Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
idea-22543577.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$idea-22543577.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\FF586352-751C-4478-9E87-FF9CF397D4DE
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\12BD43E5.png
|
PNG image data, 1133 x 589, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\9DC40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Tue Jun 22 18:17:21 2021, atime=Tue Jun 22 18:17:21 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\idea-22543577.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:52
2020, mtime=Tue Jun 22 18:17:22 2021, atime=Tue Jun 22 18:17:22 2021, length=93025, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\9EC40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DA3B3626.png
|
PNG image data, 1133 x 589, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\A8FE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\Cab2A1.tmp
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\Tar2A2.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\69FE0000
|
data
|
dropped
|
|
There are 9 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\wail1.dll
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\wail2.dll
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\wail1.dll
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\wail2.dll
|
|
|
|
C:\Windows\splwow64.exe
|
C:\Windows\splwow64.exe 12288
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
https://loki.delve.office.com/api/v1/configuration/officewin32/
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 101 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
theottomandoner.com
|
5.100.155.169
|
|
|
|
senderoalcielo.com
|
108.167.165.249
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
5.100.155.169
|
theottomandoner.com
|
United Kingdom
|
|
|
|
108.167.165.249
|
senderoalcielo.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
l!?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
m!?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BD71
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C3AB
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C503
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C6C8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C85E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CA52
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CBD9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CDCD
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CF92
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
r)?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5BD4D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5BEA5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
>82
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF132
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF528
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF5E3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF67F
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF71B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF7D6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF872
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF93D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF9CA
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ef2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FA3FD
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FA5F0
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 180 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF55DD4A000
|
unkown
|
page readonly
|
|
|
|
7FF5DBFC1000
|
unkown
|
page readonly
|
|
|
|
7FF5D456C000
|
unkown
|
page readonly
|
|
|
|
3582000
|
unkown
|
page read and write
|
|
|
|
7FF5612D4000
|
unkown
|
page readonly
|
|
|
|
20CD1829000
|
unkown
|
page read and write
|
|
|
|
19AAA6F0000
|
unkown
|
page read and write
|
|
|
|
19AAA6D3000
|
unkown
|
page read and write
|
|
|
|
2D73000
|
unkown
|
page readonly
|
|
|
|
7FF56121F000
|
unkown
|
page readonly
|
|
|
|
19AAA664000
|
unkown
|
page read and write
|
|
|
|
63C8FE000
|
unkown
|
page read and write
|
|
|
|
20CD1F51000
|
unkown
|
page read and write
|
|
|
|
19AAA71C000
|
unkown
|
page read and write
|
|
|
|
65F0000
|
unkown
|
page readonly
|
|
|
|
7FF54C0D7000
|
unkown
|
page readonly
|
|
|
|
679E1FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC144000
|
unkown
|
page readonly
|
|
|
|
26BD8400000
|
unkown
|
page readonly
|
|
|
|
20CD184A000
|
unkown
|
page read and write
|
|
|
|
7FF560A51000
|
unkown
|
page readonly
|
|
|
|
20CD1F68000
|
unkown
|
page read and write
|
|
|
|
7FF54B9A2000
|
unkown
|
page readonly
|
|
|
|
72BF000
|
unkown
|
page read and write
|
|
|
|
26BD824A000
|
unkown
|
page read and write
|
|
|
|
63C67A000
|
unkown
|
page read and write
|
|
|
|
547B47B000
|
unkown
|
page read and write
|
|
|
|
20CD1F90000
|
unkown
|
page read and write
|
|
|
|
830000
|
unkown
|
page readonly
|
|
|
|
7FF5D46EA000
|
unkown
|
page readonly
|
|
|
|
2191EE00000
|
unkown
|
page read and write
|
|
|
|
26BD822A000
|
unkown
|
page read and write
|
|
|
|
26BD8308000
|
unkown
|
page read and write
|
|
|
|
7FF590550000
|
unkown
|
page readonly
|
|
|
|
1BCD75A0000
|
unkown
|
page readonly
|
|
|
|
21CA66E0000
|
unkown
|
page readonly
|
|
|
|
7FF55DD88000
|
unkown
|
page readonly
|
|
|
|
7FF5611F0000
|
unkown
|
page readonly
|
|
|
|
7FF59049D000
|
unkown
|
page readonly
|
|
|
|
19AAC654000
|
unkown
|
page read and write
|
|
|
|
19AAC636000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
20CD1F64000
|
unkown
|
page read and write
|
|
|
|
7FF5904B4000
|
unkown
|
page readonly
|
|
|
|
20426A6E000
|
unkown
|
page read and write
|
|
|
|
679DFFA000
|
unkown
|
page read and write
|
|
|
|
19AAA668000
|
unkown
|
page read and write
|
|
|
|
20426A70000
|
unkown
|
page read and write
|
|
|
|
2E02000
|
unkown
|
page readonly
|
|
|
|
B22FC7A000
|
unkown
|
page read and write
|
|
|
|
19AAA6F0000
|
unkown
|
page read and write
|
|
|
|
19AAC665000
|
unkown
|
page read and write
|
|
|
|
2D4C000
|
unkown
|
page readonly
|
|
|
|
19AAA570000
|
heap private
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
7FF54C0F4000
|
unkown
|
page readonly
|
|
|
|
21CA6908000
|
unkown
|
page read and write
|
|
|
|
20CD2350000
|
unkown
|
page readonly
|
|
|
|
19AAD410000
|
unkown
|
page read and write
|
|
|
|
20CD1F51000
|
unkown
|
page read and write
|
|
|
|
775000
|
unkown
|
page read and write
|
|
|
|
262AF2D0000
|
heap private
|
page read and write
|
|
|
|
20CD1F64000
|
unkown
|
page read and write
|
|
|
|
7FF5905C9000
|
unkown
|
page readonly
|
|
|
|
19AAC625000
|
unkown
|
page read and write
|
|
|
|
7FF59059A000
|
unkown
|
page readonly
|
|
|
|
7FF54BC60000
|
unkown
|
page readonly
|
|
|
|
B22F70B000
|
unkown
|
page read and write
|
|
|
|
7FF56123A000
|
unkown
|
page readonly
|
|
|
|
753000
|
heap default
|
page read and write
|
|
|
|
20CD1813000
|
unkown
|
page read and write
|
|
|
|
766B5FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8EE000
|
unkown
|
page readonly
|
|
|
|
19AAC636000
|
unkown
|
page read and write
|
|
|
|
19AACC02000
|
unkown
|
page read and write
|
|
|
|
19AAC693000
|
unkown
|
page read and write
|
|
|
|
7FF5DC16E000
|
unkown
|
page readonly
|
|
|
|
26BD84D0000
|
unkown
|
page readonly
|
|
|
|
2DF4000
|
unkown
|
page readonly
|
|
|
|
19AACC42000
|
unkown
|
page read and write
|
|
|
|
23073254000
|
unkown
|
page read and write
|
|
|
|
20CD1F58000
|
unkown
|
page read and write
|
|
|
|
7FF55DD9A000
|
unkown
|
page readonly
|
|
|
|
20CD1F4E000
|
