Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
tender-1235416393.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$tender-1235416393.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\52A0A488-C2A2-4648-A9AB-A02BC90E2A93
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3F42B8A9.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\517A099F.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8E6E405.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B38ED714.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\B7109242.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\D477B696.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\ADA40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Tue Jun 22 14:58:12 2021, atime=Tue Jun 22 14:58:12 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\tender-1235416393.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:51
2020, mtime=Tue Jun 22 14:58:12 2021, atime=Tue Jun 22 14:58:12 2021, length=183983, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\9EA40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 60080 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\375F21A2.png
|
PNG image data, 521 x 246, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5E32AA01.png
|
PNG image data, 246 x 108, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9268080E.png
|
PNG image data, 934 x 29, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A76CD200.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\ABDBFCB7.png
|
PNG image data, 490 x 30, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D413B.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\51EE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabED1E.tmp
|
Microsoft Cabinet archive data, 60080 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarED1F.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\92EE0000
|
data
|
dropped
|
|
There are 19 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\erty1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\erty2.dll
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s ..\erty1.dll
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s ..\erty2.dll
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 91 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
corazonarquitectura.com
|
192.185.88.195
|
|
|
|
norsecompassgroup.com
|
192.185.112.212
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.88.195
|
corazonarquitectura.com
|
United States
|
|
|
|
192.185.112.212
|
norsecompassgroup.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
{n?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
|n?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A630
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4ACA8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4AE00
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4AEFA
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
f ?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5EA0A
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5EFE6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
y}6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDDB2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE0FC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE225
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EE31E
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
7h6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FA1FA
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FAE0B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 172 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF553372000
|
unkown
|
page readonly
|
|
|
|
28C6BA00000
|
unkown
|
page read and write
|
|
|
|
2773CF00000
|
unkown
|
page read and write
|
|
|
|
7FF57A273000
|
unkown
|
page readonly
|
|
|
|
7FF54E0CA000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5BE3A4000
|
unkown
|
page readonly
|
|
|
|
7FF544F4B000
|
unkown
|
page readonly
|
|
|
|
7FF544D61000
|
unkown
|
page readonly
|
|
|
|
7FF5532D3000
|
unkown
|
page readonly
|
|
|
|
7FF544E43000
|
unkown
|
page readonly
|
|
|
|
18282B7A000
|
unkown
|
page read and write
|
|
|
|
164A6CC0000
|
unkown
|
page readonly
|
|
|
|
71DAE7E000
|
unkown
|
page read and write
|
|
|
|
7FF57A39C000
|
unkown
|
page readonly
|
|
|
|
7FF55B241000
|
unkown
|
page readonly
|
|
|
|
A5CCCFA000
|
unkown
|
page read and write
|
|
|
|
28C694BB000
|
unkown
|
page read and write
|
|
|
|
7FF544F3A000
|
unkown
|
page readonly
|
|
|
|
7FF52885A000
|
unkown
|
page readonly
|
|
|
|
2ACA8B40000
|
unkown
|
page readonly
|
|
|
|
7FF553449000
|
unkown
|
page readonly
|
|
|
|
5AE01FF000
|
unkown
|
page read and write
|
|
|
|
7FF55B0EF000
|
unkown
|
page readonly
|
|
|
|
138044C0000
|
unkown
|
page readonly
|
|
|
|
14EC99E000
|
unkown
|
page read and write
|
|
|
|
18282B7D000
|
unkown
|
page read and write
|
|
|
|
7FF58BEF3000
|
unkown
|
page readonly
|
|
|
|
18282B63000
|
unkown
|
page read and write
|
|
|
|
28C694DF000
|
unkown
|
page read and write
|
|
|
|
28C6B524000
|
unkown
|
page read and write
|
|
|
|
20D24FA000
|
unkown
|
page read and write
|
|
|
|
1EBC7713000
|
unkown
|
page read and write
|
|
|
|
7FF541C4A000
|
unkown
|
page readonly
|
|
|
|
2ACA8200000
|
unkown
|
page readonly
|
|
|
|
20D25FE000
|
unkown
|
page read and write
|
|
|
|
18282200000
|
unkown
|
page read and write
|
|
|
|
20D20AB000
|
unkown
|
page read and write
|
|
|
|
7FF57A251000
|
unkown
|
page readonly
|
|
|
|
18282B22000
|
unkown
|
page read and write
|
|
|
|
28C69600000
|
unkown
|
page readonly
|
|
|
|
7FF553370000
|
unkown
|
page readonly
|
|
|
|
7FF5BE304000
|
unkown
|
page readonly
|
|
|
|
28C69493000
|
unkown
|
page read and write
|
|
|
|
7FF55B437000
|
unkown
|
page readonly
|
|
|
|
18282BA6000
|
unkown
|
page read and write
|
|
|
|
7FF54E0E5000
|
unkown
|
page readonly
|
|
|
|
28C6B2A0000
|
unkown
|
page read and write
|
|
|
|
1DD31115000
|
unkown
|
page read and write
|
|
|
|
28C6B882000
|
unkown
|
page read and write
|
|
|
|
68A4DFF000
|
unkown
|
page read and write
|
|
|
|
7FF544C0F000
|
unkown
|
page readonly
|
|
|
|
138044B0000
|
heap default
|
page read and write
|
|
|
|
7FF57A195000
|
unkown
|
page readonly
|
|
|
|
2621000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
28C6B220000
|
unkown
|
page readonly
|
|
|
|
7FF5BE1A1000
|
unkown
|
page readonly
|
|
|
|
7FF541FBA000
|
unkown
|
page readonly
|
|
|
|
29DF000
|
unkown
|
page readonly
|
|
|
|
7FF58BFF4000
|
unkown
|
page readonly
|
|
|
|
18282308000
|
unkown
|
page read and write
|
|
|
|
7FF55B0B9000
|
unkown
|
page readonly
|
|
|
|
7FF55B41A000
|
unkown
|
page readonly
|
|
|
|
7FF55B496000
|
unkown
|
page readonly
|
|
|
|
2A62000
|
unkown
|
page readonly
|
|
|
|
7FF5287D4000
|
unkown
|
page readonly
|
|
|
|
7FF55B499000
|
unkown
|
page readonly
|
|
|
|
18282B55000
|
unkown
|
page read and write
|
|
|
|
1828224C000
|
unkown
|
page read and write
|
|
|
|
2ACA804B000
|
unkown
|
page read and write
|
|
|
|
18A30613000
|
unkown
|
page read and write
|
|
|
|
7FF52876E000
|
unkown
|
page readonly
|
|
|
|
7FF55B0EA000
|
unkown
|
page readonly
|
|
|
|
1DD310E0000
|
heap default
|
page read and write
|
|
|
|
7FF5BE1C3000
|
unkown
|
page readonly
|
|
|
|
3110000
|
heap private
|
page read and write
|
|
|
|
164A7460000
|
unkown
