Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Permission-414467145-06252021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$Permission-414467145-06252021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\15D09FEF-C541-4421-B5FD-A7FAC873EAA7
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\66A06DB.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS6 (Windows), datetime=2021:02:11 21:11:18], baseline, precision 8, 1860x1000, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\F2C40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Fri Jun 25 11:14:06 2021, atime=Fri Jun 25 11:14:06 2021, length=16384, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Permission-414467145-06252021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:55
2020, mtime=Fri Jun 25 11:14:06 2021, atime=Fri Jun 25 11:14:06 2021, length=153171, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\C3C40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4A07B784.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS6 (Windows), datetime=2021:02:11 21:11:18], baseline, precision 8, 1860x1000, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\BECE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\4FCE0000
|
data
|
dropped
|
|
There are 3 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\Kro.fis
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\Kro.fis1
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\Kro.fis2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\Kro.fis
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\Kro.fis1
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\Kro.fis2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
http://185.240.103.219/44372.593127662.dat
|
185.240.103.219
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
http://190.14.37.3/44372.593127662.dat
|
190.14.37.3
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://185.183.99.120/44372.5879460648.dat
|
185.183.99.120
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://190.14.37.3/44372.5879460648.dat
|
190.14.37.3
|
|
|
|
http://185.240.103.219/44372.5879460648.dat
|
185.240.103.219
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 104 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
190.14.37.3
|
unknown
|
Panama
|
|
|
|
185.183.99.120
|
unknown
|
Netherlands
|
|
|
|
185.240.103.219
|
unknown
|
Russian Federation
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
q2?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
r2?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BA35
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C10B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C272
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C33E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4C3F9
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4$?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5A2E0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5A560
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
828
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECA03
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECD5D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECE57
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECF22
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECFAE
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
:<8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F8FB2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F9212
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
There are 158 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF4EF2EE000
|
unkown
|
page readonly
|
|
|
|
7FF5B92D4000
|
unkown
|
page readonly
|
|
|
|
7FF5622DD000
|
unkown
|
page readonly
|
|
|
|
8DB6BFB000
|
unkown
|
page read and write
|
|
|
|
1593D829000
|
unkown
|
page read and write
|
|
|
|
7FF590A6B000
|
unkown
|
page readonly
|
|
|
|
2EE7000
|
unkown
|
page readonly
|
|
|
|
1B8B7D08000
|
unkown
|
page read and write
|
|
|
|
7FF5922FE000
|
unkown
|
page readonly
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
7FF5B8B47000
|
unkown
|
page readonly
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
21C9D102000
|
unkown
|
page read and write
|
|
|
|
7FF50D2E1000
|
unkown
|
page readonly
|
|
|
|
7FF562277000
|
unkown
|
page readonly
|
|
|
|
7FF5B9269000
|
unkown
|
page readonly
|
|
|
|
7A2F87A000
|
unkown
|
page read and write
|
|
|
|
7FF56201B000
|
unkown
|
page readonly
|
|
|
|
7FF5923FE000
|
unkown
|
page readonly
|
|
|
|
7FF4F6847000
|
unkown
|
page readonly
|
|
|
|
8DB697A000
|
unkown
|
page read and write
|
|
|
|
4A70000
|
unkown
|
page read and write
|
|
|
|
7FF4EF3D4000
|
unkown
|
page readonly
|
|
|
|
1593D710000
|
heap private
|
page read and write
|
|
|
|
7FF59135A000
|
unkown
|
page readonly
|
|
|
|
7FF592476000
|
unkown
|
page readonly
|
|
|
|
7FF4F4057000
|
unkown
|
page readonly
|
|
|
|
243E7A00000
|
unkown
|
page readonly
|
|
|
|
7A2F77F000
|
unkown
|
page read and write
|
|
|
|
7FF591D57000
|
unkown
|
page readonly
|
|
|
|
20E09700000
|
unkown
|
page read and write
|
|
|
|
7FF56E75A000
|
unkown
|
page readonly
|
|
|
|
A73000
|
heap default
|
page read and write
|
|
|
|
7FF4F6655000
|
unkown
|
page readonly
|
|
|
|
243E738B000
|
unkown
|
page read and write
|
|
|
|
7FF590A71000
|
unkown
|
page readonly
|
|
|
|
7FF562026000
|
unkown
|
page readonly
|
|
|
|
20E074EA000
|
unkown
|
page read and write
|
|
|
|
17FA1650000
|
heap private
|
page read and write
|
|
|
|
C3B000
|
unkown
|
page read and write
|
|
|
|
7FF592444000
|
unkown
|
page readonly
|
|
|
|
7A2F7F9000
|
unkown
|
page read and write
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
243E7379000
|
unkown
|
page read and write
|
|
|
|
7FF4EF0AB000
|
unkown
|
page readonly
|
|
|
|
201BD000000
|
unkown
|
page read and write
|
|
|
|
E90000
|
unkown
|
page read and write
|
|
|
|
7FF4F6804000
|
unkown
|
page readonly
|
|
|
|
7FF50D83B000
|
unkown
|
page readonly
|
|
|
|
323BAF7000
|
unkown
|
page read and write
|
|
|
|
7FF56E6D3000
|
unkown
|
page readonly
|
|
|
|
5ED831E000
|
unkown
|
page read and write
|
|
|
|
54DCAFF000
|
unkown
|
page read and write
|
|
|
|
1593D843000
|
unkown
|
page read and write
|
|
|
|
17FA12C6000
|
unkown
|
page read and write
|
|
|
|
7DD0000
|
unkown
|
page read and write
|
|
|
|
26001A69000
|
unkown
|
page read and write
|
|
|
|
7FF5172DD000
|
unkown
|
page readonly
|
|
|
|
7FF562085000
|
unkown
|
page readonly
|
|
|
|
8DB65FA000
|
unkown
|
page read and write
|
|
|
|
7FF5910D7000
|
unkown
|
page readonly
|
|
|
|
7FF4F4132000
|
unkown
|
page readonly
|
|
|
|
243E6AA6000
|
unkown
|
page read and write
|
|
|
|
2EEF000
|
unkown
|
page readonly
|
|
|
|
3210000
|
unkown
|
page read and write
|
|
|
|
ECB000
|
unkown
|
page read and write
|
|
|
|
7FF4EF366000
|
unkown
|
page readonly
|
|
|
|
20E09612000
|
unkown
|
page read and write
|
|
|
|
7FF592308000
|
unkown
|
page readonly
|
|
|
|
7FF4EEFBF000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
heap default
|
page read and write
|
|
|
|
243E7379000
|
unkown
|
page read and write
|
|
|
|
29DE6590000
|
unkown
|
page readonly
|
|
|
|
29DE7000000
|
unkown
|
page readonly
|
|
|
|
7FF4F40B6000
|
unkown
|
page readonly
