Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
statistic-1496367785.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Author: van-van, Last Saved
By: Grog, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:17:20 2015, Last Saved Time/Date:
Fri May 21 09:07:02 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\0A8CE175-D39D-43AE-8F1B-CA84388C02A0
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\BDB40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Tue Jun 29 14:47:14 2021, atime=Tue Jun 29 14:47:14 2021, length=12288, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\statistic-1496367785.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:54
2020, mtime=Tue Jun 29 14:47:15 2021, atime=Tue Jun 29 14:47:15 2021, length=176128, window=hide
|
modified
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\7EB40000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0968A1E3A40D2582E7FD463BAEB59CD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\BACE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabD3B5.tmp
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarD3B6.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\7BCE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
There are 8 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\flamo.vir,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\flamo.vir1,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\flamo.vir,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\flamo.vir1,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
academy.haleemcampus.com
|
108.179.232.80
|
|
|
|
psq.com.mx
|
162.241.2.112
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
108.179.232.80
|
academy.haleemcampus.com
|
United States
|
|
|
|
162.241.2.112
|
psq.com.mx
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
in?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
jn?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B5B1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BB2F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BC48
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BD04
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BE1D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4BF07
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3 ?
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
?c7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC68A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC948
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECA03
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECA90
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECB4B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECC06
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1l7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 154 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
218D0700000
|
unkown
|
page read and write
|
|
|
|
7FF564430000
|
unkown
|
page readonly
|
|
|
|
1D96F44E000
|
unkown
|
page read and write
|
|
|
|
1B0EB34C000
|
unkown
|
page read and write
|
|
|
|
7FF51735F000
|
unkown
|
page readonly
|
|
|
|
1B0EB3B9000
|
unkown
|
page read and write
|
|
|
|
1F22000
|
unkown
|
page readonly
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
5810000
|
heap private
|
page read and write
|
|
|
|
7FF516C83000
|
unkown
|
page readonly
|
|
|
|
1B0EAA83000
|
unkown
|
page read and write
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
1D96F502000
|
unkown
|
page read and write
|
|
|
|
7FF555500000
|
unkown
|
page readonly
|
|
|
|
2C9E9D40000
|
heap default
|
page read and write
|
|
|
|
218D0312000
|
unkown
|
page read and write
|
|
|
|
2569000
|
unkown
|
page read and write
|
|
|
|
4000000
|
unkown
|
page read and write
|
|
|
|
7FF5D5A50000
|
unkown
|
page readonly
|
|
|
|
218D1110000
|
unkown
|
page read and write
|
|
|
|
6B5759E000
|
unkown
|
page read and write
|
|
|
|
15589213000
|
unkown
|
page read and write
|
|
|
|
1B0EB861000
|
unkown
|
page read and write
|
|
|
|
7FF5863F6000
|
unkown
|
page readonly
|
|
|
|
218D0311000
|
unkown
|
page read and write
|
|
|
|
1B0EB802000
|
unkown
|
page read and write
|
|
|
|
1BA4000
|
unkown
|
page readonly
|
|
|
|
1B0EB130000
|
unkown
|
page readonly
|
|
|
|
2148BD8C000
|
unkown
|
page read and write
|
|
|
|
2C9EA800000
|
unkown
|
page readonly
|
|
|
|
7FF555515000
|
unkown
|
page readonly
|
|
|
|
2C9EA602000
|
unkown
|
page read and write
|
|
|
|
2C9E9CE0000
|
heap private
|
page read and write
|
|
|
|
218D0642000
|
unkown
|
page read and write
|
|
|
|
1B0EAC00000
|
unkown
|
page readonly
|
|
|
|
1771D5B0000
|
unkown
|
page write copy
|
|
|
|
2148BD7E000
|
unkown
|
page read and write
|
|
|
|
7FF5868A9000
|
unkown
|
page readonly
|
|
|
|
6B5787E000
|
unkown
|
page read and write
|
|
|
|
1D96F370000
|
heap default
|
page read and write
|
|
|
|
254D000
|
unkown
|
page read and write
|
|
|
|
404E000
|
unkown
|
page read and write
|
|
|
|
1D60000
|
unkown
|
page readonly
|
|
|
|
218D0334000
|
unkown
|
page read and write
|
|
|
|
218D039F000
|
unkown
|
page read and write
|
|
|
|
6B57A77000
|
unkown
|
page read and write
|
|
|
|
7FF586794000
|
unkown
|
page readonly
|
|
|
|
1B0EB356000
|
unkown
|
page read and write
|
|
|
|
7FF555740000
|
unkown
|
page readonly
|
|
|
|
218D03A1000
|
unkown
|
page read and write
|
|
|
|
1B0EB34C000
|
unkown
|
page read and write
|
|
|
|
218D0484000
|
unkown
|
page read and write
|
|
|
|
218D0400000
|
unkown
|
page read and write
|
|
|
|
7FF555977000
|
unkown
|
page readonly
|
|
|
|
C6EB3FB000
|
unkown
|
page read and write
|
|
|
|
7FF56FB21000
|
unkown
|
page readonly
|
|
|
|
218CE28B000
|
unkown
|
page read and write
|
|
|
|
1B0EB36B000
|
unkown
|
page read and write
|
|
|
|
7FF56F8FC000
|
unkown
|
page readonly
|
|
|
|
1B0EB353000
|
unkown
|
page read and write
|
|
|
|
1D96F380000
|
unkown
|
page readonly
|
|
|
|
6B57BF7000
|
unkown
|
page read and write
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
2620000
|
unkown
|
page readonly
|
|
|
|
7FF4F9800000
|
unkown
|
page readonly
|
|
|
|
1B0EAA71000
|
unkown
|
page read and write
|
|
|
|
3FB12FB000
|
unkown
|
page read and write
|
|
|
|
1B0EB3A4000
