Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
diagram-1878769052.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Author: Grog, Last Saved By:
Grog, Name of Creating Application: Microsoft Excel, Create Time/Date: Sat Sep 16 01:00:00 2006, Last Saved Time/Date: Thu
May 20 08:01:36 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\3C836C47-4F20-4ACD-A373-FE45E87498F5
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\D7B40000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 17:12:41 2019, mtime=Tue Jun 29 15:28:02 2021, atime=Tue Jun 29 15:28:02 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\diagram-1878769052.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 06:35:52
2020, mtime=Tue Jun 29 15:28:02 2021, atime=Tue Jun 29 15:28:02 2021, length=174592, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
|
Little-endian UTF-16 Unicode text, with CR line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\B8B40000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\52DE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\CabDC0E.tmp
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\TarDC0F.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\Desktop\13DE0000
|
Applesoft BASIC program data, first line number 16
|
dropped
|
|
There are 6 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\durio.fur,DllRegisterServer
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\durio.fur1,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\durio.fur,DllRegisterServer
|
|
|
|
C:\Windows\System32\rundll32.exe
|
rundll32 ..\durio.fur1,DllRegisterServer
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://templatelogging.office.com/client/log
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://augloop.office.com/v2
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
|
unknown
|
|
|
|
https://skyapi.live.net/Activity/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/mac
|
unknown
|
|
|
|
https://dataservice.o365filtering.com
|
unknown
|
|
|
|
https://api.cortana.ai
|
unknown
|
|
|
|
https://onedrive.live.com
|
unknown
|
|
|
|
https://ovisualuiapp.azurewebsites.net/pbiagave/
|
unknown
|
|
|
|
https://visio.uservoice.com/forums/368202-visio-on-devices
|
unknown
|
|
|
|
https://directory.services.
|
unknown
|
|
|
|
https://login.windows-ppe.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://staging.cortana.ai
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
There are 98 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
founderscirclecapital.eu
|
unknown
|
|
|
|
hallakjewelry.com
|
192.185.195.245
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
192.185.195.245
|
hallakjewelry.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
~p
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
p
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B023
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UpdateComplete
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B572
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B68C
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B718
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B831
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4B91C
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'a
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5E160
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5E680
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
b6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECE57
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED115
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED1A1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED22E
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED2E9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED3D3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
~l6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
10C800
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
10D440
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Blob
|
|
There are 172 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1DC56F82000
|
unkown
|
page read and write
|
|
|
|
7FF577BDA000
|
unkown
|
page readonly
|
|
|
|
2A23000
|
unkown
|
page readonly
|
|
|
|
1985C300000
|
unkown
|
page read and write
|
|
|
|
7FF577652000
|
unkown
|
page readonly
|
|
|
|
7FF58FA1B000
|
unkown
|
page readonly
|
|
|
|
1A49FE61000
|
unkown
|
page read and write
|
|
|
|
1A49FE29000
|
unkown
|
page read and write
|
|
|
|
1DC57402000
|
unkown
|
page read and write
|
|
|
|
7FF53E17C000
|
unkown
|
page readonly
|
|
|
|
130DE26A000
|
unkown
|
page read and write
|
|
|
|
1DC56D20000
|
unkown
|
page read and write
|
|
|
|
2702000
|
unkown
|
page readonly
|
|
|
|
2681000
|
unkown
|
page readonly
|
|
|
|
1DC57402000
|
unkown
|
page read and write
|
|
|
|
334A000
|
heap default
|
page read and write
|
|
|
|
280E000
|
unkown
|
page readonly
|
|
|
|
1DC56F97000
|
unkown
|
page read and write
|
|
|
|
1DC56FA8000
|
unkown
|
page read and write
|
|
|
|
2749C202000
|
unkown
|
page read and write
|
|
|
|
7FF50D614000
|
unkown
|
page readonly
|
|
|
|
7FF50D4C8000
|
unkown
|
page readonly
|
|
|
|
7FF5CD027000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF6F000
|
unkown
|
page readonly
|
|
|
|
7FF5DCEED000
|
unkown
|
page readonly
|
|
|
|
2945000
|
unkown
|
page readonly
|
|
|
|
7FF5DCE43000
|
unkown
|
page readonly
|
|
|
|
7FF577924000
|
unkown
|
page readonly
|
|
|
|
7FF58FA5A000
|
unkown
|
page readonly
|
|
|
|
2BA9000
|
unkown
|
page read and write
|
|
|
|
1985A28F000
|
unkown
|
page read and write
|
|
|
|
1C1C877000
|
unkown
|
page read and write
|
|
|
|
1DC56F00000
|
unkown
|
page read and write
|
|
|
|
1DC56D00000
|
unkown
|
page readonly
|
|
|
|
7FF4F3808000
|
unkown
|
page readonly
|
|
|
|
5CF0000
|
unkown
|
page readonly
|
|
|
|
7FF4F378C000
|
unkown
|
page readonly
|
|
|
|
2693000
|
unkown
|
page readonly
|
|
|
|
1985C0E0000
|
unkown
|
page read and write
|
|
|
|
2383000
|
unkown
|
page readonly
|
|
|
|
1A49FE5E000
|
unkown
|
page read and write
|
|
|
|
7FF50D297000
|
unkown
|
page readonly
|
|
|
|
1985C800000
|
unkown
|
page readonly
|
|
|
|
7FF50D3E5000
|
unkown
|
page readonly
|
|
|
|
1DC56F97000
|
unkown
|
page read and write
|
|
|
|
1DC56F5A000
|
unkown
|
page read and write
|
|
|
|
66E0EFA000
|
unkown
|
page read and write
|
|
|
|
7FF4F3891000
|
unkown
|
page readonly
|
|
|
|
1985C3E7000
|
unkown
|
page read and write
|
|
|
|
7FF5CD2F0000
|
unkown
|
page readonly
|
|
|
|
14D8B7E000
|
unkown
|
page read and write
|
|
|
|
1DC56F4D000
|
unkown
|
page read and write
|
|
|
|
1DC56F5D000
|
unkown
