Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
DEBT_2026004977_03182021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$DEBT_2026004977_03182021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\73D3952B-3B15-4407-BAAE-6A7E44917CA3
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\92F501C0.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 1386x1386,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\47A40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\DEBT_2026004977_03182021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:50
2020, mtime=Mon Jun 28 14:51:41 2021, atime=Mon Jun 28 14:51:41 2021, length=188563, window=hide
|
modified
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Mon Jun 28 14:51:41 2021, atime=Mon Jun 28 14:51:41 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\D7A40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\7A4B8C50.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 1386x1386,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\1ACE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\DACE0000
|
data
|
dropped
|
|
There are 3 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
Rundll32 ..\Kiod.hod,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
Rundll32 ..\Kiod.hod1,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
Rundll32 ..\Kiod.hod2,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
Rundll32 ..\Kiod.hod,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
Rundll32 ..\Kiod.hod1,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
Rundll32 ..\Kiod.hod2,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://185.82.219.219/44375.7442364583.dat
|
185.82.219.219
|
|
|
|
http://185.82.219.219/44375.7393215278.dat
|
185.82.219.219
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 99 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
45.140.146.180
|
unknown
|
United Kingdom
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
|
|
188.127.231.55
|
unknown
|
Russian Federation
|
|
|
|
185.82.219.219
|
unknown
|
Bulgaria
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
d8>
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
e8>
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
49EDD
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A4E8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A6AD
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A778
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4A814
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
qh>
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
2~4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC5CF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC8BC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC9B5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECA80
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECB1C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
y'4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
108E7A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
10906D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
There are 157 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7FF57513D000
|
unkown
|
page readonly
|
|
|
|
1D7637CA000
|
unkown
|
page read and write
|
|
|
|
7FF53828A000
|
unkown
|
page readonly
|
|
|
|
1D763726000
|
unkown
|
page read and write
|
|
|
|
7FF543A23000
|
unkown
|
page readonly
|
|
|
|
7FF543896000
|
unkown
|
page readonly
|
|
|
|
AB8C0FE000
|
unkown
|
page read and write
|
|
|
|
7FF5757E3000
|
unkown
|
page readonly
|
|
|
|
7FF543850000
|
unkown
|
page readonly
|
|
|
|
17E72320000
|
unkown
|
page readonly
|
|
|
|
1E9AA100000
|
unkown
|
page read and write
|
|
|
|
7FF58A15C000
|
unkown
|
page readonly
|
|
|
|
2A8E000
|
unkown
|
page read and write
|
|
|
|
2AE0000
|
unkown
|
page read and write
|
|
|
|
7FF4EE3B8000
|
unkown
|
page readonly
|
|
|
|
216E9D47000
|
unkown
|
page read and write
|
|
|
|
216E94C7000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBC4000
|
unkown
|
page readonly
|
|
|
|
2574000
|
unkown
|
page readonly
|
|
|
|
28F2000
|
unkown
|
page readonly
|
|
|
|
7FF537E75000
|
unkown
|
page readonly
|
|
|
|
216E9400000
|
unkown
|
page read and write
|
|
|
|
1FA1000
|
unkown
|
page readonly
|
|
|
|
7FF58A1CE000
|
unkown
|
page readonly
|
|
|
|
2E408FF000
|
unkown
|
page read and write
|
|
|
|
2AD2000
|
unkown
|
page readonly
|
|
|
|
7FF58A0B6000
|
unkown
|
page readonly
|
|
|
|
1B16ED02000
|
unkown
|
page read and write
|
|
|
|
7FF5382F4000
|
unkown
|
page readonly
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
5C70000
|
unkown
|
page readonly
|
|
|
|
7FF537F7A000
|
unkown
|
page readonly
|
|
|
|
7DB907E000
|
unkown
|
page read and write
|
|
|
|
7FF5756A6000
|
unkown
|
page readonly
|
|
|
|
286BF7F000
|
unkown
|
page read and write
|
|
|
|
10C5AE50000
|
unkown
|
page readonly
|
|
|
|
1D7637CA000
|
unkown
|
page read and write
|
|
|
|
3474000
|
unkown
|
page read and write
|
|
|
|
7AFAFE000
|
unkown
|
page read and write
|
|
|
|
7FF538017000
|
unkown
|
page readonly
|
|
|
|
2855000
|
unkown
|
page readonly
|
|
|
|
216E9DD6000
|
unkown
|
page read and write
|
|
|
|
7FF5438D0000
|
unkown
|
page readonly
|
|
|
|
2857000
|
unkown
|
page readonly
|
|
|
|
3060000
|
heap default
|
page read and write
|
|
|
|
7FF589E3A000
|
unkown
|
page readonly
|
|
|
|
2950000
|
heap default
|
page read and write
|
|
|
|
7FF58A16A000
|
unkown
|
page readonly
|
|
|
|
2E3B000
|
unkown
|
page read and write
|
|
|
|
7FF58A14F000
|
unkown
|
page readonly
|
|
|
|
3469000
|
unkown
|
page read and write
|
|
|
|
216E9D23000
|
unkown
|
page read and write
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
216E9DD6000
|
unkown
|
page read and write
|
|
|
|
7FF543ABA000
|
unkown
|
page readonly
|
|
|
|
7FF4EDBB1000
|
unkown
|
page readonly
|
|
|
|
A7B4C7F000
|
unkown
|
page read and write
|
|
|
|
1E9AA085000
|
unkown
|
page read and write
|
|
|
|
7FF5382CF000
|
unkown
|
page readonly
|
|
|
|
3465000
|
unkown
|
page read and write
|
|
|
|
216E9D65000
|
unkown
|
page read and write
|
|
|
|
216E9600000
|
unkown
|
page readonly
|
|
|
|
7FF5755AF000
|
unkown
|
page readonly
|
|
|
|
28E4000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B5C000
|
unkown
|
page readonly
|
|
|
|
7FF589E2C000
|
unkown
|
page readonly
|
|
|
|
7FF5D349A000
|
unkown
|
page readonly
|
|
|
|
1E9A9FE0000
|
unkown
|
page read and write
|
|
|
|
1D761742000
|
unkown
|
page read and write
|
|
|
|
7FF589E47000
|
unkown
|
page readonly
|
|
|
|
1D764010000
|
unkown
|
page read and write
|
|
|
|
7FF5755AA000
|
unkown
|
page readonly
|
|
|
|
1D7634C0000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB9F000
|
unkown
|
page readonly
|
|
|
|
7DB92FE000
|
unkown
|
page read and write
|
|
|
|
7FF5439D8000
|
unkown
|
page readonly
|
|
|
|
7FF543BC2000
|
unkown
|
page readonly
|
|
|
|
10C5AC67000
|
unkown
|
page read and write
|
|
|
|
26EE000
|
unkown
|
page readonly
|
|
|
|
1E9AA108000
|
unkown
|
page read and write
|
|
|
|
10C5AE00000
|
unkown
|
page write copy
|
|
|
|
7FF543AE7000
|
unkown
|
page readonly
|
|
|
|
1D76167F000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A6E000
|
unkown
|
page readonly
|
|
|
|
2E3FF4C000
|
unkown
|
page read and write
