233BB83C000
|
unkown
|
page read and write
|
|
|
|
7FF558DCD000
|
unkown
|
page readonly
|
|
|
|
193A32C0000
|
unkown
|
page readonly
|
|
|
|
193A35CC000
|
unkown
|
page read and write
|
|
|
|
2537D0FE000
|
unkown
|
page read and write
|
|
|
|
233BC149000
|
unkown
|
page read and write
|
|
|
|
7FF5B6FD5000
|
unkown
|
page readonly
|
|
|
|
193A4410000
|
unkown
|
page read and write
|
|
|
|
7FF53BF1F000
|
unkown
|
page readonly
|
|
|
|
7FF570082000
|
unkown
|
page readonly
|
|
|
|
FBF9E78000
|
unkown
|
page read and write
|
|
|
|
7FF551387000
|
unkown
|
page readonly
|
|
|
|
17F94655000
|
unkown
|
page read and write
|
|
|
|
1B972690000
|
unkown
|
page readonly
|
|
|
|
233BC158000
|
unkown
|
page read and write
|
|
|
|
7FF5A6B61000
|
unkown
|
page readonly
|
|
|
|
7FF53BD2F000
|
unkown
|
page readonly
|
|
|
|
7FF56EADC000
|
unkown
|
page readonly
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
354A5FD000
|
unkown
|
page read and write
|
|
|
|
7FF5C9DBF000
|
unkown
|
page readonly
|
|
|
|
2B7E6E69000
|
unkown
|
page read and write
|
|
|
|
7FF5C9C71000
|
unkown
|
page readonly
|
|
|
|
233BC1A6000
|
unkown
|
page read and write
|
|
|
|
233BB88A000
|
unkown
|
page read and write
|
|
|
|
233BC1A3000
|
unkown
|
page read and write
|
|
|
|
7FF5C9E82000
|
unkown
|
page readonly
|
|
|
|
22BC9540000
|
unkown
|
page readonly
|
|
|
|
8B2967E000
|
unkown
|
page read and write
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
7FF597A6F000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
7FF55124E000
|
unkown
|
page readonly
|
|
|
|
233BBA00000
|
unkown
|
page readonly
|
|
|
|
17F946D9000
|
unkown
|
page read and write
|
|
|
|
233BC162000
|
unkown
|
page read and write
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
ABB39AB000
|
unkown
|
page read and write
|
|
|
|
F5E0D1A000
|
unkown
|
page read and write
|
|
|
|
7FF5513AF000
|
unkown
|
page readonly
|
|
|
|
193A3700000
|
unkown
|
page read and write
|
|
|
|
7FF5BCF42000
|
unkown
|
page readonly
|
|
|
|
8B292AB000
|
unkown
|
page read and write
|
|
|
|
2537D1D0000
|
unkown
|
page read and write
|
|
|
|
7FF5513A4000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
7FF59793E000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
233BC183000
|
unkown
|
page read and write
|
|
|
|
42CD5FB000
|
unkown
|
page read and write
|
|
|
|
17F94800000
|
unkown
|
page readonly
|
|
|
|
7FF55923F000
|
unkown
|
page readonly
|
|
|
|
7FF53BFBE000
|
unkown
|
page readonly
|
|
|
|
7FF55957B000
|
unkown
|
page readonly
|
|
|
|
7FF5975AE000
|
unkown
|
page readonly
|
|
|
|
2537D0FE000
|
unkown
|
page read and write
|
|
|
|
F5E12FD000
|
unkown
|
page read and write
|
|
|
|
2139AB13000
|
unkown
|
page read and write
|
|
|
|
7FF5C9D30000
|
unkown
|
page readonly
|
|
|
|
7FF5B744A000
|
unkown
|
page readonly
|
|
|
|
7FF5512BC000
|
unkown
|
page readonly
|
|
|
|
233BC145000
|
unkown
|
page read and write
|
|
|
|
2139A8E0000
|
heap default
|
page read and write
|
|
|
|
7FF5A6D86000
|
unkown
|
page readonly
|
|
|
|
193A4310000
|
unkown
|
page read and write
|
|
|
|
7FF56EB2D000
|
unkown
|
page readonly
|
|
|
|
193A1487000
|
unkown
|
page read and write
|
|
|
|
233BC154000
|
unkown
|
page read and write
|
|
|
|
233BC146000
|
unkown
|
page read and write
|
|
|
|
ABB3EFC000
|
unkown
|
page read and write
|
|
|
|
233BBFC0000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
7FF5C9E09000
|
unkown
|
page readonly
|
|
|
|
233BC143000
|
unkown
|
page read and write
|
|
|
|
7FF5A6BB3000
|
unkown
|
page readonly
|
|
|
|
1F6A5856000
|
unkown
|
page read and write
|
|
|
|
7FF56EB04000
|
unkown
|
page readonly
|
|
|
|
7FF5C9691000
|
unkown
|
page readonly
|
|
|
|
354A479000
|
unkown
|
page read and write
|
|
|
|
233BBFD0000
|
unkown
|
page readonly
|
|
|
|
7FF559395000
|
unkown
|
page readonly
|
|
|
|
7FF5B75C1000
|
unkown
|
page readonly
|
|
|
|
17F96510000
|
unkown
|
page read and write
|
|
|
|
17F94540000
|
heap default
|
page read and write
|
|
|
|
7FF5B7641000
|
unkown
|
page readonly
|
|
|
|
25BC2656000
|
unkown
|
page read and write
|
|
|
|
17F96717000
|
unkown
|
page read and write
|
|
|
|
7FF5595DE000
|
unkown
|
page readonly
|
|
|
|
7FF53BF2F000
|
unkown
|
page readonly
|
|
|
|
193A3902000
|
unkown
|
page read and write
|
|
|
|
42CD8FA000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D5A000
|
unkown
|
page readonly
|
|
|
|
7FF5B736C000
|
unkown
|
page readonly
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
193A14CB000
|
unkown
|