|
|
|
|
2EEF000
|
unkown
|
page readonly
|
|
|
|
7FF4F68A9000
|
unkown
|
page readonly
|
|
|
|
243E6ABD000
|
unkown
|
page read and write
|
|
|
|
26001A6A000
|
unkown
|
page read and write
|
|
|
|
2F01000
|
unkown
|
page readonly
|
|
|
|
8DB67F9000
|
unkown
|
page read and write
|
|
|
|
FD0000
|
unkown
|
page read and write
|
|
|
|
20E09380000
|
unkown
|
page read and write
|
|
|
|
7FF591241000
|
unkown
|
page readonly
|
|
|
|
201BEAF0000
|
unkown
|
page readonly
|
|
|
|
20E09402000
|
unkown
|
page read and write
|
|
|
|
29DE664D000
|
unkown
|
page read and write
|
|
|
|
243E7330000
|
unkown
|
page read and write
|
|
|
|
7FF592405000
|
unkown
|
page readonly
|
|
|
|
7FF5923CB000
|
unkown
|
page readonly
|
|
|
|
A92000
|
unkown
|
page read and write
|
|
|
|
1B8B7C00000
|
unkown
|
page read and write
|
|
|
|
7FF50DA85000
|
unkown
|
page readonly
|
|
|
|
7FF4EF1F3000
|
unkown
|
page readonly
|
|
|
|
7FF591D53000
|
unkown
|
page readonly
|
|
|
|
DC0000
|
unkown
|
page readonly
|
|
|
|
7FF56E71B000
|
unkown
|
page readonly
|
|
|
|
BA6000
|
unkown
|
page read and write
|
|
|
|
7FF562260000
|
unkown
|
page readonly
|
|
|
|
7FF4F3F3B000
|
unkown
|
page readonly
|
|
|
|
7FF51728C000
|
unkown
|
page readonly
|
|
|
|
26001A6A000
|
unkown
|
page read and write
|
|
|
|
96941F7000
|
unkown
|
page read and write
|
|
|
|
20E0951B000
|
unkown
|
page read and write
|
|
|
|
17FA12CF000
|
unkown
|
page read and write
|
|
|
|
7FF4F402C000
|
unkown
|
page readonly
|
|
|
|
243E6C00000
|
unkown
|
page readonly
|
|
|
|
7FF4F3F93000
|
unkown
|
page readonly
|
|
|
|
7FF5172C8000
|
unkown
|
page readonly
|
|
|
|
243E7391000
|
unkown
|
page read and write
|
|
|
|
7FF4F680F000
|
unkown
|
page readonly
|
|
|
|
7FF50DAB8000
|
unkown
|
page readonly
|
|
|
|
1593F370000
|
unkown
|
page readonly
|
|
|
|
7FF50DAF1000
|
unkown
|
page readonly
|
|
|
|
7FF5912CC000
|
unkown
|
page readonly
|
|
|
|
243E736D000
|
unkown
|
page read and write
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
FB7000
|
heap private
|
page read and write
|
|
|
|
17FA13A0000
|
unkown
|
page readonly
|
|
|
|
5D30000
|
unkown
|
page readonly
|
|
|
|
7FF4F3F21000
|
unkown
|
page readonly
|
|
|
|
20E07472000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
178BFD13000
|
unkown
|
page read and write
|
|
|
|
7FF5924E4000
|
unkown
|
page readonly
|
|
|
|
7FF4F677D000
|
unkown
|
page readonly
|
|
|
|
17FA1260000
|
unkown
|
page read and write
|
|
|
|
20E073C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F681A000
|
unkown
|
page readonly
|
|
|
|
49AE000
|
unkown
|
page read and write
|
|
|
|
2EC3000
|
unkown
|
page readonly
|
|
|
|
7FF4EF1EB000
|
unkown
|
page readonly
|
|
|
|
7FF50DA20000
|
unkown
|
page readonly
|
|
|
|
243E7391000
|
unkown
|
page read and write
|
|
|
|
7A2F8FE000
|
unkown
|
page read and write
|
|
|
|
243E6CD0000
|
unkown
|
page readonly
|
|
|
|
243E7396000
|
unkown
|
page read and write
|
|
|
|
323B38B000
|
unkown
|
page read and write
|
|
|
|
243E7160000
|
unkown
|
page readonly
|
|
|
|
C9A000
|
heap private
|
page read and write
|
|
|
|
7FF5172D9000
|
unkown
|
page readonly
|
|
|
|
7FF516F37000
|
unkown
|
page readonly
|
|
|
|
2EE5000
|
unkown
|
page readonly
|
|
|
|
EB0000
|
heap default
|
page read and write
|
|
|
|
7FF5622D9000
|
unkown
|
page readonly
|
|
|
|
A75000
|
unkown
|
page read and write
|
|
|
|
20E0A010000
|
unkown
|
page read and write
|
|
|
|
2ECC000
|
unkown
|
page readonly
|
|
|
|
243E736E000
|
unkown
|
page read and write
|
|
|
|
7FF4EEFC7000
|
unkown
|
page readonly
|
|
|
|
7FF517298000
|
unkown
|
page readonly
|
|
|
|
2F1B000
|
unkown
|
page readonly
|
|
|
|
7FF56E7F4000
|
unkown
|
page readonly
|
|
|
|
243E7760000
|
unkown
|
page readonly
|
|
|
|
2F1B000
|
unkown
|
page readonly
|
|
|
|
7A2F67A000
|
unkown
|
page read and write
|
|
|
|
2EE5000
|
unkown
|
page readonly
|
|
|
|
7FF56E710000
|
unkown
|
page readonly
|
|
|
|
7FF5172AA000
|
unkown
|
page readonly
|
|
|
|
1B8B7C86000
|
unkown
|
page read and write
|
|
|
|
7FF592015000
|
unkown
|
page readonly
|
|
|
|
8DB687B000
|
unkown
|
page read and write
|
|
|
|
26001A6C000
|
unkown
|
page read and write
|
|
|
|
54DC8FE000
|
unkown
|
page read and write
|
|
|
|
20E074D6000
|
unkown
|
page read and write
|
|
|
|
7FF4F689E000
|
unkown
|
page readonly
|
|
|
|
20E0746F000
|
unkown
|
page read and write
|
|
|
|
20E0952F000
|
unkown
|
page read and write
|
|
|
|
8DB647B000
|
unkown
|
page read and write
|
|
|
|
26001A13000
|
unkown
|
page read and write
|
|
|
|
7FF50DAFD000
|
unkown
|
page readonly
|
|
|
|
8DB6AFA000
|
unkown
|
page read and write
|
|
|
|
29DE6800000
|
unkown
|
page readonly
|
|
|
|
7FF59236C000
|
unkown
|
page readonly
|
|
|
|
DA0000
|
unkown
|
page read and write
|
|
|
|
7FF59135E000
|
unkown
|
page readonly
|
|
|
|
243E7379000
|
unkown
|
page read and write
|
|
|
|
A79000
|
unkown
|
page read and write
|
|
|
|
6340000
|
unkown
|
page readonly
|
|
|
|
20E07467000
|
unkown
|
page read and write
|
|
|
|
EC0000
|
unkown
|
page readonly
|
|
|
|
7FF5923EC000
|
unkown
|
page readonly
|
|
|
|
7FF5922FB000
|
unkown
|
page readonly
|
|
|
|
8DB6D7D000
|
unkown
|
page read and write
|
|
|
|
FEC000
|
unkown
|
page read and write
|
|
|
|
1593D86F000
|
unkown
|
page read and write
|
|
|
|
7FF5912B3000
|
unkown
|
page readonly
|
|
|
|
7FF50DAE8000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
7FF591377000
|
unkown
|
page readonly
|
|
|
|
5ED867A000
|
unkown
|
page read and write
|
|
|
|
7FF517277000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
heap private
|
page read and write
|
|
|
|
FB0000
|
heap private
|
page read and write
|
|
|
|
2F74000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
243E7379000
|
unkown
|
page read and write
|
|
|
|
20E0954D000
|
unkown
|
page read and write
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
C69000
|
unkown
|
page read and write
|
|
|
|
21C9D123000
|
heap private
|
page read and write
|
|
|
|
7FF56228F000
|
unkown
|
page readonly
|
|
|
|
7FF56228C000
|
unkown
|
page readonly
|
|
|
|
7FF517260000
|
unkown
|
page readonly
|
|
|
|
7FF5B91FB000
|
unkown
|
page readonly
|
|
|
|
C97000
|
heap private
|
page read and write
|
|
|
|
2EB5000
|
unkown
|
page readonly
|
|
|
|
2ED0000
|
unkown
|
page readonly
|
|
|
|
20E0957B000
|
unkown
|
page read and write
|
|
|
|
C60000
|
unkown
|
page readonly
|
|
|
|
7FF4EF292000
|
unkown
|
page readonly
|
|
|
|
FBA000
|
heap private
|
page read and write
|
|
|
|
20E095E9000
|
unkown
|
page read and write
|
|
|
|
2F74000
|
unkown
|
page readonly
|
|
|
|
8DB6B7A000
|
unkown
|
page read and write
|
|
|
|
7FF5B8B43000
|
unkown
|
page readonly
|
|
|
|
2A364F9000
|
unkown
|
page read and write
|
|
|
|
F0EAEAC000
|
unkown
|
page read and write
|
|
|
|
7FF4EF328000
|
unkown
|
page readonly
|
|
|
|
1B8B7C02000
|
unkown
|
page read and write
|
|
|
|
17FA1660000
|
unkown
|
page readonly
|
|
|
|
243E7349000
|
unkown
|
page read and write
|
|
|
|
7FF4F67D0000
|
unkown
|
page readonly
|
|
|
|
8DB657E000
|
unkown
|
page read and write
|
|
|
|
4A2E000
|
unkown
|
page read and write
|
|
|
|
243E7802000
|
unkown
|
page read and write
|
|
|
|
1B8B79A0000
|
heap private
|
page read and write
|
|
|
|
7FF4F64FA000
|
unkown
|
page readonly
