Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Permission-1532161794-06252021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$Permission-1532161794-06252021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\70C851F0-DCF3-417E-B449-BD498DB01C08
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\70678E60.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS6 (Windows), datetime=2021:02:11 21:11:18], baseline, precision 8, 1860x1000, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\FBB40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Fri Jun 25 15:32:01 2021, atime=Fri Jun 25 15:32:01 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Permission-1532161794-06252021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:54
2020, mtime=Fri Jun 25 15:32:01 2021, atime=Fri Jun 25 15:32:01 2021, length=153171, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\9CB40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\1D80F52D.jpg
|
[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe
Photoshop CS6 (Windows), datetime=2021:02:11 21:11:18], baseline, precision 8, 1860x1000, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\6CCE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\FCCE0000
|
data
|
dropped
|
|
There are 3 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\Kro.fis
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\Kro.fis1
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 ..\Kro.fis2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\Kro.fis
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\Kro.fis1
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 ..\Kro.fis2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
http://185.183.99.120/44372.7722377315.dat
|
185.183.99.120
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://190.14.37.3/44372.7671056713.dat
|
190.14.37.3
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://185.183.99.120/44372.7671056713.dat
|
185.183.99.120
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 103 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
190.14.37.3
|
unknown
|
Panama
|
|
|
|
185.183.99.120
|
unknown
|
Netherlands
|
|
|
|
185.240.103.219
|
unknown
|
Russian Federation
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
0/
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1/
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B301
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B9D7
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BB3F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BC39
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BCC5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2!
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5A2A1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5A5FC
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
#=8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC7F1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECB3B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECC06
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECCD1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECD6D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ie8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F9119
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F9369
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
There are 158 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
23829400000
|
unkown
|
page read and write
|
|
|
|
7FF5986FE000
|
unkown
|
page readonly
|
|
|
|
23828F74000
|
unkown
|
page read and write
|
|
|
|
982000
|
unkown
|
page read and write
|
|
|
|
7FF598905000
|
unkown
|
page readonly
|
|
|
|
A3BA1FE000
|
unkown
|
page read and write
|
|
|
|
238286A5000
|
unkown
|
page read and write
|
|
|
|
7FF590DCE000
|
unkown
|
page readonly
|
|
|
|
23828F5A000
|
unkown
|
page read and write
|
|
|
|
C50000
|
heap default
|
page read and write
|
|
|
|
23828C90000
|
unkown
|
page write copy
|
|
|
|
17F30A3F000
|
unkown
|
page read and write
|
|
|
|
7FF52CD34000
|
unkown
|
page readonly
|
|
|
|
1DB4A582000
|
unkown
|
page read and write
|
|
|
|
7FF5CB97B000
|
unkown
|
page readonly
|
|
|
|
1DB480FE000
|
unkown
|
page read and write
|
|
|
|
2F12000
|
unkown
|
page readonly
|
|
|
|
2EF1000
|
unkown
|
page readonly
|
|
|
|
B75000
|
unkown
|
page read and write
|
|
|
|
2F04000
|
unkown
|
page readonly
|
|
|
|
7FF59870B000
|
unkown
|
page readonly
|
|
|
|
1037000
|
heap private
|
page read and write
|
|
|
|
1E9ACD40000
|
unkown
|
page readonly
|
|
|
|
23828C60000
|
unkown
|
page readonly
|
|
|
|
D50000
|
heap private
|
page read and write
|
|
|
|
1DB4B610000
|
unkown
|
page read and write
|
|
|
|
B47FCFE000
|
unkown
|
page read and write
|
|
|
|
23828F8A000
|
unkown
|
page read and write
|
|
|
|
21E18E6D000
|
unkown
|
page read and write
|
|
|
|
7FF590E14000
|
unkown
|
page readonly
|
|
|
|
1DB4A2A4000
|
unkown
|
page read and write
|
|
|
|
7FF5D63AD000
|
unkown
|
page readonly
|
|
|
|
2E8F000
|
unkown
|
page readonly
|
|
|
|
7FF4F7B97000
|
unkown
|
page readonly
|
|
|
|
7FF5D63B3000
|
unkown
|
page readonly
|
|
|
|
2FDE67F000
|
unkown
|
page read and write
|
|
|
|
1DB4A18C000
|
unkown
|
page read and write
|
|
|
|
17F30970000
|
heap default
|
page read and write
|
|
|
|
1E9AC05F000
|
unkown
|
page read and write
|
|
|
|
28B7A460000
|
unkown
|
page readonly
|
|
|
|
7FF5CBC14000
|
unkown
|
page readonly
|
|
|
|
AB9A07F000
|
unkown
|
page read and write
|
|
|
|
8BB000
|
unkown
|
page read and write
|
|
|
|
1DB48174000
|
unkown
|
page read and write
|
|
|
|
1A391790000
|
unkown
|
page readonly
|
|
|
|
7FF598DAD000
|
unkown
|
page readonly
|
|
|
|
23828F4E000
|
unkown
|
page read and write
|
|
|
|
7FF5D62B1000
|
unkown
|
page readonly
|
|
|
|
23828F4E000
|
unkown
|
page read and write
|
|
|
|
2B1C000
|
unkown
|
page readonly
|
|
|
|
2B91000
|
unkown
|
page readonly
|
|
|
|
1DB4B210000
|
unkown
|
page read and write
|
|
|
|
21E1AD10000
|
unkown
|
page read and write
|
|
|
|
7FF52CC50000
|
unkown
|
page readonly
|
|
|
|
17F30A02000
|
unkown
|
page read and write
|
|
|
|
1A39188F000
|
unkown
|
page read and write
|
|
|
|
1DB4806F000
|
unkown
|
page read and write
|
|
|
|
7FF5B2BC0000
|
unkown
|
page readonly
|
|
|
|
2E83000
|
unkown
|
page readonly
|
|
|
|
23828F73000
|
unkown
|
page read and write
|
|
|
|
D74000
|
heap private
|
page read and write
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
1DB4A188000
|
unkown
|
page read and write
|
|
|
|
23828F64000
|
unkown
|
page read and write
|
|
|
|
91D9079000
|
unkown
|
page read and write
|
|
|
|
7FF5D6035000
|
unkown
|
page readonly
|
|
|
|
2F23000
|
unkown
|
page readonly
|
|
|
|
7FF5E562A000
|
unkown
|
page readonly
|
|
|
|
7FF5E568A000
|
unkown
|
page readonly
|
|
|
|
7FF5E5206000
|
unkown
|
page readonly
|
|
|
|
1DB480A7000
|
unkown
|
page read and write
|
|
|
|
2F12000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C4F000
|
unkown
|
page readonly
|
|
|
|
17F30A00000
|
unkown
|
page read and write
|
|
|
|
C73000
|
heap default
|
page read and write
|
|
|
|
ED4137E000
|
unkown
|
page read and write
|
|
|
|
7FF5E553B000
|
unkown
|
page readonly
|
|
|
|
2D136A13000
|
unkown
|
page read and write
|
|
|
|
7FF5E5724000
|
unkown
|
page readonly
|
|
|
|
23828F51000
|
unkown
|
page read and write
|
|
|
|
7FF5E5593000
|
unkown
|
page readonly
|
|
|
|
1DB4A1BB000
|
unkown
|
page read and write
|
|
|
|
7FF590E49000
|
unkown
|
page readonly
|
|
|
|
7FF5B2BC2000
|
unkown
|
page readonly
|
|
|
|
28B79CA0000
|
unkown
|
page readonly
|
|
|
|
FC0000
|
unkown
|
page readonly
|
|
|
|
7FF52CC55000
|
unkown
|
page readonly
|
|
|
|
1DB4B310000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C1A000
|
unkown
|
page readonly
|
|
|
|
1DB4A1A3000
|
unkown
|
page read and write
|
|
|
|
23828F3C000
|
unkown
|
page read and write
|
|
|
|
23828FBA000
|
unkown
|
page read and write
|
|
|
|
9D3000
|
unkown
|
page read and write
|
|
|
|
AB99B7E000
|
unkown
|
page read and write
|
|
|
|
7FF52CD41000
|
unkown
|
page readonly
|
|
|
|
2E8A000
|
unkown
|
page readonly
|
|
|
|
1DB4A23B000
|
unkown
|
page read and write
|
|
|
|
7FF52CCBE000
|
unkown
|
page readonly
|
|
|
|
238286BF000
|
unkown
|
page read and write
|
|
|
|
1E9ABFA0000