page read and write
|
|
|
|
2139AB00000
|
unkown
|
page read and write
|
|
|
|
7FF5BCC6F000
|
unkown
|
page readonly
|
|
|
|
2B7E6CE0000
|
heap private
|
page read and write
|
|
|
|
22BC8900000
|
unkown
|
page read and write
|
|
|
|
22BC8740000
|
heap private
|
page read and write
|
|
|
|
7FF53BEF2000
|
unkown
|
page readonly
|
|
|
|
7FF597881000
|
unkown
|
page readonly
|
|
|
|
7FF53BEE2000
|
unkown
|
page readonly
|
|
|
|
354A27E000
|
unkown
|
page read and write
|
|
|
|
7FF597891000
|
unkown
|
page readonly
|
|
|
|
42CD97B000
|
unkown
|
page read and write
|
|
|
|
7FF597840000
|
unkown
|
page readonly
|
|
|
|
17F96749000
|
unkown
|
page read and write
|
|
|
|
7FF5B6C4E000
|
unkown
|
page readonly
|
|
|
|
2B7E6D40000
|
heap default
|
page read and write
|
|
|
|
42CD6FB000
|
unkown
|
page read and write
|
|
|
|
7FF56EBA1000
|
unkown
|
page readonly
|
|
|
|
7FF53B851000
|
unkown
|
page readonly
|
|
|
|
AC9A9FF000
|
unkown
|
page read and write
|
|
|
|
193A4210000
|
unkown
|
page read and write
|
|
|
|
42CD4FB000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
17F946BF000
|
unkown
|
page read and write
|
|
|
|
7FF53C041000
|
unkown
|
page readonly
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
193A4410000
|
unkown
|
page read and write
|
|
|
|
233BC143000
|
unkown
|
page read and write
|
|
|
|
1B97283F000
|
unkown
|
page read and write
|
|
|
|
193A35A3000
|
unkown
|
page read and write
|
|
|
|
7FF56EB26000
|
unkown
|
page readonly
|
|
|
|
7FF5B721F000
|
unkown
|
page readonly
|
|
|
|
7FF53BC0C000
|
unkown
|
page readonly
|
|
|
|
1F6A5847000
|
unkown
|
page read and write
|
|
|
|
2139AC50000
|
unkown
|
page readonly
|
|
|
|
7FF5B7177000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D22000
|
unkown
|
page readonly
|
|
|
|
193A350E000
|
unkown
|
page read and write
|
|
|
|
2B7E6E58000
|
unkown
|
page read and write
|
|
|
|
7FF5C9D8E000
|
unkown
|
page readonly
|
|
|
|
7FF53BC1A000
|
unkown
|
page readonly
|
|
|
|
7FF53BFC1000
|
unkown
|
page readonly
|
|
|
|
7FF5BCFFE000
|
unkown
|
page readonly
|
|
|
|
193A3783000
|
unkown
|
page read and write
|
|
|
|
7FF5595ED000
|
unkown
|
page readonly
|
|
|
|
193A3783000
|
unkown
|
page read and write
|
|
|
|
7FF53BFB8000
|
unkown
|
page readonly
|
|
|
|
354A67E000
|
unkown
|
page read and write
|
|
|
|
F5E117F000
|
unkown
|
page read and write
|
|
|
|
7FF53BF4A000
|
unkown
|
page readonly
|
|
|
|
233BC1E5000
|
unkown
|
page read and write
|
|
|
|
7FF5A6C0B000
|
unkown
|
page readonly
|
|
|
|
7FF53BEEC000
|
unkown
|
page readonly
|
|
|
|
233BBFE0000
|
unkown
|
page readonly
|
|
|
|
233BB86F000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
7FF55932B000
|
unkown
|
page readonly
|
|
|
|
7FF5593C9000
|
unkown
|
page readonly
|
|
|
|
233BB829000
|
unkown
|
page read and write
|
|
|
|
D009C7B000
|
unkown
|
page read and write
|
|
|
|
7FF5BCF9E000
|
unkown
|
page readonly
|
|
|
|
193A148D000
|
unkown
|
page read and write
|
|
|
|
AC9A4FD000
|
unkown
|
page read and write
|
|
|
|
193A1600000
|
unkown
|
page write copy
|
|
|
|
7FF5B7550000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D7A000
|
unkown
|
page readonly
|
|
|
|
2139AA6B000
|
unkown
|
page read and write
|
|
|
|
193A3600000
|
unkown
|
page read and write
|
|
|
|
1B9727B0000
|
unkown
|
page readonly
|
|
|
|
7FF55137F000
|
unkown
|
page readonly
|
|
|
|
42CDAFB000
|
unkown
|
page read and write
|
|
|
|
42CDD7B000
|
unkown
|
page read and write
|
|
|
|
17F945E0000
|
unkown
|
page read and write
|
|
|
|
233BC16F000
|
unkown
|
page read and write
|
|
|
|
7FF559247000
|
unkown
|
page readonly
|
|
|
|
17F964B0000
|
heap private
|
page read and write
|
|
|
|
1F6A6002000
|
unkown
|
page read and write
|
|
|
|
7FF5B7594000
|
unkown
|
page readonly
|
|
|
|
1F6A5870000
|
unkown
|
page read and write
|
|
|
|
193A1413000
|
unkown
|
page read and write
|
|
|
|
7FF55134A000
|
unkown
|
page readonly
|
|
|
|
F5E11FA000
|
unkown
|
page read and write
|
|
|
|
7FF56E8D5000
|
unkown
|
page readonly
|
|
|
|
22BC883C000
|
unkown
|
page read and write
|
|
|
|
17F94718000
|
unkown
|
page read and write
|
|
|
|
7FF5BCC77000
|
unkown
|
page readonly
|
|
|
|
233BC16E000
|
unkown
|
page read and write
|
|
|
|
7FF5C9E74000
|
unkown
|
page readonly
|
|
|
|
2139AA6C000
|
unkown
|
page read and write
|
|
|
|
7FF597A3E000
|
unkown
|
page readonly
|
|
|
|
233BC130000
|
unkown
|
page read and write
|
|
|
|
233BC16E000
|
unkown
|
page read and write
|
|
|
|
354A4FB000
|
unkown
|
page read and write
|
|
|