|
unkown
|
page read and write
|
|
|
|
7FF56F541000
|
unkown
|
page readonly
|
|
|
|
1B0EB354000
|
unkown
|
page read and write
|
|
|
|
218D0682000
|
unkown
|
page read and write
|
|
|
|
1771EFC0000
|
unkown
|
page read and write
|
|
|
|
43E0000
|
unkown
|
page read and write
|
|
|
|
1B0EB34F000
|
unkown
|
page read and write
|
|
|
|
100E0F7000
|
unkown
|
page read and write
|
|
|
|
7FF564603000
|
unkown
|
page readonly
|
|
|
|
1B0EB305000
|
unkown
|
page read and write
|
|
|
|
1B0EB352000
|
unkown
|
page read and write
|
|
|
|
1B0EB400000
|
unkown
|
page readonly
|
|
|
|
230D000
|
unkown
|
page read and write
|
|
|
|
1B0EB332000
|
unkown
|
page read and write
|
|
|
|
218D0642000
|
unkown
|
page read and write
|
|
|
|
218D0602000
|
unkown
|
page read and write
|
|
|
|
254D000
|
unkown
|
page read and write
|
|
|
|
2C9E9E5D000
|
unkown
|
page read and write
|
|
|
|
218CE229000
|
unkown
|
page read and write
|
|
|
|
1B0EB352000
|
unkown
|
page read and write
|
|
|
|
1B0EAA00000
|
unkown
|
page read and write
|
|
|
|
2549000
|
unkown
|
page read and write
|
|
|
|
7FF51735C000
|
unkown
|
page readonly
|
|
|
|
2C9EA000000
|
unkown
|
page readonly
|
|
|
|
2148BD5B000
|
heap default
|
page read and write
|
|
|
|
66CAB7A000
|
unkown
|
page read and write
|
|
|
|
7FF5D5ADC000
|
unkown
|
page readonly
|
|
|
|
7FF58607C000
|
unkown
|
page readonly
|
|
|
|
1B0EB0A0000
|
unkown
|
page readonly
|
|
|
|
1B0EB900000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
7FF555945000
|
unkown
|
page readonly
|
|
|
|
2507000
|
heap private
|
page read and write
|
|
|
|
24E0000
|
unkown
|
page readonly
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
7FF555957000
|
unkown
|
page readonly
|
|
|
|
1B0EB373000
|
unkown
|
page read and write
|
|
|
|
3F0F000
|
unkown
|
page read and write
|
|
|
|
218D0600000
|
unkown
|
page read and write
|
|
|
|
15589950000
|
unkown
|
page read and write
|
|
|
|
7FF55501B000
|
unkown
|
page readonly
|
|
|
|
7FF56FA91000
|
unkown
|
page readonly
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
218D037E000
|
unkown
|
page read and write
|
|
|
|
7FF51738E000
|
unkown
|
page readonly
|
|
|
|
218CE2B2000
|
unkown
|
page read and write
|
|
|
|
218CE26C000
|
unkown
|
page read and write
|
|
|
|
1E8F000
|
unkown
|
page readonly
|
|
|
|
218D0642000
|
unkown
|
page read and write
|
|
|
|
7FF58672E000
|
unkown
|
page readonly
|
|
|
|
218CFBF0000
|
unkown
|
page read and write
|
|
|
|
7FF564276000
|
unkown
|
page readonly
|
|
|
|
155896D0000
|
unkown
|
page readonly
|
|
|
|
218CE321000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B29000
|
unkown
|
page readonly
|
|
|
|
7FF56FD2A000
|
unkown
|
page readonly
|
|
|
|
218CE285000
|
unkown
|
page read and write
|
|
|
|
218D1000000
|
unkown
|
page read and write
|
|
|
|
1B0EB373000
|
unkown
|
page read and write
|
|
|
|
2F24000
|
unkown
|
page read and write
|
|
|
|
100DE75000
|
unkown
|
page read and write
|
|
|
|
218D00D0000
|
unkown
|
page read and write
|
|
|
|
254D000
|
unkown
|
page read and write
|
|
|
|
7FF56FC2A000
|
unkown
|
page readonly
|
|
|
|
1B0EB397000
|
unkown
|
page read and write
|
|
|
|
1B0EB354000
|
unkown
|
page read and write
|
|
|
|
1D970140000
|
unkown
|
page readonly
|
|
|
|
7FF586132000
|
unkown
|
page readonly
|
|
|
|
218D0314000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B9A000
|
unkown
|
page readonly
|
|
|
|
1B0EAB13000
|
unkown
|
page read and write
|
|
|
|
C6EB1FB000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B64000
|
unkown
|
page readonly
|
|
|
|
2C9E9F08000
|
unkown
|
page read and write
|
|
|
|
7FF56FA74000
|
unkown
|
page readonly
|
|
|
|
1B0EB32D000
|
unkown
|
page read and write
|
|
|
|
7FF517368000
|
unkown
|
page readonly
|
|
|
|
7FF56FC94000
|
unkown
|
page readonly
|
|
|
|
2C9E9F13000
|
unkown
|
page read and write
|
|
|
|
7FF56F7A2000
|
unkown
|
page readonly
|
|
|
|
1D96F513000
|
unkown
|
page read and write
|
|
|
|
218D0130000
|
unkown
|
page readonly
|
|
|
|
7FF4F9B71000
|
unkown
|
page readonly
|
|
|
|
1B0EB374000
|
unkown
|
page read and write
|
|
|
|
218D03FE000
|
unkown
|
page read and write
|
|
|
|
218D03F4000
|
unkown
|
page read and write
|
|
|
|
7FF56FC0F000
|
unkown
|
page readonly
|
|
|
|
218D03B9000
|
unkown
|
page read and write
|
|
|
|
7FF5D59B3000
|
unkown
|
page readonly
|
|
|
|
6B57AFE000
|
unkown
|
page read and write
|
|
|
|
1B0EB365000
|
unkown
|
page read and write
|
|
|
|
218D030B000
|
unkown
|
page read and write
|
|
|
|
66CAA7E000
|
unkown
|
page read and write
|
|
|
|
2148BD5D000
|
heap default
|
page read and write
|
|
|
|
218D0317000
|
unkown
|
page read and write
|
|
|
|
7FF564704000
|
unkown
|
page readonly
|
|
|
|
1B0EAAFA000
|
unkown
|
page read and write
|
|
|
|
C6EB5FB000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
254E000
|
unkown
|
page read and write
|
|
|
|
1B0EAB02000
|
unkown
|
page read and write
|
|
|
|
3ECE000
|
unkown
|
page read and write
|
|
|
|
7FF5D576C000
|
unkown
|
page readonly
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B72000
|
unkown
|
page readonly
|
|
|
|
66CABFA000
|
unkown
|
page read and write
|
|
|
|
1B0EB333000
|
unkown
|
page read and write
|
|
|
|
7FF5647A1000
|
unkown
|
page readonly
|
|
|
|
7FF517374000
|
unkown
|
page readonly
|
|
|
|
2C9E9E5F000
|
unkown
|
page read and write
|
|
|
|
218D0412000
|
unkown
|
page read and write
|
|
|
|
15589190000
|
heap private
|
page read and write
|
|
|
|
1D96F500000
|
unkown
|
page read and write
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
1771D800000
|
unkown
|
page readonly
|
|
|
|
218CE200000
|
unkown
|
page read and write
|
|
|
|
1E9A000
|
unkown
|
page readonly
|
|
|
|
7FF5D5876000
|
unkown
|
page readonly
|
|
|
|
218CE273000
|
unkown
|
page read and write
|
|
|
|
1B0EB374000
|
unkown
|
page read and write
|
|
|
|
7FF5865A7000
|
unkown
|
page readonly
|
|
|
|
7FF56F917000
|
unkown
|
page readonly
|
|
|
|
218D0050000
|
unkown
|
page read and write
|
|
|
|
7FF5173AD000
|
unkown
|
page readonly
|
|
|
|
7FF555A2A000
|
unkown
|
page readonly
|
|
|
|
7FF555297000
|
unkown
|
page readonly
|
|
|
|
7FF56FC84000
|
unkown
|
page readonly
|
|
|
|
218CE28B000
|
unkown
|
page read and write