|
|
|
|
2840000
|
unkown
|
page readonly
|
|
|
|
1D763D02000
|
unkown
|
page read and write
|
|
|
|
216E9B30000
|
unkown
|
page write copy
|
|
|
|
7FF5C8B9F000
|
unkown
|
page readonly
|
|
|
|
10C5AD13000
|
unkown
|
page read and write
|
|
|
|
7DB91FE000
|
unkown
|
page read and write
|
|
|
|
7FF4EE367000
|
unkown
|
page readonly
|
|
|
|
1D76377B000
|
unkown
|
page read and write
|
|
|
|
10C5AC3F000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C5A000
|
unkown
|
page readonly
|
|
|
|
277ADCA0000
|
unkown
|
page readonly
|
|
|
|
7FF4EE43A000
|
unkown
|
page readonly
|
|
|
|
2910000
|
unkown
|
page read and write
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
277ADD01000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BBA000
|
unkown
|
page readonly
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7FF589F95000
|
unkown
|
page readonly
|
|
|
|
216E9BA0000
|
unkown
|
page read and write
|
|
|
|
216E9D51000
|
unkown
|
page read and write
|
|
|
|
7FF5D342D000
|
unkown
|
page readonly
|
|
|
|
1D7637D2000
|
unkown
|
page read and write
|
|
|
|
2E4067F000
|
unkown
|
page read and write
|
|
|
|
AB8BDDE000
|
unkown
|
page read and write
|
|
|
|
10C5AAF0000
|
heap default
|
page read and write
|
|
|
|
822207B000
|
unkown
|
page read and write
|
|
|
|
2BD0000
|
unkown
|
page readonly
|
|
|
|
3461000
|
unkown
|
page read and write
|
|
|
|
7FF58A1D8000
|
unkown
|
page readonly
|
|
|
|
2803000
|
unkown
|
page readonly
|
|
|
|
1851B88E000
|
unkown
|
page read and write
|
|
|
|
2A99000
|
unkown
|
page readonly
|
|
|
|
1D763815000
|
unkown
|
page read and write
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
2987000
|
unkown
|
page read and write
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
1D763A00000
|
unkown
|
page readonly
|
|
|
|
1851BE60000
|
unkown
|
page readonly
|
|
|
|
7FF543427000
|
unkown
|
page readonly
|
|
|
|
3370000
|
unkown
|
page readonly
|
|
|
|
2AD0000
|
unkown
|
page read and write
|
|
|
|
216E9D28000
|
unkown
|
page read and write
|
|
|
|
216E9D33000
|
unkown
|
page read and write
|
|
|
|
2849000
|
unkown
|
page readonly
|
|
|
|
28F8000
|
unkown
|
page readonly
|
|
|
|
10C5AC52000
|
unkown
|
page read and write
|
|
|
|
1E9AA002000
|
unkown
|
page read and write
|
|
|
|
1D763070000
|
unkown
|
page read and write
|
|
|
|
1D7637ED000
|
unkown
|
page read and write
|
|
|
|
7FF5381F3000
|
unkown
|
page readonly
|
|
|
|
7FF575956000
|
unkown
|
page readonly
|
|
|
|
1D76166D000
|
unkown
|
page read and write
|
|
|
|
2E70000
|
unkown
|
page read and write
|
|
|
|
1D763982000
|
unkown
|
page read and write
|
|
|
|
1D7637EE000
|
unkown
|
page read and write
|
|
|
|
2322000
|
unkown
|
page readonly
|
|
|
|
2B53000
|
unkown
|
page readonly
|
|
|
|
1E9AA113000
|
unkown
|
page read and write
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
7FF58A13F000
|
unkown
|
page readonly
|
|
|
|
286C17B000
|
unkown
|
page read and write
|
|
|
|
216EA202000
|
unkown
|
page read and write
|
|
|
|
7FF543847000
|
unkown
|
page readonly
|
|
|
|
1851C200000
|
unkown
|
page readonly
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
3387000
|
heap private
|
page read and write
|
|
|
|
2AA7000
|
unkown
|
page readonly
|
|
|
|
7FF4EE355000
|
unkown
|
page readonly
|
|
|
|
216E9BA0000
|
unkown
|
page readonly
|
|
|
|
7FF53831D000
|
unkown
|
page readonly
|
|
|
|
216EA202000
|
unkown
|
page read and write
|
|
|
|
2E4087C000
|
unkown
|
page read and write
|
|
|
|
2975000
|
unkown
|
page read and write
|
|
|
|
216E9D39000
|
unkown
|
page read and write
|
|
|
|
82215FB000
|
unkown
|
page read and write
|
|
|
|
7FF575948000
|
unkown
|
page readonly
|
|
|
|
7FF5C8745000
|
unkown
|
page readonly
|
|
|
|
216EA23C000
|
unkown
|
page read and write
|
|
|
|
216EA302000
|
unkown
|
page read and write
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7FF543904000
|
unkown
|
page readonly
|
|
|
|
1D7637CD000
|
unkown
|
page read and write
|
|
|
|
216EA300000
|
unkown
|
page read and write
|
|
|
|
22AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D3418000
|
unkown
|
page readonly
|
|
|
|
7FF575141000
|
unkown
|
page readonly
|
|
|
|
7FF58A1BA000
|
unkown
|
page readonly
|
|
|
|
293E000
|
unkown
|
page readonly
|
|
|
|
1D763D00000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B6E000
|
unkown
|
page readonly
|
|
|
|
822187E000
|
unkown
|
page read and write
|
|
|
|
1D764210000
|
unkown
|
page read and write
|
|
|
|
308D000
|
unkown
|
page read and write
|
|
|
|
3380000
|
heap private
|
page read and write
|
|
|
|
286F000
|
unkown
|
page readonly
|
|
|
|
7FF5435AE000
|
unkown
|
page readonly
|
|
|
|
4860000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBCE000
|
unkown
|
page readonly
|
|
|
|
1D764013000
|
unkown
|
page read and write
|
|
|
|
2F1A000
|
unkown
|
page read and write
|
|
|
|
7FF58A19C000
|
unkown
|
page readonly
|
|
|
|
7FF543AD0000
|
unkown
|
page readonly
|
|
|
|
216E944D000
|
unkown
|
page read and write
|
|
|
|
7AF78B000
|
unkown
|
page read and write
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7AFBF9000
|
unkown
|
page read and write
|
|
|
|
7FF5D3352000
|
unkown
|
page readonly
|
|
|
|
1E9AA027000
|
unkown
|
page read and write
|
|
|
|
216E9D4F000
|
unkown
|
page read and write
|
|
|
|
308E000
|
unkown
|
page read and write
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
2979000
|
unkown
|
page read and write
|
|
|
|
82220FB000
|
unkown
|
page read and write
|
|
|
|
3440000
|
heap default
|
page read and write
|
|
|
|
277ADB70000
|
unkown
|
page readonly
|
|
|
|
286C57F000
|
unkown
|
page read and write
|
|
|
|
1D761590000
|
unkown
|
page readonly
|
|
|
|
7FF5758DE000
|
unkown
|
page readonly
|
|
|
|
216EA28E000
|
unkown
|
page read and write
|
|
|
|
1D761752000
|
unkown
|
page read and write
|
|
|
|
2B00000
|
unkown
|
page readonly
|
|
|
|
2984000
|
unkown
|
page read and write
|
|
|
|
1E9AA029000
|
unkown
|
page read and write
|
|
|
|
216E9D6C000
|
unkown
|
page read and write
|
|
|
|
1D76167D000
|
unkown
|
page read and write
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BB4000
|
unkown
|
page readonly
|
|
|
|
10C5AB00000
|
unkown
|
page readonly
|
|
|
|
31C0000
|
unkown
|
page readonly
|
|
|
|
1D7616F7000
|
unkown
|
page read and write
|
|
|
|
7FF4EE3BE000
|
unkown
|
page readonly
|
|
|
|
7FF5382E4000
|
unkown
|
page readonly
|
|
|
|
5C64000
|
heap private
|
page read and write
|
|
|
|
7FF5C8C62000
|
unkown
|
page readonly
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
7FF543BC1000
|
unkown
|
page readonly
|
|
|
|
17E72058000
|
unkown
|
page read and write
|
|
|
|
2932000
|
unkown
|
page readonly
|
|
|
|
22C5000
|
unkown
|
page readonly
|
|
|
|
10C5AD00000
|
unkown
|
page read and write
|
|
|
|
216E96D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D33B0000
|
unkown
|
page readonly
|
|
|
|
2AB3000
|
unkown
|
page readonly
|
|
|
|
2A83000
|
unkown
|
page readonly
|
|
|
|
3085000
|
unkown
|
page read and write
|
|
|
|
216E9D47000
|
unkown
|
page read and write
|
|
|
|
1D7637B9000
|
unkown
|
page read and write
|
|
|
|
216E943C000
|
unkown
|
page read and write
|
|
|
|
297D000
|
unkown
|
page read and write
|
|
|
|
7FF5432D9000
|
unkown
|
page readonly
|
|
|
|
1D763C02000
|
unkown