|
7FF57000D000
|
unkown
|
page readonly
|
|
|
|
193A3800000
|
unkown
|
page read and write
|
|
|
|
22BC8867000
|
unkown
|
page read and write
|
|
|
|
233BC16F000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D10000
|
unkown
|
page readonly
|
|
|
|
7FF5A6A90000
|
unkown
|
page readonly
|
|
|
|
2B7E6F00000
|
unkown
|
page read and write
|
|
|
|
7FF5B73EA000
|
unkown
|
page readonly
|
|
|
|
193A1485000
|
unkown
|
page read and write
|
|
|
|
7FF559473000
|
unkown
|
page readonly
|
|
|
|
233BC200000
|
unkown
|
page readonly
|
|
|
|
7FF5B7353000
|
unkown
|
page readonly
|
|
|
|
ABB3C7E000
|
unkown
|
page read and write
|
|
|
|
17F94713000
|
unkown
|
page read and write
|
|
|
|
193A151D000
|
unkown
|
page read and write
|
|
|
|
3549F9E000
|
unkown
|
page read and write
|
|
|
|
42CD07F000
|
unkown
|
page read and write
|
|
|
|
193A3575000
|
unkown
|
page read and write
|
|
|
|
21B02F02000
|
unkown
|
page read and write
|
|
|
|
233BC152000
|
unkown
|
page read and write
|
|
|
|
7FF5B7364000
|
unkown
|
page readonly
|
|
|
|
7FF5B7316000
|
unkown
|
page readonly
|
|
|
|
7FF5B742F000
|
unkown
|
page readonly
|
|
|
|
7FF55956E000
|
unkown
|
page readonly
|
|
|
|
2139AB02000
|
unkown
|
page read and write
|
|
|
|
7FF56EB29000
|
unkown
|
page readonly
|
|
|
|
7FF5C9DA7000
|
unkown
|
page readonly
|
|
|
|
7FF5BCF40000
|
unkown
|
page readonly
|
|
|
|
233BB8E9000
|
unkown
|
page read and write
|
|
|
|
2537D210000
|
unkown
|
page readonly
|
|
|
|
7FF59798D000
|
unkown
|
page readonly
|
|
|
|
193A146B000
|
unkown
|
page read and write
|
|
|
|
7FF5B75B8000
|
unkown
|
page readonly
|
|
|
|
7FF597A77000
|
unkown
|
page readonly
|
|
|
|
7FF550F10000
|
unkown
|
page readonly
|
|
|
|
7FF597A14000
|
unkown
|
page readonly
|
|
|
|
7FF597393000
|
unkown
|
page readonly
|
|
|
|
7FF5595E1000
|
unkown
|
page readonly
|
|
|
|
22BC8A00000
|
unkown
|
page readonly
|
|
|
|
7FF53BFC6000
|
unkown
|
page readonly
|
|
|
|
7FF56EB18000
|
unkown
|
page readonly
|
|
|
|
7FF5B6FC0000
|
unkown
|
page readonly
|
|
|
|
17F94550000
|
unkown
|
page write copy
|
|
|
|
193A3589000
|
unkown
|
page read and write
|
|
|
|
7FF5510C7000
|
unkown
|
page readonly
|
|
|
|
1B972829000
|
unkown
|
page read and write
|
|
|
|
22BC8847000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
193A148A000
|
unkown
|
page read and write
|
|
|
|
193A3982000
|
unkown
|
page read and write
|
|
|
|
7FF5C9BE1000
|
unkown
|
page readonly
|
|
|
|
2B7E6F02000
|
unkown
|
page read and write
|
|
|
|
D3A4C7F000
|
unkown
|
page read and write
|
|
|
|
AC9A47B000
|
unkown
|
page read and write
|
|
|
|
F5E107F000
|
unkown
|
page read and write
|
|
|
|
7FF5979A4000
|
unkown
|
page readonly
|
|
|
|
1B9741A0000
|
unkown
|
page read and write
|
|
|
|
7FF56E77F000
|
unkown
|
page readonly
|
|
|
|
193A3573000
|
unkown
|
page read and write
|
|
|
|
2537D0FE000
|
unkown
|
page read and write
|
|
|
|
193A4310000
|
unkown
|
page read and write
|
|
|
|
42CDBFC000
|
unkown
|
page read and write
|
|
|
|
7FF5B72A3000
|
unkown
|
page readonly
|
|
|
|
2537D1F0000
|
unkown
|
page read and write
|
|
|
|
7FF551394000
|
unkown
|
page readonly
|
|
|
|
233BC1B0000
|
unkown
|
page read and write
|
|
|
|
193A353D000
|
unkown
|
page read and write
|
|
|
|
7FF5B720C000
|
unkown
|
page readonly
|
|
|
|
7FF59771A000
|
unkown
|
page readonly
|
|
|
|
7FF5B7417000
|
unkown
|
page readonly
|
|
|
|
354A3FE000
|
unkown
|
page read and write
|
|
|
|
193A35DD000
|
unkown
|
page read and write
|
|
|
|
7FF551442000
|
unkown
|
page readonly
|
|
|
|
7FF597A2C000
|
unkown
|
page readonly
|
|
|
|
A051CF7000
|
unkown
|
page read and write
|
|
|
|
7FF5C9C98000
|
unkown
|
page readonly
|
|
|
|
2B7E6E29000
|
unkown
|
page read and write
|
|
|
|
233BC159000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D1B000
|
unkown
|
page readonly
|
|
|
|
2B7E6D50000
|
unkown
|
page write copy
|
|
|
|
7FF5C9E01000
|
unkown
|
page readonly
|
|
|
|
193A148F000
|
unkown
|
page read and write
|
|
|
|
1B972902000
|
unkown
|
page read and write
|
|
|
|
42CCD3B000
|
unkown
|
page read and write
|
|
|
|
7FF5978E3000
|
unkown
|
page readonly
|
|
|
|
21B02E13000
|
unkown
|
page read and write
|
|
|
|
2139AA69000
|
unkown
|
page read and write
|
|
|
|
7FF5B6FC6000
|
unkown
|
page readonly
|
|
|
|
AC9A5FB000
|
unkown
|
page read and write
|
|
|
|
17F944E0000
|
heap private
|
page read and write
|
|
|
|
233BC150000
|
unkown
|
page read and write
|
|
|
|
7FF53BD91000
|
unkown
|
page readonly
|
|
|
|
7FF5511A1000
|
unkown