|
|
|
|
218D0060000
|
unkown
|
page readonly
|
|
|
|
7FF56FD32000
|
unkown
|
page readonly
|
|
|
|
1771D656000
|
unkown
|
page read and write
|
|
|
|
7FF5558E2000
|
unkown
|
page readonly
|
|
|
|
218CE330000
|
unkown
|
page read and write
|
|
|
|
218D1310000
|
unkown
|
page read and write
|
|
|
|
2148BC70000
|
unkown
|
page read and write
|
|
|
|
C6EAF7B000
|
unkown
|
page read and write
|
|
|
|
218D1010000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AE8000
|
unkown
|
page readonly
|
|
|
|
7FF5D5991000
|
unkown
|
page readonly
|
|
|
|
1B0EB308000
|
unkown
|
page read and write
|
|
|
|
1B0EAA51000
|
unkown
|
page read and write
|
|
|
|
1EB6000
|
unkown
|
page readonly
|
|
|
|
2C9E9F00000
|
unkown
|
page read and write
|
|
|
|
1E87000
|
unkown
|
page readonly
|
|
|
|
1B0EB323000
|
unkown
|
page read and write
|
|
|
|
2C9E9E61000
|
unkown
|
page read and write
|
|
|
|
1B0EB854000
|
unkown
|
page read and write
|
|
|
|
1B0EB373000
|
unkown
|
page read and write
|
|
|
|
1B0EB385000
|
unkown
|
page read and write
|
|
|
|
1B0EB342000
|
unkown
|
page read and write
|
|
|
|
24F0000
|
unkown
|
page read and write
|
|
|
|
C6EB0FA000
|
unkown
|
page read and write
|
|
|
|
1B0EB385000
|
unkown
|
page read and write
|
|
|
|
1B0EAAE6000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
1B0EB398000
|
unkown
|
page read and write
|
|
|
|
218D0702000
|
unkown
|
page read and write
|
|
|
|
218CE23F000
|
unkown
|
page read and write
|
|
|
|
7FF56FA99000
|
unkown
|
page readonly
|
|
|
|
7FF51741A000
|
unkown
|
page readonly
|
|
|
|
7FF5645FD000
|
unkown
|
page readonly
|
|
|
|
1B0EB3C0000
|
unkown
|
page read and write
|
|
|
|
1771D613000
|
unkown
|
page read and write
|
|
|
|
1B0EB374000
|
unkown
|
page read and write
|
|
|
|
1B0EA920000
|
heap default
|
page read and write
|
|
|
|
218D0315000
|
unkown
|
page read and write
|
|
|
|
1B0EB330000
|
unkown
|
page read and write
|
|
|
|
7FF56FB86000
|
unkown
|
page readonly
|
|
|
|
1B0EB385000
|
unkown
|
page read and write
|
|
|
|
1B0EB802000
|
unkown
|
page read and write
|
|
|
|
7FF5556C0000
|
unkown
|
page readonly
|
|
|
|
2C9E9E02000
|
unkown
|
page read and write
|
|
|
|
7FF5D5AE8000
|
unkown
|
page readonly
|
|
|
|
15589F40000
|
unkown
|
page readonly
|
|
|
|
2F1E000
|
unkown
|
page read and write
|
|
|
|
7FF56FB3B000
|
unkown
|
page readonly
|
|
|
|
1B0EB32E000
|
unkown
|
page read and write
|
|
|
|
7FF5173A9000
|
unkown
|
page readonly
|
|
|
|
1E79000
|
unkown
|
page readonly
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
7FF51739E000
|
unkown
|
page readonly
|
|
|
|
218D00D0000
|
unkown
|
page read and write
|
|
|
|
7FF5646E7000
|
unkown
|
page readonly
|
|
|
|
1B0EB383000
|
unkown
|
page read and write
|
|
|
|
1B0EB388000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B26000
|
unkown
|
page readonly
|
|
|
|
7FF4F9ACA000
|
unkown
|
page readonly
|
|
|
|
7FF586884000
|
unkown
|
page readonly
|
|
|
|
7FF564729000
|
unkown
|
page readonly
|
|
|
|
218CE273000
|
unkown
|
page read and write
|
|
|
|
100DC7B000
|
unkown
|
page read and write
|
|
|
|
218CE29B000
|
unkown
|
page read and write
|
|
|
|
7FF4F997E000
|
unkown
|
page readonly
|
|
|
|
7FF5556B7000
|
unkown
|
page readonly
|
|
|
|
7FF5559B9000
|
unkown
|
page readonly
|
|
|
|
7FF4F99D3000
|
unkown
|
page readonly
|
|
|
|
1B0EB3A4000
|
unkown
|
page read and write
|
|
|
|
7FF4F9ADF000
|
unkown
|
page readonly
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
C6EB77F000
|
unkown
|
page read and write
|
|
|
|
218D0432000
|
unkown
|
page read and write
|
|
|
|
C6EB27B000
|
unkown
|
page read and write
|
|
|
|
7FF58679C000
|
unkown
|
page readonly
|
|
|
|
7FF58685F000
|
unkown
|
page readonly
|
|
|
|
218D0742000
|
unkown
|
page read and write
|
|
|
|
1B0EAAA1000
|
unkown
|
page read and write
|
|
|
|
218D1210000
|
unkown
|
page read and write
|
|
|
|
218D00E0000
|
unkown
|
page read and write
|
|
|
|
7FF564614000
|
unkown
|
page readonly
|
|
|
|
1B0EB373000
|
unkown
|
page read and write
|
|
|
|
7FF51733B000
|
unkown
|
page readonly
|
|
|
|
2148BC90000
|
unkown
|
page read and write
|
|
|
|
7FF5D5AF4000
|
unkown
|
page readonly
|
|
|
|
7FF555260000
|
unkown
|
page readonly
|
|
|
|
1B0EAA4F000
|
unkown
|
page read and write
|
|
|
|
7FF55583B000
|
unkown
|
page readonly
|
|
|
|
7FF5D58D1000
|
unkown
|
page readonly
|
|
|
|
3F10000
|
unkown
|
page readonly
|
|
|
|
218D0682000
|
unkown
|
page read and write
|
|
|
|
7FF5868AD000
|
unkown
|
page readonly
|
|
|
|
7FF586867000
|
unkown
|
page readonly
|
|
|
|
218D03E3000
|
unkown
|
page read and write
|
|
|
|
C6EA7AE000
|
unkown
|
page read and write
|
|
|
|
1B0EB334000
|
unkown
|
page read and write
|
|
|
|
1B0EAB08000
|
unkown
|
page read and write
|
|
|
|
218D0324000
|
unkown
|
page read and write
|
|
|
|
1B0EB34D000
|
unkown
|
page read and write
|
|
|
|
15589200000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
1D96F600000
|
unkown
|
page readonly
|
|
|
|
218CE1E0000
|
unkown
|
page readonly
|
|
|
|
7FF517335000
|
unkown
|
page readonly
|
|
|
|
1F05000
|
unkown
|
page readonly
|
|
|
|
6B57DF8000
|
unkown
|
page read and write
|
|
|
|
218CE302000
|
unkown
|
page read and write
|
|
|
|
1E6C000
|
unkown
|
page readonly
|
|
|
|
1B0EB3A4000
|
unkown
|
page read and write
|
|
|
|
218D0369000
|
unkown
|
page read and write
|
|
|
|
1EA1000
|
unkown
|
page readonly
|
|
|
|
218D1110000
|
unkown
|
page read and write
|
|
|
|
1F33000
|
unkown
|
page readonly
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
1B0EB3A4000
|
unkown
|
page read and write
|
|
|
|
1E55000
|
unkown
|
page readonly
|
|
|
|
C6EB67C000
|
unkown
|
page read and write
|
|
|
|
1771D602000
|
unkown
|
page read and write
|
|
|
|
1B0EB374000
|
unkown
|
page read and write
|
|
|
|
E74E2FE000
|
unkown
|
page read and write
|
|
|
|
3FB0DAB000
|
unkown
|
page read and write
|
|
|
|
7FF55599F000
|
unkown
|
page readonly
|
|
|
|
218D1310000
|
unkown
|
page read and write
|
|
|
|
7FF5554B2000
|
unkown
|
page readonly
|
|
|
|
218D1410000
|
unkown
|
page read and write
|
|
|
|
2148BCD0000
|
unkown
|
page readonly
|
|
|
|
E74E1F7000
|
unkown
|
page read and write
|
|
|
|
518B97C000
|
unkown
|
page read and write