|
page read and write
|
|
|
|
63F0000
|
unkown
|
page readonly
|
|
|
|
320E000
|
unkown
|
page read and write
|
|
|
|
7FF519714000
|
unkown
|
page readonly
|
|
|
|
1985C4C5000
|
unkown
|
page read and write
|
|
|
|
130DE268000
|
unkown
|
page read and write
|
|
|
|
7FF53E5A4000
|
unkown
|
page readonly
|
|
|
|
66E0CFB000
|
unkown
|
page read and write
|
|
|
|
7FF577ABB000
|
unkown
|
page readonly
|
|
|
|
2E1A000
|
heap private
|
page read and write
|
|
|
|
7FF519376000
|
unkown
|
page readonly
|
|
|
|
2470F06A000
|
unkown
|
page read and write
|
|
|
|
1985D310000
|
unkown
|
page read and write
|
|
|
|
130DE140000
|
unkown
|
page write copy
|
|
|
|
2B85000
|
unkown
|
page read and write
|
|
|
|
7FF4F3892000
|
unkown
|
page readonly
|
|
|
|
1985C345000
|
unkown
|
page read and write
|
|
|
|
7FF5DC7A9000
|
unkown
|
page readonly
|
|
|
|
1985C0D0000
|
unkown
|
page read and write
|
|
|
|
1985C385000
|
unkown
|
page read and write
|
|
|
|
7FF4F37CC000
|
unkown
|
page readonly
|
|
|
|
2D2B000
|
unkown
|
page read and write
|
|
|
|
2749C400000
|
unkown
|
page readonly
|
|
|
|
1985A29E000
|
unkown
|
page read and write
|
|
|
|
90E000
|
unkown
|
page read and write
|
|
|
|
3377000
|
unkown
|
page read and write
|
|
|
|
1985C443000
|
unkown
|
page read and write
|
|
|
|
7FF50D636000
|
unkown
|
page readonly
|
|
|
|
1985BBF0000
|
unkown
|
page read and write
|
|
|
|
7FF53E539000
|
unkown
|
page readonly
|
|
|
|
2749BA29000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown
|
page readonly
|
|
|
|
1985C372000
|
unkown
|
page read and write
|
|
|
|
1985C346000
|
unkown
|
page read and write
|
|
|
|
7FF5778CF000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF0C000
|
unkown
|
page readonly
|
|
|
|
7FF50D60A000
|
unkown
|
page readonly
|
|
|
|
2749BB02000
|
unkown
|
page read and write
|
|
|
|
14D8CFE000
|
unkown
|
page read and write
|
|
|
|
1DC56FA7000
|
unkown
|
page read and write
|
|
|
|
1985A2BB000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB60000
|
unkown
|
page readonly
|
|
|
|
1DC56D40000
|
unkown
|
page readonly
|
|
|
|
7FF5777BA000
|
unkown
|
page readonly
|
|
|
|
1985C37C000
|
unkown
|
page read and write
|
|
|
|
7FF577B1C000
|
unkown
|
page readonly
|
|
|
|
7FF5DCD17000
|
unkown
|
page readonly
|
|
|
|
1DC56C80000
|
unkown
|
page readonly
|
|
|
|
66E0B7B000
|
unkown
|
page read and write
|
|
|
|
7FF5CD441000
|
unkown
|
page readonly
|
|
|
|
7FF577A82000
|
unkown
|
page readonly
|
|
|
|
2470F000000
|
unkown
|
page read and write
|
|
|
|
1985A200000
|
unkown
|
page read and write
|
|
|
|
2E20000
|
unkown
|
page readonly
|
|
|
|
1985C3C3000
|
unkown
|
page read and write
|
|
|
|
1DC566BD000
|
unkown
|
page read and write
|
|
|
|
7FF50D5D7000
|
unkown
|
page readonly
|
|
|
|
7FF51979C000
|
unkown
|
page readonly
|
|
|
|
1DC5743C000
|
unkown
|
page read and write
|
|
|
|
A2ED87E000
|
unkown
|
page read and write
|
|
|
|
2643000
|
unkown
|
page readonly
|
|
|
|
1DC56FB7000
|
unkown
|
page read and write
|
|
|
|
7FF5198A2000
|
unkown
|
page readonly
|
|
|
|
7FF577BE2000
|
unkown
|
page readonly
|
|
|
|
2470F320000
|
unkown
|
page readonly
|
|
|
|
2665000
|
unkown
|
page readonly
|
|
|
|
2969000
|
unkown
|
page readonly
|
|
|
|
A2ED5AE000
|
unkown
|
page read and write
|
|
|
|
1985A28B000
|
unkown
|
page read and write
|
|
|
|
1A49FE66000
|
unkown
|
page read and write
|
|
|
|
1985C110000
|
unkown
|
page readonly
|
|
|
|
CF508F7000
|
unkown
|
page read and write
|
|
|
|
7FF5CD24B000
|
unkown
|
page readonly
|
|
|
|
7FF577949000
|
unkown
|
page readonly
|
|
|
|
7FF53E52E000
|
unkown
|
page readonly
|
|
|
|
4E3A74B000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
unkown
|
page readonly
|
|
|
|
1DC56F13000
|
unkown
|
page read and write
|
|
|
|
7FF5CD231000
|
unkown
|
page readonly
|
|
|
|
2659000
|
unkown
|
page readonly
|
|
|
|
1985A297000
|
unkown
|
page read and write
|
|
|
|
7FF51982D000
|
unkown
|
page readonly
|
|
|
|
7FF5CD3CD000
|
unkown
|
page readonly
|
|
|
|
130DE270000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF04000
|
unkown
|
page readonly
|
|
|
|
1985C3E7000
|
unkown
|
page read and write
|
|
|
|
4E3AC7D000
|
unkown
|
page read and write
|
|
|
|
7FF4F36F3000
|
unkown
|
page readonly
|
|
|
|
1DC566D9000
|
unkown
|
page read and write
|
|
|
|
1985BCF0000
|
unkown
|
page readonly
|
|
|
|
1985C39E000
|
unkown
|
page read and write
|
|
|
|
1A4A0800000
|
unkown
|
page readonly
|
|
|
|
1DC56D30000
|
unkown
|
page read and write
|
|
|
|
1985C0C0000
|
unkown
|
page readonly
|
|
|
|
1DC57402000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB75000
|
unkown
|
page readonly
|
|
|
|
7FF4F37F4000
|
unkown
|
page readonly
|
|
|
|
2749B900000
|
heap default
|
page read and write
|
|
|
|
2749BA5B000
|
unkown
|
page read and write
|
|
|
|
2749BA00000
|
unkown
|
page read and write
|
|
|
|
7FF577BD4000
|
unkown
|
page readonly
|
|
|
|
336D000
|
unkown
|
page read and write
|
|
|
|
3374000
|
unkown
|
page read and write
|
|
|
|
1985C354000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8A2000
|
unkown
|
page readonly
|
|
|
|
7FF53E286000
|
unkown
|
page readonly
|
|
|
|
CF5047B000
|
unkown
|
page read and write
|
|
|
|
2470F06C000
|
unkown
|
page read and write
|
|
|
|
7FF53E5B1000
|
unkown
|
page readonly
|
|
|
|
264C000
|
unkown
|
page readonly
|
|
|
|
1A4A0000000
|
unkown
|
page readonly
|
|
|
|
29F5000
|
unkown
|
page readonly
|
|
|
|
1985C100000
|
unkown
|
page read and write
|
|
|
|
24710AC0000
|
unkown
|
page read and write
|
|
|
|
1DC56F23000
|
unkown
|
page read and write
|
|
|
|
1DC56F40000
|
unkown
|
page read and write
|
|
|
|
A2EDAFB000
|
unkown
|
page read and write
|
|
|
|
1DC56FC3000
|
unkown
|
page read and write
|
|
|
|
7FF53E4EF000
|
unkown
|
page readonly
|
|
|
|
7FF5DCEA3000
|
unkown
|
page readonly
|
|
|
|
1985C345000
|
unkown
|
page read and write
|
|
|
|
1C1C977000
|
unkown
|
page read and write
|
|
|
|
7FF5196AE000
|
unkown
|
page readonly
|
|
|
|
1DC56F97000
|
unkown
|
page read and write
|
|
|
|
2470F200000
|
unkown
|
page readonly
|
|
|
|
7FF5CD116000
|
unkown
|
page readonly
|
|
|
|
1985A295000
|
unkown
|
page read and write
|
|
|
|
1D1508C6000
|
heap default
|
page read and write
|
|
|
|
1985C4C4000
|
unkown
|
page read and write
|
|
|
|
7FF50D639000
|
unkown
|
page readonly
|
|
|
|
1A49FF02000
|
unkown
|
page read and write
|
|
|
|
66E0BFA000
|
unkown
|
page read and write
|
|
|
|
1DC56613000
|
unkown
|
page read and write
|
|
|
|
89D6D0B000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFA0000
|
unkown
|
page readonly
|
|
|
|
1A49FE5A000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
310E000
|
