Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Seafood Order and Company Profile.xlsx
|
CDFV2 Encrypted
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$Seafood Order and Company Profile.xlsx
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\CF8173CA-C5F2-4111-899E-6E65886A2D62
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\14E11E89.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\1ABB3EA8.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\2664183B.png
|
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\327FBD00.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 550x310,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3C93D23A.png
|
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\5E0CC3B7.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\659AE274.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\73C09E83.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\80EEC8F3.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 550x310,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\96592B0E.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\ACA7CA7F.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B21A94A2.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BCFA22F6.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\EACA9901.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\EDE45DDD.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\F97FDA4C.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\FC6BB7E5.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\mso80C0.tmp
|
PNG image data, 977 x 1024, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\msoBC75.tmp
|
PNG image data, 977 x 1024, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\1AADFD09.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2E1C2191.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\39471903.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3D5CA76D.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4CDCACFF.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 550x310,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\58290F75.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\58AB66F2.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\620EEE8A.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\63886F76.png
|
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\652F53D0.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9268C444.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\ADDE7728.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B859F61C.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 550x310,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D3F67A5E.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D95AA64B.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E2B60F8F.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EB73AAC7.png
|
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
There are 29 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://103.133.109.192/cbinvst/cbn.exe
|
103.133.109.192
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
|
|
http://www.day.com/dam/1.0
|
unknown
|
|
There are 92 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
103.133.109.192
|
unknown
|
Viet Nam
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
cg&
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
dg&
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1B88E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
0}&
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
}6'
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27E5E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
28052
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
27E5E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ChangeId
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ChangeId
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
*8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE62A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FontCachePath
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
}78
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F34E6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F4589
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F34E6
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
EquationEditorFilesIntl_1033
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
SavedLegacySettings
|
|
There are 130 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
17653200000
|
unkown
|
page read and write
|
|
|
|
7FF52B81E000
|
unkown
|
page readonly
|
|
|
|
19116D36000
|
unkown
|
page read and write
|
|
|
|
1764E910000
|
unkown
|
page read and write
|
|
|
|
7FF550E48000
|
unkown
|
page readonly
|
|
|
|
3CBF47B000
|
unkown
|
page read and write
|
|
|
|
7FF51607D000
|
unkown
|
page readonly
|
|
|
|
1B276847000
|
unkown
|
page read and write
|
|
|
|
1B276874000
|
unkown
|
page read and write
|
|
|
|
19116C6D000
|
unkown
|
page read and write
|
|
|
|
19116CF1000
|
unkown
|
page read and write
|
|
|
|
298F73C0000
|
heap private
|
page read and write
|
|
|
|
191186A0000
|
unkown
|
page readonly
|
|
|
|
7FF53DFF7000
|
unkown
|
page readonly
|
|
|
|
19119310000
|
unkown
|
page read and write
|
|
|
|
1923F180000
|
unkown
|
page readonly
|
|
|
|
7FF52B7E0000
|
unkown
|
page readonly
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
7FF53E197000
|
unkown
|
page readonly
|
|
|
|
1923D800000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A52000
|
unkown
|
page readonly
|
|
|
|
19118F83000
|
unkown
|
page read and write
|
|
|
|
19118EFA000
|
unkown
|
page read and write
|
|
|
|
7FF516028000
|
unkown
|
page readonly
|
|
|
|
2AED803C000
|
unkown
|
page read and write
|
|
|
|
7FF57026D000
|
unkown
|
page readonly
|
|
|
|
7FF53DEBD000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A9F000
|
unkown
|
page readonly
|
|
|
|
19116C6E000
|
unkown
|
page read and write
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
2AED8A00000
|
unkown
|
page readonly
|
|
|
|
7FF574D70000
|
unkown
|
page readonly
|
|
|
|
1923D643000
|
unkown
|
page read and write
|
|
|
|
13DB6E02000
|
unkown
|
page read and write
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
24E39CD0000
|
unkown
|
page readonly
|
|
|
|
19116C7D000
|
unkown
|
page read and write
|
|
|
|
7FF551F5A000
|
unkown
|
page readonly
|
|
|
|
7FF53E324000
|
unkown
|
page readonly
|
|
|
|
7FF52B7F6000
|
unkown
|
page readonly
|
|
|
|
7FF5CE10E000
|
unkown
|
page readonly
|
|
|
|
7FF5CDFE7000
|
unkown
|
page readonly
|
|
|
|
26BB3080000
|
unkown
|
page read and write
|
|
|
|
F86567F000
|
unkown
|
page read and write
|
|
|
|
7FF5CE04E000
|
unkown
|
page readonly
|
|
|
|
19116C74000
|
unkown
|
page read and write
|
|
|
|
7FF570162000
|
unkown
|
page readonly
|
|
|
|
7FF53E2AA000
|
unkown
|
page readonly
|
|
|
|
1EB37550000
|
unkown
|
page readonly
|
|
|
|
17653480000
|
unkown
|
page readonly
|
|
|
|
176531A0000
|
unkown
|
page read and write
|
|
|
|
1764E313000
|
unkown
|
page read and write
|
|
|
|
7FF550A40000
|
unkown
|
page readonly
|
|
|
|
3CBEDBE000
|
unkown
|
page read and write
|
|
|
|
19118DE9000
|
unkown
|
page read and write
|
|
|
|
19116C6E000
|
unkown
|
page read and write
|
|
|
|
F09577D000
|
unkown
|
page read and write
|
|
|
|
7FF53E30C000
|
unkown
|
page readonly
|
|
|
|
1911A100000
|
unkown
|
page read and write
|
|
|
|
7FF5CE096000
|
unkown
|
page readonly
|
|
|
|
7FF551DBF000
|
unkown
|
page readonly
|
|
|
|
1E473254000
|
unkown
|
page read and write
|
|
|
|
19116BD0000
|
unkown
|
page readonly
|
|
|
|
19116C6A000
|
unkown
|
page read and write
|
|
|
|
1B276826000
|
unkown
|
page read and write
|
|
|
|
2AED7EA0000
|
unkown
|
page readonly
|
|
|
|
3CBF0FB000
|
unkown
|
page read and write
|
|
|
|
1E473302000
|
unkown
|
page read and write
|
|
|
|
1B27685C000
|
unkown
|
page read and write
|
|
|
|
7FF551FC5000
|
unkown
|
page readonly
|
|
|
|
298F764B000
|
unkown
|
page read and write
|
|
|
|
BE7E17D000
|
unkown
|
page read and write
|
|
|
|
1B276862000
|
unkown
|
page read and write
|
|
|
|
1764DA13000
|
unkown
|
page read and write
|
|
|
|
F095B7F000
|
unkown
|