|
page read and write
|
|
|
|
7FF5899CD000
|
unkown
|
page readonly
|
|
|
|
28D5000
|
unkown
|
page readonly
|
|
|
|
1D7637F3000
|
unkown
|
page read and write
|
|
|
|
10C5AC6D000
|
unkown
|
page read and write
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
|
|
216EA33C000
|
unkown
|
page read and write
|
|
|
|
7FF589FB1000
|
unkown
|
page readonly
|
|
|
|
7FF538392000
|
unkown
|
page readonly
|
|
|
|
2AB0000
|
unkown
|
page readonly
|
|
|
|
216E94E3000
|
unkown
|
page read and write
|
|
|
|
2ADB000
|
unkown
|
page readonly
|
|
|
|
ACC8CFF000
|
unkown
|
page read and write
|
|
|
|
10C5AC6C000
|
unkown
|
page read and write
|
|
|
|
22F7000
|
unkown
|
page readonly
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B7B000
|
unkown
|
page readonly
|
|
|
|
1E9AA200000
|
unkown
|
page readonly
|
|
|
|
1D7616D1000
|
unkown
|
page read and write
|
|
|
|
286C47E000
|
unkown
|
page read and write
|
|
|
|
1851BA00000
|
unkown
|
page readonly
|
|
|
|
1D76387B000
|
unkown
|
page read and write
|
|
|
|
7FF4EE258000
|
unkown
|
page readonly
|
|
|
|
7FF5D3350000
|
unkown
|
page readonly
|
|
|
|
1D764110000
|
unkown
|
page read and write
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
6430000
|
unkown
|
page readonly
|
|
|
|
7FF4EE1A9000
|
unkown
|
page readonly
|
|
|
|
216E9D6A000
|
unkown
|
page read and write
|
|
|
|
1D763550000
|
unkown
|
page readonly
|
|
|
|
7FF5C89C1000
|
unkown
|
page readonly
|
|
|
|
277ADF00000
|
unkown
|
page readonly
|
|
|
|
216E9DB5000
|
unkown
|
page read and write
|
|
|
|
216E9516000
|
unkown
|
page read and write
|
|
|
|
3040000
|
unkown
|
page readonly
|
|
|
|
216E9D82000
|
unkown
|
page read and write
|
|
|
|
7FF4EE01F000
|
unkown
|
page readonly
|
|
|
|
7FF5D3291000
|
unkown
|
page readonly
|
|
|
|
216E9D53000
|
unkown
|
page read and write
|
|
|
|
822197A000
|
unkown
|
page read and write
|
|
|
|
216E9D41000
|
unkown
|
page read and write
|
|
|
|
17E72200000
|
unkown
|
page readonly
|
|
|
|
2E409FB000
|
unkown
|
page read and write
|
|
|
|
2AA5000
|
unkown
|
page readonly
|
|
|
|
10C5AC6E000
|
unkown
|
page read and write
|
|
|
|
7FF4EE253000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A6B000
|
unkown
|
page readonly
|
|
|
|
7FF4EE24B000
|
unkown
|
page readonly
|
|
|
|
7FF4EE39A000
|
unkown
|
page readonly
|
|
|
|
1D764510000
|
unkown
|
page read and write
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
7FF5D34A1000
|
unkown
|
page readonly
|
|
|
|
17E73BC0000
|
unkown
|
page readonly
|
|
|
|
7FF589FA6000
|
unkown
|
page readonly
|
|
|
|
7FF538143000
|
unkown
|
page readonly
|
|
|
|
1D764410000
|
unkown
|
page read and write
|
|
|
|
7FF58A1C4000
|
unkown
|
page readonly
|
|
|
|
22E0000
|
unkown
|
page readonly
|
|
|
|
7DB90FE000
|
unkown
|
page read and write
|
|
|
|
7FF543B38000
|
unkown
|
page readonly
|
|
|
|
7FF543ADB000
|
unkown
|
page readonly
|
|
|
|
216E9D33000
|
unkown
|
page read and write
|
|
|
|
7FF543ACA000
|
unkown
|
page readonly
|
|
|
|
216E9DC0000
|
unkown
|
page read and write
|
|
|
|
2E4027E000
|
unkown
|
page read and write
|
|
|
|
2730000
|
unkown
|
page readonly
|
|
|
|
2398000
|
unkown
|
page readonly
|
|
|
|
2979000
|
unkown
|
page read and write
|
|
|
|
286C075000
|
unkown
|
page read and write
|
|
|
|
7FF4EE37C000
|
unkown
|
page readonly
|
|
|
|
1851B851000
|
unkown
|
page read and write
|
|
|
|
216E947B000
|
unkown
|
page read and write
|
|
|
|
7FF5380F1000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7FF4FFB7B000
|
unkown
|
page readonly
|
|
|
|
7FF4FFBED000
|
unkown
|
page readonly
|
|
|
|
7FF543911000
|
unkown
|
page readonly
|
|
|
|
1B16EA00000
|
heap private
|
page read and write
|
|
|
|
297D000
|
unkown
|
page read and write
|
|
|
|
216E93B0000
|
unkown
|
page read and write
|
|
|
|
2AC7000
|
heap private
|
page read and write
|
|
|
|
3350000
|
unkown
|
page read and write
|
|
|
|
7FF58A112000
|
unkown
|
page readonly
|
|
|
|
1E9AA102000
|
unkown
|
page read and write
|
|
|
|
2ABA000
|
unkown
|
page readonly
|
|
|
|
7FF543ACE000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC62000
|
unkown
|
page readonly
|
|
|
|
10C5AC02000
|
unkown
|
page read and write
|
|
|
|
3250000
|
heap default
|
page read and write
|
|
|
|
1D763602000
|
unkown
|
page read and write
|
|
|
|
216E9D49000
|
unkown
|
page read and write
|
|
|
|
17E7203F000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBBA000
|
unkown
|
page readonly
|
|
|
|
10C5AD02000
|
unkown
|
page read and write
|
|
|
|
7FF5382B7000
|
unkown
|
page readonly
|
|
|
|
7FF543696000
|
unkown
|
page readonly
|
|
|
|
216E9DB5000
|
unkown
|
page read and write
|
|
|
|
216EA200000
|
unkown
|
page read and write
|
|
|
|
216E9D64000
|
unkown
|
page read and write
|
|
|
|
2375000
|
unkown
|
page readonly
|
|
|
|
10C5AC70000
|
unkown
|
page read and write
|
|
|
|
7FF589FA4000
|
unkown
|
page readonly
|
|
|
|
216E9D74000
|
unkown
|
page read and write
|
|
|
|
32F0000
|
heap private
|
page read and write
|
|
|
|
23A3000
|
unkown
|
page readonly
|
|
|
|
1D763734000
|
unkown
|
page read and write
|
|
|
|
7FF543921000
|
unkown
|
page readonly
|
|
|
|
7FF4EE2F2000
|
unkown
|
page readonly
|
|
|
|
7FF5D3404000
|
unkown
|
page readonly
|
|
|
|
822217A000
|
unkown
|
page read and write
|
|
|
|
7FF543A9F000
|
unkown
|
page readonly
|
|
|
|
277ADCF0000
|
heap default
|
page read and write
|
|
|
|
7FF5C8ADC000
|
unkown
|
page readonly
|
|
|
|
3540000
|
unkown
|
page readonly
|
|
|
|
17E72002000
|
unkown
|
page read and write
|
|
|
|
1E9A9E20000
|
unkown
|
page readonly
|
|
|
|
7FF538181000
|
unkown
|
page readonly
|
|
|
|
7FF53828C000
|
unkown
|
page readonly
|
|
|
|
1851B800000
|
unkown
|
page read and write
|
|
|
|
A7B48F5000
|
unkown
|
page read and write
|
|
|
|
286BE7B000
|
unkown
|
page read and write
|
|
|
|
7FF5D2C0D000
|
unkown
|
page readonly
|
|
|
|
17E722D0000
|
unkown
|
page write copy
|
|
|
|
286A000
|
unkown
|
page readonly
|
|
|
|
216E9D4D000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC61000
|
unkown
|
page readonly
|
|
|
|
2980000
|
unkown
|
page readonly
|
|
|
|
7FF54363E000
|
unkown
|
page readonly
|
|
|
|
62A0000
|
unkown
|
page read and write
|
|
|
|
1B16EC02000
|
unkown
|
page read and write
|
|
|
|
1D7637CD000
|
unkown
|
page read and write
|
|
|
|
7FF5759D1000
|
unkown
|
page readonly
|
|
|
|
216E9D4F000
|
unkown
|
page read and write
|
|
|
|
7FF5D3426000
|
unkown
|
page readonly
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBDE000
|
unkown
|
page readonly
|
|
|
|
31B0000
|
unkown
|
page readonly
|
|
|
|
7FF58A19F000
|
unkown
|
page readonly
|
|
|
|
216E9DC0000
|
unkown
|
page read and write
|
|
|
|
280A000
|
unkown
|
page readonly
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
|
|
1D7617B4000
|
unkown
|
page read and write
|
|
|
|
216E9413000
|
unkown
|
page read and write
|
|
|
|
7FF58A187000
|
unkown
|
page readonly
|
|
|
|
1D761540000
|
unkown
|
page write copy
|
|
|
|
1D7616FE000
|
unkown
|
page read and write
|
|
|
|
3097000
|
unkown
|
page read and write
|
|
|
|
2392000
|
unkown
|
page readonly
|
|
|
|
7FF5C88E7000
|
unkown
|
page readonly
|
|
|
|
7FF53820C000
|
unkown
|
page readonly
|
|
|
|
285D000
|
unkown
|
page readonly
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