|
|
|
|
1B0EB34E000
|
unkown
|
page read and write
|
|
|
|
7FF56FBDC000
|
unkown
|
page readonly
|
|
|
|
7FF5D5B94000
|
unkown
|
page readonly
|
|
|
|
218D030F000
|
unkown
|
page read and write
|
|
|
|
7FF586914000
|
unkown
|
page readonly
|
|
|
|
1B0EB352000
|
unkown
|
page read and write
|
|
|
|
7FF58672B000
|
unkown
|
page readonly
|
|
|
|
218D0800000
|
unkown
|
page readonly
|
|
|
|
7FF517330000
|
unkown
|
page readonly
|
|
|
|
100E1FE000
|
unkown
|
page read and write
|
|
|
|
7FF56FCAE000
|
unkown
|
page readonly
|
|
|
|
1B0EB37C000
|
unkown
|
page read and write
|
|
|
|
6B57F7F000
|
unkown
|
page read and write
|
|
|
|
218CE320000
|
unkown
|
page read and write
|
|
|
|
C6EB07B000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AD4000
|
unkown
|
page readonly
|
|
|
|
2569000
|
unkown
|
page read and write
|
|
|
|
7FF56FBE0000
|
unkown
|
page readonly
|
|
|
|
E74DBBB000
|
unkown
|
page read and write
|
|
|
|
218CE361000
|
unkown
|
page read and write
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
7FF555791000
|
unkown
|
page readonly
|
|
|
|
218D04A5000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AB7000
|
unkown
|
page readonly
|
|
|
|
5830000
|
unkown
|
page read and write
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
1B0EB31F000
|
unkown
|
page read and write
|
|
|
|
218CE2C3000
|
unkown
|
page read and write
|
|
|
|
518B6FF000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B2D000
|
unkown
|
page readonly
|
|
|
|
1E8D000
|
unkown
|
page readonly
|
|
|
|
254E000
|
unkown
|
page read and write
|
|
|
|
218CE313000
|
unkown
|
page read and write
|
|
|
|
218CE100000
|
heap default
|
page read and write
|
|
|
|
7FF55588D000
|
unkown
|
page readonly
|
|
|
|
7FF56FC3A000
|
unkown
|
page readonly
|
|
|
|
218CE2EE000
|
unkown
|
page read and write
|
|
|
|
1B0EB325000
|
unkown
|
page read and write
|
|
|
|
250A000
|
heap private
|
page read and write
|
|
|
|
7FF56FB8D000
|
unkown
|
page readonly
|
|
|
|
518B7FF000
|
unkown
|
page read and write
|
|
|
|
1B0EB344000
|
unkown
|
page read and write
|
|
|
|
1B0EB800000
|
unkown
|
page read and write
|
|
|
|
7FF5646C7000
|
unkown
|
page readonly
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
15589308000
|
unkown
|
page read and write
|
|
|
|
1B0EB367000
|
unkown
|
page read and write
|
|
|
|
2545000
|
unkown
|
page read and write
|
|
|
|
1B0EB325000
|
unkown
|
page read and write
|
|
|
|
252A000
|
heap default
|
page read and write
|
|
|
|
218CE400000
|
unkown
|
page write copy
|
|
|
|
1B0EB367000
|
unkown
|
page read and write
|
|
|
|
100DFFE000
|
unkown
|
page read and write
|
|
|
|
1B0EB305000
|
unkown
|
page read and write
|
|
|
|
7FF56FBE2000
|
unkown
|
page readonly
|
|
|
|
1B0EAA8B000
|
unkown
|
page read and write
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
7FF564794000
|
unkown
|
page readonly
|
|
|
|
218D04A4000
|
unkown
|
page read and write
|
|
|
|
1E29000
|
unkown
|
page readonly
|
|
|
|
7FF5D58D5000
|
unkown
|
page readonly
|
|
|
|
2C9E9E00000
|
unkown
|
page read and write
|
|
|
|
1B0EB365000
|
unkown
|
page read and write
|
|
|
|
1B0EB344000
|
unkown
|
page read and write
|
|
|
|
1D96F390000
|
unkown
|
page readonly
|
|
|
|
1B0EB140000
|
unkown
|
page read and write
|
|
|
|
218D037A000
|
unkown
|
page read and write
|
|
|
|
1B0EAA53000
|
unkown
|
page read and write
|
|
|
|
1771D4D0000
|
heap default
|
page read and write
|
|
|
|
1D96FE00000
|
unkown
|
page readonly
|
|
|
|
1771D629000
|
unkown
|
page read and write
|
|
|
|
1B0EB384000
|
unkown
|
page read and write
|
|
|
|
24D0000
|
unkown
|
page readonly
|
|
|
|
1B0EB325000
|
unkown
|
page read and write
|
|
|
|
15589255000
|
unkown
|
page read and write
|
|
|
|
7FF517398000
|
unkown
|
page readonly
|
|
|
|
1B0EB367000
|
unkown
|
page read and write
|
|
|
|
218D00D0000
|
unkown
|
page read and write
|
|
|
|
6B58179000
|
unkown
|
page read and write
|
|
|
|
1EB2000
|
unkown
|
page readonly
|
|
|
|
7FF58688F000
|
unkown
|
page readonly
|
|
|
|
1B0EAA13000
|
unkown
|
page read and write
|
|
|
|
218CE287000
|
unkown
|
page read and write
|
|
|
|
C6EAA7E000
|
unkown
|
page read and write
|
|
|
|
7FF5556FB000
|
unkown
|
page readonly
|
|
|
|
1B0EB356000
|
unkown
|
page read and write
|
|
|
|
3FB10FE000
|
unkown
|
page read and write
|
|
|
|
218D03FE000
|
unkown
|
page read and write
|
|
|
|
7FF4F9A6A000
|
unkown
|
page readonly
|
|
|
|
7FF58687A000
|
unkown
|
page readonly
|
|
|
|
1558928A000
|
unkown
|
page read and write
|
|
|
|
7FF5645AB000
|
unkown
|
page readonly
|
|
|
|
7FF56FD31000
|
unkown
|
page readonly
|
|
|
|
C6EA72B000
|
unkown
|
page read and write
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
7FF5D59B8000
|
unkown
|
page readonly
|
|
|
|
7FF555848000
|
unkown
|
page readonly
|
|
|
|
218CE2ED000
|
unkown
|
page read and write
|
|
|
|
1B0EB32F000
|
unkown
|
page read and write
|
|
|
|
C6EAEF9000
|
unkown
|
page read and write
|
|
|
|
218D0070000
|
heap private
|
page read and write
|
|
|
|
7FF56FA61000
|
unkown
|
page readonly
|
|
|
|
7FF586898000
|
unkown
|
page readonly
|
|
|
|
7FF56FC77000
|
unkown
|
page readonly
|
|
|
|
218CE213000
|
unkown
|
page read and write
|
|
|
|
1B0EA930000
|
unkown
|
page readonly
|
|
|
|
7FF55593E000
|
unkown
|
page readonly
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
2C9E9D50000
|
unkown
|
page readonly
|
|
|
|
7FF555557000
|
unkown
|
page readonly
|
|
|
|
100E2FF000
|
unkown
|
page read and write
|
|
|
|
1D96F43C000
|
unkown
|
page read and write
|
|
|
|
2148BD75000
|
unkown
|
page read and write
|
|
|
|
7FF586921000
|
unkown
|
page readonly
|
|
|
|
1B0EB3C8000
|
unkown
|
page read and write
|
|
|
|
218D00D0000
|
unkown
|
page read and write
|
|
|
|
C6EAD79000
|
unkown
|
page read and write
|
|
|
|
218D1410000
|
unkown
|
page read and write
|
|
|
|
7FF555893000
|
unkown
|
page readonly
|
|
|
|
1B0EB336000
|
unkown
|
page read and write
|
|
|
|
7FF56F9FB000
|
unkown
|
page readonly
|
|
|
|
1B0EB300000
|
unkown
|
page read and write
|
|
|
|
7FF5D5A73000
|
unkown
|
page readonly
|
|
|
|
1771F0C0000
|
unkown
|
page readonly
|
|
|
|
2551000
|
unkown
|
page read and write
|
|
|
|
1B0EAA4C000
|
unkown
|