|
|
|
|
7FF5172B4000
|
unkown
|
page readonly
|
|
|
|
201BD102000
|
unkown
|
page read and write
|
|
|
|
5DF0000
|
unkown
|
page readonly
|
|
|
|
17FA12B6000
|
heap default
|
page read and write
|
|
|
|
29DE6708000
|
unkown
|
page read and write
|
|
|
|
26001A69000
|
unkown
|
page read and write
|
|
|
|
243E73D3000
|
unkown
|
page read and write
|
|
|
|
20E07478000
|
unkown
|
page read and write
|
|
|
|
7FF562298000
|
unkown
|
page readonly
|
|
|
|
7810000
|
unkown
|
page read and write
|
|
|
|
7FF4F6835000
|
unkown
|
page readonly
|
|
|
|
26001B13000
|
unkown
|
page read and write
|
|
|
|
7FF5923D4000
|
unkown
|
page readonly
|
|
|
|
FB0000
|
heap default
|
page read and write
|
|
|
|
20E093C0000
|
unkown
|
page readonly
|
|
|
|
26001A6C000
|
unkown
|
page read and write
|
|
|
|
243E7190000
|
unkown
|
page write copy
|
|
|
|
7FF51725A000
|
unkown
|
page readonly
|
|
|
|
20E09500000
|
unkown
|
page read and write
|
|
|
|
3280000
|
unkown
|
page read and write
|
|
|
|
7FF591F62000
|
unkown
|
page readonly
|
|
|
|
7FF517265000
|
unkown
|
page readonly
|
|
|
|
2DBB000
|
unkown
|
page readonly
|
|
|
|
7FF4F687A000
|
unkown
|
page readonly
|
|
|
|
7FF56225A000
|
unkown
|
page readonly
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
243E7331000
|
unkown
|
page read and write
|
|
|
|
7FF50D983000
|
unkown
|
page readonly
|
|
|
|
7FF5B91F0000
|
unkown
|
page readonly
|
|
|
|
20E0A410000
|
unkown
|
page read and write
|
|
|
|
1B8B8740000
|
unkown
|
page readonly
|
|
|
|
29DE6613000
|
unkown
|
page read and write
|
|
|
|
FD5000
|
unkown
|
page read and write
|
|
|
|
243E6A8B000
|
unkown
|
page read and write
|
|
|
|
7FF5913CE000
|
unkown
|
page readonly
|
|
|
|
7FF4F64EC000
|
unkown
|
page readonly
|
|
|
|
7FF4F6409000
|
unkown
|
page readonly
|
|
|
|
20E09600000
|
unkown
|
page read and write
|
|
|
|
243E73CF000
|
unkown
|
page read and write
|
|
|
|
2F82000
|
unkown
|
page readonly
|
|
|
|
7FF4F4040000
|
unkown
|
page readonly
|
|
|
|
7FF4EF2B3000
|
unkown
|
page readonly
|
|
|
|
7FF517168000
|
unkown
|
page readonly
|
|
|
|
178BFC35000
|
unkown
|
page read and write
|
|
|
|
7FF4F6392000
|
unkown
|
page readonly
|
|
|
|
A40000
|
unkown
|
page readonly
|
|
|
|
7FF50DAF6000
|
unkown
|
page readonly
|
|
|
|
7FF4F3C00000
|
unkown
|
page readonly
|
|
|
|
7FF4F6884000
|
unkown
|
page readonly
|
|
|
|
20E0753B000
|
unkown
|
page read and write
|
|
|
|
2B8C000
|
unkown
|
page readonly
|
|
|
|
17FA12CF000
|
unkown
|
page read and write
|
|
|
|
2F16000
|
unkown
|
page readonly
|
|
|
|
7FF4F374B000
|
unkown
|
page readonly
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
7FF50D846000
|
unkown
|
page readonly
|
|
|
|
243E7390000
|
unkown
|
page read and write
|
|
|
|
26001A6E000
|
unkown
|
page read and write
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
29DE6600000
|
unkown
|
page read and write
|
|
|
|
20E07350000
|
heap private
|
page read and write
|
|
|
|
2A3657A000
|
unkown
|
page read and write
|
|
|
|
7FF56E78D000
|
unkown
|
page readonly
|
|
|
|
178BFB20000
|
unkown
|
page readonly
|
|
|
|
20E0751B000
|
unkown
|
page read and write
|
|
|
|
2A3647E000
|
unkown
|
page read and write
|
|
|
|
1B8B7C66000
|
unkown
|
page read and write
|
|
|
|
11BE000
|
unkown
|
page read and write
|
|
|
|
20E09882000
|
unkown
|
page read and write
|
|
|
|
26001A71000
|
unkown
|
page read and write
|
|
|
|
7FF4F3FA4000
|
unkown
|
page readonly
|
|
|
|
20E0953E000
|
unkown
|
page read and write
|
|
|
|
7FF51725E000
|
unkown
|
page readonly
|
|
|
|
243E6B08000
|
unkown
|
page read and write
|
|
|
|
7FF4F67F3000
|
unkown
|
page readonly
|
|
|
|
7FF56E801000
|
unkown
|
page readonly
|
|
|
|
E8A000
|
unkown
|
page read and write
|
|
|
|
7FF4F6664000
|
unkown
|
page readonly
|
|
|
|
7FF4EF36D000
|
unkown
|
page readonly
|
|
|
|
7FF4F68A1000
|
unkown
|
page readonly
|
|
|
|
178BFE00000
|
unkown
|
page write copy
|
|
|
|
201BCFC0000
|
unkown
|
page readonly
|
|
|
|
7FF4EF33A000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
17FA1280000
|
unkown
|
page read and write
|
|
|
|
243E73CC000
|
unkown
|
page read and write
|
|
|
|
7FF56DF9A000
|
unkown
|
page readonly
|
|
|
|
1B8B8202000
|
unkown
|
page read and write
|
|
|
|
7A2F97D000
|
unkown
|
page read and write
|
|
|
|
2F61000
|
unkown
|
page readonly
|
|
|
|
178BFD00000
|
unkown
|
page read and write
|
|
|
|
44DADFE000
|
unkown
|
page read and write
|
|
|
|
FD9000
|
unkown
|
page read and write
|
|
|
|
7FF517081000
|
unkown
|
page readonly
|
|
|
|
2EFF000
|
unkown
|
page readonly
|
|
|
|
20E093A0000
|
unkown
|
page read and write
|
|
|
|
54DCA7A000
|
unkown
|
page read and write
|
|
|
|
7FF50D988000
|
unkown
|
page readonly
|
|
|
|
7FF517163000
|
unkown
|
page readonly
|
|
|
|
243E71E0000
|
unkown
|
page readonly
|
|
|
|
243E7350000
|
unkown
|
page read and write
|
|
|
|
7FF592017000
|
unkown
|
page readonly
|
|
|
|
7FF59125E000
|
unkown
|
page readonly
|
|
|
|
E7E000
|
unkown
|
page read and write
|
|
|
|
2D72000
|
unkown
|
page readonly
|
|
|
|
7FF5913C8000
|
unkown
|
page readonly
|
|
|
|
1B8B7BD0000
|
unkown
|
page read and write
|
|
|
|
7FF4F3FAC000
|
unkown
|
page readonly
|
|
|
|
11BE000
|
unkown
|
page read and write
|
|
|
|
243E6A00000
|
unkown
|
page read and write
|
|
|
|
243E69E0000
|
heap default
|
page read and write
|
|
|
|
20E0A210000
|
unkown
|
page read and write
|
|
|
|
7FF50DB71000
|
unkown
|
page readonly
|
|
|
|
7FF591FD5000
|
unkown
|
page readonly
|
|
|
|
243E6AAA000
|
unkown
|
page read and write
|
|
|
|
978000
|
unkown
|
page read and write
|
|
|
|
7FF5924F2000
|
unkown
|
page readonly
|
|
|
|
7FF4F6921000
|
unkown
|
page readonly
|
|
|
|
44DA7AD000
|
unkown
|
page read and write
|
|
|
|
7FF50DAAF000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
7FF4F64FF000
|
unkown
|
page readonly
|
|
|
|
243E7322000
|
unkown
|
page read and write
|
|
|
|
7FF561ABD000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
7FF5B9234000
|
unkown
|
page readonly
|
|
|
|
243E6B16000
|
unkown
|
page read and write
|
|
|
|
CD0000
|
unkown
|
page readonly
|
|
|
|
7FF5B92E1000
|
unkown
|
page readonly
|
|
|
|
7FF50DB6A000
|
unkown
|
page readonly
|
|
|
|
2ECC000
|
unkown
|
page readonly
|
|
|
|
A92000
|
unkown
|
page read and write
|
|
|
|
20E07473000
|
unkown
|
page read and write
|
|
|
|
1593F270000
|
unkown
|
page read and write
|
|
|
|
FF5000
|
unkown
|
page read and write
|
|
|
|
20E0A210000
|
unkown
|
page read and write
|
|
|
|
29DE664F000
|
unkown
|
page read and write
|
|
|
|
7FF4F3C06000
|
unkown
|
page readonly
|
|
|
|
26001A5A000
|
unkown
|
page read and write
|
|
|
|
7FF5622BE000
|
unkown
|
page readonly
|
|
|
|
21C9D000000
|
unkown
|
page read and write
|
|
|
|
2F01000
|
unkown
|
page readonly
|
|
|
|
2F82000
|
unkown
|
page readonly
|
|
|
|
7FF4F6671000
|
unkown
|
page readonly
|
|
|
|
29DE65A0000
|
unkown
|
page read and write
|
|
|
|
F30000
|
unkown
|
page read and write
|
|
|
|
323B9FF000
|
unkown
|
page read and write
|
|
|
|
7FF50DAEE000
|
unkown
|
page readonly
|
|
|
|
20E09513000
|
unkown
|
page read and write
|
|
|
|
7FF4F6733000
|
unkown
|
page readonly
|
|
|
|
4A6E000
|
unkown
|
page read and write
|
|
|
|
243E6B02000
|
unkown
|
page read and write
|
|
|
|
7FF4F6131000
|
unkown
|