1D763982000
|
unkown
|
page read and write
|
|
|
|
216E94A3000
|
unkown
|
page read and write
|
|
|
|
7FF53838A000
|
unkown
|
page readonly
|
|
|
|
1B16EC40000
|
unkown
|
page read and write
|
|
|
|
7FF5D307F000
|
unkown
|
page readonly
|
|
|
|
22DC000
|
unkown
|
page readonly
|
|
|
|
7FF58A0BD000
|
unkown
|
page readonly
|
|
|
|
6340000
|
heap private
|
page read and write
|
|
|
|
216E9D5E000
|
unkown
|
page read and write
|
|
|
|
7FF575918000
|
unkown
|
page readonly
|
|
|
|
1851B890000
|
unkown
|
page read and write
|
|
|
|
AB8BCDB000
|
unkown
|
page read and write
|
|
|
|
1D763794000
|
unkown
|
page read and write
|
|
|
|
2326000
|
unkown
|
page readonly
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7FF4EE01A000
|
unkown
|
page readonly
|
|
|
|
7FF589D49000
|
unkown
|
page readonly
|
|
|
|
10C5AC6C000
|
unkown
|
page read and write
|
|
|
|
7FF4EE34A000
|
unkown
|
page readonly
|
|
|
|
66D0000
|
unkown
|
page read and write
|
|
|
|
341F000
|
unkown
|
page read and write
|
|
|
|
277ADC90000
|
unkown
|
page readonly
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
216E9D51000
|
unkown
|
page read and write
|
|
|
|
7FF5439B1000
|
unkown
|
page readonly
|
|
|
|
5D30000
|
unkown
|
page read and write
|
|
|
|
1D76167A000
|
unkown
|
page read and write
|
|
|
|
7FF589A71000
|
unkown
|
page readonly
|
|
|
|
A7B4A7B000
|
unkown
|
page read and write
|
|
|
|
216E9D9A000
|
unkown
|
page read and write
|
|
|
|
1D7637ED000
|
unkown
|
page read and write
|
|
|
|
1E9AA055000
|
unkown
|
page read and write
|
|
|
|
A7B497E000
|
unkown
|
page read and write
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
|
|
7FF543BB4000
|
unkown
|
page readonly
|
|
|
|
10C5AC6D000
|
unkown
|
page read and write
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
7FF5D33BB000
|
unkown
|
page readonly
|
|
|
|
7FF5D3421000
|
unkown
|
page readonly
|
|
|
|
1D7615D0000
|
unkown
|
page read and write
|
|
|
|
7FF4EE35B000
|
unkown
|
page readonly
|
|
|
|
1D7637A9000
|
unkown
|
page read and write
|
|
|
|
216EA400000
|
unkown
|
page readonly
|
|
|
|
7FF4FFBB4000
|
unkown
|
page readonly
|
|
|
|
7FF5D316B000
|
unkown
|
page readonly
|
|
|
|
7FF5436E7000
|
unkown
|
page readonly
|
|
|
|
2AF0000
|
heap default
|
page read and write
|
|
|
|
7FF5D32AB000
|
unkown
|
page readonly
|
|
|
|
7FF5758A3000
|
unkown
|
page readonly
|
|
|
|
216E94BE000
|
unkown
|
page read and write
|
|
|
|
7FF5C8379000
|
unkown
|
page readonly
|
|
|
|
1D7637ED000
|
unkown
|
page read and write
|
|
|
|
2E40777000
|
unkown
|
page read and write
|
|
|
|
216E93D0000
|
unkown
|
page readonly
|
|
|
|
22FD000
|
unkown
|
page readonly
|
|
|
|
7FF4FFBA8000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB9C000
|
unkown
|
page readonly
|
|
|
|
308D000
|
unkown
|
page read and write
|
|
|
|
1D7616B5000
|
unkown
|
page read and write
|
|
|
|
7FF543AFC000
|
unkown
|
page readonly
|
|
|
|
7FF5C8BDE000
|
unkown
|
page readonly
|
|
|
|
216E94A6000
|
unkown
|
page read and write
|
|
|
|
1D7615E0000
|
unkown
|
page readonly
|
|
|
|
1D7616EE000
|
unkown
|
page read and write
|
|
|
|
ACC8D7A000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBE9000
|
unkown
|
page readonly
|
|
|
|
1D7616C9000
|
unkown
|
page read and write
|
|
|
|
7FF58A15A000
|
unkown
|
page readonly
|
|
|
|
7FF5436E5000
|
unkown
|
page readonly
|
|
|
|
216E9BA0000
|
unkown
|
page read and write
|
|
|
|
1D763170000
|
unkown
|
page readonly
|
|
|
|
346D000
|
unkown
|
page read and write
|
|
|
|
2BCA000
|
unkown
|
page read and write
|
|
|
|
285F000
|
unkown
|
page readonly
|
|
|
|
2B53000
|
unkown
|
page readonly
|
|
|
|
1E9AA070000
|
unkown
|
page read and write
|
|
|
|
17E71F50000
|
heap private
|
page read and write
|
|
|
|
271A000
|
unkown
|
page read and write
|
|
|
|
216E9429000
|
unkown
|
page read and write
|
|
|
|
7FF5C8A51000
|
unkown
|
page readonly
|
|
|
|
216E9D94000
|
unkown
|
page read and write
|
|
|
|
7FF5D3209000
|
unkown
|
page readonly
|
|
|
|
7FF4EE441000
|
unkown
|
page readonly
|
|
|
|
7FF543BBA000
|
unkown
|
page readonly
|
|
|
|
7FF5D3429000
|
unkown
|
page readonly
|
|
|
|
346A000
|
unkown
|
page read and write
|
|
|
|
7FF57592A000
|
unkown
|
page readonly
|
|
|
|
7FF57590F000
|
unkown
|
page readonly
|
|
|
|
3085000
|
unkown
|
page read and write
|
|
|
|
1D7616A9000
|
unkown
|
page read and write
|
|
|
|
216EA33C000
|
unkown
|
page read and write
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
6350000
|
unkown
|
page readonly
|
|
|
|
2B25000
|
unkown
|
page readonly
|
|
|
|
1E9AA800000
|
unkown
|
page readonly
|
|
|
|
216EA202000
|
unkown
|
page read and write
|
|
|
|
7FF543423000
|
unkown
|
page readonly
|
|
|
|
2833000
|
unkown
|
page readonly
|
|
|
|
21D0000
|
unkown
|
page readonly
|
|
|
|
216EA202000
|
unkown
|
page read and write
|
|
|
|
216E93A0000
|
unkown
|
page readonly
|
|
|
|
7FF58A1B4000
|
unkown
|
page readonly
|
|
|
|
1D7634C0000
|
unkown
|
page read and write
|
|
|
|
344A000
|
heap default
|
page read and write
|
|
|
|
7FF58A10C000
|
unkown
|
page readonly
|
|
|
|
7FF4EE34E000
|
unkown
|
page readonly
|
|
|
|
1D7637D2000
|
unkown
|
page read and write
|
|
|
|
2E40375000
|
unkown
|
page read and write
|
|
|
|
216E9320000
|
heap private
|
page read and write
|
|
|
|
216E9458000
|
unkown
|
page read and write
|
|
|
|
7FF5D340E000
|
unkown
|
page readonly
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
216EA28E000
|
unkown
|
page read and write
|
|
|
|
7FF4EE442000
|
unkown
|
page readonly
|
|
|
|
288B000
|
unkown
|
page readonly
|
|
|
|
1D764310000
|
unkown
|
page read and write
|
|
|
|
10C5AC46000
|
unkown
|
page read and write
|
|
|
|
7FF58A25A000
|
unkown
|
page readonly
|
|
|
|
216E9483000
|
unkown
|
page read and write
|
|
|
|
1D763530000
|
unkown
|
page read and write
|
|
|
|
3474000
|
unkown
|
page read and write
|
|
|
|
1D763877000
|
unkown
|
page read and write
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7FF589F48000
|
unkown
|
page readonly
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page readonly
|
|
|
|
7FF4EE3C1000
|
unkown
|
page readonly
|
|
|
|
7FF538384000
|
unkown
|
page readonly
|
|
|
|
307B000
|
unkown
|
page read and write
|
|
|
|
1B16EA70000
|
unkown
|
page readonly
|
|
|
|
1851B847000
|
unkown
|
page read and write
|
|
|
|
8221B7B000
|
unkown
|
page read and write
|
|
|
|
216E9D33000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BED000
|
unkown
|
page readonly
|
|
|
|
7FF4EE00C000
|
unkown
|
page readonly
|
|
|
|
7FF58A13B000
|
unkown
|
page readonly
|
|
|
|
7FF5D3087000
|
unkown
|
page readonly
|
|
|
|
2903000
|
unkown
|
page readonly
|
|
|
|
3390000
|
unkown
|
page read and write
|
|
|
|
216E9B80000
|
unkown
|
page readonly
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
1D76383B000
|
unkown
|
page read and write
|
|
|
|
7FF4EE313000
|
unkown
|
page readonly
|
|
|
|
346E000
|
unkown
|
page read and write
|
|
|
|
286A000
|
unkown
|
page read and write
|
|
|
|
8221CFC000
|
unkown
|
page read and write
|
|
|
|
10C5AC67000
|
unkown
|
page read and write
|
|
|
|
7FF5C8ABD000
|
unkown
|
page readonly
|
|
|
|
1E9AA013000
|
unkown
|
page read and write
|
|
|
|
2DC9000
|
unkown
|
page read and write
|
|
|
|
33DE000
|
unkown
|
page read and write
|
|
|
|