page read and write
|
|
|
|
1B27685D000
|
unkown
|
page read and write
|
|
|
|
19119010000
|
unkown
|
page read and write
|
|
|
|
13DB6629000
|
unkown
|
page read and write
|
|
|
|
19116C78000
|
unkown
|
page read and write
|
|
|
|
19116A40000
|
heap private
|
page read and write
|
|
|
|
19118A70000
|
unkown
|
page read and write
|
|
|
|
7FF5C5C6F000
|
unkown
|
page readonly
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
19116DE0000
|
unkown
|
page read and write
|
|
|
|
7FF53E298000
|
unkown
|
page readonly
|
|
|
|
7FF53E317000
|
unkown
|
page readonly
|
|
|
|
AB4ED7E000
|
unkown
|
page read and write
|
|
|
|
17653190000
|
unkown
|
page read and write
|
|
|
|
7FF5B8724000
|
unkown
|
page readonly
|
|
|
|
1B276857000
|
unkown
|
page read and write
|
|
|
|
7FF551F48000
|
unkown
|
page readonly
|
|
|
|
C4817C000
|
unkown
|
page read and write
|
|
|
|
7FF5CDD9C000
|
unkown
|
page readonly
|
|
|
|
19118C02000
|
unkown
|
page read and write
|
|
|
|
7FF53E320000
|
unkown
|
page readonly
|
|
|
|
298F768A000
|
unkown
|
page read and write
|
|
|
|
19116C76000
|
unkown
|
page read and write
|
|
|
|
7FF516111000
|
unkown
|
page readonly
|
|
|
|
7FF5CE081000
|
unkown
|
page readonly
|
|
|
|
19116CF1000
|
unkown
|
page read and write
|
|
|
|
19116C89000
|
unkown
|
page read and write
|
|
|
|
1923D673000
|
unkown
|
page read and write
|
|
|
|
7FF5C5E6C000
|
unkown
|
page readonly
|
|
|
|
19119010000
|
unkown
|
page read and write
|
|
|
|
7FF53E315000
|
unkown
|
page readonly
|
|
|
|
26BB30C0000
|
unkown
|
page read and write
|
|
|
|
19118F00000
|
unkown
|
page read and write
|
|
|
|
1911A082000
|
unkown
|
page read and write
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
1B2766A0000
|
heap default
|
page read and write
|
|
|
|
7FF53E25C000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD69000
|
unkown
|
page readonly
|
|
|
|
7FF574E79000
|
unkown
|
page readonly
|
|
|
|
3CBF67B000
|
unkown
|
page read and write
|
|
|
|
7FF550C57000
|
unkown
|
page readonly
|
|
|
|
7FF5CDEBE000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD26000
|
unkown
|
page readonly
|
|
|
|
298F7649000
|
unkown
|
page read and write
|
|
|
|
19118D6F000
|
unkown
|
page read and write
|
|
|
|
19119410000
|
unkown
|
page read and write
|
|
|
|
7FF5CE03A000
|
unkown
|
page readonly
|
|
|
|
26BB3202000
|
unkown
|
page read and write
|
|
|
|
7FF5701D8000
|
unkown
|
page readonly
|
|
|
|
19116CA1000
|
unkown
|
page read and write
|
|
|
|
7FF5B0206000
|
unkown
|
page readonly
|
|
|
|
19116CA9000
|
unkown
|
page read and write
|
|
|
|
19116C87000
|
unkown
|
page read and write
|
|
|
|
19116AB0000
|
unkown
|
page readonly
|
|
|
|
7FF5C5E80000
|
unkown
|
page readonly
|
|
|
|
7FF574DDD000
|
unkown
|
page readonly
|
|
|
|
58D047F000
|
unkown
|
page read and write
|
|
|
|
298F7708000
|
unkown
|
page read and write
|
|
|
|
7FF551EB7000
|
unkown
|
page readonly
|
|
|
|
7FF5C5DF2000
|
unkown
|
page readonly
|
|
|
|
7FF570267000
|
unkown
|
page readonly
|
|
|
|
7FF52B887000
|
unkown
|
page readonly
|
|
|
|
19118D28000
|
unkown
|
page read and write
|
|
|
|
7FF5C5DF6000
|
unkown
|
page readonly
|
|
|
|
1923D670000
|
unkown
|
page read and write
|
|
|
|
24E3A400000
|
unkown
|
page readonly
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
7FF515A76000
|
unkown
|
page readonly
|
|
|
|
1923D66E000
|
unkown
|
page read and write
|
|
|
|
19118DED000
|
unkown
|
page read and write
|
|
|
|
1EB35B00000
|
unkown
|
page readonly
|
|
|
|
7FF5C5E5C000
|
unkown
|
page readonly
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
7FF5B0141000
|
unkown
|
page readonly
|
|
|
|
7FF53E23A000
|
unkown
|
page readonly
|
|
|
|
1911B110000
|
unkown
|
page read and write
|
|
|
|
1B276841000
|
unkown
|
page read and write
|
|
|
|
1764E215000
|
unkown
|
page read and write
|
|
|
|
7FF52B8DE000
|
unkown
|
page readonly
|
|
|
|
176531A0000
|
unkown
|
page read and write
|
|
|
|
2EDE57A000
|
unkown
|
page read and write
|
|
|
|
7FF5CDE3B000
|
unkown
|
page readonly
|
|
|
|
1923D670000
|
unkown
|
page read and write
|
|
|
|
1B276813000
|
unkown
|
page read and write
|
|
|
|
13DB6F00000
|
unkown
|
page read and write
|
|
|
|
7FF53E2BE000
|
unkown
|
page readonly
|
|
|
|
AB4EE7E000
|
unkown
|
page read and write
|
|
|
|
17653400000
|
unkown
|
page readonly
|
|
|
|
C47EFC000
|
unkown
|
page read and write
|
|
|
|
F09587E000
|
unkown
|
page read and write
|
|
|
|
19118D1D000
|
unkown
|
page read and write
|
|
|
|
7FF574980000
|
unkown
|
page readonly
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
1B2767A0000
|
unkown
|
page read and write
|
|
|
|
17653084000
|
unkown
|
page read and write
|
|
|
|
2D4087E000
|
unkown
|
page read and write
|
|
|
|
7FF551FBC000
|
unkown
|
page readonly
|
|
|
|
7FF5C5CA8000
|
unkown
|
page readonly
|
|
|
|
19116CA3000
|
unkown
|
page read and write
|
|
|
|
7FF5CE08C000
|
unkown
|
page readonly
|
|
|
|
7FF550ED0000
|
unkown
|
page readonly
|
|
|
|
7FF516069000
|
unkown
|
page readonly
|
|
|
|
19118AC0000
|
unkown
|
page readonly
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
7FF5C5E75000
|
unkown
|
page readonly
|
|
|
|
58D027F000
|
unkown
|
page read and write
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
7FF551FD0000
|
unkown
|
page readonly
|
|
|
|
17653114000
|
unkown
|
page readonly
|
|
|
|
3CBF97B000
|
unkown
|
page read and write
|
|
|
|
EFC353C000
|
unkown
|
page read and write
|
|
|
|
7FF5C5E84000
|
unkown
|
page readonly
|
|
|
|
BE7E07E000
|
unkown
|
page read and write
|
|
|
|
7FF5B0078000
|
unkown
|
page readonly
|
|
|
|
7FF52B839000
|
unkown
|
page readonly
|
|
|
|
19119010000
|
unkown
|
page read and write
|
|
|
|
17652F40000
|
unkown
|
page read and write
|
|
|
|
1EB35BE7000
|
heap default
|
page read and write
|
|
|
|
1EB37660000
|
unkown
|
page readonly
|
|
|
|
1764E9F0000
|
unkown
|
page read and write
|
|
|
|
7FF56FEDC000
|
unkown
|
page readonly
|
|
|
|
7FF52B66F000
|
unkown
|
page readonly
|
|
|
|
7FF5B8AA9000
|
unkown
|
page readonly
|
|
|
|
1764E200000
|
unkown
|
page read and write
|
|
|
|
7FF5B020C000
|
unkown
|
page readonly
|
|
|
|
1EB35B60000
|
unkown
|
page read and write
|
|
|
|
7FF5CDFF7000
|
unkown
|
page readonly
|
|
|
|
7FF53E25A000
|
unkown
|
page readonly
|
|
|
|
13DB65B0000
|
unkown
|
page readonly
|
|
|
|
1EB35B80000
|
unkown
|
page read and write
|
|
|
|
1764EB30000
|
unkown
|
page readonly
|
|
|
|
7FF52B8E1000
|
unkown
|
page readonly
|
|
|
|
3CBF4FB000
|
unkown
|
page read and write
|
|
|
|
7FF551F28000
|
unkown
|
page readonly
|
|
|
|
19116C8F000
|
unkown
|
page read and write
|
|
|
|
7FF53E2F6000
|
unkown
|
page readonly
|
|
|
|
7FF5CE0A5000
|
unkown
|
page readonly
|
|
|
|
19119310000
|
unkown
|
page read and write
|
|
|
|
19118A70000
|
unkown
|
page read and write
|
|
|
|
C4837D000
|
unkown
|
page read and write
|
|
|
|
7FF5CDFD1000
|
unkown
|
page readonly
|
|
|
|
7FF5CD97E000
|
unkown
|
page readonly
|
|
|
|
19116AA0000
|
heap default
|
page read and write
|
|
|
|
7FF52B8E9000
|
unkown
|
page readonly
|
|
|
|
19116C87000
|
unkown
|
page read and write
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
1EB377AF000
|
heap private
|
page read and write
|
|
|
|
17653040000
|
unkown
|
page read and write
|
|
|
|
2AED804E000
|
unkown
|
page read and write
|
|
|
|
19118EC5000
|
unkown
|
page read and write
|
|
|
|
7FF5CDE4C000
|
unkown
|
page readonly
|
|
|
|
13DB6C70000
|
unkown
|
page write copy
|
|
|
|
17653110000
|
unkown
|
page read and write
|
|
|
|
C4827F000
|
unkown
|
page read and write
|
|
|
|
17653080000
|
unkown
|
page read and write
|
|
|
|
7FF5AFFDA000
|
unkown
|
page readonly
|
|
|
|
1923D678000
|
unkown
|
page read and write
|
|
|
|
7FF5CDD6B000
|
unkown
|
page readonly
|
|
|
|
19116DC0000
|
unkown
|
page read and write
|
|
|
|
2AED8113000
|
unkown
|
page read and write
|
|
|
|
1B276860000
|
unkown
|
page read and write
|
|
|
|
19116D49000
|
unkown
|
page read and write
|
|
|
|
7FF570260000
|
unkown
|
page readonly
|
|
|
|
7FF5B8AC6000
|
unkown
|
page readonly
|
|
|
|
F865A7D000
|
unkown
|
page read and write
|
|
|
|
19116CB4000
|
unkown
|
page read and write
|
|
|
|
176531A0000
|
unkown
|
page read and write
|
|
|
|
1764DC00000
