Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
document-47-2637.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1252, Author: Windows User, Last
Saved By: Windows User, Name of Creating Application: Microsoft Excel, Create Time/Date: Wed Jun 2 14:40:34 2021, Last Saved
Time/Date: Wed Jun 2 14:40:36 2021, Security: 1
|
initial sample
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-47-2637.xls.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:43
2020, mtime=Fri Jun 11 06:06:26 2021, atime=Fri Jun 11 06:06:26 2021, length=92672, window=hide
|
dropped
|
||
C:\aZ8ThU0Y\ERdZMUem\nnAzot.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\6529B5B3-6D5E-4521-86C2-74637D63C046
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\D8810000
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Fri Jun 11 06:06:25 2021, atime=Fri Jun 11 06:06:25 2021, length=8192, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\Desktop\56620000
|
Applesoft BASIC program data, first line number 16
|
modified
|
||
C:\Users\user\Desktop\99810000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 60080 bytes, 1 file
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
||
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\CabE004.tmp
|
Microsoft Cabinet archive data, 60080 bytes, 1 file
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\F6DE0000
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Temp\TarE005.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\document-47-2637.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:14
2020, mtime=Fri Jun 11 06:00:40 2021, atime=Fri Jun 11 06:00:40 2021, length=92672, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\ZH9NG0C7.txt
|
ASCII text
|
downloaded
|
||
C:\Users\user\Desktop\774F0000
|
Applesoft BASIC program data, first line number 16
|
modified
|
||
C:\Users\user\Desktop\C7DE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
There are 10 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\SysWOW64\cmd.exe
|
'C:\Windows\System32\cmd.exe' /c copy '%ProgramFiles(x86)%\Internet Explorer\ExtExport.exe' C:\aZ8ThU0Y\ERdZMUem\nnAzot.exe
|
||
C:\aZ8ThU0Y\ERdZMUem\nnAzot.exe
|
'C:\aZ8ThU0Y\ERdZMUem\nnAzot.exe' C:\aZ8ThU0Y\ERdZMUem GdPT AuMr7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
||
C:\Windows\System32\cmd.exe
|
'C:\Windows\System32\cmd.exe' /c copy '%ProgramFiles(x86)%\Internet Explorer\ExtExport.exe' C:\aZ8ThU0Y\ERdZMUem\nnAzot.exe
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://api.diagnosticssdf.office.com
|
unknown
|
||
https://login.microsoftonline.com/
|
unknown
|
||
https://shell.suite.office.com:1443
|
unknown
|
||
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
||
https://autodiscover-s.outlook.com/
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
||
https://cdn.entity.
|
unknown
|
||
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
||
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
||
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
||
https://powerlift.acompli.net
|
unknown
|
||
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
||
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
||
https://cortana.ai
|
unknown
|
||
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
||
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://entitlement.diagnosticssdf.office.com
|
unknown
|
||
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
||
https://api.aadrm.com/
|
unknown
|
||
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
||
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
||
https://api.microsoftstream.com/api/
|
unknown
|
||
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
||
https://cr.office.com
|
unknown
|
||
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
||
https://graph.ppe.windows.net
|
unknown
|
||
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
||
https://powerlift-frontdesk.acompli.net
|
unknown
|
||
https://tasks.office.com
|
unknown
|
||
https://officeci.azurewebsites.net/api/
|
unknown
|
||
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
||
https://store.office.cn/addinstemplate
|
unknown
|
||
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
||
https://globaldisco.crm.dynamics.com
|
unknown
|
||
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://store.officeppe.com/addinstemplate
|
unknown
|
||
https://dev0-api.acompli.net/autodetect
|
unknown
|
||
https://www.odwebp.svc.ms
|
unknown
|
||
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
||
https://web.microsoftstream.com/video/
|
unknown
|
||
https://graph.windows.net
|
unknown
|
||
https://dataservice.o365filtering.com/
|
unknown
|
||
https://officesetup.getmicrosoftkey.com
|
unknown
|
||
https://analysis.windows.net/powerbi/api
|
unknown
|
||
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
||
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
||
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
||
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
||
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
||
https://ncus.contentsync.
|
unknown
|
||
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
||
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
||
http://weather.service.msn.com/data.aspx
|
unknown
|
||
https://apis.live.net/v5.0/
|
unknown
|
||
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
||
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
||
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
||
https://management.azure.com
|
unknown
|
||
https://wus2.contentsync.
|
unknown
|
||
https://incidents.diagnostics.office.com
|
unknown
|
||
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
||
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
||
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
||
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
||
https://api.office.net
|
unknown
|
||
https://incidents.diagnosticssdf.office.com
|
unknown
|
||
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
||
https://entitlement.diagnostics.office.com
|
unknown
|
||
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
||
https://outlook.office.com/
|
unknown
|
||
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
||
https://templatelogging.office.com/client/log
|
unknown
|
||
https://outlook.office365.com/
|
unknown
|
||
https://webshell.suite.office.com
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
||
https://management.azure.com/
|
unknown
|
||
https://login.windows.net/common/oauth2/authorize
|
unknown
|
||
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://graph.windows.net/
|
unknown
|
||
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
||
https://devnull.onenote.com
|
unknown
|
||
https://ncus.pagecontentsync.
|
unknown
|
||
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
||
https://messaging.office.com/
|
unknown
|
||
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
||
https://augloop.office.com/v2
|
unknown
|
||
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
||
https://skyapi.live.net/Activity/
|
unknown
|
||
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
||
https://dataservice.o365filtering.com
|
unknown
|
||
https://api.cortana.ai
|
unknown
|
||
https://onedrive.live.com
|
unknown
|
||
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
||
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
||
https://directory.services.
|
unknown
|
||
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
||
https://staging.cortana.ai
|
unknown
|
||
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
There are 90 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
webhub365.com
|
198.244.146.96
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
198.244.146.96
|
webhub365.com
|
United States
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
<|2
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
=|2
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1825B
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
187D9