|
page readonly
|
|
|
|
7FF53BF50000
|
unkown
|
page readonly
|
|
|
|
233BC1A3000
|
unkown
|
page read and write
|
|
|
|
2B7E6E6A000
|
unkown
|
page read and write
|
|
|
|
7FF5B75C6000
|
unkown
|
page readonly
|
|
|
|
7FF597A40000
|
unkown
|
page readonly
|
|
|
|
7FF53BE53000
|
unkown
|
page readonly
|
|
|
|
2B7E6E13000
|
unkown
|
page read and write
|
|
|
|
233BC602000
|
unkown
|
page read and write
|
|
|
|
22BC8829000
|
unkown
|
page read and write
|
|
|
|
233BC1EE000
|
unkown
|
page read and write
|
|
|
|
7FF56E787000
|
unkown
|
page readonly
|
|
|
|
42CD77A000
|
unkown
|
page read and write
|
|
|
|
7FF5B75CD000
|
unkown
|
page readonly
|
|
|
|
193A32B0000
|
unkown
|
page readonly
|
|
|
|
7FF56F8E7000
|
unkown
|
page readonly
|
|
|
|
2537D0F9000
|
unkown
|
page read and write
|
|
|
|
193A354F000
|
unkown
|
page read and write
|
|
|
|
7FF5B7476000
|
unkown
|
page readonly
|
|
|
|
7FF53BF1B000
|
unkown
|
page readonly
|
|
|
|
1F6A5829000
|
unkown
|
page read and write
|
|
|
|
1F6A5913000
|
unkown
|
page read and write
|
|
|
|
FBF9BF7000
|
unkown
|
page read and write
|
|
|
|
2B7E6E36000
|
unkown
|
page read and write
|
|
|
|
17F9463F000
|
unkown
|
page read and write
|
|
|
|
7FF5C9E81000
|
unkown
|
page readonly
|
|
|
|
7FF5A6D89000
|
unkown
|
page readonly
|
|
|
|
7FF55133C000
|
unkown
|
page readonly
|
|
|
|
22BC8870000
|
unkown
|
page read and write
|
|
|
|
7FF5BCDF9000
|
unkown
|
page readonly
|
|
|
|
7FF559512000
|
unkown
|
page readonly
|
|
|
|
2139AA69000
|
unkown
|
page read and write
|
|
|
|
233BC14E000
|
unkown
|
page read and write
|
|
|
|
193A148E000
|
unkown
|
page read and write
|
|
|
|
193A3882000
|
unkown
|
page read and write
|
|
|
|
193A1578000
|
unkown
|
page read and write
|
|
|
|
FBF9D7E000
|
unkown
|
page read and write
|
|
|
|
2139AC00000
|
unkown
|
page write copy
|
|
|
|
42CDC7A000
|
unkown
|
page read and write
|
|
|
|
233BC16E000
|
unkown
|
page read and write
|
|
|
|
7FF5B7375000
|
unkown
|
page readonly
|
|
|
|
4B6439B000
|
unkown
|
page read and write
|
|
|
|
233BC1C4000
|
unkown
|
page read and write
|
|
|
|
233BC1F6000
|
unkown
|
page read and write
|
|
|
|
2139AA69000
|
unkown
|
page read and write
|
|
|
|
7FF5C9CD6000
|
unkown
|
page readonly
|
|
|
|
7FF5C9B4B000
|
unkown
|
page readonly
|
|
|
|
2537D315000
|
heap private
|
page read and write
|
|
|
|
7FF5A6D6F000
|
unkown
|
page readonly
|
|
|
|
7FF5A68E5000
|
unkown
|
page readonly
|
|
|
|
233BB827000
|
unkown
|
page read and write
|
|
|
|
7FF5B7458000
|
unkown
|
page readonly
|
|
|
|
233BB902000
|
unkown
|
page read and write
|
|
|
|
22BC87C0000
|
unkown
|
page readonly
|
|
|
|
2139AA6B000
|
unkown
|
page read and write
|
|
|
|
AC9A57E000
|
unkown
|
page read and write
|
|
|
|
7FF5B75A4000
|
unkown
|
page readonly
|
|
|
|
7FF5A6C5D000
|
unkown
|
page readonly
|
|
|
|
FBF9FFE000
|
unkown
|
page read and write
|
|
|
|
7FF559533000
|
unkown
|
page readonly
|
|
|
|
4B648FF000
|
unkown
|
page read and write
|
|
|
|
2139AA6A000
|
unkown
|
page read and write
|
|
|
|
233BC17B000
|
unkown
|
page read and write
|
|
|
|
233BB8E8000
|
unkown
|
page read and write
|
|
|
|
193A350E000
|
unkown
|
page read and write
|
|
|
|
193A1494000
|
unkown
|
page read and write
|
|
|
|
7FF5BCFAB000
|
unkown
|
page readonly
|
|
|
|
7FF597948000
|
unkown
|
page readonly
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
7FF55923A000
|
unkown
|
page readonly
|
|
|
|
7FF56EADF000
|
unkown
|
page readonly
|
|
|
|
7FF53BE58000
|
unkown
|
page readonly
|
|
|
|
D3A4CFF000
|
unkown
|
page read and write
|
|
|
|
7FF597A2A000
|
unkown
|
page readonly
|
|
|
|
7FF597A4B000
|
unkown
|
page readonly
|
|
|
|
193A1577000
|
unkown
|
page read and write
|
|
|
|
7FF55922C000
|
unkown
|
page readonly
|
|
|
|
7FF56FFBF000
|
unkown
|
page readonly
|
|
|
|
ABB3F79000
|
unkown
|
page read and write
|
|
|
|
354A57D000
|
unkown
|
page read and write
|
|
|
|
193A12F0000
|
heap default
|
page read and write
|
|
|
|
233BB8D5000
|
unkown
|
page read and write
|
|
|
|
193A145E000
|
unkown
|
page read and write
|
|
|
|
233BC145000
|
unkown
|
page read and write
|
|
|
|
7FF5B73EC000
|
unkown
|
page readonly
|
|
|
|
7FF5B6C48000
|
unkown
|
page readonly
|
|
|
|
193A14C1000
|
unkown
|
page read and write
|
|
|
|
D00976E000
|
unkown
|
page read and write
|
|
|
|
7FF53B7AD000
|
unkown
|
page readonly
|
|
|
|
193A3573000
|
unkown
|
page read and write
|
|
|
|
7FF53BC27000
|
unkown
|
page readonly
|
|
|
|
193A148D000
|
unkown
|
page read and write
|
|