|
unkown
|
page readonly
|
|
|
|
7FF5B88DF000
|
unkown
|
page readonly
|
|
|
|
19118DD3000
|
unkown
|
page read and write
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
298F764C000
|
unkown
|
page read and write
|
|
|
|
7FF574D9A000
|
unkown
|
page readonly
|
|
|
|
1923D8D0000
|
unkown
|
page readonly
|
|
|
|
19118D38000
|
unkown
|
page read and write
|
|
|
|
7FF5CE069000
|
unkown
|
page readonly
|
|
|
|
7FF53E0C8000
|
unkown
|
page readonly
|
|
|
|
7FF551EC5000
|
unkown
|
page readonly
|
|
|
|
7FF5B01BE000
|
unkown
|
page readonly
|
|
|
|
BE7DC7F000
|
unkown
|
page read and write
|
|
|
|
7FF551F1C000
|
unkown
|
page readonly
|
|
|
|
19119410000
|
unkown
|
page read and write
|
|
|
|
7FF52B2C5000
|
unkown
|
page readonly
|
|
|
|
17652EF0000
|
unkown
|
page readonly
|
|
|
|
7FF574D86000
|
unkown
|
page readonly
|
|
|
|
3CBFE7C000
|
unkown
|
page read and write
|
|
|
|
19116C81000
|
unkown
|
page read and write
|
|
|
|
17653048000
|
unkown
|
page read and write
|
|
|
|
26BB30B0000
|
unkown
|
page read and write
|
|
|
|
7FF5CE010000
|
unkown
|
page readonly
|
|
|
|
3CBF179000
|
unkown
|
page read and write
|
|
|
|
7FF5CE086000
|
unkown
|
page readonly
|
|
|
|
2D403CF000
|
unkown
|
page read and write
|
|
|
|
C477EC000
|
unkown
|
page read and write
|
|
|
|
298F764F000
|
unkown
|
page read and write
|
|
|
|
176531F0000
|
unkown
|
page readonly
|
|
|
|
7FF53E292000
|
unkown
|
page readonly
|
|
|
|
298F7E00000
|
unkown
|
page readonly
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
1923F080000
|
unkown
|
page read and write
|
|
|
|
7FF574B97000
|
unkown
|
page readonly
|
|
|
|
F095C7F000
|
unkown
|
page read and write
|
|
|
|
19118F83000
|
unkown
|
page read and write
|
|
|
|
1E473000000
|
heap private
|
page read and write
|
|
|
|
7FF5B8AE5000
|
unkown
|
page readonly
|
|
|
|
7FF52B86C000
|
unkown
|
page readonly
|
|
|
|
C47BFC000
|
unkown
|
page read and write
|
|
|
|
7FF53E2FC000
|
unkown
|
page readonly
|
|
|
|
F09597F000
|
unkown
|
page read and write
|
|
|
|
2AED8070000
|
unkown
|
page read and write
|
|
|
|
17653160000
|
unkown
|
page read and write
|
|
|
|
7FF53E1F5000
|
unkown
|
page readonly
|
|
|
|
7FF53E237000
|
unkown
|
page readonly
|
|
|
|
1923D66D000
|
unkown
|
page read and write
|
|
|
|
1E473190000
|
unkown
|
page readonly
|
|
|
|
1764DA41000
|
unkown
|
page read and write
|
|
|
|
13DB64E0000
|
unkown
|
page readonly
|
|
|
|
7FF515E6A000
|
unkown
|
page readonly
|
|
|
|
7FF52B540000
|
unkown
|
page readonly
|
|
|
|
7FF5B01C5000
|
unkown
|
page readonly
|
|
|
|
19119113000
|
unkown
|
page read and write
|
|
|
|
7FF516086000
|
unkown
|
page readonly
|
|
|
|
19116CF1000
|
unkown
|
page read and write
|
|
|
|
7FF5C5BB0000
|
unkown
|
page readonly
|
|
|
|
19116DBA000
|
unkown
|
page read and write
|
|
|
|
3CBFEFF000
|
unkown
|
page read and write
|
|
|
|
1B27687D000
|
unkown
|
page read and write
|
|
|
|
298F7800000
|
unkown
|
page readonly
|
|
|
|
7FF57024C000
|
unkown
|
page readonly
|
|
|
|
13DB66E4000
|
unkown
|
page read and write
|
|
|
|
26BB2A00000
|
unkown
|
page read and write
|
|
|
|
7FF550CFE000
|
unkown
|
page readonly
|
|
|
|
EFC3BF7000
|
unkown
|
page read and write
|
|
|
|
19116C51000
|
unkown
|
page read and write
|
|
|
|
1764DA58000
|
unkown
|
page read and write
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
58CFC77000
|
unkown
|
page read and write
|
|
|
|
58D07FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B0093000
|
unkown
|
page readonly
|
|
|
|
7FF574C68000
|
unkown
|
page readonly
|
|
|
|
1923D5A0000
|
heap default
|
page read and write
|
|
|
|
19118EE4000
|
unkown
|
page read and write
|
|
|
|
1923D5B0000
|
unkown
|
page write copy
|
|
|
|
58CFA7C000
|
unkown
|
page read and write
|
|
|
|
1B276902000
|
unkown
|
page read and write
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
7FF551FD4000
|
unkown
|
page readonly
|
|
|
|
19118ECF000
|
unkown
|
page read and write
|
|
|
|
7FF515F27000
|
unkown
|
page readonly
|
|
|
|
2AED7F80000
|
unkown
|
page readonly
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A62000
|
unkown
|
page readonly
|
|
|
|
7FF550F39000
|
unkown
|
page readonly
|
|
|
|
24E3A170000
|
unkown
|
page readonly
|
|
|
|
7FF5C5DF8000
|
unkown
|
page readonly
|
|
|
|
19116C88000
|
unkown
|
page read and write
|
|
|
|
7FF5701DA000
|
unkown
|
page readonly
|
|
|
|
2AED8660000
|
unkown
|
page readonly
|
|
|
|
7FF515A7A000
|
unkown
|
page readonly
|
|
|
|
1765321C000
|
unkown
|
page read and write
|
|
|
|
7FF5160B4000
|
unkown
|
page readonly
|
|
|
|
7FF53E2ED000
|
unkown
|
page readonly
|
|
|
|
19118EF4000
|
unkown
|
page read and write
|
|
|
|
7FF5CDF97000
|
unkown
|
page readonly
|
|
|
|
19116CEB000
|
unkown
|
page read and write
|
|
|
|
1911A102000
|
unkown
|
page read and write
|
|
|
|
17652F20000
|
unkown
|
page read and write
|
|
|
|
1923D670000
|
unkown
|
page read and write
|
|
|
|
1EB35C1D000
|
heap default
|
page read and write
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
7FF552039000
|
unkown
|
page readonly
|
|
|
|
19118D21000
|
unkown
|
page read and write
|
|
|
|
7FF5C5C88000
|
unkown
|
page readonly
|
|
|
|
1B27686F000
|
unkown
|
page read and write
|
|
|
|
7FF574DEC000
|
unkown
|
page readonly
|
|
|
|
7FF574E10000
|
unkown
|
page readonly
|
|
|
|
13DB6702000
|
unkown
|
page read and write
|
|
|
|
176531A0000
|
unkown
|
page read and write
|
|
|
|
7FF5CDCAE000
|
unkown
|
page readonly
|
|
|
|
2D407FF000
|
unkown
|
page read and write
|
|
|
|
17653120000
|
unkown
|
page readonly
|
|
|
|
2D4067A000
|
unkown
|
page read and write
|
|
|
|
19118D87000
|
unkown
|
page read and write
|
|
|
|
7FF574970000
|
unkown
|
page readonly
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
7FF5C5B08000
|
unkown
|
page readonly
|
|
|
|
7FF5CE119000
|
unkown
|
page readonly
|
|
|
|
2D4077A000
|
unkown
|
page read and write
|
|
|
|
19118ECD000
|
unkown
|
page read and write
|
|
|
|
2EDE5FF000
|
unkown
|
page read and write
|
|
|
|
19116C73000
|
unkown
|
page read and write
|
|
|
|
7FF51610E000
|
unkown
|
page readonly
|
|
|
|
F09537F000
|
unkown
|
page read and write
|
|
|
|
19116C6E000
|
unkown
|
page read and write
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
3CBFC7B000
|
unkown
|
page read and write
|
|
|
|
7FF550A30000
|
unkown
|
page readonly
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
F86532B000
|
unkown
|
page read and write
|
|
|
|
19118DE9000
|
unkown
|
page read and write
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
19116C8D000
|
unkown
|
page read and write
|
|
|
|
58D05FB000
|
unkown
|
page read and write
|
|
|
|
7FF551E50000
|
unkown
|
page readonly
|
|
|
|
26BB28C0000
|
heap private
|
page read and write
|
|
|
|
3CBFDFC000
|
unkown
|
page read and write
|
|
|
|
2EDE47E000
|
unkown
|
page read and write
|
|
|
|
17653040000
|
unkown
|
page read and write
|
|
|
|
7FF515FC7000
|
unkown
|
page readonly
|
|
|
|
7FF550E42000
|
unkown
|
page readonly
|
|
|
|
1E47323F000
|
unkown
|
page read and write
|
|
|
|
19116C84000
|
unkown
|
page read and write
|
|
|
|
19116C82000
|
unkown
|
page read and write
|
|
|
|
19116C84000
|
unkown
|
page read and write
|
|
|
|
7FF550E9D000
|
unkown
|
page readonly
|
|
|
|
19116C82000
|
unkown
|
page read and write
|
|
|
|
7FF5CDE7E000
|
unkown
|
page readonly
|
|
|
|
1764DA29000
|
unkown
|
page read and write
|
|
|
|
19118D1D000
|
unkown
|
page read and write
|
|
|
|
7FF5CE05F000
|
unkown
|
page readonly
|
|
|
|
7FF5B0281000
|
unkown
|
page readonly
|
|
|
|
176532AF000
|
unkown
|
page read and write
|
|
|
|
19118D0A000
|
unkown
|
page read and write
|
|
|
|
7FF5B8B59000
|
unkown
|
page readonly
|
|
|
|
3CBF3FB000
|
unkown
|
page read and write
|
|
|
|
19119610000
|
unkown
|
page read and write
|
|
|
|
1B2766B0000
|
unkown
|
page readonly
|
|
|
|
19118D1B000
|
unkown
|
page read and write
|
|
|
|
7FF53E00C000
|
unkown
|
page readonly
|
|
|
|
7FF550D43000
|
unkown
|
page readonly
|
|
|
|
7FF5CDEE9000
|
unkown
|
page readonly
|
|
|
|
19118A60000
|
unkown
|
page readonly
|
|
|
|
3CBED3B000
|
unkown
|
page read and write
|
|
|
|
19118A00000
|
unkown
|
page readonly
|
|
|
|
7FF56FAFF000
|
unkown
|
page readonly