|
page readonly
|
|
|
|
138045E0000
|
unkown
|
page readonly
|
|
|
|
18282B55000
|
unkown
|
page read and write
|
|
|
|
7FF54DE60000
|
unkown
|
page readonly
|
|
|
|
7FF5BDED5000
|
unkown
|
page readonly
|
|
|
|
18A303A0000
|
heap private
|
page read and write
|
|
|
|
175D5E55000
|
unkown
|
page read and write
|
|
|
|
7FF58BFEA000
|
unkown
|
page readonly
|
|
|
|
28C69463000
|
unkown
|
page read and write
|
|
|
|
2773CC80000
|
unkown
|
page readonly
|
|
|
|
7FF55B50A000
|
unkown
|
page readonly
|
|
|
|
18283002000
|
unkown
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
7FF57A2B6000
|
unkown
|
page readonly
|
|
|
|
7FF55B48E000
|
unkown
|
page readonly
|
|
|
|
7FF5532D8000
|
unkown
|
page readonly
|
|
|
|
30F0000
|
unkown
|
page readonly
|
|
|
|
7FF58BD20000
|
unkown
|
page readonly
|
|
|
|
7FF5BE31F000
|
unkown
|
page readonly
|
|
|
|
13804700000
|
unkown
|
page read and write
|
|
|
|
18282B51000
|
unkown
|
page read and write
|
|
|
|
28C6B2A0000
|
unkown
|
page read and write
|
|
|
|
28C6B2B0000
|
unkown
|
page read and write
|
|
|
|
71DAEFB000
|
unkown
|
page read and write
|
|
|
|
18283054000
|
unkown
|
page read and write
|
|
|
|
7FF5BDF9A000
|
unkown
|
page readonly
|
|
|
|
7FF55B328000
|
unkown
|
page readonly
|
|
|
|
7FF541F75000
|
unkown
|
page readonly
|
|
|
|
7FF57A387000
|
unkown
|
page readonly
|
|
|
|
5A31C7B000
|
unkown
|
page read and write
|
|
|
|
7FF54E1D2000
|
unkown
|
page readonly
|
|
|
|
7FF5533D5000
|
unkown
|
page readonly
|
|
|
|
7FF55B44F000
|
unkown
|
page readonly
|
|
|
|
7FF55343E000
|
unkown
|
page readonly
|
|
|
|
28C69270000
|
heap private
|
page read and write
|
|
|
|
2773CE29000
|
unkown
|
page read and write
|
|
|
|
28C694BD000
|
unkown
|
page read and write
|
|
|
|
18A30410000
|
unkown
|
page readonly
|
|
|
|
7FF544D06000
|
unkown
|
page readonly
|
|
|
|
25AF000
|
unkown
|
page readonly
|
|
|
|
18282B7D000
|
unkown
|
page read and write
|
|
|
|
1380466A000
|
unkown
|
page read and write
|
|
|
|
28C6B57B000
|
unkown
|
page read and write
|
|
|
|
7FF58BF8C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE314000
|
unkown
|
page readonly
|
|
|
|
7FF55B2CE000
|
unkown
|
page readonly
|
|
|
|
2ACA808D000
|
unkown
|
page read and write
|
|
|
|
297A000
|
unkown
|
page readonly
|
|
|
|
28C6B290000
|
unkown
|
page readonly
|
|
|
|
18282B53000
|
unkown
|
page read and write
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
18282B55000
|
unkown
|
page read and write
|
|
|
|
182822B1000
|
unkown
|
page read and write
|
|
|
|
7FF52876B000
|
unkown
|
page readonly
|
|
|
|
7FF5BE260000
|
unkown
|
page readonly
|
|
|
|
7FF57A1A6000
|
unkown
|
page readonly
|
|
|
|
175D5E58000
|
unkown
|
page read and write
|
|
|
|
18282B95000
|
unkown
|
page read and write
|
|
|
|
7FF54E0F7000
|
unkown
|
page readonly
|
|
|
|
1380466A000
|
unkown
|
page read and write
|
|
|
|
71DAF7F000
|
unkown
|
page read and write
|
|
|
|
28C69800000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE2E000
|
unkown
|
page readonly
|
|
|
|
28C6B5F2000
|
unkown
|
page read and write
|
|
|
|
18282B51000
|
unkown
|
page read and write
|
|
|
|
18282910000
|
unkown
|
page readonly
|
|
|
|
7FF55309A000
|
unkown
|
page readonly
|
|
|
|
7FF57A3B4000
|
unkown
|
page readonly
|
|
|
|
7FF52885C000
|
unkown
|
page readonly
|
|
|
|
18282B4B000
|
unkown
|
page read and write
|
|
|
|
175D5F00000
|
unkown
|
page read and write
|
|
|
|
18282B99000
|
unkown
|
page read and write
|
|
|
|
18282B57000
|
unkown
|
page read and write
|
|
|
|
7FF553446000
|
unkown
|
page readonly
|
|
|
|
18282B65000
|
unkown
|
page read and write
|
|
|
|
7FF5BE037000
|
unkown
|
page readonly
|
|
|
|
175D5DE0000
|
unkown
|
page read and write
|
|
|
|
28C69413000
|
unkown
|
page read and write
|
|
|
|
28C6947A000
|
unkown
|
page read and write
|
|
|
|
7FF544E48000
|
unkown
|
page readonly
|
|
|
|
18282B95000
|
unkown
|
page read and write
|
|
|
|
7FF5BE30A000
|
unkown
|
page readonly
|
|
|
|
7FF545032000
|
unkown
|
page readonly
|
|
|
|
7FF55318B000
|
unkown
|
page readonly
|
|
|
|
18282B9E000
|
unkown
|
page read and write
|
|
|
|
7FF55B491000
|
unkown
|
page readonly
|
|
|
|
28C6BC00000
|
unkown
|
page readonly
|
|
|
|
7FF58C091000
|
unkown
|
page readonly
|
|
|
|
224E000
|
unkown
|
page readonly
|
|
|
|
18282870000
|
unkown
|
page read and write
|
|
|
|
182822F5000
|
unkown
|
page read and write
|
|
|
|
7FF58BDF1000
|
unkown
|
page readonly
|
|
|
|
13804450000
|
heap private
|
page read and write
|
|
|
|
28C694DD000
|
unkown
|
page read and write
|
|
|
|
7FF57A462000
|
unkown
|
page readonly
|
|
|
|
7FF528875000
|
unkown
|
page readonly
|
|
|
|
18282313000
|
unkown
|
page read and write
|
|
|
|
28C6B402000
|
unkown
|
page read and write
|
|
|
|
28C6B5F7000
|
unkown
|
page read and write
|
|
|
|
164A6E75000
|
unkown
|
page read and write
|
|
|
|
A5CCAFA000
|
unkown
|
page read and write
|
|
|
|
68A4D7F000
|
unkown
|
page read and write
|
|
|
|
2773CC70000
|
heap default
|
page read and write
|
|
|
|
18282B7C000
|
unkown
|
page read and write
|
|
|
|
5ADFFFE000
|
unkown
|
page read and write
|
|
|
|
299C000
|
unkown
|
page readonly
|
|
|
|
7FF553424000
|
unkown
|
page readonly
|
|
|
|
7FF544F40000
|
unkown
|
page readonly
|
|
|
|
7FF57A191000
|
unkown
|
page readonly
|
|
|
|
1EBC7600000
|
unkown
|
page read and write
|
|
|
|
18282B42000
|
unkown
|
page read and write
|
|
|
|
2773CF02000
|
unkown
|
page read and write
|
|
|
|
28C6B513000
|
unkown
|
page read and write
|
|
|
|
7FF544FB9000
|
unkown
|
page readonly
|
|
|
|
30E0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE336000
|
unkown
|
page readonly
|
|
|
|
3460000
|
heap private
|
page read and write
|
|
|
|
28C6959E000
|
unkown
|
page read and write
|
|
|
|
28C6C110000
|
unkown
|
page read and write
|
|
|
|
18282B22000
|
unkown
|
page read and write
|
|
|
|
28C6B6A4000
|
unkown
|
page read and write
|
|
|
|
28C6B2E0000
|
unkown
|
page readonly
|
|
|
|
7FF542061000
|
unkown
|
page readonly
|
|
|
|
28C6B982000
|
unkown
|
page read and write
|
|
|
|
7FF55B0F7000
|
unkown
|
page readonly
|
|
|
|
2773CF14000
|
unkown
|
page read and write
|
|
|
|
7FF54E15D000
|
unkown
|
page readonly
|
|
|
|
5A31CFE000
|
unkown
|
page read and write
|
|
|
|
2FE6000
|
unkown
|
page read and write
|
|
|
|
26AB000
|
unkown
|
page readonly
|
|
|
|
7FF54DCA6000
|
unkown
|
page readonly
|
|
|
|
7FF57A02C000
|
unkown
|
page readonly
|
|
|
|
164A6E63000
|
unkown
|
page read and write
|
|
|
|
28C6B5AB000
|
unkown
|
page read and write
|
|
|
|
2773CDA0000
|
unkown
|
page readonly
|
|
|
|
7FF54E033000
|
unkown
|
page readonly
|
|
|
|
760000
|
heap default
|
page read and write
|
|
|
|
13804600000
|
unkown
|
page read and write
|
|
|
|
7FF52895A000
|
unkown
|
page readonly
|
|
|
|
1EBC7430000
|
heap private
|
page read and write
|
|
|
|
7FF54E044000
|
unkown
|
page readonly
|
|
|
|
7FF544F45000
|
unkown
|
page readonly
|
|
|
|
28C692D0000
|
heap default
|
page read and write
|
|
|
|
7FF544E3B000
|
unkown
|
page readonly
|
|
|
|
A5CCA79000
|
unkown
|
page read and write
|
|
|
|
5A31F7A000
|
unkown
|
page read and write
|
|
|
|
175D5DC0000
|
unkown
|
page readonly
|
|
|
|
164A6E13000
|
unkown
|
page read and write
|
|
|
|
164A6C50000
|
heap private
|
page read and write
|
|
|
|
2773D000000
|
unkown
|
page readonly
|
|
|
|
2773CD50000
|
unkown