|
unkown
|
page readonly
|
|
|
|
1010000
|
unkown
|
page read and write
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C99000
|
unkown
|
page readonly
|
|
|
|
238284F0000
|
unkown
|
page readonly
|
|
|
|
23828650000
|
unkown
|
page read and write
|
|
|
|
2E3D000
|
unkown
|
page readonly
|
|
|
|
23828F4E000
|
unkown
|
page read and write
|
|
|
|
1DB480E2000
|
unkown
|
page read and write
|
|
|
|
2A481A02000
|
unkown
|
page read and write
|
|
|
|
7FF5CB421000
|
unkown
|
page readonly
|
|
|
|
1DB4A300000
|
unkown
|
page read and write
|
|
|
|
2E45000
|
unkown
|
page readonly
|
|
|
|
7FF5987F2000
|
unkown
|
page readonly
|
|
|
|
28B7A602000
|
unkown
|
page read and write
|
|
|
|
1DB4803F000
|
unkown
|
page read and write
|
|
|
|
23828F8B000
|
unkown
|
page read and write
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
B4003FC000
|
unkown
|
page read and write
|
|
|
|
7FF5D64AA000
|
unkown
|
page readonly
|
|
|
|
B40057C000
|
unkown
|
page read and write
|
|
|
|
7FF59876E000
|
unkown
|
page readonly
|
|
|
|
23829454000
|
unkown
|
page read and write
|
|
|
|
21E18D60000
|
heap private
|
page read and write
|
|
|
|
46AE000
|
unkown
|
page read and write
|
|
|
|
7FF59877D000
|
unkown
|
page readonly
|
|
|
|
17F30A56000
|
unkown
|
page read and write
|
|
|
|
7A60000
|
unkown
|
page read and write
|
|
|
|
7FF59875F000
|
unkown
|
page readonly
|
|
|
|
2E8F000
|
unkown
|
page readonly
|
|
|
|
23828F4A000
|
unkown
|
page read and write
|
|
|
|
2E53000
|
unkown
|
page readonly
|
|
|
|
3C52B7F000
|
unkown
|
page read and write
|
|
|
|
23828FA2000
|
unkown
|
page read and write
|
|
|
|
2D1384A0000
|
unkown
|
page readonly
|
|
|
|
7FF4F7EC5000
|
unkown
|
page readonly
|
|
|
|
7FF5CBC04000
|
unkown
|
page readonly
|
|
|
|
23829461000
|
unkown
|
page read and write
|
|
|
|
C40000
|
unkown
|
page readonly
|
|
|
|
B4F000
|
unkown
|
page read and write
|
|
|
|
17F30A29000
|
unkown
|
page read and write
|
|
|
|
23828F77000
|
unkown
|
page read and write
|
|
|
|
1DB4B000000
|
unkown
|
page read and write
|
|
|
|
7FF5B2BE3000
|
unkown
|
page readonly
|
|
|
|
1A3918A0000
|
unkown
|
page read and write
|
|
|
|
7B40000
|
unkown
|
page read and write
|
|
|
|
7FF598D84000
|
unkown
|
page readonly
|
|
|
|
2D136A69000
|
unkown
|
page read and write
|
|
|
|
2D0E000
|
unkown
|
page readonly
|
|
|
|
A3B9E7B000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC0A000
|
unkown
|
page readonly
|
|
|
|
3C52C78000
|
unkown
|
page read and write
|
|
|
|
7FF590A9F000
|
unkown
|
page readonly
|
|
|
|
7FF598DA9000
|
unkown
|
page readonly
|
|
|
|
7FF59062D000
|
unkown
|
page readonly
|
|
|
|
23828688000
|
unkown
|
page read and write
|
|
|
|
2EAB000
|
unkown
|
page readonly
|
|
|
|
23828F56000
|
unkown
|
page read and write
|
|
|
|
21E19000000
|
unkown
|
page readonly
|
|
|
|
7FF598D74000
|
unkown
|
page readonly
|
|
|
|
7FF590C06000
|
unkown
|
page readonly
|
|
|
|
1DB4B310000
|
unkown
|
page read and write
|
|
|
|
7FF5B2481000
|
unkown
|
page readonly
|
|
|
|
7FF590DFF000
|
unkown
|
page readonly
|
|
|
|
ED41479000
|
unkown
|
page read and write
|
|
|
|
113F000
|
unkown
|
page read and write
|
|
|
|
2A4810F0000
|
heap private
|
page read and write
|
|
|
|
2382864D000
|
unkown
|
page read and write
|
|
|
|
7FF5B28F7000
|
unkown
|
page readonly
|
|
|
|
CE0847B000
|
unkown
|
page read and write
|
|
|
|
23828FA4000
|
unkown
|
page read and write
|
|
|
|
7FF4F7D19000
|
unkown
|
page readonly
|
|
|
|
7FF5D6497000
|
unkown
|
page readonly
|
|
|
|
1DB4A502000
|
unkown
|
page read and write
|
|
|
|
C7C000
|
unkown
|
page read and write
|
|
|
|
238285E0000
|
unkown
|
page read and write
|
|
|
|
7FF5D64C8000
|
unkown
|
page readonly
|
|
|
|
87A000
|
unkown
|
page read and write
|
|
|
|
1DB4A402000
|
unkown
|
page read and write
|
|
|
|
1DB4A176000
|
unkown
|
page read and write
|
|
|
|
2D47000
|
unkown
|
page readonly
|
|
|
|
4570000
|
unkown
|
page readonly
|
|
|
|
7FF590631000
|
unkown
|
page readonly
|
|
|
|
7FF5E5440000
|
unkown
|
page readonly
|
|
|
|
7FF5CBC31000
|
unkown
|
page readonly
|
|
|
|
7FF598737000
|
unkown
|
page readonly
|
|
|
|
1DB49F70000
|
unkown
|
page read and write
|
|
|
|
23828F4C000
|
unkown
|
page read and write
|
|
|
|
7FF52CC5B000
|
unkown
|
page readonly
|
|
|
|
1DB4A225000
|
unkown
|
page read and write
|
|
|
|
7FF598653000
|
unkown
|
page readonly
|
|
|
|
23828FC8000
|
unkown
|
page read and write
|
|
|
|
7FF5CB9E1000
|
unkown
|
page readonly
|
|
|
|
28B79C30000
|
heap private
|
page read and write
|
|
|
|
D70000
|
heap private
|
page read and write
|
|
|
|
2E83000
|
unkown
|
page readonly
|
|
|
|
7FF5CBB62000
|
unkown
|
page readonly
|
|
|
|
7FF5D6026000
|
unkown
|
page readonly
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
7FF590E46000
|
unkown
|
page readonly
|
|
|
|
7FF5E5406000
|
unkown
|
page readonly
|
|
|
|
B79000
|
unkown
|
page read and write
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
2A481400000
|
unkown
|
page readonly
|
|
|
|
7FF5D64D6000
|
unkown
|
page readonly
|
|
|
|
23828F73000
|
unkown
|
page read and write
|
|
|
|
91D91FF000
|
unkown
|
page read and write
|
|
|
|
7FF5E5543000
|
unkown
|
page readonly
|
|
|
|
23828F33000
|
unkown
|
page read and write
|
|
|
|
1DB4A10E000
|
unkown
|
page read and write
|
|
|
|
23828F68000
|
unkown
|
page read and write
|
|
|
|
5EB0000
|
unkown
|
page readonly
|
|
|
|
46B0000
|
unkown
|
page read and write
|
|
|
|
7FF5E5732000
|
unkown
|
page readonly
|
|
|
|
2D1383A0000
|
unkown
|
page read and write
|
|
|
|
2E4C000
|
unkown
|
page readonly
|
|
|
|
B47FF7B000
|
unkown
|
page read and write
|
|
|
|
C75000
|
unkown
|
page read and write
|
|
|
|
1DB4A155000
|
unkown
|
page read and write
|
|
|
|
7FF590E24000
|
unkown
|
page readonly
|
|
|
|
1DB4A10B000
|
unkown
|
page read and write
|
|
|
|
2D136A68000
|
unkown
|
page read and write
|
|
|
|
1DB480A6000
|
unkown
|
page read and write
|
|
|
|
7FF590EC1000
|
unkown
|
page readonly
|
|
|
|
7FF5E560B000
|
unkown
|
page readonly
|
|
|
|
1DB4A1A4000
|
unkown
|
page read and write
|
|
|
|
3C528FF000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F31000
|
unkown
|
page readonly
|
|
|
|
F80000
|
unkown
|
page readonly
|
|
|
|
7FF4F7F0A000
|
unkown
|
page readonly
|
|
|
|
7FF590E07000
|
unkown
|
page readonly
|
|
|
|
2A481256000
|
unkown
|
page read and write
|
|
|
|
2E19000
|
unkown
|
page readonly
|
|
|
|
23828D20000
|
unkown
|
page readonly
|
|
|
|
23828F1F000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC1E000
|
unkown
|
page readonly
|
|
|
|
7FF5E562C000
|
unkown
|
page readonly
|
|
|
|
1A39189E000
|
unkown
|
page read and write
|
|
|
|
1DB47FB0000
|
unkown
|
page write copy
|
|
|
|
23828FA5000
|
unkown
|
page read and write
|
|
|
|
23829402000
|
unkown
|
page read and write
|
|
|
|
23828D00000
|
unkown
|
page readonly
|
|
|
|
2E75000
|
unkown
|
page readonly
|
|
|
|
7FF5E53B7000
|
unkown
|
page readonly
|
|
|
|
2D136A02000
|
unkown
|
page read and write
|
|
|
|
23828F22000
|
unkown
|
page read and write
|
|
|
|
7FF598E22000
|
unkown
|
page readonly
|
|
|
|
B40077C000
|
unkown
|
page read and write
|
|
|
|
1DB4A121000
|
unkown
|
page read and write
|
|
|
|
28B79E2A000
|
unkown
|
page read and write
|
|
|
|
7FF5906D1000
|
unkown
|
page readonly
|
|
|
|
7FF590D1D000
|
unkown
|
page readonly
|
|
|
|
21E1A8C0000
|
unkown
|
page read and write
|
|
|
|
7FF598C9C000
|
unkown
|
page readonly
|
|
|
|
7FF4F7CE1000
|
unkown
|
page readonly
|
|
|
|
1DB480E7000
|
unkown
|
page read and write
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
7FF5985A3000
|
unkown
|
page readonly
|
|
|
|
23828613000
|
unkown
|
page read and write
|
|
|
|
2B1C000
|
unkown
|
page readonly
|
|
|
|
2A481308000
|
unkown
|
page read and write
|
|
|
|
2D136B02000
|
unkown
|
page read and write
|
|
|
|
23828F21000
|
unkown
|
page read and write
|
|
|
|
7FF5CBCA4000
|
unkown
|
page readonly
|
|
|
|
5CC0000
|
unkown
|
page readonly
|
|
|
|
2F23000
|
unkown
|
page readonly
|
|
|
|
2A481229000
|
unkown
|
page read and write
|
|
|
|
7FF590A9A000
|
unkown
|
page readonly
|
|
|
|
7FF5E553E000
|
unkown
|
page readonly
|
|
|
|
7FF598C7D000
|
unkown
|
page readonly
|
|
|
|
B92000
|
unkown
|
page read and write
|
|
|
|
2D136A00000
|
unkown
|
page read and write
|
|
|
|