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
7FF551F75000
|
unkown
|
page readonly
|
|
|
|
1764EAE0000
|
unkown
|
page readonly
|
|
|
|
58D017B000
|
unkown
|
page read and write
|
|
|
|
7FF574D88000
|
unkown
|
page readonly
|
|
|
|
1764E318000
|
unkown
|
page read and write
|
|
|
|
7FF551E5C000
|
unkown
|
page readonly
|
|
|
|
24E39A29000
|
unkown
|
page read and write
|
|
|
|
7FF5CE09C000
|
unkown
|
page readonly
|
|
|
|
3CBFB7B000
|
unkown
|
page read and write
|
|
|
|
7FF574C3E000
|
unkown
|
page readonly
|
|
|
|
1B276840000
|
unkown
|
page read and write
|
|
|
|
7FF550E46000
|
unkown
|
page readonly
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
24E39A3D000
|
unkown
|
page read and write
|
|
|
|
17653249000
|
unkown
|
page read and write
|
|
|
|
7FF550D4D000
|
unkown
|
page readonly
|
|
|
|
EFC387E000
|
unkown
|
page read and write
|
|
|
|
2AED7F90000
|
unkown
|
page read and write
|
|
|
|
1764E359000
|
unkown
|
page read and write
|
|
|
|
7FF5AFF45000
|
unkown
|
page readonly
|
|
|
|
24E39990000
|
heap private
|
page read and write
|
|
|
|
7FF515DD5000
|
unkown
|
page readonly
|
|
|
|
BE7E27D000
|
unkown
|
page read and write
|
|
|
|
17653280000
|
unkown
|
page read and write
|
|
|
|
7FF53E22A000
|
unkown
|
page readonly
|
|
|
|
7FF52B80A000
|
unkown
|
page readonly
|
|
|
|
7FF550F31000
|
unkown
|
page readonly
|
|
|
|
3CBF07F000
|
unkown
|
page read and write
|
|
|
|
7FF53E193000
|
unkown
|
page readonly
|
|
|
|
7FF5CD988000
|
unkown
|
page readonly
|
|
|
|
1B27686D000
|
unkown
|
page read and write
|
|
|
|
19118D74000
|
unkown
|
page read and write
|
|
|
|
19118D2E000
|
unkown
|
page read and write
|
|
|
|
1911A002000
|
unkown
|
page read and write
|
|
|
|
7FF5B8ADC000
|
unkown
|
page readonly
|
|
|
|
1911A142000
|
unkown
|
page read and write
|
|
|
|
EFC3CFF000
|
unkown
|
page read and write
|
|
|
|
1911B110000
|
unkown
|
page read and write
|
|
|
|
2AED8102000
|
unkown
|
page read and write
|
|
|
|
26BB2E00000
|
unkown
|
page readonly
|
|
|
|
7FF551DD8000
|
unkown
|
page readonly
|
|
|
|
19118E12000
|
unkown
|
page read and write
|
|
|
|
BE7D8CC000
|
unkown
|
page read and write
|
|
|
|
3CBF9FB000
|
unkown
|
page read and write
|
|
|
|
7FF5CE07D000
|
unkown
|
page readonly
|
|
|
|
19116D58000
|
unkown
|
page read and write
|
|
|
|
17652EA0000
|
unkown
|
page read and write
|
|
|
|
7FF5C5EDE000
|
unkown
|
page readonly
|
|
|
|
AB4E7FC000
|
unkown
|
page read and write
|
|
|
|
24E39C00000
|
unkown
|
page readonly
|
|
|
|
7FF550E6E000
|
unkown
|
page readonly
|
|
|
|
19116C71000
|
unkown
|
page read and write
|
|
|
|
7FF5B0137000
|
unkown
|
page readonly
|
|
|
|
17653070000
|
unkown
|
page read and write
|
|
|
|
19119310000
|
unkown
|
page read and write
|
|
|
|
19116C68000
|
unkown
|
page read and write
|
|
|
|
F0951FB000
|
unkown
|
page read and write
|
|
|
|
19116D3B000
|
unkown
|
page read and write
|
|
|
|
BE7DDFE000
|
unkown
|
page read and write
|
|
|
|
7FF5CDD1D000
|
unkown
|
page readonly
|
|
|
|
7FF574CB1000
|
unkown
|
page readonly
|
|
|
|
13DB6F12000
|
unkown
|
page read and write
|
|
|
|
19118D2B000
|
unkown
|
page read and write
|
|
|
|
1764DAA2000
|
unkown
|
page read and write
|
|
|
|
1911A000000
|
unkown
|
page read and write
|
|
|
|
7FF5B01F6000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A8E000
|
unkown
|
page readonly
|
|
|
|
7FF5CDED8000
|
unkown
|
page readonly
|
|
|
|
7FF5AFBE6000
|
unkown
|
page readonly
|
|
|
|
AB4EC7E000
|
unkown
|
page read and write
|
|
|
|
298F8140000
|
unkown
|
page readonly
|
|
|
|
7FF53E389000
|
unkown
|
page readonly
|
|
|
|
7FF53E178000
|
unkown
|
page readonly
|
|
|
|
1923D66E000
|
unkown
|
page read and write
|
|
|
|
1E473200000
|
unkown
|
page read and write
|
|
|
|
3CBF37A000
|
unkown
|
page read and write
|
|
|
|
19116CD3000
|
unkown
|
page read and write
|
|
|
|
AB4EAFE000
|
unkown
|
page read and write
|
|
|
|
298F7602000
|
unkown
|
page read and write
|
|
|
|
19118D69000
|
unkown
|
page read and write
|
|
|
|
19118F83000
|
unkown
|
page read and write
|
|
|
|
F865977000
|
unkown
|
page read and write
|
|
|
|
1764EAD0000
|
unkown
|
page readonly
|
|
|
|
1764DCD0000
|
unkown
|
page readonly
|
|
|
|
2AED8000000
|
unkown
|
page read and write
|
|
|
|
19116C80000
|
unkown
|
page read and write
|
|
|
|
7FF574E71000
|
unkown
|
page readonly
|
|
|
|
17652EB0000
|
unkown
|
page read and write
|
|
|
|
19118ECD000
|
unkown
|
page read and write
|
|
|
|
7FF5CDD38000
|
unkown
|
page readonly
|
|
|
|
2AED7E90000
|
heap default
|
page read and write
|
|
|
|
7FF5CE0B0000
|
unkown
|
page readonly
|
|
|
|
2AED8056000
|
unkown
|
page read and write
|
|
|
|
19116C9F000
|
unkown
|
page read and write
|
|
|
|
7FF551FA1000
|
unkown
|
page readonly
|
|
|
|
24E39A72000
|
unkown
|
page read and write
|
|
|
|
BE7DFFD000
|
unkown
|
page read and write
|
|
|
|
19116C76000
|
unkown
|
page read and write
|
|
|
|
26BB2A2A000
|
unkown
|
page read and write
|
|
|
|
19116D48000
|
unkown
|
page read and write
|
|
|
|
7FF52B84D000
|
unkown
|
page readonly
|
|
|
|
19116CA3000
|
unkown
|
page read and write
|
|
|
|
26BB2930000
|
unkown
|
page readonly
|
|
|
|
19118D52000
|
unkown
|
page read and write
|
|
|
|
1923D613000
|
unkown
|
page read and write
|
|
|
|
7FF516026000
|
unkown
|
page readonly
|
|
|
|
19118DE9000
|
unkown
|
page read and write
|
|
|
|
19116CD9000
|
unkown
|
page read and write
|
|
|
|
19116C82000
|
unkown
|
page read and write
|
|
|
|
1764E202000
|
unkown
|
page read and write
|
|
|
|
7FF5CDED1000
|
unkown
|
page readonly
|
|
|
|
19118EF8000
|
unkown
|
page read and write
|
|
|
|
1B27684D000
|
unkown
|
page read and write
|
|
|
|
7FF550E75000
|
unkown
|
page readonly
|
|
|
|
19119010000
|
unkown
|
page read and write
|
|
|
|
26BB3070000
|
unkown
|
page readonly
|
|
|
|
7FF516022000
|
unkown
|
page readonly
|
|
|
|
7FF5B8710000
|
unkown
|
page readonly
|
|
|
|
298F7C02000
|
unkown
|
page read and write
|
|
|
|
7FF5C5E66000
|
unkown
|
page readonly
|
|
|
|
AB4EF7F000
|
unkown
|
page read and write
|
|
|
|
7FF5C5862000
|
unkown
|
page readonly
|
|
|
|
7FF551EAC000
|
unkown
|
page readonly
|
|
|
|
7FF574C4A000
|
unkown
|
page readonly
|
|
|
|
19116C68000
|
unkown
|
page read and write
|
|
|
|
19116D7A000
|
unkown
|
page read and write
|
|
|
|
7FF574CEC000
|
unkown
|
page readonly
|
|
|
|
19116CCC000
|
unkown
|
page read and write
|
|
|
|
7FF53E263000
|
unkown
|
page readonly
|
|
|
|
13DB66B8000
|
unkown
|
page read and write
|
|
|
|
13DB66C9000
|
unkown
|
page read and write
|
|
|
|
EFC3DFE000
|
unkown
|
page read and write
|
|
|
|
F86587B000
|
unkown
|
page read and write
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
1E473070000
|
unkown
|
page readonly
|
|
|
|
56ACB2C000
|
unkown
|
page read and write
|
|
|
|
7FF5B015A000
|
unkown
|
page readonly
|
|
|
|
7FF550C5A000
|
unkown
|
page readonly
|
|
|
|
7FF53E0DA000
|
unkown
|
page readonly
|
|
|
|
F094DAB000
|
unkown
|
page read and write
|
|
|
|
7FF5702BE000
|
unkown
|
page readonly
|
|
|
|
7FF53E389000
|
unkown
|
page readonly
|
|
|
|
7FF550EAC000
|
unkown
|
page readonly
|
|
|
|
3CBF6FB000
|
unkown
|
page read and write
|
|
|
|
19116C73000
|
unkown
|
page read and write
|
|
|
|
7FF550D71000
|
unkown
|
page readonly
|
|
|
|
7FF5CE026000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC90000
|
unkown
|
page readonly
|
|
|
|
26BB30B0000
|
unkown
|
page read and write
|
|
|
|
24E3A140000
|
unkown
|
page readonly
|
|
|
|
7FF53E050000
|
unkown
|
page readonly
|
|
|
|
1764EE90000
|
unkown
|
page read and write
|
|
|
|
19118D7E000
|
unkown
|
page read and write
|
|
|
|
7FF570264000
|
unkown
|
page readonly
|
|
|
|
1E473140000
|
unkown
|
page write copy
|
|
|
|
1EB37640000
|
unkown
|
page readonly
|
|
|
|
1923D629000
|
unkown
|
page read and write
|
|
|
|
1923D602000
|
unkown
|
page read and write
|
|
|
|
7FF5B0220000
|
unkown
|
page readonly
|
|
|
|
19118EFC000
|
unkown
|
page read and write
|
|
|
|
1B276831000
|
unkown
|
page read and write
|
|
|
|
19118EC5000
|
unkown
|
page read and write
|
|
|
|
58D04FF000
|
unkown
|
page read and write
|
|
|
|
298F7613000
|
unkown
|
page read and write
|
|
|
|
1764EAF0000
|
unkown
|
page readonly
|
|
|
|
26BB2B02000
|
unkown
|