|
page write copy
|
|
|
|
18282B41000
|
unkown
|
page read and write
|
|
|
|
18282B55000
|
unkown
|
page read and write
|
|
|
|
7FF58BFB7000
|
unkown
|
page readonly
|
|
|
|
18282B41000
|
unkown
|
page read and write
|
|
|
|
175D6000000
|
unkown
|
page readonly
|
|
|
|
18282B9E000
|
unkown
|
page read and write
|
|
|
|
7FF5531F1000
|
unkown
|
page readonly
|
|
|
|
28C6B59A000
|
unkown
|
page read and write
|
|
|
|
14EC91E000
|
unkown
|
page read and write
|
|
|
|
7FF5288D8000
|
unkown
|
page readonly
|
|
|
|
25AD000
|
unkown
|
page readonly
|
|
|
|
28C6B802000
|
unkown
|
page read and write
|
|
|
|
A5CCD7B000
|
unkown
|
page read and write
|
|
|
|
18282B7A000
|
unkown
|
page read and write
|
|
|
|
7FF55309F000
|
unkown
|
page readonly
|
|
|
|
7FF54DF83000
|
unkown
|
page readonly
|
|
|
|
7FF57A14F000
|
unkown
|
page readonly
|
|
|
|
175D5E13000
|
unkown
|
page read and write
|
|
|
|
18282270000
|
unkown
|
page read and write
|
|
|
|
18282B22000
|
unkown
|
page read and write
|
|
|
|
578000
|
unkown
|
page read and write
|
|
|
|
175D5E3C000
|
unkown
|
page read and write
|
|
|
|
7FF541FED000
|
unkown
|
page readonly
|
|
|
|
7FF57A375000
|
unkown
|
page readonly
|
|
|
|
2DF0000
|
heap default
|
page read and write
|
|
|
|
18A30530000
|
unkown
|
page readonly
|
|
|
|
7FF5BE294000
|
unkown
|
page readonly
|
|
|
|
175D5E52000
|
unkown
|
page read and write
|
|
|
|
175D5E29000
|
unkown
|
page read and write
|
|
|
|
7FF55B01B000
|
unkown
|
page readonly
|
|
|
|
14ECCF5000
|
unkown
|
page read and write
|
|
|
|
7FF57A1C9000
|
unkown
|
page readonly
|
|
|
|
258C000
|
unkown
|
page readonly
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
5A31DFA000
|
unkown
|
page read and write
|
|
|
|
1EBC7655000
|
unkown
|
page read and write
|
|
|
|
5ADFBF5000
|
unkown
|
page read and write
|
|
|
|
DBBE2FE000
|
unkown
|
page read and write
|
|
|
|
18283000000
|
unkown
|
page read and write
|
|
|
|
7FF54E0E0000
|
unkown
|
page readonly
|
|
|
|
7FF528870000
|
unkown
|
page readonly
|
|
|
|
7FF544FAE000
|
unkown
|
page readonly
|
|
|
|
7FF5285F0000
|
unkown
|
page readonly
|
|
|
|
28C6B5B2000
|
unkown
|
page read and write
|
|
|
|
28C6B528000
|
unkown
|
page read and write
|
|
|
|
A5CD17F000
|
unkown
|
page read and write
|
|
|
|
18282B55000
|
unkown
|
page read and write
|
|
|
|
7FF58BF04000
|
unkown
|
page readonly
|
|
|
|
164A6DA0000
|
unkown
|
page readonly
|
|
|
|
18282930000
|
unkown
|
page readonly
|
|
|
|
7FF55AF37000
|
unkown
|
page readonly
|
|
|
|
5A31EFE000
|
unkown
|
page read and write
|
|
|
|
2ACA804E000
|
unkown
|
page read and write
|
|
|
|
7FF55B49D000
|
unkown
|
page readonly
|
|
|
|
175D5E70000
|
unkown
|
page read and write
|
|
|
|
28C6952D000
|
unkown
|
page read and write
|
|
|
|
4090000
|
unkown
|
page readonly
|
|
|
|
7FF57A3A7000
|
unkown
|
page readonly
|
|
|
|
2995000
|
unkown
|
page readonly
|
|
|
|
A5CC87A000
|
unkown
|
page read and write
|
|
|
|
7FF54E10F000
|
unkown
|
page readonly
|
|
|
|
7FF55B511000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
182822BD000
|
unkown
|
page read and write
|
|
|
|
2773E8A0000
|
unkown
|
page readonly
|
|
|
|
28C694DD000
|
unkown
|
page read and write
|
|
|
|
7FF541FE9000
|
unkown
|
page readonly
|
|
|
|
18282316000
|
unkown
|
page read and write
|
|
|
|
14ED07E000
|
unkown
|
page read and write
|
|
|
|
7FF579ED2000
|
unkown
|
page readonly
|
|
|
|
1DD31090000
|
unkown
|
page read and write
|
|
|
|
2D7B000
|
unkown
|
page read and write
|
|
|
|
7FF58BF8A000
|
unkown
|
page readonly
|
|
|
|
18282229000
|
unkown
|
page read and write
|
|
|
|
28C6B56A000
|
unkown
|
page read and write
|
|
|
|
76A000
|
heap default
|
page read and write
|
|
|
|
29C7000
|
unkown
|
page readonly
|
|
|
|
7FF57A148000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE86000
|
unkown
|
page readonly
|
|
|
|
28C6B653000
|
unkown
|
page read and write
|
|
|
|
18282B74000
|
unkown
|
page read and write
|
|
|
|
2ACA8029000
|
unkown
|
page read and write
|
|
|
|
29CF000
|
unkown
|
page readonly
|
|
|
|
18282B9E000
|
unkown
|
page read and write
|
|
|
|
28C6956D000
|
unkown
|
page read and write
|
|
|
|
164A7000000
|
unkown
|
page readonly
|
|
|
|
25DB000
|
unkown
|
page readonly
|
|
|
|
7FF58BFAB000
|
unkown
|
page readonly
|
|
|
|
28C6B50B000
|
unkown
|
page read and write
|
|
|
|
14ED17E000
|
unkown
|
page read and write
|
|
|
|
18A30655000
|
unkown
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
28C6B942000
|
unkown
|
page read and write
|
|
|
|
2ACA804F000
|
unkown
|
page read and write
|
|
|
|
7FF579BD1000
|
unkown
|
page readonly
|
|
|
|
7FF544F78000
|
unkown
|
page readonly
|
|
|
|
7FF54502A000
|
unkown
|
page readonly
|
|
|
|
2773CE6F000
|
unkown
|
page read and write
|
|
|
|
28C6B783000
|
unkown
|
page read and write
|
|
|
|
7FF55AC7D000
|
unkown
|
page readonly
|
|
|
|
7FF55B223000
|
unkown
|
page readonly
|
|
|
|
7FF553438000
|
unkown
|
page readonly
|
|
|
|
18282950000
|
unkown
|
page readonly
|
|
|
|
175D5F13000
|
unkown
|
page read and write
|
|
|
|
71DAAAB000
|
unkown
|
page read and write
|
|
|
|
28C694D9000
|
unkown
|
page read and write
|
|
|
|
7FF54D8E7000
|
unkown
|
page readonly
|
|
|
|
7FF58BFA5000
|
unkown
|
page readonly
|
|
|
|
360000
|
unkown
|
page readonly
|
|
|
|
18A30629000
|
unkown
|
page read and write
|
|
|
|
5ADFDF7000
|
unkown
|
page read and write
|
|
|
|
1EBC7700000
|
unkown
|
page read and write
|
|
|
|
7FF58BE43000
|
unkown
|
page readonly
|
|
|
|
2ACA8088000
|
unkown
|
page read and write
|
|
|
|
18282B45000
|
unkown
|
page read and write
|
|
|
|
7FF54E0DA000
|
unkown
|
page readonly
|
|
|
|
A5CC6FE000
|
unkown
|
page read and write
|
|
|
|
7FF5532B1000
|
unkown
|
page readonly
|
|
|
|
7FF57A39F000
|
unkown
|
page readonly
|
|
|
|
7FF528954000
|
unkown
|
page readonly
|
|
|
|
28C6B900000
|
unkown
|
page read and write
|
|
|
|
28C6948E000
|
unkown
|
page read and write
|
|
|
|
A5CCB7A000
|
unkown
|
page read and write
|
|
|
|
28C6B842000
|
unkown
|
page read and write
|
|
|
|
7FF55341A000
|
unkown
|
page readonly
|
|
|
|
18282B31000
|
unkown
|
page read and write
|
|
|
|
29F2000
|
unkown
|
page readonly
|
|
|
|
2773CE6B000
|
unkown
|
page read and write
|
|
|
|
2ACA8800000
|
unkown
|
page readonly
|
|
|
|
28C69487000
|
unkown
|
page read and write
|
|
|
|
157E07E000
|
unkown
|
page read and write
|
|
|
|
1828224A000
|
unkown
|
page read and write
|
|
|
|
18282B84000
|
unkown
|
page read and write
|
|
|
|
7FF55B488000
|
unkown
|
page readonly
|
|
|
|
18282930000
|
unkown
|
page read and write
|
|
|
|
7FF55B141000
|
unkown
|
page readonly
|
|
|
|
7FF57A310000
|
unkown
|
page readonly
|
|
|
|
7FF55B168000
|
unkown
|
page readonly
|
|
|
|
7FF58C00E000
|
unkown
|
page readonly
|
|
|
|
28C6C410000
|
unkown
|
page read and write
|
|
|
|
7FF58BE9E000
|
unkown
|
page readonly
|
|
|
|
28C6BA02000
|
unkown
|
page read and write
|
|
|
|
18282120000
|
unkown
|
page readonly
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
2A68000
|
unkown
|
page readonly
|
|
|
|
1EBC7702000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
7FF54E14E000
|
unkown
|
page readonly
|
|
|
|
18282B41000
|
unkown
|
page read and write
|
|
|
|
18A30702000
|
unkown
|
page read and write
|
|
|
|
1DD312B0000
|
unkown
|
page readonly
|
|
|
|
13805FA0000
|
unkown
|
page read and write
|
|
|
|
7FF57A3E9000