page readonly
|
|
|
|
7FF4F412A000
|
unkown
|
page readonly
|
|
|
|
20E0A310000
|
unkown
|
page read and write
|
|
|
|
7FF4F6874000
|
unkown
|
page readonly
|
|
|
|
44DAAFE000
|
unkown
|
page read and write
|
|
|
|
FD3000
|
heap default
|
page read and write
|
|
|
|
FE0000
|
unkown
|
page read and write
|
|
|
|
7FF517026000
|
unkown
|
page readonly
|
|
|
|
260017D0000
|
heap private
|
page read and write
|
|
|
|
7FF50D757000
|
unkown
|
page readonly
|
|
|
|
20E0751A000
|
unkown
|
page read and write
|
|
|
|
243E71F0000
|
unkown
|
page readonly
|
|
|
|
7FF59244A000
|
unkown
|
page readonly
|
|
|
|
2F65000
|
unkown
|
page readonly
|
|
|
|
7FF517085000
|
unkown
|
page readonly
|
|
|
|
2EFF000
|
unkown
|
page readonly
|
|
|
|
2B8C000
|
unkown
|
page readonly
|
|
|
|
76B000
|
unkown
|
page read and write
|
|
|
|
1B8B7C13000
|
unkown
|
page read and write
|
|
|
|
20E09540000
|
unkown
|
page read and write
|
|
|
|
2ECC000
|
unkown
|
page readonly
|
|
|
|
243E7359000
|
unkown
|
page read and write
|
|
|
|
F0EB3FB000
|
unkown
|
page read and write
|
|
|
|
178BFE50000
|
unkown
|
page readonly
|
|
|
|
1030000
|
unkown
|
page readonly
|
|
|
|
178BFC00000
|
unkown
|
page read and write
|
|
|
|
7FF4F3C15000
|
unkown
|
page readonly
|
|
|
|
7FF4F4077000
|
unkown
|
page readonly
|
|
|
|
7FF56234A000
|
unkown
|
page readonly
|
|
|
|
7FF59246E000
|
unkown
|
page readonly
|
|
|
|
7FF5B921F000
|
unkown
|
page readonly
|
|
|
|
20E074C5000
|
unkown
|
page read and write
|
|
|
|
7FF4F67D2000
|
unkown
|
page readonly
|
|
|
|
243E7372000
|
unkown
|
page read and write
|
|
|
|
7FF4EF1F8000
|
unkown
|
page readonly
|
|
|
|
7FF4EF149000
|
unkown
|
page readonly
|
|
|
|
1593D7D0000
|
unkown
|
page readonly
|
|
|
|
243E7740000
|
unkown
|
page read and write
|
|
|
|
243E7400000
|
unkown
|
page readonly
|
|
|
|
1593D86E000
|
unkown
|
page read and write
|
|
|
|
178BFD02000
|
unkown
|
page read and write
|
|
|
|
7FF4F4131000
|
unkown
|
page readonly
|
|
|
|
96944FF000
|
unkown
|
page read and write
|
|
|
|
243E6AA6000
|
unkown
|
page read and write
|
|
|
|
20E07466000
|
unkown
|
page read and write
|
|
|
|
7FF517202000
|
unkown
|
page readonly
|
|
|
|
6EBD77E000
|
unkown
|
page read and write
|
|
|
|
96943F7000
|
unkown
|
page read and write
|
|
|
|
F0EB2F5000
|
unkown
|
page read and write
|
|
|
|
7FF516F2F000
|
unkown
|
page readonly
|
|
|
|
201BD200000
|
unkown
|
page write copy
|
|
|
|
7FF4F4094000
|
unkown
|
page readonly
|
|
|
|
7FF592177000
|
unkown
|
page readonly
|
|
|
|
F0EB4F7000
|
unkown
|
page read and write
|
|
|
|
E3E000
|
unkown
|
page read and write
|
|
|
|
7FF5B91F5000
|
unkown
|
page readonly
|
|
|
|
1593D86E000
|
unkown
|
page read and write
|
|
|
|
201BCE80000
|
heap private
|
page read and write
|
|
|
|
7FF56E754000
|
unkown
|
page readonly
|
|
|
|
178BFC13000
|
unkown
|
page read and write
|
|
|
|
243E6A13000
|
unkown
|
page read and write
|
|
|
|
7FF59136B000
|
unkown
|
page readonly
|
|
|
|
7FF5B925E000
|
unkown
|
page readonly
|
|
|
|
7FF50DADE000
|
unkown
|
page readonly
|
|
|
|
7FF517200000
|
unkown
|
page readonly
|
|
|
|
243E6AE2000
|
unkown
|
page read and write
|
|
|
|
243E7379000
|
unkown
|
page read and write
|
|
|
|
20E0A110000
|
unkown
|
page read and write
|
|
|
|
2F61000
|
unkown
|
page readonly
|
|
|
|
20E074DE000
|
unkown
|
page read and write
|
|
|
|
7FF5923DF000
|
unkown
|
page readonly
|
|
|
|
243E738E000
|
unkown
|
page read and write
|
|
|
|
7FF591365000
|
unkown
|
page readonly
|
|
|
|
20E07455000
|
unkown
|
page read and write
|
|
|
|
7FF5622C8000
|
unkown
|
page readonly
|
|
|
|
243E7349000
|
unkown
|
page read and write
|
|
|
|
7FF591444000
|
unkown
|
page readonly
|
|
|
|
26001A6A000
|
unkown
|
page read and write
|
|
|
|
7FF50D8A1000
|
unkown
|
page readonly
|
|
|
|
243E6A51000
|
unkown
|
page read and write
|
|
|
|
7FF59125B000
|
unkown
|
page readonly
|
|
|
|
7FF5172A4000
|
unkown
|
page readonly
|
|
|
|
1593D802000
|
unkown
|
page read and write
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
7FF4F6776000
|
unkown
|
page readonly
|
|
|
|
7FF4EF34E000
|
unkown
|
page readonly
|
|
|
|
1B8B7A10000
|
unkown
|
page readonly
|
|
|
|
178BFC3F000
|
unkown
|
page read and write
|
|
|
|
1B8B7AE0000
|
unkown
|
page readonly
|
|
|
|
7FF5172D6000
|
unkown
|
page readonly
|
|
|
|
243E73AF000
|
unkown
|
page read and write
|
|
|
|
7C80000
|
unkown
|
page read and write
|
|
|
|
3350000
|
heap private
|
page read and write
|
|
|
|
C70000
|
unkown
|
page read and write
|
|
|
|
A00000
|
unkown
|
page readonly
|
|
|
|
20E074D9000
|
unkown
|
page read and write
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
7FF50D8A5000
|
unkown
|
page readonly
|
|
|
|
7FF56E7FA000
|
unkown
|
page readonly
|
|
|
|
243E7140000
|
unkown
|
page read and write
|
|
|
|
7FF56E6FC000
|
unkown
|
page readonly
|
|
|
|
243E7322000
|
unkown
|
page read and write
|
|
|
|
7FF56215B000
|
unkown
|
page readonly
|
|
|
|
243E7342000
|
unkown
|
page read and write
|
|
|
|
2D7E000
|
unkown
|
page readonly
|
|
|
|
201BD034000
|
unkown
|
page read and write
|
|
|
|
7FF5622D6000
|
unkown
|
page readonly
|
|
|
|
7FF592200000
|
unkown
|
page readonly
|
|
|
|
7FF4F403E000
|
unkown
|
page readonly
|
|
|
|
2F88000
|
unkown
|
page readonly
|
|
|
|
20E07429000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown
|
page readonly
|
|
|
|
178C16F0000
|
unkown
|
page readonly
|
|
|
|
7FF591FC0000
|
unkown
|
page readonly
|
|
|
|
7FF4F40AE000
|
unkown
|
page readonly
|
|
|
|
7FF4EF361000
|
unkown
|
page readonly
|
|
|
|
7FF591F6E000
|
unkown
|
page readonly
|
|
|
|
F70000
|
unkown
|
page readonly
|
|
|
|
243E7370000
|
unkown
|
page read and write
|
|
|
|
7FF5913AA000
|
unkown
|
page readonly
|
|
|
|
7FF5622B4000
|
unkown
|
page readonly
|
|
|
|
8DB69FB000
|
unkown
|
page read and write
|
|
|
|
7FF517351000
|
unkown
|
page readonly
|
|
|
|
7FF561F2F000
|
unkown
|
page readonly
|
|
|
|
26001A41000
|
unkown
|
page read and write
|
|
|
|
7FF5921BB000
|
unkown
|
page readonly
|
|
|
|
7FF50DA97000
|
unkown
|
page readonly
|
|
|
|
7FF4EF115000
|
unkown
|
page readonly
|
|
|
|
7FF5913A4000
|
unkown
|
page readonly
|
|
|
|
7FF5B92E2000
|
unkown
|
page readonly
|
|
|
|
5ED86FA000
|
unkown
|
page read and write
|
|
|
|
20E09643000
|
unkown
|
page read and write
|
|
|
|
13B1000
|
unkown
|
page readonly
|
|
|
|
243E738E000
|
unkown
|
page read and write
|
|
|
|
1593D858000
|
unkown
|
page read and write
|
|
|
|
FA0000
|
unkown
|
page readonly
|
|
|
|
20E09802000
|
unkown
|
page read and write
|
|
|
|
6EBD7FF000
|
unkown
|
page read and write
|
|
|
|
2C03000
|
unkown
|
page readonly
|
|
|
|
7FF4EF369000
|
unkown
|
page readonly
|
|
|
|
2EFA000
|
unkown
|
page readonly
|
|
|
|
29DE68D0000
|
unkown
|
page readonly
|
|
|
|
2F61000
|
unkown
|
page readonly
|
|
|
|
29DE6702000
|
unkown
|
page read and write
|
|
|
|
1B8B7C29000
|
unkown
|
page read and write
|
|
|
|
6EBD2CB000
|
unkown
|
page read and write
|
|
|
|
260034A0000
|
unkown
|
page readonly
|
|
|
|
201BD029000
|
unkown
|
page read and write
|
|
|
|
26001960000
|
unkown
|
page readonly
|
|
|
|
7FF4F40A8000
|
unkown
|
page readonly
|
|
|
|
29DE6647000
|
unkown
|
page read and write
|
|
|
|
243E738B000
|
unkown
|
page read and write