page read and write
|
|
|
|
2AED8100000
|
unkown
|
page read and write
|
|
|
|
1923D66E000
|
unkown
|
page read and write
|
|
|
|
7FF5CDC55000
|
unkown
|
page readonly
|
|
|
|
19116D89000
|
unkown
|
page read and write
|
|
|
|
19116C99000
|
unkown
|
page read and write
|
|
|
|
7FF51602A000
|
unkown
|
page readonly
|
|
|
|
7FF5AFFF0000
|
unkown
|
page readonly
|
|
|
|
17653230000
|
unkown
|
page read and write
|
|
|
|
19118A90000
|
unkown
|
page read and write
|
|
|
|
7FF574E05000
|
unkown
|
page readonly
|
|
|
|
7FF53DCEA000
|
unkown
|
page readonly
|
|
|
|
7FF5CE0B7000
|
unkown
|
page readonly
|
|
|
|
19116C88000
|
unkown
|
page read and write
|
|
|
|
26BB30B0000
|
unkown
|
page read and write
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
176532B6000
|
unkown
|
page read and write
|
|
|
|
1923D66C000
|
unkown
|
page read and write
|
|
|
|
17653261000
|
unkown
|
page read and write
|
|
|
|
7FF574DAE000
|
unkown
|
page readonly
|
|
|
|
7FF5CDFDB000
|
unkown
|
page readonly
|
|
|
|
7FF5CDE58000
|
unkown
|
page readonly
|
|
|
|
19118EDE000
|
unkown
|
page read and write
|
|
|
|
7FF51603A000
|
unkown
|
page readonly
|
|
|
|
19116C94000
|
unkown
|
page read and write
|
|
|
|
3CBF57B000
|
unkown
|
page read and write
|
|
|
|
1764E140000
|
unkown
|
page read and write
|
|
|
|
1B27683A000
|
unkown
|
page read and write
|
|
|
|
7FF5CDFF3000
|
unkown
|
page readonly
|
|
|
|
2AED7F70000
|
unkown
|
page readonly
|
|
|
|
7FF574DBF000
|
unkown
|
page readonly
|
|
|
|
2AED804C000
|
unkown
|
page read and write
|
|
|
|
7FF5B8AF7000
|
unkown
|
page readonly
|
|
|
|
3CBF5FB000
|
unkown
|
page read and write
|
|
|
|
1B27685A000
|
unkown
|
page read and write
|
|
|
|
1B276868000
|
unkown
|
page read and write
|
|
|
|
26BB2C00000
|
unkown
|
page readonly
|
|
|
|
7FF5747F8000
|
unkown
|
page readonly
|
|
|
|
EFC3AFE000
|
unkown
|
page read and write
|
|
|
|
7FF515DE0000
|
unkown
|
page readonly
|
|
|
|
17653124000
|
unkown
|
page readonly
|
|
|
|
7FF56FF43000
|
unkown
|
page readonly
|
|
|
|
1E473060000
|
heap default
|
page read and write
|
|
|
|
7FF5CDDC7000
|
unkown
|
page readonly
|
|
|
|
1B276875000
|
unkown
|
page read and write
|
|
|
|
F09557E000
|
unkown
|
page read and write
|
|
|
|
2AED808A000
|
unkown
|
page read and write
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
19118EC5000
|
unkown
|
page read and write
|
|
|
|
3CBF87B000
|
unkown
|
page read and write
|
|
|
|
1923D600000
|
unkown
|
page read and write
|
|
|
|
7FF56FF26000
|
unkown
|
page readonly
|
|
|
|
7FF550E32000
|
unkown
|
page readonly
|
|
|
|
1911B010000
|
unkown
|
page read and write
|
|
|
|
1764DA90000
|
unkown
|
page read and write
|
|
|
|
298F75F0000
|
unkown
|
page read and write
|
|
|
|
19116CF0000
|
unkown
|
page read and write
|
|
|
|
19118A70000
|
unkown
|
page readonly
|
|
|
|
13DB6713000
|
unkown
|
page read and write
|
|
|
|
7FF550EA6000
|
unkown
|
page readonly
|
|
|
|
1EB35CE0000
|
unkown
|
page readonly
|
|
|
|
7FF5B8AC1000
|
unkown
|
page readonly
|
|
|
|
2AED8200000
|
unkown
|
page readonly
|
|
|
|
19118D00000
|
unkown
|
page read and write
|
|
|
|
17653148000
|
unkown
|
page write copy
|
|
|
|
19116CC4000
|
unkown
|
page read and write
|
|
|
|
19118EF6000
|
unkown
|
page read and write
|
|
|
|
7FF551FAC000
|
unkown
|
page readonly
|
|
|
|
1923D700000
|
unkown
|
page read and write
|
|
|
|
7FF550E89000
|
unkown
|
page readonly
|
|
|
|
1765304E000
|
unkown
|
page read and write
|
|
|
|
1764EB20000
|
unkown
|
page readonly
|
|
|
|
19116C53000
|
unkown
|
page read and write
|
|
|
|
1EB35DB0000
|
unkown
|
page readonly
|
|
|
|
2EDE6FD000
|
unkown
|
page read and write
|
|
|
|
17653150000
|
unkown
|
page read and write
|
|
|
|
7FF550EC5000
|
unkown
|
page readonly
|
|
|
|
7FF570246000
|
unkown
|
page readonly
|
|
|
|
7FF550DAC000
|
unkown
|
page readonly
|
|
|
|
3CBF8FA000
|
unkown
|
page read and write
|
|
|
|
298F763C000
|
unkown
|
page read and write
|
|
|
|
19118DF1000
|
unkown
|
page read and write
|
|
|
|
19116CA9000
|
unkown
|
page read and write
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
19116CB5000
|
unkown
|
page read and write
|
|
|
|
191189F0000
|
unkown
|
page read and write
|
|
|
|
1765324E000
|
unkown
|
page read and write
|
|
|
|
24E3A202000
|
unkown
|
page read and write
|
|
|
|
7FF5C5E4D000
|
unkown
|
page readonly
|
|
|
|
19118ECD000
|
unkown
|
page read and write
|
|
|
|
7FF5B0192000
|
unkown
|
page readonly
|
|
|
|
7FF574DF6000
|
unkown
|
page readonly
|
|
|
|
7FF574E6E000
|
unkown
|
page readonly
|
|
|
|
19118EE4000
|
unkown
|
page read and write
|
|
|
|
7FF52B25D000
|
unkown
|
page readonly
|
|
|
|
7FF53E1FC000
|
unkown
|
page readonly
|
|
|
|
19118D69000
|
unkown
|
page read and write
|
|
|
|
7FF516055000
|
unkown
|
page readonly
|
|
|
|
19116C78000
|
unkown
|
page read and write
|
|
|
|
2EDE4FA000
|
unkown
|
page read and write
|
|
|
|
7FF5AFBEA000
|
unkown
|
page readonly
|
|
|
|
1B276856000
|
unkown
|
page read and write
|
|
|
|
7FF51605F000
|
unkown
|
page readonly
|
|
|
|
7FF5CDEBA000
|
unkown
|
page readonly
|
|
|
|
7FF550E30000
|
unkown
|
page readonly
|
|
|
|
7FF5B027E000
|
unkown
|
page readonly
|
|
|
|
19116C70000
|
unkown
|
page read and write
|
|
|
|
7FF550D0A000
|
unkown
|
page readonly
|
|
|
|
1764EB10000
|
unkown
|
page readonly
|
|
|
|
7FF5702C9000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD2C000
|
unkown
|
page readonly
|
|
|
|
7FF5C5EE1000
|
unkown
|
page readonly
|
|
|
|
1765329D000
|
unkown
|
page read and write
|
|
|
|
7FF551D9E000
|
unkown
|
page readonly
|
|
|
|
298F7430000
|
unkown
|
page readonly
|
|
|
|
19118D64000
|
unkown
|
page read and write
|
|
|
|
1B276864000
|
unkown
|
page read and write
|
|
|
|
19116C74000
|
unkown
|
page read and write
|
|
|
|
7FF5C5E25000
|
unkown
|
page readonly
|
|
|
|
7FF5C5E56000
|
unkown
|
page readonly
|
|
|
|
19116C82000
|
unkown
|
page read and write
|
|
|
|
13DB65C0000
|
unkown
|
page readonly
|
|
|
|
7FF5C5EE9000
|
unkown
|
page readonly
|
|
|
|
7FF570205000
|
unkown
|
page readonly
|
|
|
|
7FF574BFF000
|
unkown
|
page readonly
|
|
|
|
C47D7E000
|
unkown
|
page read and write
|
|
|
|
19116D38000
|
unkown
|
page read and write
|
|
|
|
1764DA71000
|
unkown
|
page read and write
|
|
|
|
19116C70000
|
unkown
|
page read and write
|
|
|
|
19118DF4000
|
unkown
|
page read and write
|
|
|
|
7FF516119000
|
unkown
|
page readonly
|
|
|
|
7FF5B01CF000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A50000
|
unkown
|
page readonly
|
|
|
|
7FF5C5DE2000
|
unkown
|
page readonly
|
|
|
|
19116DBF000
|
unkown
|
page read and write
|
|
|
|
7FF5B8717000
|
unkown
|
page readonly
|
|
|
|
7FF515FEA000
|
unkown
|
page readonly
|
|
|
|
17653061000
|
unkown
|
page read and write
|
|
|
|
7FF570174000
|
unkown
|
page readonly
|
|
|
|
1B277002000
|
unkown
|
page read and write
|
|
|
|
7FF5C5DE0000
|
unkown
|
page readonly
|
|
|
|
1764DA00000
|
unkown
|
page read and write
|
|
|
|
1923D657000
|
unkown
|
page read and write
|
|
|
|
1E474CA0000
|
unkown
|
page readonly
|
|
|
|
7FF5508B8000
|
unkown
|
page readonly
|
|
|
|
7FF52B82F000
|
unkown
|
page readonly
|
|
|
|
19119310000
|
unkown
|
page read and write
|
|
|
|
19119010000
|
unkown
|
page read and write
|
|
|
|
1923D678000
|
unkown
|
page read and write
|
|
|
|
7FF53E267000
|
unkown
|
page readonly
|
|
|
|
2EDE11B000
|
unkown
|
page read and write
|
|
|
|
1764EB00000
|
unkown
|
page readonly
|
|
|
|
19119410000
|
unkown
|
page read and write
|
|
|
|
19118F83000
|
unkown
|
page read and write
|
|
|
|
7FF53E327000
|
unkown
|
page readonly
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
7FF52B884000
|
unkown
|
page readonly
|
|
|
|
176534C0000
|
unkown
|
page readonly
|
|
|
|
2AED8029000
|
unkown
|
page read and write
|
|
|
|
7FF570219000
|
unkown
|
page readonly
|
|
|
|
7FF5CDECC000
|
unkown
|
page readonly
|
|
|
|
298F7670000
|
unkown
|
page read and write
|
|
|
|
1E473213000
|
unkown
|
page read and write
|
|
|
|
7FF5B01AA000
|
unkown
|
page readonly
|
|
|
|
1B276861000
|
unkown
|
page read and write
|
|
|
|
24E399F0000
|
heap default
|
page read and write
|
|
|
|
7FF53E0F0000
|
unkown
|
page readonly
|
|
|
|
19116C78000
|
unkown
|
page read and write