7FF5D33FA000
|
unkown
|
page readonly
|
|
|
|
1D7614D0000
|
heap private
|
page read and write
|
|
|
|
10C5AC6C000
|
unkown
|
page read and write
|
|
|
|
216E9DB5000
|
unkown
|
page read and write
|
|
|
|
1D76172E000
|
unkown
|
page read and write
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
7FF5D32B8000
|
unkown
|
page readonly
|
|
|
|
1D76372E000
|
unkown
|
page read and write
|
|
|
|
1D7637EC000
|
unkown
|
page read and write
|
|
|
|
1D76383F000
|
unkown
|
page read and write
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
216E9D5D000
|
unkown
|
page read and write
|
|
|
|
2E3FFCE000
|
unkown
|
page read and write
|
|
|
|
ACC8B7F000
|
unkown
|
page read and write
|
|
|
|
1D761530000
|
heap default
|
page read and write
|
|
|
|
216E9D50000
|
unkown
|
page read and write
|
|
|
|
10C5AA90000
|
heap private
|
page read and write
|
|
|
|
216E94EF000
|
unkown
|
page read and write
|
|
|
|
7FF58A261000
|
unkown
|
page readonly
|
|
|
|
216E9D7E000
|
unkown
|
page read and write
|
|
|
|
216EA39B000
|
unkown
|
page read and write
|
|
|
|
1B16EC13000
|
unkown
|
page read and write
|
|
|
|
7FF538316000
|
unkown
|
page readonly
|
|
|
|
3030000
|
unkown
|
page readonly
|
|
|
|
277ADCC0000
|
heap default
|
page read and write
|
|
|
|
1B16EB40000
|
unkown
|
page write copy
|
|
|
|
82218FE000
|
unkown
|
page read and write
|
|
|
|
23A3000
|
unkown
|
page readonly
|
|
|
|
308D000
|
unkown
|
page read and write
|
|
|
|
822227E000
|
unkown
|
page read and write
|
|
|
|
2716000
|
unkown
|
page read and write
|
|
|
|
1E9AA03C000
|
unkown
|
page read and write
|
|
|
|
8221A7E000
|
unkown
|
page read and write
|
|
|
|
1D763832000
|
unkown
|
page read and write
|
|
|
|
2299000
|
unkown
|
page readonly
|
|
|
|
7FF5433D1000
|
unkown
|
page readonly
|
|
|
|
2A8C000
|
unkown
|
page readonly
|
|
|
|
216E94D9000
|
unkown
|
page read and write
|
|
|
|
1D763730000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BE9000
|
unkown
|
page readonly
|
|
|
|
2A75000
|
unkown
|
page readonly
|
|
|
|
7FF4EE3CD000
|
unkown
|
page readonly
|
|
|
|
7FF5D307A000
|
unkown
|
page readonly
|
|
|
|
7FF538308000
|
unkown
|
page readonly
|
|
|
|
2311000
|
unkown
|
page readonly
|
|
|
|
7FF5758E0000
|
unkown
|
page readonly
|
|
|
|
7FF4EE231000
|
unkown
|
page readonly
|
|
|
|
4520000
|
unkown
|
page readonly
|
|
|
|
2AAD000
|
unkown
|
page readonly
|
|
|
|
7FF575705000
|
unkown
|
page readonly
|
|
|
|
10C5AC00000
|
unkown
|
page read and write
|
|
|
|
1D763520000
|
unkown
|
page read and write
|
|
|
|
7FF5D33B5000
|
unkown
|
page readonly
|
|
|
|
1D763759000
|
unkown
|
page read and write
|
|
|
|
7FF5759D2000
|
unkown
|
page readonly
|
|
|
|
1D763540000
|
unkown
|
page read and write
|
|
|
|
7FF58A170000
|
unkown
|
page readonly
|
|
|
|
7FF589F36000
|
unkown
|
page readonly
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
7FF5382D7000
|
unkown
|
page readonly
|
|
|
|
7FF58A175000
|
unkown
|
page readonly
|
|
|
|
7FF53819B000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B9C000
|
unkown
|
page readonly
|
|
|
|
230F000
|
unkown
|
page readonly
|
|
|
|
1D764010000
|
unkown
|
page read and write
|
|
|
|
2A49000
|
unkown
|
page readonly
|
|
|
|
216E9D53000
|
unkown
|
page read and write
|
|
|
|
7FF543A9B000
|
unkown
|
page readonly
|
|
|
|
7FF575959000
|
unkown
|
page readonly
|
|
|
|
1D7637EB000
|
unkown
|
page read and write
|
|
|
|
216E9D44000
|
unkown
|
page read and write
|
|
|
|
282C000
|
unkown
|
page readonly
|
|
|
|
7FF4FFC54000
|
unkown
|
page readonly
|
|
|
|
286C37F000
|
unkown
|
page read and write
|
|
|
|
2B48000
|
unkown
|
page readonly
|
|
|
|
3088000
|
unkown
|
page read and write
|
|
|
|
216E9D13000
|
unkown
|
page read and write
|
|
|
|
7FF57595D000
|
unkown
|
page readonly
|
|
|
|
1D763769000
|
unkown
|
page read and write
|
|
|
|
7FF5755B7000
|
unkown
|
page readonly
|
|
|
|
65A3000
|
heap private
|
page read and write
|
|
|
|
10C5AC6C000
|
unkown
|
page read and write
|
|
|
|
297A000
|
unkown
|
page read and write
|
|
|
|
64F0000
|
unkown
|
page read and write
|
|
|
|
306A000
|
heap default
|
page read and write
|
|
|
|
3469000
|
unkown
|
page read and write
|
|
|
|
7FF57593E000
|
unkown
|
page readonly
|
|
|
|
7FF58A073000
|
unkown
|
page readonly
|
|
|
|
7FF5382FF000
|
unkown
|
page readonly
|
|
|
|
82219F9000
|
unkown
|
page read and write
|
|
|
|
1D7634C0000
|
unkown
|
page read and write
|
|
|
|
7FF4EE350000
|
unkown
|
page readonly
|
|
|
|
22E9000
|
unkown
|
page readonly
|
|
|
|
216E94B0000
|
unkown
|
page read and write
|
|
|
|
7FF58A110000
|
unkown
|
page readonly
|
|
|
|
7FF5D306C000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB70000
|
unkown
|
page readonly
|
|
|
|
277ADC40000
|
unkown
|
page read and write
|
|
|
|
3300000
|
unkown
|
page readonly
|
|
|
|
7FF5C8B75000
|
unkown
|
page readonly
|
|
|
|
7AFA7F000
|
unkown
|
page read and write
|
|
|
|
2A5A000
|
unkown
|
page readonly
|
|
|
|
3465000
|
unkown
|
page read and write
|
|
|
|
1851B848000
|
unkown
|
page read and write
|
|
|
|
1D761655000
|
unkown
|
page read and write
|
|
|
|
2EEE000
|
unkown
|
page read and write
|
|
|
|
1851B640000
|
heap private
|
page read and write
|
|
|
|
1D763C42000
|
unkown
|
page read and write
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
22A3000
|
unkown
|
page readonly
|
|
|
|
7FF5C8730000
|
unkown
|
page readonly
|
|
|
|
7FF5D34A2000
|
unkown
|
page readonly
|
|
|
|
277ADD00000
|
unkown
|
page read and write
|
|
|
|
1D76166F000
|
unkown
|
page read and write
|
|
|
|
7FF58A144000
|
unkown
|
page readonly
|
|
|
|
1D76167E000
|
unkown
|
page read and write
|
|
|
|
216E9E00000
|
unkown
|
page readonly
|
|
|
|
1B16EBD0000
|
unkown
|
page read and write
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
|
|
277ADC60000
|
unkown
|
page read and write
|
|
|
|
1D7616E1000
|
unkown
|
page read and write
|
|
|
|
2971000
|
unkown
|
page read and write
|
|
|
|
7FF575701000
|
unkown
|
page readonly
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
AB8C1FF000
|
unkown
|
page read and write
|
|
|
|
216E9508000
|
unkown
|
page read and write
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
2AC0000
|
heap private
|
page read and write
|
|
|
|
2ACA000
|
heap private
|
page read and write
|
|
|
|
7FF5C8BE6000
|
unkown
|
page readonly
|
|
|
|
7FF5D33DF000
|
unkown
|
page readonly
|
|
|
|
7FF58A262000
|
unkown
|
page readonly
|
|
|
|
216E9BA0000
|
unkown
|
page read and write
|
|
|
|
7FF5757DB000
|
unkown
|
page readonly
|
|
|
|
10C5C5F0000
|
unkown
|
page read and write
|
|
|
|
7FF543AA4000
|
unkown
|
page readonly
|
|
|
|
8221D7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D33AE000
|
unkown
|
page readonly
|
|
|
|
277ADEF5000
|
heap private
|
page read and write
|
|
|
|
216E9BC0000
|
unkown
|
page readonly
|
|
|
|
7FF4EE171000
|
unkown
|
page readonly
|
|
|
|
216EA21E000
|
unkown
|
page read and write
|
|
|
|
7FF543973000
|
unkown
|
page readonly
|
|
|
|
216E9D4D000
|
unkown
|
page read and write
|
|
|
|
1D763510000
|
unkown
|
page read and write
|
|
|
|
2182000
|
unkown
|
page readonly
|
|
|
|
216E9513000
|
unkown
|
page read and write
|
|
|
|
216E9D61000
|
unkown
|
page read and write
|
|
|
|
1D7637EC000
|
unkown
|
page read and write
|
|
|
|
7FF4EE394000