page read and write
|
|
|
|
2148BE50000
|
unkown
|
page readonly
|
|
|
|
1D96F42A000
|
unkown
|
page read and write
|
|
|
|
100DD7E000
|
unkown
|
page read and write
|
|
|
|
1E85000
|
unkown
|
page readonly
|
|
|
|
1B0EB3A5000
|
unkown
|
page read and write
|
|
|
|
40A0000
|
unkown
|
page readonly
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
7FF555843000
|
unkown
|
page readonly
|
|
|
|
2148BBA0000
|
unkown
|
page readonly
|
|
|
|
C6EAFFA000
|
unkown
|
page read and write
|
|
|
|
1B0EB30F000
|
unkown
|
page read and write
|
|
|
|
1B0EB397000
|
unkown
|
page read and write
|
|
|
|
7FF586835000
|
unkown
|
page readonly
|
|
|
|
218CE273000
|
unkown
|
page read and write
|
|
|
|
218D0602000
|
unkown
|
page read and write
|
|
|
|
2311000
|
unkown
|
page read and write
|
|
|
|
21FB000
|
unkown
|
page read and write
|
|
|
|
218CE2EF000
|
unkown
|
page read and write
|
|
|
|
1B0EB36A000
|
unkown
|
page read and write
|
|
|
|
518B879000
|
unkown
|
page read and write
|
|
|
|
1B0EB160000
|
unkown
|
page readonly
|
|
|
|
15589302000
|
unkown
|
page read and write
|
|
|
|
1771D600000
|
unkown
|
page read and write
|
|
|
|
218D0361000
|
unkown
|
page read and write
|
|
|
|
218CE31D000
|
unkown
|
page read and write
|
|
|
|
7FF555293000
|
unkown
|
page readonly
|
|
|
|
7FF55593A000
|
unkown
|
page readonly
|
|
|
|
218D04C7000
|
unkown
|
page read and write
|
|
|
|
5814000
|
heap private
|
page read and write
|
|
|
|
1B0EB3A4000
|
unkown
|
page read and write
|
|
|
|
7FF58677D000
|
unkown
|
page readonly
|
|
|
|
1B0EB802000
|
unkown
|
page read and write
|
|
|
|
7FF56FC3E000
|
unkown
|
page readonly
|
|
|
|
15589202000
|
unkown
|
page read and write
|
|
|
|
218D03DB000
|
unkown
|
page read and write
|
|
|
|
1D96F6D0000
|
unkown
|
page readonly
|
|
|
|
1D96F508000
|
unkown
|
page read and write
|
|
|
|
7FF564726000
|
unkown
|
page readonly
|
|
|
|
1B0EB373000
|
unkown
|
page read and write
|
|
|
|
C6EABFE000
|
unkown
|
page read and write
|
|
|
|
7FF56FB48000
|
unkown
|
page readonly
|
|
|
|
15589400000
|
unkown
|
page readonly
|
|
|
|
7FF5646B5000
|
unkown
|
page readonly
|
|
|
|
7FF4F9A85000
|
unkown
|
page readonly
|
|
|
|
7FF586830000
|
unkown
|
page readonly
|
|
|
|
7FF56FC40000
|
unkown
|
page readonly
|
|
|
|
1B0EAABD000
|
unkown
|
page read and write
|
|
|
|
7FF5866D3000
|
unkown
|
page readonly
|
|
|
|
1E93000
|
unkown
|
page readonly
|
|
|
|
1B0EAAEC000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
218CE26E000
|
unkown
|
page read and write
|
|
|
|
1B0EB3A4000
|
unkown
|
page read and write
|
|
|
|
6B5751B000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
7FF586405000
|
unkown
|
page readonly
|
|
|
|
7FF555706000
|
unkown
|
page readonly
|
|
|
|
7FF586847000
|
unkown
|
page readonly
|
|
|
|
7FF5558E0000
|
unkown
|
page readonly
|
|
|
|
7FF5D5ADF000
|
unkown
|
page readonly
|
|
|
|
7FF55596F000
|
unkown
|
page readonly
|
|
|
|
1B0EB354000
|
unkown
|
page read and write
|
|
|
|
1D12000
|
unkown
|
page readonly
|
|
|
|
E74E0FB000
|
unkown
|
page read and write
|
|
|
|
1B0EB388000
|
unkown
|
page read and write
|
|
|
|
7FF5646BB000
|
unkown
|
page readonly
|
|
|
|
1B0EB802000
|
unkown
|
page read and write
|
|
|
|
1558923C000
|
unkown
|
page read and write
|
|
|
|
1B0EB305000
|
unkown
|
page read and write
|
|
|
|
218CE363000
|
unkown
|
page read and write
|
|
|
|
7FF4F9A7E000
|
unkown
|
page readonly
|
|
|
|
7FF563D8B000
|
unkown
|
page readonly
|
|
|
|
1B0EAA3C000
|
unkown
|
page read and write
|
|
|
|
7FF5557E3000
|
unkown
|
page readonly
|
|
|
|
7FF56479A000
|
unkown
|
page readonly
|
|
|
|
1B0EB37C000
|
unkown
|
page read and write
|
|
|
|
218CE2EB000
|
unkown
|
page read and write
|
|
|
|
2C9E9E50000
|
unkown
|
page read and write
|
|
|
|
7FF56FC2C000
|
unkown
|
page readonly
|
|
|
|
C6EB47B000
|
unkown
|
page read and write
|
|
|
|
1B0EB389000
|
unkown
|
page read and write
|
|
|
|
7FF56FA18000
|
unkown
|
page readonly
|
|
|
|
7FF4F9A8B000
|
unkown
|
page readonly
|
|
|
|
2F1A000
|
unkown
|
page read and write
|
|
|
|
1B0EB3C8000
|
unkown
|
page read and write
|
|
|
|
218CE2C7000
|
unkown
|
page read and write
|
|
|
|
1B0EB080000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AAF000
|
unkown
|
page readonly
|
|
|
|
254A000
|
unkown
|
page read and write
|
|
|
|
7FF564553000
|
unkown
|
page readonly
|
|
|
|
7FF555506000
|
unkown
|
page readonly
|
|
|
|
1B0EBA00000
|
unkown
|
page readonly
|
|
|
|
218D034E000
|
unkown
|
page read and write
|
|
|
|
7FF516C87000
|
unkown
|
page readonly
|
|
|
|
1B0EB3B5000
|
unkown
|
page read and write
|
|
|
|
7FF56469C000
|
unkown
|
page readonly
|
|
|
|
218D1410000
|
unkown
|
page read and write
|
|
|
|
1E5C000
|
unkown
|
page readonly
|
|
|
|
2148BD7E000
|
unkown
|
page read and write
|
|
|
|
E74E4FF000
|
unkown
|
page read and write
|
|
|
|
218CE330000
|
unkown
|
page read and write
|
|
|
|
15589C00000
|
unkown
|
page readonly
|
|
|
|
7FF4F99EC000
|
unkown
|
page readonly
|
|
|
|
7FF5646DC000
|
unkown
|
page readonly
|
|
|
|
5820000
|
unkown
|
page readonly
|
|
|
|
3FB107E000
|
unkown
|
page read and write
|
|
|
|
7FF5D577F000
|
unkown
|
page readonly
|
|
|
|
7FF4F9AAC000
|
unkown
|
page readonly
|
|
|
|
218D1010000
|
unkown
|
page read and write
|
|
|
|
7FF564718000
|
unkown
|
page readonly
|
|
|
|
C6EACFC000
|
unkown
|
page read and write
|
|
|
|
1B0EB344000
|
unkown
|
page read and write
|
|
|
|
7FF56FC57000
|
unkown
|
page readonly
|
|
|
|
408F000
|
unkown
|
page read and write
|
|
|
|
7FF555781000
|
unkown
|
page readonly
|
|
|
|
7FF516C50000
|
unkown
|
page readonly
|
|
|
|
218CE2FB000
|
unkown
|
page read and write
|
|
|
|
2148BD76000
|
unkown
|
page read and write
|
|
|
|
218CE29A000
|
unkown
|
page read and write
|
|
|
|
1B0EB150000
|
unkown
|
page read and write
|
|
|
|
7FF56FB43000
|
unkown
|
page readonly
|
|
|
|
7FF555821000
|
unkown
|
page readonly
|
|
|
|
218D0339000
|
unkown
|
page read and write
|
|
|
|
1B0EB352000
|
unkown
|
page read and write
|
|
|
|
7FF56F90F000
|
unkown
|
page readonly
|
|
|
|
7FF56FC14000
|
unkown
|
page readonly
|
|
|
|
7FF4F9A7A000
|
unkown
|
page readonly
|
|
|
|
7FF517421000
|
unkown
|
page readonly
|
|
|
|
1D96F467000
|
unkown