|
unkown
|
page readonly
|
|
|
|
13804800000
|
unkown
|
page readonly
|
|
|
|
7FF5BE339000
|
unkown
|
page readonly
|
|
|
|
7FF5BE3AA000
|
unkown
|
page readonly
|
|
|
|
18282A02000
|
unkown
|
page read and write
|
|
|
|
18282B99000
|
unkown
|
page read and write
|
|
|
|
ECDC9FF000
|
unkown
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5288E9000
|
unkown
|
page readonly
|
|
|
|
7FF57A3E6000
|
unkown
|
page readonly
|
|
|
|
7FF541FD8000
|
unkown
|
page readonly
|
|
|
|
5ADF7AB000
|
unkown
|
page read and write
|
|
|
|
7FF5BE101000
|
unkown
|
page readonly
|
|
|
|
18282B78000
|
unkown
|
page read and write
|
|
|
|
28C6B942000
|
unkown
|
page read and write
|
|
|
|
164A6E4B000
|
unkown
|
page read and write
|
|
|
|
7FF52886E000
|
unkown
|
page readonly
|
|
|
|
7FF544EE0000
|
unkown
|
page readonly
|
|
|
|
DBBE3FA000
|
unkown
|
page read and write
|
|
|
|
7FF57A1C1000
|
unkown
|
page readonly
|
|
|
|
28C6B783000
|
unkown
|
page read and write
|
|
|
|
7FF57A37B000
|
unkown
|
page readonly
|
|
|
|
7FF58BB66000
|
unkown
|
page readonly
|
|
|
|
7FF55B31B000
|
unkown
|
page readonly
|
|
|
|
5ADFEF7000
|
unkown
|
page read and write
|
|
|
|
7FF55AF2F000
|
unkown
|
page readonly
|
|
|
|
2773CE13000
|
unkown
|
page read and write
|
|
|
|
7FF5287DC000
|
unkown
|
page readonly
|
|
|
|
1DD3110F000
|
unkown
|
page read and write
|
|
|
|
18282B79000
|
unkown
|
page read and write
|
|
|
|
18282B22000
|
unkown
|
page read and write
|
|
|
|
7FF57A3CE000
|
unkown
|
page readonly
|
|
|
|
175D60D0000
|
unkown
|
page readonly
|
|
|
|
781000
|
heap default
|
page read and write
|
|
|
|
28C6C310000
|
unkown
|
page read and write
|
|
|
|
7FF57A12B000
|
unkown
|
page readonly
|
|
|
|
A5CCDFB000
|
unkown
|
page read and write
|
|
|
|
18A30641000
|
unkown
|
page read and write
|
|
|
|
7FF5287C3000
|
unkown
|
page readonly
|
|
|
|
7FF55B44C000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2CB000
|
unkown
|
page readonly
|
|
|
|
7FF52807D000
|
unkown
|
page readonly
|
|
|
|
7FF57A33F000
|
unkown
|
page readonly
|
|
|
|
7FF58C008000
|
unkown
|
page readonly
|
|
|
|
7FF55B41E000
|
unkown
|
page readonly
|
|
|
|
28C694EE000
|
unkown
|
page read and write
|
|
|
|
7FF55B2D9000
|
unkown
|
page readonly
|
|
|
|
6F0000
|
heap default
|
page read and write
|
|
|
|
7FF541FDE000
|
unkown
|
page readonly
|
|
|
|
175D5E4A000
|
unkown
|
page read and write
|
|
|
|
257C000
|
unkown
|
page readonly
|
|
|
|
1DD3110F000
|
unkown
|
page read and write
|
|
|
|
7FF55342E000
|
unkown
|
page readonly
|
|
|
|
7FF5BDC17000
|
unkown
|
page readonly
|
|
|
|
28C694BB000
|
unkown
|
page read and write
|
|
|
|
7FF5BE086000
|
unkown
|
page readonly
|
|
|
|
1380466A000
|
unkown
|
page read and write
|
|
|
|
29DA000
|
unkown
|
page readonly
|
|
|
|
28C694F2000
|
unkown
|
page read and write
|
|
|
|
2ACA8102000
|
unkown
|
page read and write
|
|
|
|
1DD31114000
|
unkown
|
page read and write
|
|
|
|
ECDC1FE000
|
unkown
|
page read and write
|
|
|
|
2549000
|
unkown
|
page readonly
|
|
|
|
68A4E79000
|
unkown
|
page read and write
|
|
|
|
7FF5286C1000
|
unkown
|
page readonly
|
|
|
|
7FF553414000
|
unkown
|
page readonly
|
|
|
|
2ACA8051000
|
unkown
|
page read and write
|
|
|
|
28C694C9000
|
unkown
|
page read and write
|
|
|
|
7FF55B1E6000
|
unkown
|
page readonly
|
|
|
|
7FF5288ED000
|
unkown
|
page readonly
|
|
|
|
18282B51000
|
unkown
|
page read and write
|
|
|
|
28C6AEC0000
|
unkown
|
page readonly
|
|
|
|
2773CE6D000
|
unkown
|
page read and write
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
2ACA804A000
|
unkown
|
page read and write
|
|
|
|
28C6B533000
|
unkown
|
page read and write
|
|
|
|
7FF55B279000
|
unkown
|
page readonly
|
|
|
|
7FF55B504000
|
unkown
|
page readonly
|
|
|
|
7FF55B2AA000
|
unkown
|
page readonly
|
|
|
|
7FF5BE0F4000
|
unkown
|
page readonly
|
|
|
|
18282B49000
|
unkown
|
page read and write
|
|
|
|
7FF54E117000
|
unkown
|
page readonly
|
|
|
|
2A54000
|
unkown
|
page readonly
|
|
|
|
28C6B783000
|
unkown
|
page read and write
|
|
|
|
7FF54DCA0000
|
unkown
|
page readonly
|
|
|
|
20D257E000
|
unkown
|
page read and write
|
|
|
|
13804602000
|
unkown
|
page read and write
|
|
|
|
7FF57A45A000
|
unkown
|
page readonly
|
|
|
|
28C694DD000
|
unkown
|
page read and write
|
|
|
|
29AC000
|
unkown
|
page readonly
|
|
|
|
18282B78000
|
unkown
|
page read and write
|
|
|
|
2FE2000
|
unkown
|
page read and write
|
|
|
|
7FF55B026000
|
unkown
|
page readonly
|
|
|
|
7FF55AC81000
|
unkown
|
page readonly
|
|
|
|
164A6D90000
|
unkown
|
page readonly
|
|
|
|
7FF58BE9B000
|
unkown
|
page readonly
|
|
|
|
7FF544FB1000
|
unkown
|
page readonly
|
|
|
|
25A7000
|
unkown
|
page readonly
|
|
|
|
7FF58BEED000
|
unkown
|
page readonly
|
|
|
|
7FF5BE262000
|
unkown
|
page readonly
|
|
|
|
2ACA8046000
|
unkown
|
page read and write
|
|
|
|
18282B73000
|
unkown
|
page read and write
|
|
|
|
14ECDFB000
|
unkown
|
page read and write
|
|
|
|
2773CE56000
|
unkown
|
page read and write
|
|
|
|
7FF5BE28F000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5285E7000
|
unkown
|
page readonly
|
|
|
|
2ACA803C000
|
unkown
|
page read and write
|
|
|
|
7FF57A3BA000
|
unkown
|
page readonly
|
|
|
|
1DD310F6000
|
heap default
|
page read and write
|
|
|
|
28C6B2D0000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2C5000
|
unkown
|
page readonly
|
|
|
|
7FF528436000
|
unkown
|
page readonly
|
|
|
|
7FF5BE16A000
|
unkown
|
page readonly
|
|
|
|
7FF52886A000
|
unkown
|
page readonly
|
|
|
|
18282B99000
|
unkown
|
page read and write
|
|
|
|
28C6C110000
|
unkown
|
page read and write
|
|
|
|
28C6951C000
|
unkown
|
page read and write
|
|
|
|
18282B15000
|
unkown
|
page read and write
|
|
|
|
2ACA8000000
|
unkown
|
page read and write
|
|
|
|
7FF5533DB000
|
unkown
|
page readonly
|
|
|
|
28C694BC000
|
unkown
|
page read and write
|
|
|
|
164A6E9C000
|
unkown
|
page read and write
|
|
|
|
18282400000
|
unkown
|
page readonly
|
|
|
|
18282B79000
|
unkown
|
page read and write
|
|
|
|
7FF57A370000
|
unkown
|
page readonly
|
|
|
|
7FF54E0DE000
|
unkown
|
page readonly
|
|
|
|
71DAFFA000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
28C6948B000
|
unkown
|
page read and write
|
|
|
|
164A6F00000
|
unkown
|
page read and write
|
|
|
|
7FF5BE0C0000
|
unkown
|
page readonly
|
|
|
|
182822E6000
|
unkown
|
page read and write
|
|
|
|
7FF5287BD000
|
unkown
|
page readonly
|
|
|
|
18282249000
|
unkown
|
page read and write
|
|
|
|
7FF58BF9E000
|
unkown
|
page readonly
|
|
|
|
7FF58BE81000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
7FF57A312000
|
unkown
|
page readonly
|
|
|
|
18282B79000
|
unkown
|
page read and write
|
|
|
|
2ACA8053000
|
unkown
|
page read and write
|
|
|
|
7FF55B277000
|
unkown
|
page readonly
|
|
|
|
18282B9C000
|
unkown
|
page read and write
|
|
|
|
7FF55B323000
|
unkown
|
page readonly
|
|
|
|
1DD310F1000
|
unkown
|
page read and write
|
|
|
|
7FF5BE28B000
|
unkown
|
page readonly
|
|
|
|
28C6B600000
|
unkown
|
page read and write
|
|
|
|
13804590000
|
unkown
|
page write copy
|
|
|
|
1828224F000
|
unkown
|
page read and write
|
|
|
|
7FF5BE213000
|
unkown
|
page readonly
|
|
|
|
28C6C210000
|
unkown
|
page read and write
|
|
|
|
ECDC67B000
|
unkown
|
page read and write
|
|
|
|
7FF54DFDB000
|
unkown
|
page readonly
|
|
|
|
7FF55B28C000
|
unkown
|