23828F69000
|
unkown
|
page read and write
|
|
|
|
CE08AFE000
|
unkown
|
page read and write
|
|
|
|
2E77000
|
unkown
|
page readonly
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C8E000
|
unkown
|
page readonly
|
|
|
|
2E69000
|
unkown
|
page readonly
|
|
|
|
7FF5D645E000
|
unkown
|
page readonly
|
|
|
|
7FF4F7E60000
|
unkown
|
page readonly
|
|
|
|
7FF59872F000
|
unkown
|
page readonly
|
|
|
|
2A481251000
|
unkown
|
page read and write
|
|
|
|
EE0000
|
unkown
|
page read and write
|
|
|
|
7FF590DDB000
|
unkown
|
page readonly
|
|
|
|
7FF5E5645000
|
unkown
|
page readonly
|
|
|
|
1DB480A0000
|
unkown
|
page read and write
|
|
|
|
28B79D70000
|
unkown
|
page readonly
|
|
|
|
B47FD7B000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C88000
|
unkown
|
page readonly
|
|
|
|
7D0000
|
heap default
|
page read and write
|
|
|
|
B40037A000
|
unkown
|
page read and write
|
|
|
|
1E9AC000000
|
unkown
|
page read and write
|
|
|
|
1DB4806F000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F39000
|
unkown
|
page readonly
|
|
|
|
2B91000
|
unkown
|
page readonly
|
|
|
|
7FF590D6C000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C74000
|
unkown
|
page readonly
|
|
|
|
B47FEFD000
|
unkown
|
page read and write
|
|
|
|
D40000
|
unkown
|
page readonly
|
|
|
|
23828F4F000
|
unkown
|
page read and write
|
|
|
|
1DB4B110000
|
unkown
|
page read and write
|
|
|
|
17F30A68000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
3C524FE000
|
unkown
|
page read and write
|
|
|
|
ED4157F000
|
unkown
|
page read and write
|
|
|
|
28B7A800000
|
unkown
|
page readonly
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
1DB48143000
|
unkown
|
page read and write
|
|
|
|
2E77000
|
unkown
|
page readonly
|
|
|
|
2E7F000
|
unkown
|
page readonly
|
|
|
|
17F32470000
|
unkown
|
page read and write
|
|
|
|
7FF5B2B01000
|
unkown
|
page readonly
|
|
|
|
28B79E5E000
|
unkown
|
page read and write
|
|
|
|
23828F53000
|
unkown
|
page read and write
|
|
|
|
21E18F02000
|
unkown
|
page read and write
|
|
|
|
7FF5D6020000
|
unkown
|
page readonly
|
|
|
|
28B79E87000
|
unkown
|
page read and write
|
|
|
|
7FF590C11000
|
unkown
|
page readonly
|
|
|
|
1DB4A166000
|
unkown
|
page read and write
|
|
|
|
23828F69000
|
unkown
|
page read and write
|
|
|
|
7FF5E5491000
|
unkown
|
page readonly
|
|
|
|
D50000
|
unkown
|
page read and write
|
|
|
|
1DB480C6000
|
unkown
|
page read and write
|
|
|
|
23828F3E000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C2B000
|
unkown
|
page readonly
|
|
|
|
3C5247F000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page readonly
|
|
|
|
23828F5A000
|
unkown
|
page read and write
|
|
|
|
28B79F08000
|
unkown
|
page read and write
|
|
|
|
7FF4F7721000
|
unkown
|
page readonly
|
|
|
|
7FF5987F1000
|
unkown
|
page readonly
|
|
|
|
B4006FB000
|
unkown
|
page read and write
|
|
|
|
1DB48073000
|
unkown
|
page read and write
|
|
|
|
23829500000
|
unkown
|
page read and write
|
|
|
|
2F04000
|
unkown
|
page readonly
|
|
|
|
7FF5CBBF8000
|
unkown
|
page readonly
|
|
|
|
7FF5E5255000
|
unkown
|
page readonly
|
|
|
|
10FE000
|
unkown
|
page read and write
|
|
|
|
7FF590E3E000
|
unkown
|
page readonly
|
|
|
|
1E9AC113000
|
unkown
|
page read and write
|
|
|
|
7FF5E5614000
|
unkown
|
page readonly
|
|
|
|
7FF5D6544000
|
unkown
|
page readonly
|
|
|
|
985000
|
unkown
|
page read and write
|
|
|
|
1E9AC053000
|
unkown
|
page read and write
|
|
|
|
1DB48143000
|
unkown
|
page read and write
|
|
|
|
2E83000
|
unkown
|
page readonly
|
|
|
|
2EAB000
|
unkown
|
page readonly
|
|
|
|
7FF590CD3000
|
unkown
|
page readonly
|
|
|
|
96A000
|
unkown
|
page read and write
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
28B79C90000
|
heap default
|
page read and write
|
|
|
|
7FF5E561F000
|
unkown
|
page readonly
|
|
|
|
23828FA2000
|
unkown
|
page read and write
|
|
|
|
1DB4A108000
|
unkown
|
page read and write
|
|
|
|
2D136A6E000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown
|
page read and write
|
|
|
|
1A3919B0000
|
unkown
|
page readonly
|
|
|
|
23828480000
|
heap private
|
page read and write
|
|
|
|
1DB48175000
|
unkown
|
page read and write
|
|
|
|
17F30A68000
|
unkown
|
page read and write
|
|
|
|
1140000
|
unkown
|
page read and write
|
|
|
|
23828F59000
|
unkown
|
page read and write
|
|
|
|
7FF590D16000
|
unkown
|
page readonly
|
|
|
|
2D02000
|
unkown
|
page readonly
|
|
|
|
7FF52CC94000
|
unkown
|
page readonly
|
|
|
|
2E75000
|
unkown
|
page readonly
|
|
|
|
1DB4A107000
|
unkown
|
page read and write
|
|
|
|
2E4C000
|
unkown
|
page readonly
|
|
|
|
7FF598D35000
|
unkown
|
page readonly
|
|
|
|
7FF598D8F000
|
unkown
|
page readonly
|
|
|
|
7FF5E5684000
|
unkown
|
page readonly
|
|
|
|
2E19000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C86000
|
unkown
|
page readonly
|
|
|
|
23828F5D000
|
unkown
|
page read and write
|
|
|
|
1A39189B000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F3D000
|
unkown
|
page readonly
|
|
|
|
7FF590DD0000
|
unkown
|
page readonly
|
|
|
|
2E3D000
|
unkown
|
page readonly
|
|
|
|
133D000
|
unkown
|
page readonly
|
|
|
|
B40047B000
|
unkown
|
page read and write
|
|
|
|
7FF5E55AC000
|
unkown
|
page readonly
|
|
|
|
23828F45000
|
unkown
|
page read and write
|
|
|
|
7FF5E566F000
|
unkown
|
page readonly
|
|
|
|
2EAB000
|
unkown
|
page readonly
|
|
|
|
74B000
|
unkown
|
page read and write
|
|
|
|
23828F7B000
|
unkown
|
page read and write
|
|
|
|
1DB48175000
|
unkown
|
page read and write
|
|
|
|
965000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D11000
|
unkown
|
page readonly
|
|
|
|
23828F4C000
|
unkown
|
page read and write
|
|
|
|
23828F7A000
|
unkown
|
page read and write
|
|
|
|
7FF4F7FB1000
|
unkown
|
page readonly
|
|
|
|
7FF598754000
|
unkown
|
page readonly
|
|
|
|
2E5C000
|
unkown
|
page readonly
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
7FF52C4E5000
|
unkown
|
page readonly
|
|
|
|
1DB48079000
|
unkown
|
page read and write
|
|
|
|
1DB49FB0000
|
unkown
|
page readonly
|
|
|
|
7FF590E38000
|
unkown
|
page readonly
|
|
|
|
2FDE38A000
|
unkown
|
page read and write
|
|
|
|
CE084FD000
|
unkown
|
page read and write
|
|
|
|
7FF5985FE000
|
unkown
|
page readonly
|
|
|
|
3160000
|
unkown
|
page readonly
|
|
|
|
E00000
|
unkown
|
page readonly
|
|
|
|
6EA000
|
unkown
|
page read and write
|
|
|
|
1DB4A400000
|
unkown
|
page read and write
|
|
|
|
23828CF0000
|
unkown
|
page readonly
|
|
|
|
1DB4A1B6000
|
unkown
|
page read and write
|
|
|
|
23829000000
|
unkown
|
page readonly
|
|
|
|
23828F63000
|
unkown
|
page read and write
|
|
|
|
21E18DC0000
|
heap default
|
page read and write
|
|
|
|
7FF5B2C6A000
|
unkown
|
page readonly
|
|
|
|
7FF590932000
|
unkown
|
page readonly
|
|
|
|
2E19000
|
unkown
|
page readonly
|
|
|
|
7FF52CCAE000
|
unkown
|
page readonly
|
|
|
|
2E5C000
|
unkown
|
page readonly
|
|
|
|
7FF5E4F41000
|
unkown
|
page readonly
|
|
|
|
7FF5E4EB0000
|
unkown
|
page readonly
|
|
|
|
2D136A54000
|
unkown
|
page read and write
|
|
|
|
23828F74000
|
unkown
|
page read and write
|
|
|
|
1DB4A113000
|
unkown
|
page read and write
|
|
|
|
23828F63000
|
unkown
|
page read and write
|
|
|
|
23828FAB000
|
unkown
|
page read and write
|
|
|
|
7FF590A8C000
|
unkown
|
page readonly
|
|
|
|
1DB4A482000
|
unkown
|
page read and write
|
|
|
|
1DB4812D000
|
unkown
|
page read and write
|
|
|
|
1DB4B410000
|
unkown
|
page read and write
|
|
|
|
1DB480D6000
|
unkown
|
page read and write
|
|
|
|
1DB4A1A2000
|
unkown
|
page read and write
|
|
|
|
7FF59872C000
|
unkown
|
page readonly
|
|
|
|
F3D000
|
unkown
|
page read and write
|
|
|
|
23828F22000
|
unkown
|
page read and write
|
|
|
|
23828F2B000
|
unkown
|
page read and write
|
|
|
|
1DB4A12E000
|
unkown
|
page read and write
|
|
|
|
F7F000
|
unkown
|
page read and write
|
|
|
|
23828F61000
|
unkown
|
page read and write
|
|
|
|
48811F9000
|
unkown
|
page read and write
|
|
|
|
E10000
|
heap default
|
page read and write
|
|
|
|
1DB480D6000
|
unkown
|
page read and write
|
|
|
|
1DB48136000
|
unkown
|
page read and write
|
|
|
|
7FF4F7ECB000
|
unkown
|
page readonly
|
|
|
|
7FF590BF5000
|
unkown
|
page readonly
|
|
|
|
17F30B02000
|
unkown
|
page read and write
|
|
|
|
2D136A69000
|
unkown
|
page read and write
|