|
unkown
|
page readonly
|
|
|
|
2AD6000
|
unkown
|
page readonly
|
|
|
|
7FF4EE3C9000
|
unkown
|
page readonly
|
|
|
|
7FF575934000
|
unkown
|
page readonly
|
|
|
|
1B16EB90000
|
unkown
|
page readonly
|
|
|
|
1D7616CB000
|
unkown
|
page read and write
|
|
|
|
1D763894000
|
unkown
|
page read and write
|
|
|
|
2501000
|
unkown
|
page readonly
|
|
|
|
216EA202000
|
unkown
|
page read and write
|
|
|
|
1851C002000
|
unkown
|
page read and write
|
|
|
|
300E000
|
unkown
|
page read and write
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
|
|
7FF5C8AC3000
|
unkown
|
page readonly
|
|
|
|
7FF4EE10B000
|
unkown
|
page readonly
|
|
|
|
1D7637CC000
|
unkown
|
page read and write
|
|
|
|
7FF58A06B000
|
unkown
|
page readonly
|
|
|
|
1D7634B0000
|
heap private
|
page read and write
|
|
|
|
28AB000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B70000
|
unkown
|
page readonly
|
|
|
|
7FF5C8AD4000
|
unkown
|
page readonly
|
|
|
|
1E9AA000000
|
unkown
|
page read and write
|
|
|
|
308A000
|
unkown
|
page read and write
|
|
|
|
3081000
|
unkown
|
page read and write
|
|
|
|
216E9B90000
|
unkown
|
page readonly
|
|
|
|
1D763863000
|
unkown
|
page read and write
|
|
|
|
7FF543632000
|
unkown
|
page readonly
|
|
|
|
1851B780000
|
unkown
|
page readonly
|
|
|
|
17E72102000
|
unkown
|
page read and write
|
|
|
|
2A53000
|
unkown
|
page readonly
|
|
|
|
1B16EC69000
|
unkown
|
page read and write
|
|
|
|
2984000
|
unkown
|
page read and write
|
|
|
|
43B0000
|
unkown
|
page readonly
|
|
|
|
216E9D83000
|
unkown
|
page read and write
|
|
|
|
7FF5382AB000
|
unkown
|
page readonly
|
|
|
|
7AFB7F000
|
unkown
|
page read and write
|
|
|
|
286C277000
|
unkown
|
page read and write
|
|
|
|
7FF5759C4000
|
unkown
|
page readonly
|
|
|
|
7FF53829E000
|
unkown
|
page readonly
|
|
|
|
2E40AFB000
|
unkown
|
page read and write
|
|
|
|
7FF57569B000
|
unkown
|
page readonly
|
|
|
|
2384000
|
unkown
|
page readonly
|
|
|
|
7FF543B24000
|
unkown
|
page readonly
|
|
|
|
7FF5C8BCF000
|
unkown
|
page readonly
|
|
|
|
7FF5439CE000
|
unkown
|
page readonly
|
|
|
|
7FF5D32B3000
|
unkown
|
page readonly
|
|
|
|
7FF5382A0000
|
unkown
|
page readonly
|
|
|
|
7FF543690000
|
unkown
|
page readonly
|
|
|
|
ACC8A7A000
|
unkown
|
page read and write
|
|
|
|
7FF57590C000
|
unkown
|
page readonly
|
|
|
|
7FF5439D3000
|
unkown
|
page readonly
|
|
|
|
216E9380000
|
heap default
|
page read and write
|
|
|
|
2975000
|
unkown
|
page read and write
|
|
|
|
2882000
|
unkown
|
page readonly
|
|
|
|
1D761671000
|
unkown
|
page read and write
|
|
|
|
7FF543A1D000
|
unkown
|
page readonly
|
|
|
|
1D7616DD000
|
unkown
|
page read and write
|
|
|
|
338A000
|
heap private
|
page read and write
|
|
|
|
7AFC7A000
|
unkown
|
page read and write
|
|
|
|
7FF5382CC000
|
unkown
|
page readonly
|
|
|
|
1851B790000
|
unkown
|
page readonly
|
|
|
|
8221DFB000
|
unkown
|
page read and write
|
|
|
|
1D761742000
|
unkown
|
page read and write
|
|
|
|
2751000
|
unkown
|
page readonly
|
|
|
|
3260000
|
unkown
|
page readonly
|
|
|
|
1D764310000
|
unkown
|
page read and write
|
|
|
|
22D3000
|
unkown
|
page readonly
|
|
|
|
4910000
|
unkown
|
page readonly
|
|
|
|
216E9DD6000
|
unkown
|
page read and write
|
|
|
|
216E9D61000
|
unkown
|
page read and write
|
|
|
|
10C5AC6E000
|
unkown
|
page read and write
|
|
|
|
1D763900000
|
unkown
|
page read and write
|
|
|
|
A7B4B77000
|
unkown
|
page read and write
|
|
|
|
7FF589FC1000
|
unkown
|
page readonly
|
|
|
|
7FF5D33AA000
|
unkown
|
page readonly
|
|
|
|
7FF58A17B000
|
unkown
|
page readonly
|
|
|
|
7FF4FFB75000
|
unkown
|
page readonly
|
|
|
|
1D76167F000
|
unkown
|
page read and write
|
|
|
|
7FF5759CA000
|
unkown
|
page readonly
|
|
|
|
1E9A9DB0000
|
heap private
|
page read and write
|
|
|
|
1E9AAB40000
|
unkown
|
page readonly
|
|
|
|
1D761735000
|
unkown
|
page read and write
|
|
|
|
8221BFB000
|
unkown
|
page read and write
|
|
|
|
8221EFA000
|
unkown
|
page read and write
|
|
|
|
7FF5D3494000
|
unkown
|
page readonly
|
|
|
|
7AFD7E000
|
unkown
|
page read and write
|
|
|
|
1D7616D0000
|
unkown
|
page read and write
|
|
|
|
2F1E000
|
unkown
|
page read and write
|
|
|
|
17E71FC0000
|
unkown
|
page readonly
|
|
|
|
1E9A9EF0000
|
unkown
|
page readonly
|
|
|
|
1D7637EA000
|
unkown
|
page read and write
|
|
|
|
2E40478000
|
unkown
|
page read and write
|
|
|
|
7FF5C8736000
|
unkown
|
page readonly
|
|
|
|
216E944C000
|
unkown
|
page read and write
|
|
|
|
308D000
|
unkown
|
page read and write
|
|
|
|
1D761731000
|
unkown
|
page read and write
|
|
|
|
2871000
|
unkown
|
page readonly
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
216E9DD6000
|
unkown
|
page read and write
|
|
|
|
320D000
|
unkown
|
page read and write
|
|
|
|
27F9000
|
unkown
|
page readonly
|
|
|
|
7FF4EE2F0000
|
unkown
|
page readonly
|
|
|
|
10C5AC6C000
|
unkown
|
page read and write
|
|
|
|
7FF538391000
|
unkown
|
page readonly
|
|
|
|
1D761713000
|
unkown
|
page read and write
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
216EA302000
|
unkown
|
page read and write
|
|
|
|
7FF543AFF000
|
unkown
|
page readonly
|
|
|
|
2EF0000
|
heap default
|
page read and write
|
|
|
|
1851B900000
|
unkown
|
page read and write
|
|
|
|
AB8C27F000
|
unkown
|
page read and write
|
|
|
|
7FF4EE37F000
|
unkown
|
page readonly
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7FF4EE116000
|
unkown
|
page readonly
|
|
|
|
A7B44DC000
|
unkown
|
page read and write
|
|
|
|
1D7637CC000
|
unkown
|
page read and write
|
|
|
|
216E9502000
|
unkown
|
page read and write
|
|
|
|
ACC8BF9000
|
unkown
|
page read and write
|
|
|
|
7FF589F4F000
|
unkown
|
page readonly
|
|
|
|
7FF4FF4C7000
|
unkown
|
page readonly
|
|
|
|
7FF5757E8000
|
unkown
|
page readonly
|
|
|
|
1D76374C000
|
unkown
|
page read and write
|
|
|
|
1851B829000
|
unkown
|
page read and write
|
|
|
|
297E000
|
unkown
|
page read and write
|
|
|
|
216E9D4D000
|
unkown
|
page read and write
|
|
|
|
1D7616C8000
|
unkown
|
page read and write
|
|
|
|
1B1706A0000
|
unkown
|
page readonly
|
|
|
|
7FF5758E5000
|
unkown
|
page readonly
|
|
|
|
7FF575882000
|
unkown
|
page readonly
|
|
|
|
27C4000
|
unkown
|
page readonly
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
1D764210000
|
unkown
|
page read and write
|
|
|
|
2825000
|
unkown
|
page readonly
|
|
|
|
3482000
|
unkown
|
page read and write
|
|
|
|
216E9DA5000
|
unkown
|
page read and write
|
|
|
|
3420000
|
unkown
|
page read and write
|
|
|
|
17E72029000
|
unkown
|
page read and write
|
|
|
|
AB8C17A000
|
unkown
|
page read and write
|
|
|
|
7FF543ABC000
|
unkown
|
page readonly
|
|
|
|
7FF58A1DE000
|
unkown
|
page readonly
|
|
|
|
7FF58A1A7000
|
unkown
|
page readonly
|
|
|
|
7FF543906000
|
unkown
|
page readonly
|
|
|
|
10C5AC29000
|
unkown
|
page read and write
|
|
|
|
82222FF000
|
unkown
|
page read and write
|
|
|
|
32FA000
|
heap private
|
page read and write
|
|
|
|
216E9D54000
|
unkown
|
page read and write
|
|
|
|
7FF5758F7000
|
unkown
|
page readonly
|
|
|
|
6150000
|
unkown
|
page readonly
|
|
|
|
1D763C00000
|
unkown
|
page read and write
|
|
|
|
1D761679000
|
unkown
|
page read and write
|
|
|
|
2886000
|
unkown
|
page readonly
|
|
|
|
7FF5758DA000
|
unkown
|
page readonly
|
|