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18931
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
189FC
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
sk2
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
26681
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
||
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
f`8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED3E2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED6A0
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED79A
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED826
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
/i8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F47E9
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
||
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
There are 158 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
14D8E040000
|
unkown
|
page readonly
|
||
258C4420000
|
unkown
|
page readonly
|
||
14D8FCA0000
|
unkown
|
page readonly
|
||
7FF5DC4A5000
|
unkown
|
page readonly
|
||
7FF536124000
|
unkown
|
page readonly
|
||
7FF51E3A5000
|
unkown
|
page readonly
|
||
7FF5BB021000
|
unkown
|
page readonly
|
||
22FFE065000
|
unkown
|
page read and write
|
||
7FF5ECDF9000
|
unkown
|
page readonly
|
||
7FF5DBE81000
|
unkown
|
page readonly
|
||
1F1BE853000
|
unkown
|
page read and write
|
||
10B797C000
|
unkown
|
page read and write
|
||
7FF5E86F8000
|
unkown
|
page readonly
|
||
7FF5E8921000
|
unkown
|
page readonly
|
||
1F1BE800000
|
unkown
|
page read and write
|
||
16BDEA02000
|
unkown
|
page read and write
|
||
14D901EE000
|
unkown
|
page read and write
|
||
7FF572C28000
|
unkown
|
page readonly
|
||
7FF4F3FD9000
|
unkown
|
page readonly
|
||
22EF4C3C000
|
unkown
|
page read and write
|
||
7FF4F4015000
|
unkown
|
page readonly
|
||
7FF572C9C000
|
unkown
|
page readonly
|
||
250F662A000
|
unkown
|
page read and write
|
||
22EF4AF0000
|
unkown
|
page readonly
|
||
14D901FB000
|
unkown
|
page read and write
|
||
7FF53277D000
|
unkown
|
page readonly
|
||
2E0ECCC0000
|
unkown
|
page readonly
|
||
7FF5CB551000
|
unkown
|
page readonly
|
||
ABD267E000
|
unkown
|
page read and write
|
||
7FF5DC519000
|
unkown
|
page readonly
|
||
1F1BE83C000
|
unkown
|
page read and write
|
||
7FF5ED949000
|
unkown
|
page readonly
|
||
7FF5DC428000
|
unkown
|
page readonly
|
||
7FF5E8893000
|
unkown
|
page readonly
|
||
14D8E1A0000
|
unkown
|
page read and write
|
||
28EC6279000
|
unkown
|
page read and write
|
||
7FF5C3FBC000
|
unkown
|
page readonly
|
||
7FF57B65E000
|
unkown
|
page readonly
|
||
7FF5BAF22000
|
unkown
|
page readonly
|
||
3D8000
|
unkown
|
page read and write
|
||
7FF5BAFC4000
|
unkown
|
page readonly
|
||
19D62A00000
|
unkown
|
page read and write
|
||
10B72F9000
|
unkown
|
page read and write
|
||
7D92F7E000
|
unkown
|
page read and write
|
||
2985000
|
unkown
|
page readonly
|
||
7FF5CB462000
|
unkown
|
page readonly
|
||
1F1BE84F000
|
unkown
|
page read and write
|
||
7FF5C3F9D000
|
unkown
|
page readonly
|
||
7FF51E4F7000
|
unkown
|
page readonly
|
||
7FF535FD8000
|
unkown
|
page readonly
|
||
7FF5C3FB6000
|
unkown
|
page readonly
|
||
7FF4F4027000
|
unkown
|
page readonly
|
||
7FF51428A000
|
unkown
|
page readonly
|
||
269A1532000
|
unkown
|
page read and write
|
||
7FF4F3D37000
|
unkown
|
page readonly
|
||
258C4200000
|
unkown
|
page read and write
|
||
14D8E2E6000
|
unkown
|
page read and write
|
||
14D8E2FE000
|
unkown
|
page read and write
|
||
258C408D000
|
unkown
|
page read and write
|
||
7FF514462000
|
unkown
|
page readonly
|
||
10B6FAE000
|
unkown
|
page read and write
|
||
19D62A59000
|
unkown
|
page read and write
|
||
2E84CA38000
|
heap default
|
page read and write
|
||
293B000
|
unkown
|
page readonly
|
||
258BF313000
|
unkown
|
page read and write
|
||
269A0A00000
|
heap private
|
page read and write
|
||
7FF51E6E9000
|
unkown
|
page readonly
|
||
2944000
|
unkown
|
page readonly
|
||
7FF5ED8F2000
|
unkown
|
page readonly
|
||
C00000
|
unkown image
|
page readonly
|
||
14D91210000
|
unkown
|
page read and write
|
||
2E0EEB30000
|
heap private
|
page read and write
|
||
14D91110000
|
unkown
|
page read and write
|
||
7FF5361AC000
|
unkown
|
page readonly
|
||
2E0ED070000
|
heap private
|
page read and write
|
||
2E0ED075000
|
heap private
|
page read and write
|
||
7C7000
|
heap default
|
page read and write
|
||
7FF5BAE61000
|
unkown
|
page readonly
|
||
16BDE1A0000
|
heap default
|
page read and write
|
||
22FFE102000
|
unkown
|
page read and write
|
||
7FF5C3FD7000
|
unkown
|
page readonly
|
||
F20E47B000
|
unkown
|
page read and write
|
||
2BF05990000
|
unkown
|
page readonly
|
||
258BF1E0000
|
unkown
|
page readonly
|
||
7FF5CAE9A000
|
unkown
|
page readonly
|
||
7FF532811000
|
unkown
|
page readonly
|
||
7FF5CB48E000
|
unkown
|
page readonly
|
||
28EC6200000
|
unkown
|
page read and write
|
||
7FF5ECD76000
|
unkown
|
page readonly
|
||
19D62C00000
|
unkown
|
page readonly
|
||
19D63060000
|
unkown
|
page readonly
|
||
7FF5C4039000
|
unkown
|
page readonly
|
||
7FF5BAF6F000
|
unkown
|
page readonly
|
||
2BF059D0000
|
unkown
|
page read and write
|
||
258C4208000
|
unkown
|
page read and write
|
||
7FF4F4024000
|
unkown
|
page readonly
|
||
7FF532728000
|
unkown
|
page readonly
|
||
7FF5ED8FD000
|
unkown
|
page readonly
|
||
14D8E39C000
|
unkown
|
page read and write
|
||
258C3EB0000
|
unkown
|
page read and write
|
||
19D63140000
|
unkown
|
page read and write
|
||
269A0C00000
|
unkown
|
page read and write
|
||
1F1BE86D000
|
unkown
|
page read and write
|
||
1EB0C5A0000
|
unkown
|
page read and write
|
||
10B74FB000
|
unkown
|
page read and write
|
||
19D63400000
|
unkown
|
page readonly
|
||
28EC622A000
|
unkown
|
page read and write
|
||
7FF51E666000
|
unkown
|
page readonly
|
||
7FF53259F000
|
unkown
|
page readonly
|
||
22FFE100000
|
unkown
|
page read and write
|
||
1F1BF002000
|
unkown
|
page read and write
|
||
7FF5ECD35000
|
unkown
|
page readonly
|
||
22FFE118000
|
unkown
|
page read and write
|
||
22FFDF80000
|
heap default
|
page read and write
|
||
7FF5C3FA6000
|
unkown
|
page readonly
|
||
7FF532155000
|
unkown
|
page readonly
|
||
7FF4F400C000
|
unkown
|
page readonly
|
||
258C4221000
|
unkown
|
page read and write
|
||
7D92BFC000
|
unkown
|
page read and write
|
||
7FF5DC0A7000
|
unkown
|
page readonly
|
||
7FF5E88C2000
|
unkown
|
page readonly
|
||
258C42D0000
|
unkown
|
page read and write
|
||
7FF5361BC000
|
unkown
|
page readonly
|
||
A10000
|
heap private
|
page read and write
|
||
1F1BE84A000
|
unkown
|
page read and write
|
||
7FF514507000
|
unkown
|
page readonly
|
||
7FF535EF5000
|
unkown
|
page readonly
|
||
28EC6308000
|
unkown
|
page read and write
|
||
7FF51448A000
|
unkown
|
page readonly
|
||
2BF06400000
|
unkown
|
page read and write
|
||
7FF5ED997000
|
unkown
|
page readonly
|
||
7FF51E62F000
|
unkown
|
page readonly
|
||
7FF5ED877000
|
unkown
|
page readonly
|
||
7FF5C3F30000
|
unkown
|
page readonly
|
||
7FF5143DC000
|
unkown
|
page readonly
|
||
7FF5DC2CC000
|
unkown
|
page readonly
|
||
7FF51E59A000
|
unkown
|
page readonly
|
||
292D000
|
unkown
|
page readonly
|
||
ABD227B000
|
unkown
|
page read and write
|
||
7FF5DC126000
|
unkown
|
page readonly
|
||
14D90412000
|
unkown
|
page read and write
|
||
7FF53274E000
|
unkown
|
page readonly
|
||
2A00000
|
unkown
|
page readonly
|
||
2960000
|
unkown
|
page readonly
|
||
7FF5C3F89000
|
unkown
|
page readonly
|
||
7FF4F3D3E000
|
unkown
|
page readonly
|
||
14D8E296000
|
unkown
|
page read and write
|
||
7FF5DC1E0000
|
unkown
|
page readonly
|
||
7FF5E893C000
|
unkown
|
page readonly
|
||
7FF514070000
|
unkown
|
page readonly
|
||
7FF5DC49C000
|
unkown
|
page readonly
|
||
1EB0ABB0000
|
unkown
|
page readonly
|
||
7FF5DC38C000
|
unkown
|
page readonly
|
||
16BDE1B0000
|
unkown
|
page readonly
|
||
7FF5CB427000
|
unkown
|
page readonly
|
||
258C42E0000
|
unkown
|
page read and write
|
||
258C4033000
|
unkown
|
page read and write
|
||
2E0ECD20000
|
unkown
|
page readonly
|
||
10B7279000
|
unkown
|
page read and write
|
||
14D90200000
|
unkown
|