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
20E0751C000
|
unkown
|
page read and write
|
|
|
|
2ED0000
|
unkown
|
page readonly
|
|
|
|
178BFC29000
|
unkown
|
page read and write
|
|
|
|
20E095AB000
|
unkown
|
page read and write
|
|
|
|
243E7322000
|
unkown
|
page read and write
|
|
|
|
7FF591EDE000
|
unkown
|
page readonly
|
|
|
|
20E093E0000
|
unkown
|
page readonly
|
|
|
|
7FF4F691A000
|
unkown
|
page readonly
|
|
|
|
7FF50DA43000
|
unkown
|
page readonly
|
|
|
|
17FA1480000
|
unkown
|
page readonly
|
|
|
|
F0EAF2F000
|
unkown
|
page read and write
|
|
|
|
21C9D200000
|
unkown
|
page readonly
|
|
|
|
FF1000
|
unkown
|
page read and write
|
|
|
|
7FF516F1C000
|
unkown
|
page readonly
|
|
|
|
7FF50D961000
|
unkown
|
page readonly
|
|
|
|
243E738B000
|
unkown
|
page read and write
|
|
|
|
7FF4EF344000
|
unkown
|
page readonly
|
|
|
|
201BE9F0000
|
unkown
|
page read and write
|
|
|
|
20E07473000
|
unkown
|
page read and write
|
|
|
|
7FF592417000
|
unkown
|
page readonly
|
|
|
|
29DE6629000
|
unkown
|
page read and write
|
|
|
|
243E7330000
|
unkown
|
page read and write
|
|
|
|
20E0755C000
|
unkown
|
page read and write
|
|
|
|
7FF4F688E000
|
unkown
|
page readonly
|
|
|
|
29DE664C000
|
unkown
|
page read and write
|
|
|
|
7FF56226B000
|
unkown
|
page readonly
|
|
|
|
1593D813000
|
unkown
|
page read and write
|
|
|
|
7FF5B921C000
|
unkown
|
page readonly
|
|
|
|
20E09572000
|
unkown
|
page read and write
|
|
|
|
FD8000
|
unkown
|
page read and write
|
|
|
|
243E7375000
|
unkown
|
page read and write
|
|
|
|
20E074D9000
|
unkown
|
page read and write
|
|
|
|
243E7740000
|
unkown
|
page read and write
|
|
|
|
243E6A3C000
|
unkown
|
page read and write
|
|
|
|
20E08FC0000
|
unkown
|
page readonly
|
|
|
|
20E0A110000
|
unkown
|
page read and write
|
|
|
|
243E7854000
|
unkown
|
page read and write
|
|
|
|
7FF5B9228000
|
unkown
|
page readonly
|
|
|
|
7FF591451000
|
unkown
|
page readonly
|
|
|
|
178C15F0000
|
unkown
|
page read and write
|
|
|
|
7FF591F72000
|
unkown
|
page readonly
|
|
|
|
2B8C000
|
unkown
|
page readonly
|
|
|
|
20E09310000
|
heap private
|
page read and write
|
|
|
|
2EED000
|
unkown
|
page readonly
|
|
|
|
F0EB6FE000
|
unkown
|
page read and write
|
|
|
|
7FF4F4045000
|
unkown
|
page readonly
|
|
|
|
26001840000
|
unkown
|
page readonly
|
|
|
|
7FF5B92DA000
|
unkown
|
page readonly
|
|
|
|
243E6AC4000
|
unkown
|
page read and write
|
|
|
|
7FF590F35000
|
unkown
|
page readonly
|
|
|
|
21C9D00D000
|
unkown
|
page read and write
|
|
|
|
2ED9000
|
unkown
|
page readonly
|
|
|
|
178BFC59000
|
unkown
|
page read and write
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
7FF4EEB51000
|
unkown
|
page readonly
|
|
|
|
1B8B7BC0000
|
unkown
|
page readonly
|
|
|
|
2E89000
|
unkown
|
page readonly
|
|
|
|
323B8FB000
|
unkown
|
page read and write
|
|
|
|
54DC9FA000
|
unkown
|
page read and write
|
|
|
|
FCA000
|
heap default
|
page read and write
|
|
|
|
2F16000
|
unkown
|
page readonly
|
|
|
|
8DB68FA000
|
unkown
|
page read and write
|
|
|
|
2A3667F000
|
unkown
|
page read and write
|
|
|
|
1B8B7C5F000
|
unkown
|
page read and write
|
|
|
|
243E7740000
|
unkown
|
page readonly
|
|
|
|
7FF4F38E7000
|
unkown
|
page readonly
|
|
|
|
7FF516AC1000
|
unkown
|
page readonly
|
|
|
|
7FF5B9244000
|
unkown
|
page readonly
|
|
|
|
5ED877F000
|
unkown
|
page read and write
|
|
|
|
7FF4F6738000
|
unkown
|
page readonly
|
|
|
|
6400000
|
unkown
|
page readonly
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
1005000
|
unkown
|
page read and write
|
|
|
|
A92000
|
unkown
|
page read and write
|
|
|
|
2EBC000
|
unkown
|
page readonly
|
|
|
|
7FF4EF2FB000
|
unkown
|
page readonly
|
|
|
|
7FF5622AA000
|
unkown
|
page readonly
|
|
|
|
20E0743F000
|
unkown
|
page read and write
|
|
|
|
243E6AF7000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
heap default
|
page read and write
|
|
|
|
7FF5922E1000
|
unkown
|
page readonly
|
|
|
|
7FF59242F000
|
unkown
|
page readonly
|
|
|
|
7FF4F4084000
|
unkown
|
page readonly
|
|
|
|
2EE5000
|
unkown
|
page readonly
|
|
|
|
7FF592241000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
323B6FE000
|
unkown
|
page read and write
|
|
|
|
2EED000
|
unkown
|
page readonly
|
|
|
|
7FF5912AD000
|
unkown
|
page readonly
|
|
|
|
7FF4F402A000
|
unkown
|
page readonly
|
|
|
|
243E7861000
|
unkown
|
page read and write
|
|
|
|
3360000
|
unkown
|
page readonly
|
|
|
|
20E07413000
|
unkown
|
page read and write
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
FBA000
|
heap default
|
page read and write
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
7FF4F6091000
|
unkown
|
page readonly
|
|
|
|
7FF50D8D9000
|
unkown
|
page readonly
|
|
|
|
21C9CFD0000
|
heap default
|
page read and write
|
|
|
|
20E095C1000
|
unkown
|
page read and write
|
|
|
|
20E0A210000
|
unkown
|
page read and write
|
|
|
|
7FF50DA80000
|
unkown
|
page readonly
|
|
|
|
7FF4F408A000
|
unkown
|
page readonly
|
|
|
|
7FF50DA22000
|
unkown
|
page readonly
|
|
|
|
7FF4EF31F000
|
unkown
|
page readonly
|
|
|
|
20E093B0000
|
unkown
|
page read and write
|
|
|
|
7FF592303000
|
unkown
|
page readonly
|
|
|
|
323BBFE000
|
unkown
|
page read and write
|
|
|
|
4B00000
|
unkown
|
page readonly
|
|
|
|
7FF5913BF000
|
unkown
|
page readonly
|
|
|
|
7FF591FC6000
|
unkown
|
page readonly
|
|
|
|
7FF4F6922000
|
unkown
|
page readonly
|
|
|
|
20E07720000
|
unkown
|
page readonly
|
|
|
|
54DC97E000
|
unkown
|
page read and write
|
|
|
|
1B8B7D02000
|
unkown
|
page read and write
|
|
|
|
7FF4F682E000
|
unkown
|
page readonly
|
|
|
|
7FF4F6651000
|
unkown
|
page readonly
|
|
|
|
29DE6650000
|
unkown
|
page read and write
|
|
|
|
44DAEFF000
|
unkown
|
page read and write
|
|
|
|
20E0A310000
|
unkown
|
page read and write
|
|
|
|
7FF5170B9000
|
unkown
|
page readonly
|
|
|
|
7FF50DA8B000
|
unkown
|
page readonly
|
|
|
|
7FF4EF1D1000
|
unkown
|
page readonly
|
|
|
|
A20000
|
unkown
|
page read and write
|
|
|
|
1593D913000
|
unkown
|
page read and write
|
|
|
|
7FF5923A0000
|
unkown
|
page readonly
|
|
|
|
243E6A29000
|
unkown
|
page read and write
|
|
|
|
7FF50DAAC000
|
unkown
|
page readonly
|
|
|
|
178BFC6E000
|
unkown
|
page read and write
|
|
|
|
243E733F000
|
unkown
|
page read and write
|
|
|
|
7FF4F6867000
|
unkown
|
page readonly
|
|
|
|
21C9D100000
|
unkown
|
page read and write
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
178C1A60000
|
unkown
|
page read and write
|
|
|
|
7FF562163000
|
unkown
|
page readonly
|
|
|
|
21C9D402000
|
unkown
|
page read and write
|
|
|
|
7FF56DFA7000
|
unkown
|
page readonly
|
|
|
|
243E7802000
|
unkown
|
page read and write
|
|
|
|
32EE000
|
unkown
|
page read and write
|
|
|
|
243E7378000
|
unkown
|
page read and write
|
|
|
|
1593DA00000
|
unkown
|
page readonly
|
|
|
|
7FF4EF290000
|
unkown
|
page readonly
|
|
|
|
8DB667A000
|
unkown
|
page read and write
|
|
|
|
DD0000
|
unkown
|
page readonly
|
|
|
|
2EB5000
|
unkown
|
page readonly
|
|
|
|
7FF517344000
|
unkown
|
page readonly
|
|
|
|
1B8B7C5C000
|
unkown
|
page read and write
|
|
|
|
7FF59138C000
|
unkown
|
page readonly
|
|
|
|
7FF4EF3E2000
|
unkown
|
page readonly
|
|
|
|
2EEF000
|
unkown
|
page readonly
|
|
|
|
7FF4F6666000
|
unkown
|
page readonly