|
|
|
|
F09567E000
|
unkown
|
page read and write
|
|
|
|
1923D66E000
|
unkown
|
page read and write
|
|
|
|
19118D0A000
|
unkown
|
page read and write
|
|
|
|
56ACF7E000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A27000
|
unkown
|
page readonly
|
|
|
|
7FF5C5AB8000
|
unkown
|
page readonly
|
|
|
|
7FF53E306000
|
unkown
|
page readonly
|
|
|
|
7FF5CE0B4000
|
unkown
|
page readonly
|
|
|
|
298F7600000
|
unkown
|
page read and write
|
|
|
|
7FF5701C2000
|
unkown
|
page readonly
|
|
|
|
F09547D000
|
unkown
|
page read and write
|
|
|
|
7FF5C5B9E000
|
unkown
|
page readonly
|
|
|
|
1923D702000
|
unkown
|
page read and write
|
|
|
|
F095A7E000
|
unkown
|
page read and write
|
|
|
|
1B276859000
|
unkown
|
page read and write
|
|
|
|
58CFAFF000
|
unkown
|
page read and write
|
|
|
|
7FF53E2F1000
|
unkown
|
page readonly
|
|
|
|
7FF5B8B59000
|
unkown
|
page readonly
|
|
|
|
19119410000
|
unkown
|
page read and write
|
|
|
|
19116CF1000
|
unkown
|
page read and write
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
7FF551C86000
|
unkown
|
page readonly
|
|
|
|
19116C72000
|
unkown
|
page read and write
|
|
|
|
7FF551F7F000
|
unkown
|
page readonly
|
|
|
|
7FF53DFF3000
|
unkown
|
page readonly
|
|
|
|
2AED8108000
|
unkown
|
page read and write
|
|
|
|
17653180000
|
unkown
|
page read and write
|
|
|
|
7FF515FD1000
|
unkown
|
page readonly
|
|
|
|
C4807B000
|
unkown
|
page read and write
|
|
|
|
2EDE19F000
|
unkown
|
page read and write
|
|
|
|
7FF550ED4000
|
unkown
|
page readonly
|
|
|
|
19118EC7000
|
unkown
|
page read and write
|
|
|
|
1923D713000
|
unkown
|
page read and write
|
|
|
|
EFC35BD000
|
unkown
|
page read and write
|
|
|
|
AB4EA7E000
|
unkown
|
page read and write
|
|
|
|
19118EF7000
|
unkown
|
page read and write
|
|
|
|
7FF551C12000
|
unkown
|
page readonly
|
|
|
|
7FF5B01FC000
|
unkown
|
page readonly
|
|
|
|
19118D06000
|
unkown
|
page read and write
|
|
|
|
7FF550E7F000
|
unkown
|
page readonly
|
|
|
|
26BB2A13000
|
unkown
|
page read and write
|
|
|
|
7FF551F3D000
|
unkown
|
page readonly
|
|
|
|
7FF5B019A000
|
unkown
|
page readonly
|
|
|
|
19118E00000
|
unkown
|
page read and write
|
|
|
|
19116D7A000
|
unkown
|
page read and write
|
|
|
|
7FF5CE008000
|
unkown
|
page readonly
|
|
|
|
19116C88000
|
unkown
|
page read and write
|
|
|
|
7FF5C5CB9000
|
unkown
|
page readonly
|
|
|
|
7FF53E2C5000
|
unkown
|
page readonly
|
|
|
|
7FF551BA2000
|
unkown
|
page readonly
|
|
|
|
7FF5AFF50000
|
unkown
|
page readonly
|
|
|
|
1B27686A000
|
unkown
|
page read and write
|
|
|
|
7FF5AFEF7000
|
unkown
|
page readonly
|
|
|
|
19116C76000
|
unkown
|
page read and write
|
|
|
|
1EB35BE0000
|
heap default
|
page read and write
|
|
|
|
1764DB02000
|
unkown
|
page read and write
|
|
|
|
7FF53E045000
|
unkown
|
page readonly
|
|
|
|
1B276884000
|
unkown
|
page read and write
|
|
|
|
19116D49000
|
unkown
|
page read and write
|
|
|
|
19116C72000
|
unkown
|
page read and write
|
|
|
|
7FF5C5DBA000
|
unkown
|
page readonly
|
|
|
|
7FF5CDE9F000
|
unkown
|
page readonly
|
|
|
|
7FF5CDF8C000
|
unkown
|
page readonly
|
|
|
|
7FF5CDEE0000
|
unkown
|
page readonly
|
|
|
|
19118DF1000
|
unkown
|
page read and write
|
|
|
|
19116C8F000
|
unkown
|
page read and write
|
|
|
|
19118EDE000
|
unkown
|
page read and write
|
|
|
|
1923F4F0000
|
unkown
|
page read and write
|
|
|
|
19118DE9000
|
unkown
|
page read and write
|
|
|
|
7FF574D82000
|
unkown
|
page readonly
|
|
|
|
298F7420000
|
heap default
|
page read and write
|
|
|
|
7FF5B015C000
|
unkown
|
page readonly
|
|
|
|
1EB37630000
|
heap private
|
page read and write
|
|
|
|
24E39A13000
|
unkown
|
page read and write
|
|
|
|
7FF5B0224000
|
unkown
|
page readonly
|
|
|
|
7FF574E79000
|
unkown
|
page readonly
|
|
|
|
7FF5701D6000
|
unkown
|
page readonly
|
|
|
|
1EB37650000
|
unkown
|
page readonly
|
|
|
|
C47E7E000
|
unkown
|
page read and write
|
|
|
|
1764DB13000
|
unkown
|
page read and write
|
|
|
|
1B276800000
|
unkown
|
page read and write
|
|
|
|
7FF515E80000
|
unkown
|
page readonly
|
|
|
|
17653070000
|
unkown
|
page read and write
|
|
|
|
1764EE71000
|
unkown
|
page read and write
|
|
|
|
24E3A150000
|
unkown
|
page read and write
|
|
|
|
2AED8013000
|
unkown
|
page read and write
|
|
|
|
19116C87000
|
unkown
|
page read and write
|
|
|
|
1EB377D0000
|
heap private
|
page read and write
|
|
|
|
19116CE5000
|
unkown
|
page read and write
|
|
|
|
7FF53E0BC000
|
unkown
|
page readonly
|
|
|
|
1EB36140000
|
unkown
|
page readonly
|
|
|
|
7FF574DFC000
|
unkown
|
page readonly
|
|
|
|
7FF5CDDCE000
|
unkown
|
page readonly
|
|
|
|
7FF574DB5000
|
unkown
|
page readonly
|
|
|
|
1764DA76000
|
unkown
|
page read and write
|
|
|
|
1B276842000
|
unkown
|
page read and write
|
|
|
|
1764D9E0000
|
heap default
|
page read and write
|
|
|
|
24E39ED0000
|
unkown
|
page readonly
|
|
|
|
17653223000
|
unkown
|
page read and write
|
|
|
|
19116C3F000
|
unkown
|
page read and write
|
|
|
|
7FF550CBF000
|
unkown
|
page readonly
|
|
|
|
7FF53E37E000
|
unkown
|
page readonly
|
|
|
|
13DB666D000
|
unkown
|
page read and write
|
|
|
|
7FF515D83000
|
unkown
|
page readonly
|
|
|
|
7FF5160B7000
|
unkown
|
page readonly
|
|
|
|
7FF550EB6000
|
unkown
|
page readonly
|
|
|
|
3CBFCFC000
|
unkown
|
page read and write
|
|
|
|
7FF551FD7000
|
unkown
|
page readonly
|
|
|
|
3CBF27A000
|
unkown
|
page read and write
|
|
|
|
1923DAD0000
|
unkown
|
page readonly
|
|
|
|
7FF574B9A000
|
unkown
|
page readonly
|
|
|
|
2D4034B000
|
unkown
|
page read and write
|
|
|
|
1923D678000
|
unkown
|
page read and write
|
|
|
|
19116C84000
|
unkown
|
page read and write
|
|
|
|
7FF5702C9000
|
unkown
|
page readonly
|
|
|
|
7FF5B8775000
|
unkown
|
page readonly
|
|
|
|
1E474BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5CDCA7000
|
unkown
|
page readonly
|
|
|
|
1B276780000
|
unkown
|
page readonly
|
|
|
|
3CBFD79000
|
unkown
|
page read and write
|
|
|
|
17653241000
|
unkown
|
page read and write
|
|
|
|
7FF53E241000
|
unkown
|
page readonly
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
7FF53E0EE000
|
unkown
|
page readonly
|
|
|
|
7FF5CE110000
|
unkown
|
page readonly
|
|
|
|
3CBF2FA000
|
unkown
|
page read and write
|
|
|
|
24E39B13000
|
unkown
|
page read and write
|
|
|
|
19118A70000
|
unkown
|
page read and write
|
|
|
|
7FF53DE93000
|
unkown
|
page readonly
|
|
|
|
7FF53E2D9000
|
unkown
|
page readonly
|
|
|
|
1764E318000
|
unkown
|
page read and write
|
|
|
|
19118D36000
|
unkown
|
page read and write
|
|
|
|
7FF551F32000
|
unkown
|
page readonly
|
|
|
|
7FF574E17000
|
unkown
|
page readonly
|
|
|
|
1B276A00000
|
unkown
|
page readonly
|
|
|
|
19116C87000
|
unkown
|
page read and write
|
|
|
|
7FF53E0AB000
|
unkown
|
page readonly
|
|
|
|
19116CA0000
|
unkown
|
page read and write
|
|
|
|
1B276858000
|
unkown
|
page read and write
|
|
|
|
7FF515F23000
|
unkown
|
page readonly
|
|
|
|
1B276863000
|
unkown
|
page read and write
|
|
|
|
19118D8B000
|
unkown
|
page read and write
|
|
|
|
19119010000
|
unkown
|
page read and write
|
|
|
|
19116E00000
|
unkown
|
page readonly
|
|
|
|
19118D04000
|
unkown
|
page read and write
|
|
|
|
19116CA8000
|
unkown
|
page read and write
|
|
|
|
176532B2000
|
unkown
|
page read and write
|
|
|
|
19118A10000
|
heap private
|
page read and write
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
298F7629000
|
unkown
|
page read and write
|
|
|
|
7FF5C5B97000
|
unkown
|
page readonly
|
|
|
|
19116C9E000
|
unkown
|
page read and write
|
|
|
|
1923D674000
|
unkown
|
page read and write
|
|
|
|
7FF551E47000
|
unkown
|
page readonly
|
|
|
|
7FF5701EA000
|
unkown
|
page readonly
|
|
|
|
7FF574C8D000
|
unkown
|
page readonly
|
|
|
|
1B27687E000
|
unkown
|
page read and write
|
|
|
|
19119010000
|
unkown
|
page read and write
|
|
|
|
19119310000
|
unkown
|
page read and write
|
|
|
|
298F764A000
|
unkown
|
page read and write
|
|
|
|
7FF5CDDE0000
|
unkown
|
page readonly
|
|
|
|
56ACEFD000
|
unkown
|
page read and write
|
|
|
|
7FF5B8ABD000
|
unkown
|
page readonly
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
1EB35BA0000
|
unkown
|
page readonly
|
|
|
|
7FF550F39000
|
unkown
|
page readonly
|
|
|
|
7FF57022D000
|