|
|
|
2F23000
|
unkown
|
page readonly
|
|
|
|
1DB4B010000
|
unkown
|
page read and write
|
|
|
|
2D47000
|
unkown
|
page readonly
|
|
|
|
1DB4A343000
|
unkown
|
page read and write
|
|
|
|
21E1A9C0000
|
unkown
|
page readonly
|
|
|
|
7FF5E51A2000
|
unkown
|
page readonly
|
|
|
|
17F30910000
|
heap private
|
page read and write
|
|
|
|
FB4000
|
heap private
|
page read and write
|
|
|
|
B81000
|
unkown
|
page read and write
|
|
|
|
17F30C00000
|
unkown
|
page readonly
|
|
|
|
7FF590DAF000
|
unkown
|
page readonly
|
|
|
|
2E45000
|
unkown
|
page readonly
|
|
|
|
103A000
|
heap private
|
page read and write
|
|
|
|
1E9AC057000
|
unkown
|
page read and write
|
|
|
|
7750000
|
unkown
|
page read and write
|
|
|
|
B7C000
|
unkown
|
page read and write
|
|
|
|
7FF590DA4000
|
unkown
|
page readonly
|
|
|
|
1DB48133000
|
unkown
|
page read and write
|
|
|
|
1DB4A2CA000
|
unkown
|
page read and write
|
|
|
|
1DB4A10A000
|
unkown
|
page read and write
|
|
|
|
23828F23000
|
unkown
|
page read and write
|
|
|
|
48810FE000
|
unkown
|
page read and write
|
|
|
|
17F30980000
|
unkown
|
page write copy
|
|
|
|
23828F49000
|
unkown
|
page read and write
|
|
|
|
AB99D7B000
|
unkown
|
page read and write
|
|
|
|
7FF590BA8000
|
unkown
|
page readonly
|
|
|
|
4754000
|
heap private
|
page read and write
|
|
|
|
1343000
|
unkown
|
page readonly
|
|
|
|
1A391871000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F28000
|
unkown
|
page readonly
|
|
|
|
1DB4A284000
|
unkown
|
page read and write
|
|
|
|
7FF4F7EC0000
|
unkown
|
page readonly
|
|
|
|
238285D0000
|
unkown
|
page readonly
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
2E60000
|
unkown
|
page readonly
|
|
|
|
7FF5E5657000
|
unkown
|
page readonly
|
|
|
|
23828F51000
|
unkown
|
page read and write
|
|
|
|
D5A000
|
heap private
|
page read and write
|
|
|
|
7FF5D6341000
|
unkown
|
page readonly
|
|
|
|
7FF5985FB000
|
unkown
|
page readonly
|
|
|
|
1DB480F7000
|
unkown
|
page read and write
|
|
|
|
2E2A000
|
unkown
|
page readonly
|
|
|
|
7FF5CBBC5000
|
unkown
|
page readonly
|
|
|
|
7FF598E14000
|
unkown
|
page readonly
|
|
|
|
2F23000
|
unkown
|
page readonly
|
|
|
|
7FF4F7ED7000
|
unkown
|
page readonly
|
|
|
|
7FF5D644C000
|
unkown
|
page readonly
|
|
|
|
7FF5D6551000
|
unkown
|
page readonly
|
|
|
|
7FF5E53FB000
|
unkown
|
page readonly
|
|
|
|
CE0877B000
|
unkown
|
page read and write
|
|
|
|
7FF598B81000
|
unkown
|
page readonly
|
|
|
|
7FF5982C6000
|
unkown
|
page readonly
|
|
|
|
7FF4F7C7B000
|
unkown
|
page readonly
|
|
|
|
23828654000
|
unkown
|
page read and write
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
7FF590E2E000
|
unkown
|
page readonly
|
|
|
|
1DB4806B000
|
unkown
|
page read and write
|
|
|
|
2D136A6A000
|
unkown
|
page read and write
|
|
|
|
2FDE6FF000
|
unkown
|
page read and write
|
|
|
|
1DB4A343000
|
unkown
|
page read and write
|
|
|
|
23828F21000
|
unkown
|
page read and write
|
|
|
|
23828648000
|
unkown
|
page read and write
|
|
|
|
2D136A6C000
|
unkown
|
page read and write
|
|
|
|
7FF52CCB8000
|
unkown
|
page readonly
|
|
|
|
AB99E77000
|
unkown
|
page read and write
|
|
|
|
1A391A30000
|
heap private
|
page read and write
|
|
|
|
2F12000
|
unkown
|
page readonly
|
|
|
|
1DB4A1ED000
|
unkown
|
page read and write
|
|
|
|
17F30A6C000
|
unkown
|
page read and write
|
|
|
|
DBE000
|
unkown
|
page read and write
|
|
|
|
1DB480D6000
|
unkown
|
page read and write
|
|
|
|
C79000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F04000
|
unkown
|
page readonly
|
|
|
|
7FF5CBAC3000
|
unkown
|
page readonly
|
|
|
|
7FF5E560F000
|
unkown
|
page readonly
|
|
|
|
1E9ABFB0000
|
unkown
|
page read and write
|
|
|
|
7FF590D70000
|
unkown
|
page readonly
|
|
|
|
1DB48056000
|
unkown
|
page read and write
|
|
|
|
238286A1000
|
unkown
|
page read and write
|
|
|
|
AB99A7B000
|
unkown
|
page read and write
|
|
|
|
B47FDF9000
|
unkown
|
page read and write
|
|
|
|
B92000
|
unkown
|
page read and write
|
|
|
|
B78000
|
unkown
|
page read and write
|
|
|
|
2A481213000
|
unkown
|
page read and write
|
|
|
|
23828D00000
|
unkown
|
page read and write
|
|
|
|
23828F81000
|
unkown
|
page read and write
|
|
|
|
7FF5987E4000
|
unkown
|
page readonly
|
|
|
|
2A48124B000
|
unkown
|
page read and write
|
|
|
|
7FF5CBCAA000
|
unkown
|
page readonly
|
|
|
|
7FF5CB9E5000
|
unkown
|
page readonly
|
|
|
|
7FF59874A000
|
unkown
|
page readonly
|
|
|
|
7FF590BAF000
|
unkown
|
page readonly
|
|
|
|
23828F33000
|
unkown
|
page read and write
|
|
|
|
1E9AC029000
|
unkown
|
page read and write
|
|
|
|
1DB48153000
|
unkown
|
page read and write
|
|
|
|
23828F49000
|
unkown
|
page read and write
|
|
|
|
7FF52CD3A000
|
unkown
|
page readonly
|
|
|
|
23828F2B000
|
unkown
|
page read and write
|
|
|
|
23828CE0000
|
unkown
|
page readonly
|
|
|
|
7FF4F771D000
|
unkown
|
page readonly
|
|
|
|
2A481300000
|
unkown
|
page read and write
|
|
|
|
7FF5D654A000
|
unkown
|
page readonly
|
|
|
|
1DB480DA000
|
unkown
|
page read and write
|
|
|
|
23828708000
|
unkown
|
page read and write
|
|
|
|
7FF598DA6000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C37000
|
unkown
|
page readonly
|
|
|
|
1DB49EF0000
|
unkown
|
page read and write
|
|
|
|
23828F3C000
|
unkown
|
page read and write
|
|
|
|
23828F55000
|
unkown
|
page read and write
|
|
|
|
23829402000
|
unkown
|
page read and write
|
|
|
|
2A481265000
|
unkown
|
page read and write
|
|
|
|
1DB48000000
|
unkown
|
page read and write
|
|
|
|
2EF5000
|
unkown
|
page readonly
|
|
|
|
2A48124E000
|
unkown
|
page read and write
|
|
|
|
23828F46000
|
unkown
|
page read and write
|
|
|
|
7FF5CBB83000
|
unkown
|
page readonly
|
|
|
|
7FF4F7E62000
|
unkown
|
page readonly
|
|
|
|
1DB48200000
|
unkown
|
page readonly
|
|
|
|
B92000
|
unkown
|
page read and write
|
|
|
|
23828600000
|
unkown
|
page read and write
|
|
|
|
7FF598744000
|
unkown
|
page readonly
|
|
|
|
7FF590EBA000
|
unkown
|
page readonly
|
|
|
|
7FF5E54E3000
|
unkown
|
page readonly
|
|
|
|
23828F72000
|
unkown
|
page read and write
|
|
|
|
7FF590EC2000
|
unkown
|
page readonly
|
|
|
|
23828FA4000
|
unkown
|
page read and write
|
|
|
|
7FF590D93000
|
unkown
|
page readonly
|
|
|
|
28B79F00000
|
unkown
|
page read and write
|
|
|
|
2A481283000
|
unkown
|
page read and write
|
|
|
|
23828F46000
|
unkown
|
page read and write
|
|
|
|
A3B9F7D000
|
unkown
|
page read and write
|
|
|
|
1E9AC200000
|
unkown
|
page readonly
|
|
|
|
7FF5E564B000
|
unkown
|
page readonly
|
|
|
|
1DB49F90000
|
unkown
|
page read and write
|
|
|
|
7FF590B8B000
|
unkown
|
page readonly
|
|
|
|
23828F3C000
|
unkown
|
page read and write
|
|
|
|
7FF590C29000
|
unkown
|
page readonly
|
|
|
|
2382864F000
|
unkown
|
page read and write
|
|
|
|
23828F0E000
|
unkown
|
page read and write
|
|
|
|
C30000
|
unkown
|
page readonly
|
|
|
|
B40067F000
|
unkown
|
page read and write
|
|
|
|
7FF5E563E000
|
unkown
|
page readonly
|
|
|
|
2D136A40000
|
unkown
|
page read and write
|
|
|
|
2FDE779000
|
unkown
|
page read and write
|
|
|
|
AB99C75000
|
unkown
|
page read and write
|
|
|
|
D60000
|
unkown
|
page readonly
|
|
|
|
1DB4A120000
|
unkown
|
page read and write
|
|
|
|
7FF598705000
|
unkown
|
page readonly
|
|
|
|
23828F4E000
|
unkown
|
page read and write
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
17F30CD0000
|
unkown
|
page readonly
|
|
|
|
23828F59000
|
unkown
|
page read and write
|
|
|
|
7FF5D6465000
|
unkown
|
page readonly
|
|
|
|
7FF598E1A000
|
unkown
|
page readonly
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
17F30A4B000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC28000
|
unkown
|
page readonly
|
|
|
|
7FF5985E1000
|
unkown
|
page readonly
|
|
|
|
1DB4B210000
|
unkown
|
page read and write
|
|
|
|
CE087FE000
|
unkown
|
page read and write
|
|
|
|
7FF5CB87C000
|
unkown
|
page readonly
|
|
|
|
A40000
|
heap default
|
page read and write
|
|
|
|
1DB4A600000
|
unkown
|
page readonly
|
|
|
|
7FF5E5476000
|
unkown
|
page readonly
|
|
|
|
23828F57000
|
unkown
|
page read and write
|
|
|
|
23828F53000
|
unkown
|
page read and write
|
|
|
|
1DB48013000
|
unkown
|
page read and write
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
23828F3A000
|
unkown
|
page read and write
|
|
|
|
1DB4A002000
|
unkown
|