|
|
|
|
7FF5172BE000
|
unkown
|
page readonly
|
|
|
|
21C9CF70000
|
unkown
|
page read and write
|
|
|
|
2D72000
|
unkown
|
page readonly
|
|
|
|
C65000
|
unkown
|
page read and write
|
|
|
|
1B8B7D13000
|
unkown
|
page read and write
|
|
|
|
7FF592479000
|
unkown
|
page readonly
|
|
|
|
1B8B7C61000
|
unkown
|
page read and write
|
|
|
|
7FF4EEFBA000
|
unkown
|
page readonly
|
|
|
|
29DE6510000
|
heap private
|
page read and write
|
|
|
|
243E738E000
|
unkown
|
page read and write
|
|
|
|
26001A6F000
|
unkown
|
page read and write
|
|
|
|
32A4000
|
heap private
|
page read and write
|
|
|
|
A95000
|
unkown
|
page read and write
|
|
|
|
2EFA000
|
unkown
|
page readonly
|
|
|
|
20E09511000
|
unkown
|
page read and write
|
|
|
|
7FF5913D9000
|
unkown
|
page readonly
|
|
|
|
7FF4EF358000
|
unkown
|
page readonly
|
|
|
|
8DB6CFC000
|
unkown
|
page read and write
|
|
|
|
20E07400000
|
unkown
|
page read and write
|
|
|
|
FE8000
|
unkown
|
page read and write
|
|
|
|
7FF592468000
|
unkown
|
page readonly
|
|
|
|
7FF517352000
|
unkown
|
page readonly
|
|
|
|
243E7378000
|
unkown
|
page read and write
|
|
|
|
9694678000
|
unkown
|
page read and write
|
|
|
|
243E7300000
|
unkown
|
page read and write
|
|
|
|
243E6A57000
|
unkown
|
page read and write
|
|
|
|
54DC87B000
|
unkown
|
page read and write
|
|
|
|
7FF5B926D000
|
unkown
|
page readonly
|
|
|
|
243E738C000
|
unkown
|
page read and write
|
|
|
|
7FF56E789000
|
unkown
|
page readonly
|
|
|
|
7FF4EF2F5000
|
unkown
|
page readonly
|
|
|
|
F60000
|
heap default
|
page read and write
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
26001A6E000
|
unkown
|
page read and write
|
|
|
|
7FF59138F000
|
unkown
|
page readonly
|
|
|
|
96940F5000
|
unkown
|
page read and write
|
|
|
|
20E09782000
|
unkown
|
page read and write
|
|
|
|
7FF591CA7000
|
unkown
|
page readonly
|
|
|
|
7FF4F65EB000
|
unkown
|
page readonly
|
|
|
|
26001A6A000
|
unkown
|
page read and write
|
|
|
|
243E73D3000
|
unkown
|
page read and write
|
|
|
|
7FF51701B000
|
unkown
|
page readonly
|
|
|
|
26001A70000
|
unkown
|
page read and write
|
|
|
|
20E0752C000
|
unkown
|
page read and write
|
|
|
|
29DE6700000
|
unkown
|
page read and write
|
|
|
|
7FF4F67FB000
|
unkown
|
page readonly
|
|
|
|
7FF5924EA000
|
unkown
|
page readonly
|
|
|
|
178BFBF0000
|
unkown
|
page readonly
|
|
|
|
77FF000
|
unkown
|
page read and write
|
|
|
|
7FF4F6898000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
201BCEE0000
|
heap default
|
page read and write
|
|
|
|
7FF4F409F000
|
unkown
|
page readonly
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
2ED9000
|
unkown
|
page readonly
|
|
|
|
A50000
|
heap default
|
page read and write
|
|
|
|
6EBD3CF000
|
unkown
|
page read and write
|
|
|
|
20E09589000
|
unkown
|
page read and write
|
|
|
|
2C03000
|
unkown
|
page readonly
|
|
|
|
335A000
|
heap private
|
page read and write
|
|
|
|
243E738B000
|
unkown
|
page read and write
|
|
|
|
5ED87F9000
|
unkown
|
page read and write
|
|
|
|
20E076D0000
|
unkown
|
page write copy
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
7FF59242C000
|
unkown
|
page readonly
|
|
|
|
1593D870000
|
unkown
|
page read and write
|
|
|
|
201BD002000
|
unkown
|
page read and write
|
|
|
|
20E09702000
|
unkown
|
page read and write
|
|
|
|
7FF4F67CC000
|
unkown
|
page readonly
|
|
|
|
201BD013000
|
unkown
|
page read and write
|
|
|
|
969477B000
|
unkown
|
page read and write
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
7FF562168000
|
unkown
|
page readonly
|
|
|
|
7FF5B9258000
|
unkown
|
page readonly
|
|
|
|
7FF4F3751000
|
unkown
|
page readonly
|
|
|
|
2F12000
|
unkown
|
page readonly
|
|
|
|
2EFA000
|
unkown
|
page readonly
|
|
|
|
20E073B0000
|
heap default
|
page read and write
|
|
|
|
7FF4F3E91000
|
unkown
|
page readonly
|
|
|
|
29DE6580000
|
unkown
|
page readonly
|
|
|
|
7FF592454000
|
unkown
|
page readonly
|
|
|
|
8DB6A7B000
|
unkown
|
page read and write
|
|
|
|
2DBB000
|
unkown
|
page readonly
|
|
|
|
29DE663C000
|
unkown
|
page read and write
|
|
|
|
2EED000
|
unkown
|
page readonly
|
|
|
|
2DBB000
|
unkown
|
page readonly
|
|
|
|
2ED9000
|
unkown
|
page readonly
|
|
|
|
7FF4F406F000
|
unkown
|
page readonly
|
|
|
|
243E7130000
|
unkown
|
page readonly
|
|
|
|
20E09526000
|
unkown
|
page read and write
|
|
|
|
1593D780000
|
unkown
|
page write copy
|
|
|
|
201BCEF0000
|
unkown
|
page readonly
|
|
|
|
7FF516ABD000
|
unkown
|
page readonly
|
|
|
|
243E7368000
|
unkown
|
page read and write
|
|
|
|
20E0A000000
|
unkown
|
page read and write
|
|
|
|
20E07600000
|
unkown
|
page readonly
|
|
|
|
2F01000
|
unkown
|
page readonly
|
|
|
|
2F12000
|
unkown
|
page readonly
|
|
|
|
2EFF000
|
unkown
|
page readonly
|
|
|
|
243E736E000
|
unkown
|
page read and write
|
|
|
|
260033A0000
|
unkown
|
page read and write
|
|
|
|
8DB677A000
|
unkown
|
page read and write
|
|
|
|
1B8B7C58000
|
unkown
|
page read and write
|
|
|
|
20E09380000
|
unkown
|
page read and write
|
|
|
|
7FF5913B4000
|
unkown
|
page readonly
|
|
|
|
1593D86F000
|
unkown
|
page read and write
|
|
|
|
20E09370000
|
unkown
|
page readonly
|
|
|
|
6EBD6F9000
|
unkown
|
page read and write
|
|
|
|
7FF59144A000
|
unkown
|
page readonly
|
|
|
|
17FA1490000
|
unkown
|
page readonly
|
|
|
|
2F88000
|
unkown
|
page readonly
|
|
|
|
243E7740000
|
unkown
|
page read and write
|
|
|
|
7FF56E73F000
|
unkown
|
page readonly
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
1174000
|
heap private
|
page read and write
|
|
|
|
243E738E000
|
unkown
|
page read and write
|
|
|
|
7FF5622D1000
|
unkown
|
page readonly
|
|
|
|
7FF590F26000
|
unkown
|
page readonly
|
|
|
|
243E6A71000
|
unkown
|
page read and write
|
|
|
|
7FF50D74F000
|
unkown
|
page readonly
|
|
|
|
7FF517223000
|
unkown
|
page readonly
|
|
|
|
7FF4F6608000
|
unkown
|
page readonly
|
|
|
|
7FF56DF6D000
|
unkown
|
page readonly
|
|
|
|
7FF50DB72000
|
unkown
|
page readonly
|
|
|
|
7FF5924F1000
|
unkown
|
page readonly
|
|
|
|
26001A6E000
|
unkown
|
page read and write
|
|
|
|
243E7362000
|
unkown
|
page read and write
|
|
|
|
20E07514000
|
unkown
|
page read and write
|
|
|
|
2EB5000
|
unkown
|
page readonly
|
|
|
|
7FF561F1C000
|
unkown
|
page readonly
|
|
|
|
7FF4F404B000
|
unkown
|
page readonly
|
|
|
|
A78000
|
unkown
|
page read and write
|
|
|
|
29DE6570000
|
heap default
|
page read and write
|
|
|
|
DE0000
|
unkown
|
page read and write
|
|
|
|
7FF516F2A000
|
unkown
|
page readonly
|
|
|
|
7FF5923FA000
|
unkown
|
page readonly
|
|
|
|
243E6980000
|
heap private
|
page read and write
|
|
|
|
1170000
|
heap private
|
page read and write
|
|
|
|
7FF4F6914000
|
unkown
|
page readonly
|
|
|
|
115E000
|
unkown
|
page read and write
|
|
|
|
1B8B7C3C000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page readonly
|
|
|
|
7FF590F20000
|
unkown
|
page readonly
|
|
|
|
29DE7340000
|
unkown
|
page readonly
|
|
|
|
29DE6688000
|
unkown
|
page read and write
|
|
|
|
8DB66FF000
|
unkown
|
page read and write
|
|
|
|
243E6AED000
|
unkown
|
page read and write
|
|
|
|
20E09380000
|
unkown
|
page read and write
|
|
|
|
7FF5923EA000
|
unkown
|
page readonly
|
|
|
|
7FF4F660F000
|
unkown
|
page readonly
|
|
|
|
7FF5921C6000
|
unkown
|
page readonly