|
page read and write
|
|
|
|
1B0EB336000
|
unkown
|
page read and write
|
|
|
|
7FF4F9B6A000
|
unkown
|
page readonly
|
|
|
|
7FF4F9AF6000
|
unkown
|
page readonly
|
|
|
|
1B0EB33A000
|
unkown
|
page read and write
|
|
|
|
1B0EB34C000
|
unkown
|
page read and write
|
|
|
|
7FF58689E000
|
unkown
|
page readonly
|
|
|
|
7FF4F9AF9000
|
unkown
|
page readonly
|
|
|
|
7FF5D5A52000
|
unkown
|
page readonly
|
|
|
|
243B000
|
unkown
|
page read and write
|
|
|
|
1F33000
|
unkown
|
page readonly
|
|
|
|
7FF56FA06000
|
unkown
|
page readonly
|
|
|
|
7FF56FC03000
|
unkown
|
page readonly
|
|
|
|
1B0EB34E000
|
unkown
|
page read and write
|
|
|
|
1B0EB346000
|
unkown
|
page read and write
|
|
|
|
7FF55541E000
|
unkown
|
page readonly
|
|
|
|
7FF555555000
|
unkown
|
page readonly
|
|
|
|
7FF56FC1F000
|
unkown
|
page readonly
|
|
|
|
7FF4F9646000
|
unkown
|
page readonly
|
|
|
|
7FF5554AE000
|
unkown
|
page readonly
|
|
|
|
1F14000
|
unkown
|
page readonly
|
|
|
|
7FF4F9A6C000
|
unkown
|
page readonly
|
|
|
|
7FF555914000
|
unkown
|
page readonly
|
|
|
|
7FF564501000
|
unkown
|
page readonly
|
|
|
|
7FF5646AA000
|
unkown
|
page readonly
|
|
|
|
7FF5D5AFA000
|
unkown
|
page readonly
|
|
|
|
7FF58683B000
|
unkown
|
page readonly
|
|
|
|
218D1310000
|
unkown
|
page read and write
|
|
|
|
218D1110000
|
unkown
|
page read and write
|
|
|
|
218CE0A0000
|
heap private
|
page read and write
|
|
|
|
1B0EB366000
|
unkown
|
page read and write
|
|
|
|
1B0EA8C0000
|
heap private
|
page read and write
|
|
|
|
7FF56FBD2000
|
unkown
|
page readonly
|
|
|
|
7FF4F97F7000
|
unkown
|
page readonly
|
|
|
|
1B0EAB16000
|
unkown
|
page read and write
|
|
|
|
7FF51737A000
|
unkown
|
page readonly
|
|
|
|
7FF4F915B000
|
unkown
|
page readonly
|
|
|
|
1D96F462000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AFD000
|
unkown
|
page readonly
|
|
|
|
2753000
|
unkown
|
page readonly
|
|
|
|
7FF4F98D1000
|
unkown
|
page readonly
|
|
|
|
7FF555984000
|
unkown
|
page readonly
|
|
|
|
7FF5559B6000
|
unkown
|
page readonly
|
|
|
|
7FF5D5AB0000
|
unkown
|
page readonly
|
|
|
|
1B0EB333000
|
unkown
|
page read and write
|
|
|
|
2C9E9E13000
|
unkown
|
page read and write
|
|
|
|
2C9E9E58000
|
unkown
|
page read and write
|
|
|
|
7FF55592A000
|
unkown
|
page readonly
|
|
|
|
218CE2B2000
|
unkown
|
page read and write
|
|
|
|
2148BD90000
|
unkown
|
page read and write
|
|
|
|
6B57CFE000
|
unkown
|
page read and write
|
|
|
|
C6EB17B000
|
unkown
|
page read and write
|
|
|
|
1D96F3A0000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
7FF5557EA000
|
unkown
|
page readonly
|
|
|
|
5750000
|
unkown
|
page readonly
|
|
|
|
2F1D000
|
unkown
|
page read and write
|
|
|
|
1558928E000
|
unkown
|
page read and write
|
|
|
|
C6EB37B000
|
unkown
|
page read and write
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
218D030E000
|
unkown
|
page read and write
|
|
|
|
7FF5863F0000
|
unkown
|
page readonly
|
|
|
|
7FF56FA76000
|
unkown
|
page readonly
|
|
|
|
7FF56FC6F000
|
unkown
|
page readonly
|
|
|
|
1B0EB378000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B18000
|
unkown
|
page readonly
|
|
|
|
7FF56472D000
|
unkown
|
page readonly
|
|
|
|
218D0336000
|
unkown
|
page read and write
|
|
|
|
1B0EB32D000
|
unkown
|
page read and write
|
|
|
|
7FF4F9640000
|
unkown
|
page readonly
|
|
|
|
7FF564270000
|
unkown
|
page readonly
|
|
|
|
7FF56FCB6000
|
unkown
|
page readonly
|
|
|
|
7FF5D5B0E000
|
unkown
|
page readonly
|
|
|
|
218CE255000
|
unkown
|
page read and write
|
|
|
|
2C9E9D70000
|
unkown
|
page read and write
|
|
|
|
1B0EB391000
|
unkown
|
page read and write
|
|
|
|
1B0EB394000
|
unkown
|
page read and write
|
|
|
|
7FF5558AC000
|
unkown
|
page readonly
|
|
|
|
1B0EAAE9000
|
unkown
|
page read and write
|
|
|
|
1B0EB326000
|
unkown
|
page read and write
|
|
|
|
E74DE7E000
|
unkown
|
page read and write
|
|
|
|
1B0EB861000
|
unkown
|
page read and write
|
|
|
|
7FF5D5BA2000
|
unkown
|
page readonly
|
|
|
|
254D000
|
unkown
|
page read and write
|
|
|
|
218CE28B000
|
unkown
|
page read and write
|
|
|
|
218CE2EC000
|
unkown
|
page read and write
|
|
|
|
7FF56F90A000
|
unkown
|
page readonly
|
|
|
|
7FF56FC9E000
|
unkown
|
page readonly
|
|
|
|
2520000
|
heap default
|
page read and write
|
|
|
|
7FF555940000
|
unkown
|
page readonly
|
|
|
|
518B8FE000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B21000
|
unkown
|
page readonly
|
|
|
|
2C9E9D60000
|
unkown
|
page readonly
|
|
|
|
66CA7FB000
|
unkown
|
page read and write
|
|
|
|
1B0EB36A000
|
unkown
|
page read and write
|
|
|
|
7FF56FCB1000
|
unkown
|
page readonly
|
|
|
|
1D96F483000
|
unkown
|
page read and write
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
1B0EB385000
|
unkown
|
page read and write
|
|
|
|
7FF586711000
|
unkown
|
page readonly
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
7FF555A32000
|
unkown
|
page readonly
|
|
|
|
1B0EB802000
|
unkown
|
page read and write
|
|
|
|
2148BD8F000
|
unkown
|
page read and write
|
|
|
|
1B0EB384000
|
unkown
|
page read and write
|
|
|
|
218D00F0000
|
unkown
|
page read and write
|
|
|
|
1B0EB3B5000
|
unkown
|
page read and write
|
|
|
|
218D0682000
|
unkown
|
page read and write
|
|
|
|
1B0EB323000
|
unkown
|
page read and write
|
|
|
|
218CE110000
|
unkown
|
page readonly
|
|
|
|
7FF58681C000
|
unkown
|
page readonly
|
|
|
|
7FF4F997B000
|
unkown
|
page readonly
|
|
|
|
7FF586922000
|
unkown
|
page readonly
|
|
|
|
2C9E9E3C000
|
unkown
|
page read and write
|
|
|
|
7FF555774000
|
unkown
|
page readonly
|
|
|
|
2148BCC0000
|
unkown
|
page readonly
|
|
|
|
7FF55592C000
|
unkown
|
page readonly
|
|
|
|
C6EB57A000
|
unkown
|
page read and write
|
|
|
|
7FF555241000
|
unkown
|
page readonly
|
|
|
|
2545000
|
unkown
|
page read and write
|
|
|
|
7FF55590F000
|
unkown
|
page readonly
|
|
|
|
7FF5868A6000
|
unkown
|
page readonly
|
|
|
|
218D03CA000
|
unkown
|
page read and write
|
|
|
|
7FF5554A2000
|
unkown
|
page readonly
|
|
|
|
218D03D3000
|
unkown
|
page read and write
|
|
|
|
7FF5D5ABB000
|
unkown
|
page readonly
|
|
|
|
218D0543000
|
unkown
|
page read and write
|
|
|
|
7FF5559AE000
|
unkown
|
page readonly
|
|
|
|
1D96FC02000
|
unkown