page read and write
|
||
7FF5CB559000
|
unkown
|
page readonly
|
||
CF186FB000
|
unkown
|
page read and write
|
||
7CE7CFA000
|
unkown
|
page read and write
|
||
22FFE02A000
|
unkown
|
page read and write
|
||
FBE887D000
|
unkown
|
page read and write
|
||
28EC6298000
|
unkown
|
page read and write
|
||
DEDEDFE000
|
unkown
|
page read and write
|
||
2E0ECC80000
|
unkown
|
page read and write
|
||
16BDE300000
|
unkown
|
page read and write
|
||
2BF05970000
|
heap default
|
page read and write
|
||
7FF572C22000
|
unkown
|
page readonly
|
||
7FF5E88C8000
|
unkown
|
page readonly
|
||
7FF51E5F6000
|
unkown
|
page readonly
|
||
258C4290000
|
unkown
|
page read and write
|
||
258BE9A0000
|
unkown
|
page read and write
|
||
258BEA72000
|
unkown
|
page read and write
|
||
1EB0AA90000
|
unkown
|
page readonly
|
||
7FF5C3B75000
|
unkown
|
page readonly
|
||
1F1BE780000
|
heap default
|
page read and write
|
||
7FF5E8871000
|
unkown
|
page readonly
|
||
CF187F7000
|
unkown
|
page read and write
|
||
258C4224000
|
unkown
|
page read and write
|
||
14D8E160000
|
unkown
|
page readonly
|
||
7FF572C3A000
|
unkown
|
page readonly
|
||
7FF51E625000
|
unkown
|
page readonly
|
||
7FF5CB4C1000
|
unkown
|
page readonly
|
||
269A0C41000
|
unkown
|
page read and write
|
||
DEDEBFC000
|
unkown
|
page read and write
|
||
7FF5BAE18000
|
unkown
|
page readonly
|
||
2BF06202000
|
unkown
|
page read and write
|
||
7FF53280E000
|
unkown
|
page readonly
|
||
7FF572D19000
|
unkown
|
page readonly
|
||
47D000
|
unkown
|
page read and write
|
||
250F6646000
|
unkown
|
page read and write
|
||
14D90159000
|
unkown
|
page read and write
|
||
19D63130000
|
unkown
|
page readonly
|
||
250F64E0000
|
heap default
|
page read and write
|
||
7FF51433A000
|
unkown
|
page readonly
|
||
7FF4F39CE000
|
unkown
|
page readonly
|
||
45FB375000
|
unkown
|
page read and write
|
||
2A08000
|
unkown
|
page readonly
|
||
19D62A66000
|
unkown
|
page read and write
|
||
258C4360000
|
unkown
|
page readonly
|
||
7FF5E8680000
|
unkown
|
page readonly
|
||
258C4066000
|
unkown
|
page read and write
|
||
600000
|
unkown
|
page readonly
|
||
269A0D02000
|
unkown
|
page read and write
|
||
7FF5ED990000
|
unkown
|
page readonly
|
||
29E0000
|
unkown
|
page readonly
|
||
258BF318000
|
unkown
|
page read and write
|
||
2BF05C00000
|
unkown
|
page readonly
|
||
7FF5DC496000
|
unkown
|
page readonly
|
||
7FF536231000
|
unkown
|
page readonly
|
||
C0B000
|
unkown image
|
page readonly
|
||
7FF5DC0E8000
|
unkown
|
page readonly
|
||
7FF57B669000
|
unkown
|
page readonly
|
||
7FF5BAFC7000
|
unkown
|
page readonly
|
||
7FF5DC19C000
|
unkown
|
page readonly
|
||
D1D727E000
|
unkown
|
page read and write
|
||
7FF5C3F7F000
|
unkown
|
page readonly
|
||
ABD2179000
|
unkown
|
page read and write
|
||
D6B9C7E000
|
unkown
|
page read and write
|
||
22FFE08B000
|
unkown
|
page read and write
|
||
7FF4F3E0F000
|
unkown
|
page readonly
|
||
7FF51E5BC000
|
unkown
|
page readonly
|
||
7FF572C5F000
|
unkown
|
page readonly
|
||
7FF532786000
|
unkown
|
page readonly
|
||
7FF57B661000
|
unkown
|
page readonly
|
||
7CE847F000
|
unkown
|
page read and write
|
||
14D90432000
|
unkown
|
page read and write
|
||
7FF5144DC000
|
unkown
|
page readonly
|
||
7FF5BAB20000
|
unkown
|
page readonly
|
||
258C3E70000
|
unkown
|
page readonly
|
||
22FFE660000
|
unkown
|
page readonly
|
||
7FF5E88FF000
|
unkown
|
page readonly
|
||
7FF57B2EC000
|
unkown
|
page readonly
|
||
1F1BE7A0000
|
unkown
|
page readonly
|
||
2BF059D0000
|
unkown
|
page read and write
|
||
F750DFF000
|
unkown
|
page read and write
|
||
2BF05980000
|
unkown
|
page readonly
|
||
2E84C9F5000
|
heap private
|
page read and write
|
||
F75137E000
|
unkown
|
page read and write
|
||
7FF5C3D67000
|
unkown
|
page readonly
|
||
7FF5ED86C000
|
unkown
|
page readonly
|
||
7FF5C3EE7000
|
unkown
|
page readonly
|
||
1F1BE900000
|
unkown
|
page read and write
|
||
F20E27F000
|
unkown
|
page read and write
|
||
258C4320000
|
unkown
|
page read and write
|
||
7FF5144AF000
|
unkown
|
page readonly
|
||
7FF572B51000
|
unkown
|
page readonly
|
||
7FF572D19000
|
unkown
|
page readonly
|
||
7D9307C000
|
unkown
|
page read and write
|
||
250F6667000
|
unkown
|
page read and write
|
||
7FF5CB4F4000
|
unkown
|
page readonly
|
||
22EF4AE0000
|
heap default
|
page read and write
|
||
45FB27E000
|
unkown
|
page read and write
|
||
7FF57B5D1000
|
unkown
|
page readonly
|
||
269A0C13000
|
unkown
|
page read and write
|
||
7FF57B5F5000
|
unkown
|
page readonly
|
||
7FF5DC23B000
|
unkown
|
page readonly
|
||
7FF4F4081000
|
unkown
|
page readonly
|
||
7FF5ED994000
|
unkown
|
page readonly
|
||
7FF5CB450000
|
unkown
|
page readonly
|
||
7FF5C3EF1000
|
unkown
|
page readonly
|
||
7FF5E892C000
|
unkown
|
page readonly
|
||
258BEA13000
|
unkown
|
page read and write
|
||
258C3FC0000
|
unkown
|
page read and write
|
||
250F667E000
|
unkown
|
page read and write
|
||
2BF059D0000
|
unkown
|
page read and write
|
||
7FF5E86DB000
|
unkown
|
page readonly
|
||
269A0A70000
|
unkown
|
page readonly
|
||
1F1BE813000
|
unkown
|
page read and write
|
||
FEA887B000
|
unkown
|
page read and write
|
||
16BDE400000
|
unkown
|
page readonly
|
||
7FF5E88DA000
|
unkown
|
page readonly
|
||
2BF05A2A000
|
unkown
|
page read and write
|
||
45FB77F000
|
unkown
|
page read and write
|
||
7FF5C3E0A000
|
unkown
|
page readonly
|
||
7FF5E886A000
|
unkown
|
page readonly
|
||
7FF4F3FAA000
|
unkown
|
page readonly
|
||
7FF53275F000
|
unkown
|
page readonly
|
||
22FFE049000
|
unkown
|
page read and write
|
||
7FF4F3F15000
|
unkown
|
page readonly
|
||
7D924CB000
|
unkown
|
page read and write
|
||
FBE84CC000
|
unkown
|
page read and write
|
||
7FF535C15000
|
unkown
|
page readonly
|
||
7FF572D0E000
|
unkown
|
page readonly
|
||
14D90230000
|
unkown
|
page read and write
|
||
16BDE24A000
|
unkown
|
page read and write
|
||
7FF5DC1D5000
|
unkown
|
page readonly
|
||
7FF572C96000
|
unkown
|
page readonly
|
||
7FF5ED75E000
|
unkown
|
page readonly
|
||
7FF5ED8CA000
|
unkown
|
page readonly
|
||
2E0ED080000
|
unkown
|
page readonly
|
||
7CE7E7F000
|
unkown
|
page read and write
|
||
7FF5E89B9000
|
unkown
|
page readonly
|
||
7FF51E347000
|
unkown
|
page readonly
|
||
7FF5ED807000
|
unkown
|
page readonly
|
||
250F666D000
|
unkown
|
page read and write
|
||
7FF5E8825000
|
unkown
|
page readonly
|
||
14D90220000
|
unkown
|
page read and write
|
||
7FF5BAD4A000
|
unkown
|
page readonly
|
||
FEA89FF000
|
unkown
|
page read and write
|
||
FEA8A7E000
|
unkown
|
page read and write
|
||
258BF1D0000
|
unkown
|
page readonly
|
||
7FF5DC47D000
|
unkown
|
page readonly
|
||
14D8E1C0000
|
heap private
|
page read and write
|
||
7FF532819000
|
unkown
|
page readonly
|
||
7FF5C402E000
|
unkown
|
page readonly
|
||
14D90210000
|
unkown
|
page read and write
|
||
2BF05A02000
|
unkown
|
page read and write
|
||
7FF5E88A8000
|
unkown
|
page readonly
|
||
7FF5142EF000
|
unkown
|
page readonly
|
||
7FF5327A5000
|
unkown
|
page readonly
|
||
7FF5ED92E000
|
unkown
|
page readonly
|
||
7D92E7D000
|
unkown
|
page read and write
|
||
7FF5DC2D1000
|
unkown
|
page readonly
|
||
7FF5144B9000
|
unkown
|
page readonly
|
||
2E0ECCD0000
|
unkown
|
page readonly
|
||
22EF4C13000
|
unkown
|
page read and write
|
||
7D92B7F000
|
unkown
|
page read and write
|
||
14D90682000
|
unkown
|
page read and write
|
||
1F1BE720000
|
heap private
|
page read and write
|
||
14D8E030000
|
heap default
|
page read and write
|
||
22FFE002000
|
unkown
|
page read and write
|
||
7FF5DC12F000
|
unkown
|
page readonly
|
||
7FF5DC410000
|
unkown
|
page readonly
|
||
7FF5DC2E9000
|
unkown
|
page readonly
|
||
7FF536148000
|
unkown
|
page readonly
|
||
7FF5327B7000
|
unkown
|
page readonly
|
||
7FF572ADE000
|
unkown
|
page readonly
|
||
258BF900000
|
unkown
|
page read and write
|
||
16BDE1C0000
|
unkown
|
page readonly
|
||
7FF51455E000
|
unkown
|
page readonly
|
||
D6B9D7D000
|
unkown
|
page read and write
|
||
7FF5ED5CF000
|
unkown
|
page readonly
|
||
ABD189B000
|
unkown
|
page read and write
|
||
7FF5E84C3000
|
unkown
|