|
|
FBF9AF5000
|
unkown
|
page read and write
|
|
|
|
25BC268A000
|
unkown
|
page read and write
|
|
|
|
193A1429000
|
unkown
|
page read and write
|
|
|
|
AC9A8FF000
|
unkown
|
page read and write
|
|
|
|
7FF597993000
|
unkown
|
page readonly
|
|
|
|
7FF5B6DAD000
|
unkown
|
page readonly
|
|
|
|
21B02E29000
|
unkown
|
page read and write
|
|
|
|
7FF55134E000
|
unkown
|
page readonly
|
|
|
|
7FF56E86B000
|
unkown
|
page readonly
|
|
|
|
7FF56EA73000
|
unkown
|
page readonly
|
|
|
|
2139AA68000
|
unkown
|
page read and write
|
|
|
|
7FF56EAE8000
|
unkown
|
page readonly
|
|
|
|
17F96500000
|
unkown
|
page readonly
|
|
|
|
7FF56EAAA000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
17F96520000
|
unkown
|
page readonly
|
|
|
|
233BC14E000
|
unkown
|
page read and write
|
|
|
|
7FF53BFC9000
|
unkown
|
page readonly
|
|
|
|
2B7E6F13000
|
unkown
|
page read and write
|
|
|
|
233BC100000
|
unkown
|
page read and write
|
|
|
|
2537D0E6000
|
heap default
|
page read and write
|
|
|
|
193A350A000
|
unkown
|
page read and write
|
|
|
|
42CD3FB000
|
unkown
|
page read and write
|
|
|
|
233BC14C000
|
unkown
|
page read and write
|
|
|
|
25BC267D000
|
unkown
|
page read and write
|
|
|
|
7FF56E30D000
|
unkown
|
page readonly
|
|
|
|
233BC177000
|
unkown
|
page read and write
|
|
|
|
7FF5BCFE4000
|
unkown
|
page readonly
|
|
|
|
7FF5B7400000
|
unkown
|
page readonly
|
|
|
|
1F6A5800000
|
unkown
|
page read and write
|
|
|
|
193A148D000
|
unkown
|
page read and write
|
|
|
|
7FF597921000
|
unkown
|
page readonly
|
|
|
|
7FF550B98000
|
unkown
|
page readonly
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
7FF5C9A5A000
|
unkown
|
page readonly
|
|
|
|
42CDE7B000
|
unkown
|
page read and write
|
|
|
|
7FF56E8D1000
|
unkown
|
page readonly
|
|
|
|
233BB913000
|
unkown
|
page read and write
|
|
|
|
193A32C0000
|
unkown
|
page read and write
|
|
|
|
193A4210000
|
unkown
|
page read and write
|
|
|
|
ABB3DFA000
|
unkown
|
page read and write
|
|
|
|
4B6477A000
|
unkown
|
page read and write
|
|
|
|
21B02C10000
|
heap private
|
page read and write
|
|
|
|
8B296F9000
|
unkown
|
page read and write
|
|
|
|
7FF53BD84000
|
unkown
|
page readonly
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
7FF56E909000
|
unkown
|
page readonly
|
|
|
|
233BC1CA000
|
unkown
|
page read and write
|
|
|
|
7FF55133A000
|
unkown
|
page readonly
|
|
|
|
7FF56E876000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D2C000
|
unkown
|
page readonly
|
|
|
|
1B9742A0000
|
unkown
|
page readonly
|
|
|
|
7FF5C9DBC000
|
unkown
|
page readonly
|
|
|
|
7FF53C042000
|
unkown
|
page readonly
|
|
|
|
7FF5595C4000
|
unkown
|
page readonly
|
|
|
|
7FF55137C000
|
unkown
|
page readonly
|
|
|
|
7FF56FFDA000
|
unkown
|
page readonly
|
|
|
|
7FF56FFFE000
|
unkown
|
page readonly
|
|
|
|
7FF559451000
|
unkown
|
page readonly
|
|
|
|
A05177B000
|
unkown
|
page read and write
|
|
|
|
193A35B8000
|
unkown
|
page read and write
|
|
|
|
42CD27A000
|
unkown
|
page read and write
|
|
|
|
7FF53BF7C000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
7FF53BF4E000
|
unkown
|
page readonly
|
|
|
|
1B972620000
|
heap private
|
page read and write
|
|
|
|
7FF55139A000
|
unkown
|
page readonly
|
|
|
|
7FF5BCFA5000
|
unkown
|
page readonly
|
|
|
|
7FF5BCEA8000
|
unkown
|
page readonly
|
|
|
|
1F6A5873000
|
unkown
|
page read and write
|
|
|
|
7FF5C95ED000
|
unkown
|
page readonly
|
|
|
|
193A1494000
|
unkown
|
page read and write
|
|
|
|
7FF5977C0000
|
unkown
|
page readonly
|
|
|
|
7FF5B75AE000
|
unkown
|
page readonly
|
|
|
|
17F9466C000
|
unkown
|
page read and write
|
|
|
|
7FF56EAFA000
|
unkown
|
page readonly
|
|
|
|
17F96702000
|
unkown
|
page read and write
|
|
|
|
7FF5595CE000
|
unkown
|
page readonly
|
|
|
|
7FF5A6C0E000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D5B000
|
unkown
|
page readonly
|
|
|
|
7FF5513C6000
|
unkown
|
page readonly
|
|
|
|
193A357C000
|
unkown
|
page read and write
|
|
|
|
7FF5BCE9B000
|
unkown
|
page readonly
|
|
|
|
1F6A5849000
|
unkown
|
page read and write
|
|
|
|
1F6A5900000
|
unkown
|
page read and write
|
|
|
|
7FF5B7479000
|
unkown
|
page readonly
|
|
|
|
7FF559336000
|
unkown
|
page readonly
|
|
|
|
7FF5B755B000
|
unkown
|
page readonly
|
|
|
|
7FF5B73A9000
|
unkown
|
page readonly
|
|
|
|
2B7E6E6D000
|
unkown
|
page read and write
|
|
|
|
7FF5B757C000
|
unkown
|
page readonly
|
|
|
|
193A148D000
|
unkown
|
page read and write
|
|
|
|
193A1485000
|
unkown
|
page read and write
|
|
|
|