unkown
|
page read and write
|
|
|
|
7FF5611EE000
|
unkown
|
page readonly
|
|
|
|
19AAA6E9000
|
unkown
|
page read and write
|
|
|
|
7FF54BEA0000
|
unkown
|
page readonly
|
|
|
|
2DE1000
|
unkown
|
page readonly
|
|
|
|
20CD1902000
|
unkown
|
page read and write
|
|
|
|
19AAA6F3000
|
unkown
|
page read and write
|
|
|
|
14A000
|
unkown
|
page read and write
|
|
|
|
23073140000
|
unkown
|
page readonly
|
|
|
|
7FF55DD55000
|
unkown
|
page readonly
|
|
|
|
20CD1F4E000
|
unkown
|
page read and write
|
|
|
|
23073202000
|
unkown
|
page read and write
|
|
|
|
20CD2360000
|
unkown
|
page readonly
|
|
|
|
7FF5DC94E000
|
unkown
|
page readonly
|
|
|
|
7FF4EC39E000
|
unkown
|
page readonly
|
|
|
|
679DCF9000
|
unkown
|
page read and write
|
|
|
|
7FF5DC112000
|
unkown
|
page readonly
|
|
|
|
766B9F9000
|
unkown
|
page read and write
|
|
|
|
2C37000
|
unkown
|
page readonly
|
|
|
|
679E17A000
|
unkown
|
page read and write
|
|
|
|
19AAC6B9000
|
unkown
|
page read and write
|
|
|
|
26BD8222000
|
unkown
|
page read and write
|
|
|
|
7FF54C0FF000
|
unkown
|
page readonly
|
|
|
|
19AAC800000
|
unkown
|
page readonly
|
|
|
|
7FF590641000
|
unkown
|
page readonly
|
|
|
|
2BF2000
|
unkown
|
page readonly
|
|
|
|
7FF5DC7F8000
|
unkown
|
page readonly
|
|
|
|
20426E00000
|
unkown
|
page readonly
|
|
|
|
7FF5DC8B3000
|
unkown
|
page readonly
|
|
|
|
20CD16E0000
|
unkown
|
page readonly
|
|
|
|
19AAC693000
|
unkown
|
page read and write
|
|
|
|
7FF5D462C000
|
unkown
|
page readonly
|
|
|
|
766B8FA000
|
unkown
|
page read and write
|
|
|
|
20CD2340000
|
unkown
|
page readonly
|
|
|
|
7FF55DD13000
|
unkown
|
page readonly
|
|
|
|
21CA684C000
|
unkown
|
page read and write
|
|
|
|
2D59000
|
unkown
|
page readonly
|
|
|
|
2D65000
|
unkown
|
page readonly
|
|
|
|
20CD1F50000
|
unkown
|
page read and write
|
|
|
|
356C000
|
unkown
|
page read and write
|
|
|
|
2191EE13000
|
unkown
|
page read and write
|
|
|
|
2C40000
|
unkown
|
page readonly
|
|
|
|
7FF5611F5000
|
unkown
|
page readonly
|
|
|
|
20CD1F4D000
|
unkown
|
page read and write
|
|
|
|
20CD18E0000
|
unkown
|
page read and write
|
|
|
|
3810000
|
unkown
|
page readonly
|
|
|
|
7FF54BF9E000
|
unkown
|
page readonly
|
|
|
|
679E3FB000
|
unkown
|
page read and write
|
|
|
|
19AAC616000
|
unkown
|
page read and write
|
|
|
|
7FF560FB6000
|
unkown
|
page readonly
|
|
|
|
7FF561244000
|
unkown
|
page readonly
|
|
|
|
2C40000
|
unkown
|
page readonly
|
|
|
|
7FF508C7D000
|
unkown
|
page readonly
|
|
|
|
7FF5D4679000
|
unkown
|
page readonly
|
|
|
|
7FF55DD67000
|
unkown
|
page readonly
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
7FF508C38000
|
unkown
|
page readonly
|
|
|
|
7FF561192000
|
unkown
|
page readonly
|
|
|
|
19AAD110000
|
unkown
|
page read and write
|
|
|
|
7FF54C0AB000
|
unkown
|
page readonly
|
|
|
|
20CD1F51000
|
unkown
|
page read and write
|
|
|
|
19AAA6DC000
|
unkown
|
page read and write
|
|
|
|
7FF590594000
|
unkown
|
page readonly
|
|
|
|
730000
|
heap default
|
page read and write
|
|
|
|
8D3B778000
|
unkown
|
page read and write
|
|
|
|
717000
|
heap private
|
page read and write
|
|
|
|
20426B00000
|
unkown
|
page read and write
|
|
|
|
19AAA6F0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC254000
|
unkown
|
page readonly
|
|
|
|
20CD1F71000
|
unkown
|
page read and write
|
|
|
|
7FF5DC6B6000
|
unkown
|
page readonly
|
|
|
|
2D6F000
|
unkown
|
page readonly
|
|
|
|
7FF590125000
|
unkown
|
page readonly
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
19AAA7A0000
|
unkown
|
page read and write
|
|
|
|
20CD183C000
|
unkown
|
page read and write
|
|
|
|
7FF5DBE3A000
|
unkown
|
page readonly
|
|
|
|
19AAC6DF000
|
unkown
|
page read and write
|
|
|
|
20CD1F83000
|
unkown
|
page read and write
|
|
|
|
262AF330000
|
heap default
|
page read and write
|
|
|
|
65EE000
|
unkown
|
page read and write
|
|
|
|
7FF5D4676000
|
unkown
|
page readonly
|
|
|
|
19AAD410000
|
unkown
|
page read and write
|
|
|
|
7FF54C192000
|
unkown
|
page readonly
|
|
|
|
19AAA676000
|
unkown
|
page read and write
|
|
|
|
19AAC6C4000
|
unkown
|
page read and write
|
|
|
|
262AF6D0000
|
unkown
|
page readonly
|
|
|
|
2D81000
|
unkown
|
page readonly
|
|
|
|
354A000
|
heap default
|
page read and write
|
|
|
|
19AAC702000
|
unkown
|
page read and write
|
|
|
|
21CA6E02000
|
unkown
|
page read and write
|
|
|
|
380A000
|
heap private
|
page read and write
|
|
|
|
7FF54C042000
|
unkown
|
page readonly
|
|
|
|
766B87E000
|
unkown
|
page read and write
|
|
|
|
20CD1DB0000
|
unkown
|
page write copy
|
|
|
|
7FF58FD57000
|
unkown
|
page readonly
|
|
|
|
7FF4EC3D8000
|
unkown
|
page readonly
|
|
|
|
7FF5DC890000
|
unkown
|
page readonly
|
|
|
|
19AAA7A2000
|
unkown
|
page read and write
|
|
|
|
7FF54BC75000
|
unkown
|
page readonly
|
|
|
|
7FF5904BC000
|
unkown
|
page readonly
|
|
|
|
7FF54C184000
|
unkown
|
page readonly
|
|
|
|
20CD184F000
|
unkown
|
page read and write
|
|
|
|
73A0000
|
unkown
|
page read and write
|
|
|
|
2D7F000
|
unkown
|
page readonly
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
7FF560EC7000
|
unkown
|
page readonly
|
|
|
|
679DEFA000
|
unkown
|
page read and write
|
|
|
|
7FF5610F8000
|
unkown
|
page readonly
|
|
|
|
7FF54C108000
|
unkown
|
page readonly
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
19AAA67E000
|
unkown
|
page read and write
|
|
|
|
7FF56124E000
|
unkown
|
page readonly
|
|
|
|
262AF600000
|
unkown
|
page readonly
|
|
|
|
1BCD75C1000
|
unkown
|
page read and write
|
|
|
|
679E0FB000
|
unkown
|
page read and write
|
|
|
|
7FF54BF81000
|
unkown
|
page readonly
|
|
|
|
7FF5DC961000
|
unkown
|
page readonly
|
|
|
|
19AAD210000
|
unkown
|
page read and write
|
|
|
|
20CD1F68000
|
unkown
|
page read and write
|
|
|
|
7FF5DC711000
|
unkown
|
page readonly
|
|
|
|
679DF7A000
|
unkown
|
page read and write
|
|
|
|
7FF56126D000
|
unkown
|
page readonly
|
|
|
|
20CD1600000
|
heap default
|
page read and write
|
|
|
|
7FF54B8A7000
|
unkown
|
page readonly
|
|
|
|
55E000
|
unkown
|
page read and write
|
|
|
|
7FF55DB75000
|
unkown
|
page readonly
|
|
|
|
2191EE29000
|
unkown
|
page read and write
|
|
|
|
19AAC600000
|
unkown
|
page read and write
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3B7000
|
unkown
|
page readonly
|
|
|
|
19AAC690000
|
unkown
|
page read and write
|
|
|
|
1BCD7470000
|
unkown
|
page readonly
|
|
|
|
7FF5D41C6000
|
unkown
|
page readonly
|
|
|
|
7FF55DDA4000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9D4000
|
unkown
|
page readonly
|
|
|
|
7FF5DC102000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
F09F077000
|
unkown
|
page read and write
|
|
|
|
7FF5DBCD2000
|
unkown
|
page readonly
|
|
|
|
7FF590642000
|
unkown
|
page readonly
|
|
|
|
26BD823C000
|
unkown
|
page read and write
|
|
|
|
19AAC616000
|
unkown
|
page read and write
|
|
|
|
7FF55DC31000
|
unkown
|
page readonly
|
|
|
|
2191EE6E000
|
unkown
|
page read and write
|
|
|
|
7FF54C09A000
|
unkown
|
page readonly
|
|
|
|
20CD1F36000
|
unkown
|
page read and write
|
|
|
|
63C879000
|
unkown
|
page read and write
|
|
|
|
2D1A000
|
unkown
|
page readonly
|
|
|
|
7FF5DC5BA000
|
unkown
|
page readonly
|
|
|
|
7FF4EBC01000
|
unkown
|
page readonly
|
|
|
|
20CD1F32000
|
unkown
|
page read and write
|
|
|
|
19AAC6B0000
|
unkown
|
page read and write
|
|
|
|
20CD1F2A000
|
unkown
|
page read and write
|
|
|
|
20CD1A00000
|
unkown
|
page readonly
|
|
|
|
7FF5DC934000
|
unkown
|
page readonly
|
|
|
|
19AAC613000
|
unkown
|
page read and write
|
|
|
|
19AAA65B000
|
unkown
|
page read and write
|
|
|
|
19AAC61A000
|
unkown
|
page read and write