|
|
|
|
26001A70000
|
unkown
|
page read and write
|
|
|
|
29DE6652000
|
unkown
|
page read and write
|
|
|
|
7FF4F3F3E000
|
unkown
|
page readonly
|
|
|
|
2D7E000
|
unkown
|
page readonly
|
|
|
|
26001B02000
|
unkown
|
page read and write
|
|
|
|
20E09882000
|
unkown
|
page read and write
|
|
|
|
243E7322000
|
unkown
|
page read and write
|
|
|
|
2EC3000
|
unkown
|
page readonly
|
|
|
|
26001910000
|
unkown
|
page write copy
|
|
|
|
969487D000
|
unkown
|
page read and write
|
|
|
|
7FF562344000
|
unkown
|
page readonly
|
|
|
|
7FF59245F000
|
unkown
|
page readonly
|
|
|
|
F0EAFAF000
|
unkown
|
page read and write
|
|
|
|
2D72000
|
unkown
|
page readonly
|
|
|
|
243E6AD9000
|
unkown
|
page read and write
|
|
|
|
C7B000
|
unkown
|
page read and write
|
|
|
|
2E93000
|
unkown
|
page readonly
|
|
|
|
7FF591203000
|
unkown
|
page readonly
|
|
|
|
7FF4F40B9000
|
unkown
|
page readonly
|
|
|
|
7FF4F67C2000
|
unkown
|
page readonly
|
|
|
|
7FF5922AA000
|
unkown
|
page readonly
|
|
|
|
1190000
|
unkown
|
page read and write
|
|
|
|
26001A6F000
|
unkown
|
page read and write
|
|
|
|
2F74000
|
unkown
|
page readonly
|
|
|
|
26001A6E000
|
unkown
|
page read and write
|
|
|
|
7FF4F3EE3000
|
unkown
|
page readonly
|
|
|
|
7FF4F685F000
|
unkown
|
page readonly
|
|
|
|
20E0A310000
|
unkown
|
page read and write
|
|
|
|
7FF4EF3E1000
|
unkown
|
page readonly
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
20E095F4000
|
unkown
|
page read and write
|
|
|
|
29DE6670000
|
unkown
|
page read and write
|
|
|
|
2E9A000
|
unkown
|
page readonly
|
|
|
|
7FF592364000
|
unkown
|
page readonly
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
7FF592400000
|
unkown
|
page readonly
|
|
|
|
7FF51728F000
|
unkown
|
page readonly
|
|
|
|
2EC3000
|
unkown
|
page readonly
|
|
|
|
3357000
|
heap private
|
page read and write
|
|
|
|
7FF5923CF000
|
unkown
|
page readonly
|
|
|
|
2EE7000
|
unkown
|
page readonly
|
|
|
|
20E09544000
|
unkown
|
page read and write
|
|
|
|
243E6AB0000
|
unkown
|
page read and write
|
|
|
|
7FF5172D1000
|
unkown
|
page readonly
|
|
|
|
7FF591452000
|
unkown
|
page readonly
|
|
|
|
7FF51715B000
|
unkown
|
page readonly
|
|
|
|
7FF4EEB4D000
|
unkown
|
page readonly
|
|
|
|
FE1000
|
unkown
|
page read and write
|
|
|
|
7FF51726B000
|
unkown
|
page readonly
|
|
|
|
7FF591360000
|
unkown
|
page readonly
|
|
|
|
7FF4F406C000
|
unkown
|
page readonly
|
|
|
|
969457F000
|
unkown
|
page read and write
|
|
|
|
1B8B7A00000
|
heap default
|
page read and write
|
|
|
|
20E09800000
|
unkown
|
page read and write
|
|
|
|
A81000
|
unkown
|
page read and write
|
|
|
|
7FF562141000
|
unkown
|
page readonly
|
|
|
|
7FF56DFA5000
|
unkown
|
page readonly
|
|
|
|
21C9D013000
|
unkown
|
page read and write
|
|
|
|
9693C9B000
|
unkown
|
page read and write
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
1B8B7E00000
|
unkown
|
page readonly
|
|
|
|
7FF591B0B000
|
unkown
|
page readonly
|
|
|
|
26001A6E000
|
unkown
|
page read and write
|
|
|
|
26001A6E000
|
unkown
|
page read and write
|
|
|
|
1593DAD0000
|
unkown
|
page readonly
|
|
|
|
7FF5B8A85000
|
unkown
|
page readonly
|
|
|
|
2E89000
|
unkown
|
page readonly
|
|
|
|
2C03000
|
unkown
|
page readonly
|
|
|
|
7FF4F67FF000
|
unkown
|
page readonly
|
|
|
|
7FF5B924E000
|
unkown
|
page readonly
|
|
|
|
7FF56E764000
|
unkown
|
page readonly
|
|
|
|
7FF56E76F000
|
unkown
|
page readonly
|
|
|
|
7FF5913D6000
|
unkown
|
page readonly
|
|
|
|
26001A6E000
|
unkown
|
page read and write
|
|
|
|
7FF4F681C000
|
unkown
|
page readonly
|
|
|
|
29DE6646000
|
unkown
|
page read and write
|
|
|
|
7FF50DAD4000
|
unkown
|
page readonly
|
|
|
|
323B67E000
|
unkown
|
page read and write
|
|
|
|
7FF562200000
|
unkown
|
page readonly
|
|
|
|
7FF5172CE000
|
unkown
|
page readonly
|
|
|
|
44DACFE000
|
unkown
|
page read and write
|
|
|
|
243E7202000
|
unkown
|
page read and write
|
|
|
|
26001C00000
|
unkown
|
page readonly
|
|
|
|
243E7364000
|
unkown
|
page read and write
|
|
|
|
7FF4F3F8D000
|
unkown
|
page readonly
|
|
|
|
243E7322000
|
unkown
|
page read and write
|
|
|
|
2EAD000
|
unkown
|
page readonly
|
|
|
|
7FF591D01000
|
unkown
|
page readonly
|
|
|
|
243E7802000
|
unkown
|
page read and write
|
|
|
|
29DE6E02000
|
unkown
|
page read and write
|
|
|
|
7FF56225E000
|
unkown
|
page readonly
|
|
|
|
17FA1655000
|
heap private
|
page read and write
|
|
|
|
1593D86C000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown
|
page readonly
|
|
|
|
7800000
|
unkown
|
page read and write
|
|
|
|
26001A00000
|
unkown
|
page read and write
|
|
|
|
BA2000
|
unkown
|
page read and write
|
|
|
|
20E09390000
|
unkown
|
page read and write
|
|
|
|
243E6B13000
|
unkown
|
page read and write
|
|
|
|
5ED829B000
|
unkown
|
page read and write
|
|
|
|
243E7358000
|
unkown
|
page read and write
|
|
|
|
7FF562223000
|
unkown
|
page readonly
|
|
|
|
7FF4F682A000
|
unkown
|
page readonly
|
|
|
|
54DCB7F000
|
unkown
|
page read and write
|
|
|
|
F0EB5FE000
|
unkown
|
page read and write
|
|
|
|
7FF4F40BD000
|
unkown
|
page readonly
|
|
|
|
2A3617B000
|
unkown
|
page read and write
|
|
|
|
974000
|
unkown
|
page read and write
|
|
|
|
7FF562351000
|
unkown
|
page readonly
|
|
|
|
243E73BA000
|
unkown
|
page read and write
|
|
|
|
243E7315000
|
unkown
|
page read and write
|
|
|
|
2EBC000
|
unkown
|
page readonly
|
|
|
|
7FF4F4124000
|
unkown
|
page readonly
|
|
|
|
A10000
|
unkown
|
page readonly
|
|
|
|
20E09A00000
|
unkown
|
page readonly
|
|
|
|
7FF4F403A000
|
unkown
|
page readonly
|
|
|
|
C90000
|
heap private
|
page read and write
|
|
|
|
20E074DF000
|
unkown
|
page read and write
|
|
|
|
26001A02000
|
unkown
|
page read and write
|
|
|
|
7FF4F65F6000
|
unkown
|
page readonly
|
|
|
|
243E7800000
|
unkown
|
page read and write
|
|
|
|
7FF51734A000
|
unkown
|
page readonly
|
|
|
|
2A365FF000
|
unkown
|
page read and write
|
|
|
|
7FF4F3DB7000
|
unkown
|
page readonly
|
|
|
|
2EAD000
|
unkown
|
page readonly
|
|
|
|
A5A000
|
heap default
|
page read and write
|
|
|
|
243E6A4B000
|
unkown
|
page read and write
|
|
|
|
4AF4000
|
heap private
|
page read and write
|
|
|
|
F80000
|
unkown
|
page read and write
|
|
|
|
243E7381000
|
unkown
|
page read and write
|
|
|
|
21C9D115000
|
unkown
|
page read and write
|
|
|
|
F50000
|
unkown
|
page readonly
|
|
|
|
7900000
|
unkown
|
page read and write
|
|
|
|
243E738B000
|
unkown
|
page read and write
|
|
|
|
7FF5620B9000
|
unkown
|
page readonly
|
|
|
|
7FF4EF2EA000
|
unkown
|
page readonly
|
|
|
|
7FF4EF35E000
|
unkown
|
page readonly
|
|
|
|
10C0000
|
unkown
|
page readonly
|
|
|
|
31D0000
|
unkown
|
page readonly
|
|
|
|
7FF562352000
|
unkown
|
page readonly
|
|
|
|
49EF000
|
unkown
|
page read and write
|
|
|
|
1B8B7C54000
|
unkown
|
page read and write
|
|
|
|
243E7322000
|
unkown
|
page read and write
|
|
|
|
7FF5622A4000
|
unkown
|
page readonly
|
|
|
|
7FF4F685C000
|
unkown
|
page readonly
|
|
|
|
17FA12E1000
|
unkown
|
page read and write
|
|
|
|
6EBD67A000
|
unkown
|
page read and write
|
|
|
|
20E09585000
|
unkown
|
page read and write
|
|
|
|
7FF4EF307000
|
unkown
|
page readonly
|
|
|
|
243E738A000
|
unkown
|
page read and write
|
|
|
|
7FF4EF0B6000
|
unkown
|
page readonly