unkown
|
page readonly
|
|
|
|
7FF5B84C7000
|
unkown
|
page readonly
|
|
|
|
26BB2A02000
|
unkown
|
page read and write
|
|
|
|
19116C76000
|
unkown
|
page read and write
|
|
|
|
7FF5B0097000
|
unkown
|
page readonly
|
|
|
|
17653170000
|
unkown
|
page read and write
|
|
|
|
19118EE7000
|
unkown
|
page read and write
|
|
|
|
19118DF1000
|
unkown
|
page read and write
|
|
|
|
7FF5702C1000
|
unkown
|
page readonly
|
|
|
|
7FF516096000
|
unkown
|
page readonly
|
|
|
|
7FF552030000
|
unkown
|
page readonly
|
|
|
|
13DB7000000
|
unkown
|
page readonly
|
|
|
|
19118DDC000
|
unkown
|
page read and write
|
|
|
|
1911A200000
|
unkown
|
page readonly
|
|
|
|
7FF5C5BA5000
|
unkown
|
page readonly
|
|
|
|
19116CA4000
|
unkown
|
page read and write
|
|
|
|
7FF5C5E87000
|
unkown
|
page readonly
|
|
|
|
1764D9F0000
|
unkown
|
page readonly
|
|
|
|
7FF5B01ED000
|
unkown
|
page readonly
|
|
|
|
19119000000
|
unkown
|
page read and write
|
|
|
|
1764E359000
|
unkown
|
page read and write
|
|
|
|
7FF5CDDD5000
|
unkown
|
page readonly
|
|
|
|
7FF5C5E0A000
|
unkown
|
page readonly
|
|
|
|
1923D678000
|
unkown
|
page read and write
|
|
|
|
58D037F000
|
unkown
|
page read and write
|
|
|
|
2AED7E30000
|
heap private
|
page read and write
|
|
|
|
7FF515D87000
|
unkown
|
page readonly
|
|
|
|
F8653AF000
|
unkown
|
page read and write
|
|
|
|
7FF53E280000
|
unkown
|
page readonly
|
|
|
|
13DB6800000
|
unkown
|
page readonly
|
|
|
|
1764E130000
|
unkown
|
page readonly
|
|
|
|
19116D58000
|
unkown
|
page read and write
|
|
|
|
58CFE7A000
|
unkown
|
page read and write
|
|
|
|
19118EF7000
|
unkown
|
page read and write
|
|
|
|
7FF5B8ACC000
|
unkown
|
page readonly
|
|
|
|
176534A0000
|
unkown
|
page readonly
|
|
|
|
19118DA9000
|
unkown
|
page read and write
|
|
|
|
1B276851000
|
unkown
|
page read and write
|
|
|
|
7FF550D28000
|
unkown
|
page readonly
|
|
|
|
24E39A76000
|
unkown
|
page read and write
|
|
|
|
7FF5CDFC7000
|
unkown
|
page readonly
|
|
|
|
1764E300000
|
unkown
|
page read and write
|
|
|
|
19118EF4000
|
unkown
|
page read and write
|
|
|
|
58D02FE000
|
unkown
|
page read and write
|
|
|
|
7FF57016E000
|
unkown
|
page readonly
|
|
|
|
298F764E000
|
unkown
|
page read and write
|
|
|
|
19116CA3000
|
unkown
|
page read and write
|
|
|
|
7FF551F9D000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A1B000
|
unkown
|
page readonly
|
|
|
|
7FF5B8B51000
|
unkown
|
page readonly
|
|
|
|
7FF5B8713000
|
unkown
|
page readonly
|
|
|
|
EFC3A7B000
|
unkown
|
page read and write
|
|
|
|
19118EA4000
|
unkown
|
page read and write
|
|
|
|
7FF574D72000
|
unkown
|
page readonly
|
|
|
|
19116C6D000
|
unkown
|
page read and write
|
|
|
|
7FF551D66000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A68000
|
unkown
|
page readonly
|
|
|
|
19116C72000
|
unkown
|
page read and write
|
|
|
|
19118EE4000
|
unkown
|
page read and write
|
|
|
|
7FF52B825000
|
unkown
|
page readonly
|
|
|
|
24E39A02000
|
unkown
|
page read and write
|
|
|
|
298F7651000
|
unkown
|
page read and write
|
|
|
|
7FF51608C000
|
unkown
|
page readonly
|
|
|
|
19118ECD000
|
unkown
|
page read and write
|
|
|
|
19118D69000
|
unkown
|
page read and write
|
|
|
|
19119310000
|
unkown
|
page read and write
|
|
|
|
19116CB8000
|
unkown
|
page read and write
|
|
|
|
19116C87000
|
unkown
|
page read and write
|
|
|
|
7FF551DFB000
|
unkown
|
page readonly
|
|
|
|
58CFF7E000
|
unkown
|
page read and write
|
|
|
|
26BB2A5C000
|
unkown
|
page read and write
|
|
|
|
19116C29000
|
unkown
|
page read and write
|
|
|
|
13DB6C60000
|
unkown
|
page readonly
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
1764EEA0000
|
unkown
|
page read and write
|
|
|
|
7FF570255000
|
unkown
|
page readonly
|
|
|
|
7FF5CE119000
|
unkown
|
page readonly
|
|
|
|
17653060000
|
unkown
|
page read and write
|
|
|
|
19116C72000
|
unkown
|
page read and write
|
|
|
|
7FF5701C0000
|
unkown
|
page readonly
|
|
|
|
19118EE6000
|
unkown
|
page read and write
|
|
|
|
7FF5AFEE4000
|
unkown
|
page readonly
|
|
|
|
7FF5CDD2F000
|
unkown
|
page readonly
|
|
|
|
19116D31000
|
unkown
|
page read and write
|
|
|
|
19118DDB000
|
unkown
|
page read and write
|
|
|
|
7FF5CDFFC000
|
unkown
|
page readonly
|
|
|
|
7FF5CDC51000
|
unkown
|
page readonly
|
|
|
|
7FF51604E000
|
unkown
|
page readonly
|
|
|
|
176531E0000
|
unkown
|
page readonly
|
|
|
|
7FF56FF4C000
|
unkown
|
page readonly
|
|
|
|
7FF52B60A000
|
unkown
|
page readonly
|
|
|
|
7FF570272000
|
unkown
|
page readonly
|
|
|
|
191185A0000
|
unkown
|
page read and write
|
|
|
|
1764E302000
|
unkown
|
page read and write
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
1764DAA0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0196000
|
unkown
|
page readonly
|
|
|
|
7FF5CE028000
|
unkown
|
page readonly
|
|
|
|
17653064000
|
unkown
|
page read and write
|
|
|
|
26BB2A3D000
|
unkown
|
page read and write
|
|
|
|
56AD07C000
|
unkown
|
page read and write
|
|
|
|
1E473400000
|
unkown
|
page readonly
|
|
|
|
1B27685E000
|
unkown
|
page read and write
|
|
|
|
7FF57016A000
|
unkown
|
page readonly
|
|
|
|
3CBF77B000
|
unkown
|
page read and write
|
|
|
|
176531A0000
|
unkown
|
page readonly
|
|
|
|
7FF574DE6000
|
unkown
|
page readonly
|
|
|
|
2EDE67A000
|
unkown
|
page read and write
|
|
|
|
24E39A5A000
|
unkown
|
page read and write
|
|
|
|
24E39B02000
|
unkown
|
page read and write
|
|
|
|
1764DA7B000
|
unkown
|
page read and write
|
|
|
|
13DB6600000
|
unkown
|
page read and write
|
|
|
|
13DB6613000
|
unkown
|
page read and write
|
|
|
|
19116C13000
|
unkown
|
page read and write
|
|
|
|
1EB35BB0000
|
heap private
|
page read and write
|
|
|
|
13DB6470000
|
heap private
|
page read and write
|
|
|
|
7FF551F0A000
|
unkown
|
page readonly
|
|
|
|
7FF551F30000
|
unkown
|
page readonly
|
|
|
|
1765314C000
|
unkown
|
page readonly
|
|
|
|
1764EE93000
|
unkown
|
page read and write
|
|
|
|
7FF53E26C000
|
unkown
|
page readonly
|
|
|
|
58D007A000
|
unkown
|
page read and write
|
|
|
|
1B276640000
|
heap private
|
page read and write
|
|
|
|
7FF550EBC000
|
unkown
|
page readonly
|
|
|
|
19118E53000
|
unkown
|
page read and write
|
|
|
|
13DB64D0000
|
heap default
|
page read and write
|
|
|
|
19118AA0000
|
unkown
|
page read and write
|
|
|
|
56ACFFE000
|
unkown
|
page read and write
|
|
|
|
19116C6A000
|
unkown
|
page read and write
|
|
|
|
19118EDE000
|
unkown
|
page read and write
|
|
|
|
19116D13000
|
unkown
|
page read and write
|
|
|
|
7FF574E14000
|
unkown
|
page readonly
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
7FF5701FE000
|
unkown
|
page readonly
|
|
|
|
19118AB0000
|
unkown
|
page read and write
|
|
|
|
19118D6F000
|
unkown
|
page read and write
|
|
|
|
19116CF1000
|
unkown
|
page read and write
|
|
|
|
7FF52B866000
|
unkown
|
page readonly
|
|
|
|
1EB35BB5000
|
heap private
|
page read and write
|
|
|
|
19116DD0000
|
unkown
|
page read and write
|
|
|
|
1EB35BC0000
|
unkown
|
page readonly
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
7FF5B8A95000
|
unkown
|
page readonly
|
|
|
|
19118EE6000
|
unkown
|
page read and write
|
|
|
|
1923D678000
|
unkown
|
page read and write
|
|
|
|
1911A002000
|
unkown
|
page read and write
|
|
|
|
19116C91000
|
unkown
|
page read and write
|
|
|
|
2AED8802000
|
unkown
|
page read and write
|
|
|
|
1B276829000
|
unkown
|
page read and write
|
|
|
|
19118EE6000
|
unkown
|
page read and write
|
|
|
|
1764DA8E000
|
unkown
|
page read and write
|
|
|
|
19118D2F000
|
unkown
|
page read and write
|
|
|
|
7FF5B0289000
|
unkown
|
page readonly
|
|
|
|
7FF5C5E39000
|
unkown
|
page readonly
|
|
|
|
F865B7F000
|
unkown
|
page read and write
|
|
|
|
19116D79000
|
unkown
|
page read and write
|
|
|
|
24E39A6D000
|
unkown
|
page read and write
|
|
|
|
7FF570231000
|
unkown
|
page readonly
|
|
|
|
19118D28000
|
unkown
|
page read and write
|
|
|
|
7FF550ED7000
|
unkown
|
page readonly
|
|
|
|
7FF57496A000
|
unkown
|
page readonly
|
|
|
|
3CBF7FB000
|
unkown
|
page read and write
|
|
|
|
7FF551C21000
|
unkown
|
page readonly
|
|
|
|
19118DF1000
|
unkown
|
page read and write
|
|
|
|
7FF574CB7000
|
unkown
|
page readonly
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