unkown
|
page read and write
|
|
|
|
7FF5776C9000
|
unkown
|
page readonly
|
|
|
|
130DE26E000
|
unkown
|
page read and write
|
|
|
|
14D8D7F000
|
unkown
|
page read and write
|
|
|
|
130DE268000
|
unkown
|
page read and write
|
|
|
|
2B8D000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF42000
|
unkown
|
page readonly
|
|
|
|
CF507FE000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFE4000
|
unkown
|
page readonly
|
|
|
|
1D1508DE000
|
unkown
|
page read and write
|
|
|
|
7FF5DD092000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF577ACF000
|
unkown
|
page readonly
|
|
|
|
1985C412000
|
unkown
|
page read and write
|
|
|
|
7FF5197AE000
|
unkown
|
page readonly
|
|
|
|
23F43000000
|
unkown
|
page read and write
|
|
|
|
1DC56F30000
|
unkown
|
page read and write
|
|
|
|
2EFE000
|
unkown
|
page read and write
|
|
|
|
1DC56F4D000
|
unkown
|
page read and write
|
|
|
|
1985A2EA000
|
unkown
|
page read and write
|
|
|
|
7FF4F381D000
|
unkown
|
page readonly
|
|
|
|
1DC56FD8000
|
unkown
|
page read and write
|
|
|
|
1DC566B0000
|
unkown
|
page read and write
|
|
|
|
A2EDDFF000
|
unkown
|
page read and write
|
|
|
|
2708000
|
unkown
|
page readonly
|
|
|
|
1DC56F8E000
|
unkown
|
page read and write
|
|
|
|
7FF4F3375000
|
unkown
|
page readonly
|
|
|
|
A2ED9FE000
|
unkown
|
page read and write
|
|
|
|
1D1508B0000
|
heap default
|
page read and write
|
|
|
|
1DC56F57000
|
unkown
|
page read and write
|
|
|
|
14D8AFE000
|
unkown
|
page read and write
|
|
|
|
1985C600000
|
unkown
|
page read and write
|
|
|
|
1DC57402000
|
unkown
|
page read and write
|
|
|
|
130DE268000
|
unkown
|
page read and write
|
|
|
|
7FF53E319000
|
unkown
|
page readonly
|
|
|
|
7FF53E514000
|
unkown
|
page readonly
|
|
|
|
130DE270000
|
unkown
|
page read and write
|
|
|
|
7FF53E197000
|
unkown
|
page readonly
|
|
|
|
7FF53E4CB000
|
unkown
|
page readonly
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
1985A27F000
|
unkown
|
page read and write
|
|
|
|
2B8A000
|
unkown
|
page read and write
|
|
|
|
1DC56510000
|
unkown
|
page readonly
|
|
|
|
1D1508DE000
|
unkown
|
page read and write
|
|
|
|
1985D310000
|
unkown
|
page read and write
|
|
|
|
7FF4F37A5000
|
unkown
|
page readonly
|
|
|
|
1DC56F57000
|
unkown
|
page read and write
|
|
|
|
3247000
|
heap private
|
page read and write
|
|
|
|
7FF5CD175000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF50D4A1000
|
unkown
|
page readonly
|
|
|
|
1A49FE89000
|
unkown
|
page read and write
|
|
|
|
1DC5664E000
|
unkown
|
page read and write
|
|
|
|
7FF50CE1D000
|
unkown
|
page readonly
|
|
|
|
7FF5DCE81000
|
unkown
|
page readonly
|
|
|
|
1985C602000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
66E0FFC000
|
unkown
|
page read and write
|
|
|
|
1985C3FA000
|
unkown
|
page read and write
|
|
|
|
1DC57403000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
7FF5DCD20000
|
unkown
|
page readonly
|
|
|
|
230E000
|
unkown
|
page readonly
|
|
|
|
7FF58FA6E000
|
unkown
|
page readonly
|
|
|
|
7FF4F380E000
|
unkown
|
page readonly
|
|
|
|
1D1508DE000
|
unkown
|
page read and write
|
|
|
|
89D6D8F000
|
unkown
|
page read and write
|
|
|
|
1985A31B000
|
unkown
|
page read and write
|
|
|
|
66E087F000
|
unkown
|
page read and write
|
|
|
|
60F0000
|
unkown
|
page read and write
|
|
|
|
7FF53E504000
|
unkown
|
page readonly
|
|
|
|
1DC56FC2000
|
unkown
|
page read and write
|
|
|
|
2A23000
|
unkown
|
page readonly
|
|
|
|
7FF519818000
|
unkown
|
page readonly
|
|
|
|
7FF53E4BA000
|
unkown
|
page readonly
|
|
|
|
26F4000
|
unkown
|
page readonly
|
|
|
|
1985A313000
|
unkown
|
page read and write
|
|
|
|
130DE213000
|
unkown
|
page read and write
|
|
|
|
29A2000
|
unkown
|
page readonly
|
|
|
|
1DC56F1C000
|
unkown
|
page read and write
|
|
|
|
4E3ABFF000
|
unkown
|
page read and write
|
|
|
|
7FF518FB9000
|
unkown
|
page readonly
|
|
|
|
1A49FE5C000
|
unkown
|
page read and write
|
|
|
|
66E117C000
|
unkown
|
page read and write
|
|
|
|
130DE130000
|
heap default
|
page read and write
|
|
|
|
1DC56F55000
|
unkown
|
page read and write
|
|
|
|
130DE270000
|
unkown
|
page read and write
|
|
|
|
7FF50D6A4000
|
unkown
|
page readonly
|
|
|
|
1985C0D0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD367000
|
unkown
|
page readonly
|
|
|
|
7FF50D5C5000
|
unkown
|
page readonly
|
|
|
|
1DC56FB7000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown
|
page readonly
|
|
|
|
7FF5CCBB1000
|
unkown
|
page readonly
|
|
|
|
314E000
|
unkown
|
page read and write
|
|
|
|
1985A302000
|
unkown
|
page read and write
|
|
|
|
336D000
|
unkown
|
page read and write
|
|
|
|
295C000
|
unkown
|
page readonly
|
|
|
|
7FF577BE1000
|
unkown
|
page readonly
|
|
|
|
7FF5DD091000
|
unkown
|
page readonly
|
|
|
|
1DC56E02000
|
unkown
|
page read and write
|
|
|
|
7FF53E4BE000
|
unkown
|
page readonly
|
|
|
|
130DE26A000
|
unkown
|
page read and write
|
|
|
|
1DC56713000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFFF000
|
unkown
|
page readonly
|
|
|
|
1DC56FC2000
|
unkown
|
page read and write
|
|
|
|
130DE270000
|
unkown
|
page read and write
|
|
|
|
2975000
|
unkown
|
page readonly
|
|
|
|
1C1C38E000
|
unkown
|
page read and write
|
|
|
|
23F42F80000
|
unkown
|
page write copy
|
|
|
|
2A18000
|
unkown
|
page readonly
|
|
|
|
1DC57000000
|
unkown
|
page readonly
|
|
|
|
7FF519370000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF519527000
|
unkown
|
page readonly
|
|
|
|
1D150880000
|
unkown
|
page read and write
|
|
|
|
5CEF000
|
unkown
|
page read and write
|
|
|
|
14D8BF9000
|
unkown
|
page read and write
|
|
|
|
130DE313000
|
unkown
|
page read and write
|
|
|
|
7FF4F379A000
|
unkown
|
page readonly
|
|
|
|
89D707E000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
1DC56702000
|
unkown
|
page read and write
|
|
|
|
1985A2F9000
|
unkown
|
page read and write
|
|
|
|
1D1509C0000
|
unkown
|
page readonly
|
|
|
|
2DD0000
|
unkown
|
page read and write
|
|
|
|
A2EDBF7000
|
unkown
|
page read and write
|
|
|
|
7FF577B66000
|
unkown
|
page readonly
|
|
|
|
7FF53E4EC000
|
unkown
|
page readonly
|
|
|
|
2650000
|
unkown
|
page readonly
|
|
|
|
2DC0000
|
unkown
|
page readonly
|
|
|
|
1DC56F30000
|
unkown
|
page read and write
|
|
|
|
2749BA13000
|
unkown
|
page read and write
|
|
|
|
130DE268000
|
unkown
|
page read and write
|
|
|
|
1D150860000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
1985A32C000
|
unkown
|
page read and write
|
|
|
|
1985C385000
|
unkown
|
page read and write
|
|
|
|
324A000
|
heap private
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
4E3AB79000
|
unkown
|
page read and write
|
|
|
|
7FF58FA7E000
|
unkown
|