|
|
216E9C02000
|
unkown
|
page read and write
|
|
|
|
1D763706000
|
unkown
|
page read and write
|
|
|
|
7FF4FFBD8000
|
unkown
|
page readonly
|
|
|
|
216E9471000
|
unkown
|
page read and write
|
|
|
|
1D763772000
|
unkown
|
page read and write
|
|
|
|
2A6D000
|
unkown
|
page readonly
|
|
|
|
AB8C079000
|
unkown
|
page read and write
|
|
|
|
232B000
|
unkown
|
page readonly
|
|
|
|
1D761773000
|
unkown
|
page read and write
|
|
|
|
216E9DB4000
|
unkown
|
page read and write
|
|
|
|
1D761687000
|
unkown
|
page read and write
|
|
|
|
216E9390000
|
unkown
|
page readonly
|
|
|
|
2930000
|
unkown
|
page readonly
|
|
|
|
43AF000
|
unkown
|
page read and write
|
|
|
|
A7B455E000
|
unkown
|
page read and write
|
|
|
|
7FF543B46000
|
unkown
|
page readonly
|
|
|
|
7FF58A1E9000
|
unkown
|
page readonly
|
|
|
|
7FF543A3C000
|
unkown
|
page readonly
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
2E40577000
|
unkown
|
page read and write
|
|
|
|
10C5ABD0000
|
unkown
|
page readonly
|
|
|
|
1D761784000
|
unkown
|
page read and write
|
|
|
|
7FF589F2B000
|
unkown
|
page readonly
|
|
|
|
1D7615F0000
|
unkown
|
page readonly
|
|
|
|
44DE000
|
unkown
|
page read and write
|
|
|
|
22FF000
|
unkown
|
page readonly
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
|
|
7FF543A34000
|
unkown
|
page readonly
|
|
|
|
295A000
|
heap default
|
page read and write
|
|
|
|
1D761613000
|
unkown
|
page read and write
|
|
|
|
1851B84E000
|
unkown
|
page read and write
|
|
|
|
216E94F9000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B5A000
|
unkown
|
page readonly
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
1D761800000
|
unkown
|
page readonly
|
|
|
|
1D761732000
|
unkown
|
page read and write
|
|
|
|
286BEFF000
|
unkown
|
page read and write
|
|
|
|
22CC000
|
unkown
|
page readonly
|
|
|
|
7FF5D3373000
|
unkown
|
page readonly
|
|
|
|
1D7616D2000
|
unkown
|
page read and write
|
|
|
|
7FF58A133000
|
unkown
|
page readonly
|
|
|
|
1D764110000
|
unkown
|
page read and write
|
|
|
|
7FF58A254000
|
unkown
|
page readonly
|
|
|
|
8221F7B000
|
unkown
|
page read and write
|
|
|
|
1D76378B000
|
unkown
|
page read and write
|
|
|
|
7FF4FF4C3000
|
unkown
|
page readonly
|
|
|
|
218E000
|
unkown
|
page readonly
|
|
|
|
7FF58A1E1000
|
unkown
|
page readonly
|
|
|
|
3094000
|
unkown
|
page read and write
|
|
|
|
10C5AC68000
|
unkown
|
page read and write
|
|
|
|
7FF543642000
|
unkown
|
page readonly
|
|
|
|
17E72113000
|
unkown
|
page read and write
|
|
|
|
3094000
|
unkown
|
page read and write
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
ACC8C7E000
|
unkown
|
page read and write
|
|
|
|
3477000
|
unkown
|
page read and write
|
|
|
|
7FF543B14000
|
unkown
|
page readonly
|
|
|
|
1D763902000
|
unkown
|
page read and write
|
|
|
|
10C5C6F0000
|
unkown
|
page readonly
|
|
|
|
1851B813000
|
unkown
|
page read and write
|
|
|
|
1D764000000
|
unkown
|
page read and write
|
|
|
|
277ADCD6000
|
heap default
|
page read and write
|
|
|
|
216E9D59000
|
unkown
|
page read and write
|
|
|
|
30C0000
|
unkown
|
page readonly
|
|
|
|
1D761773000
|
unkown
|
page read and write
|
|
|
|
7FF538204000
|
unkown
|
page readonly
|
|
|
|
17E72100000
|
unkown
|
page read and write
|
|
|
|
7FF4FFC5A000
|
unkown
|
page readonly
|
|
|
|
7FF57594E000
|
unkown
|
page readonly
|
|
|
|
7FF589CD2000
|
unkown
|
page readonly
|
|
|
|
7FF5439CB000
|
unkown
|
page readonly
|
|
|
|
A7B4D7E000
|
unkown
|
page read and write
|
|
|
|
7FF5436A5000
|
unkown
|
page readonly
|
|
|
|
2AC1000
|
unkown
|
page readonly
|
|
|
|
6290000
|
unkown
|
page read and write
|
|
|
|
7FF543B07000
|
unkown
|
page readonly
|
|
|
|
2DC5000
|
unkown
|
page read and write
|
|
|
|
216E9D52000
|
unkown
|
page read and write
|
|
|
|
216E9DC0000
|
unkown
|
page read and write
|
|
|
|
1D7618D0000
|
unkown
|
page readonly
|
|
|
|
277ADCD1000
|
unkown
|
page read and write
|
|
|
|
1D763800000
|
unkown
|
page read and write
|
|
|
|
7FF5758EB000
|
unkown
|
page readonly
|
|
|
|
7FF4EE027000
|
unkown
|
page readonly
|
|
|
|
7FF5382EA000
|
unkown
|
page readonly
|
|
|
|
7FF5C8C61000
|
unkown
|
page readonly
|
|
|
|
7FF58A1E6000
|
unkown
|
page readonly
|
|
|
|
216E9D5D000
|
unkown
|
page read and write
|
|
|
|
628F000
|
unkown
|
page read and write
|
|
|
|
216E9DB5000
|
unkown
|
page read and write
|
|
|
|
216EA202000
|
unkown
|
page read and write
|
|
|
|
1851B902000
|
unkown
|
page read and write
|
|
|
|
230A000
|
unkown
|
page readonly
|
|
|
|
1D763700000
|
unkown
|
page read and write
|
|
|
|
2863000
|
unkown
|
page readonly
|
|
|
|
1851B870000
|
unkown
|
page read and write
|
|
|
|
1D7634C0000
|
unkown
|
page read and write
|
|
|
|
1E9AA602000
|
unkown
|
page read and write
|
|
|
|
7FF58A102000
|
unkown
|
page readonly
|
|
|
|
216E9D5D000
|
unkown
|
page read and write
|
|
|
|
1D764510000
|
unkown
|
page read and write
|
|
|
|
7FF575880000
|
unkown
|
page readonly
|
|
|
|
1D763787000
|
unkown
|
page read and write
|
|
|
|
6344000
|
heap private
|
page read and write
|
|
|
|
7FF5382A5000
|
unkown
|
page readonly
|
|
|
|
216E9D82000
|
unkown
|
page read and write
|
|
|
|
7FF4EE3A4000
|
unkown
|
page readonly
|
|
|
|
7FF5C8BA7000
|
unkown
|
page readonly
|
|
|
|
346D000
|
unkown
|
page read and write
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
|
|
7FF4EE434000
|
unkown
|
page readonly
|
|
|
|
28D1000
|
unkown
|
page readonly
|
|
|
|
7FF5C8BC4000
|
unkown
|
page readonly
|
|
|
|
65A0000
|
heap private
|
page read and write
|
|
|
|
7FF4EE3C6000
|
unkown
|
page readonly
|
|
|
|
1E9AA04F000
|
unkown
|
page read and write
|
|
|
|
1D7616CD000
|
unkown
|
page read and write
|
|
|
|
17E73AC0000
|
unkown
|
page read and write
|
|
|
|
6930000
|
unkown
|
page read and write
|
|
|
|
297D000
|
unkown
|
page read and write
|
|
|
|
1D7616F4000
|
unkown
|
page read and write
|
|
|
|
1851B886000
|
unkown
|
page read and write
|
|
|
|
7FF543AD5000
|
unkown
|
page readonly
|
|
|
|
7FF543A70000
|
unkown
|
page readonly
|
|
|
|
7FF5757C1000
|
unkown
|
page readonly
|
|
|
|
7FF543B49000
|
unkown
|
page readonly
|
|
|
|
7FF543B2F000
|
unkown
|
page readonly
|
|
|
|
7FF5437AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D33C7000
|
unkown
|
page readonly
|
|
|
|
7FF5D2C11000
|
unkown
|
page readonly
|
|
|
|
346D000
|
unkown
|
page read and write
|
|
|
|
17E72013000
|
unkown
|
page read and write
|
|
|
|
7DB9279000
|
unkown
|
page read and write
|
|
|
|
216E9D5D000
|
unkown
|
page read and write
|
|
|
|
7FF58A051000
|
unkown
|
page readonly
|
|
|
|
1851B913000
|
unkown
|
page read and write
|
|
|
|
1D7637EE000
|
unkown
|
page read and write
|
|
|
|
277ADEF0000
|
heap private
|
page read and write
|
|
|
|
8221E7B000
|
unkown
|
page read and write
|
|
|
|
1D7637F2000
|
unkown
|
page read and write
|
|
|
|
2992000
|
unkown
|
page read and write
|
|
|
|
2371000
|
unkown
|
page readonly
|
|
|
|
30A2000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B87000
|
unkown
|
page readonly
|
|
|
|
2B34000
|
unkown
|
page readonly
|
|
|
|
2979000
|
unkown
|
page read and write
|
|
|
|
216EA302000
|
unkown
|
page read and write
|
|
|
|
7FF5D33DC000
|
unkown
|
page readonly
|
|
|
|
7FF589E3F000
|
unkown
|
page readonly
|
|
|
|
216EA21E000
|
unkown
|