page read and write
|
|
|
|
21E19120000
|
unkown
|
page readonly
|
|
|
|
23828629000
|
unkown
|
page read and write
|
|
|
|
7FF4F7EF8000
|
unkown
|
page readonly
|
|
|
|
1A39187F000
|
unkown
|
page read and write
|
|
|
|
2A481265000
|
unkown
|
page read and write
|
|
|
|
7FF5E51AE000
|
unkown
|
page readonly
|
|
|
|
1A391960000
|
unkown
|
page read and write
|
|
|
|
2EF1000
|
unkown
|
page readonly
|
|
|
|
1DB4A383000
|
unkown
|
page read and write
|
|
|
|
23828F0E000
|
unkown
|
page read and write
|
|
|
|
7FF5CBABB000
|
unkown
|
page readonly
|
|
|
|
28B7A000000
|
unkown
|
page readonly
|
|
|
|
1DB4A1E8000
|
unkown
|
page read and write
|
|
|
|
17F30A13000
|
unkown
|
page read and write
|
|
|
|
7FF5B2A41000
|
unkown
|
page readonly
|
|
|
|
2F23000
|
unkown
|
page readonly
|
|
|
|
1DB4A197000
|
unkown
|
page read and write
|
|
|
|
2EF1000
|
unkown
|
page readonly
|
|
|
|
7FF4F7EEC000
|
unkown
|
page readonly
|
|
|
|
1DB4B610000
|
unkown
|
page read and write
|
|
|
|
23828702000
|
unkown
|
page read and write
|
|
|
|
7FF5E5521000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C9D000
|
unkown
|
page readonly
|
|
|
|
1E9ABF20000
|
heap private
|
page read and write
|
|
|
|
1A39189B000
|
unkown
|
page read and write
|
|
|
|
7FF590B96000
|
unkown
|
page readonly
|
|
|
|
2E60000
|
unkown
|
page readonly
|
|
|
|
7FF5CBC3D000
|
unkown
|
page readonly
|
|
|
|
7FF5E5694000
|
unkown
|
page readonly
|
|
|
|
2A481313000
|
unkown
|
page read and write
|
|
|
|
23828F40000
|
unkown
|
page read and write
|
|
|
|
7FF597F70000
|
unkown
|
page readonly
|
|
|
|
7FF590DBC000
|
unkown
|
page readonly
|
|
|
|
2EA6000
|
unkown
|
page readonly
|
|
|
|
2D0E000
|
unkown
|
page readonly
|
|
|
|
7FF5E4F93000
|
unkown
|
page readonly
|
|
|
|
7FF4F7DC3000
|
unkown
|
page readonly
|
|
|
|
23829461000
|
unkown
|
page read and write
|
|
|
|
17F30B13000
|
unkown
|
page read and write
|
|
|
|
1DB47FA0000
|
heap default
|
page read and write
|
|
|
|
7FF4F7FAA000
|
unkown
|
page readonly
|
|
|
|
7FF598D2E000
|
unkown
|
page readonly
|
|
|
|
B4000FB000
|
unkown
|
page read and write
|
|
|
|
7FF4F7EEF000
|
unkown
|
page readonly
|
|
|
|
B47FFFB000
|
unkown
|
page read and write
|
|
|
|
23828F48000
|
unkown
|
page read and write
|
|
|
|
7FF5E5731000
|
unkown
|
page readonly
|
|
|
|
7FF598C11000
|
unkown
|
page readonly
|
|
|
|
7FF4F7F36000
|
unkown
|
page readonly
|
|
|
|
B5A000
|
heap default
|
page read and write
|
|
|
|
7FF4F7CE5000
|
unkown
|
page readonly
|
|
|
|
7FF5B2B1B000
|
unkown
|
page readonly
|
|
|
|
23829402000
|
unkown
|
page read and write
|
|
|
|
2D02000
|
unkown
|
page readonly
|
|
|
|
4880D8B000
|
unkown
|
page read and write
|
|
|
|
7FF5B28EF000
|
unkown
|
page readonly
|
|
|
|
17F309D0000
|
unkown
|
page readonly
|
|
|
|
B50000
|
unkown
|
page readonly
|
|
|
|
968000
|
unkown
|
page read and write
|
|
|
|
7FF5CB986000
|
unkown
|
page readonly
|
|
|
|
2EA2000
|
unkown
|
page readonly
|
|
|
|
7FF5987EA000
|
unkown
|
page readonly
|
|
|
|
7FF5D645A000
|
unkown
|
page readonly
|
|
|
|
7FF5B247D000
|
unkown
|
page readonly
|
|
|
|
7FF590D9B000
|
unkown
|
page readonly
|
|
|
|
B47000
|
heap private
|
page read and write
|
|
|
|
1DB4A500000
|
unkown
|
page read and write
|
|
|
|
7FF598D2A000
|
unkown
|
page readonly
|
|
|
|
7FF5E563A000
|
unkown
|
page readonly
|
|
|
|
7FF5B2A45000
|
unkown
|
page readonly
|
|
|
|
17F30A6D000
|
unkown
|
page read and write
|
|
|
|
2A481C00000
|
unkown
|
page readonly
|
|
|
|
23828F4E000
|
unkown
|
page read and write
|
|
|
|
17F30A68000
|
unkown
|
page read and write
|
|
|
|
23828F48000
|
unkown
|
page read and write
|
|
|
|
2E91000
|
unkown
|
page readonly
|
|
|
|
23828F48000
|
unkown
|
page read and write
|
|
|
|
2E2A000
|
unkown
|
page readonly
|
|
|
|
A00000
|
unkown
|
page readonly
|
|
|
|
7FF597F95000
|
unkown
|
page readonly
|
|
|
|
1A391880000
|
unkown
|
page read and write
|
|
|
|
23828F6D000
|
unkown
|
page read and write
|
|
|
|
2A481302000
|
unkown
|
page read and write
|
|
|
|
1DB480FE000
|
unkown
|
page read and write
|
|
|
|
2A48123C000
|
unkown
|
page read and write
|
|
|
|
23828F65000
|
unkown
|
page read and write
|
|
|
|
17F30B00000
|
unkown
|
page read and write
|
|
|
|
FE0000
|
unkown
|
page read and write
|
|
|
|
B44000
|
unkown
|
page read and write
|
|
|
|
1DB49F80000
|
unkown
|
page read and write
|
|
|
|
23828FBA000
|
unkown
|
page read and write
|
|
|
|
982000
|
unkown
|
page read and write
|
|
|
|
1DB49F70000
|
unkown
|
page read and write
|
|
|
|
7FF52CC88000
|
unkown
|
page readonly
|
|
|
|
7FF5B2A79000
|
unkown
|
page readonly
|
|
|
|
28B79D90000
|
unkown
|
page read and write
|
|
|
|
1DB48184000
|
unkown
|
page read and write
|
|
|
|
2D47000
|
unkown
|
page readonly
|
|
|
|
91D8CFB000
|
unkown
|
page read and write
|
|
|
|
1DB481B5000
|
unkown
|
page read and write
|
|
|
|
7FF598D67000
|
unkown
|
page readonly
|
|
|
|
2A481270000
|
unkown
|
page read and write
|
|
|
|
2A481170000
|
unkown
|
page readonly
|
|
|
|
7FF590E41000
|
unkown
|
page readonly
|
|
|
|
1DB4A189000
|
unkown
|
page read and write
|
|
|
|
23828F49000
|
unkown
|
page read and write
|
|
|
|
7FF5E55E0000
|
unkown
|
page readonly
|
|
|
|
23828F41000
|
unkown
|
page read and write
|
|
|
|
1A39189B000
|
unkown
|
page read and write
|
|
|
|
7FF4F7B7C000
|
unkown
|
page readonly
|
|
|
|
B4005FA000
|
unkown
|
page read and write
|
|
|
|
1A391860000
|
heap default
|
page read and write
|
|
|
|
7FF5CBBCB000
|
unkown
|
page readonly
|
|
|
|
1DB480CF000
|
unkown
|
page read and write
|
|
|
|
2D02000
|
unkown
|
page readonly
|
|
|
|
28B79E5B000
|
unkown
|
page read and write
|
|
|
|
1A391886000
|
unkown
|
page read and write
|
|
|
|
7FF5CB88F000
|
unkown
|
page readonly
|
|
|
|
1DB48113000
|
unkown
|
page read and write
|
|
|
|
B47FB79000
|
unkown
|
page read and write
|
|
|
|
1DB4B210000
|
unkown
|
page read and write
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
1DB4A253000
|
unkown
|
page read and write
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F2E000
|
unkown
|
page readonly
|
|
|
|
1DB4A1C5000
|
unkown
|
page read and write
|
|
|
|
23828F2F000
|
unkown
|
page read and write
|
|
|
|
1DB4B210000
|
unkown
|
page read and write
|
|
|
|
B40000
|
heap private
|
page read and write
|
|
|
|
C95000
|
unkown
|
page read and write
|
|
|
|
7FF590D62000
|
unkown
|
page readonly
|
|
|
|
1DB4B110000
|
unkown
|
page read and write
|
|
|
|
2D0E000
|
unkown
|
page readonly
|
|
|
|
17F30A6F000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C96000
|
unkown
|
page readonly
|
|
|
|
2EF5000
|
unkown
|
page readonly
|
|
|
|
7FF5D635E000
|
unkown
|
page readonly
|
|
|
|
7FF5986EA000
|
unkown
|
page readonly
|
|
|
|
7FF4F7FB2000
|
unkown
|
page readonly
|
|
|
|
7FF5E4ED5000
|
unkown
|
page readonly
|
|
|
|
2E69000
|
unkown
|
page readonly
|
|
|
|
23829402000
|
unkown
|
page read and write
|
|
|
|
1DB4A18D000
|
unkown
|
page read and write
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
2B1C000
|
unkown
|
page readonly
|
|
|
|
7FF5D64B4000
|
unkown
|
page readonly
|
|
|
|
23828FA8000
|
unkown
|
page read and write
|
|
|
|
7FF598717000
|
unkown
|
page readonly
|
|
|
|
17F30A68000
|
unkown
|
page read and write
|
|
|
|
1E9AC108000
|
unkown
|
page read and write
|
|
|
|
17F30A6D000
|
unkown
|
page read and write
|
|
|
|
7FF5E569F000
|
unkown
|
page readonly
|
|
|
|
7FF5B28DC000
|
unkown
|
page readonly
|
|
|
|
2FDE7FA000
|
unkown
|
page read and write
|
|
|
|
7FF5CB41D000
|
unkown
|
page readonly
|
|
|
|
21E18E29000
|
unkown
|
page read and write
|
|
|
|
3C526FA000
|
unkown
|
page read and write
|
|
|
|
2382864C000
|
unkown
|
page read and write
|
|
|
|
B73000
|
heap default
|
page read and write
|
|
|
|
23828657000
|
unkown
|
page read and write
|
|
|
|
23828F4E000
|
unkown
|
page read and write
|
|
|
|
23829600000
|
unkown
|
page readonly
|
|
|
|
134A000
|
unkown
|
page readonly
|
|
|
|
4750000
|
heap private
|
page read and write
|
|
|
|
23828F4C000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown
|
page read and write
|
|
|
|
23828F71000
|
unkown
|
page read and write
|
|
|
|
23829502000
|
unkown
|
page read and write
|
|
|
|
2D136A6A000
|
unkown
|
page read and write
|
|
|
|
7FF52CD42000
|
unkown
|
page readonly
|
|
|
|
2D136A6A000
|