page readonly
|
|
|
|
1DC56F97000
|
unkown
|
page read and write
|
|
|
|
336A000
|
unkown
|
page read and write
|
|
|
|
1985C3C3000
|
unkown
|
page read and write
|
|
|
|
7FF577B34000
|
unkown
|
page readonly
|
|
|
|
7FF4F3517000
|
unkown
|
page readonly
|
|
|
|
1985A28D000
|
unkown
|
page read and write
|
|
|
|
1DC57502000
|
unkown
|
page read and write
|
|
|
|
7FF58FA8D000
|
unkown
|
page readonly
|
|
|
|
7FF5DCDA0000
|
unkown
|
page readonly
|
|
|
|
1985C3EB000
|
unkown
|
page read and write
|
|
|
|
2CEA000
|
unkown
|
page read and write
|
|
|
|
1985A27B000
|
unkown
|
page read and write
|
|
|
|
8B0000
|
unkown
|
page readonly
|
|
|
|
14D8C7A000
|
unkown
|
page read and write
|
|
|
|
1985D010000
|
unkown
|
page read and write
|
|
|
|
2DF0000
|
unkown
|
page read and write
|
|
|
|
130DE23F000
|
unkown
|
page read and write
|
|
|
|
7FF5779EB000
|
unkown
|
page readonly
|
|
|
|
1DC56FB7000
|
unkown
|
page read and write
|
|
|
|
7FF50D4C3000
|
unkown
|
page readonly
|
|
|
|
7FF51980F000
|
unkown
|
page readonly
|
|
|
|
2692000
|
unkown
|
page readonly
|
|
|
|
3382000
|
unkown
|
page read and write
|
|
|
|
7FF5778C8000
|
unkown
|
page readonly
|
|
|
|
293D000
|
unkown
|
page readonly
|
|
|
|
7FF519691000
|
unkown
|
page readonly
|
|
|
|
1985C3EF000
|
unkown
|
page read and write
|
|
|
|
2470F029000
|
unkown
|
page read and write
|
|
|
|
2E10000
|
heap private
|
page read and write
|
|
|
|
7FF5DC8F7000
|
unkown
|
page readonly
|
|
|
|
267F000
|
unkown
|
page readonly
|
|
|
|
1985C130000
|
unkown
|
page readonly
|
|
|
|
1985C050000
|
unkown
|
page read and write
|
|
|
|
2A12000
|
unkown
|
page readonly
|
|
|
|
130DE202000
|
unkown
|
page read and write
|
|
|
|
7FF577B5E000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF50D560000
|
unkown
|
page readonly
|
|
|
|
2613000
|
unkown
|
page readonly
|
|
|
|
7FF5DCDD6000
|
unkown
|
page readonly
|
|
|
|
7FF577B61000
|
unkown
|
page readonly
|
|
|
|
1DC56F5E000
|
unkown
|
page read and write
|
|
|
|
2977000
|
unkown
|
page readonly
|
|
|
|
130DE270000
|
unkown
|
page read and write
|
|
|
|
7FF50D5BA000
|
unkown
|
page readonly
|
|
|
|
1985C3EF000
|
unkown
|
page read and write
|
|
|
|
7FF5CD35B000
|
unkown
|
page readonly
|
|
|
|
7FF5DD008000
|
unkown
|
page readonly
|
|
|
|
7FF577ABF000
|
unkown
|
page readonly
|
|
|
|
3150000
|
unkown
|
page readonly
|
|
|
|
266F000
|
unkown
|
page readonly
|
|
|
|
1DC5759B000
|
unkown
|
page read and write
|
|
|
|
1DC56CB0000
|
unkown
|
page write copy
|
|
|
|
AC5000
|
unkown
|
page readonly
|
|
|
|
7FF53E462000
|
unkown
|
page readonly
|
|
|
|
7FF53E4F8000
|
unkown
|
page readonly
|
|
|
|
7FF577941000
|
unkown
|
page readonly
|
|
|
|
4430000
|
unkown
|
page readonly
|
|
|
|
3240000
|
heap private
|
page read and write
|
|
|
|
7FF4F3366000
|
unkown
|
page readonly
|
|
|
|
7FF53E5AA000
|
unkown
|
page readonly
|
|
|
|
130DE268000
|
unkown
|
page read and write
|
|
|
|
1985A2F9000
|
unkown
|
page read and write
|
|
|
|
7FF5DCD66000
|
unkown
|
page readonly
|
|
|
|
1A49FF00000
|
unkown
|
page read and write
|
|
|
|
1DC56F97000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page readonly
|
|
|
|
23F449A0000
|
unkown
|
page read and write
|
|
|
|
3365000
|
unkown
|
page read and write
|
|
|
|
2470F100000
|
unkown
|
page read and write
|
|
|
|
1DC56FA8000
|
unkown
|
page read and write
|
|
|
|
1A4A00D0000
|
unkown
|
page readonly
|
|
|
|
7FF53E51E000
|
unkown
|
page readonly
|
|
|
|
2A9E000
|
unkown
|
page read and write
|
|
|
|
7FF53DD21000
|
unkown
|
page readonly
|
|
|
|
7FF5197AA000
|
unkown
|
page readonly
|
|
|
|
1C1CC79000
|
unkown
|
page read and write
|
|
|
|
1A4A0602000
|
unkown
|
page read and write
|
|
|
|
1DC565E0000
|
unkown
|
page readonly
|
|
|
|
297D000
|
unkown
|
page readonly
|
|
|
|
2470F06C000
|
unkown
|
page read and write
|
|
|
|
2991000
|
unkown
|
page readonly
|
|
|
|
7FF5196AB000
|
unkown
|
page readonly
|
|
|
|
66E0DFB000
|
unkown
|
page read and write
|
|
|
|
130DE190000
|
unkown
|
page readonly
|
|
|
|
DF1000
|
unkown
|
page readonly
|
|
|
|
CF5077B000
|
unkown
|
page read and write
|
|
|
|
1DC57400000
|
unkown
|
page read and write
|
|
|
|
336D000
|
unkown
|
page read and write
|
|
|
|
1DC5663C000
|
unkown
|
page read and write
|
|
|
|
1A49FE54000
|
unkown
|
page read and write
|
|
|
|
3361000
|
unkown
|
page read and write
|
|
|
|
7FF5DCEA8000
|
unkown
|
page readonly
|
|
|
|
7FF4F37AB000
|
unkown
|
page readonly
|
|
|
|
7FF5CD34A000
|
unkown
|
page readonly
|
|
|
|
263C000
|
unkown
|
page readonly
|
|
|
|
2470F2D0000
|
unkown
|
page write copy
|
|
|
|
2470F055000
|
unkown
|
page read and write
|
|
|
|
2673000
|
unkown
|
page readonly
|
|
|
|
7FF53E5B2000
|
unkown
|
page readonly
|
|
|
|
1DC56FA8000
|
unkown
|
page read and write
|
|
|
|
130DE400000
|
unkown
|
page readonly
|
|
|
|
1DC57402000
|
unkown
|
page read and write
|
|
|
|
1A49FE3C000
|
unkown
|
page read and write
|
|
|
|
A2EDCFF000
|
unkown
|
page read and write
|
|
|
|
7FF58FA3C000
|
unkown
|
page readonly
|
|
|
|
7FF577B1F000
|
unkown
|
page readonly
|
|
|
|
7FF50D28A000
|
unkown
|
page readonly
|
|
|
|
1985A100000
|
heap default
|
page read and write
|
|
|
|
23F43013000
|
unkown
|
page read and write
|
|
|
|
1DC56F6D000
|
unkown
|
page read and write
|
|
|
|
7FF53E4C0000
|
unkown
|
page readonly
|
|
|
|
1985D410000
|
unkown
|
page read and write
|
|
|
|
7FF58FA15000
|
unkown
|
page readonly
|
|
|
|
1985D210000
|
unkown
|
page read and write
|
|
|
|
6BB437F000
|
unkown
|
page read and write
|
|
|
|
2B89000
|
unkown
|
page read and write
|
|
|
|
89D71FF000
|
unkown
|
page read and write
|
|
|
|
2749BC00000
|
unkown
|
page readonly
|
|
|
|
267A000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page readonly
|
|
|
|
1DC5664B000
|
unkown
|
page read and write
|
|
|
|
1985A110000
|
unkown
|
page readonly
|
|
|
|
1985C30A000
|
unkown
|
page read and write
|
|
|
|
7FF51979A000
|
unkown
|
page readonly
|
|
|
|
1985D210000
|
unkown
|
page read and write
|
|
|
|
890000
|
unkown
|
page read and write
|
|
|
|
1985A2DF000
|
unkown
|
page read and write
|
|
|
|
7FF4F37B7000
|
unkown
|
page readonly
|
|
|
|
1DC57502000
|
unkown
|
page read and write
|
|
|
|
1985A33C000
|
unkown
|
page read and write
|
|
|
|
1DC566A5000
|
unkown
|
page read and write
|
|
|
|
1DC56FD8000
|
unkown
|
page read and write
|
|
|
|
1DC56FA7000
|
unkown
|
page read and write
|
|
|
|
6BB427F000
|
unkown
|
page read and write
|
|
|
|
7FF4F37CF000
|
unkown
|
page readonly
|
|
|
|
1D1508BB000
|
heap default
|
page read and write
|
|
|
|
A2ED52B000
|
unkown
|
page read and write
|
|
|
|
2749BB13000
|
unkown
|
page read and write
|
|
|
|