page readonly
|
|
|
|
18282B7A000
|
unkown
|
page read and write
|
|
|
|
A5CCBFB000
|
unkown
|
page read and write
|
|
|
|
266E000
|
unkown
|
page readonly
|
|
|
|
7FF5BE20D000
|
unkown
|
page readonly
|
|
|
|
7FF55B3C2000
|
unkown
|
page readonly
|
|
|
|
28C6B51B000
|
unkown
|
page read and write
|
|
|
|
7FF54DE57000
|
unkown
|
page readonly
|
|
|
|
18282B00000
|
unkown
|
page read and write
|
|
|
|
A5CCE7B000
|
unkown
|
page read and write
|
|
|
|
7FF545024000
|
unkown
|
page readonly
|
|
|
|
7FF58C08A000
|
unkown
|
page readonly
|
|
|
|
7FF5BE22C000
|
unkown
|
page readonly
|
|
|
|
29C000
|
unkown
|
page read and write
|
|
|
|
2773CC10000
|
heap private
|
page read and write
|
|
|
|
2773E7A0000
|
unkown
|
page read and write
|
|
|
|
7FF55B25A000
|
unkown
|
page readonly
|
|
|
|
28C6B5C4000
|
unkown
|
page read and write
|
|
|
|
7FF58B7AD000
|
unkown
|
page readonly
|
|
|
|
1380463F000
|
unkown
|
page read and write
|
|
|
|
28C69466000
|
unkown
|
page read and write
|
|
|
|
28C6B557000
|
unkown
|
page read and write
|
|
|
|
29FB000
|
unkown
|
page readonly
|
|
|
|
7FF55B26B000
|
unkown
|
page readonly
|
|
|
|
18282B78000
|
unkown
|
page read and write
|
|
|
|
28C69461000
|
unkown
|
page read and write
|
|
|
|
18282B9C000
|
unkown
|
page read and write
|
|
|
|
2A80000
|
unkown
|
page readonly
|
|
|
|
164A7602000
|
unkown
|
page read and write
|
|
|
|
20D2479000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2EC000
|
unkown
|
page readonly
|
|
|
|
25A5000
|
unkown
|
page readonly
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
7FF544F6F000
|
unkown
|
page readonly
|
|
|
|
28C6B2A0000
|
unkown
|
page read and write
|
|
|
|
18282B47000
|
unkown
|
page read and write
|
|
|
|
1EBC7490000
|
heap default
|
page read and write
|
|
|
|
2653000
|
unkown
|
page readonly
|
|
|
|
28C6C010000
|
unkown
|
page read and write
|
|
|
|
7FF5534C1000
|
unkown
|
page readonly
|
|
|
|
157DAFE000
|
unkown
|
page read and write
|
|
|
|
7FF544EE2000
|
unkown
|
page readonly
|
|
|
|
2ACA8113000
|
unkown
|
page read and write
|
|
|
|
2590000
|
unkown
|
page readonly
|
|
|
|
2773CE6D000
|
unkown
|
page read and write
|
|
|
|
18282B95000
|
unkown
|
page read and write
|
|
|
|
7FF553441000
|
unkown
|
page readonly
|
|
|
|
7FF5447A1000
|
unkown
|
page readonly
|
|
|
|
2ACA8013000
|
unkown
|
page read and write
|
|
|
|
7FF57A3DE000
|
unkown
|
page readonly
|
|
|
|
7FF55B2BE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2C0000
|
unkown
|
page readonly
|
|
|
|
228B000
|
unkown
|
page readonly
|
|
|
|
255A000
|
unkown
|
page readonly
|
|
|
|
28C6B230000
|
heap private
|
page read and write
|
|
|
|
18282B44000
|
unkown
|
page read and write
|
|
|
|
28C6B51C000
|
unkown
|
page read and write
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
28C6B743000
|
unkown
|
page read and write
|
|
|
|
28C69429000
|
unkown
|
page read and write
|
|
|
|
18282930000
|
unkown
|
page read and write
|
|
|
|
7FF55B46A000
|
unkown
|
page readonly
|
|
|
|
13804629000
|
unkown
|
page read and write
|
|
|
|
7FF528962000
|
unkown
|
page readonly
|
|
|
|
18282B51000
|
unkown
|
page read and write
|
|
|
|
7FF55B298000
|
unkown
|
page readonly
|
|
|
|
25D2000
|
unkown
|
page readonly
|
|
|
|
28C6B982000
|
unkown
|
page read and write
|
|
|
|
164A6E50000
|
unkown
|
page read and write
|
|
|
|
7FF5BDC13000
|
unkown
|
page readonly
|
|
|
|
7FF55B351000
|
unkown
|
page readonly
|
|
|
|
175D5E8C000
|
unkown
|
page read and write
|
|
|
|
7FF57A3E1000
|
unkown
|
page readonly
|
|
|
|
7FF5BDED7000
|
unkown
|
page readonly
|
|
|
|
28C6B2A0000
|
unkown
|
page read and write
|
|
|
|
7FF55B163000
|
unkown
|
page readonly
|
|
|
|
182822C4000
|
unkown
|
page read and write
|
|
|
|
7FF5BE3B1000
|
unkown
|
page readonly
|
|
|
|
18282860000
|
unkown
|
page readonly
|
|
|
|
175D6602000
|
unkown
|
page read and write
|
|
|
|
18283200000
|
unkown
|
page readonly
|
|
|
|
2D3C000
|
unkown
|
page read and write
|
|
|
|
7FF55B2D1000
|
unkown
|
page readonly
|
|
|
|
164A6E2D000
|
unkown
|
page read and write
|
|
|
|
175D5DD0000
|
unkown
|
page readonly
|
|
|
|
1EBC7602000
|
unkown
|
page read and write
|
|
|
|
7FF55B2C8000
|
unkown
|
page readonly
|
|
|
|
28C6B700000
|
unkown
|
page read and write
|
|
|
|
164A7800000
|
unkown
|
page readonly
|
|
|
|
29A3000
|
unkown
|
page readonly
|
|
|
|
18282B84000
|
unkown
|
page read and write
|
|
|
|
29CD000
|
unkown
|
page readonly
|
|
|
|
28C6B5C8000
|
unkown
|
page read and write
|
|
|
|
18282B30000
|
unkown
|
page read and write
|
|
|
|
29F6000
|
unkown
|
page readonly
|
|
|
|
5AE02FA000
|
unkown
|
page read and write
|
|
|
|
28C6B58A000
|
unkown
|
page read and write
|
|
|
|
7FF54DF31000
|
unkown
|
page readonly
|
|
|
|
600000
|
unkown
|
page readonly
|
|
|
|
28C6B5EC000
|
unkown
|
page read and write
|
|
|
|
164A6E52000
|
unkown
|
page read and write
|
|
|
|
1EBC90A0000
|
unkown
|
page readonly
|
|
|
|
DBBE27B000
|
unkown
|
page read and write
|
|
|
|
41D0000
|
heap private
|
page read and write
|
|
|
|
28C6B508000
|
unkown
|
page read and write
|
|
|
|
68A4EFE000
|
unkown
|
page read and write
|
|
|
|
29C5000
|
unkown
|
page readonly
|
|
|
|
A5CC7FA000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2AA000
|
unkown
|
page readonly
|
|
|
|
7FF5BE328000
|
unkown
|
page readonly
|
|
|
|
28C694DE000
|
unkown
|
page read and write
|
|
|
|
18282B79000
|
unkown
|
page read and write
|
|
|
|
5AE00FA000
|
unkown
|
page read and write
|
|
|
|
182821F0000
|
unkown
|
page readonly
|
|
|
|
28C6B56D000
|
unkown
|
page read and write
|
|
|
|
175D5DB0000
|
heap default
|
page read and write
|
|
|
|
7FF54E10C000
|
unkown
|
page readonly
|
|
|
|
7FF5534BA000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2EF000
|
unkown
|
page readonly
|
|
|
|
18282253000
|
unkown
|
page read and write
|
|
|
|
18282B41000
|
unkown
|
page read and write
|
|
|
|
18282B99000
|
unkown
|
page read and write
|
|
|
|
18282B47000
|
unkown
|
page read and write
|
|
|
|
18282B22000
|
unkown
|
page read and write
|
|
|
|
2773CE00000
|
unkown
|
page read and write
|
|
|
|
1EBC8FA0000
|
unkown
|
page read and write
|
|
|
|
A5CCEFD000
|
unkown
|
page read and write
|
|
|
|
2634000
|
unkown
|
page readonly
|
|
|
|
18282302000
|
unkown
|
page read and write
|
|
|
|
18282B69000
|
unkown
|
page read and write
|
|
|
|
7FF552C2D000
|
unkown
|
page readonly
|
|
|
|
7FF55AF2A000
|
unkown
|
page readonly
|
|
|
|
28C695A0000
|
unkown
|
page read and write
|
|
|
|
182822E9000
|
unkown
|
page read and write
|
|
|
|
7FF55B301000
|
unkown
|
page readonly
|
|
|
|
2648000
|
unkown
|
page readonly
|
|
|
|
7FF55AAC1000
|
unkown
|
page readonly
|
|
|
|
7FF528887000
|
unkown
|
page readonly
|
|
|
|
7FF55B352000
|
unkown
|
page readonly
|
|
|
|
2773CE40000
|
unkown
|
page read and write
|
|
|
|
164A6CB0000
|
heap default
|
page read and write
|
|
|
|
7FF544F03000
|
unkown
|
page readonly
|
|
|
|
28C6948B000
|
unkown
|
page read and write
|
|
|
|
18282B80000
|
unkown
|
page read and write
|
|
|
|
2ACA7FF0000
|
unkown
|
page read and write
|
|
|
|
18282B62000
|
unkown
|
page read and write
|
|
|
|
7FF54E13F000
|
unkown
|
page readonly
|
|
|
|
28C6B300000
|
unkown
|
page readonly
|
|
|
|
DBBE4FF000
|
unkown
|
page read and write
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
157DD7B000
|
unkown
|
page read and write