17F9467B000
|
unkown
|
page read and write
|
|
|
|
7FF597AB6000
|
unkown
|
page readonly
|
|
|
|
17F96789000
|
unkown
|
page read and write
|
|
|
|
7FF53BB29000
|
unkown
|
page readonly
|
|
|
|
233BC16B000
|
unkown
|
page read and write
|
|
|
|
233BBF40000
|
unkown
|
page readonly
|
|
|
|
7FF5977B7000
|
unkown
|
page readonly
|
|
|
|
7FF5510D0000
|
unkown
|
page readonly
|
|
|
|
7FF559510000
|
unkown
|
page readonly
|
|
|
|
2537CFF0000
|
unkown
|
page readonly
|
|
|
|
1F6A5AD0000
|
unkown
|
page readonly
|
|
|
|
7FF5BD01D000
|
unkown
|
page readonly
|
|
|
|
2537D0D0000
|
heap default
|
page read and write
|
|
|
|
193A32E0000
|
unkown
|
page readonly
|
|
|
|
21B02E00000
|
unkown
|
page read and write
|
|
|
|
7FF5B75BE000
|
unkown
|
page readonly
|
|
|
|
7FF56E991000
|
unkown
|
page readonly
|
|
|
|
17F946C0000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
193A3500000
|
unkown
|
page read and write
|
|
|
|
1F6A5750000
|
unkown
|
page readonly
|
|
|
|
233BBAD0000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D6F000
|
unkown
|
page readonly
|
|
|
|
7FF53BD86000
|
unkown
|
page readonly
|
|
|
|
193A354F000
|
unkown
|
page read and write
|
|
|
|
25BC2800000
|
unkown
|
page readonly
|
|
|
|
7FF5C9C93000
|
unkown
|
page readonly
|
|
|
|
7FF56FC6A000
|
unkown
|
page readonly
|
|
|
|
7FF5B7454000
|
unkown
|
page readonly
|
|
|
|
193A3783000
|
unkown
|
page read and write
|
|
|
|
193A35EC000
|
unkown
|
page read and write
|
|
|
|
233BBFE0000
|
unkown
|
page read and write
|
|
|
|
1F6A5908000
|
unkown
|
page read and write
|
|
|
|
7FF53BD71000
|
unkown
|
page readonly
|
|
|
|
25BC267D000
|
unkown
|
page read and write
|
|
|
|
42CDB7B000
|
unkown
|
page read and write
|
|
|
|
7FF5C9DF8000
|
unkown
|
page readonly
|
|
|
|
22BC888E000
|
unkown
|
page read and write
|
|
|
|
7FF56E76C000
|
unkown
|
page readonly
|
|
|
|
17F94702000
|
unkown
|
page read and write
|
|
|
|
7FF5BCD5B000
|
unkown
|
page readonly
|
|
|
|
7FF5BD019000
|
unkown
|
page readonly
|
|
|
|
7FF55143A000
|
unkown
|
page readonly
|
|
|
|
7FF5B754E000
|
unkown
|
page readonly
|
|
|
|
193A354A000
|
unkown
|
page read and write
|
|
|
|
193A14A5000
|
unkown
|
page read and write
|
|
|
|
7FF5BCFCC000
|
unkown
|
page readonly
|
|
|
|
25BC2C60000
|
unkown
|
page readonly
|
|
|
|
7FF5BD08A000
|
unkown
|
page readonly
|
|
|
|
233BB7F0000
|
unkown
|
page read and write
|
|
|
|
233BB8A7000
|
unkown
|
page read and write
|
|
|
|
7FF5C9DFE000
|
unkown
|
page readonly
|
|
|
|
233BC14D000
|
unkown
|
page read and write
|
|
|
|
A0517FE000
|
unkown
|
page read and write
|
|
|
|
7FF53C034000
|
unkown
|
page readonly
|
|
|
|
22BC884A000
|
unkown
|
page read and write
|
|
|
|
7FF597A8A000
|
unkown
|
page readonly
|
|
|
|
F5E127F000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D15000
|
unkown
|
page readonly
|
|
|
|
193A1535000
|
unkown
|
page read and write
|
|
|
|
7FF5B746E000
|
unkown
|
page readonly
|
|
|
|
193A1513000
|
unkown
|
page read and write
|
|
|
|
25BC2590000
|
unkown
|
page readonly
|
|
|
|
193A3260000
|
heap private
|
page read and write
|
|
|
|
7FF5B74F0000
|
unkown
|
page readonly
|
|
|
|
193A3783000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D54000
|
unkown
|
page readonly
|
|
|
|
193A3C00000
|
unkown
|
page readonly
|
|
|
|
7FF5A6D3C000
|
unkown
|
page readonly
|
|
|
|
193A3743000
|
unkown
|
page read and write
|
|
|
|
21B02DA0000
|
unkown
|
page readonly
|
|
|
|
7FF5C9BB5000
|
unkown
|
page readonly
|
|
|
|
7FF53BDA9000
|
unkown
|
page readonly
|
|
|
|
7FF5C98F2000
|
unkown
|
page readonly
|
|
|
|
2139AA6C000
|
unkown
|
page read and write
|
|
|
|
193A354F000
|
unkown
|
page read and write
|
|
|
|
193A1650000
|
unkown
|
page readonly
|
|
|
|
3549F1B000
|
unkown
|
page read and write
|
|
|
|
7FF597615000
|
unkown
|
page readonly
|
|
|
|
17F96602000
|
unkown
|
page read and write
|
|
|
|
7FF53BE4B000
|
unkown
|
page readonly
|
|
|
|
7FF5BCD66000
|
unkown
|
page readonly
|
|
|
|
233BB908000
|
unkown
|
page read and write
|
|
|
|
F5E0D9E000
|
unkown
|
page read and write
|
|
|
|
2B7E7000000
|
unkown
|
page readonly
|
|
|
|
7FF5C9B56000
|
unkown
|
page readonly
|
|
|
|
193A1493000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
233BB84B000
|
unkown
|
page read and write
|
|
|
|
8B2977E000
|
unkown
|
page read and write
|
|
|
|
233BC14C000
|
unkown
|
page read and write
|
|
|
|
7FF56EA52000
|
unkown
|
page readonly
|
|
|
|
1F6A584D000
|
unkown
|
page read and write
|
|
|
|
7FF53BD75000
|
unkown
|