page readonly
|
||
1F1BE913000
|
unkown
|
page read and write
|
||
D1D70FE000
|
unkown
|
page read and write
|
||
D1D767F000
|
unkown
|
page read and write
|
||
258BEA58000
|
unkown
|
page read and write
|
||
7FF5BAF79000
|
unkown
|
page readonly
|
||
7FF536239000
|
unkown
|
page readonly
|
||
7FF5ED8DC000
|
unkown
|
page readonly
|
||
258BE980000
|
unkown
|
page readonly
|
||
DEDE77E000
|
unkown
|
page read and write
|
||
19D629F0000
|
unkown
|
page readonly
|
||
269A0CC6000
|
unkown
|
page read and write
|
||
66E000
|
unkown
|
page read and write
|
||
7FF5BB029000
|
unkown
|
page readonly
|
||
14D90180000
|
unkown
|
page read and write
|
||
7FF536239000
|
unkown
|
page readonly
|
||
7FF51E64D000
|
unkown
|
page readonly
|
||
19D62A13000
|
unkown
|
page read and write
|
||
2938000
|
unkown
|
page readonly
|
||
22FFFB30000
|
unkown
|
page read and write
|
||
258BEA90000
|
unkown
|
page read and write
|
||
14D8E313000
|
unkown
|
page read and write
|
||
22FFE013000
|
unkown
|
page read and write
|
||
7FF4F4089000
|
unkown
|
page readonly
|
||
7FF5DC2D8000
|
unkown
|
page readonly
|
||
258BE970000
|
unkown
|
page readonly
|
||
258C4000000
|
unkown
|
page read and write
|
||
7FF5ED902000
|
unkown
|
page readonly
|
||
7FF572A9F000
|
unkown
|
page readonly
|
||
7FF4F407E000
|
unkown
|
page readonly
|
||
14D90582000
|
unkown
|
page read and write
|
||
7FF51E353000
|
unkown
|
page readonly
|
||
7FF4F3D45000
|
unkown
|
page readonly
|
||
7FF572957000
|
unkown
|
page readonly
|
||
ABD25FE000
|
unkown
|
page read and write
|
||
1F1BE84B000
|
unkown
|
page read and write
|
||
7FF572810000
|
unkown
|
page readonly
|
||
ABD1F7A000
|
unkown
|
page read and write
|
||
258C42C4000
|
unkown
|
page write copy
|
||
2E0ECD3B000
|
heap default
|
page read and write
|
||
258C3FD0000
|
unkown
|
page read and write
|
||
7FF57280A000
|
unkown
|
page readonly
|
||
19D62A3F000
|
unkown
|
page read and write
|
||
FEA88FE000
|
unkown
|
page read and write
|
||
7FF5ED5E1000
|
unkown
|
page readonly
|
||
1EB0AC3F000
|
unkown
|
page read and write
|
||
6EE000
|
unkown
|
page read and write
|
||
7FF4F3F80000
|
unkown
|
page readonly
|
||
7FF5DC486000
|
unkown
|
page readonly
|
||
7FF4F3FF6000
|
unkown
|
page readonly
|
||
269A0D13000
|
unkown
|
page read and write
|
||
250F6647000
|
unkown
|
page read and write
|
||
7FF535F00000
|
unkown
|
page readonly
|
||
2E84CA3E000
|
heap default
|
page read and write
|
||
F750F7E000
|
unkown
|
page read and write
|
||
7FF5DBD55000
|
unkown
|
page readonly
|
||
14D90542000
|
unkown
|
page read and write
|
||
7FF5BAF36000
|
unkown
|
page readonly
|
||
7FF5DC055000
|
unkown
|
page readonly
|
||
258C40B7000
|
unkown
|
page read and write
|
||
7FF5BAF20000
|
unkown
|
page readonly
|
||
F75107D000
|
unkown
|
page read and write
|
||
7FF4F3C58000
|
unkown
|
page readonly
|
||
7FF57B560000
|
unkown
|
page readonly
|
||
10B77FD000
|
unkown
|
page read and write
|
||
22FFE059000
|
unkown
|
page read and write
|
||
10B6F2E000
|
unkown
|
page read and write
|
||
22EF4E00000
|
unkown
|
page readonly
|
||
258BE990000
|
unkown
|
page read and write
|
||
7FF5E88EE000
|
unkown
|
page readonly
|
||
22EF4D00000
|
unkown
|
page read and write
|
||
7FF5CB2DF000
|
unkown
|
page readonly
|
||
7FF57B5A5000
|
unkown
|
page readonly
|
||
7FF572C8C000
|
unkown
|
page readonly
|
||
7FF5ED810000
|
unkown
|
page readonly
|
||
250F6626000
|
unkown
|
page read and write
|
||
7FF5BAFA6000
|
unkown
|
page readonly
|
||
7FF572B2D000
|
unkown
|
page readonly
|
||
258C4204000
|
unkown
|
page read and write
|
||
FBE897E000
|
unkown
|
page read and write
|
||
7FF5ED55E000
|
unkown
|
page readonly
|
||
258BF1F0000
|
unkown
|
page read and write
|
||
1F1BEAD0000
|
unkown
|
page readonly
|
||
7FF5DC090000
|
unkown
|
page readonly
|
||
258C4320000
|
unkown
|
page readonly
|
||
3DC000
|
unkown
|
page read and write
|
||
7FF5BAF9C000
|
unkown
|
page readonly
|
||
7FF5DC45F000
|
unkown
|
page readonly
|
||
258BECD0000
|
unkown
|
page readonly
|
||
7FF5ECD0A000
|
unkown
|
page readonly
|
||
CF1847E000
|
unkown
|
page read and write
|
||
258BEC00000
|
unkown
|
page readonly
|
||
250F6684000
|
unkown
|
page read and write
|
||
2980000
|
unkown
|
page readonly
|
||
7FF5ED77F000
|
unkown
|
page readonly
|
||
10B7AFF000
|
unkown
|
page read and write
|
||
250F6631000
|
unkown
|
page read and write
|
||
19D62A2A000
|
unkown
|
page read and write
|
||
F7511FD000
|
unkown
|
page read and write
|
||
258BEA2A000
|
unkown
|
page read and write
|
||
7FF532726000
|
unkown
|
page readonly
|
||
7FF5DC481000
|
unkown
|
page readonly
|
||
7FF532819000
|
unkown
|
page readonly
|
||
7FF5DC44E000
|
unkown
|
page readonly
|
||
7FF4F3E59000
|
unkown
|
page readonly
|
||
250F6665000
|
unkown
|
page read and write
|
||
E896BDB000
|
unkown
|
page read and write
|
||
14D91000000
|
unkown
|
page read and write
|
||
28EC624A000
|
unkown
|
page read and write
|
||
7FF5C3B71000
|
unkown
|
page readonly
|
||
7FF572D11000
|
unkown
|
page readonly
|
||
22EF4C02000
|
unkown
|
page read and write
|
||
7FF5E84ED000
|
unkown
|
page readonly
|
||
7FF53619D000
|
unkown
|
page readonly
|
||
7FF536047000
|
unkown
|
page readonly
|
||
7FF51405A000
|
unkown
|
page readonly
|
||
7FF5ED906000
|
unkown
|
page readonly
|
||
2E84C9B0000
|
unkown
|
page read and write
|
||
14D91310000
|
unkown
|
page read and write
|
||
16BDE202000
|
unkown
|
page read and write
|
||
14D90100000
|
unkown
|
page read and write
|
||
28EC6A00000
|
unkown
|
page readonly
|
||
2BF05A5C000
|
unkown
|
page read and write
|
||
7FF536130000
|
unkown
|
page readonly
|
||
14D8E2B2000
|
unkown
|
page read and write
|
||
258BE960000
|
heap default
|
page read and write
|
||
16BDE140000
|
heap private
|
page read and write
|
||
1F1BEA00000
|
unkown
|
page readonly
|
||
7FF51E5FA000
|
unkown
|
page readonly
|
||
7FF5E8926000
|
unkown
|
page readonly
|
||
250F6677000
|
unkown
|
page read and write
|
||
7FF5141BD000
|
unkown
|
page readonly
|
||
7FF5DC051000
|
unkown
|
page readonly
|
||
7FF5ED562000
|
unkown
|
page readonly
|
||
7FF5C4039000
|
unkown
|
page readonly
|
||
14D90200000
|
unkown
|
page read and write
|
||
250F663D000
|
unkown
|
page read and write
|
||
14D8E2CA000
|
unkown
|
page read and write
|
||
7FF51E339000
|
unkown
|
page readonly
|
||
16BDE313000
|
unkown
|
page read and write
|
||
2BF05A13000
|
unkown
|
page read and write
|
||
7FF5CB452000
|
unkown
|
page readonly
|
||
250F6800000
|
unkown
|
page readonly
|
||
7FF536175000
|
unkown
|
page readonly
|
||
7FF57B669000
|
unkown
|
page readonly
|
||
269A1600000
|
unkown
|
page readonly
|
||
258C42C7000
|
unkown
|
page write copy
|
||
19D62A6C000
|
unkown
|
page read and write
|
||
1EB0AC13000
|
unkown
|
page read and write
|
||
1F1BE887000
|
unkown
|
page read and write
|
||
2C10000
|
unkown
|
page readonly
|
||
258C42B7000
|
unkown
|
page readonly
|
||
C01000
|
unkown image
|
page execute read
|
||
7FF53279C000
|
unkown
|
page readonly
|
||
7FF536009000
|
unkown
|
page readonly
|
||
7FF5ED96C000
|
unkown
|
page readonly
|
||
F7510FF000
|
unkown
|
page read and write
|
||
7FF57B607000
|
unkown
|
page readonly
|
||
258C4320000
|
unkown
|
page read and write
|
||
7FF51E687000
|
unkown
|
page readonly
|
||
7FF5ED798000
|
unkown
|
page readonly
|
||
7FF572C86000
|
unkown
|
page readonly
|
||
14D8E271000
|
unkown
|
page read and write
|
||
FEA897E000
|
unkown
|
page read and write
|
||
7FF514358000
|
unkown
|
page readonly
|
||
7FF536128000
|
unkown
|
page readonly
|
||
7FF514500000
|
unkown
|
page readonly
|
||
22FFFB40000
|
unkown
|
page readonly
|
||
ABD237E000
|
unkown
|
page read and write
|
||
22EF4BD0000
|
unkown
|
page readonly
|
||
28EC6802000
|
unkown
|
page read and write
|
||
1F1BE84E000
|
unkown
|
page read and write
|
||
7FF57B57A000
|
unkown
|
page readonly
|
||
10B787B000
|
unkown
|
page read and write
|
||
7FF5DC1C7000
|
unkown
|
page readonly
|
||
14D8E282000
|
unkown
|
page read and write
|
||
7FF5BAFAC000
|
unkown
|
page readonly
|
||
7FF57B5D6000
|
unkown
|
page readonly
|
||
269A0C2A000
|
unkown
|
page read and write
|