7FF50D5EF000
|
unkown
|
page readonly
|
|
|
|
26E1000
|
unkown
|
page readonly
|
|
|
|
1985C3B2000
|
unkown
|
page read and write
|
|
|
|
7FF50D419000
|
unkown
|
page readonly
|
|
|
|
3440000
|
unkown
|
page readonly
|
|
|
|
1DC5743C000
|
unkown
|
page read and write
|
|
|
|
7FF577ADA000
|
unkown
|
page readonly
|
|
|
|
2B91000
|
unkown
|
page read and write
|
|
|
|
130DFC70000
|
unkown
|
page read and write
|
|
|
|
7FF5DCE9B000
|
unkown
|
page readonly
|
|
|
|
1DC566A9000
|
unkown
|
page read and write
|
|
|
|
7FF5CD442000
|
unkown
|
page readonly
|
|
|
|
7FF5778AB000
|
unkown
|
page readonly
|
|
|
|
7FF58F363000
|
unkown
|
page readonly
|
|
|
|
1985C202000
|
unkown
|
page read and write
|
|
|
|
23F43102000
|
unkown
|
page read and write
|
|
|
|
1985C306000
|
unkown
|
page read and write
|
|
|
|
7FF5DCDE1000
|
unkown
|
page readonly
|
|
|
|
7FF58F6EA000
|
unkown
|
page readonly
|
|
|
|
7FF5DCB0E000
|
unkown
|
page readonly
|
|
|
|
31C4000
|
heap private
|
page read and write
|
|
|
|
2749B9E0000
|
unkown
|
page readonly
|
|
|
|
1985C500000
|
unkown
|
page read and write
|
|
|
|
2AA0000
|
unkown
|
page readonly
|
|
|
|
23F44AA0000
|
unkown
|
page readonly
|
|
|
|
7FF5CD3AE000
|
unkown
|
page readonly
|
|
|
|
2470F013000
|
unkown
|
page read and write
|
|
|
|
2749C060000
|
unkown
|
page read and write
|
|
|
|
2749B9F0000
|
unkown
|
page readonly
|
|
|
|
7FF58FA89000
|
unkown
|
page readonly
|
|
|
|
1985D000000
|
unkown
|
page read and write
|
|
|
|
7FF58F367000
|
unkown
|
page readonly
|
|
|
|
1985A284000
|
unkown
|
page read and write
|
|
|
|
7FF519653000
|
unkown
|
page readonly
|
|
|
|
7FF519894000
|
unkown
|
page readonly
|
|
|
|
7FF519804000
|
unkown
|
page readonly
|
|
|
|
6BB44FE000
|
unkown
|
page read and write
|
|
|
|
266D000
|
unkown
|
page readonly
|
|
|
|
7FF53E483000
|
unkown
|
page readonly
|
|
|
|
1DC56800000
|
unkown
|
page readonly
|
|
|
|
1DC56C60000
|
unkown
|
page read and write
|
|
|
|
1D1509B0000
|
unkown
|
page readonly
|
|
|
|
1DC56FA7000
|
unkown
|
page read and write
|
|
|
|
6BB447E000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF5DCBB7000
|
unkown
|
page readonly
|
|
|
|
1DC56F5C000
|
unkown
|
page read and write
|
|
|
|
1DC56F5E000
|
unkown
|
page read and write
|
|
|
|
66E0C7B000
|
unkown
|
page read and write
|
|
|
|
23F42EB0000
|
unkown
|
page readonly
|
|
|
|
7FF577B27000
|
unkown
|
page readonly
|
|
|
|
1985A27C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCD5B000
|
unkown
|
page readonly
|
|
|
|
292A000
|
unkown
|
page readonly
|
|
|
|
2BA9000
|
unkown
|
page read and write
|
|
|
|
7FF4F37E4000
|
unkown
|
page readonly
|
|
|
|
1DC5753C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF7F000
|
unkown
|
page readonly
|
|
|
|
1DC566C4000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF58FA78000
|
unkown
|
page readonly
|
|
|
|
2B8E000
|
unkown
|
page read and write
|
|
|
|
2B8E000
|
unkown
|
page read and write
|
|
|
|
5EA000
|
unkown
|
page read and write
|
|
|
|
7FF5CD37F000
|
unkown
|
page readonly
|
|
|
|
7FF5CD394000
|
unkown
|
page readonly
|
|
|
|
1A49FF13000
|
unkown
|
page read and write
|
|
|
|
1C1CA7E000
|
unkown
|
page read and write
|
|
|
|
7FF50D604000
|
unkown
|
page readonly
|
|
|
|
2749BA66000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3BE000
|
unkown
|
page readonly
|
|
|
|
7FF5197C7000
|
unkown
|
page readonly
|
|
|
|
2667000
|
unkown
|
page readonly
|
|
|
|
7FF5DD019000
|
unkown
|
page readonly
|
|
|
|
1985C070000
|
heap private
|
page read and write
|
|
|
|
2A20000
|
unkown
|
page readonly
|
|
|
|
2A30000
|
heap private
|
page read and write
|
|
|
|
1DC56F71000
|
unkown
|
page read and write
|
|
|
|
66E0D7B000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB66000
|
unkown
|
page readonly
|
|
|
|
7FF577AF5000
|
unkown
|
page readonly
|
|
|
|
1985C362000
|
unkown
|
page read and write
|
|
|
|
3368000
|
unkown
|
page read and write
|
|
|
|
7FF577A90000
|
unkown
|
page readonly
|
|
|
|
7FF4F3681000
|
unkown
|
page readonly
|
|
|
|
2749BA61000
|
unkown
|
page read and write
|
|
|
|
7FF577A3D000
|
unkown
|
page readonly
|
|
|
|
1DC566EA000
|
unkown
|
page read and write
|
|
|
|
1A49FE00000
|
unkown
|
page read and write
|
|
|
|
7FF50D5BE000
|
unkown
|
page readonly
|
|
|
|
1985A27A000
|
unkown
|
page read and write
|
|
|
|
7FF4F3884000
|
unkown
|
page readonly
|
|
|
|
7FF50D583000
|
unkown
|
page readonly
|
|
|
|
2470EFD0000
|
unkown
|
page readonly
|
|
|
|
294C000
|
unkown
|
page readonly
|
|
|
|
7FF519601000
|
unkown
|
page readonly
|
|
|
|
7FF577B4E000
|
unkown
|
page readonly
|
|
|
|
1DC56629000
|
unkown
|
page read and write
|
|
|
|
1C1CD7E000
|
unkown
|
page read and write
|
|
|
|
1985A35C000
|
unkown
|
page read and write
|
|
|
|
2470F102000
|
unkown
|
page read and write
|
|
|
|
1DC5666F000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3C9000
|
unkown
|
page readonly
|
|
|
|
1985D110000
|
unkown
|
page read and write
|
|
|
|
1985A2C6000
|
unkown
|
page read and write
|
|
|
|
1985D410000
|
unkown
|
page read and write
|
|
|
|
7FF58FB02000
|
unkown
|
page readonly
|
|
|
|
7FF5CD00C000
|
unkown
|
page readonly
|
|
|
|
7FF50D28F000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF6B000
|
unkown
|
page readonly
|
|
|
|
7FF58FA3F000
|
unkown
|
page readonly
|
|
|
|
7FF5777AC000
|
unkown
|
page readonly
|
|
|
|
7FF5CD2F2000
|
unkown
|
page readonly
|
|
|
|
7FF577915000
|
unkown
|
page readonly
|
|
|
|
1985A213000
|
unkown
|
page read and write
|
|
|
|
2749BB08000
|
unkown
|
page read and write
|
|
|
|
7FF5DCBB5000
|
unkown
|
page readonly
|
|
|
|
7FF4F370C000
|
unkown
|
page readonly
|
|
|
|
1DC5748E000
|
unkown
|
page read and write
|
|
|
|
1985C0D0000
|
unkown
|
page read and write
|
|
|
|
2B89000
|
unkown
|
page read and write
|
|
|
|
2A04000
|
unkown
|
page readonly
|
|
|
|
2B89000
|
unkown
|
page read and write
|
|
|
|
1A49FD50000
|
unkown
|
page readonly
|
|
|
|
1DC56D10000
|
unkown
|
page readonly
|
|
|
|
7FF50D37B000
|
unkown
|
page readonly
|
|
|
|
1C1CB78000
|
unkown
|
page read and write
|
|
|
|
1DC56D20000
|
unkown
|
page read and write
|
|
|
|
2470F06C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCC7A000
|
unkown
|
page readonly
|
|
|
|
1DC57402000
|
unkown
|
page read and write
|
|
|
|
7FF577B3A000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFCF000
|
unkown
|
page readonly
|
|
|
|
6BB3FBA000
|
unkown
|
page read and write
|
|
|
|
66E11FD000
|
unkown
|
page read and write
|
|
|
|
7FF50D6AA000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF5197E7000
|
unkown
|
page readonly
|
|
|
|
7FF50D27C000
|
unkown
|
page readonly
|
|
|
|
7FF5DD08A000
|
unkown