page readonly
|
|
|
|
193A1486000
|
unkown
|
page read and write
|
|
|
|
7FF53BE31000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
7FF5C9BD1000
|
unkown
|
page readonly
|
|
|
|
7FF5BD084000
|
unkown
|
page readonly
|
|
|
|
D009B7E000
|
unkown
|
page read and write
|
|
|
|
193A1576000
|
unkown
|
page read and write
|
|
|
|
2537D220000
|
unkown
|
page readonly
|
|
|
|
193A14BF000
|
unkown
|
page read and write
|
|
|
|
193A356D000
|
unkown
|
page read and write
|
|
|
|
193A3534000
|
unkown
|
page read and write
|
|
|
|
17F96800000
|
unkown
|
page readonly
|
|
|
|
D0097EE000
|
unkown
|
page read and write
|
|
|
|
7FF597806000
|
unkown
|
page readonly
|
|
|
|
1F6A583C000
|
unkown
|
page read and write
|
|
|
|
7FF55135B000
|
unkown
|
page readonly
|
|
|
|
7FF5BD016000
|
unkown
|
page readonly
|
|
|
|
7FF5B74F2000
|
unkown
|
page readonly
|
|
|
|
233BC141000
|
unkown
|
page read and write
|
|
|
|
7FF559570000
|
unkown
|
page readonly
|
|
|
|
7FF5B7634000
|
unkown
|
page readonly
|
|
|
|
193A3A00000
|
unkown
|
page read and write
|
|
|
|
2537D0E6000
|
unkown
|
page read and write
|
|
|
|
7FF5C9DC7000
|
unkown
|
page readonly
|
|
|
|
7FF597A57000
|
unkown
|
page readonly
|
|
|
|
7FF53BF94000
|
unkown
|
page readonly
|
|
|
|
A051AFB000
|
unkown
|
page read and write
|
|
|
|
21B02C70000
|
heap default
|
page read and write
|
|
|
|
7FF5A6BF1000
|
unkown
|
page readonly
|
|
|
|
FBFA2F8000
|
unkown
|
page read and write
|
|
|
|
233BC186000
|
unkown
|
page read and write
|
|
|
|
193A4710000
|
unkown
|
page read and write
|
|
|
|
D0096EC000
|
unkown
|
page read and write
|
|
|
|
7FF5A68D6000
|
unkown
|
page readonly
|
|
|
|
42CD67B000
|
unkown
|
page read and write
|
|
|
|
7FF597943000
|
unkown
|
page readonly
|
|
|
|
233BC661000
|
unkown
|
page read and write
|
|
|
|
7FF5975B2000
|
unkown
|
page readonly
|
|
|
|
233BC1E8000
|
unkown
|
page read and write
|
|
|
|
7FF597341000
|
unkown
|
page readonly
|
|
|
|
2139AA6A000
|
unkown
|
page read and write
|
|
|
|
4B647FA000
|
unkown
|
page read and write
|
|
|
|
1F6A5A00000
|
unkown
|
page readonly
|
|
|
|
233BBFE0000
|
unkown
|
page read and write
|
|
|
|
7FF597A0B000
|
unkown
|
page readonly
|
|
|
|
193A1290000
|
heap private
|
page read and write
|
|
|
|
7FF5B73FE000
|
unkown
|
page readonly
|
|
|
|
2537D0DB000
|
heap default
|
page read and write
|
|
|
|
7FF5B7567000
|
unkown
|
page readonly
|
|
|
|
233BBFF0000
|
unkown
|
page read and write
|
|
|
|
7FF5A6C7C000
|
unkown
|
page readonly
|
|
|
|
7FF550F16000
|
unkown
|
page readonly
|
|
|
|
233BB8B1000
|
unkown
|
page read and write
|
|
|
|
D3A47AB000
|
unkown
|
page read and write
|
|
|
|
193A354C000
|
unkown
|
page read and write
|
|
|
|
7FF5513C9000
|
unkown
|
page readonly
|
|
|
|
193A3A02000
|
unkown
|
page read and write
|
|
|
|
7FF53BE9D000
|
unkown
|
page readonly
|
|
|
|
7FF5B72FB000
|
unkown
|
page readonly
|
|
|
|
7FF551367000
|
unkown
|
page readonly
|
|
|
|
2B7E6E6A000
|
unkown
|
page read and write
|
|
|
|
193A1488000
|
unkown
|
page read and write
|
|
|
|
7FF56FF90000
|
unkown
|
page readonly
|
|
|
|
1F6A5853000
|
unkown
|
page read and write
|
|
|
|
2139AA3F000
|
unkown
|
page read and write
|
|
|
|
193A3519000
|
unkown
|
page read and write
|
|
|
|
2B7E6E69000
|
unkown
|
page read and write
|
|
|
|
8B2987F000
|
unkown
|
page read and write
|
|
|
|
42CD37A000
|
unkown
|
page read and write
|
|
|
|
233BC165000
|
unkown
|
page read and write
|
|
|
|
22BC8855000
|
unkown
|
page read and write
|
|
|
|
193A1494000
|
unkown
|
page read and write
|
|
|
|
7FF5B74F2000
|
unkown
|
page readonly
|
|
|
|
22BC87D0000
|
unkown
|
page read and write
|
|
|
|
22BC9002000
|
unkown
|
page read and write
|
|
|
|
7FF55959C000
|
unkown
|
page readonly
|
|
|
|
193A353C000
|
unkown
|
page read and write
|
|
|
|
7FF5595E9000
|
unkown
|
page readonly
|
|
|
|
7FF5BC7FD000
|
unkown
|
page readonly
|
|
|
|
21B02E40000
|
unkown
|
page read and write
|
|
|
|
7FF53BF87000
|
unkown
|
page readonly
|
|
|
|
193A1487000
|
unkown
|
page read and write
|
|
|
|
7FF5A6C74000
|
unkown
|
page readonly
|
|
|
|
7FF5B7642000
|
unkown
|
page readonly
|
|
|
|
7FF53BAB2000
|
unkown
|
page readonly
|
|
|
|
D009E7F000
|
unkown
|
page read and write
|
|
|
|
2537D0F7000
|
unkown
|
page read and write
|
|
|
|
22BC8800000
|
unkown
|
page read and write
|
|
|
|
2B7E8870000
|
unkown
|
page read and write
|
|
|
|
17F96748000
|
unkown
|
page read and write
|
|
|
|
7FF5C9D53000
|
unkown
|
page readonly
|
|
|
|
7FF559391000
|
unkown
|