||
1F1BE802000
|
unkown
|
page read and write
|
||
1F1BF200000
|
unkown
|
page readonly
|
||
250F665F000
|
unkown
|
page read and write
|
||
7FF5C3DA0000
|
unkown
|
page readonly
|
||
14D8E33B000
|
unkown
|
page read and write
|
||
7FF5E866E000
|
unkown
|
page readonly
|
||
7FF53617F000
|
unkown
|
page readonly
|
||
7FF5E8947000
|
unkown
|
page readonly
|
||
7FF5E8361000
|
unkown
|
page readonly
|
||
7FF57296D000
|
unkown
|
page readonly
|
||
258C4300000
|
unkown
|
page read and write
|
||
7FF51E450000
|
unkown
|
page readonly
|
||
D6B9A7E000
|
unkown
|
page read and write
|
||
14D8E1B0000
|
unkown
|
page readonly
|
||
258C3FD0000
|
unkown
|
page read and write
|
||
250F666A000
|
unkown
|
page read and write
|
||
258BF359000
|
unkown
|
page read and write
|
||
7FF5144A5000
|
unkown
|
page readonly
|
||
7FF5ECDF1000
|
unkown
|
page readonly
|
||
7FF51432E000
|
unkown
|
page readonly
|
||
7FF51E5BA000
|
unkown
|
page readonly
|
||
7FF535B86000
|
unkown
|
page readonly
|
||
7FF572C10000
|
unkown
|
page readonly
|
||
258C3EC0000
|
unkown
|
page read and write
|
||
7FF5ED97C000
|
unkown
|
page readonly
|
||
7CE817D000
|
unkown
|
page read and write
|
||
7FF5CB4CC000
|
unkown
|
page readonly
|
||
258C4440000
|
unkown
|
page readonly
|
||
7FF53622E000
|
unkown
|
page readonly
|
||
7FF5ED985000
|
unkown
|
page readonly
|
||
7FF5144EC000
|
unkown
|
page readonly
|
||
7FF57B562000
|
unkown
|
page readonly
|
||
2BF059A0000
|
unkown
|
page read and write
|
||
7FF535A75000
|
unkown
|
page readonly
|
||
7FF5CB54E000
|
unkown
|
page readonly
|
||
2E0ED410000
|
unkown
|
page readonly
|
||
7FF5C3FC5000
|
unkown
|
page readonly
|
||
1F1BE908000
|
unkown
|
page read and write
|
||
2E0ECD6C000
|
heap default
|
page read and write
|
||
28EC6300000
|
unkown
|
page read and write
|
||
7FF5DC24C000
|
unkown
|
page readonly
|
||
7FF514478000
|
unkown
|
page readonly
|
||
7FF5DC397000
|
unkown
|
page readonly
|
||
7FF5CB495000
|
unkown
|
page readonly
|
||
F20DBAB000
|
unkown
|
page read and write
|
||
7FF5ED935000
|
unkown
|
page readonly
|
||
E89737E000
|
unkown
|
page read and write
|
||
7FF572C4E000
|
unkown
|
page readonly
|
||
22FFFB50000
|
unkown
|
page readonly
|
||
CF185F5000
|
unkown
|
page read and write
|
||
2946000
|
unkown
|
page readonly
|
||
7FF5ECD85000
|
unkown
|
page readonly
|
||
7FF5DC12C000
|
unkown
|
page readonly
|
||
16BDE213000
|
unkown
|
page read and write
|
||
2E0ECE30000
|
unkown
|
page readonly
|
||
CF184FE000
|
unkown
|
page read and write
|
||
7FF5CB110000
|
unkown
|
page readonly
|
||
258C42F0000
|
unkown
|
page read and write
|
||
7FF514460000
|
unkown
|
page readonly
|
||
7FF5E86EC000
|
unkown
|
page readonly
|
||
7FF5361D2000
|
unkown
|
page readonly
|
||
14D90002000
|
unkown
|
page read and write
|
||
7FF5DC50E000
|
unkown
|
page readonly
|
||
7FF535FFA000
|
unkown
|
page readonly
|
||
7FF57B5CD000
|
unkown
|
page readonly
|
||
28EC623C000
|
unkown
|
page read and write
|
||
258BEA7A000
|
unkown
|
page read and write
|
||
7FF5CB468000
|
unkown
|
page readonly
|
||
7FF572967000
|
unkown
|
page readonly
|
||
7FF5DC412000
|
unkown
|
page readonly
|
||
7FF5E835D000
|
unkown
|
page readonly
|
||
7FF5E8945000
|
unkown
|
page readonly
|
||
22FFFA70000
|
unkown
|
page read and write
|
||
7FF572C12000
|
unkown
|
page readonly
|
||
C01000
|
unkown image
|
page execute read
|
||
258BF060000
|
unkown
|
page readonly
|
||
7FF5DC43A000
|
unkown
|
page readonly
|
||
7FF535B84000
|
unkown
|
page readonly
|
||
2808000
|
unkown
|
page readonly
|
||
14D90582000
|
unkown
|
page read and write
|
||
7FF5361B6000
|
unkown
|
page readonly
|
||
16BDE1D0000
|
unkown
|
page read and write
|
||
7FF4F3DEE000
|
unkown
|
page readonly
|
||
7FF5ED7BB000
|
unkown
|
page readonly
|
||
7D928FB000
|
unkown
|
page read and write
|
||
7FF5CB124000
|
unkown
|
page readonly
|
||
22EF4C68000
|
unkown
|
page read and write
|
||
7FF5ED976000
|
unkown
|
page readonly
|
||
FBE89FC000
|
unkown
|
page read and write
|
||
7FF57B58A000
|
unkown
|
page readonly
|
||
7FF5E89AE000
|
unkown
|
page readonly
|
||
14D90642000
|
unkown
|
page read and write
|
||
7FF5ED9F9000
|
unkown
|
page readonly
|
||
7FF5ED966000
|
unkown
|
page readonly
|
||
7FF57B5EC000
|
unkown
|
page readonly
|
||
22FFDFD0000
|
unkown
|
page read and write
|
||
1EB0AA20000
|
heap private
|
page read and write
|
||
7FF5143A1000
|
unkown
|
page readonly
|
||
7FF572C7D000
|
unkown
|
page readonly
|
||
6AF000
|
unkown
|
page read and write
|
||
7FF4F3FFC000
|
unkown
|
page readonly
|
||
E896EFE000
|
unkown
|
page read and write
|
||
250F6644000
|
unkown
|
page read and write
|
||
7FF572B8C000
|
unkown
|
page readonly
|
||
14D91210000
|
unkown
|
page read and write
|
||
7FF51E677000
|
unkown
|
page readonly
|
||
7FF4F4089000
|
unkown
|
page readonly
|
||
7FF514504000
|
unkown
|
page readonly
|
||
16BDE27E000
|
unkown
|
page read and write
|
||
7FF535E9D000
|
unkown
|
page readonly
|
||
7FF5E873F000
|
unkown
|
page readonly
|
||
1F1BE857000
|
unkown
|
page read and write
|
||
7CE7F7C000
|
unkown
|
page read and write
|
||
16BDEC00000
|
unkown
|
page readonly
|
||
14D8E35B000
|
unkown
|
page read and write
|
||
7FF4F3BC3000
|
unkown
|
page readonly
|
||
F75090B000
|
unkown
|
page read and write
|
||
28EC6302000
|
unkown
|
page read and write
|
||
45FAF2B000
|
unkown
|
page read and write
|
||
7FF51E5F8000
|
unkown
|
page readonly
|
||
7FF5BAFC0000
|
unkown
|
page readonly
|
||
250F6702000
|
unkown
|
page read and write
|
||
7FF5C3F1C000
|
unkown
|
page readonly
|
||
7FF5E8720000
|
unkown
|
page readonly
|
||
DEDE33C000
|
unkown
|
page read and write
|
||
7FF5327B4000
|
unkown
|
page readonly
|
||
16BDEF40000
|
unkown
|
page readonly
|
||
7FF5E88C6000
|
unkown
|
page readonly
|
||
D1D6DEC000
|
unkown
|
page read and write
|
||
258BF1C0000
|
unkown
|
page readonly
|
||
14D8E2AC000
|
unkown
|
page read and write
|
||
7CE78FB000
|
unkown
|
page read and write
|
||
7FF5DC27E000
|
unkown
|
page readonly
|
||
22FFE2D0000
|
unkown
|
page readonly
|
||
7FF51437D000
|
unkown
|
page readonly
|
||
1EB0C6A0000
|
unkown
|
page readonly
|
||
7FF4F3D50000
|
unkown
|
page readonly
|
||
7FF5C3F6E000
|
unkown
|
page readonly
|
||
7FF5ED8F0000
|
unkown
|
page readonly
|
||
7FF5E8867000
|
unkown
|
page readonly
|
||
7FF535DB6000
|
unkown
|
page readonly
|
||
28EC624D000
|
unkown
|
page read and write
|
||
7FF5BAE3D000
|
unkown
|
page readonly
|
||
269A0B90000
|
unkown
|
page readonly
|
||
7FF5CB41B000
|
unkown
|
page readonly
|
||
19D62A02000
|
unkown
|
page read and write
|
||
ABD23FF000
|
unkown
|
page read and write
|
||
DEDE8FF000
|
unkown
|
page read and write
|
||
7FF572CA5000
|
unkown
|
page readonly
|
||
2BF05910000
|
heap private
|
page read and write
|
||
7FF51E66C000
|
unkown
|
page readonly
|
||
D1D757E000
|
unkown
|
page read and write
|
||
14D8DFD0000
|
heap private
|
page read and write
|
||
7FF5E885A000
|
unkown
|
page readonly
|
||
7FF51E5F2000
|
unkown
|
page readonly
|
||
7FF535FBF000
|
unkown
|
page readonly
|
||
7FF5E889C000
|
unkown
|
page readonly
|
||
7FF5DC422000
|
unkown
|
page readonly
|
||
1EB0AC56000
|
unkown
|
page read and write
|
||
269A0C24000
|
unkown
|
page read and write
|
||
258C420E000
|
unkown
|
page read and write
|
||
7FF53616E000
|
unkown
|
page readonly
|
||
7FF5BAE67000
|
unkown
|
page readonly
|
||
269A0CCD000
|
unkown
|
page read and write
|
||
7FF57B5DC000
|
unkown
|
page readonly
|
||
7FF4F3F78000
|
unkown
|
page readonly
|
||
16BDE229000
|
unkown
|
page read and write
|
||
250F665E000
|
unkown
|
page read and write
|
||
22FFFC02000
|
unkown
|
page read and write
|
||
7FF5CB117000
|
unkown
|
page readonly
|
||
22EF4C59000
|
unkown
|
page read and write
|
||
7FF5BAF38000
|
unkown
|
page readonly
|
||
2E0ECC20000
|
unkown
|
page readonly
|
||
2E0ECFD0000
|
unkown
|
page readonly
|
||
ABD247F000
|
unkown
|
page read and write
|
||
7FF5BAF65000
|
unkown
|
page readonly
|
||
7FF5DC3F3000
|
unkown
|
page readonly
|
||
2BF05A40000
|
unkown
|
page read and write
|
||
258C4025000
|
unkown
|
page read and write
|
||
250F6E02000
|
unkown