page read and write
|
|
|
|
7FF538319000
|
unkown
|
page readonly
|
|
|
|
26E2000
|
unkown
|
page readonly
|
|
|
|
1D763843000
|
unkown
|
page read and write
|
|
|
|
1D7616BD000
|
unkown
|
page read and write
|
|
|
|
297D000
|
unkown
|
page read and write
|
|
|
|
7FF537E60000
|
unkown
|
page readonly
|
|
|
|
2981000
|
unkown
|
page read and write
|
|
|
|
2940000
|
unkown
|
page readonly
|
|
|
|
7FF4EE175000
|
unkown
|
page readonly
|
|
|
|
2903000
|
unkown
|
page readonly
|
|
|
|
7FF5C8A13000
|
unkown
|
page readonly
|
|
|
|
1B16EC57000
|
unkown
|
page read and write
|
|
|
|
216E9D45000
|
unkown
|
page read and write
|
|
|
|
7FF589F91000
|
unkown
|
page readonly
|
|
|
|
ACC8AFF000
|
unkown
|
page read and write
|
|
|
|
7FF543B1A000
|
unkown
|
page readonly
|
|
|
|
7FF575951000
|
unkown
|
page readonly
|
|
|
|
216EA39B000
|
unkown
|
page read and write
|
|
|
|
1D7637EB000
|
unkown
|
page read and write
|
|
|
|
7FF53830E000
|
unkown
|
page readonly
|
|
|
|
1D764410000
|
unkown
|
page read and write
|
|
|
|
7FF58A16E000
|
unkown
|
page readonly
|
|
|
|
8221C7B000
|
unkown
|
page read and write
|
|
|
|
7AFCFF000
|
unkown
|
page read and write
|
|
|
|
2303000
|
unkown
|
page readonly
|
|
|
|
7FF5C88F0000
|
unkown
|
page readonly
|
|
|
|
1851B6B0000
|
unkown
|
page readonly
|
|
|
|
2ABF000
|
unkown
|
page readonly
|
|
|
|
82221FB000
|
unkown
|
page read and write
|
|
|
|
1B16EE00000
|
unkown
|
page readonly
|
|
|
|
216EA23C000
|
unkown
|
page read and write
|
|
|
|
7FF5899D1000
|
unkown
|
page readonly
|
|
|
|
1D761640000
|
unkown
|
page read and write
|
|
|
|
216E944E000
|
unkown
|
page read and write
|
|
|
|
281D000
|
unkown
|
page readonly
|
|
|
|
32F7000
|
heap private
|
page read and write
|
|
|
|
7FF4EE3AE000
|
unkown
|
page readonly
|
|
|
|
216E9D63000
|
unkown
|
page read and write
|
|
|
|
2E90000
|
unkown
|
page readonly
|
|
|
|
7FF54397A000
|
unkown
|
page readonly
|
|
|
|
7DB8D8B000
|
unkown
|
page read and write
|
|
|
|
1B16EC29000
|
unkown
|
page read and write
|
|
|
|
7FF4FF84A000
|
unkown
|
page readonly
|
|
|
|
7FF5D3176000
|
unkown
|
page readonly
|
|
|
|
216E9DB8000
|
unkown
|
page read and write
|
|
|
|
2EA0000
|
unkown
|
page readonly
|
|
|
|
17E71FB0000
|
heap default
|
page read and write
|
|
|
|
216E9D33000
|
unkown
|
page read and write
|
|
|
|
7FF53819E000
|
unkown
|
page readonly
|
|
|
|
7DB917A000
|
unkown
|
page read and write
|
|
|
|
1D7637D4000
|
unkown
|
page read and write
|
|
|
|
216E9D73000
|
unkown
|
page read and write
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
1B1705A0000
|
unkown
|
page read and write
|
|
|
|
1E9A9FD0000
|
unkown
|
page readonly
|
|
|
|
7FF575739000
|
unkown
|
page readonly
|
|
|
|
7FF57559C000
|
unkown
|
page readonly
|
|
|
|
1851B7A0000
|
unkown
|
page read and write
|
|
|
|
216E9D59000
|
unkown
|
page read and write
|
|
|
|
216E9450000
|
unkown
|
page read and write
|
|
|
|
3469000
|
unkown
|
page read and write
|
|
|
|
7FF5C8C54000
|
unkown
|
page readonly
|
|
|
|
7FF5D31D1000
|
unkown
|
page readonly
|
|
|
|
216E9456000
|
unkown
|
page read and write
|
|
|
|
7FF4EDBAD000
|
unkown
|
page readonly
|
|
|
|
10C5AC6E000
|
unkown
|
page read and write
|
|
|
|
7DB937F000
|
unkown
|
page read and write
|
|
|
|
1D7616FC000
|
unkown
|
page read and write
|
|
|
|
216E9D53000
|
unkown
|
page read and write
|
|
|
|
2014000
|
unkown
|
page readonly
|
|
|
|
1851B825000
|
unkown
|
page read and write
|
|
|
|
7FF54388B000
|
unkown
|
page readonly
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
7FF4EE388000
|
unkown
|
page readonly
|
|
|
|
2B42000
|
unkown
|
page readonly
|
|
|
|
17E72000000
|
unkown
|
page read and write
|
|
|
|
2A7C000
|
unkown
|
page readonly
|
|
|
|
7FF5D341E000
|
unkown
|
page readonly
|
|
|
|
216EA202000
|
unkown
|
page read and write
|
|
|
|
451E000
|
unkown
|
page read and write
|
|
|
|
1851B83C000
|
unkown
|
page read and write
|
|
|
|
7FF589FC9000
|
unkown
|
page readonly
|
|
|
|
216E9DD6000
|
unkown
|
page read and write
|
|
|
|
1B16ED13000
|
unkown
|
page read and write
|
|
|
|
1D761629000
|
unkown
|
page read and write
|
|
|
|
8221FFB000
|
unkown
|
page read and write
|
|
|
|
7FF5D33F4000
|
unkown
|
page readonly
|
|
|
|
7FF58A078000
|
unkown
|
page readonly
|
|
|
|
346D000
|
unkown
|
page read and write
|
|
|
|
216E9D44000
|
unkown
|
page read and write
|
|
|
|
7FF53829A000
|
unkown
|
page readonly
|
|
|
|
A7B45DE000
|
unkown
|
page read and write
|
|
|
|
7FF5D31D5000
|
unkown
|
page readonly
|
|
|
|
7FF5D33E8000
|
unkown
|
page readonly
|
|
|
|
7FF575924000
|
unkown
|
page readonly
|
|
|
|
1E9A9E10000
|
heap default
|
page read and write
|
|
|
|
216E9D5D000
|
unkown
|
page read and write
|
|
|
|
2AAF000
|
unkown
|
page readonly
|
|
|
|
17E7206C000
|
unkown
|
page read and write
|
|
|
|
22BD000
|
unkown
|
page readonly
|
|
|
|
324F000
|
unkown
|
page read and write
|
|
|
|
7FF5C8B6A000
|
unkown
|
page readonly
|
|
|
|
283C000
|
unkown
|
page readonly
|
|
|
|
8221AFB000
|
unkown
|
page read and write
|
|
|
|
216E9D4B000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown
|
page read and write
|
|
|
|
2B21000
|
unkown
|
page readonly
|
|
|
|
277ADCF0000
|
unkown
|
page read and write
|
|
|
|
216E9DB4000
|
unkown
|
page read and write
|
|
|
|
1D7637CD000
|
unkown
|
page read and write
|
|
|
|
65B0000
|
unkown
|
page readonly
|
|
|
|
1D761600000
|
unkown
|
page read and write
|
|
|
|
1851B6A0000
|
heap default
|
page read and write
|
|
|
|
10C5AC13000
|
unkown
|
page read and write
|
|
|
|
1D7637ED000
|
unkown
|
page read and write
|
|
|
|
216E9D95000
|
unkown
|
page read and write
|
|
|
|
1D7637F6000
|
unkown
|
page read and write
|
|
|
|
AB8BD5E000
|
unkown
|
page read and write
|
|
|
|
7FF543AAF000
|
unkown
|
page readonly
|
|
|
|
3471000
|
unkown
|
page read and write
|
|
|
|
216E9D4D000
|
unkown
|
page read and write
|
|
|
|
1851B908000
|
unkown
|
page read and write
|
|
|
|
1851B84B000
|
unkown
|
page read and write
|
|
|
|
216E9D00000
|
unkown
|
page read and write
|
|
|
|
1B16EA60000
|
heap default
|
page read and write
|
|
|
|
7FF543B3E000
|
unkown
|
page readonly
|
|
|
|
3050000
|
unkown
|
page read and write
|
|
|
|
216E9D4C000
|
unkown
|
page read and write
|
|
|
|
216E9DB5000
|
unkown
|
page read and write
|
|
|
|
216E9D33000
|
unkown
|
page read and write
|
|
|
|
216E9DB5000
|
unkown
|
page read and write
|
|
|
|
1D7637F3000
|
unkown
|
page read and write
|
|
|
|
7FF543A72000
|
unkown
|
page readonly
|
|
|
|
2F00000
|
unkown
|
page readonly
|
|
|
|
3091000
|
unkown
|
page read and write
|
|
|
|
7FF537E66000
|
unkown
|
page readonly
|
|
|
|
1851B854000
|
unkown
|
page read and write
|
|
|
|
303A000
|
unkown
|
page read and write
|
|
|
|
7FF5C8BD8000
|
unkown
|
page readonly
|
|
|
|
624E000
|
unkown
|
page read and write
|
|
|
|
22F5000
|
unkown
|
page readonly
|
|
|
|
216E9DB5000
|
unkown
|
page read and write
|
|
|
|
216E9D50000
|
unkown
|
page read and write
|
|
|
|
1D7616D7000
|
unkown
|
page read and write
|
|
|
|
5C60000
|
heap private
|
page read and write
|
|
|
|
7FF5381ED000
|
unkown
|
page readonly
|
|
|
|
1B16EC00000
|
unkown
|
page read and write
|
|
|
|
216E9DA6000
|
unkown
|
page read and write
|
|
There are 1128 hidden memdumps, click here to show them.