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
19AAA67E000
|
unkown
|
page read and write
|
|
|
|
7FF5D45EC000
|
unkown
|
page readonly
|
|
|
|
20CD2454000
|
unkown
|
page read and write
|
|
|
|
7FF54BC66000
|
unkown
|
page readonly
|
|
|
|
2191EE6C000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
unkown
|
page read and write
|
|
|
|
23072FB0000
|
heap private
|
page read and write
|
|
|
|
1BCD7560000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
heap default
|
page read and write
|
|
|
|
7FF54BB7E000
|
unkown
|
page readonly
|
|
|
|
710000
|
heap private
|
page read and write
|
|
|
|
20CD1F69000
|
unkown
|
page read and write
|
|
|
|
E10AE7F000
|
unkown
|
page read and write
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
2191EE43000
|
unkown
|
page read and write
|
|
|
|
7FF561207000
|
unkown
|
page readonly
|
|
|
|
679DD7A000
|
unkown
|
page read and write
|
|
|
|
23073020000
|
unkown
|
page readonly
|
|
|
|
7FF5DC1A7000
|
unkown
|
page readonly
|
|
|
|
F09E9DB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC170000
|
unkown
|
page readonly
|
|
|
|
19AAC65B000
|
unkown
|
page read and write
|
|
|
|
19AAC6E7000
|
unkown
|
page read and write
|
|
|
|
19AAC64C000
|
unkown
|
page read and write
|
|
|
|
7FF5D45FE000
|
unkown
|
page readonly
|
|
|
|
20CD1F0A000
|
unkown
|
page read and write
|
|
|
|
20CD2360000
|
unkown
|
page read and write
|
|
|
|
7FF560EBA000
|
unkown
|
page readonly
|
|
|
|
8D3B375000
|
unkown
|
page read and write
|
|
|
|
8D3B8F8000
|
unkown
|
page read and write
|
|
|
|
679E47C000
|
unkown
|
page read and write
|
|
|
|
19AAA71A000
|
unkown
|
page read and write
|
|
|
|
3571000
|
unkown
|
page read and write
|
|
|
|
7FF508CF1000
|
unkown
|
page readonly
|
|
|
|
7FF5DC1E1000
|
unkown
|
page readonly
|
|
|
|
7FF4EC05C000
|
unkown
|
page readonly
|
|
|
|
7FF5D44FE000
|
unkown
|
page readonly
|
|
|
|
7FF5DC91C000
|
unkown
|
page readonly
|
|
|
|
20CD1F82000
|
unkown
|
page read and write
|
|
|
|
262AF390000
|
unkown
|
page readonly
|
|
|
|
20CD1F58000
|
unkown
|
page read and write
|
|
|
|
7FF5D4377000
|
unkown
|
page readonly
|
|
|
|
19AAA6CF000
|
unkown
|
page read and write
|
|
|
|
20CD18E3000
|
unkown
|
page read and write
|
|
|
|
262AF402000
|
unkown
|
page read and write
|
|
|
|
21CA6882000
|
unkown
|
page read and write
|
|
|
|
20CD1F56000
|
unkown
|
page read and write
|
|
|
|
103E000
|
unkown
|
page read and write
|
|
|
|
679D99E000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
3807000
|
heap private
|
page read and write
|
|
|
|
7FF55DD50000
|
unkown
|
page readonly
|
|
|
|
7FF54C08C000
|
unkown
|
page readonly
|
|
|
|
7FF5612E1000
|
unkown
|
page readonly
|
|
|
|
2D65000
|
unkown
|
page readonly
|
|
|
|
679E5FF000
|
unkown
|
page read and write
|
|
|
|
7FF5DC1C4000
|
unkown
|
page readonly
|
|
|
|
2A82000
|
unkown
|
page readonly
|
|
|
|
19AAA663000
|
unkown
|
page read and write
|
|
|
|
21CA6610000
|
unkown
|
page readonly
|
|
|
|
7FF5DC133000
|
unkown
|
page readonly
|
|
|
|
7FF54C0A5000
|
unkown
|
page readonly
|
|
|
|
2191EE70000
|
unkown
|
page read and write
|
|
|
|
7FF4EC2A3000
|
unkown
|
page readonly
|
|
|
|
3585000
|
unkown
|
page read and write
|
|
|
|
20CD2463000
|
unkown
|
page read and write
|
|
|
|
19AAA75D000
|
unkown
|
page read and write
|
|
|
|
19AAC636000
|
unkown
|
page read and write
|
|
|
|
3A1000
|
unkown
|
page read and write
|
|
|
|
19AAA67C000
|
unkown
|
page read and write
|
|
|
|
7FF5610F3000
|
unkown
|
page readonly
|
|
|
|
7FF5DB9D1000
|
unkown
|
page readonly
|
|
|
|
7FF5DC19F000
|
unkown
|
page readonly
|
|
|
|
19AAD000000
|
unkown
|
page read and write
|
|
|
|
19AAA5E0000
|
unkown
|
page readonly
|
|
|
|
547B679000
|
unkown
|
page read and write
|
|
|
|
7FF4EC1C1000
|
unkown
|
page readonly
|
|
|
|
20CD1F2B000
|
unkown
|
page read and write
|
|
|
|
7FF508CEA000
|
unkown
|
page readonly
|
|
|
|
7FF508553000
|
unkown
|
page readonly
|
|
|
|
19AACD02000
|
unkown
|
page read and write
|
|
|
|
19AACC82000
|
unkown
|
page read and write
|
|
|
|
7FF5DC5BF000
|
unkown
|
page readonly
|
|
|
|
7FF508CF2000
|
unkown
|
page readonly
|
|
|
|
7FF4EC1F9000
|
unkown
|
page readonly
|
|
|
|
19AAD510000
|
unkown
|
page read and write
|
|
|
|
19AACB82000
|
unkown
|
page read and write
|
|
|
|
20CD1F58000
|
unkown
|
page read and write
|
|
|
|
7FF561015000
|
unkown
|
page readonly
|
|
|
|
766BAFC000
|
unkown
|
page read and write
|
|
|
|
26BD8300000
|
unkown
|
page read and write
|
|
|
|
5B4000
|
heap private
|
page read and write
|
|
|
|
7FF5DBF95000
|
unkown
|
page readonly
|
|
|
|
26BD8250000
|
unkown
|
page read and write
|
|
|
|
7FF5DC9DA000
|
unkown
|
page readonly
|
|
|
|
B22FAF9000
|
unkown
|
page read and write
|
|
|
|
19AACC42000
|
unkown
|
page read and write
|
|
|
|
7FF5905A4000
|
unkown
|
page readonly
|
|
|
|
80BE000
|
unkown
|
page read and write
|
|
|
|
19AAA6F0000
|
unkown
|
page read and write
|
|
|
|
7FF4EC419000
|
unkown
|
page readonly
|
|
|
|
20CD1F2F000
|
unkown
|
page read and write
|
|
|
|
19AAA71B000
|
unkown
|
page read and write
|
|
|
|
7FF55DE34000
|
unkown
|
page readonly
|
|
|
|
19AAC61A000
|
unkown
|
page read and write
|
|
|
|
E10A8FE000
|
unkown
|
page read and write
|
|
|
|
63C7FA000
|
unkown
|
page read and write
|
|
|
|
7FF55DA1F000
|
unkown
|
page readonly
|
|
|
|
8D3AFAE000
|
unkown
|
page read and write
|
|
|
|
3090000
|
heap default
|
page read and write
|
|
|
|
20CD184C000
|
unkown
|
page read and write
|
|
|
|
26BD81B0000
|
unkown
|
page read and write
|
|
|
|
121C000
|
unkown
|
page readonly
|
|
|
|
20426A3F000
|
unkown
|
page read and write
|
|
|
|
7FF55DE42000
|
unkown
|
page readonly
|
|
|
|
19AAA665000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E01000
|
unkown
|
page readonly
|
|
|
|
7FF508C68000
|
unkown
|
page readonly
|
|
|
|
2D96000
|
unkown
|
page readonly
|
|
|
|
20CD1F71000
|
unkown
|
page read and write
|
|
|
|
1BCD75ED000
|
unkown
|
page read and write
|
|
|
|
7FF4EC15B000
|
unkown
|
page readonly
|
|
|
|
E10AD7F000
|
unkown
|
page read and write
|
|
|
|
2D09000
|
unkown
|
page readonly
|
|
|
|
19AAC6A0000
|
unkown
|
page read and write
|
|
|
|
19AAC66A000
|
unkown
|
page read and write
|
|
|
|
7FF54BFF3000
|
unkown
|
page readonly
|
|
|
|
20CD1F55000
|
unkown
|
page read and write
|
|
|
|
21CA6813000
|
unkown
|
page read and write
|
|
|
|
7FF508C5E000
|
unkown
|
page readonly
|
|
|
|
20CD1F4D000
|
unkown
|
page read and write
|
|
|
|
7FF5D462F000
|
unkown
|
page readonly
|
|
|
|
19AAA72D000
|
unkown
|
page read and write
|
|
|
|
7FF54BF4A000
|
unkown
|
page readonly
|
|
|
|
7FF59044B000
|
unkown
|
page readonly
|
|
|
|
20CD1F54000
|
unkown
|
page read and write
|
|
|
|
7FF5DC19C000
|
unkown
|
page readonly
|
|
|
|
2D7A000
|
unkown
|
page readonly
|
|
|
|
19AAC64E000
|
unkown
|
page read and write
|
|
|
|
20CD1F59000
|
unkown
|
page read and write
|
|
|
|
23073010000
|
heap default
|
page read and write
|
|
|
|
23074CA0000
|
unkown
|
page readonly
|
|
|
|
7FF508C4A000
|
unkown
|
page readonly
|
|
|
|
19AAC629000
|
unkown
|
page read and write
|
|
|
|
7FF5D3E07000
|
unkown
|
page readonly
|
|
|
|
7FF54BEF1000
|
unkown
|
page readonly
|
|
|
|
19AAC590000
|
unkown
|
page readonly
|
|
|
|
39D000
|
unkown
|
page read and write
|
|
|
|
20CD1850000
|
unkown
|
page read and write
|
|
|
|
19AAA6CB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC10C000
|
unkown
|
page readonly
|
|
|
|
26BD8213000
|
unkown
|
page read and write
|
|
|
|
20CD1F51000
|
unkown
|
page read and write
|
|
|
|
7FF55DDAE000
|
unkown
|
page readonly
|
|
|
|
20CD1F54000
|
unkown
|
page read and write