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
A7C000
|
unkown
|
page read and write
|
|
|
|
7FF5922A3000
|
unkown
|
page readonly
|
|
|
|
2EF3000
|
unkown
|
page readonly
|
|
|
|
26001A6B000
|
unkown
|
page read and write
|
|
|
|
1B8B7D00000
|
unkown
|
page read and write
|
|
|
|
29DE664B000
|
unkown
|
page read and write
|
|
|
|
2F16000
|
unkown
|
page readonly
|
|
|
|
7FF4EF31C000
|
unkown
|
page readonly
|
|
|
|
7FF50DB64000
|
unkown
|
page readonly
|
|
|
|
6250000
|
unkown
|
page readonly
|
|
|
|
7FF4F68A6000
|
unkown
|
page readonly
|
|
|
|
7A2F6FF000
|
unkown
|
page read and write
|
|
|
|
17FA12CF000
|
unkown
|
page read and write
|
|
|
|
243E73A5000
|
unkown
|
page read and write
|
|
|
|
7FF56E802000
|
unkown
|
page readonly
|
|
|
|
1593D900000
|
unkown
|
page read and write
|
|
|
|
8DB64FE000
|
unkown
|
page read and write
|
|
|
|
7FF4EF334000
|
unkown
|
page readonly
|
|
|
|
2F65000
|
unkown
|
page readonly
|
|
|
|
7FF56DF66000
|
unkown
|
page readonly
|
|
|
|
7FF561F37000
|
unkown
|
page readonly
|
|
|
|
7FF517141000
|
unkown
|
page readonly
|
|
|
|
C5E000
|
unkown
|
page read and write
|
|
|
|
17FA12C5000
|
unkown
|
page read and write
|
|
|
|
17FA12E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B923A000
|
unkown
|
page readonly
|
|
|
|
7FF592251000
|
unkown
|
page readonly
|
|
|
|
1B8B8400000
|
unkown
|
page readonly
|
|
|
|
7FF50DA7E000
|
unkown
|
page readonly
|
|
|
|
2EE7000
|
unkown
|
page readonly
|
|
|
|
7FF50D73C000
|
unkown
|
page readonly
|
|
|
|
7E50000
|
unkown
|
page read and write
|
|
|
|
2E89000
|
unkown
|
page readonly
|
|
|
|
2F12000
|
unkown
|
page readonly
|
|
|
|
7FF56E786000
|
unkown
|
page readonly
|
|
|
|
2D7E000
|
unkown
|
page readonly
|
|
|
|
2EF3000
|
unkown
|
page readonly
|
|
|
|
7FF4F6681000
|
unkown
|
page readonly
|
|
|
|
7FF592236000
|
unkown
|
page readonly
|
|
|
|
7FF59134A000
|
unkown
|
page readonly
|
|
|
|
243E73A5000
|
unkown
|
page read and write
|
|
|
|
FE3000
|
heap default
|
page read and write
|
|
|
|
2A361FF000
|
unkown
|
page read and write
|
|
|
|
17FA12A0000
|
heap default
|
page read and write
|
|
|
|
2EAD000
|
unkown
|
page readonly
|
|
|
|
7FF562081000
|
unkown
|
page readonly
|
|
|
|
9693D9F000
|
unkown
|
page read and write
|
|
|
|
7FF4F6507000
|
unkown
|
page readonly
|
|
|
|
7FF592353000
|
unkown
|
page readonly
|
|
|
|
178BFAB0000
|
heap private
|
page read and write
|
|
|
|
2F88000
|
unkown
|
page readonly
|
|
|
|
7FF590C07000
|
unkown
|
page readonly
|
|
|
|
6EBD34E000
|
unkown
|
page read and write
|
|
|
|
243E7331000
|
unkown
|
page read and write
|
|
|
|
7FF56E747000
|
unkown
|
page readonly
|
|
|
|
178BFB10000
|
heap default
|
page read and write
|
|
|
|
7FF59240B000
|
unkown
|
page readonly
|
|
|
|
4AF0000
|
heap private
|
page read and write
|
|
|
|
7FF561AC1000
|
unkown
|
page readonly
|
|
|
|
1593D800000
|
unkown
|
page read and write
|
|
|
|
29DE6713000
|
unkown
|
page read and write
|
|
|
|
243E7344000
|
unkown
|
page read and write
|
|
|
|
7FF50DAF9000
|
unkown
|
page readonly
|
|
|
|
7FF50D97B000
|
unkown
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7FF4EF111000
|
unkown
|
page readonly
|
|
|
|
7FF4F683B000
|
unkown
|
page readonly
|
|
|
|
FE5000
|
unkown
|
page read and write
|
|
|
|
7FF4EF2F0000
|
unkown
|
page readonly
|
|
|
|
17FA12B1000
|
unkown
|
page read and write
|
|
|
|
7FF5622CE000
|
unkown
|
page readonly
|
|
|
|
2EF3000
|
unkown
|
page readonly
|
|
|
|
320F000
|
unkown
|
page read and write
|
|
|
|
20E07502000
|
unkown
|
page read and write
|
|
|
|
20E09320000
|
unkown
|
page read and write
|
|
|
|
1593D770000
|
heap default
|
page read and write
|
|
|
|
20E09300000
|
unkown
|
page readonly
|
|
|
|
96942F8000
|
unkown
|
page read and write
|
|
|
|
7FF562202000
|
unkown
|
page readonly
|
|
|
|
5ED839E000
|
unkown
|
page read and write
|
|
|
|
7FF56E6FA000
|
unkown
|
page readonly
|
|
|
|
7FF4EF3DA000
|
unkown
|
page readonly
|
|
|
|
7FF50D74A000
|
unkown
|
page readonly
|
|
|
|
2F1B000
|
unkown
|
page readonly
|
|
|
|
243E7393000
|
unkown
|
page read and write
|
|
|
|
7FF4F6830000
|
unkown
|
page readonly
|
|
|
|
20E0746B000
|
unkown
|
page read and write
|
|
|
|
20E074C2000
|
unkown
|
page read and write
|
|
|
|
26001A6A000
|
unkown
|
page read and write
|
|
|
|
20E074D6000
|
unkown
|
page read and write
|
|
|
|
1593D902000
|
unkown
|
page read and write
|
|
|
|
2F65000
|
unkown
|
page readonly
|
|
|
|
20E09684000
|
unkown
|
page read and write
|
|
|
|
7FF591C95000
|
unkown
|
page readonly
|
|
|
|
8DB6DFE000
|
unkown
|
page read and write
|
|
|
|
20E074BD000
|
unkown
|
page read and write
|
|
|
|
21C9D028000
|
unkown
|
page read and write
|
|
|
|
7FF56E6A6000
|
unkown
|
page readonly
|
|
|
|
7FF5912C4000
|
unkown
|
page readonly
|
|
|
|
2E93000
|
unkown
|
page readonly
|
|
|
|
20E0959E000
|
unkown
|
page read and write
|
|
|
|
7FF5913DD000
|
unkown
|
page readonly
|
|
|
|
243E7349000
|
unkown
|
page read and write
|
|
|
|
7FF4EEFAC000
|
unkown
|
page readonly
|
|
|
|
2F93000
|
unkown
|
page readonly
|
|
|
|
7FF59234D000
|
unkown
|
page readonly
|
|
|
|
2E93000
|
unkown
|
page readonly
|
|
|
|
7FF4F6689000
|
unkown
|
page readonly
|
|
|
|
20E08EC0000
|
unkown
|
page read and write
|
|
|
|
72A000
|
unkown
|
page read and write
|
|
|
|
26001A29000
|
unkown
|
page read and write
|
|
|
|
FDC000
|
unkown
|
page read and write
|
|
|
|
178BFC02000
|
unkown
|
page read and write
|
|
|
|
2F82000
|
unkown
|
page readonly
|
|
|
|
201BD03F000
|
unkown
|
page read and write
|
|
|
|
7FF5923A2000
|
unkown
|
page readonly
|
|
|
|
10B0000
|
unkown
|
page readonly
|
|
|
|
327E000
|
unkown
|
page read and write
|
|
|
|
26001B00000
|
unkown
|
page read and write
|
|
|
|
201BD250000
|
unkown
|
page readonly
|
|
|
|
FE9000
|
unkown
|
page read and write
|
|
|
|
2EBC000
|
unkown
|
page readonly
|
|
|
|
20E09380000
|
unkown
|
page read and write
|
|
|
|
20E074C2000
|
unkown
|
page read and write
|
|
|
|
201BD054000
|
unkown
|
page read and write
|
|
|
|
243E6A9F000
|
unkown
|
page read and write
|
|
|
|
7FF59134C000
|
unkown
|
page readonly
|
|
|
|
7FF50DACA000
|
unkown
|
page readonly
|
|
|
|
7FF562265000
|
unkown
|
page readonly
|
|
|
|
7FF591397000
|
unkown
|
page readonly
|
|
|
|
7FF4F608D000
|
unkown
|
page readonly
|
|
|
|
7FF4F6711000
|
unkown
|
page readonly
|
|
|
|
7FF561F2A000
|
unkown
|
page readonly
|
|
|
|
7FF50DA7A000
|
unkown
|
page readonly
|
|
|
|
20E074DA000
|
unkown
|
page read and write
|
|
|
|
7FF592234000
|
unkown
|
page readonly
|
|
|
|
243E7373000
|
unkown
|
page read and write
|
|
|
|
26001830000
|
heap default
|
page read and write
|
|
|
|
CA0000
|
unkown
|
page readonly
|
|
|
|
8DB6C7C000
|
unkown
|
page read and write
|
|
|
|
7FF50DAC4000
|
unkown
|
page readonly
|
|
|
|
7FF592437000
|
unkown
|
page readonly
|
|
|
|
20E074DD000
|
unkown
|
page read and write
|
|
|
|
9693D1E000
|
unkown
|
page read and write
|
|
|
|
7FF4F672B000
|
unkown
|
page readonly
|
|
|
|
7FF50D2DD000
|
unkown
|
page readonly
|
|
|
|
7FF5911B1000
|
unkown
|
page readonly
|
|
|
|
243E69F0000
|
unkown
|
page readonly
|
|
|
|
21C9D002000
|
unkown
|
page read and write
|
|
|
|
26001A6A000
|
unkown
|
page read and write
|
|
There are 1127 hidden memdumps, click here to show them.