|
page readonly
|
|
|
|
7FF53E2E1000
|
unkown
|
page readonly
|
|
|
|
1985C30D000
|
unkown
|
page read and write
|
|
|
|
7FF50D3E1000
|
unkown
|
page readonly
|
|
|
|
1DC5741D000
|
unkown
|
page read and write
|
|
|
|
7FF5CD39A000
|
unkown
|
page readonly
|
|
|
|
7FF50D63D000
|
unkown
|
page readonly
|
|
|
|
1985C0F0000
|
unkown
|
page read and write
|
|
|
|
7FF5CD350000
|
unkown
|
page readonly
|
|
|
|
7FF53E536000
|
unkown
|
page readonly
|
|
|
|
7FF53E27B000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFA5000
|
unkown
|
page readonly
|
|
|
|
7FF53E528000
|
unkown
|
page readonly
|
|
|
|
2470F06C000
|
unkown
|
page read and write
|
|
|
|
7FF5773F2000
|
unkown
|
page readonly
|
|
|
|
1985A302000
|
unkown
|
page read and write
|
|
|
|
2919000
|
unkown
|
page readonly
|
|
|
|
24710BC0000
|
unkown
|
page readonly
|
|
|
|
1DC56F56000
|
unkown
|
page read and write
|
|
|
|
3340000
|
heap default
|
page read and write
|
|
|
|
7FF577ADC000
|
unkown
|
page readonly
|
|
|
|
1985C37C000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3A4000
|
unkown
|
page readonly
|
|
|
|
7FF51971C000
|
unkown
|
page readonly
|
|
|
|
7FF5CD313000
|
unkown
|
page readonly
|
|
|
|
7FF5CD10B000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
2953000
|
unkown
|
page readonly
|
|
|
|
7FF53E3A1000
|
unkown
|
page readonly
|
|
|
|
2DB0000
|
unkown
|
page readonly
|
|
|
|
23F42EA0000
|
heap default
|
page read and write
|
|
|
|
1A49FD60000
|
unkown
|
page readonly
|
|
|
|
1DC56708000
|
unkown
|
page read and write
|
|
|
|
6BB42FE000
|
unkown
|
page read and write
|
|
|
|
7EA000
|
unkown
|
page read and write
|
|
|
|
7FF519703000
|
unkown
|
page readonly
|
|
|
|
2749BA5A000
|
unkown
|
page read and write
|
|
|
|
7FF4F369E000
|
unkown
|
page readonly
|
|
|
|
1A49FE13000
|
unkown
|
page read and write
|
|
|
|
6030000
|
unkown
|
page read and write
|
|
|
|
7FF53E531000
|
unkown
|
page readonly
|
|
|
|
1DC56FD6000
|
unkown
|
page read and write
|
|
|
|
2470F06C000
|
unkown
|
page read and write
|
|
|
|
7FF577A92000
|
unkown
|
page readonly
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
1985A255000
|
unkown
|
page read and write
|
|
|
|
7FF5DD00E000
|
unkown
|
page readonly
|
|
|
|
7FF50CE21000
|
unkown
|
page readonly
|
|
|
|
1DC56FA8000
|
unkown
|
page read and write
|
|
|
|
1A4A0B40000
|
unkown
|
page readonly
|
|
|
|
7FF5198A1000
|
unkown
|
page readonly
|
|
|
|
29A6000
|
unkown
|
page readonly
|
|
|
|
1D1508C1000
|
unkown
|
page read and write
|
|
|
|
1985A2BB000
|
unkown
|
page read and write
|
|
|
|
2749C0B0000
|
unkown
|
page readonly
|
|
|
|
1985A2BC000
|
unkown
|
page read and write
|
|
|
|
1DC56649000
|
unkown
|
page read and write
|
|
|
|
1D150A70000
|
heap private
|
page read and write
|
|
|
|
2A34000
|
heap private
|
page read and write
|
|
|
|
1D1508D6000
|
unkown
|
page read and write
|
|
|
|
7FF5DCEF3000
|
unkown
|
page readonly
|
|
|
|
7FF4F3643000
|
unkown
|
page readonly
|
|
|
|
7FF5197DC000
|
unkown
|
page readonly
|
|
|
|
1985C484000
|
unkown
|
page read and write
|
|
|
|
2470F03F000
|
unkown
|
page read and write
|
|
|
|
261E000
|
unkown
|
page readonly
|
|
|
|
7FF58FB01000
|
unkown
|
page readonly
|
|
|
|
298F000
|
unkown
|
page readonly
|
|
|
|
130DE269000
|
unkown
|
page read and write
|
|
|
|
7FF5CD171000
|
unkown
|
page readonly
|
|
|
|
2E17000
|
heap private
|
page read and write
|
|
|
|
7FF5DCB12000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
269B000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFAB000
|
unkown
|
page readonly
|
|
|
|
1DC56F95000
|
unkown
|
page read and write
|
|
|
|
6330000
|
unkown
|
page readonly
|
|
|
|
2B60000
|
heap default
|
page read and write
|
|
|
|
7FF5DCE4A000
|
unkown
|
page readonly
|
|
|
|
5CAD000
|
unkown
|
page read and write
|
|
|
|
7FF58FA54000
|
unkown
|
page readonly
|
|
|
|
7FF4F3704000
|
unkown
|
page readonly
|
|
|
|
7FF5197DF000
|
unkown
|
page readonly
|
|
|
|
1985C385000
|
unkown
|
page read and write
|
|
|
|
7FF5CCBAD000
|
unkown
|
page readonly
|
|
|
|
1C1C775000
|
unkown
|
page read and write
|
|
|
|
7FF50D631000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFB7000
|
unkown
|
page readonly
|
|
|
|
7FF5778B6000
|
unkown
|
page readonly
|
|
|
|
7FF5CD01F000
|
unkown
|
page readonly
|
|
|
|
1DC56716000
|
unkown
|
page read and write
|
|
|
|
CF504FE000
|
unkown
|
page read and write
|
|
|
|
2960000
|
unkown
|
page readonly
|
|
|
|
1DC56F97000
|
unkown
|
page read and write
|
|
|
|
7FF53E4D7000
|
unkown
|
page readonly
|
|
|
|
1DC56FC2000
|
unkown
|
page read and write
|
|
|
|
7FF51981E000
|
unkown
|
page readonly
|
|
|
|
7FF577A36000
|
unkown
|
page readonly
|
|
|
|
7FF5DCDD4000
|
unkown
|
page readonly
|
|
|
|
2713000
|
unkown
|
page readonly
|
|
|
|
4E3A7CE000
|
unkown
|
page read and write
|
|
|
|
7FF53E2E5000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFD7000
|
unkown
|
page readonly
|
|
|
|
1DC56F3A000
|
unkown
|
page read and write
|
|
|
|
130DE300000
|
unkown
|
page read and write
|
|
|
|
2983000
|
unkown
|
page readonly
|
|
|
|
1D150A80000
|
unkown
|
page readonly
|
|
|
|
66E08FE000
|
unkown
|
page read and write
|
|
|
|
1C1C30C000
|
unkown
|
page read and write
|
|
|
|
1DC56F64000
|
unkown
|
page read and write
|
|
|
|
7FF50D628000
|
unkown
|
page readonly
|
|
|
|
2802000
|
unkown
|
page readonly
|
|
|
|
7FF5CD01A000
|
unkown
|
page readonly
|
|
|
|
7FF5CD388000
|
unkown
|
page readonly
|
|
|
|
298A000
|
unkown
|
page readonly
|
|
|
|
2609000
|
unkown
|
page readonly
|
|
|
|
14D8A7B000
|
unkown
|
page read and write
|
|
|
|
1A49FE8E000
|
unkown
|
page read and write
|
|
|
|
7FF5DD016000
|
unkown
|
page readonly
|
|
|
|
2B85000
|
unkown
|
page read and write
|
|
|
|
1985C30D000
|
unkown
|
page read and write
|
|
|
|
24F2000
|
unkown
|
page readonly
|
|
|
|
130DE200000
|
unkown
|
page read and write
|
|
|
|
7FF53DD1D000
|
unkown
|
page readonly
|
|
|
|
7FF58FA10000
|
unkown
|
page readonly
|
|
|
|
1DC56FA7000
|
unkown
|
page read and write
|
|
|
|
1985A2BD000
|
unkown
|
page read and write
|
|
|
|
7FF5CD34E000
|
unkown
|
page readonly
|
|
|
|
1DC566E2000
|
unkown
|
page read and write
|
|
|
|
1985C400000
|
unkown
|
page read and write
|
|
|
|
7FF519829000
|
unkown
|
page readonly
|
|
|
|
7FF5777BF000
|
unkown
|
page readonly
|
|
|
|
7FF5CD258000
|
unkown
|
page readonly
|
|
|
|
130DE270000
|
unkown
|
page read and write
|
|
|
|
7FF5DC8F3000
|
unkown
|
page readonly
|
|
|
|
1985C702000
|
unkown
|
page read and write
|
|
|
|
130DFD70000
|
unkown
|
page readonly
|
|
|
|
130DE0D0000
|
heap private
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
1DC56F5E000
|
unkown
|