|
|
|
|
7FF59054A000
|
unkown
|
page readonly
|
|
|
|
7FF5DC15A000
|
unkown
|
page readonly
|
|
|
|
7FF5DC14D000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
19AAC693000
|
unkown
|
page read and write
|
|
|
|
2191EDB0000
|
heap default
|
page read and write
|
|
|
|
19AAC5A0000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
heap private
|
page read and write
|
|
|
|
7FF54BF9B000
|
unkown
|
page readonly
|
|
|
|
FE8A78E000
|
unkown
|
page read and write
|
|
|
|
80FF000
|
unkown
|
page read and write
|
|
|
|
7FF508C05000
|
unkown
|
page readonly
|
|
|
|
19AAA6D4000
|
unkown
|
page read and write
|
|
|
|
679DE7A000
|
unkown
|
page read and write
|
|
|
|
20CD1908000
|
unkown
|
page read and write
|
|
|
|
19AAC5A0000
|
unkown
|
page read and write
|
|
|
|
7FF561266000
|
unkown
|
page readonly
|
|
|
|
19AAA6FB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC187000
|
unkown
|
page readonly
|
|
|
|
31A0000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
7FF54C116000
|
unkown
|
page readonly
|
|
|
|
2D6D000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
7FF5DC91F000
|
unkown
|
page readonly
|
|
|
|
679E4FD000
|
unkown
|
page read and write
|
|
|
|
204268E0000
|
unkown
|
page readonly
|
|
|
|
2191EE6E000
|
unkown
|
page read and write
|
|
|
|
19AAA6F0000
|
unkown
|
page read and write
|
|
|
|
7FF55DDCD000
|
unkown
|
page readonly
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
3560000
|
unkown
|
page read and write
|
|
|
|
8D3B477000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
20CD1F68000
|
unkown
|
page read and write
|
|
|
|
679D91B000
|
unkown
|
page read and write
|
|
|
|
20CD1F51000
|
unkown
|
page read and write
|
|
|
|
7FF5610D1000
|
unkown
|
page readonly
|
|
|
|
7FF561269000
|
unkown
|
page readonly
|
|
|
|
7FF5DC110000
|
unkown
|
page readonly
|
|
|
|
20CD1FA2000
|
unkown
|
page read and write
|
|
|
|
81E0000
|
unkown
|
page read and write
|
|
|
|
7FF55DC58000
|
unkown
|
page readonly
|
|
|
|
2D6D000
|
unkown
|
page readonly
|
|
|
|
FE8AA7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DBA72000
|
unkown
|
page readonly
|
|
|
|
7FF560A4D000
|
unkown
|
page readonly
|
|
|
|
19AAA6D0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC944000
|
unkown
|
page readonly
|
|
|
|
7FF5903F3000
|
unkown
|
page readonly
|
|
|
|
20CD188A000
|
unkown
|
page read and write
|
|
|
|
7FF5905CD000
|
unkown
|
page readonly
|
|
|
|
19AAA920000
|
unkown
|
page readonly
|
|
|
|
E10AC77000
|
unkown
|
page read and write
|
|
|
|
19AAC635000
|
unkown
|
page read and write
|
|
|
|
19AAC692000
|
unkown
|
page read and write
|
|
|
|
7FF5905C6000
|
unkown
|
page readonly
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
7FF54C09E000
|
unkown
|
page readonly
|
|
|
|
FE8A70B000
|
unkown
|
page read and write
|
|
|
|
7FF55DD4E000
|
unkown
|
page readonly
|
|
|
|
19AAA6F0000
|
unkown
|
page read and write
|
|
|
|
21CA6900000
|
unkown
|
page read and write
|
|
|
|
19AAC687000
|
unkown
|
page read and write
|
|
|
|
20CD1F52000
|
unkown
|
page read and write
|
|
|
|
7FF54BE5B000
|
unkown
|
page readonly
|
|
|
|
7FF5DC95E000
|
unkown
|
page readonly
|
|
|
|
20CD1F68000
|
unkown
|
page read and write
|
|
|
|
20CD1F82000
|
unkown
|
page read and write
|
|
|
|
7FF508495000
|
unkown
|
page readonly
|
|
|
|
7FF59057F000
|
unkown
|
page readonly
|
|
|
|
20CD1F27000
|
unkown
|
page read and write
|
|
|
|
7FF54B9F3000
|
unkown
|
page readonly
|
|
|
|
20CD1F50000
|
unkown
|
page read and write
|
|
|
|
2D96000
|
unkown
|
page readonly
|
|
|
|
2BFE000
|
unkown
|
page readonly
|
|
|
|
20CD18C7000
|
unkown
|
page read and write
|
|
|
|
26BD8302000
|
unkown
|
page read and write
|
|
|
|
B22F78E000
|
unkown
|
page read and write
|
|
|
|
7FF5DC1E6000
|
unkown
|
page readonly
|
|
|
|
19AAC530000
|
heap private
|
page read and write
|
|
|
|
FFE000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3AB000
|
unkown
|
page readonly
|
|
|
|
1BCD75DE000
|
unkown
|
page read and write
|
|
|
|
7FF55DD7C000
|
unkown
|
page readonly
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
23073249000
|
unkown
|
page read and write
|
|
|
|
7FF5DBFA6000
|
unkown
|
page readonly
|
|
|
|
7FF5D4668000
|
unkown
|
page readonly
|
|
|
|
2A13000
|
unkown
|
page readonly
|
|
|
|
7FF5D46E4000
|
unkown
|
page readonly
|
|
|
|
19AAA6DF000
|
unkown
|
page read and write
|
|
|
|
2191F000000
|
unkown
|
page readonly
|
|
|
|
20CD2502000
|
unkown
|
page read and write
|
|
|
|
19AAA6F0000
|
unkown
|
page read and write
|
|
|
|
2D67000
|
unkown
|
page readonly
|
|
|
|
7FF5D4637000
|
unkown
|
page readonly
|
|
|
|
7FF4EC408000
|
unkown
|
page readonly
|
|
|
|
7FF5D4564000
|
unkown
|
page readonly
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
7FF55DA0C000
|
unkown
|
page readonly
|
|
|
|
7FF54BEE1000
|
unkown
|
page readonly
|
|
|
|
262AF429000
|
unkown
|
page read and write
|
|
|
|
20CD1F68000
|
unkown
|
page read and write
|
|
|
|
2D59000
|
unkown
|
page readonly
|
|
|
|
262AF502000
|
unkown
|
page read and write
|
|
|
|
8D3B27E000
|
unkown
|
page read and write
|
|
|
|
26BD8120000
|
heap private
|
page read and write
|
|
|
|
7FF5D466E000
|
unkown
|
page readonly
|
|
|
|
7FF5D4617000
|
unkown
|
page readonly
|
|
|
|
20CD1FC6000
|
unkown
|
page read and write
|
|
|
|
19AAC613000
|
unkown
|
page read and write
|
|
|
|
7FF5DC96D000
|
unkown
|
page readonly
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
2191EF00000
|
unkown
|
page read and write
|
|
|
|
7FF5DBD49000
|
unkown
|
page readonly
|
|
|
|
26BD8190000
|
unkown
|
page readonly
|
|
|
|
7FF54B935000
|
unkown
|
page readonly
|
|
|
|
20426B13000
|
unkown
|
page read and write
|
|
|
|
26BD8A02000
|
unkown
|
page read and write
|
|
|
|
19AAC64C000
|
unkown
|
page read and write
|
|
|
|
547B5F9000
|
unkown
|
page read and write
|
|
|
|
7FF5DBF36000
|
unkown
|
page readonly
|
|
|
|
FE8AB79000
|
unkown
|
page read and write
|
|
|
|
20CD1F58000
|
unkown
|
page read and write
|
|
|
|
7FF54BCB5000
|
unkown
|
page readonly
|
|
|
|
E10AAFB000
|
unkown
|
page read and write
|
|
|
|
7FF5612DA000
|
unkown
|
page readonly
|
|
|
|
7FF58FD51000
|
unkown
|
page readonly
|
|
|
|
3582000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page readonly
|
|
|
|
23073400000
|
unkown
|
page readonly
|
|
|
|
7FF5DC25A000
|
unkown
|
page readonly
|
|
|
|
7FF5D3E95000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page readonly
|
|
|
|
75C000
|
unkown
|
page read and write
|
|
|
|
20CD18B1000
|
unkown
|
page read and write
|
|
|
|
2A13000
|
unkown
|
page readonly
|
|
|
|
7FF54BC0E000
|
unkown
|
page readonly
|
|
|
|
20CD1F35000
|
unkown
|
page read and write
|
|
|
|
7FF4EC40E000
|
unkown
|
page readonly
|
|
|
|
7FF5DC1D8000
|
unkown
|
page readonly
|
|
|
|
19AACD00000
|
unkown
|
page read and write
|
|
|
|
72C0000
|
unkown
|
page read and write
|
|
|
|
7FF5DB9CD000
|
unkown
|
page readonly
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
20426A29000
|
unkown
|
page read and write
|
|
|
|
1BCD7875000
|
heap private
|
page read and write
|
|
|
|
7FF5DC8F5000
|
unkown
|
page readonly
|
|
|
|
7FF508C0B000
|
unkown
|
page readonly
|
|
|
|
20CD1F5D000
|
unkown
|
page read and write
|
|
|
|
547B77F000
|
unkown
|
page read and write
|
|
|
|
547B57E000
|
unkown
|
page read and write
|
|
|
|
20CD1F5E000
|
unkown
|
page read and write
|
|
|
|
19AAA6CC000
|
unkown
|
page read and write
|
|
|
|
26BD824D000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
7FF5DC6AB000
|
unkown
|
page readonly
|
|
|
|
7FF5905AF000
|
unkown
|
page readonly
|
|
|
|
19AAC60A000
|
unkown
|
page read and write