|
page read and write
|
|
|
|
1B0EB374000
|
unkown
|
page read and write
|
|
|
|
3FB1477000
|
unkown
|
page read and write
|
|
|
|
1E3A000
|
unkown
|
page readonly
|
|
|
|
7FF517384000
|
unkown
|
page readonly
|
|
|
|
2148BD7E000
|
unkown
|
page read and write
|
|
|
|
1B0EB360000
|
unkown
|
page read and write
|
|
|
|
7FF5647A2000
|
unkown
|
page readonly
|
|
|
|
218D0453000
|
unkown
|
page read and write
|
|
|
|
7FF5D5909000
|
unkown
|
page readonly
|
|
|
|
2148BD66000
|
unkown
|
page read and write
|
|
|
|
7FF56FCA8000
|
unkown
|
page readonly
|
|
|
|
7FF5D577A000
|
unkown
|
page readonly
|
|
|
|
7FF56FC4B000
|
unkown
|
page readonly
|
|
|
|
7FF56FD24000
|
unkown
|
page readonly
|
|
|
|
1771D470000
|
heap private
|
page read and write
|
|
|
|
1B0EB140000
|
unkown
|
page read and write
|
|
|
|
7FF564427000
|
unkown
|
page readonly
|
|
|
|
3FB11F5000
|
unkown
|
page read and write
|
|
|
|
1B0EAAC4000
|
unkown
|
page read and write
|
|
|
|
1B0EB3B9000
|
unkown
|
page read and write
|
|
|
|
218D0100000
|
unkown
|
page read and write
|
|
|
|
1B0EB398000
|
unkown
|
page read and write
|
|
|
|
15589A02000
|
unkown
|
page read and write
|
|
|
|
E74E3FC000
|
unkown
|
page read and write
|
|
|
|
218D1010000
|
unkown
|
page read and write
|
|
|
|
1D96F400000
|
unkown
|
page read and write
|
|
|
|
7FF56FC0B000
|
unkown
|
page readonly
|
|
|
|
7FF55591F000
|
unkown
|
page readonly
|
|
|
|
7FF564591000
|
unkown
|
page readonly
|
|
|
|
1B0EB36A000
|
unkown
|
page read and write
|
|
|
|
218D0336000
|
unkown
|
page read and write
|
|
|
|
3FB167E000
|
unkown
|
page read and write
|
|
|
|
7FF58691A000
|
unkown
|
page readonly
|
|
|
|
66CAAFE000
|
unkown
|
page read and write
|
|
|
|
1B0EB902000
|
unkown
|
page read and write
|
|
|
|
1B0EB378000
|
unkown
|
page read and write
|
|
|
|
C6EAE7B000
|
unkown
|
page read and write
|
|
|
|
1B0EB351000
|
unkown
|
page read and write
|
|
|
|
218D0583000
|
unkown
|
page read and write
|
|
|
|
7FF56FC6C000
|
unkown
|
page readonly
|
|
|
|
1B0EAAA5000
|
unkown
|
page read and write
|
|
|
|
1B0EB326000
|
unkown
|
page read and write
|
|
|
|
1B0EB802000
|
unkown
|
page read and write
|
|
|
|
7FF56FA65000
|
unkown
|
page readonly
|
|
|
|
1F28000
|
unkown
|
page readonly
|
|
|
|
1E33000
|
unkown
|
page readonly
|
|
|
|
C6EAC7E000
|
unkown
|
page read and write
|
|
|
|
7FF58682A000
|
unkown
|
page readonly
|
|
|
|
7FF5558A4000
|
unkown
|
page readonly
|
|
|
|
7FF5D5AC7000
|
unkown
|
page readonly
|
|
|
|
1B0EB336000
|
unkown
|
page read and write
|
|
|
|
66CAD7D000
|
unkown
|
page read and write
|
|
|
|
1B0EB344000
|
unkown
|
page read and write
|
|
|
|
24C0000
|
heap default
|
page read and write
|
|
|
|
7FF4F9655000
|
unkown
|
page readonly
|
|
|
|
1B0EB384000
|
unkown
|
page read and write
|
|
|
|
2C9E9E8B000
|
unkown
|
page read and write
|
|
|
|
2C9E9E5B000
|
unkown
|
page read and write
|
|
|
|
218D1410000
|
unkown
|
page read and write
|
|
|
|
1E9F000
|
unkown
|
page readonly
|
|
|
|
100DCFE000
|
unkown
|
page read and write
|
|
|
|
1B0EB333000
|
unkown
|
page read and write
|
|
|
|
1B0EB353000
|
unkown
|
page read and write
|
|
|
|
2549000
|
unkown
|
page read and write
|
|
|
|
7FF58681A000
|
unkown
|
page readonly
|
|
|
|
218CE2A6000
|
unkown
|
page read and write
|
|
|
|
1B0EB323000
|
unkown
|
page read and write
|
|
|
|
7FF4F9A97000
|
unkown
|
page readonly
|
|
|
|
1B0EB34D000
|
unkown
|
page read and write
|
|
|
|
1771D63F000
|
unkown
|
page read and write
|
|
|
|
2C9E9E29000
|
unkown
|
page read and write
|
|
|
|
1771DA00000
|
unkown
|
page readonly
|
|
|
|
7FF517422000
|
unkown
|
page readonly
|
|
|
|
1B0EB342000
|
unkown
|
page read and write
|
|
|
|
218D0202000
|
unkown
|
page read and write
|
|
|
|
1B0EB389000
|
unkown
|
page read and write
|
|
|
|
1771D4E0000
|
unkown
|
page readonly
|
|
|
|
6B5807A000
|
unkown
|
page read and write
|
|
|
|
1558922A000
|
unkown
|
page read and write
|
|
|
|
1B0EB3B5000
|
unkown
|
page read and write
|
|
|
|
7FF56FA1F000
|
unkown
|
page readonly
|
|
|
|
1B0EB070000
|
unkown
|
page readonly
|
|
|
|
1F01000
|
unkown
|
page readonly
|
|
|
|
1B0EAA29000
|
unkown
|
page read and write
|
|
|
|
218CE372000
|
unkown
|
page read and write
|
|
|
|
1E70000
|
unkown
|
page readonly
|
|
|
|
218D0682000
|
unkown
|
page read and write
|
|
|
|
1558926C000
|
unkown
|
page read and write
|
|
|
|
66CACF9000
|
unkown
|
page read and write
|
|
|
|
7FF56FC45000
|
unkown
|
page readonly
|
|
|
|
2148BCE0000
|
heap private
|
page read and write
|
|
|
|
1B0EAA50000
|
unkown
|
page read and write
|
|
|
|
7FF5646DF000
|
unkown
|
page readonly
|
|
|
|
66CAC7F000
|
unkown
|
page read and write
|
|
|
|
1558924F000
|
unkown
|
page read and write
|
|
|
|
1E4D000
|
unkown
|
page readonly
|
|
|
|
7FF4F9923000
|
unkown
|
page readonly
|
|
|
|
7FF56469A000
|
unkown
|
page readonly
|
|
|
|
7FF55594B000
|
unkown
|
page readonly
|
|
|
|
518B77F000
|
unkown
|
page read and write
|
|
|
|
7FF56470F000
|
unkown
|
page readonly
|
|
|
|
1B0EB315000
|
unkown
|
page read and write
|
|
|
|
2500000
|
heap private
|
page read and write
|
|
|
|
7FF5D5AB5000
|
unkown
|
page readonly
|
|
|
|
7FF5646B0000
|
unkown
|
page readonly
|
|
|
|
15589940000
|
unkown
|
page readonly
|
|
|
|
218CE2A6000
|
unkown
|
page read and write
|
|
|
|
7FF5D5787000
|
unkown
|
page readonly
|
|
|
|
1B2E000
|
unkown
|
page readonly
|
|
|
|
1D96F310000
|
heap private
|
page read and write
|
|
|
|
7FF586681000
|
unkown
|
page readonly
|
|
|
|
7FF5646FA000
|
unkown
|
page readonly
|
|
|
|
1B0EAAB0000
|
unkown
|
page read and write
|
|
|
|
2C9E9E5A000
|
unkown
|
page read and write
|
|
|
|
218D0110000
|
unkown
|
page readonly
|
|
|
|
6B57EF8000
|
unkown
|
page read and write
|
|
|
|
218CE2D8000
|
unkown
|
page read and write
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
1B0EB3A4000
|
unkown
|
page read and write
|
|
|
|
218CFCF0000
|
unkown
|
page readonly
|
|
|
|
1D96F413000
|
unkown
|
page read and write
|
|
|
|
518B67A000
|
unkown
|
page read and write
|
|
|
|
7FF55583E000
|
unkown
|
page readonly
|
|
|
|
7FF4F99E4000
|
unkown
|
page readonly
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
218CE362000
|
unkown
|