1923D679000
|
unkown
|
page read and write
|
|
|
|
1923D672000
|
unkown
|
page read and write
|
|
|
|
13DB6643000
|
unkown
|
page read and write
|
|
|
|
7FF570236000
|
unkown
|
page readonly
|
|
|
|
3CBFBFD000
|
unkown
|
page read and write
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
7FF574C83000
|
unkown
|
page readonly
|
|
|
|
7FF515D74000
|
unkown
|
page readonly
|
|
|
|
7FF5C5E1E000
|
unkown
|
page readonly
|
|
|
|
7FF53DFE4000
|
unkown
|
page readonly
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
EFC3975000
|
unkown
|
page read and write
|
|
|
|
1B276855000
|
unkown
|
page read and write
|
|
|
|
7FF53E381000
|
unkown
|
page readonly
|
|
|
|
1923D672000
|
unkown
|
page read and write
|
|
|
|
1764E150000
|
unkown
|
page read and write
|
|
|
|
7FF52B8E9000
|
unkown
|
page readonly
|
|
|
|
13DB7340000
|
unkown
|
page readonly
|
|
|
|
3CBFAFA000
|
unkown
|
page read and write
|
|
|
|
7FF52B856000
|
unkown
|
page readonly
|
|
|
|
7FF550E5A000
|
unkown
|
page readonly
|
|
|
|
19116C71000
|
unkown
|
page read and write
|
|
|
|
19116C8F000
|
unkown
|
page read and write
|
|
|
|
24E3A070000
|
unkown
|
page readonly
|
|
|
|
19116C74000
|
unkown
|
page read and write
|
|
|
|
17653215000
|
unkown
|
page read and write
|
|
|
|
7FF53E2CF000
|
unkown
|
page readonly
|
|
|
|
7FF551F6E000
|
unkown
|
page readonly
|
|
|
|
19116C80000
|
unkown
|
page read and write
|
|
|
|
BE7DD7E000
|
unkown
|
page read and write
|
|
|
|
19116C87000
|
unkown
|
page read and write
|
|
|
|
1923D678000
|
unkown
|
page read and write
|
|
|
|
19116B80000
|
unkown
|
page write copy
|
|
|
|
19118E84000
|
unkown
|
page read and write
|
|
|
|
1B276865000
|
unkown
|
page read and write
|
|
|
|
7FF52B875000
|
unkown
|
page readonly
|
|
|
|
7FF52B85C000
|
unkown
|
page readonly
|
|
|
|
7FF5B0198000
|
unkown
|
page readonly
|
|
|
|
1B276846000
|
unkown
|
page read and write
|
|
|
|
7FF53E278000
|
unkown
|
page readonly
|
|
|
|
19116C87000
|
unkown
|
page read and write
|
|
|
|
7FF5C5C4E000
|
unkown
|
page readonly
|
|
|
|
1B276790000
|
unkown
|
page readonly
|
|
|
|
298F7702000
|
unkown
|
page read and write
|
|
|
|
7FF5AFEF3000
|
unkown
|
page readonly
|
|
|
|
13DB66C7000
|
unkown
|
page read and write
|
|
|
|
19118A80000
|
unkown
|
page read and write
|
|
|
|
7FF5C5DCC000
|
unkown
|
page readonly
|
|
|
|
7FF515FCA000
|
unkown
|
page readonly
|
|
|
|
7FF5CE012000
|
unkown
|
page readonly
|
|
|
|
7FF5B013A000
|
unkown
|
page readonly
|
|
|
|
1764DAFF000
|
unkown
|
page read and write
|
|
|
|
298F75E0000
|
unkown
|
page readonly
|
|
|
|
19116CD9000
|
unkown
|
page read and write
|
|
|
|
19118D91000
|
unkown
|
page read and write
|
|
|
|
19119110000
|
unkown
|
page read and write
|
|
|
|
7FF5CDF85000
|
unkown
|
page readonly
|
|
|
|
3CBF1FE000
|
unkown
|
page read and write
|
|
|
|
7FF515FEC000
|
unkown
|
page readonly
|
|
|
|
7FF52B880000
|
unkown
|
page readonly
|
|
|
|
7FF551F89000
|
unkown
|
page readonly
|
|
|
|
2AED8051000
|
unkown
|
page read and write
|
|
|
|
19116CF9000
|
unkown
|
page read and write
|
|
|
|
7FF516119000
|
unkown
|
page readonly
|
|
|
|
7FF551FA6000
|
unkown
|
page readonly
|
|
|
|
7FF5C5EE9000
|
unkown
|
page readonly
|
|
|
|
7FF551F46000
|
unkown
|
page readonly
|
|
|
|
7FF5B8B4E000
|
unkown
|
page readonly
|
|
|
|
19116CFB000
|
unkown
|
page read and write
|
|
|
|
19116C6D000
|
unkown
|
page read and write
|
|
|
|
19116D79000
|
unkown
|
page read and write
|
|
|
|
7FF53DCE6000
|
unkown
|
page readonly
|
|
|
|
1764E060000
|
unkown
|
page readonly
|
|
|
|
1B27683C000
|
unkown
|
page read and write
|
|
|
|
176532B4000
|
unkown
|
page read and write
|
|
|
|
7FF55202E000
|
unkown
|
page readonly
|
|
|
|
19118D47000
|
unkown
|
page read and write
|
|
|
|
7FF57023C000
|
unkown
|
page readonly
|
|
|
|
7FF5CE055000
|
unkown
|
page readonly
|
|
|
|
1EB376B0000
|
heap private
|
page read and write
|
|
|
|
7FF53E282000
|
unkown
|
page readonly
|
|
|
|
1E473229000
|
unkown
|
page read and write
|
|
|
|
7FF550A2A000
|
unkown
|
page readonly
|
|
|
|
19116C71000
|
unkown
|
page read and write
|
|
|
|
7FF53E234000
|
unkown
|
page readonly
|
|
|
|
7FF5C5DD8000
|
unkown
|
page readonly
|
|
|
|
7FF52B25A000
|
unkown
|
page readonly
|
|
|
|
BE7DEFF000
|
unkown
|
page read and write
|
|
|
|
19116C50000
|
unkown
|
page read and write
|
|
|
|
19116C74000
|
unkown
|
page read and write
|
|
|
|
58CFD7B000
|
unkown
|
page read and write
|
|
|
|
7FF550F2E000
|
unkown
|
page readonly
|
|
|
|
19116DD0000
|
unkown
|
page read and write
|
|
|
|
298F7500000
|
unkown
|
page readonly
|
|
|
|
13DB6B90000
|
unkown
|
page readonly
|
|
|
|
C47FFC000
|
unkown
|
page read and write
|
|
|
|
19118F43000
|
unkown
|
page read and write
|
|
|
|
7FF5B01D9000
|
unkown
|
page readonly
|
|
|
|
1E4731D0000
|
unkown
|
page read and write
|
|
|
|
7FF5B0217000
|
unkown
|
page readonly
|
|
|
|
19116C7D000
|
unkown
|
page read and write
|
|
|
|
58D03FF000
|
unkown
|
page read and write
|
|
|
|
19116C82000
|
unkown
|
page read and write
|
|
|
|
26BB2FA0000
|
unkown
|
page readonly
|
|
|
|
1764DA95000
|
unkown
|
page read and write
|
|
|
|
1923D678000
|
unkown
|
page read and write
|
|
|
|
7FF550D77000
|
unkown
|
page readonly
|
|
|
|
7FF551B9E000
|
unkown
|
page readonly
|
|
|
|
17653110000
|
unkown
|
page write copy
|
|
|
|
19119510000
|
unkown
|
page read and write
|
|
|
|
7FF551C6E000
|
unkown
|
page readonly
|
|
|
|
7FF5160A7000
|
unkown
|
page readonly
|
|
|
|
13DB65D0000
|
unkown
|
page read and write
|
|
|
|
19116C00000
|
unkown
|
page read and write
|
|
|
|
3CBFA7B000
|
unkown
|
page read and write
|
|
|
|
19116C71000
|
unkown
|
page read and write
|
|
|
|
17652F30000
|
unkown
|
page read and write
|
|
|
|
7FF53E296000
|
unkown
|
page readonly
|
|
|
|
19116CEF000
|
unkown
|
page read and write
|
|
|
|
24E39A00000
|
unkown
|
page read and write
|
|
|
|
298F767A000
|
unkown
|
page read and write
|
|
|
|
1923D672000
|
unkown
|
page read and write
|
|
|
|
19118EE8000
|
unkown
|
page read and write
|
|
|
|
24E39A67000
|
unkown
|
page read and write
|
|
|
|
7FF52B7F8000
|
unkown
|
page readonly
|
|
|
|
7FF515F08000
|
unkown
|
page readonly
|
|
|
|
7FF53E10F000
|
unkown
|
page readonly
|
|
|
|
7FF5C5E2F000
|
unkown
|
page readonly
|
|
|
|
7FF53E037000
|
unkown
|
page readonly
|
|
|
|
19118DBA000
|
unkown
|
page read and write
|
|
|
|
1923D676000
|
unkown
|
page read and write
|
|
|
|
7FF5160B0000
|
unkown
|
page readonly
|
|
|
|
7FF551FB6000
|
unkown
|
page readonly
|
|
|
|
1B27687B000
|
unkown
|
page read and write
|
|
|
|
19116C84000
|
unkown
|
page read and write
|
|
|
|
26BB2920000
|
heap default
|
page read and write
|
|
|
|
1764DA78000
|
unkown
|
page read and write
|
|
|
|
19118ECD000
|
unkown
|
page read and write
|
|
|
|
7FF5CDCE8000
|
unkown
|
page readonly
|
|
|
|
1923D540000
|
heap private
|
page read and write
|
|
|
|
1764D980000
|
heap private
|
page read and write
|
|
|
|
7FF53E03E000
|
unkown
|
page readonly
|
|
|
|
1923D66D000
|
unkown
|
page read and write
|
|
|
|
19119510000
|
unkown
|
page read and write
|
|
|
|
7FF552039000
|
unkown
|
page readonly
|
|
|
|
7FF51609C000
|
unkown
|
page readonly
|
|
|
|
7FF5CE022000
|
unkown
|
page readonly
|
|
|
|
19116D38000
|
unkown
|
page read and write
|
|
|
|
7FF5B8AD6000
|
unkown
|
page readonly
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
1923D670000
|
unkown
|
page read and write
|
|
|
|
1EB37850000
|
heap private
|
page read and write
|
|
|
|
7FF574DC9000
|
unkown
|
page readonly
|
|
|
|
176532B6000
|
unkown
|
page read and write
|
|
|
|
7FF5B0289000
|
unkown
|
page readonly
|
|
|
|
7FF5B8AF4000
|
unkown
|
page readonly
|
|
|
|
C4847E000
|
unkown
|
page read and write
|
|
|
|
2D406FE000
|
unkown
|
page read and write
|
|
|
|
19119210000
|
unkown
|
page read and write
|
|
|
|
7FF5B0227000
|
unkown
|
page readonly
|
|
|
|
298F7700000
|
unkown
|
page read and write
|
|
|
|
7FF5C5D75000
|
unkown
|
page readonly
|
|
|
|
1E473202000
|
unkown
|
page read and write
|
|
|
|
7FF551C0F000
|
unkown
|
page readonly
|
|
|
|
7FF551F42000
|
unkown
|
page readonly
|
|
|
|
298F7713000
|
unkown
|
page read and write
|
|
There are 1233 hidden memdumps, click here to show them.