unkown
|
page read and write
|
|
|
|
72B000
|
unkown
|
page read and write
|
|
|
|
1E9AC05C000
|
unkown
|
page read and write
|
|
|
|
7FF590C04000
|
unkown
|
page readonly
|
|
|
|
7FF5CBBEF000
|
unkown
|
page readonly
|
|
|
|
D57000
|
heap private
|
page read and write
|
|
|
|
23828F4A000
|
unkown
|
page read and write
|
|
|
|
CE089FF000
|
unkown
|
page read and write
|
|
|
|
1A39188F000
|
unkown
|
page read and write
|
|
|
|
A3BA4FF000
|
unkown
|
page read and write
|
|
|
|
1DB4A100000
|
unkown
|
page read and write
|
|
|
|
23828F46000
|
unkown
|
page read and write
|
|
|
|
1DB4806A000
|
unkown
|
page read and write
|
|
|
|
2E3D000
|
unkown
|
page readonly
|
|
|
|
2E8A000
|
unkown
|
page readonly
|
|
|
|
23828F4C000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown
|
page readonly
|
|
|
|
A50000
|
unkown
|
page readonly
|
|
|
|
7FF5E56A8000
|
unkown
|
page readonly
|
|
|
|
1E9AC03C000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C1E000
|
unkown
|
page readonly
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
2E23000
|
unkown
|
page readonly
|
|
|
|
23828F87000
|
unkown
|
page read and write
|
|
|
|
7FF5CBAC8000
|
unkown
|
page readonly
|
|
|
|
7FF5CBCB2000
|
unkown
|
page readonly
|
|
|
|
2F23000
|
unkown
|
page readonly
|
|
|
|
7FF4F7DC8000
|
unkown
|
page readonly
|
|
|
|
7FF5B29DB000
|
unkown
|
page readonly
|
|
|
|
1DB4808F000
|
unkown
|
page read and write
|
|
|
|
2E91000
|
unkown
|
page readonly
|
|
|
|
7FF590CD8000
|
unkown
|
page readonly
|
|
|
|
1DB482D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5CF5000
|
unkown
|
page readonly
|
|
|
|
17F30A6F000
|
unkown
|
page read and write
|
|
|
|
3C52AF8000
|
unkown
|
page read and write
|
|
|
|
17F32570000
|
unkown
|
page readonly
|
|
|
|
7FF5986FA000
|
unkown
|
page readonly
|
|
|
|
1DB4A18A000
|
unkown
|
page read and write
|
|
|
|
7FF5B2B23000
|
unkown
|
page readonly
|
|
|
|
1DB4A1B6000
|
unkown
|
page read and write
|
|
|
|
3C529F7000
|
unkown
|
page read and write
|
|
|
|
B20000
|
unkown
|
page readonly
|
|
|
|
7FF5D64A4000
|
unkown
|
page readonly
|
|
|
|
2A481180000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC2E000
|
unkown
|
page readonly
|
|
|
|
7FF598C83000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C7E000
|
unkown
|
page readonly
|
|
|
|
1DB480FE000
|
unkown
|
page read and write
|
|
|
|
7FF598664000
|
unkown
|
page readonly
|
|
|
|
23828F2F000
|
unkown
|
page read and write
|
|
|
|
1A3919C0000
|
unkown
|
page readonly
|
|
|
|
23828F84000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F14000
|
unkown
|
page readonly
|
|
|
|
17F30A68000
|
unkown
|
page read and write
|
|
|
|
23828F8A000
|
unkown
|
page read and write
|
|
|
|
B4002FA000
|
unkown
|
page read and write
|
|
|
|
21E18E56000
|
unkown
|
page read and write
|
|
|
|
7FF52C5A3000
|
unkown
|
page readonly
|
|
|
|
7FF590EB4000
|
unkown
|
page readonly
|
|
|
|
2A481150000
|
heap default
|
page read and write
|
|
|
|
23828713000
|
unkown
|
page read and write
|
|
|
|
7FF590DD5000
|
unkown
|
page readonly
|
|
|
|
3C527F7000
|
unkown
|
page read and write
|
|
|
|
982000
|
unkown
|
page read and write
|
|
|
|
28B79E13000
|
unkown
|
page read and write
|
|
|
|
91D917E000
|
unkown
|
page read and write
|
|
|
|
21E190D0000
|
unkown
|
page write copy
|
|
|
|
7FF5CBCB1000
|
unkown
|
page readonly
|
|
|
|
2D136A6C000
|
unkown
|
page read and write
|
|
|
|
23828F5D000
|
unkown
|
page read and write
|
|
|
|
1DB4A10F000
|
unkown
|
page read and write
|
|
|
|
2FDE8FF000
|
unkown
|
page read and write
|
|
|
|
7FF598D98000
|
unkown
|
page readonly
|
|
|
|
1DB48079000
|
unkown
|
page read and write
|
|
|
|
7840000
|
unkown
|
page read and write
|
|
|
|
B40007B000
|
unkown
|
page read and write
|
|
|
|
7FF590D9F000
|
unkown
|
page readonly
|
|
|
|
23828F69000
|
unkown
|
page read and write
|
|
|
|
7A5E000
|
unkown
|
page read and write
|
|
|
|
23829402000
|
unkown
|
page read and write
|
|
|
|
23828F48000
|
unkown
|
page read and write
|
|
|
|
7FF598477000
|
unkown
|
page readonly
|
|
|
|
7FF590DFC000
|
unkown
|
page readonly
|
|
|
|
2E60000
|
unkown
|
page readonly
|
|
|
|
23828F7B000
|
unkown
|
page read and write
|
|
|
|
2EF5000
|
unkown
|
page readonly
|
|
|
|
23828F78000
|
unkown
|
page read and write
|
|
|
|
23828FA5000
|
unkown
|
page read and write
|
|
|
|
2D136A6C000
|
unkown
|
page read and write
|
|
|
|
23828F7A000
|
unkown
|
page read and write
|
|
|
|
23828F46000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C91000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C20000
|
unkown
|
page readonly
|
|
|
|
7FF5D5CD0000
|
unkown
|
page readonly
|
|
|
|
4881179000
|
unkown
|
page read and write
|
|
|
|
23828649000
|
unkown
|
page read and write
|
|
|
|
7FF59866C000
|
unkown
|
page readonly
|
|
|
|
2D136A6B000
|
unkown
|
page read and write
|
|
|
|
488107E000
|
unkown
|
page read and write
|
|
|
|
23828F33000
|
unkown
|
page read and write
|
|
|
|
23828800000
|
unkown
|
page readonly
|
|
|
|
23828F13000
|
unkown
|
page read and write
|
|
|
|
7FF5B28EA000
|
unkown
|
page readonly
|
|
|
|
23828FC6000
|
unkown
|
page read and write
|
|
|
|
21E18E6E000
|
unkown
|
page read and write
|
|
|
|
1DB48185000
|
unkown
|
page read and write
|
|
|
|
238286D5000
|
unkown
|
page read and write
|
|
|
|
7FF5E5677000
|
unkown
|
page readonly
|
|
|
|
2D136A68000
|
unkown
|
page read and write
|
|
|
|
7FF598E21000
|
unkown
|
page readonly
|
|
|
|
7FF5D6552000
|
unkown
|
page readonly
|
|
|
|
1DB4A109000
|
unkown
|
page read and write
|
|
|
|
1E9AC100000
|
unkown
|
page read and write
|
|
|
|
7FF5E4F97000
|
unkown
|
page readonly
|
|
|
|
9D7000
|
unkown
|
page read and write
|
|
|
|
1DB4A200000
|
unkown
|
page read and write
|
|
|
|
1DB4A1ED000
|
unkown
|
page read and write
|
|
|
|
7FF5E572A000
|
unkown
|
page readonly
|
|
|
|
A3BA3FF000
|
unkown
|
page read and write
|
|
|
|
1DB49F00000
|
unkown
|
page readonly
|
|
|
|
7FF5988F6000
|
unkown
|
page readonly
|
|
|
|
7FF5D646B000
|
unkown
|
page readonly
|
|
|
|
CE088F7000
|
unkown
|
page read and write
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
7FF52C5A7000
|
unkown
|
page readonly
|
|
|
|
B47FE7C000
|
unkown
|
page read and write
|
|
|
|
2382864B000
|
unkown
|
page read and write
|
|
|
|
23828F30000
|
unkown
|
page read and write
|
|
|
|
2E2A000
|
unkown
|
page readonly
|
|
|
|
7FF4F7EBE000
|
unkown
|
page readonly
|
|
|
|
CE0857E000
|
unkown
|
page read and write
|
|
|
|
17F30A6F000
|
unkown
|
page read and write
|
|
|
|
2D136810000
|
unkown
|
page readonly
|
|
|
|
7FF598D3B000
|
unkown
|
page readonly
|
|
|
|
1DB4A103000
|
unkown
|
page read and write
|
|
|
|
23828670000
|
unkown
|
page read and write
|
|
|
|
1040000
|
unkown
|
page readonly
|
|
|
|
B30000
|
unkown
|
page readonly
|
|
|
|
C5A000
|
heap default
|
page read and write
|
|
|
|
1DB4A273000
|
unkown
|
page read and write
|
|
|
|
7FF5CB88A000
|
unkown
|
page readonly
|
|
|
|
1DB4A104000
|
unkown
|
page read and write
|
|
|
|
17F30A6C000
|
unkown
|
page read and write
|
|
|
|
2A481200000
|
unkown
|
page read and write
|
|
|
|
238286E2000
|
unkown
|
page read and write
|
|
|
|
7FF5D64BF000
|
unkown
|
page readonly
|
|
|
|
1A391876000
|
heap default
|
page read and write
|
|
|
|
1DB4A1EF000
|
unkown
|
page read and write
|
|
|
|
7FF4F7DBB000
|
unkown
|
page readonly
|
|
|
|
1DB4A2C5000
|
unkown
|
page read and write
|
|
|
|
1A391980000
|
unkown
|
page read and write
|
|
|
|
2D136930000
|
unkown
|
page readonly
|
|
|
|
FB0000
|
heap private
|
page read and write
|
|
|
|
23828F53000
|
unkown
|
page read and write
|
|
|
|
17F30A6F000
|
unkown
|
page read and write
|
|
|
|
21E18E02000
|
unkown
|
page read and write
|
|
|
|
7FF590AA7000
|
unkown
|
page readonly
|
|
|
|
1DB47F40000
|
heap private
|
page read and write
|
|
|
|
2D136800000
|
heap default
|
page read and write
|
|
|
|
1DB4B310000
|
unkown
|
page read and write
|
|
|
|
2D1367A0000
|
heap private
|
page read and write
|
|
|
|
1DB49FD0000
|
unkown
|
page readonly
|
|
|
|
1E9ABF90000
|
unkown
|
page readonly
|
|
|
|
7FF5E4EB6000
|
unkown
|
page readonly
|
|
|
|
1DB48102000
|
unkown
|
page read and write
|
|
|
|
7FF598551000
|
unkown
|
page readonly
|
|
|
|
7FF5D6477000
|
unkown
|
page readonly
|
|
|
|
B47FA7B000
|
unkown
|