|
page read and write
|
||
22FFE000000
|
unkown
|
page read and write
|
||
28EC6313000
|
unkown
|
page read and write
|
||
2E84C9F0000
|
heap private
|
page read and write
|
||
7FF5C3F75000
|
unkown
|
page readonly
|
||
14D90260000
|
unkown
|
page readonly
|
||
22EF5402000
|
unkown
|
page read and write
|
||
7FF51E43A000
|
unkown
|
page readonly
|
||
19D62A5B000
|
unkown
|
page read and write
|
||
7CE837F000
|
unkown
|
page read and write
|
||
7CE807E000
|
unkown
|
page read and write
|
||
7FF4F3FBE000
|
unkown
|
page readonly
|
||
45FB47B000
|
unkown
|
page read and write
|
||
258BF1B0000
|
unkown
|
page readonly
|
||
7FF5E8954000
|
unkown
|
page readonly
|
||
7FF51E684000
|
unkown
|
page readonly
|
||
29E6000
|
unkown
|
page readonly
|
||
CF189FC000
|
unkown
|
page read and write
|
||
2E84C8C0000
|
unkown
|
page readonly
|
||
D1D71F5000
|
unkown
|
page read and write
|
||
7FF4F3FCF000
|
unkown
|
page readonly
|
||
7FF57B59E000
|
unkown
|
page readonly
|
||
7FF57B514000
|
unkown
|
page readonly
|
||
7FF5DC3D1000
|
unkown
|
page readonly
|
||
14D8E26F000
|
unkown
|
page read and write
|
||
7FF4F3F96000
|
unkown
|
page readonly
|
||
2E84C990000
|
unkown
|
page read and write
|
||
16BDE28A000
|
unkown
|
page read and write
|
||
2BF06060000
|
unkown
|
page readonly
|
||
7FF5143A7000
|
unkown
|
page readonly
|
||
1EB0AD02000
|
unkown
|
page read and write
|
||
F20E37F000
|
unkown
|
page read and write
|
||
7FF5E87C3000
|
unkown
|
page readonly
|
||
7FF51449E000
|
unkown
|
page readonly
|
||
1F1BE829000
|
unkown
|
page read and write
|
||
16BDE26E000
|
unkown
|
page read and write
|
||
269A0B40000
|
unkown
|
page readonly
|
||
22FFE04A000
|
unkown
|
page read and write
|
||
14D91310000
|
unkown
|
page read and write
|
||
2BF05B02000
|
unkown
|
page read and write
|
||
10B777B000
|
unkown
|
page read and write
|
||
7FF5E891D000
|
unkown
|
page readonly
|
||
7FF57B578000
|
unkown
|
page readonly
|
||
7FF5CB559000
|
unkown
|
page readonly
|
||
7FF51E597000
|
unkown
|
page readonly
|
||
7FF51E639000
|
unkown
|
page readonly
|
||
DEDEEFD000
|
unkown
|
page read and write
|
||
7FF5CB113000
|
unkown
|
page readonly
|
||
258BEAB3000
|
unkown
|
page read and write
|
||
7FF5ED91A000
|
unkown
|
page readonly
|
||
258C4370000
|
unkown
|
page readonly
|
||
7FF53273A000
|
unkown
|
page readonly
|
||
258BFE20000
|
unkown
|
page read and write
|
||
7FF5E870A000
|
unkown
|
page readonly
|
||
7FF514373000
|
unkown
|
page readonly
|
||
7FF535D75000
|
unkown
|
page readonly
|
||
16BDE250000
|
unkown
|
page read and write
|
||
7FF5E8864000
|
unkown
|
page readonly
|
||
250F6660000
|
unkown
|
page read and write
|
||
7D92D7B000
|
unkown
|
page read and write
|
||
14D90400000
|
unkown
|
page read and write
|
||
ABD1CF8000
|
unkown
|
page read and write
|
||
7FF4F3FC5000
|
unkown
|
page readonly
|
||
7FF5DC48C000
|
unkown
|
page readonly
|
||
D6B97CB000
|
unkown
|
page read and write
|
||
7FF5361D7000
|
unkown
|
page readonly
|
||
7FF5ED646000
|
unkown
|
page readonly
|
||
7FF5BB029000
|
unkown
|
page readonly
|
||
269A0B50000
|
unkown
|
page readonly
|
||
250F6600000
|
unkown
|
page read and write
|
||
7FF4F3FED000
|
unkown
|
page readonly
|
||
7D92CFD000
|
unkown
|
page read and write
|
||
7FF5BAE33000
|
unkown
|
page readonly
|
||
7FF5361A6000
|
unkown
|
page readonly
|
||
7FF5E888C000
|
unkown
|
page readonly
|
||
D6B9AFE000
|
unkown
|
page read and write
|
||
7FF5BAF96000
|
unkown
|
page readonly
|
||
19D63202000
|
unkown
|
page read and write
|
||
7FF5BAE9C000
|
unkown
|
page readonly
|
||
22FFE04A000
|
unkown
|
page read and write
|
||
14D901CA000
|
unkown
|
page read and write
|
||
258C3E20000
|
unkown
|
page read and write
|
||
7FF5BAB1A000
|
unkown
|
page readonly
|
||
C00000
|
unkown image
|
page readonly
|
||
250F6480000
|
heap private
|
page read and write
|
||
28EC6213000
|
unkown
|
page read and write
|
||
7FF5DC157000
|
unkown
|
page readonly
|
||
258C3FF0000
|
unkown
|
page read and write
|
||
250F65C0000
|
unkown
|
page readonly
|
||
7FF51E65C000
|
unkown
|
page readonly
|
||
7FF5E8623000
|
unkown
|
page readonly
|
||
14D9018A000
|
unkown
|
page read and write
|
||
7FF5BAB30000
|
unkown
|
page readonly
|
||
19D629E0000
|
heap default
|
page read and write
|
||
7FF535DDD000
|
unkown
|
page readonly
|
||
7FF5ED8E8000
|
unkown
|
page readonly
|
||
7FF5ED9F0000
|
unkown
|
page readonly
|
||
16BDE200000
|
unkown
|
page read and write
|
||
258C40B2000
|
unkown
|
page read and write
|
||
7FF572CB7000
|
unkown
|
page readonly
|
||
7FF5ED95D000
|
unkown
|
page readonly
|
||
7FF57ADFE000
|
unkown
|
page readonly
|
||
14D91010000
|
unkown
|
page read and write
|
||
16BDE255000
|
unkown
|
page read and write
|
||
28EC6270000
|
unkown
|
page read and write
|
||
1F1BE902000
|
unkown
|
page read and write
|
||
7FF572C55000
|
unkown
|
page readonly
|
||
258C4320000
|
unkown
|
page read and write
|
||
250F6613000
|
unkown
|
page read and write
|
||
7FF5BAF5E000
|
unkown
|
page readonly
|
||
7FF5DBE8C000
|
unkown
|
page readonly
|
||
7FF5144F5000
|
unkown
|
page readonly
|
||
14D8E244000
|
unkown
|
page read and write
|
||
7FF5DC1CE000
|
unkown
|
page readonly
|
||
22FFE05A000
|
unkown
|
page read and write
|
||
7FF5DC4B4000
|
unkown
|
page readonly
|
||
7FF5ECD7C000
|
unkown
|
page readonly
|
||
10B75FA000
|
unkown
|
page read and write
|
||
72F000
|
unkown
|
page read and write
|
||
CF181EB000
|
unkown
|
page read and write
|
||
FBE88FE000
|
unkown
|
page read and write
|
||
1EB0AB60000
|
unkown
|
page write copy
|
||
7FF5ED9EE000
|
unkown
|
page readonly
|
||
E89707E000
|
unkown
|
page read and write
|
||
7FF5BB01E000
|
unkown
|
page readonly
|
||
7FF5E863C000
|
unkown
|
page readonly
|
||
7FF5C3B73000
|
unkown
|
page readonly
|
||
14D901A3000
|
unkown
|
page read and write
|
||
258C4400000
|
unkown
|
page readonly
|
||
250F64F0000
|
unkown
|
page readonly
|
||
22EF5190000
|
unkown
|
page readonly
|
||
7FF5E8950000
|
unkown
|
page readonly
|
||
7FF5CAE93000
|
unkown
|
page readonly
|
||
19D62980000
|
heap private
|
page read and write
|
||
29F4000
|
unkown
|
page readonly
|
||
7FF5C3F48000
|
unkown
|
page readonly
|
||
7FF4F3F92000
|
unkown
|
page readonly
|
||
7FF5327B0000
|
unkown
|
page readonly
|
||
7FF51E61E000
|
unkown
|
page readonly
|
||
7FF51E680000
|
unkown
|
page readonly
|
||
7FF57B2E3000
|
unkown
|
page readonly
|
||
7FF5360C5000
|
unkown
|
page readonly
|
||
7FF5CB175000
|
unkown
|
page readonly
|
||
2E0EED90000
|
heap private
|
page read and write
|
||
7FF5E8667000
|
unkown
|
page readonly
|
||
2E0ECD30000
|
heap default
|
page read and write
|
||
14D901F2000
|
unkown
|
page read and write
|
||
7FF532710000
|
unkown
|
page readonly
|
||
7FF5CB4E5000
|
unkown
|
page readonly
|
||
10B78FB000
|
unkown
|
page read and write
|
||
7FF57B604000
|
unkown
|
page readonly
|
||
14D91110000
|
unkown
|
page read and write
|
||
269A0CBC000
|
unkown
|
page read and write
|
||
28EC6120000
|
unkown
|
page readonly
|
||
14D90484000
|
unkown
|
page read and write
|
||
269A0C6F000
|
unkown
|
page read and write
|
||
ABD1E7D000
|
unkown
|
page read and write
|
||
14D90240000
|
unkown
|
page readonly
|
||
5F0000
|
unkown
|
page read and write
|
||
7FF5DC408000
|
unkown
|
page readonly
|
||
7FF5ECDF9000
|
unkown
|
page readonly
|
||
1EB0AC02000
|
unkown
|
page read and write
|
||
F750E7E000
|
unkown
|
page read and write
|
||
250F6642000
|
unkown
|
page read and write
|
||
7FF5E888A000
|
unkown
|
page readonly
|
||
DEDEAFF000
|
unkown
|
page read and write
|
||
22FFE05A000
|
unkown
|
page read and write
|
||
7FF5ECC85000
|
unkown
|
page readonly
|
||
E89727E000
|
unkown
|
page read and write
|
||
14D90602000
|
unkown
|
page read and write
|
||
7FF5ED908000
|
unkown
|
page readonly
|
||
7FF572B08000
|
unkown
|
page readonly
|
||
10B757B000
|
unkown
|
page read and write
|
||
D1D7477000
|
unkown
|
page read and write
|
||
7FF5C3FD4000
|
unkown
|
page readonly
|
||
7FF57B27C000
|
unkown
|
page readonly
|
||
D1D707E000
|
unkown
|
page read and write
|
||
250F6641000
|
unkown
|
page read and write
|
||
7FF5ED961000
