Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Refusal-1605078281-01212021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Refusal-1605078281-01212021.xlsm.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:53
2020, mtime=Fri Jan 22 17:45:19 2021, atime=Fri Jan 22 17:45:19 2021, length=25980, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$Refusal-1605078281-01212021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\535148E5.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BC88F1A2.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\E1B7774.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\9EC10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Fri Jan 22 17:45:19 2021, atime=Fri Jan 22 17:45:19 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\7FC10000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9D8C775C.png
|
PNG image data, 205 x 58, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9FACB7AD.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DCD941CA.png
|
PNG image data, 24 x 24, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\8CDE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Refusal-1605078281-01212021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:13
2020, mtime=Fri Jan 22 17:39:41 2021, atime=Fri Jan 22 17:39:41 2021, length=26106, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\1DDE0000
|
data
|
dropped
|
|
There are 6 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32 ..\Flopers.GGRRDDFF,DllRegisterServer
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
leafybuy.com
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
+r8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
,r8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1C688
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1CD9C
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1CEE5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1CFB0
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
,d8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2A6D6
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2A7FF
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ta6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ED901
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDB90
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDCD8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDD54
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
`i6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F5AAE
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F5C05
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductNonBootFilesIntl_1033
|
|
There are 138 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
F5FA47E000
|
unkown
|
page read and write
|
|
|
|
AE5677F000
|
unkown
|
page read and write
|
|
|
|
7FF580DDC000
|
unkown
|
page readonly
|
|
|
|
814000
|
heap private
|
page read and write
|
|
|
|
7FF57EF06000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFA6000
|
unkown
|
page readonly
|
|
|
|
7FF558F39000
|
unkown
|
page readonly
|
|
|
|
29C306C8000
|
unkown
|
page read and write
|
|
|
|
275F0AD0000
|
heap default
|
page read and write
|
|
|
|
7FF57876C000
|
unkown
|
page readonly
|
|
|
|
7FF548A29000
|
unkown
|
page readonly
|
|
|
|
FFB07F9000
|
unkown
|
page read and write
|
|
|
|
8400E7F000
|
unkown
|
page read and write
|
|
|
|
B36FFFD000
|
unkown
|
page read and write
|
|
|
|
7FF581052000
|
unkown
|
page readonly
|
|
|
|
7FF548AE5000
|
unkown
|
page readonly
|
|
|
|
14E10A88000
|
unkown
|
page read and write
|
|
|
|
1B7A5DB0000
|
unkown
|
page read and write
|
|
|
|
21E51730000
|
heap default
|
page read and write
|
|
|
|
25045263000
|
unkown
|
page read and write
|
|
|
|
7FF578739000
|
unkown
|
page readonly
|
|
|
|
7DFE73261000
|
unkown
|
page readonly
|
|
|
|
1B7A5E00000
|
unkown
|
page read and write
|
|
|
|
14E0BB59000
|
unkown
|
page read and write
|
|
|
|
392000
|
unkown
|
page read and write
|
|
|
|
7FF57EF0C000
|
unkown
|
page readonly
|
|
|
|
25499A28000
|
unkown
|
page read and write
|
|
|
|
7FF50B68E000
|
unkown
|
page readonly
|
|
|
|
7FF56F541000
|
unkown
|
page readonly
|
|
|
|
25499B02000
|
unkown
|
page read and write
|
|
|
|
14E10A13000
|
unkown
|
page read and write
|
|
|
|
7FF580EBE000
|
unkown
|
page readonly
|
|
|
|
25045261000
|
unkown
|
page read and write
|
|
|
|
B36FC7E000
|
unkown
|
page read and write
|
|
|
|
7FF59E1EC000
|
unkown
|
page readonly
|
|
|
|
21E51830000
|
unkown
|
page readonly
|
|
|
|
2247A613000
|
unkown
|
page read and write
|
|
|
|
2247AC60000
|
unkown
|
page readonly
|
|
|
|
4B9427F000
|
unkown
|
page read and write
|
|
|
|
275F0C8A000
|
unkown
|
page read and write
|
|
|
|
552000
|
unkown
|
page read and write
|
|
|
|
275F0C00000
|
unkown
|
page read and write
|
|
|
|
14E0BB00000