|
|
|
|
7FF5611EA000
|
unkown
|
page readonly
|
|
|
|
7FF5D467D000
|
unkown
|
page readonly
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
7FF59053A000
|
unkown
|
page readonly
|
|
|
|
20CD1F92000
|
unkown
|
page read and write
|
|
|
|
8D3BBFF000
|
unkown
|
page read and write
|
|
|
|
19AAD210000
|
unkown
|
page read and write
|
|
|
|
20CD1F2F000
|
unkown
|
page read and write
|
|
|
|
20CD18AB000
|
unkown
|
page read and write
|
|
|
|
63C77F000
|
unkown
|
page read and write
|
|
|
|
2191EE02000
|
unkown
|
page read and write
|
|
|
|
7FF55DC53000
|
unkown
|
page readonly
|
|
|
|
20CD1F5B000
|
unkown
|
page read and write
|
|
|
|
7FF5D464A000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
2191EE6C000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7EB000
|
unkown
|
page readonly
|
|
|
|
19AAC660000
|
unkown
|
page read and write
|
|
|
|
7FF4EC492000
|
unkown
|
page readonly
|
|
|
|
7FF561258000
|
unkown
|
page readonly
|
|
|
|
20CD1F44000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3F4000
|
unkown
|
page readonly
|
|
|
|
19AAD010000
|
unkown
|
page read and write
|
|
|
|
2191F120000
|
unkown
|
page readonly
|
|
|
|
7FF5DC5AC000
|
unkown
|
page readonly
|
|
|
|
7FF54C07F000
|
unkown
|
page readonly
|
|
|
|
20CD1F64000
|
unkown
|
page read and write
|
|
|
|
7FF5DC1BA000
|
unkown
|
page readonly
|
|
|
|
19AACB00000
|
unkown
|
page read and write
|
|
|
|
21CA684F000
|
unkown
|
page read and write
|
|
|
|
19AACA00000
|
unkown
|
page read and write
|
|
|
|
3510000
|
heap private
|
page read and write
|
|
|
|
8D3AF2C000
|
unkown
|
page read and write
|
|
|
|
20CD2360000
|
unkown
|
page read and write
|
|
|
|
20CD1F00000
|
unkown
|
page read and write
|
|
|
|
20CD1F82000
|
unkown
|
page read and write
|
|
|
|
7FF54BFED000
|
unkown
|
page readonly
|
|
|
|
20CD1849000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3EA000
|
unkown
|
page readonly
|
|
|
|
20CD1F4D000
|
unkown
|
page read and write
|
|
|
|
19AAA714000
|
unkown
|
page read and write
|
|
|
|
7FF508C44000
|
unkown
|
page readonly
|
|
|
|
7FF54C191000
|
unkown
|
page readonly
|
|
|
|
19AACC02000
|
unkown
|
page read and write
|
|
|
|
19AAA613000
|
unkown
|
page read and write
|
|
|
|
19AAC5D0000
|
unkown
|
page read and write
|
|
|
|
2D3C000
|
unkown
|
page readonly
|
|
|
|
1BCD7540000
|
unkown
|
page read and write
|
|
|
|
20CD1F43000
|
unkown
|
page read and write
|
|
|
|
20426A00000
|
unkown
|
page read and write
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
7FF4EC484000
|
unkown
|
page readonly
|
|
|
|
7FF4EC342000
|
unkown
|
page readonly
|
|
|
|
23073313000
|
unkown
|
page read and write
|
|
|
|
7FF4EC1C5000
|
unkown
|
page readonly
|
|
|
|
7FF4EC06A000
|
unkown
|
page readonly
|
|
|
|
2D09000
|
unkown
|
page readonly
|
|
|
|
19AAA6EF000
|
unkown
|
page read and write
|
|
|
|
21CA7000000
|
unkown
|
page readonly
|
|
|
|
7FF5DC0BD000
|
unkown
|
page readonly
|
|
|
|
21CA684A000
|
unkown
|
page read and write
|
|
|
|
7FF561228000
|
unkown
|
page readonly
|
|
|
|
20426A57000
|
unkown
|
page read and write
|
|
|
|
19AAD610000
|
unkown
|
page read and write
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
20426A6D000
|
unkown
|
page read and write
|
|
|
|
7FF55DB16000
|
unkown
|
page readonly
|
|
|
|
7FF58FDE5000
|
unkown
|
page readonly
|
|
|
|
26BD81A0000
|
unkown
|
page readonly
|
|
|
|
20CD1F2F000
|
unkown
|
page read and write
|
|
|
|
23073200000
|
unkown
|
page read and write
|
|
|
|
7FF54C00C000
|
unkown
|
page readonly
|
|
|
|
7FF5D465F000
|
unkown
|
page readonly
|
|
|
|
7FF5DC715000
|
unkown
|
page readonly
|
|
|
|
19AAC5E0000
|
unkown
|
page readonly
|
|
|
|
20CD2402000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
20CD2380000
|
unkown
|
page readonly
|
|
|
|
7FF55DC4B000
|
unkown
|
page readonly
|
|
|
|
19AAC560000
|
unkown
|
page read and write
|
|
|
|
19AAA658000
|
unkown
|
page read and write
|
|
|
|
19AAC636000
|
unkown
|
page read and write
|
|
|
|
19AAC61A000
|
unkown
|
page read and write
|
|
|
|
20CD184B000
|
unkown
|
page read and write
|
|
|
|
20CD1870000
|
unkown
|
page read and write
|
|
|
|
20CD2400000
|
unkown
|
page read and write
|
|
|
|
7FF5DBFC9000
|
unkown
|
page readonly
|
|
|
|
20426C00000
|
unkown
|
page readonly
|
|
|
|
20CD2402000
|
unkown
|
page read and write
|
|
|
|
19AAC1C0000
|
unkown
|
page readonly
|
|
|
|
19AAC624000
|
unkown
|
page read and write
|
|
|
|
7FF54C119000
|
unkown
|
page readonly
|
|
|
|
19AAC691000
|
unkown
|
page read and write
|
|
|
|
21CA67C0000
|
unkown
|
page readonly
|
|
|
|
26BD8313000
|
unkown
|
page read and write
|
|
|
|
7FF54C06F000
|
unkown
|
page readonly
|
|
|
|
2D4C000
|
unkown
|
page readonly
|
|
|
|
20CD1913000
|
unkown
|
page read and write
|
|
|
|
20CD1F2C000
|
unkown
|
page read and write
|
|
|
|
19AAD310000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page readonly
|
|
|
|
7FF560EBF000
|
unkown
|
page readonly
|
|
|
|
7FF55DA27000
|
unkown
|
page readonly
|
|
|
|
2D67000
|
unkown
|
page readonly
|
|
|
|
F09EC7E000
|
unkown
|
page read and write
|
|
|
|
FE8AAFA000
|
unkown
|
page read and write
|
|
|
|
19AAA65B000
|
unkown
|
page read and write
|
|
|
|
21CA6870000
|
unkown
|
page read and write
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
7FF5DC175000
|
unkown
|
page readonly
|
|
|
|
21CA65A0000
|
heap private
|
page read and write
|
|
|
|
23074BA0000
|
unkown
|
page read and write
|
|
|
|
20CD2000000
|
unkown
|
page readonly
|
|
|
|
2191ED50000
|
heap private
|
page read and write
|
|
|
|
20CD1FA2000
|
unkown
|
page read and write
|
|
|
|
20426B02000
|
unkown
|
page read and write
|
|
|
|
20CD1F9D000
|
unkown
|
page read and write
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
7FF54BCB7000
|
unkown
|
page readonly
|
|
|
|
7FF5DBE3F000
|
unkown
|
page readonly
|
|
|
|
20CD1FD7000
|
unkown
|
page read and write
|
|
|
|
20428820000
|
unkown
|
page read and write
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
20CD1F92000
|
unkown
|
page read and write
|
|
|
|
7FF5DC5C7000
|
unkown
|
page readonly
|
|
|
|
262AF400000
|
unkown
|
page read and write
|
|
|
|
20CD1F23000
|
unkown
|
page read and write
|
|
|
|
7FF54BFA3000
|
unkown
|
page readonly
|
|
|
|
7FF54B8A1000
|
unkown
|
page readonly
|
|
|
|
7FF4EC39A000
|
unkown
|
page readonly
|
|
|
|
20CD1F58000
|
unkown
|
page read and write
|
|
|
|
7FF590567000
|
unkown
|
page readonly
|
|
|
|
20CD1F30000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
19AAA6F3000
|
unkown
|
page read and write
|
|
|
|
19AAD210000
|
unkown
|
page read and write
|
|
|
|
19AAA654000
|
unkown
|
page read and write
|
|
|
|
20CD1F64000
|
unkown
|
page read and write
|
|
|
|
20CD1FCF000
|
unkown
|
page read and write
|
|
|
|
7FF508CE4000
|
unkown
|
page readonly
|
|
|
|
7FF5DC0B6000
|
unkown
|
page readonly
|
|
|
|
19AAA661000
|
unkown
|
page read and write
|
|
|
|
262B0F70000
|
unkown
|
page readonly
|
|
|
|
262B0E70000
|
unkown
|
page read and write
|
|
|
|
20CD18C0000
|
unkown
|
page read and write
|
|
|
|
1BCD7880000
|
unkown
|
page readonly
|
|
|
|
FDA000
|
unkown
|
page read and write
|
|
|
|
7FF590587000
|
unkown
|
page readonly
|
|
|
|
19AAC613000
|
unkown
|
page read and write
|
|
|
|
20CD1800000
|
unkown
|
page read and write
|
|
|
|
19AAC6DD000
|
unkown
|
page read and write
|
|
|
|
7FF54C10E000
|
unkown
|
page readonly
|
|
|
|
20CD1852000
|
unkown
|
page read and write
|
|
|
|
23073300000
|
unkown
|
page read and write
|
|
|
|
FE8AC7F000
|
unkown
|
page read and write
|
|
|
|
7FF5DC907000
|
unkown
|
page readonly
|
|
|
|
7FF5DC969000
|
unkown
|
page readonly
|
|
|
|