|
unkown
|
page readonly
|
||
7FF4F3F6C000
|
unkown
|
page readonly
|
||
7FF5141A7000
|
unkown
|
page readonly
|
||
7FF5C3F28000
|
unkown
|
page readonly
|
||
7FF5DC053000
|
unkown
|
page readonly
|
||
7FF5C3FAC000
|
unkown
|
page readonly
|
||
ABD207F000
|
unkown
|
page read and write
|
||
7FF5DC3C7000
|
unkown
|
page readonly
|
||
7FF5DC171000
|
unkown
|
page readonly
|
||
7FF514060000
|
unkown
|
page readonly
|
||
7FF5CB4DC000
|
unkown
|
page readonly
|
||
7FF5ECD49000
|
unkown
|
page readonly
|
||
269A1190000
|
unkown
|
page readonly
|
||
258BEB02000
|
unkown
|
page read and write
|
||
7FF53215B000
|
unkown
|
page readonly
|
||
7CE827E000
|
unkown
|
page read and write
|
||
7FF5C3F42000
|
unkown
|
page readonly
|
||
14D90125000
|
unkown
|
page read and write
|
||
250F6662000
|
unkown
|
page read and write
|
||
7FF5DC510000
|
unkown
|
page readonly
|
||
7FF5BADFA000
|
unkown
|
page readonly
|
||
2E0ECF00000
|
unkown
|
page readonly
|
||
10B737F000
|
unkown
|
page read and write
|
||
258BF318000
|
unkown
|
page read and write
|
||
D6B9BFA000
|
unkown
|
page read and write
|
||
7FF532796000
|
unkown
|
page readonly
|
||
258BEA8E000
|
unkown
|
page read and write
|
||
7FF5361C5000
|
unkown
|
page readonly
|
||
258C40B6000
|
unkown
|
page read and write
|
||
16BDE24D000
|
unkown
|
page read and write
|
||
10B73FB000
|
unkown
|
page read and write
|
||
7FF5E87C7000
|
unkown
|
page readonly
|
||
7FF51E4F3000
|
unkown
|
page readonly
|
||
7FF5DC469000
|
unkown
|
page readonly
|
||
7FF514561000
|
unkown
|
page readonly
|
||
7FF51E5A1000
|
unkown
|
page readonly
|
||
ABD277B000
|
unkown
|
page read and write
|
||
7FF5C3C08000
|
unkown
|
page readonly
|
||
7FF5DC4B7000
|
unkown
|
page readonly
|
||
7FF5E88B2000
|
unkown
|
page readonly
|
||
14D90682000
|
unkown
|
page read and write
|
||
14D8E110000
|
unkown
|
page write copy
|
||
1F1BE84C000
|
unkown
|
page read and write
|
||
16BDE302000
|
unkown
|
page read and write
|
||
7FF5BADAF000
|
unkown
|
page readonly
|
||
28EC6790000
|
unkown
|
page readonly
|
||
7FF5C4030000
|
unkown
|
page readonly
|
||
2995000
|
unkown
|
page readonly
|
||
45FB677000
|
unkown
|
page read and write
|
||
7FF53253A000
|
unkown
|
page readonly
|
||
7FF5E8957000
|
unkown
|
page readonly
|
||
19D62A77000
|
unkown
|
page read and write
|
||
14D8E400000
|
unkown
|
page readonly
|
||
22F80000000
|
unkown
|
page readonly
|
||
14D90177000
|
unkown
|
page read and write
|
||
7FF5C3F32000
|
unkown
|
page readonly
|
||
28EC6040000
|
heap default
|
page read and write
|
||
258C4200000
|
unkown
|
page read and write
|
||
14D8E2A4000
|
unkown
|
page read and write
|
||
258BEA3F000
|
unkown
|
page read and write
|
||
7FF536146000
|
unkown
|
page readonly
|
||
258C3FF0000
|
unkown
|
page read and write
|
||
7FF5E88B0000
|
unkown
|
page readonly
|
||
14D901FD000
|
unkown
|
page read and write
|
||
2A08000
|
unkown
|
page readonly
|
||
7FF57B502000
|
unkown
|
page readonly
|
||
28EC6255000
|
unkown
|
page read and write
|
||
ABD297E000
|
unkown
|
page read and write
|
||
7FF4F3F82000
|
unkown
|
page readonly
|
||
250F6658000
|
unkown
|
page read and write
|
||
14D90502000
|
unkown
|
page read and write
|
||
7FF535F64000
|
unkown
|
page readonly
|
||
7FF5CB4BD000
|
unkown
|
page readonly
|
||
14D8E2F8000
|
unkown
|
page read and write
|
||
258BF1A0000
|
unkown
|
page readonly
|
||
22FFDF20000
|
heap private
|
page read and write
|
||
620000
|
heap default
|
page read and write
|
||
14D8E285000
|
unkown
|
page read and write
|
||
250F667B000
|
unkown
|
page read and write
|
||
7FF5CB4F7000
|
unkown
|
page readonly
|
||
7FF57B5E6000
|
unkown
|
page readonly
|
||
14D90500000
|
unkown
|
page read and write
|
||
2957000
|
unkown
|
page readonly
|
||
2BF05A20000
|
unkown
|
page read and write
|
||
250F663A000
|
unkown
|
page read and write
|
||
22FFE076000
|
unkown
|
page read and write
|
||
7FF532769000
|
unkown
|
page readonly
|
||
7FF572820000
|
unkown
|
page readonly
|
||
14D90600000
|
unkown
|
page read and write
|
||
22EF5600000
|
unkown
|
page readonly
|
||
7FF51E60A000
|
unkown
|
page readonly
|
||
7FF5ECD5E000
|
unkown
|
page readonly
|
||
7FF5C3ED7000
|
unkown
|
page readonly
|
||
7FF5BADEE000
|
unkown
|
page readonly
|
||
29EB000
|
unkown
|
page readonly
|
||
7FF57B612000
|
unkown
|
page readonly
|
||
7FF5ED62E000
|
unkown
|
page readonly
|
||
7FF514476000
|
unkown
|
page readonly
|
||
14D90200000
|
unkown
|
page read and write
|
||
22FFDFA0000
|
unkown
|
page readonly
|
||
16BDE227000
|
unkown
|
page read and write
|
||
2952000
|
unkown
|
page readonly
|
||
10B7A79000
|
unkown
|
page read and write
|
||
7FF4F39D4000
|
unkown
|
page readonly
|
||
22FFFB30000
|
unkown
|
page read and write
|
||
1EB0AE00000
|
unkown
|
page readonly
|
||
7FF57B50A000
|
unkown
|
page readonly
|
||
7FF5ED724000
|
unkown
|
page readonly
|
||
22EF4D02000
|
unkown
|
page read and write
|
||
258C42B4000
|
unkown
|
page readonly
|
||
14D8E2AA000
|
unkown
|
page read and write
|
||
7FF51E4D8000
|
unkown
|
page readonly
|
||
7FF535E71000
|
unkown
|
page readonly
|
||
22FFE068000
|
unkown
|
page read and write
|
||
7FF535B8B000
|
unkown
|
page readonly
|
||
7FF5DC426000
|
unkown
|
page readonly
|
||
14D8E200000
|
unkown
|
page read and write
|
||
4BC000
|
unkown
|
page read and write
|
||
1EB0AC00000
|
unkown
|
page read and write
|
||
19D63160000
|
unkown
|
page readonly
|
||
7C0000
|
heap default
|
page read and write
|
||
28EC67A0000
|
unkown
|
page read and write
|
||
22FFFAB0000
|
unkown
|
page read and write
|
||
7FF5C3FA1000
|
unkown
|
page readonly
|
||
7FF5DC11D000
|
unkown
|
page readonly
|
||
250F6657000
|
unkown
|
page read and write
|
||
258BF202000
|
unkown
|
page read and write
|
||
14D8E213000
|
unkown
|
page read and write
|
||
28EC6050000
|
unkown
|
page readonly
|
||
22EF4C00000
|
unkown
|
page read and write
|
||
16BDE4D0000
|
unkown
|
page readonly
|
||
14D8E2F4000
|
unkown
|
page read and write
|
||
7FF5E882C000
|
unkown
|
page readonly
|
||
C0B000
|
unkown image
|
page readonly
|
||
14D90443000
|
unkown
|
page read and write
|
||
28EC6400000
|
unkown
|
page readonly
|
||
258BEAFF000
|
unkown
|
page read and write
|
||
258C4294000
|
unkown
|
page readonly
|
||
258C40B6000
|
unkown
|
page read and write
|
||
7FF5E8897000
|
unkown
|
page readonly
|
||
19D62B13000
|
unkown
|
page read and write
|
||
258BF359000
|
unkown
|
page read and write
|
||
250F665C000
|
unkown
|
page read and write
|
||
7FF532450000
|
unkown
|
page readonly
|
||
7FF5DC258000
|
unkown
|
page readonly
|
||
28EC6250000
|
unkown
|
page read and write
|
||
269A0B60000
|
unkown
|
page read and write
|
||
7FF5ECDEE000
|
unkown
|
page readonly
|
||
7FF51E6DE000
|
unkown
|
page readonly
|
||
258C408A000
|
unkown
|
page read and write
|
||
2E0EEC2F000
|
heap private
|
page read and write
|
||
14D8FBA0000
|
unkown
|
page read and write
|
||
22FFDFB0000
|
unkown
|
page read and write
|
||
299A000
|
unkown
|
page readonly
|
||
7FF5CB4A9000
|
unkown
|
page readonly
|
||
CF188FF000
|
unkown
|
page read and write
|
||
7FF5E87A8000
|
unkown
|
page readonly
|
||
14D8E264000
|
unkown
|
page read and write
|
||
7FF5144E6000
|
unkown
|
page readonly
|
||
2BF05A00000
|
unkown
|
page read and write
|
||
250F664D000
|
unkown
|
page read and write
|
||
7FF5144D6000
|
unkown
|
page readonly
|
||
250F665A000
|
unkown
|
page read and write
|
||
7FF4F3F5A000
|
unkown
|
page readonly
|
||
7FF5361D4000
|
unkown
|
page readonly
|
||
28EC6D40000
|
unkown
|
page readonly
|
||
7FF5BAF4A000
|
unkown
|
page readonly
|
||
10B7B7F000
|
unkown
|
page read and write
|
||
2E84CA30000
|
heap default
|
page read and write
|
||
269A1402000
|
unkown
|
page read and write
|
||
7FF5144CD000
|
unkown
|
page readonly
|
||
258BFAC0000
|
unkown
|
page readonly
|
||
7FF5DC519000
|
unkown
|
page readonly
|
||
1F1BE7B0000
|
unkown
|
page read and write
|
||
22EF4BC0000
|
unkown
|
page readonly
|
||
22EF4BE0000
|
unkown
|
page read and write
|
||
14D8FFF0000
|
unkown
|
page readonly
|
||
258C40B3000
|
unkown
|
page read and write
|
||
14D8E302000
|
unkown
|