page read and write
|
|
|
|
7FF50D5F8000
|
unkown
|
page readonly
|
|
|
|
7FF58FAF4000
|
unkown
|
page readonly
|
|
|
|
1985A2F9000
|
unkown
|
page read and write
|
|
|
|
2B8D000
|
unkown
|
page read and write
|
|
|
|
7FF5197B0000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF4F37EA000
|
unkown
|
page readonly
|
|
|
|
7FF577AF0000
|
unkown
|
page readonly
|
|
|
|
1985A2C3000
|
unkown
|
page read and write
|
|
|
|
262D000
|
unkown
|
page readonly
|
|
|
|
2470F06C000
|
unkown
|
page read and write
|
|
|
|
1985A1E0000
|
unkown
|
page readonly
|
|
|
|
1985C3EB000
|
unkown
|
page read and write
|
|
|
|
66E0A7F000
|
unkown
|
page read and write
|
|
|
|
2749BA8D000
|
unkown
|
page read and write
|
|
|
|
1DC56F54000
|
unkown
|
page read and write
|
|
|
|
1DC566E9000
|
unkown
|
page read and write
|
|
|
|
7FF58FA64000
|
unkown
|
page readonly
|
|
|
|
CF509FF000
|
unkown
|
page read and write
|
|
|
|
1DC5759B000
|
unkown
|
page read and write
|
|
|
|
7FF4F369B000
|
unkown
|
page readonly
|
|
|
|
7FF577AFB000
|
unkown
|
page readonly
|
|
|
|
7FF577B69000
|
unkown
|
page readonly
|
|
|
|
2BA2000
|
unkown
|
page read and write
|
|
|
|
1DC56681000
|
unkown
|
page read and write
|
|
|
|
2696000
|
unkown
|
page readonly
|
|
|
|
1DC56F6D000
|
unkown
|
page read and write
|
|
|
|
7FF519385000
|
unkown
|
page readonly
|
|
|
|
1DC5748E000
|
unkown
|
page read and write
|
|
|
|
29F1000
|
unkown
|
page readonly
|
|
|
|
1DC56FB2000
|
unkown
|
page read and write
|
|
|
|
1985C33C000
|
unkown
|
page read and write
|
|
|
|
7FF5779F3000
|
unkown
|
page readonly
|
|
|
|
7FF577B07000
|
unkown
|
page readonly
|
|
|
|
7FF5196FD000
|
unkown
|
page readonly
|
|
|
|
23F43054000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFEA000
|
unkown
|
page readonly
|
|
|
|
3210000
|
unkown
|
page read and write
|
|
|
|
7FF50D562000
|
unkown
|
page readonly
|
|
|
|
29AB000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF9E000
|
unkown
|
page readonly
|
|
|
|
23F4303F000
|
unkown
|
page read and write
|
|
|
|
130DE26E000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
1985C700000
|
unkown
|
page read and write
|
|
|
|
6BB43F9000
|
unkown
|
page read and write
|
|
|
|
1985C0D0000
|
unkown
|
page read and write
|
|
|
|
7FF53E4C5000
|
unkown
|
page readonly
|
|
|
|
1985A302000
|
unkown
|
page read and write
|
|
|
|
1DC5664A000
|
unkown
|
page read and write
|
|
|
|
2540000
|
unkown
|
page readonly
|
|
|
|
1DC56500000
|
heap default
|
page read and write
|
|
|
|
2470EFC0000
|
heap default
|
page read and write
|
|
|
|
7FF5CD434000
|
unkown
|
page readonly
|
|
|
|
7FF5197BB000
|
unkown
|
page readonly
|
|
|
|
7FF51989A000
|
unkown
|
page readonly
|
|
|
|
1985A2C4000
|
unkown
|
page read and write
|
|
|
|
23F43029000
|
unkown
|
page read and write
|
|
|
|
7FF5DCFCC000
|
unkown
|
page readonly
|
|
|
|
3374000
|
unkown
|
page read and write
|
|
|
|
1985A400000
|
unkown
|
page write copy
|
|
|
|
7FF53E18A000
|
unkown
|
page readonly
|
|
|
|
66E10FB000
|
unkown
|
page read and write
|
|
|
|
1DC56FB2000
|
unkown
|
page read and write
|
|
|
|
1985C502000
|
unkown
|
page read and write
|
|
|
|
7FF50D6B2000
|
unkown
|
page readonly
|
|
|
|
1985C30D000
|
unkown
|
page read and write
|
|
|
|
23F43200000
|
unkown
|
page readonly
|
|
|
|
1DC56FA8000
|
unkown
|
page read and write
|
|
|
|
7FF5777C7000
|
unkown
|
page readonly
|
|
|
|
7FF5197FA000
|
unkown
|
page readonly
|
|
|
|
1DC56D20000
|
unkown
|
page read and write
|
|
|
|
2713000
|
unkown
|
page readonly
|
|
|
|
7FF5DCFF4000
|
unkown
|
page readonly
|
|
|
|
2749BB00000
|
unkown
|
page read and write
|
|
|
|
7FF577931000
|
unkown
|
page readonly
|
|
|
|
7FF519826000
|
unkown
|
page readonly
|
|
|
|
7FF50D4BB000
|
unkown
|
page readonly
|
|
|
|
1985A35D000
|
unkown
|
page read and write
|
|
|
|
7FF4F2FA9000
|
unkown
|
page readonly
|
|
|
|
7FF50D6B1000
|
unkown
|
page readonly
|
|
|
|
1985A0A0000
|
heap private
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF5CD43A000
|
unkown
|
page readonly
|
|
|
|
336D000
|
unkown
|
page read and write
|
|
|
|
1D150790000
|
unkown
|
page readonly
|
|
|
|
2470F06C000
|
unkown
|
page read and write
|
|
|
|
130DE26A000
|
unkown
|
page read and write
|
|
|
|
1DC56D20000
|
unkown
|
page readonly
|
|
|
|
1985C313000
|
unkown
|
page read and write
|
|
|
|
7FF5197F4000
|
unkown
|
page readonly
|
|
|
|
3160000
|
heap default
|
page read and write
|
|
|
|
1DC56F55000
|
unkown
|
page read and write
|
|
|
|
7FF5DCE9E000
|
unkown
|
page readonly
|
|
|
|
31BE000
|
unkown
|
page read and write
|
|
|
|
A2ED975000
|
unkown
|
page read and write
|
|
|
|
7FF58FA48000
|
unkown
|
page readonly
|
|
|
|
7FF577351000
|
unkown
|
page readonly
|
|
|
|
1A49FF08000
|
unkown
|
page read and write
|
|
|
|
23F43002000
|
unkown
|
page read and write
|
|
|
|
7FF5779D1000
|
unkown
|
page readonly
|
|
|
|
7FF577911000
|
unkown
|
page readonly
|
|
|
|
2B8D000
|
unkown
|
page read and write
|
|
|
|
2749BA3C000
|
unkown
|
page read and write
|
|
|
|
1985C582000
|
unkown
|
page read and write
|
|
|
|
1985C642000
|
unkown
|
page read and write
|
|
|
|
1DC56F4D000
|
unkown
|
page read and write
|
|
|
|
7FF577926000
|
unkown
|
page readonly
|
|
|
|
1985A450000
|
unkown
|
page readonly
|
|
|
|
7FF577B44000
|
unkown
|
page readonly
|
|
|
|
89D70FA000
|
unkown
|
page read and write
|
|
|
|
23F43034000
|
unkown
|
page read and write
|
|
|
|
1985C3F9000
|
unkown
|
page read and write
|
|
|
|
1D150A75000
|
heap private
|
page read and write
|
|
|
|
2749BA54000
|
unkown
|
page read and write
|
|
|
|
7FF50D5C0000
|
unkown
|
page readonly
|
|
|
|
7FF4F379E000
|
unkown
|
page readonly
|
|
|
|
7FF5DCF9A000
|
unkown
|
page readonly
|
|
|
|
1DC566F3000
|
unkown
|
page read and write
|
|
|
|
1DC56F4D000
|
unkown
|
page read and write
|
|
|
|
66E0AFA000
|
unkown
|
page read and write
|
|
|
|
1985C4C7000
|
unkown
|
page read and write
|
|
|
|
7FF577AC4000
|
unkown
|
page readonly
|
|
|
|
7FF50D5EC000
|
unkown
|
page readonly
|
|
|
|
336E000
|
unkown
|
page read and write
|
|
|
|
1DC565F0000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
7FF577AEA000
|
unkown
|
page readonly
|
|
|
|
2749BA88000
|
unkown
|
page read and write
|
|
|
|
26E5000
|
unkown
|
page readonly
|
|
|
|
1A49FD70000
|
unkown
|
page read and write
|
|
|
|
7FF5CD253000
|
unkown
|
page readonly
|
|
|
|
2749B8A0000
|
heap private
|
page read and write
|
|
|
|
7FF4F3819000
|
unkown
|
page readonly
|
|
|
|
4E3AAF9000
|
unkown
|
page read and write
|
|
|
|
7FF5DCA7E000
|
unkown
|
page readonly
|
|
|
|
7FF50D5CB000
|
unkown
|
page readonly
|
|
|
|
2470F002000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3C6000