page read and write
|
|
|
|
7FF590D72000
|
unkown
|
page readonly
|
|
|
|
1E9ACA00000
|
unkown
|
page readonly
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
23828F40000
|
unkown
|
page read and write
|
|
|
|
1DB48072000
|
unkown
|
page read and write
|
|
|
|
2A481160000
|
unkown
|
page readonly
|
|
|
|
7FF5B29E6000
|
unkown
|
page readonly
|
|
|
|
1DB4A1EF000
|
unkown
|
page read and write
|
|
|
|
C92000
|
unkown
|
page read and write
|
|
|
|
1DB4B510000
|
unkown
|
page read and write
|
|
|
|
23828F7A000
|
unkown
|
page read and write
|
|
|
|
1DB4A383000
|
unkown
|
page read and write
|
|
|
|
7FF5E56AE000
|
unkown
|
page readonly
|
|
|
|
7FF5E5200000
|
unkown
|
page readonly
|
|
|
|
7FF598D47000
|
unkown
|
page readonly
|
|
|
|
28B79F02000
|
unkown
|
page read and write
|
|
|
|
7FF5B2C58000
|
unkown
|
page readonly
|
|
|
|
ED412FE000
|
unkown
|
page read and write
|
|
|
|
23828F69000
|
unkown
|
page read and write
|
|
|
|
7FF5CBAA1000
|
unkown
|
page readonly
|
|
|
|
7FF5909A9000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C64000
|
unkown
|
page readonly
|
|
|
|
7FF590DCA000
|
unkown
|
page readonly
|
|
|
|
7FF5B2B28000
|
unkown
|
page readonly
|
|
|
|
B4004FA000
|
unkown
|
page read and write
|
|
|
|
1DB48075000
|
unkown
|
page read and write
|
|
|
|
7FF5E511E000
|
unkown
|
page readonly
|
|
|
|
A3BA17B000
|
unkown
|
page read and write
|
|
|
|
2EA6000
|
unkown
|
page readonly
|
|
|
|
7FF5CBBC0000
|
unkown
|
page readonly
|
|
|
|
7FF5D61D7000
|
unkown
|
page readonly
|
|
|
|
7FF590E1A000
|
unkown
|
page readonly
|
|
|
|
7FF4F7B8F000
|
unkown
|
page readonly
|
|
|
|
B50000
|
heap default
|
page read and write
|
|
|
|
7FF598BD3000
|
unkown
|
page readonly
|
|
|
|
1DB4806F000
|
unkown
|
page read and write
|
|
|
|
238284E0000
|
heap default
|
page read and write
|
|
|
|
28B79E00000
|
unkown
|
page read and write
|
|
|
|
1100000
|
unkown
|
page read and write
|
|
|
|
1DB48079000
|
unkown
|
page read and write
|
|
|
|
2A4814D0000
|
unkown
|
page readonly
|
|
|
|
C70000
|
unkown
|
page read and write
|
|
|
|
7FF598D5C000
|
unkown
|
page readonly
|
|
|
|
1DB4A1BB000
|
unkown
|
page read and write
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
7FF598C2B000
|
unkown
|
page readonly
|
|
|
|
23828F54000
|
unkown
|
page read and write
|
|
|
|
7FF598D30000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C25000
|
unkown
|
page readonly
|
|
|
|
23828F7C000
|
unkown
|
page read and write
|
|
|
|
CE08675000
|
unkown
|
page read and write
|
|
|
|
23828F21000
|
unkown
|
page read and write
|
|
|
|
7FF5D64D9000
|
unkown
|
page readonly
|
|
|
|
7FF598779000
|
unkown
|
page readonly
|
|
|
|
7FF5D648F000
|
unkown
|
page readonly
|
|
|
|
94A000
|
heap default
|
page read and write
|
|
|
|
2EA6000
|
unkown
|
page readonly
|
|
|
|
28B79E54000
|
unkown
|
page read and write
|
|
|
|
B0E000
|
unkown
|
page read and write
|
|
|
|
2D136B13000
|
unkown
|
page read and write
|
|
|
|
1DB480B8000
|
unkown
|
page read and write
|
|
|
|
7FF5D644A000
|
unkown
|
page readonly
|
|
|
|
A3B9EFE000
|
unkown
|
page read and write
|
|
|
|
23828F55000
|
unkown
|
page read and write
|
|
|
|
B47FAFF000
|
unkown
|
page read and write
|
|
|
|
2D136A6A000
|
unkown
|
page read and write
|
|
|
|
7FF5E56B9000
|
unkown
|
page readonly
|
|
|
|
23828F3B000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
920000
|
unkown
|
page read and write
|
|
|
|
23828F67000
|
unkown
|
page read and write
|
|
|
|
2EA2000
|
unkown
|
page readonly
|
|
|
|
F90000
|
unkown
|
page read and write
|
|
|
|
7FF5986EC000
|
unkown
|
page readonly
|
|
|
|
AB99F7E000
|
unkown
|
page read and write
|
|
|
|
1A391A40000
|
unkown
|
page readonly
|
|
|
|
1DB4B010000
|
unkown
|
page read and write
|
|
|
|
7FF5CBBEC000
|
unkown
|
page readonly
|
|
|
|
969000
|
unkown
|
page read and write
|
|
|
|
7FF4F7B8A000
|
unkown
|
page readonly
|
|
|
|
2F04000
|
unkown
|
page readonly
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
7FF4F7F1E000
|
unkown
|
page readonly
|
|
|
|
7FF598C94000
|
unkown
|
page readonly
|
|
|
|
7FF5E55A4000
|
unkown
|
page readonly
|
|
|
|
7FF5CBBBA000
|
unkown
|
page readonly
|
|
|
|
23828716000
|
unkown
|
page read and write
|
|
|
|
7FF5D5CD6000
|
unkown
|
page readonly
|
|
|
|
963000
|
heap default
|
page read and write
|
|
|
|
ED414FF000
|
unkown
|
page read and write
|
|
|
|
1A391876000
|
unkown
|
page read and write
|
|
|
|
1DB4A114000
|
unkown
|
page read and write
|
|
|
|
7FF5982C0000
|
unkown
|
page readonly
|
|
|
|
2D136B00000
|
unkown
|
page read and write
|
|
|
|
28B79F13000
|
unkown
|
page read and write
|
|
|
|
23828F53000
|
unkown
|
page read and write
|
|
|
|
74F000
|
unkown
|
page read and write
|
|
|
|
7FF590DE7000
|
unkown
|
page readonly
|
|
|
|
7FF5D64DD000
|
unkown
|
page readonly
|
|
|
|
7FF598776000
|
unkown
|
page readonly
|
|
|
|
C81000
|
unkown
|
page read and write
|
|
|
|
23828F3A000
|
unkown
|
page read and write
|
|
|
|
23828F44000
|
unkown
|
page read and write
|
|
|
|
23828FA4000
|
unkown
|
page read and write
|
|
|
|
1DB4A212000
|
unkown
|
page read and write
|
|
|
|
1DB49F70000
|
unkown
|
page read and write
|
|
|
|
17F30A68000
|
unkown
|
page read and write
|
|
|
|
940000
|
heap default
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
23828F9E000
|
unkown
|
page read and write
|
|
|
|
28B79E3C000
|
unkown
|
page read and write
|
|
|
|
1A391885000
|
unkown
|
page read and write
|
|
|
|
23828FA5000
|
unkown
|
page read and write
|
|
|
|
1DB4B110000
|
unkown
|
page read and write
|
|
|
|
7FF52CC9A000
|
unkown
|
page readonly
|
|
|
|
B47FC79000
|
unkown
|
page read and write
|
|
|
|
971000
|
unkown
|
page read and write
|
|
|
|
2F18000
|
unkown
|
page readonly
|
|
|
|
2E23000
|
unkown
|
page readonly
|
|
|
|
7FF5B2D0A000
|
unkown
|
page readonly
|
|
|
|
B47FBFE000
|
unkown
|
page read and write
|
|
|
|
2E7D000
|
unkown
|
page readonly
|
|
|
|
1DB4806A000
|
unkown
|
page read and write
|
|
|
|
23828F3D000
|
unkown
|
page read and write
|
|
|
|
23828D00000
|
unkown
|
page read and write
|
|
|
|
23828F00000
|
unkown
|
page read and write
|
|
|
|
23828F57000
|
unkown
|
page read and write
|
|
|
|
2D136A6C000
|
unkown
|
page read and write
|
|
|
|
7FF5988F0000
|
unkown
|
page readonly
|
|
|
|
238286F9000
|
unkown
|
page read and write
|
|
|
|
1A39188F000
|
unkown
|
page read and write
|
|
|
|
1E9AC066000
|
unkown
|
page read and write
|
|
|
|
23828F71000
|
unkown
|
page read and write
|
|
|
|
28B79D80000
|
unkown
|
page readonly
|
|
|
|
1DB4A17C000
|
unkown
|
page read and write
|
|
|
|
7FF590BF1000
|
unkown
|
page readonly
|
|
|
|
7FF5E5548000
|
unkown
|
page readonly
|
|
|
|
1DB49F10000
|
heap private
|
page read and write
|
|
|
|
1DB4808A000
|
unkown
|
page read and write
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
1DB48072000
|
unkown
|
page read and write
|
|
|
|
7FF5D63C4000
|
unkown
|
page readonly
|
|
|
|
23828F63000
|
unkown
|
page read and write
|
|
|
|
23828F66000
|
unkown
|
page read and write
|
|
|
|
7FF4F7FA4000
|
unkown
|
page readonly
|
|
|
|
7FF5E55E2000
|
unkown
|
page readonly
|
|
|
|
2F18000
|
unkown
|
page readonly
|
|
|
|
238286C6000
|
unkown
|
page read and write
|
|
|
|
23829402000
|
unkown
|
page read and write
|
|
|
|
2E5C000
|
unkown
|
page readonly
|
|
|
|
DFF000
|
unkown
|
page read and write
|
|
|
|
2E7D000
|
unkown
|
page readonly
|
|
|
|
7FF5E558D000
|
unkown
|
page readonly
|
|
|
|
1DB49F50000
|
unkown
|
page readonly
|
|
|
|
7FF590C21000
|
unkown
|
page readonly
|
|
|
|
6050000
|
unkown
|
page readonly
|
|
|
|
2B91000
|
unkown
|
page readonly
|
|
|
|
1DB4A103000
|
unkown
|
page read and write
|
|
|
|
1DB484D0000
|
unkown
|
page readonly
|
|
|
|
2E8F000
|
unkown
|
page readonly
|
|
|
|
2D136C00000
|
unkown
|
page readonly
|
|
|
|
23828FA2000
|
unkown
|
page read and write
|
|
|
|
C78000
|
unkown
|
page read and write
|
|
|
|
23828F58000
|
unkown
|
page read and write
|
|
|
|
23828F4F000
|
unkown
|
page read and write
|
|
|
|
EF0000
|
unkown
|
page readonly
|
|
|
|
23828F48000
|
unkown
|
page read and write
|
|
|
|
C50000
|
unkown
|
page readonly
|
|
|
|
7FF52CC7C000
|
unkown
|
page readonly
|
|
|
|
ED4127B000
|
unkown
|
page read and write
|
|
|
|
1DB4A115000
|
unkown
|
page read and write
|
|
|
|
23828F6A000
|
unkown