page read and write
|
|
|
|
1B0EB335000
|
unkown
|
page read and write
|
|
|
|
7FF55590B000
|
unkown
|
page readonly
|
|
|
|
7FF564285000
|
unkown
|
page readonly
|
|
|
|
7FF56461C000
|
unkown
|
page readonly
|
|
|
|
1E63000
|
unkown
|
page readonly
|
|
|
|
1B0EB394000
|
unkown
|
page read and write
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
1B0EB384000
|
unkown
|
page read and write
|
|
|
|
2148BD50000
|
heap default
|
page read and write
|
|
|
|
7FF58682E000
|
unkown
|
page readonly
|
|
|
|
4090000
|
unkown
|
page read and write
|
|
|
|
7FF56F819000
|
unkown
|
page readonly
|
|
|
|
7FF4F9961000
|
unkown
|
page readonly
|
|
|
|
7FF56471E000
|
unkown
|
page readonly
|
|
|
|
C6EB6FB000
|
unkown
|
page read and write
|
|
|
|
2F21000
|
unkown
|
page read and write
|
|
|
|
1B0EB8A6000
|
unkown
|
page read and write
|
|
|
|
1EBB000
|
unkown
|
page readonly
|
|
|
|
E74DEFF000
|
unkown
|
page read and write
|
|
|
|
7FF5D5AAE000
|
unkown
|
page readonly
|
|
|
|
218D1210000
|
unkown
|
page read and write
|
|
|
|
7FF58685C000
|
unkown
|
page readonly
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
7FF555A24000
|
unkown
|
page readonly
|
|
|
|
1B0EB352000
|
unkown
|
page read and write
|
|
|
|
7FF5645AE000
|
unkown
|
page readonly
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
1B0EB332000
|
unkown
|
page read and write
|
|
|
|
218D0500000
|
unkown
|
page read and write
|
|
|
|
1D1E000
|
unkown
|
page readonly
|
|
|
|
1B0EB351000
|
unkown
|
page read and write
|
|
|
|
1B0EAE00000
|
unkown
|
page readonly
|
|
|
|
1B0EB202000
|
unkown
|
page read and write
|
|
|
|
7FF555776000
|
unkown
|
page readonly
|
|
|
|
218CE341000
|
unkown
|
page read and write
|
|
|
|
1D96F47A000
|
unkown
|
page read and write
|
|
|
|
3FB157E000
|
unkown
|
page read and write
|
|
|
|
7FF5559A8000
|
unkown
|
page readonly
|
|
|
|
1B0EB354000
|
unkown
|
page read and write
|
|
|
|
1B0EB34E000
|
unkown
|
page read and write
|
|
|
|
1B0EB120000
|
unkown
|
page readonly
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
7FF5646F4000
|
unkown
|
page readonly
|
|
|
|
218D00C0000
|
unkown
|
page readonly
|
|
|
|
218D0300000
|
unkown
|
page read and write
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
3FB137E000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B04000
|
unkown
|
page readonly
|
|
|
|
218CE450000
|
unkown
|
page readonly
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
1B0EB140000
|
unkown
|
page readonly
|
|
|
|
1B0EB397000
|
unkown
|
page read and write
|
|
|
|
7FF555A31000
|
unkown
|
page readonly
|
|
|
|
218D0375000
|
unkown
|
page read and write
|
|
|
|
1B0EB32D000
|
unkown
|
page read and write
|
|
|
|
7FF586874000
|
unkown
|
page readonly
|
|
|
|
7FF55598A000
|
unkown
|
page readonly
|
|
|
|
2549000
|
unkown
|
page read and write
|
|
|
|
1B0EB354000
|
unkown
|
page read and write
|
|
|
|
2148BD66000
|
heap default
|
page read and write
|
|
|
|
155891F0000
|
heap default
|
page read and write
|
|
|
|
C6EB2FA000
|
unkown
|
page read and write
|
|
|
|
218D0310000
|
unkown
|
page read and write
|
|
|
|
218D0381000
|
unkown
|
page read and write
|
|
|
|
1B0EB0D0000
|
unkown
|
page write copy
|
|
|
|
2148BD61000
|
unkown
|
page read and write
|
|
|
|
1B0EB3C0000
|
unkown
|
page read and write
|
|
|
|
100DF7B000
|
unkown
|
page read and write
|
|
|
|
1B0EB323000
|
unkown
|
page read and write
|
|
|
|
1B0EAA4D000
|
unkown
|
page read and write
|
|
|
|
7FF5D5B1E000
|
unkown
|
page readonly
|
|
|
|
2148BD8C000
|
unkown
|
page read and write
|
|
|
|
1B0EB394000
|
unkown
|
page read and write
|
|
|
|
1B0EB399000
|
unkown
|
page read and write
|
|
|
|
218D038F000
|
unkown
|
page read and write
|
|
|
|
218D037E000
|
unkown
|
page read and write
|
|
|
|
1B0EAA4B000
|
unkown
|
page read and write
|
|
|
|
1B0EB385000
|
unkown
|
page read and write
|
|
|
|
1B0EB336000
|
unkown
|
page read and write
|
|
|
|
7FF4F9AEE000
|
unkown
|
page readonly
|
|
|
|
7FF55596C000
|
unkown
|
page readonly
|
|
|
|
7FF555994000
|
unkown
|
page readonly
|
|
|
|
15589313000
|
unkown
|
page read and write
|
|
|
|
26F0000
|
unkown
|
page readonly
|
|
|
|
7FF4F9A80000
|
unkown
|
page readonly
|
|
|
|
1771D702000
|
unkown
|
page read and write
|
|
|
|
24A0000
|
unkown
|
page read and write
|
|
|
|
2148BCE5000
|
heap private
|
page read and write
|
|
|
|
1B0EB363000
|
unkown
|
page read and write
|
|
|
|
7FF56FA81000
|
unkown
|
page readonly
|
|
|
|
2148BD8C000
|
unkown
|
page read and write
|
|
|
|
1D96F45C000
|
unkown
|
page read and write
|
|
|
|
C6EB4FD000
|
unkown
|
page read and write
|
|
|
|
7FF5D530D000
|
unkown
|
page readonly
|
|
|
|
2C9E9E63000
|
unkown
|
page read and write
|
|
|
|
7FF5D5BA1000
|
unkown
|
page readonly
|
|
|
|
2C9EAB40000
|
unkown
|
page readonly
|
|
|
|
1B0EB140000
|
unkown
|
page read and write
|
|
|
|
7FF5D5AAA000
|
unkown
|
page readonly
|
|
|
|
1B0EB854000
|
unkown
|
page read and write
|
|
|
|
7FF586783000
|
unkown
|
page readonly
|
|
|
|
C6EAAF9000
|
unkown
|
page read and write
|
|
|
|
218D0543000
|
unkown
|
page read and write
|
|
|
|
C6EADFB000
|
unkown
|
page read and write
|
|
|
|
2C9EA0D0000
|
unkown
|
page readonly
|
|
|
|
2562000
|
unkown
|
page read and write
|
|
|
|
2C9E9F02000
|
unkown
|
page read and write
|
|
|
|
1B0EAAA6000
|
unkown
|
page read and write
|
|
|
|
7FF56FC8A000
|
unkown
|
page readonly
|
|
|
|
7FF5D59AB000
|
unkown
|
page readonly
|
|
|
|
1B0EAAEB000
|
unkown
|
page read and write
|
|
|
|
7FF56F49D000
|
unkown
|
page readonly
|
|
|
|
1B0EB324000
|
unkown
|
page read and write
|
|
|
|
7FF4F99CD000
|
unkown
|
page readonly
|
|
|
|
7FF4F9AC4000
|
unkown
|
page readonly
|
|
|
|
1D96F45F000
|
unkown
|
page read and write
|
|
|
|
218D037E000
|
unkown
|
page read and write
|
|
|
|
1B0EAAD9000
|
unkown
|
page read and write
|
|
|
|
7FF517414000
|
unkown
|
page readonly
|
|
|
|
7FF56FCB9000
|
unkown
|
page readonly
|
|
|
|
155894D0000
|
unkown
|
page readonly
|
|
|
|
1B0EB34B000
|
unkown
|
page read and write
|
|
|
|
7FF5D586B000
|
unkown
|
page readonly
|
|
|
|
C6EAB79000
|
unkown
|
page read and write
|
|
|
|
7FF5646AE000
|
unkown
|
page readonly
|
|
There are 949 hidden memdumps, click here to show them.