|
|
|
|
28C6C310000
|
unkown
|
page read and write
|
|
|
|
29D3000
|
unkown
|
page readonly
|
|
|
|
7FF544F84000
|
unkown
|
page readonly
|
|
|
|
164A6E2A000
|
unkown
|
page read and write
|
|
|
|
18282B42000
|
unkown
|
page read and write
|
|
|
|
2ACA8049000
|
unkown
|
page read and write
|
|
|
|
28C694A0000
|
unkown
|
page read and write
|
|
|
|
7FF552C31000
|
unkown
|
page readonly
|
|
|
|
7FF57A333000
|
unkown
|
page readonly
|
|
|
|
7FF5288BA000
|
unkown
|
page readonly
|
|
|
|
A5CC9FA000
|
unkown
|
page read and write
|
|
|
|
18282B51000
|
unkown
|
page read and write
|
|
|
|
7FF55B2D6000
|
unkown
|
page readonly
|
|
|
|
28C6955D000
|
unkown
|
page read and write
|
|
|
|
164A6EA0000
|
unkown
|
page read and write
|
|
|
|
254C000
|
unkown
|
page readonly
|
|
|
|
7FF57A302000
|
unkown
|
page readonly
|
|
|
|
28C6C010000
|
unkown
|
page read and write
|
|
|
|
18282B41000
|
unkown
|
page read and write
|
|
|
|
175D5E00000
|
unkown
|
page read and write
|
|
|
|
25BA000
|
unkown
|
page readonly
|
|
|
|
7FF5BE1C8000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE95000
|
unkown
|
page readonly
|
|
|
|
7FF54E1D1000
|
unkown
|
page readonly
|
|
|
|
175D5E4E000
|
unkown
|
page read and write
|
|
|
|
7FF55B265000
|
unkown
|
page readonly
|
|
|
|
7FF544F57000
|
unkown
|
page readonly
|
|
|
|
18282B99000
|
unkown
|
page read and write
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
7FF54E04C000
|
unkown
|
page readonly
|
|
|
|
7FF55B464000
|
unkown
|
page readonly
|
|
|
|
7FF57A344000
|
unkown
|
page readonly
|
|
|
|
18282B97000
|
unkown
|
page read and write
|
|
|
|
7FF55B25E000
|
unkown
|
page readonly
|
|
|
|
7FF57A36A000
|
unkown
|
page readonly
|
|
|
|
7FF57A278000
|
unkown
|
page readonly
|
|
|
|
28A0000
|
unkown
|
page readonly
|
|
|
|
2ACA8064000
|
unkown
|
page read and write
|
|
|
|
20D21AF000
|
unkown
|
page read and write
|
|
|
|
18282B47000
|
unkown
|
page read and write
|
|
|
|
28C6C000000
|
unkown
|
page read and write
|
|
|
|
18282B9A000
|
unkown
|
page read and write
|
|
|
|
68A4C7A000
|
unkown
|
page read and write
|
|
|
|
7FF58BB75000
|
unkown
|
page readonly
|
|
|
|
157DF7F000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page readonly
|
|
|
|
5ADFAFE000
|
unkown
|
page read and write
|
|
|
|
7FF541F9F000
|
unkown
|
page readonly
|
|
|
|
18282B73000
|
unkown
|
page read and write
|
|
|
|
7FF528713000
|
unkown
|
page readonly
|
|
|
|
18A30800000
|
unkown
|
page readonly
|
|
|
|
7FF553196000
|
unkown
|
page readonly
|
|
|
|
7FF55B42B000
|
unkown
|
page readonly
|
|
|
|
7FF55B081000
|
unkown
|
page readonly
|
|
|
|
7FF5BE040000
|
unkown
|
page readonly
|
|
|
|
28C694C9000
|
unkown
|
page read and write
|
|
|
|
7FF58BFA0000
|
unkown
|
page readonly
|
|
|
|
2A70000
|
heap private
|
page read and write
|
|
|
|
157DB7E000
|
unkown
|
page read and write
|
|
|
|
7FF5BDAC7000
|
unkown
|
page readonly
|
|
|
|
18282B48000
|
unkown
|
page read and write
|
|
|
|
28C6B800000
|
unkown
|
page read and write
|
|
|
|
28C6B526000
|
unkown
|
page read and write
|
|
|
|
7FF541FB4000
|
unkown
|
page readonly
|
|
|
|
7FF579BCD000
|
unkown
|
page readonly
|
|
|
|
4A80000
|
unkown
|
page readonly
|
|
|
|
18282110000
|
heap default
|
page read and write
|
|
|
|
28C6B55F000
|
unkown
|
page read and write
|
|
|
|
7FF579C72000
|
unkown
|
page readonly
|
|
|
|
18282B96000
|
unkown
|
page read and write
|
|
|
|
18282B67000
|
unkown
|
page read and write
|
|
|
|
175D5E49000
|
unkown
|
page read and write
|
|
|
|
13804613000
|
unkown
|
page read and write
|
|
|
|
1EBC7800000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE32000
|
unkown
|
page readonly
|
|
|
|
7FF55B245000
|
unkown
|
page readonly
|
|
|
|
1380466A000
|
unkown
|
page read and write
|
|
|
|
2575000
|
unkown
|
page readonly
|
|
|
|
18282B78000
|
unkown
|
page read and write
|
|
|
|
A5CC8FF000
|
unkown
|
page read and write
|
|
|
|
5A31E7B000
|
unkown
|
page read and write
|
|
|
|
7FF5534B4000
|
unkown
|
page readonly
|
|
|
|
157DC75000
|
unkown
|
page read and write
|
|
|
|
28C694C9000
|
unkown
|
page read and write
|
|
|
|
175D5D50000
|
heap private
|
page read and write
|
|
|
|
1DD31400000
|
heap private
|
page read and write
|
|
|
|
7FF544FA8000
|
unkown
|
page readonly
|
|
|
|
28C6C510000
|
unkown
|
page read and write
|
|
|
|
7FF54E0EB000
|
unkown
|
page readonly
|
|
|
|
7FF54DFC1000
|
unkown
|
page readonly
|
|
|
|
28C69455000
|
unkown
|
page read and write
|
|
|
|
7FF5418C3000
|
unkown
|
page readonly
|
|
|
|
18282BD6000
|
unkown
|
page read and write
|
|
|
|
1EBC75C0000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2D7000
|
unkown
|
page readonly
|
|
|
|
68A4CFF000
|
unkown
|
page read and write
|
|
|
|
7FF5533FF000
|
unkown
|
page readonly
|
|
|
|
28C6B574000
|
unkown
|
page read and write
|
|
|
|
7FF544F3E000
|
unkown
|
page readonly
|
|
|
|
2773CE6F000
|
unkown
|
page read and write
|
|
|
|
7FF544D65000
|
unkown
|
page readonly
|
|
|
|
2A73000
|
unkown
|
page readonly
|
|
|
|
18282B99000
|
unkown
|
page read and write
|
|
|
|
18282B17000
|
unkown
|
page read and write
|
|
|
|
7FF5BE0F6000
|
unkown
|
page readonly
|
|
|
|
7FF5BE1BE000
|
unkown
|
page readonly
|
|
|
|
7FF544C17000
|
unkown
|
page readonly
|
|
|
|
164A6DB0000
|
unkown
|
page read and write
|
|
|
|
13804654000
|
unkown
|
page read and write
|
|
|
|
182822A8000
|
unkown
|
page read and write
|
|
|
|
7FF57A3C4000
|
unkown
|
page readonly
|
|
|
|
157DA7B000
|
unkown
|
page read and write
|
|
|
|
20D212E000
|
unkown
|
page read and write
|
|
|
|
2773CE71000
|
unkown
|
page read and write
|
|
|
|
7FF5534C2000
|
unkown
|
page readonly
|
|
|
|
25B3000
|
unkown
|
page readonly
|
|
|
|
2653000
|
unkown
|
page readonly
|
|
|
|
7FF55B3E3000
|
unkown
|
page readonly
|
|
|
|
157DE77000
|
unkown
|
page read and write
|
|
|
|
7FF57A136000
|
unkown
|
page readonly
|
|
|
|
7FF55B425000
|
unkown
|
page readonly
|
|
|
|
2ACA7DC0000
|
heap private
|
page read and write
|
|
|
|
7FF541FC4000
|
unkown
|
page readonly
|
|
|
|
18A304E0000
|
unkown
|
page write copy
|
|
|
|
7FF5BE2F7000
|
unkown
|
page readonly
|
|
|
|
7FF5BE163000
|
unkown
|
page readonly
|
|
|
|
18282B55000
|
unkown
|
page read and write
|
|
|
|
7FF5BDACD000
|
unkown
|
page readonly
|
|
|
|
7FF5BE111000
|
unkown
|
page readonly
|
|
|
|
18282B42000
|
unkown
|
page read and write
|
|
|
|
7FF58BFD7000
|
unkown
|
page readonly
|
|
|
|
28C693B0000
|
unkown
|
page write copy
|
|
|
|
1828223C000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
heap default
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
18283002000
|
unkown
|
page read and write
|
|
|
|
7FF542054000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
2642000
|
unkown
|
page readonly
|
|
|
|
7FF5BDE22000
|
unkown
|
page readonly
|
|
|
|
182828C0000
|
unkown
|
page write copy
|
|
|
|
7FF544E21000
|
unkown
|
page readonly
|
|
|
|
18282B62000
|
unkown
|
page read and write
|
|
|
|
7FF55B47E000
|
unkown
|
page readonly
|
|
|
|
28C694D9000
|
unkown
|
page read and write
|
|
|
|
7FF5533CA000
|
unkown
|
page readonly
|
|
|
|
7FF544F9E000
|
unkown
|
page readonly
|
|
|
|
2969000
|
unkown
|
page readonly
|
|
|
|
7FF544C0A000
|
unkown
|
page readonly
|
|
|
|
ECDC7F7000
|
unkown
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
164A6E00000
|
unkown
|
page read and write
|
|