page readonly
|
|
|
|
233BC16E000
|
unkown
|
page read and write
|
|
|
|
193A1485000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D8D000
|
unkown
|
page readonly
|
|
|
|
2537D320000
|
unkown
|
page readonly
|
|
|
|
7FF5C9D32000
|
unkown
|
page readonly
|
|
|
|
7FF5979E0000
|
unkown
|
page readonly
|
|
|
|
7FF551434000
|
unkown
|
page readonly
|
|
|
|
2139AA68000
|
unkown
|
page read and write
|
|
|
|
2139A880000
|
heap private
|
page read and write
|
|
|
|
7FF5C9969000
|
unkown
|
page readonly
|
|
|
|
7FF5C9DE4000
|
unkown
|
page readonly
|
|
|
|
7FF5A6D64000
|
unkown
|
page readonly
|
|
|
|
233BC165000
|
unkown
|
page read and write
|
|
|
|
193A148F000
|
unkown
|
page read and write
|
|
|
|
7FF56FFF8000
|
unkown
|
page readonly
|
|
|
|
7FF5C9A4C000
|
unkown
|
page readonly
|
|
|
|
25BC2661000
|
unkown
|
page read and write
|
|
|
|
25BC2713000
|
unkown
|
page read and write
|
|
|
|
7FF5B74EA000
|
unkown
|
page readonly
|
|
|
|
7FF597A45000
|
unkown
|
page readonly
|
|
|
|
FBF9F7A000
|
unkown
|
page read and write
|
|
|
|
7FF5A6D78000
|
unkown
|
page readonly
|
|
|
|
17F94668000
|
unkown
|
page read and write
|
|
|
|
233BC654000
|
unkown
|
page read and write
|
|
|
|
193A3653000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
193A148B000
|
unkown
|
page read and write
|
|
|
|
7FF53BF5B000
|
unkown
|
page readonly
|
|
|
|
193A3570000
|
unkown
|
page read and write
|
|
|
|
233BC14A000
|
unkown
|
page read and write
|
|
|
|
25BC2E02000
|
unkown
|
page read and write
|
|
|
|
7FF5C9D64000
|
unkown
|
page readonly
|
|
|
|
233BC171000
|
unkown
|
page read and write
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
233BC173000
|
unkown
|
page read and write
|
|
|
|
193A3571000
|
unkown
|
page read and write
|
|
|
|
D009D77000
|
unkown
|
page read and write
|
|
|
|
7FF56E9AB000
|
unkown
|
page readonly
|
|
|
|
233BC17B000
|
unkown
|
page read and write
|
|
|
|
7FF53BC1F000
|
unkown
|
page readonly
|
|
|
|
42CD17A000
|
unkown
|
page read and write
|
|
|
|
25BC2700000
|
unkown
|
page read and write
|
|
|
|
1F6A6540000
|
unkown
|
page readonly
|
|
|
|
42CD9FA000
|
unkown
|
page read and write
|
|
|
|
2139AA68000
|
unkown
|
page read and write
|
|
|
|
7FF5B7371000
|
unkown
|
page readonly
|
|
|
|
7FF5A6D3F000
|
unkown
|
page readonly
|
|
|
|
233BC130000
|
unkown
|
page read and write
|
|
|
|
17F9467F000
|
unkown
|
page read and write
|
|
|
|
193A35EB000
|
unkown
|
page read and write
|
|
|
|
233BC141000
|
unkown
|
page read and write
|
|
|
|
7FF559478000
|
unkown
|
page readonly
|
|
|
|
2139AA68000
|
unkown
|
page read and write
|
|
|
|
193A4010000
|
unkown
|
page read and write
|
|
|
|
193A149D000
|
unkown
|
page read and write
|
|
|
|
7FF5B7588000
|
unkown
|
page readonly
|
|
|
|
2B7E6E41000
|
unkown
|
page read and write
|
|
|
|
233BC1AF000
|
unkown
|
page read and write
|
|
|
|
7FF5BD008000
|
unkown
|
page readonly
|
|
|
|
233BB84E000
|
unkown
|
page read and write
|
|
|
|
7FF551355000
|
unkown
|
page readonly
|
|
|
|
233BC146000
|
unkown
|
page read and write
|
|
|
|
7FF597600000
|
unkown
|
page readonly
|
|
|
|
D3A4A7E000
|
unkown
|
page read and write
|
|
|
|
193A3574000
|
unkown
|
page read and write
|
|
|
|
7FF597B24000
|
unkown
|
page readonly
|
|
|
|
193A35EE000
|
unkown
|
page read and write
|
|
|
|
7FF597874000
|
unkown
|
page readonly
|
|
|
|
7FF56EAB5000
|
unkown
|
page readonly
|
|
|
|
1F6A5813000
|
unkown
|
page read and write
|
|
|
|
25BC24B0000
|
heap default
|
page read and write
|
|
|
|
7FF53BF9A000
|
unkown
|
page readonly
|
|
|
|
ABB3E7F000
|
unkown
|
page read and write
|
|
|
|
2139AA68000
|
unkown
|
page read and write
|
|
|
|
25BC2708000
|
unkown
|
page read and write
|
|
|
|
193A1400000
|
unkown
|
page read and write
|
|
|
|
233BB8E5000
|
unkown
|
page read and write
|
|
|
|
7FF597A3A000
|
unkown
|
page readonly
|
|
|
|
7FF56EB0E000
|
unkown
|
page readonly
|
|
|
|
233BC144000
|
unkown
|
page read and write
|
|
|
|
193A1455000
|
unkown
|
page read and write
|
|
|
|
233BC002000
|
unkown
|
page read and write
|
|
|
|
193A148D000
|
unkown
|
page read and write
|
|
|
|
233BC141000
|
unkown
|
page read and write
|
|
|
|
17F945A0000
|
unkown
|
page readonly
|
|
|
|
233BC600000
|
unkown
|
page read and write
|
|
|
|
22BC8AD0000
|
unkown
|
page readonly
|
|
|
|
193A1534000
|
unkown
|
page read and write
|
|
|
|
193A350C000
|
unkown
|
page read and write
|
|
|
|
7FF5B757F000
|
unkown
|
page readonly
|
|
There are 1190 hidden memdumps, click here to show them.