|
page read and write
|
|
|
|
23828F6B000
|
unkown
|
page read and write
|
|
|
|
7FF4F7DA1000
|
unkown
|
page readonly
|
|
|
|
3C52D7C000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC39000
|
unkown
|
page readonly
|
|
|
|
1A39186B000
|
heap default
|
page read and write
|
|
|
|
113E000
|
unkown
|
page read and write
|
|
|
|
7FF5E5257000
|
unkown
|
page readonly
|
|
|
|
7FF598C2E000
|
unkown
|
page readonly
|
|
|
|
23828F54000
|
unkown
|
page read and write
|
|
|
|
23828F4C000
|
unkown
|
page read and write
|
|
|
|
2382863C000
|
unkown
|
page read and write
|
|
|
|
C92000
|
unkown
|
page read and write
|
|
|
|
7FF52CC7F000
|
unkown
|
page readonly
|
|
|
|
238286E9000
|
unkown
|
page read and write
|
|
|
|
7FF5CBA19000
|
unkown
|
page readonly
|
|
|
|
1E9ABF80000
|
heap default
|
page read and write
|
|
|
|
48812FC000
|
unkown
|
page read and write
|
|
|
|
78E0000
|
unkown
|
page read and write
|
|
|
|
23828FA5000
|
unkown
|
page read and write
|
|
|
|
7FF5CBC36000
|
unkown
|
page readonly
|
|
|
|
17F30A6D000
|
unkown
|
page read and write
|
|
|
|
A3BA2F7000
|
unkown
|
page read and write
|
|
|
|
B95000
|
unkown
|
page read and write
|
|
|
|
7FF5CB897000
|
unkown
|
page readonly
|
|
|
|
91D8DFE000
|
unkown
|
page read and write
|
|
|
|
7FF598D5F000
|
unkown
|
page readonly
|
|
|
|
7FF5982D5000
|
unkown
|
page readonly
|
|
|
|
1DB4A2C9000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D12000
|
unkown
|
page readonly
|
|
|
|
7FF5B2C4C000
|
unkown
|
page readonly
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
1DB4A232000
|
unkown
|
page read and write
|
|
|
|
7FF5E5474000
|
unkown
|
page readonly
|
|
|
|
2FDE87E000
|
unkown
|
page read and write
|
|
|
|
23828F8A000
|
unkown
|
page read and write
|
|
|
|
1DB4A2C7000
|
unkown
|
page read and write
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
9AB000
|
unkown
|
page read and write
|
|
|
|
7FF4F7E83000
|
unkown
|
page readonly
|
|
|
|
B4001FB000
|
unkown
|
page read and write
|
|
|
|
7FF598700000
|
unkown
|
page readonly
|
|
|
|
23828F83000
|
unkown
|
page read and write
|
|
|
|
238286A6000
|
unkown
|
page read and write
|
|
|
|
7FF5D6460000
|
unkown
|
page readonly
|
|
|
|
7FF5CBB60000
|
unkown
|
page readonly
|
|
|
|
2E7F000
|
unkown
|
page readonly
|
|
|
|
21E18DD0000
|
unkown
|
page readonly
|
|
|
|
2D1368E0000
|
unkown
|
page write copy
|
|
|
|
1DB49A90000
|
unkown
|
page read and write
|
|
|
|
2E7F000
|
unkown
|
page readonly
|
|
|
|
23828F2F000
|
unkown
|
page read and write
|
|
|
|
1E9AC061000
|
unkown
|
page read and write
|
|
|
|
7FF5D6303000
|
unkown
|
page readonly
|
|
|
|
1DB480A3000
|
unkown
|
page read and write
|
|
|
|
7FF590CB1000
|
unkown
|
page readonly
|
|
|
|
2E4C000
|
unkown
|
page readonly
|
|
|
|
7FF5D64CE000
|
unkown
|
page readonly
|
|
|
|
2E69000
|
unkown
|
page readonly
|
|
|
|
23828F42000
|
unkown
|
page read and write
|
|
|
|
2E75000
|
unkown
|
page readonly
|
|
|
|
B4A000
|
heap private
|
page read and write
|
|
|
|
23828F61000
|
unkown
|
page read and write
|
|
|
|
7FF5CBBBE000
|
unkown
|
page readonly
|
|
|
|
1DB4B013000
|
unkown
|
page read and write
|
|
|
|
2A481247000
|
unkown
|
page read and write
|
|
|
|
7FF598D1C000
|
unkown
|
page readonly
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
17F30A6F000
|
unkown
|
page read and write
|
|
|
|
1E9AC089000
|
unkown
|
page read and write
|
|
|
|
7FF52CCA4000
|
unkown
|
page readonly
|
|
|
|
7FF5D635B000
|
unkown
|
page readonly
|
|
|
|
1DB49F70000
|
unkown
|
page read and write
|
|
|
|
2E23000
|
unkown
|
page readonly
|
|
|
|
1E9AC2D0000
|
unkown
|
page readonly
|
|
|
|
23828F60000
|
unkown
|
page read and write
|
|
|
|
23828656000
|
unkown
|
page read and write
|
|
|
|
96C000
|
unkown
|
page read and write
|
|
|
|
2F18000
|
unkown
|
page readonly
|
|
|
|
23828F57000
|
unkown
|
page read and write
|
|
|
|
7FF5E54EA000
|
unkown
|
page readonly
|
|
|
|
2E7D000
|
unkown
|
page readonly
|
|
|
|
7FF5CBBD7000
|
unkown
|
page readonly
|
|
|
|
23828F49000
|
unkown
|
page read and write
|
|
|
|
7FF5D648C000
|
unkown
|
page readonly
|
|
|
|
B40017B000
|
unkown
|
page read and write
|
|
|
|
2A481F40000
|
unkown
|
page readonly
|
|
|
|
2E45000
|
unkown
|
page readonly
|
|
|
|
AB99AFE000
|
unkown
|
page read and write
|
|
|
|
7FF5E51B2000
|
unkown
|
page readonly
|
|
|
|
1DB4B010000
|
unkown
|
page read and write
|
|
|
|
7FF5B2D04000
|
unkown
|
page readonly
|
|
|
|
1E9AC102000
|
unkown
|
page read and write
|
|
|
|
10F0000
|
unkown
|
page readonly
|
|
|
|
23828F78000
|
unkown
|
page read and write
|
|
|
|
21E18E00000
|
unkown
|
page read and write
|
|
|
|
2E8A000
|
unkown
|
page readonly
|
|
|
|
7FF590CCB000
|
unkown
|
page readonly
|
|
|
|
23828F55000
|
unkown
|
page read and write
|
|
|
|
C92000
|
unkown
|
page read and write
|
|
|
|
1DB4A502000
|
unkown
|
page read and write
|
|
|
|
1130000
|
unkown
|
page read and write
|
|
|
|
7FF5E5215000
|
unkown
|
page readonly
|
|
|
|
B40027A000
|
unkown
|
page read and write
|
|
|
|
7FF5D63CC000
|
unkown
|
page readonly
|
|
|
|
2D136A6C000
|
unkown
|
page read and write
|
|
|
|
2D136A29000
|
unkown
|
page read and write
|
|
|
|
1DB4A1C3000
|
unkown
|
page read and write
|
|
|
|
1A391A35000
|
heap private
|
page read and write
|
|
|
|
7FF4F7EBA000
|
unkown
|
page readonly
|
|
|
|
23828E02000
|
unkown
|
page read and write
|
|
|
|
7FF52CCCD000
|
unkown
|
page readonly
|
|
|
|
3C521DB000
|
unkown
|
page read and write
|
|
|
|
1DB4A343000
|
unkown
|
page read and write
|
|
|
|
23828D00000
|
unkown
|
page read and write
|
|
|
|
ED413F9000
|
unkown
|
page read and write
|
|
|
|
91D90F9000
|
unkown
|
page read and write
|
|
|
|
21E18E3F000
|
unkown
|
page read and write
|
|
|
|
28B79E66000
|
unkown
|
page read and write
|
|
|
|
21E18F13000
|
unkown
|
page read and write
|
|
|
|
7FF5E5640000
|
unkown
|
page readonly
|
|
|
|
1DB4A19B000
|
unkown
|
page read and write
|
|
|
|
1DB49FA0000
|
unkown
|
page read and write
|
|
|
|
17F30A68000
|
unkown
|
page read and write
|
|
|
|
E20000
|
unkown
|
page readonly
|
|
|
|
7FF5E56B6000
|
unkown
|
page readonly
|
|
|
|
1DB48080000
|
unkown
|
page read and write
|
|
|
|
2E53000
|
unkown
|
page readonly
|
|
|
|
466E000
|
unkown
|
page read and write
|
|
|
|
7FF59864D000
|
unkown
|
page readonly
|
|
|
|
488127E000
|
unkown
|
page read and write
|
|
|
|
2E53000
|
unkown
|
page readonly
|
|
|
|
23828F55000
|
unkown
|
page read and write
|
|
|
|
91D8D7F000
|
unkown
|
page read and write
|
|
|
|
23828F58000
|
unkown
|
page read and write
|
|
|
|
1DB48102000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page readonly
|
|
|
|
23828FAB000
|
unkown
|
page read and write
|
|
|
|
7FF597F76000
|
unkown
|
page readonly
|
|
|
|
2D136A6A000
|
unkown
|
page read and write
|
|
|
|
7FF5E5481000
|
unkown
|
page readonly
|
|
|
|
23828F49000
|
unkown
|
page read and write
|
|
|
|
23828F3F000
|
unkown
|
page read and write
|
|
|
|
1E9AC802000
|
unkown
|
page read and write
|
|
|
|
2D50000
|
unkown
|
page readonly
|
|
|
|
1DB4A103000
|
unkown
|
page read and write
|
|
|
|
2E91000
|
unkown
|
page readonly
|
|
|
|
1DB49B90000
|
unkown
|
page readonly
|
|
|
|
7FF52CCC9000
|
unkown
|
page readonly
|
|
|
|
23828F52000
|
unkown
|
page read and write
|
|
|
|
1DB48029000
|
unkown
|
page read and write
|
|
|
|
1030000
|
heap private
|
page read and write
|
|
|
|
7FF590DBA000
|
unkown
|
page readonly
|
|
|
|
7FF598768000
|
unkown
|
page readonly
|
|
|
|
7FF598D7A000
|
unkown
|
page readonly
|
|
|
|
1E9AC013000
|
unkown
|
page read and write
|
|
|
|
238286B0000
|
unkown
|
page read and write
|
|
|
|
2EA2000
|
unkown
|
page readonly
|
|
|
|
7FF5E566C000
|
unkown
|
page readonly
|
|
|
|
28B79E61000
|
unkown
|
page read and write
|
|
|
|
17F30A6B000
|
unkown
|
page read and write
|
|
|
|
2E77000
|
unkown
|
page readonly
|
|
|
|
2D136A6E000
|
unkown
|
page read and write
|
|
|
|
23828F38000
|
unkown
|
page read and write
|
|
|
|
238285C0000
|
unkown
|
page readonly
|
|
|
|
23828F49000
|
unkown
|
page read and write
|
|
|
|
7FF598AA7000
|
unkown
|
page readonly
|
|
|
|
7FF598D9E000
|
unkown
|
page readonly
|
|
|
|
7FF598D1A000
|
unkown
|
page readonly
|
|
|
|
21E18E13000
|
unkown
|
page read and write
|
|
There are 1284 hidden memdumps, click here to show them.