|
|
7FF55B085000
|
unkown
|
page readonly
|
|
|
|
7FF5533E7000
|
unkown
|
page readonly
|
|
|
|
71DAB2E000
|
unkown
|
page read and write
|
|
|
|
7FF54205A000
|
unkown
|
page readonly
|
|
|
|
25C1000
|
unkown
|
page readonly
|
|
|
|
7FF5BDBC2000
|
unkown
|
page readonly
|
|
|
|
7FF58BF9A000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
28C6B523000
|
unkown
|
page read and write
|
|
|
|
28C6B684000
|
unkown
|
page read and write
|
|
|
|
164A6E49000
|
unkown
|
page read and write
|
|
|
|
7FF5BE07B000
|
unkown
|
page readonly
|
|
|
|
7FF55B1DB000
|
unkown
|
page readonly
|
|
|
|
28C6C410000
|
unkown
|
page read and write
|
|
|
|
28C694C8000
|
unkown
|
page read and write
|
|
|
|
28C69400000
|
unkown
|
page read and write
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
7FF54E159000
|
unkown
|
page readonly
|
|
|
|
182828A0000
|
unkown
|
page readonly
|
|
|
|
7FF57A03A000
|
unkown
|
page readonly
|
|
|
|
18282B41000
|
unkown
|
page read and write
|
|
|
|
7FF5530A7000
|
unkown
|
page readonly
|
|
|
|
18282B7F000
|
unkown
|
page read and write
|
|
|
|
7FF58BD17000
|
unkown
|
page readonly
|
|
|
|
7FF55AF1C000
|
unkown
|
page readonly
|
|
|
|
7FF541FCE000
|
unkown
|
page readonly
|
|
|
|
7FF54D8ED000
|
unkown
|
page readonly
|
|
|
|
1EBC93E0000
|
unkown
|
page read and write
|
|
|
|
7FF541FA8000
|
unkown
|
page readonly
|
|
|
|
2ACA7FE0000
|
unkown
|
page readonly
|
|
|
|
2ACA8602000
|
unkown
|
page read and write
|
|
|
|
7FF55B15B000
|
unkown
|
page readonly
|
|
|
|
2773CE02000
|
unkown
|
page read and write
|
|
|
|
18282B9C000
|
unkown
|
page read and write
|
|
|
|
1DD312C0000
|
unkown
|
page readonly
|
|
|
|
7FF58BB60000
|
unkown
|
page readonly
|
|
|
|
7FF58BF0C000
|
unkown
|
page readonly
|
|
|
|
28C694CF000
|
unkown
|
page read and write
|
|
|
|
7FF5531F5000
|
unkown
|
page readonly
|
|
|
|
A5CCF7B000
|
unkown
|
page read and write
|
|
|
|
18282B56000
|
unkown
|
page read and write
|
|
|
|
7FF55B2DD000
|
unkown
|
page readonly
|
|
|
|
18282B41000
|
unkown
|
page read and write
|
|
|
|
7FF58BFCC000
|
unkown
|
page readonly
|
|
|
|
7FF544F94000
|
unkown
|
page readonly
|
|
|
|
7FF52889C000
|
unkown
|
page readonly
|
|
|
|
138060A0000
|
unkown
|
page readonly
|
|
|
|
18A30600000
|
unkown
|
page read and write
|
|
|
|
7FF5BE2BE000
|
unkown
|
page readonly
|
|
|
|
5ADFA7E000
|
unkown
|
page read and write
|
|
|
|
7FF58BFCF000
|
unkown
|
page readonly
|
|
|
|
A5CC67B000
|
unkown
|
page read and write
|
|
|
|
7FF5288E6000
|
unkown
|
page readonly
|
|
|
|
ECDC47E000
|
unkown
|
page read and write
|
|
|
|
28C6B52E000
|
unkown
|
page read and write
|
|
|
|
1EBC763F000
|
unkown
|
page read and write
|
|
|
|
7FF55B474000
|
unkown
|
page readonly
|
|
|
|
7FF54E124000
|
unkown
|
page readonly
|
|
|
|
18283002000
|
unkown
|
page read and write
|
|
|
|
13804713000
|
unkown
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
7FF55B344000
|
unkown
|
page readonly
|
|
|
|
2DB000
|
unkown
|
page read and write
|
|
|
|
28C6B2C0000
|
unkown
|
page read and write
|
|
|
|
7FF52889F000
|
unkown
|
page readonly
|
|
|
|
7FF57A33B000
|
unkown
|
page readonly
|
|
|
|
2553000
|
unkown
|
page readonly
|
|
|
|
7FF54E156000
|
unkown
|
page readonly
|
|
|
|
2583000
|
unkown
|
page readonly
|
|
|
|
18283061000
|
unkown
|
page read and write
|
|
|
|
7FF55B202000
|
unkown
|
page readonly
|
|
|
|
7FF528430000
|
unkown
|
page readonly
|
|
|
|
1828228A000
|
unkown
|
page read and write
|
|
|
|
28C694DD000
|
unkown
|
page read and write
|
|
|
|
DBBE37F000
|
unkown
|
page read and write
|
|
|
|
7FF57A2BD000
|
unkown
|
page readonly
|
|
|
|
7FF58B7A7000
|
unkown
|
page readonly
|
|
|
|
7FF57A36E000
|
unkown
|
page readonly
|
|
|
|
18282B95000
|
unkown
|
page read and write
|
|
|
|
7FF5BE3B2000
|
unkown
|
page readonly
|
|
|
|
175D5F02000
|
unkown
|
page read and write
|
|
|
|
7FF55B2B4000
|
unkown
|
page readonly
|
|
|
|
2973000
|
unkown
|
page readonly
|
|
|
|
7FF58BFE4000
|
unkown
|
page readonly
|
|
|
|
370000
|
unkown
|
page readonly
|
|
|
|
18A30400000
|
heap default
|
page read and write
|
|
|
|
18282B95000
|
unkown
|
page read and write
|
|
|
|
1380466C000
|
unkown
|
page read and write
|
|
|
|
7FF55B3C0000
|
unkown
|
page readonly
|
|
|
|
28C6948F000
|
unkown
|
page read and write
|
|
|
|
182822E3000
|
unkown
|
page read and write
|
|
|
|
7FF54E1C4000
|
unkown
|
page readonly
|
|
|
|
31E1000
|
heap default
|
page read and write
|
|
|
|
28C6B52D000
|
unkown
|
page read and write
|
|
|
|
1380466A000
|
unkown
|
page read and write
|
|
|
|
25BF000
|
unkown
|
page readonly
|
|
|
|
18282B79000
|
unkown
|
page read and write
|
|
|
|
28C6B564000
|
unkown
|
page read and write
|
|
|
|
7FF57A30C000
|
unkown
|
page readonly
|
|
|
|
18282B22000
|
unkown
|
page read and write
|
|
|
|
31CA000
|
heap default
|
page read and write
|
|
|
|
7FF55B0DC000
|
unkown
|
page readonly
|
|
|
|
2773CE6F000
|
unkown
|
page read and write
|
|
|
|
7FF544F8A000
|
unkown
|
page readonly
|
|
|
|
14EC89B000
|
unkown
|
page read and write
|
|
|
|
1828224B000
|
unkown
|
page read and write
|
|
|
|
18282B45000
|
unkown
|
page read and write
|
|
|
|
1EBC7613000
|
unkown
|
page read and write
|
|
|
|
7FF54DCB5000
|
unkown
|
page readonly
|
|
|
|
7FF5533CE000
|
unkown
|
page readonly
|
|
|
|
175D6B40000
|
unkown
|
page readonly
|
|
|
|
18A30602000
|
unkown
|
page read and write
|
|
|
|
25D6000
|
unkown
|
page readonly
|
|
|
|
7FF58C01D000
|
unkown
|
page readonly
|
|
|
|
7FF5BE1BB000
|
unkown
|
page readonly
|
|
|
|
7FF55B200000
|
unkown
|
page readonly
|
|
|
|
7FF544CFB000
|
unkown
|
page readonly
|
|
|
|
7FF542062000
|
unkown
|
page readonly
|
|
|
|
7FF544BFC000
|
unkown
|
page readonly
|
|
|
|
7FF528961000
|
unkown
|
page readonly
|
|
|
|
28C6ADC0000
|
unkown
|
page read and write
|
|
|
|
1EBC7629000
|
unkown
|
page read and write
|
|
|
|
13804702000
|
unkown
|
page read and write
|
|
|
|
71DABA9000
|
unkown
|
page read and write
|
|
|
|
7FF55B260000
|
unkown
|
page readonly
|
|
|
|
28C6B5E4000
|
unkown
|
page read and write
|
|
|
|
5AE04FC000
|
unkown
|
page read and write
|
|
|
|
7FF544F6C000
|
unkown
|
page readonly
|
|
|
|
29E1000
|
unkown
|
page readonly
|
|
|
|
7FF57A1B1000
|
unkown
|
page readonly
|
|
|
|
18282B78000
|
unkown
|
page read and write
|
|
|
|
A5CD0F9000
|
unkown
|
page read and write
|
|
|
|
7FF55B34A000
|
unkown
|
page readonly
|
|
|
|
A5CC77E000
|
unkown
|
page read and write
|
|
|
|
182822A7000
|
unkown
|
page read and write
|
|
|
|
7FF5BDE80000
|
unkown
|
page readonly
|
|
|
|
18282C00000
|
unkown
|
page readonly
|
|
|
|
1DD3110F000
|
unkown
|
page read and write
|
|
|
|
7FF55B420000
|
unkown
|
page readonly
|
|
|
|
7FF57A461000
|
unkown
|
page readonly
|
|
|
|
7FF57A35C000
|
unkown
|
page readonly
|
|
|
|
7FF57A26B000
|
unkown
|
page readonly
|
|
|
|
A5CCC79000
|
unkown
|
page read and write
|
|
|
|
7FF544FB6000
|
unkown
|
page readonly
|
|
|
|
1DD311E0000
|
unkown
|
page readonly
|
|
|
|
7FF55B458000
|
unkown
|
page readonly
|
|
|
|
7FF58C084000
|
unkown
|
page readonly
|
|
|
|
7FF5288C4000
|
unkown
|
page readonly
|
|
|
|
2DE0000
|
unkown
|
page read and write
|
|
|
|
5AE03F8000
|
unkown
|
page read and write
|
|
|
|
28C6B5E2000
|
unkown
|
page read and write
|
|
|
|
28C6B500000
|
unkown
|
page read and write
|
|
|
|
7FF54479D000
|
unkown
|
page readonly
|
|
|
|