547B6FE000
|
unkown
|
page read and write
|
|
|
|
30A0000
|
unkown
|
page readonly
|
|
|
|
7FF59055B000
|
unkown
|
page readonly
|
|
|
|
1BCD7590000
|
unkown
|
page readonly
|
|
|
|
766B97E000
|
unkown
|
page read and write
|
|
|
|
7FF5DC1E9000
|
unkown
|
page readonly
|
|
|
|
7FF54C074000
|
unkown
|
page readonly
|
|
|
|
26BD8F40000
|
unkown
|
page readonly
|
|
|
|
2E02000
|
unkown
|
page readonly
|
|
|
|
230730F0000
|
unkown
|
page write copy
|
|
|
|
7FF5DC8EA000
|
unkown
|
page readonly
|
|
|
|
1BCD75C6000
|
unkown
|
page read and write
|
|
|
|
19AACA3B000
|
unkown
|
page read and write
|
|
|
|
B22FB7A000
|
unkown
|
page read and write
|
|
|
|
20CD1F29000
|
unkown
|
page read and write
|
|
|
|
679E37A000
|
unkown
|
page read and write
|
|
|
|
7FF5DC13F000
|
unkown
|
page readonly
|
|
|
|
2D2D000
|
unkown
|
page readonly
|
|
|
|
19AAC5B0000
|
unkown
|
page read and write
|
|
|
|
7FF54BE17000
|
unkown
|
page readonly
|
|
|
|
19AAC5C0000
|
unkown
|
page read and write
|
|
|
|
19AAA6CD000
|
unkown
|
page read and write
|
|
|
|
759000
|
unkown
|
page read and write
|
|
|
|
679E27B000
|
unkown
|
page read and write
|
|
|
|
19AAC636000
|
unkown
|
page read and write
|
|
|
|
679E07A000
|
unkown
|
page read and write
|
|
|
|
7FF5DC13B000
|
unkown
|
page readonly
|
|
|
|
19AACC42000
|
unkown
|
page read and write
|
|
|
|
19AAA73D000
|
unkown
|
page read and write
|
|
|
|
7FF590110000
|
unkown
|
page readonly
|
|
|
|
766BA7E000
|
unkown
|
page read and write
|
|
|
|
19AAA600000
|
unkown
|
page read and write
|
|
|
|
7FF59044E000
|
unkown
|
page readonly
|
|
|
|
19AAA6FF000
|
unkown
|
page read and write
|
|
|
|
7FF4EC29B000
|
unkown
|
page readonly
|
|
|
|
7FF54C0EA000
|
unkown
|
page readonly
|
|
|
|
7FF508C6E000
|
unkown
|
page readonly
|
|
|
|
7FF590431000
|
unkown
|
page readonly
|
|
|
|
19AAA66A000
|
unkown
|
page read and write
|
|
|
|
20CD2500000
|
unkown
|
page read and write
|
|
|
|
19AAA67A000
|
unkown
|
page read and write
|
|
|
|
20CD1F64000
|
unkown
|
page read and write
|
|
|
|
7FF561234000
|
unkown
|
page readonly
|
|
|
|
7FF5DBE2C000
|
unkown
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page readonly
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8FB000
|
unkown
|
page readonly
|
|
|
|
E10A87E000
|
unkown
|
page read and write
|
|
|
|
7FF5D46F2000
|
unkown
|
page readonly
|
|
|
|
727E000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
7FF4EC06F000
|
unkown
|
page readonly
|
|
|
|
19AACA32000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3CF000
|
unkown
|
page readonly
|
|
|
|
20CD1F2B000
|
unkown
|
page read and write
|
|
|
|
3563000
|
unkown
|
page read and write
|
|
|
|
19AAC6AC000
|
unkown
|
page read and write
|
|
|
|
21CA682A000
|
unkown
|
page read and write
|
|
|
|
20426A13000
|
unkown
|
page read and write
|
|
|
|
2D13000
|
unkown
|
page readonly
|
|
|
|
19AACB02000
|
unkown
|
page read and write
|
|
|
|
7FF5611FB000
|
unkown
|
page readonly
|
|
|
|
20CD2463000
|
unkown
|
page read and write
|
|
|
|
19AACA63000
|
unkown
|
page read and write
|
|
|
|
26BD8C00000
|
unkown
|
page readonly
|
|
|
|
2D43000
|
unkown
|
page readonly
|
|
|
|
21CA6800000
|
unkown
|
page read and write
|
|
|
|
6F0000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
547B4FE000
|
unkown
|
page read and write
|
|
|
|
F09EEFB000
|
unkown
|
page read and write
|
|
|
|
7FF4EC166000
|
unkown
|
page readonly
|
|
|
|
7FF54C18A000
|
unkown
|
page readonly
|
|
|
|
23073213000
|
unkown
|
page read and write
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
2D73000
|
unkown
|
page readonly
|
|
|
|
7FF54C004000
|
unkown
|
page readonly
|
|
|
|
20CD1F51000
|
unkown
|
page read and write
|
|
|
|
26BD8180000
|
heap default
|
page read and write
|
|
|
|
20CD1F4E000
|
unkown
|
page read and write
|
|
|
|
7FF5903A1000
|
unkown
|
page readonly
|
|
|
|
7FF5DBF48000
|
unkown
|
page readonly
|
|
|
|
20CD2402000
|
unkown
|
page read and write
|
|
|
|
20CD1F34000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
2191EF02000
|
unkown
|
page read and write
|
|
|
|
7FF5DC078000
|
unkown
|
page readonly
|
|
|
|
7FF5DC14F000
|
unkown
|
page readonly
|
|
|
|
20CD2402000
|
unkown
|
page read and write
|
|
|
|
2191EE70000
|
unkown
|
page read and write
|
|
|
|
F09F27F000
|
unkown
|
page read and write
|
|
|
|
20CD1F43000
|
unkown
|
page read and write
|
|
|
|
21CA6913000
|
unkown
|
page read and write
|
|
|
|
2D7A000
|
unkown
|
page readonly
|
|
|
|
7FF4EC48A000
|
unkown
|
page readonly
|
|
|
|
20CD1F34000
|
unkown
|
page read and write
|
|
|
|
26BD828A000
|
unkown
|
page read and write
|
|
|
|
7FF5DBFB1000
|
unkown
|
page readonly
|
|
|
|
20CD18A0000
|
unkown
|
page read and write
|
|
|
|
7FF4EC2A8000
|
unkown
|
page readonly
|
|
|
|
7FF59053C000
|
unkown
|
page readonly
|
|
|
|
20CD17D0000
|
unkown
|
page read and write
|
|
|
|
20CD1F82000
|
unkown
|
page read and write
|
|
|
|
20CD2402000
|
unkown
|
page read and write
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
23073268000
|
unkown
|
page read and write
|
|
|
|
7FF590116000
|
unkown
|
page readonly
|
|
|
|
19AAC630000
|
unkown
|
page read and write
|
|
|
|
219209C0000
|
unkown
|
page readonly
|
|
|
|
7FF5DC9E2000
|
unkown
|
page readonly
|
|
|
|
7FF561049000
|
unkown
|
page readonly
|
|
|
|
19AAA6E9000
|
unkown
|
page read and write
|
|
|
|
19AAA6FC000
|
unkown
|
page read and write
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
7FF55DA1A000
|
unkown
|
page readonly
|
|
|
|
262AF440000
|
unkown
|
page read and write
|
|
|
|
26BD8255000
|
unkown
|
page read and write
|
|
|
|
7FF5612E2000
|
unkown
|
page readonly
|
|
|
|
7FF5DC1DE000
|
unkown
|
page readonly
|
|
|
|
20CD2402000
|
unkown
|
page read and write
|
|
|
|
7FF55DDBE000
|
unkown
|
page readonly
|
|
|
|
7FF590555000
|
unkown
|
page readonly
|
|
|
|
19AAA6D4000
|
unkown
|
page read and write
|
|
|
|
3568000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7D1000
|
unkown
|
page readonly
|
|
|
|
8D3B577000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7F3000
|
unkown
|
page readonly
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
1255000
|
unkown
|
page readonly
|
|
|
|
3520000
|
unkown
|
page read and write
|
|
|
|
20426870000
|
heap private
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
7FF55DDC9000
|
unkown
|
page readonly
|
|
|
|
20CD1F30000
|
unkown
|
page read and write
|
|
|
|
204269B0000
|
unkown
|
page write copy
|
|
|
|
7FF4EC3E4000
|
unkown
|
page readonly
|
|
|
|
18B000
|
unkown
|
page read and write
|
|
|
|
19AAC636000
|
unkown
|
page read and write
|
|
|
|
2191EE70000
|
unkown
|
page read and write
|
|
|
|
761000
|
unkown
|
page read and write
|
|
|
|
7FF5D44A3000
|
unkown
|
page readonly
|
|
|
|
7FF54C0CF000
|
unkown
|
page readonly
|
|
|
|
2191EF13000
|
unkown
|
page read and write
|
|
|
|
7FF56125E000
|
unkown
|
page readonly
|
|
|
|
7FF5DC1CE000
|
unkown
|
page readonly
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
19AAC690000
|
unkown
|
page read and write
|
|
|
|
21CA7340000
|
unkown
|
page readonly
|
|
|
|
21CA684E000
|
unkown
|
page read and write
|
|
|
|
19AAC6D5000
|
unkown
|
page read and write
|
|
|
|
7FF55DD7F000
|
unkown
|
page readonly
|
|
|
|
7FF54BC02000
|
unkown
|
page readonly
|
|
|
|
2307323F000
|
unkown
|
page read and write
|
|
|
|
7FF54BFA8000
|
unkown
|
page readonly
|
|
|
|
7FF5D44FB000
|
unkown
|
page readonly
|
|
|
|
20CD1F29000
|
unkown
|
page read and write
|
|
|
|
3568000
|
unkown
|
page read and write
|
|
|
|
7FF5DC15C000
|
unkown
|
page readonly
|
|
|
|
F09F17F000
|
unkown
|
page read and write
|
|
|
|
19AAC520000