|
unkown
|
page readonly
|
|
|
|
7FF53E50A000
|
unkown
|
page readonly
|
|
|
|
66E107A000
|
unkown
|
page read and write
|
|
|
|
7FF5CD1A9000
|
unkown
|
page readonly
|
|
|
|
7FF4F35F1000
|
unkown
|
page readonly
|
|
|
|
130DE229000
|
unkown
|
page read and write
|
|
|
|
7FF58FAFA000
|
unkown
|
page readonly
|
|
|
|
7FF53E18F000
|
unkown
|
page readonly
|
|
|
|
1DC56688000
|
unkown
|
page read and write
|
|
|
|
7FF577AEE000
|
unkown
|
page readonly
|
|
|
|
66E058B000
|
unkown
|
page read and write
|
|
|
|
130DE4D0000
|
unkown
|
page readonly
|
|
|
|
7FF4F3816000
|
unkown
|
page readonly
|
|
|
|
7FF57734D000
|
unkown
|
page readonly
|
|
|
|
130DE302000
|
unkown
|
page read and write
|
|
|
|
1D1508E9000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF40000
|
unkown
|
page readonly
|
|
|
|
1DC56FD8000
|
unkown
|
page read and write
|
|
|
|
CF50AFF000
|
unkown
|
page read and write
|
|
|
|
1985A29C000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF8A000
|
unkown
|
page readonly
|
|
|
|
1DC56F2A000
|
unkown
|
page read and write
|
|
|
|
1DC5669F000
|
unkown
|
page read and write
|
|
|
|
7FF50D61E000
|
unkown
|
page readonly
|
|
|
|
1DC56F4F000
|
unkown
|
page read and write
|
|
|
|
1DC56F30000
|
unkown
|
page read and write
|
|
|
|
66E097A000
|
unkown
|
page read and write
|
|
|
|
1985A229000
|
unkown
|
page read and write
|
|
|
|
1985D310000
|
unkown
|
page read and write
|
|
|
|
1DC56F31000
|
unkown
|
page read and write
|
|
|
|
7FF4F388A000
|
unkown
|
page readonly
|
|
|
|
31C0000
|
heap private
|
page read and write
|
|
|
|
7FF53E3C8000
|
unkown
|
page readonly
|
|
|
|
66E0F7B000
|
unkown
|
page read and write
|
|
|
|
1DC56FB2000
|
unkown
|
page read and write
|
|
|
|
7FF4F36ED000
|
unkown
|
page readonly
|
|
|
|
130DE26E000
|
unkown
|
page read and write
|
|
|
|
66E127F000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
heap default
|
page read and write
|
|
|
|
7FF5CD355000
|
unkown
|
page readonly
|
|
|
|
1DC56FBA000
|
unkown
|
page read and write
|
|
|
|
130DE269000
|
unkown
|
page read and write
|
|
|
|
7FF577B58000
|
unkown
|
page readonly
|
|
|
|
4E3AA7E000
|
unkown
|
page read and write
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
1C1CE78000
|
unkown
|
page read and write
|
|
|
|
1985C060000
|
unkown
|
page readonly
|
|
|
|
23F42FD0000
|
unkown
|
page readonly
|
|
|
|
3371000
|
unkown
|
page read and write
|
|
|
|
23F42E40000
|
heap private
|
page read and write
|
|
|
|
2B6A000
|
heap default
|
page read and write
|
|
|
|
7FF5DCF74000
|
unkown
|
page readonly
|
|
|
|
1985C30D000
|
unkown
|
page read and write
|
|
|
|
1985C582000
|
unkown
|
page read and write
|
|
|
|
1DC57402000
|
unkown
|
page read and write
|
|
|
|
7FF4F37FF000
|
unkown
|
page readonly
|
|
|
|
3365000
|
unkown
|
page read and write
|
|
|
|
1A49FD40000
|
heap default
|
page read and write
|
|
|
|
83B000
|
unkown
|
page read and write
|
|
|
|
2D90000
|
unkown
|
page read and write
|
|
|
|
1DC56F47000
|
unkown
|
page read and write
|
|
|
|
1D1508E7000
|
unkown
|
page read and write
|
|
|
|
130DE251000
|
unkown
|
page read and write
|
|
|
|
7FF50D62E000
|
unkown
|
page readonly
|
|
|
|
1985A2BE000
|
unkown
|
page read and write
|
|
|
|
1985C344000
|
unkown
|
page read and write
|
|
|
|
2749BA02000
|
unkown
|
page read and write
|
|
|
|
7FF577A8C000
|
unkown
|
page readonly
|
|
|
|
1DC57502000
|
unkown
|
page read and write
|
|
|
|
1DC56FB6000
|
unkown
|
page read and write
|
|
|
|
7FF519530000
|
unkown
|
page readonly
|
|
|
|
2470EF60000
|
heap private
|
page read and write
|
|
|
|
7FF53E3C3000
|
unkown
|
page readonly
|
|
|
|
6730000
|
unkown
|
page read and write
|
|
|
|
7FF4F3360000
|
unkown
|
page readonly
|
|
|
|
2635000
|
unkown
|
page readonly
|
|
|
|
1DC56FA7000
|
unkown
|
page read and write
|
|
|
|
1985C3F4000
|
unkown
|
page read and write
|
|
|
|
1985C3F5000
|
unkown
|
page read and write
|
|
|
|
7FF5779F8000
|
unkown
|
page readonly
|
|
|
|
89D7179000
|
unkown
|
page read and write
|
|
|
|
1DC5664D000
|
unkown
|
page read and write
|
|
|
|
2470F113000
|
unkown
|
page read and write
|
|
|
|
2B8D000
|
unkown
|
page read and write
|
|
|
|
1DC57500000
|
unkown
|
page read and write
|
|
|
|
7FF53E460000
|
unkown
|
page readonly
|
|
|
|
1DC564A0000
|
heap private
|
page read and write
|
|
|
|
7FF5CD3C1000
|
unkown
|
page readonly
|
|
|
|
1C1CCFF000
|
unkown
|
page read and write
|
|
|
|
CF5057D000
|
unkown
|
page read and write
|
|
|
|
261A000
|
unkown
|
page readonly
|
|
|
|
1985C542000
|
unkown
|
page read and write
|
|
|
|
1D1508D5000
|
unkown
|
page read and write
|
|
|
|
7FF5DD084000
|
unkown
|
page readonly
|
|
|
|
1DC56FA7000
|
unkown
|
page read and write
|
|
|
|
7FF5CD3B8000
|
unkown
|
page readonly
|
|
|
|
1DC56FA7000
|
unkown
|
page read and write
|
|
|
|
1DC5753C000
|
unkown
|
page read and write
|
|
|
|
1DC56F58000
|
unkown
|
page read and write
|
|
|
|
1DC57600000
|
unkown
|
page readonly
|
|
|
|
7FF4F3520000
|
unkown
|
page readonly
|
|
|
|
7FF53E53D000
|
unkown
|
page readonly
|
|
|
|
1DC566A6000
|
unkown
|
page read and write
|
|
|
|
297F000
|
unkown
|
page readonly
|
|
|
|
66E0E7B000
|
unkown
|
page read and write
|
|
|
|
2749B910000
|
unkown
|
page readonly
|
|
|
|
130DE26A000
|
unkown
|
page read and write
|
|
|
|
7FF53E3BB000
|
unkown
|
page readonly
|
|
|
|
7FF4F378A000
|
unkown
|
page readonly
|
|
|
|
7FF577AB3000
|
unkown
|
page readonly
|
|
|
|
7FF5197B5000
|
unkown
|
page readonly
|
|
|
|
1A49FCE0000
|
heap private
|
page read and write
|
|
|
|
CF50675000
|
unkown
|
page read and write
|
|
|
|
1C1C67F000
|
unkown
|
page read and write
|
|
|
|
67F0000
|
unkown
|
page read and write
|
|
|
|
130DE268000
|
unkown
|
page read and write
|
|
|
|
1DC56F97000
|
unkown
|
page read and write
|
|
|
|
1985A23F000
|
unkown
|
page read and write
|
|
|
|
7FF4F37A0000
|
unkown
|
page readonly
|
|
|
|
24FE000
|
unkown
|
page readonly
|
|
|
|
1985C37B000
|
unkown
|
page read and write
|
|
|
|
7FF5DCB02000
|
unkown
|
page readonly
|
|
|
|
1DC56600000
|
unkown
|
page read and write
|
|
|
|
2749BA5E000
|
unkown
|
page read and write
|
|
|
|
1DC56F5A000
|
unkown
|
page read and write
|
|
|
|
1985A302000
|
unkown
|
page read and write
|
|
|
|
7FF5DCF8C000
|
unkown
|
page readonly
|
|
|
|
2EFA000
|
unkown
|
page read and write
|
|
|
|
7EE000
|
unkown
|
page read and write
|
|
|
|
66E09FA000
|
unkown
|
page read and write
|
|
|
|
7FF50D386000
|
unkown
|
page readonly
|
|
|
|
7FF5DCDF1000
|
unkown
|
page readonly
|
|
|
|
7FF4F37D7000
|
unkown
|
page readonly
|
|
|
|
7FF5CD37C000
|
unkown
|
page readonly
|
|
There are 1013 hidden memdumps, click here to show them.