page read and write
|
||
7FF5DC0AE000
|
unkown
|
page readonly
|
||
258C4019000
|
unkown
|
page read and write
|
||
D6B9CFA000
|
unkown
|
page read and write
|
||
22EF4C7B000
|
unkown
|
page read and write
|
||
258BF1F3000
|
unkown
|
page read and write
|
||
7FF572C69000
|
unkown
|
page readonly
|
||
C00000
|
unkown image
|
page readonly
|
||
258BEA95000
|
unkown
|
page read and write
|
||
7FF572B23000
|
unkown
|
page readonly
|
||
FEA8AFE000
|
unkown
|
page read and write
|
||
258BF9E0000
|
unkown
|
page read and write
|
||
280E000
|
unkown
|
page readonly
|
||
14D8E318000
|
unkown
|
page read and write
|
||
7FF51E6E9000
|
unkown
|
page readonly
|
||
250F65D0000
|
unkown
|
page readonly
|
||
258C4047000
|
unkown
|
page read and write
|
||
250F6663000
|
unkown
|
page read and write
|
||
7FF57B5B9000
|
unkown
|
page readonly
|
||
7FF5DC385000
|
unkown
|
page readonly
|
||
7D9317F000
|
unkown
|
page read and write
|
||
7FF572CB0000
|
unkown
|
page readonly
|
||
7FF514569000
|
unkown
|
page readonly
|
||
258C3FC0000
|
unkown
|
page read and write
|
||
28EC5FE0000
|
heap private
|
page read and write
|
||
7FF572AEA000
|
unkown
|
page readonly
|
||
7FF51E357000
|
unkown
|
page readonly
|
||
269A0C89000
|
unkown
|
page read and write
|
||
14D9012E000
|
unkown
|
page read and write
|
||
269A0A60000
|
heap default
|
page read and write
|
||
22FFE03D000
|
unkown
|
page read and write
|
||
7FF5ECD08000
|
unkown
|
page readonly
|
||
258BEAA0000
|
unkown
|
page read and write
|
||
1F1BE790000
|
unkown
|
page readonly
|
||
16BDE23C000
|
unkown
|
page read and write
|
||
14D90270000
|
unkown
|
page readonly
|
||
22EF4D13000
|
unkown
|
page read and write
|
||
7FF535FA0000
|
unkown
|
page readonly
|
||
250F65E0000
|
unkown
|
page read and write
|
||
F20E17B000
|
unkown
|
page read and write
|
||
7FF5ECD6C000
|
unkown
|
page readonly
|
||
7FF57B60D000
|
unkown
|
page readonly
|
||
1EB0AC29000
|
unkown
|
page read and write
|
||
ABD22FE000
|
unkown
|
page read and write
|
||
28EC6285000
|
unkown
|
page read and write
|
||
250F667A000
|
unkown
|
page read and write
|
||
250F666B000
|
unkown
|
page read and write
|
||
10B767B000
|
unkown
|
page read and write
|
||
7FF5ED9F9000
|
unkown
|
page readonly
|
||
7FF536132000
|
unkown
|
page readonly
|
||
14D8E267000
|
unkown
|
page read and write
|
||
2E0ECCA0000
|
unkown
|
page read and write
|
||
258C3EA0000
|
unkown
|
page read and write
|
||
7FF572B57000
|
unkown
|
page readonly
|
||
258BF200000
|
unkown
|
page read and write
|
||
2940000
|
unkown
|
page readonly
|
||
7FF514472000
|
unkown
|
page readonly
|
||
28EC6246000
|
unkown
|
page read and write
|
||
7FF514569000
|
unkown
|
page readonly
|
||
7FF5DC4B0000
|
unkown
|
page readonly
|
||
7FF5CB4C6000
|
unkown
|
page readonly
|
||
258BE900000
|
heap private
|
page read and write
|
||
7CE867E000
|
unkown
|
page read and write
|
||
7FF5E89B1000
|
unkown
|
page readonly
|
||
7FF5DC2BE000
|
unkown
|
page readonly
|
||
7FF4F4006000
|
unkown
|
page readonly
|
||
E89717E000
|
unkown
|
page read and write
|
||
7FF57B576000
|
unkown
|
page readonly
|
||
7FF5ED885000
|
unkown
|
page readonly
|
||
7FF5C3F46000
|
unkown
|
page readonly
|
||
ABD24FF000
|
unkown
|
page read and write
|
||
258BEA00000
|
unkown
|
page read and write
|
||
7FF5E8675000
|
unkown
|
page readonly
|
||
292A000
|
unkown
|
page readonly
|
||
258BF302000
|
unkown
|
page read and write
|
||
7FF51E3B0000
|
unkown
|
page readonly
|
||
7FF535D71000
|
unkown
|
page readonly
|
||
7FF536189000
|
unkown
|
page readonly
|
||
7FF5E88F5000
|
unkown
|
page readonly
|
||
14D8E32B000
|
unkown
|
page read and write
|
||
10B6EAB000
|
unkown
|
page read and write
|
||
258BEB13000
|
unkown
|
page read and write
|
||
7FF5E8627000
|
unkown
|
page readonly
|
||
7FF535B8F000
|
unkown
|
page readonly
|
||
22FFDF90000
|
unkown
|
page readonly
|
||
258BEA7C000
|
unkown
|
page read and write
|
||
258C4054000
|
unkown
|
page read and write
|
||
7FF4F4020000
|
unkown
|
page readonly
|
||
7FF5141B7000
|
unkown
|
page readonly
|
||
258C4290000
|
unkown
|
page write copy
|
||
1F1BF540000
|
unkown
|
page readonly
|
||
1EB0AA80000
|
heap default
|
page read and write
|
||
7FF57B600000
|
unkown
|
page readonly
|
||
E896E7E000
|
unkown
|
page read and write
|
||
22EF4C29000
|
unkown
|
page read and write
|
||
7FF4F3F98000
|
unkown
|
page readonly
|
||
7FF5EC62C000
|
unkown
|
page readonly
|
||
520000
|
unkown
|
page readonly
|
||
22FFE113000
|
unkown
|
page read and write
|
||
7FF5DC455000
|
unkown
|
page readonly
|
||
7FF5E8936000
|
unkown
|
page readonly
|
||
7FF532755000
|
unkown
|
page readonly
|
||
7FF5CB4D6000
|
unkown
|
page readonly
|
||
7FF5DC2E0000
|
unkown
|
page readonly
|
||
7FF5DC3DB000
|
unkown
|
page readonly
|
||
7FF572CB4000
|
unkown
|
page readonly
|
||
7FF5E871E000
|
unkown
|
page readonly
|
||
14D8E300000
|
unkown
|
page read and write
|
||
22EF4A80000
|
heap private
|
page read and write
|
||
7FF5DC29F000
|
unkown
|
page readonly
|
||
7FF5C3C6E000
|
unkown
|
page readonly
|
||
7FF5E8617000
|
unkown
|
page readonly
|
||
7FF5ED93F000
|
unkown
|
page readonly
|
||
45FB57F000
|
unkown
|
page read and write
|
||
16BDE308000
|
unkown
|
page read and write
|
||
C0A000
|
unkown image
|
page read and write
|
||
258BF215000
|
unkown
|
page read and write
|
||
258C4380000
|
unkown
|
page readonly
|
||
7FF51E33D000
|
unkown
|
page readonly
|
||
7FF5DC3E7000
|
unkown
|
page readonly
|
||
7FF5ED81C000
|
unkown
|
page readonly
|
||
258C3E30000
|
unkown
|
page read and write
|
||
14D90484000
|
unkown
|
page read and write
|
||
D6B9B7A000
|
unkown
|
page read and write
|
||
10B79FC000
|
unkown
|
page read and write
|
||
7FF572A3A000
|
unkown
|
page readonly
|
||
269A0E00000
|
unkown
|
page readonly
|
||
7FF4F3E28000
|
unkown
|
page readonly
|
||
258BFE01000
|
unkown
|
page read and write
|
||
7FF5ED5D2000
|
unkown
|
page readonly
|
||
7FF5E8909000
|
unkown
|
page readonly
|
||
269A1500000
|
unkown
|
page read and write
|
||
7FF5DC3F7000
|
unkown
|
page readonly
|
||
7FF5E89B9000
|
unkown
|
page readonly
|
||
258BEA77000
|
unkown
|
page read and write
|
||
7D92A7F000
|
unkown
|
page read and write
|
||
258C40A4000
|
unkown
|
page read and write
|
||
45FAFAE000
|
unkown
|
page read and write
|
||
2E0ECD10000
|
unkown
|
page readonly
|
||
2E0EE980000
|
heap private
|
page read and write
|
||
22FFE200000
|
unkown
|
page readonly
|
||
2973000
|
unkown
|
page readonly
|
||
1F1BE849000
|
unkown
|
page read and write
|
||
7FF5C3EEA000
|
unkown
|
page readonly
|
||
19D62CD0000
|
unkown
|
page readonly
|
||
14D8E229000
|
unkown
|
page read and write
|
||
2BF05CD0000
|
unkown
|
page readonly
|
||
269A1260000
|
unkown
|
page readonly
|
||
7FF5BAFB5000
|
unkown
|
page readonly
|
||
7FF5BAF8D000
|
unkown
|
page readonly
|
||
7FF536142000
|
unkown
|
page readonly
|
||
14D90200000
|
unkown
|
page read and write
|
||
7FF57B50E000
|
unkown
|
page readonly
|
||
258BF300000
|
unkown
|
page read and write
|
||
7FF572C26000
|
unkown
|
page readonly
|
||
2E0ECFC0000
|
heap private
|
page read and write
|
||
269A0BA0000
|
unkown
|
page write copy
|
||
7FF5DC3FC000
|
unkown
|
page readonly
|
||
7FF53278C000
|
unkown
|
page readonly
|
||
F7512FD000
|
unkown
|
page read and write
|
||
7FF5BAF32000
|
unkown
|
page readonly
|
||
7FF51E6E1000
|
unkown
|
page readonly
|
||
DEDE9FE000
|
unkown
|
page read and write
|
||
DEDECFC000
|
unkown
|
page read and write
|
||
250F6645000
|
unkown
|
page read and write
|
||
258BF190000
|
unkown
|
page readonly
|
||
22FFFB30000
|
unkown
|
page read and write
|
||
7FF5CB49F000
|
unkown
|
page readonly
|
||
7CE857E000
|
unkown
|
page read and write
|
||
22FFFB60000
|
unkown
|
page write copy
|
||
19D62B02000
|
unkown
|
page read and write
|
||
7FF535B94000
|
unkown
|
page readonly
|
||
7FF51E656000
|
unkown
|
page readonly
|
||
10B76FB000
|
unkown
|
page read and write
|
||
10B747A000
|
unkown
|
page read and write
|
||
7FF4F3E48000
|
unkown
|
page readonly
|
||
D1D737B000
|
unkown
|
page read and write
|
There are 1218 hidden memdumps, click here to show them.