|
unkown
|
page readonly
|
|
|
|
19AAA5D0000
|
heap default
|
page read and write
|
|
|
|
262AF454000
|
unkown
|
page read and write
|
|
|
|
20CD1F51000
|
unkown
|
page read and write
|
|
|
|
19AAD010000
|
unkown
|
page read and write
|
|
|
|
19AAA676000
|
unkown
|
page read and write
|
|
|
|
2D2D000
|
unkown
|
page readonly
|
|
|
|
3800000
|
heap private
|
page read and write
|
|
|
|
20CD1F2C000
|
unkown
|
page read and write
|
|
|
|
2191F0D0000
|
unkown
|
page write copy
|
|
|
|
63C6FF000
|
unkown
|
page read and write
|
|
|
|
E10AB7E000
|
unkown
|
page read and write
|
|
|
|
679E57C000
|
unkown
|
page read and write
|
|
|
|
7FF4EC491000
|
unkown
|
page readonly
|
|
|
|
19AAC0C0000
|
unkown
|
page read and write
|
|
|
|
19AAC810000
|
unkown
|
page readonly
|
|
|
|
31E0000
|
unkown
|
page readonly
|
|
|
|
2D81000
|
unkown
|
page readonly
|
|
|
|
7FF4EC363000
|
unkown
|
page readonly
|
|
|
|
20CD17F0000
|
unkown
|
page readonly
|
|
|
|
7FF55DB0B000
|
unkown
|
page readonly
|
|
|
|
1BCD75D8000
|
unkown
|
page read and write
|
|
|
|
2BF2000
|
unkown
|
page readonly
|
|
|
|
2307326B000
|
unkown
|
page read and write
|
|
|
|
20426A6C000
|
unkown
|
page read and write
|
|
|
|
19AAA6DC000
|
unkown
|
page read and write
|
|
|
|
19AACC42000
|
unkown
|
page read and write
|
|
|
|
20CD1F60000
|
unkown
|
page read and write
|
|
|
|
3582000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8F0000
|
unkown
|
page readonly
|
|
|
|
7FF5DC151000
|
unkown
|
page readonly
|
|
|
|
B22FBFF000
|
unkown
|
page read and write
|
|
|
|
262AF413000
|
unkown
|
page read and write
|
|
|
|
19AAA6EE000
|
unkown
|
page read and write
|
|
|
|
7FF55DE3A000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
3540000
|
heap default
|
page read and write
|
|
|
|
7FF560EAC000
|
unkown
|
page readonly
|
|
|
|
7FF54C0A0000
|
unkown
|
page readonly
|
|
|
|
19AAA76D000
|
unkown
|
page read and write
|
|
|
|
19AAD610000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3A0000
|
unkown
|
page readonly
|
|
|
|
20CD1FB3000
|
unkown
|
page read and write
|
|
|
|
23073302000
|
unkown
|
page read and write
|
|
|
|
2D92000
|
unkown
|
page readonly
|
|
|
|
20CD1F82000
|
unkown
|
page read and write
|
|
|
|
679DDFF000
|
unkown
|
page read and write
|
|
|
|
7FF5DC892000
|
unkown
|
page readonly
|
|
|
|
20CD1F2F000
|
unkown
|
page read and write
|
|
|
|
7FF5DBF4F000
|
unkown
|
page readonly
|
|
|
|
20CD1610000
|
unkown
|
page readonly
|
|
|
|
204283C0000
|
unkown
|
page read and write
|
|
|
|
2E08000
|
unkown
|
page readonly
|
|
|
|
20CD1F82000
|
unkown
|
page read and write
|
|
|
|
7FF5902C7000
|
unkown
|
page readonly
|
|
|
|
F09EF7E000
|
unkown
|
page read and write
|
|
|
|
2D43000
|
unkown
|
page readonly
|
|
|
|
19AAA6F3000
|
unkown
|
page read and write
|
|
|
|
219208C0000
|
unkown
|
page read and write
|
|
|
|
7FF55D5AD000
|
unkown
|
page readonly
|
|
|
|
20426A02000
|
unkown
|
page read and write
|
|
|
|
7FF4EBBFD000
|
unkown
|
page readonly
|
|
|
|
7FF508C54000
|
unkown
|
page readonly
|
|
|
|
71A000
|
heap private
|
page read and write
|
|
|
|
7FF5DC93A000
|
unkown
|
page readonly
|
|
|
|
7FF55DB71000
|
unkown
|
page readonly
|
|
|
|
FE8ABFE000
|
unkown
|
page read and write
|
|
|
|
26BD8200000
|
unkown
|
page read and write
|
|
|
|
7FF5905BE000
|
unkown
|
page readonly
|
|
|
|
19AAA640000
|
unkown
|
page read and write
|
|
|
|
20CD1F82000
|
unkown
|
page read and write
|
|
|
|
2D13000
|
unkown
|
page readonly
|
|
|
|
33EE000
|
unkown
|
page read and write
|
|
|
|
7FF5610EB000
|
unkown
|
page readonly
|
|
|
|
7FF4EC416000
|
unkown
|
page readonly
|
|
|
|
19AAA6DA000
|
unkown
|
page read and write
|
|
|
|
21CA6902000
|
unkown
|
page read and write
|
|
|
|
19AAC61F000
|
unkown
|
page read and write
|
|
|
|
20CD1F2C000
|
unkown
|
page read and write
|
|
|
|
19AAA7A3000
|
unkown
|
page read and write
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
20CD1F83000
|
unkown
|
page read and write
|
|
|
|
2E13000
|
unkown
|
page readonly
|
|
|
|
7FF59063A000
|
unkown
|
page readonly
|
|
|
|
20CD1F5F000
|
unkown
|
page read and write
|
|
|
|
7FF5D41C0000
|
unkown
|
page readonly
|
|
|
|
20CD18A7000
|
unkown
|
page read and write
|
|
|
|
19AAA67A000
|
unkown
|
page read and write
|
|
|
|
7FF5D45FA000
|
unkown
|
page readonly
|
|
|
|
20CD1F64000
|
unkown
|
page read and write
|
|
|
|
7FF5DBE47000
|
unkown
|
page readonly
|
|
|
|
8D3B9F8000
|
unkown
|
page read and write
|
|
|
|
20CD1E02000
|
unkown
|
page read and write
|
|
|
|
20CD1F92000
|
unkown
|
page read and write
|
|
|
|
7FF5D4605000
|
unkown
|
page readonly
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
679E2FB000
|
unkown
|
page read and write
|
|
|
|
21CA684B000
|
unkown
|
page read and write
|
|
|
|
19AAC614000
|
unkown
|
page read and write
|
|
|
|
2DE5000
|
unkown
|
page readonly
|
|
|
|
3565000
|
unkown
|
page read and write
|
|
|
|
21CA683C000
|
unkown
|
page read and write
|
|
|
|
1BCD7870000
|
heap private
|
page read and write
|
|
|
|
21CA67D0000
|
unkown
|
page read and write
|
|
|
|
7FF5D46F1000
|
unkown
|
page readonly
|
|
|
|
20CD1FCF000
|
unkown
|
page read and write
|
|
|
|
7FF508C79000
|
unkown
|
page readonly
|
|
|
|
19AAD310000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3FE000
|
unkown
|
page readonly
|
|
|
|
33EA000
|
unkown
|
page read and write
|
|
|
|
20CD1F5D000
|
unkown
|
page read and write
|
|
|
|
19AAC5A0000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
19AAD110000
|
unkown
|
page read and write
|
|
|
|
19AAA68F000
|
unkown
|
page read and write
|
|
|
|
262AF340000
|
unkown
|
page write copy
|
|
|
|
F09ECFE000
|
unkown
|
page read and write
|
|
|
|
7FF4EC3A5000
|
unkown
|
page readonly
|
|
|
|
19AAA6E8000
|
unkown
|
page read and write
|
|
|
|
19AAA8D0000
|
unkown
|
page write copy
|
|
|
|
19AACA94000
|
unkown
|
page read and write
|
|
|
|
7FF4EC281000
|
unkown
|
page readonly
|
|
|
|
101B000
|
unkown
|
page read and write
|
|
|
|
20CD2600000
|
unkown
|
page readonly
|
|
|
|
20CD184D000
|
unkown
|
page read and write
|
|
|
|
20CD1F90000
|
unkown
|
page read and write
|
|
|
|
19AAD410000
|
unkown
|
page read and write
|
|
|
|
7FF54C08A000
|
unkown
|
page readonly
|
|
|
|
20CD1F1F000
|
unkown
|
page read and write
|
|
|
|
7FF54BED6000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
E10A9F5000
|
unkown
|
page read and write
|
|
|
|
1BCD75EC000
|
unkown
|
page read and write
|
|
|
|
2D92000
|
unkown
|
page readonly
|
|
|
|
19AAC608000
|
unkown
|
page read and write
|
|
|
|
20CD24A6000
|
unkown
|
page read and write
|
|
|
|
2D3C000
|
unkown
|
page readonly
|
|
|
|
7FF54C040000
|
unkown
|
page readonly
|
|
|
|
2D6F000
|
unkown
|
page readonly
|
|
|
|
2DE1000
|
unkown
|
page readonly
|
|
|
|
E10A58C000
|
unkown
|
page read and write
|
|
|
|
7FF5DC9E1000
|
unkown
|
page readonly
|
|
|
|
7FF590634000
|
unkown
|
page readonly
|
|
|
|
7FF4EC077000
|
unkown
|
page readonly
|
|
|
|
19AAA75E000
|
unkown
|
page read and write
|
|
|
|
2191EE6E000
|
unkown
|
page read and write
|
|
|
|
7FF54C0B7000
|
unkown
|
page readonly
|
|
|
|
7FF508C2C000
|
unkown
|
page readonly
|
|
|
|
7FF55DCF2000
|
unkown
|
page readonly
|
|
|
|
66B0000
|
unkown
|
page readonly
|
|
|
|
7FF5DC262000
|
unkown
|
page readonly
|
|
|
|
19AAA6EF000
|
unkown
|
page read and write
|
|
|
|
7FF54B9F7000
|
unkown
|
page readonly
|
|
|
|
7FF54C0CC000
|
unkown
|
page readonly
|
|
|
|
20CD17C0000
|
unkown
|
page readonly
|
|
|
|
19AAD110000
|
unkown
|
page read and write
|
|
|
|
19AAA6D0000
|
unkown
|
page read and write
|
|
|
|
7FF5DC073000
|
unkown
|
page readonly
|
|
|
|
7FF55DDC6000
|