164A6E3C000
|
unkown
|
page read and write
|
|
|
|
7FF553393000
|
unkown
|
page readonly
|
|
|
|
7FF5288DE000
|
unkown
|
page readonly
|
|
|
|
ECDC575000
|
unkown
|
page read and write
|
|
|
|
DBBE479000
|
unkown
|
page read and write
|
|
|
|
ECDC6FE000
|
unkown
|
page read and write
|
|
|
|
7FF5288B4000
|
unkown
|
page readonly
|
|
|
|
7FF5533D0000
|
unkown
|
page readonly
|
|
|
|
2599000
|
unkown
|
page readonly
|
|
|
|
2ACA8050000
|
unkown
|
page read and write
|
|
|
|
2A41000
|
unkown
|
page readonly
|
|
|
|
18A31FA0000
|
unkown
|
page read and write
|
|
|
|
7FF57A03F000
|
unkown
|
page readonly
|
|
|
|
164A6F08000
|
unkown
|
page read and write
|
|
|
|
28C6953D000
|
unkown
|
page read and write
|
|
|
|
5ADFCFB000
|
unkown
|
page read and write
|
|
|
|
28C6B882000
|
unkown
|
page read and write
|
|
|
|
7FF52887B000
|
unkown
|
page readonly
|
|
|
|
7FF579F49000
|
unkown
|
page readonly
|
|
|
|
1DD31410000
|
unkown
|
page readonly
|
|
|
|
7FF544FBD000
|
unkown
|
page readonly
|
|
|
|
7FF55B512000
|
unkown
|
page readonly
|
|
|
|
1380466A000
|
unkown
|
page read and write
|
|
|
|
296C000
|
unkown
|
page readonly
|
|
|
|
2A73000
|
unkown
|
page readonly
|
|
|
|
7FF55B28F000
|
unkown
|
page readonly
|
|
|
|
7FF5288CF000
|
unkown
|
page readonly
|
|
|
|
7FF54E02D000
|
unkown
|
page readonly
|
|
|
|
7FF54E12A000
|
unkown
|
page readonly
|
|
|
|
2ACA7F00000
|
unkown
|
page readonly
|
|
|
|
7FF57A047000
|
unkown
|
page readonly
|
|
|
|
28C6B240000
|
unkown
|
page read and write
|
|
|
|
14ECF77000
|
unkown
|
page read and write
|
|
|
|
28C69514000
|
unkown
|
page read and write
|
|
|
|
28C6B5F2000
|
unkown
|
page read and write
|
|
|
|
18282B9F000
|
unkown
|
page read and write
|
|
|
|
7FF55AABD000
|
unkown
|
page readonly
|
|
|
|
A5CCFFD000
|
unkown
|
page read and write
|
|
|
|
28C6B51C000
|
unkown
|
page read and write
|
|
|
|
28C6B902000
|
unkown
|
page read and write
|
|
|
|
1380466A000
|
unkown
|
page read and write
|
|
|
|
18282B78000
|
unkown
|
page read and write
|
|
|
|
18282252000
|
unkown
|
page read and write
|
|
|
|
7FF544D99000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2AC000
|
unkown
|
page readonly
|
|
|
|
164A6E4A000
|
unkown
|
page read and write
|
|
|
|
175D5F08000
|
unkown
|
page read and write
|
|
|
|
3470000
|
unkown
|
page readonly
|
|
|
|
7FF5532CB000
|
unkown
|
page readonly
|
|
|
|
2ACA804C000
|
unkown
|
page read and write
|
|
|
|
7FF55308C000
|
unkown
|
page readonly
|
|
|
|
28C6C410000
|
unkown
|
page read and write
|
|
|
|
7FF55B2A4000
|
unkown
|
page readonly
|
|
|
|
18282B85000
|
unkown
|
page read and write
|
|
|
|
175D5E50000
|
unkown
|
page read and write
|
|
|
|
ECDC17B000
|
unkown
|
page read and write
|
|
|
|
1EBC74A0000
|
unkown
|
page readonly
|
|
|
|
175D5E88000
|
unkown
|
page read and write
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
2ACA7E30000
|
unkown
|
page readonly
|
|
|
|
7FF5288A7000
|
unkown
|
page readonly
|
|
|
|
18282B7C000
|
unkown
|
page read and write
|
|
|
|
28C69453000
|
unkown
|
page read and write
|
|
|
|
164A6F13000
|
unkown
|
page read and write
|
|
|
|
164A6E4D000
|
unkown
|
page read and write
|
|
|
|
28C692E0000
|
unkown
|
page readonly
|
|
|
|
7FF5418C7000
|
unkown
|
page readonly
|
|
|
|
18282255000
|
unkown
|
page read and write
|
|
|
|
7FF541F7B000
|
unkown
|
page readonly
|
|
|
|
2ACA8100000
|
unkown
|
page read and write
|
|
|
|
28C6948C000
|
unkown
|
page read and write
|
|
|
|
18282B72000
|
unkown
|
page read and write
|
|
|
|
2ACA7E20000
|
heap default
|
page read and write
|
|
|
|
18282251000
|
unkown
|
page read and write
|
|
|
|
7FF541F9C000
|
unkown
|
page readonly
|
|
|
|
7FF54E0CC000
|
unkown
|
page readonly
|
|
|
|
18282B45000
|
unkown
|
page read and write
|
|
|
|
7FF54DFDE000
|
unkown
|
page readonly
|
|
|
|
7FF5BE32E000
|
unkown
|
page readonly
|
|
|
|
28C6B5F8000
|
unkown
|
page read and write
|
|
|
|
7FF54E1CA000
|
unkown
|
page readonly
|
|
|
|
7FF57A1A4000
|
unkown
|
page readonly
|
|
|
|
7FF57A454000
|
unkown
|
page readonly
|
|
|
|
18282B9E000
|
unkown
|
page read and write
|
|
|
|
18282B31000
|
unkown
|
page read and write
|
|
|
|
7FF57A3D8000
|
unkown
|
page readonly
|
|
|
|
18282930000
|
unkown
|
page read and write
|
|
|
|
28C6B743000
|
unkown
|
page read and write
|
|
|
|
2A45000
|
unkown
|
page readonly
|
|
|
|
68A4F7D000
|
unkown
|
page read and write
|
|
|
|
1DD31105000
|
unkown
|
page read and write
|
|
|
|
28C6B612000
|
unkown
|
page read and write
|
|
|
|
7FF528445000
|
unkown
|
page readonly
|
|
|
|
182820B0000
|
heap private
|
page read and write
|
|
|
|
2773CE6D000
|
unkown
|
page read and write
|
|
|
|
A5CD07C000
|
unkown
|
page read and write
|
|
|
|
1828224E000
|
unkown
|
page read and write
|
|
|
|
2480000
|
unkown
|
page readonly
|
|
|
|
7FF5BDD9E000
|
unkown
|
page readonly
|
|
|
|
2ACA8108000
|
unkown
|
page read and write
|
|
|
|
7FF553229000
|
unkown
|
page readonly
|
|
|
|
28C6C310000
|
unkown
|
page read and write
|
|
|
|
A5CC97A000
|
unkown
|
page read and write
|
|
|
|
164A6F02000
|
unkown
|
page read and write
|
|
|
|
7FF5BE224000
|
unkown
|
page readonly
|
|
|
|
7FF528751000
|
unkown
|
page readonly
|
|
|
|
7FF54E134000
|
unkown
|
page readonly
|
|
|
|
7FF541F70000
|
unkown
|
page readonly
|
|
|
|
7FF5533FC000
|
unkown
|
page readonly
|
|
|
|
2625000
|
unkown
|
page readonly
|
|
|
|
5AE017E000
|
unkown
|
page read and write
|
|
|
|
175D6800000
|
unkown
|
page readonly
|
|
|
|
7FF57A34F000
|
unkown
|
page readonly
|
|
|
|
7FF58C016000
|
unkown
|
page readonly
|
|
|
|
7FF5BE2BA000
|
unkown
|
page readonly
|
|
|
|
175D5E4C000
|
unkown
|
page read and write
|
|
|
|
28C69459000
|
unkown
|
page read and write
|
|
|
|
28C69440000
|
unkown
|
page read and write
|
|
|
|
182822E4000
|
unkown
|
page read and write
|
|
|
|
29B9000
|
unkown
|
page readonly
|
|
|
|
18282B7B000
|
unkown
|
page read and write
|
|
|
|
18A320A0000
|
unkown
|
page readonly
|
|
|
|
18283002000
|
unkown
|
page read and write
|
|
|
|
ECDC8FF000
|
unkown
|
page read and write
|
|
|
|
7FF54E148000
|
unkown
|
page readonly
|
|
|
|
1DD31106000
|
unkown
|
page read and write
|
|
|
|
28C694BE000
|
unkown
|
page read and write
|
|
|
|
18282920000
|
unkown
|
page readonly
|
|
|
|
7FF58C019000
|
unkown
|
page readonly
|
|
|
|
7FF5BE29F000
|
unkown
|
page readonly
|
|
|
|
18282BDA000
|
unkown
|
page read and write
|
|
|
|
18283002000
|
unkown
|
page read and write
|
|
|
|
28C6955E000
|
unkown
|
page read and write
|
|
|
|
1DD31405000
|
heap private
|
page read and write
|
|
|
|
7FF553408000
|
unkown
|
page readonly
|
|
|
|
7FF57A35A000
|
unkown
|
page readonly
|
|
|
|
18282B47000
|
unkown
|
page read and write
|
|
|
|
1EBC7570000
|
unkown
|
page write copy
|
|
|
|
7FF545031000
|
unkown
|
page readonly
|
|
|
|
1DD310B0000
|
unkown
|
page read and write
|
|
|
|
7FF58C092000
|
unkown
|
page readonly
|
|
|
|
DBBE57F000
|
unkown
|
page read and write
|
|
|
|
5A31D7F000
|
unkown
|
page read and write
|
|
|
|
28C6C410000
|
unkown
|
page read and write
|
|
|
|
7FF58BFFF000
|
unkown
|
page readonly
|
|
|
|
18282213000
|
unkown
|
page read and write
|
|
|
|
14ECE7E000
|
unkown
|
page read and write
|
|
|
|
1DD310EB000
|
heap default
|
page read and write
|
|
|
|
7FF55344D000
|
unkown
|
page readonly
|
|
There are 1129 hidden memdumps, click here to show them.