unkown
|
page readonly
|
|
|
|
2DF4000
|
unkown
|
page readonly
|
|
|
|
2D1A000
|
unkown
|
page readonly
|
|
|
|
20CD1FA2000
|
unkown
|
page read and write
|
|
|
|
20CD1F64000
|
unkown
|
page read and write
|
|
|
|
7FF5DBFA4000
|
unkown
|
page readonly
|
|
|
|
19AAA702000
|
unkown
|
page read and write
|
|
|
|
19AAC639000
|
unkown
|
page read and write
|
|
|
|
8D3BAFB000
|
unkown
|
page read and write
|
|
|
|
7FF5DC051000
|
unkown
|
page readonly
|
|
|
|
7FF561011000
|
unkown
|
page readonly
|
|
|
|
7FF5DBF2B000
|
unkown
|
page readonly
|
|
|
|
2C37000
|
unkown
|
page readonly
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
7FF59057C000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
7FF5D41D5000
|
unkown
|
page readonly
|
|
|
|
7FF54BF43000
|
unkown
|
page readonly
|
|
|
|
23073229000
|
unkown
|
page read and write
|
|
|
|
19AAC691000
|
unkown
|
page read and write
|
|
|
|
20CD1F4E000
|
unkown
|
page read and write
|
|
|
|
20CD1F52000
|
unkown
|
page read and write
|
|
|
|
19AAC633000
|
unkown
|
page read and write
|
|
|
|
20CD1F57000
|
unkown
|
page read and write
|
|
|
|
19AAD210000
|
unkown
|
page read and write
|
|
|
|
7FF560FAB000
|
unkown
|
page readonly
|
|
|
|
19AAA6D2000
|
unkown
|
page read and write
|
|
|
|
20CD1F58000
|
unkown
|
page read and write
|
|
|
|
20CD1F81000
|
unkown
|
page read and write
|
|
|
|
19AAA659000
|
unkown
|
page read and write
|
|
|
|
20CD1F58000
|
unkown
|
page read and write
|
|
|
|
59E000
|
unkown
|
page read and write
|
|
|
|
7FF5DC749000
|
unkown
|
page readonly
|
|
|
|
BC0000
|
unkown
|
page readonly
|
|
|
|
20CD1F5F000
|
unkown
|
page read and write
|
|
|
|
26BD826F000
|
unkown
|
page read and write
|
|
|
|
20CD1F17000
|
unkown
|
page read and write
|
|
|
|
2D9B000
|
unkown
|
page readonly
|
|
|
|
7FF5D4451000
|
unkown
|
page readonly
|
|
|
|
20CD2360000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
7FF55DE41000
|
unkown
|
page readonly
|
|
|
|
7FF56121C000
|
unkown
|
page readonly
|
|
|
|
20CD1F4D000
|
unkown
|
page read and write
|
|
|
|
19AAA629000
|
unkown
|
page read and write
|
|
|
|
7FF55DD5B000
|
unkown
|
page readonly
|
|
|
|
7FF5DC17B000
|
unkown
|
page readonly
|
|
|
|
3400000
|
unkown
|
page readonly
|
|
|
|
20CD1F55000
|
unkown
|
page read and write
|
|
|
|
2DE5000
|
unkown
|
page readonly
|
|
|
|
7FF54BED4000
|
unkown
|
page readonly
|
|
|
|
19AAC61D000
|
unkown
|
page read and write
|
|
|
|
19AAA65D000
|
unkown
|
page read and write
|
|
|
|
7FF508557000
|
unkown
|
page readonly
|
|
|
|
1BCD75C6000
|
heap default
|
page read and write
|
|
|
|
19AACA43000
|
unkown
|
page read and write
|
|
|
|
7FF54C06B000
|
unkown
|
page readonly
|
|
|
|
19AAC61F000
|
unkown
|
page read and write
|
|
|
|
7FF5DC06B000
|
unkown
|
page readonly
|
|
|
|
7FF561261000
|
unkown
|
page readonly
|
|
|
|
7FF508C2F000
|
unkown
|
page readonly
|
|
|
|
20CD1FA2000
|
unkown
|
page read and write
|
|
|
|
755000
|
unkown
|
page read and write
|
|
|
|
7FF5905B8000
|
unkown
|
page readonly
|
|
|
|
7FF5DBF91000
|
unkown
|
page readonly
|
|
|
|
20CD18A7000
|
unkown
|
page read and write
|
|
|
|
7FF4EC340000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page readonly
|
|
|
|
19AAC5A0000
|
unkown
|
page read and write
|
|
|
|
7FF55D5B1000
|
unkown
|
page readonly
|
|
|
|
2D9B000
|
unkown
|
page readonly
|
|
|
|
8D3B67E000
|
unkown
|
page read and write
|
|
|
|
7FF508C00000
|
unkown
|
page readonly
|
|
|
|
204268D0000
|
heap default
|
page read and write
|
|
|
|
20CD15A0000
|
heap private
|
page read and write
|
|
|
|
19AAD310000
|
unkown
|
page read and write
|
|
|
|
7FF54BC12000
|
unkown
|
page readonly
|
|
|
|
20CD1F23000
|
unkown
|
page read and write
|
|
|
|
7FF5DC1B4000
|
unkown
|
page readonly
|
|
|
|
758000
|
unkown
|
page read and write
|
|
|
|
1BCD75DE000
|
unkown
|
page read and write
|
|
|
|
20CD1F33000
|
unkown
|
page read and write
|
|
|
|
7FF5DC261000
|
unkown
|
page readonly
|
|
|
|
20CD2402000
|
unkown
|
page read and write
|
|
|
|
7FF55DDC1000
|
unkown
|
page readonly
|
|
|
|
7FF55DBA9000
|
unkown
|
page readonly
|
|
|
|
7FF55DD94000
|
unkown
|
page readonly
|
|
|
|
4E0000
|
unkown
|
page readonly
|
|
|
|
19AAA665000
|
unkown
|
page read and write
|
|
|
|
679DC7E000
|
unkown
|
page read and write
|
|
|
|
7FF5D4600000
|
unkown
|
page readonly
|
|
|
|
20CD1F54000
|
unkown
|
page read and write
|
|
|
|
7FF5D454D000
|
unkown
|
page readonly
|
|
|
|
7FF54C0E4000
|
unkown
|
page readonly
|
|
|
|
73A000
|
heap default
|
page read and write
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
7FF5D4644000
|
unkown
|
page readonly
|
|
|
|
7FF4EC3CC000
|
unkown
|
page readonly
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
20CD1F4D000
|
unkown
|
page read and write
|
|
|
|
2D7F000
|
unkown
|
page readonly
|
|
|
|
7FF4EC41D000
|
unkown
|
page readonly
|
|
|
|
7FF5DC928000
|
unkown
|
page readonly
|
|
|
|
2A82000
|
unkown
|
page readonly
|
|
|
|
7FF5D44E1000
|
unkown
|
page readonly
|
|
|
|
1BCD75D7000
|
unkown
|
page read and write
|
|
|
|
204284C0000
|
unkown
|
page readonly
|
|
|
|
2307326E000
|
unkown
|
page read and write
|
|
|
|
19AAC6DF000
|
unkown
|
page read and write
|
|
|
|
8100000
|
unkown
|
page read and write
|
|
|
|
2191EDC0000
|
unkown
|
page readonly
|
|
|
|
C80000
|
unkown
|
page readonly
|
|
|
|
19AACC00000
|
unkown
|
page read and write
|
|
|
|
7FF5611B3000
|
unkown
|
page readonly
|
|
|
|
26BD8202000
|
unkown
|
page read and write
|
|
|
|
20CD1F61000
|
unkown
|
page read and write
|
|
|
|
7FF5DC16A000
|
unkown
|
page readonly
|
|
|
|
20CD18FA000
|
unkown
|
page read and write
|
|
|
|
7FF5D45EA000
|
unkown
|
page readonly
|
|
|
|
19AAA6D1000
|
unkown
|
page read and write
|
|
|
|
20CD1F83000
|
unkown
|
page read and write
|
|
|
|
2191EE70000
|
unkown
|
page read and write
|
|
|
|
2BFE000
|
unkown
|
page readonly
|
|
|
|
2E08000
|
unkown
|
page readonly
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
20CD1916000
|
unkown
|
page read and write
|
|
|
|
B22FA7F000
|
unkown
|
page read and write
|
|
|
|
3514000
|
heap private
|
page read and write
|
|
|
|
7FF5904A3000
|
unkown
|
page readonly
|
|
|
|
19AAA800000
|
unkown
|
page readonly
|
|
|
|
20CD1F83000
|
unkown
|
page read and write
|
|
|
|
7FF59054E000
|
unkown
|
page readonly
|
|
|
|
8D3B7FF000
|
unkown
|
page read and write
|
|
|
|
7FF4EC411000
|
unkown
|
page readonly
|
|
|
|
20CD2429000
|
unkown
|
page read and write
|
|
|
|
7FF54BE66000
|
unkown
|
page readonly
|
|
|
|
20CD1F72000
|
unkown
|
page read and write
|
|
|
|
31B0000
|
unkown
|
page read and write
|
|
|
|
20CD1F32000
|
unkown
|
page read and write
|
|
|
|
21CA6A00000
|
unkown
|
page readonly
|
|
|
|
F09EDF5000
|
unkown
|
page read and write
|
|
|
|
1BCD75B0000
|
heap default
|
page read and write
|
|
|
|
20CD1F33000
|
unkown
|
page read and write
|
|
|
|
7FF561190000
|
unkown
|
page readonly
|
|
|
|
7FF5D4654000
|
unkown
|
page readonly
|
|
|
|
7FF5D460B000
|
unkown
|
page readonly
|
|
|
|
21CA6600000
|
heap default
|
page read and write
|
|
|
|
7FF55DDB8000
|
unkown
|
page readonly
|
|
|
|
20CD2454000
|
unkown
|
page read and write
|
|
|
|
7FF5D4553000
|
unkown
|
page readonly
|
|
|
|
2191EE5B000
|
unkown
|
page read and write
|
|
|
|
7FF55DCF0000
|
unkown
|
page readonly
|
|
|
|
65AE000
|
unkown
|
page read and write
|
|
|
|
7FF5DC958000
|
unkown
|
page readonly
|
|
|
|
750000
|
unkown
|
page read and write
|
|
|
|
19AAD410000
|
unkown
|
page read and write
|
|
|
|
7FF5DC966000
|
unkown
|
page readonly
|
|
|
|
1BCD75DE000
|
unkown
|
page read and write
|
|
There are 1181 hidden memdumps, click here to show them.