|
unkown
|
page read and write
|
|
|
|
810000
|
heap private
|
page read and write
|
|
|
|
2549A002000
|
unkown
|
page read and write
|
|
|
|
DBC6F5B000
|
unkown
|
page read and write
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
14E10ABC000
|
unkown
|
page read and write
|
|
|
|
7FF59E18A000
|
unkown
|
page readonly
|
|
|
|
7FF5CED00000
|
unkown
|
page readonly
|
|
|
|
F51C4FD000
|
unkown
|
page read and write
|
|
|
|
7FF558E5A000
|
unkown
|
page readonly
|
|
|
|
7FF55867A000
|
unkown
|
page readonly
|
|
|
|
25499A77000
|
unkown
|
page read and write
|
|
|
|
29C305F8000
|
heap default
|
page read and write
|
|
|
|
29C30800000
|
unkown
|
page readonly
|
|
|
|
7FF580FD7000
|
unkown
|
page readonly
|
|
|
|
275F0C76000
|
unkown
|
page read and write
|
|
|
|
29C3127D000
|
unkown
|
page read and write
|
|
|
|
7FF580EDF000
|
unkown
|
page readonly
|
|
|
|
14E0B880000
|
unkown
|
page read and write
|
|
|
|
7FF50B5D7000
|
unkown
|
page readonly
|
|
|
|
25499B13000
|
unkown
|
page read and write
|
|
|
|
14E0B200000
|
unkown
|
page read and write
|
|
|
|
7FF57E816000
|
unkown
|
page readonly
|
|
|
|
7FF56F4AD000
|
unkown
|
page readonly
|
|
|
|
7FF578751000
|
unkown
|
page readonly
|
|
|
|
7FF50B2C2000
|
unkown
|
page readonly
|
|
|
|
14E0B2FC000
|
unkown
|
page read and write
|
|
|
|
7FF548BE5000
|
unkown
|
page readonly
|
|
|
|
7FF548793000
|
unkown
|
page readonly
|
|
|
|
7FF56F2CF000
|
unkown
|
page readonly
|
|
|
|
25045257000
|
unkown
|
page read and write
|
|
|
|
7FF548B3C000
|
unkown
|
page readonly
|
|
|
|
7FF558E89000
|
unkown
|
page readonly
|
|
|
|
29C31272000
|
unkown
|
page read and write
|
|
|
|
25045267000
|
unkown
|
page read and write
|
|
|
|
268BDC13000
|
unkown
|
page read and write
|
|
|
|
29C312C0000
|
unkown
|
page read and write
|
|
|
|
7FF50B74E000
|
unkown
|
page readonly
|
|
|
|
AE5687F000
|
unkown
|
page read and write
|
|
|
|
AE5667E000
|
unkown
|
page read and write
|
|
|
|
7FF50B570000
|
unkown
|
page readonly
|
|
|
|
7FF50B6F0000
|
unkown
|
page readonly
|
|
|
|
7FF548B95000
|
unkown
|
page readonly
|
|
|
|
7FF5810F0000
|
unkown
|
page readonly
|
|
|
|
25045241000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF42000
|
unkown
|
page readonly
|
|
|
|
14E0BA15000
|
unkown
|
page read and write
|
|
|
|
2504525C000
|
unkown
|
page read and write
|
|
|
|
7FF580F29000
|
unkown
|
page readonly
|
|
|
|
7FF5CEE09000
|
unkown
|
page readonly
|
|
|
|
268BDB90000
|
unkown
|
page readonly
|
|
|
|
14E108E0000
|
unkown
|
page read and write
|
|
|
|
7FF57ED97000
|
unkown
|
page readonly
|
|
|
|
275F1190000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFD7000
|
unkown
|
page readonly
|
|
|
|
2247A64A000
|
unkown
|
page read and write
|
|
|
|
2247A666000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF48000
|
unkown
|
page readonly
|
|
|
|
7FF558EA6000
|
unkown
|
page readonly
|
|
|
|
14E10660000
|
unkown
|
page read and write
|
|
|
|
2504522C000
|
unkown
|
page read and write
|
|
|
|
7FF50B341000
|
unkown
|
page readonly
|
|
|
|
29B9000
|
unkown
|
page readonly
|
|
|
|
7FF5CEC9D000
|
unkown
|
page readonly
|
|
|
|
7FF56F53E000
|
unkown
|
page readonly
|
|
|
|
7FF580C93000
|
unkown
|
page readonly
|
|
|
|
7FF56F40B000
|
unkown
|
page readonly
|
|
|
|
7FF548B9F000
|
unkown
|
page readonly
|
|
|
|
7FF5787E0000
|
unkown
|
page readonly
|
|
|
|
29C30989000
|
heap private
|
page read and write
|
|
|
|
29C306AC000
|
unkown
|
page read and write
|
|
|
|
2CC2000
|
unkown
|
page readonly
|
|
|
|
2247A602000
|
unkown
|
page read and write
|
|
|
|
14E10A3E000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
unkown
|
page read and write
|
|
|
|
7FF580E20000
|
unkown
|
page readonly
|
|
|
|
75F000
|
stack
|
page read and write
|
|
|
|
7FF580CE7000
|
unkown
|
page readonly
|
|
|
|
14E0B313000
|
unkown
|
page read and write
|
|
|
|
25045249000
|
unkown
|
page read and write
|
|
|
|
7FF58107A000
|
unkown
|
page readonly
|
|
|
|
7FF50B650000
|
unkown
|
page readonly
|
|
|
|
2247A5E0000
|
unkown
|
page read and write
|
|
|
|
7FF57EEC5000
|
unkown
|
page readonly
|
|
|
|
25045264000
|
unkown
|
page read and write
|
|
|
|
7FF54890E000
|
unkown
|
page readonly
|
|
|
|
7FF50B750000
|
unkown
|
page readonly
|
|
|
|
7FF5810F4000
|
unkown
|
page readonly
|
|
|
|
275F0C02000
|
unkown
|
page read and write
|
|
|
|
7FF558F31000
|
unkown
|
page readonly
|
|
|
|
840117E000
|
unkown
|
page read and write
|
|
|
|
14E10AB2000
|
unkown
|
page read and write
|
|
|
|
254997A0000
|
heap private
|
page read and write
|
|
|
|
AE566FF000
|
unkown
|
page read and write
|
|
|
|
14E10940000
|
unkown
|
page readonly
|
|
|
|
7FF548B7A000
|
unkown
|
page readonly
|
|
|
|
25045256000
|
unkown
|
page read and write
|
|
|
|
7FF57871E000
|
unkown
|
page readonly
|
|
|
|
14E10888000
|
unkown
|
page write copy
|
|
|
|
7FF5CEDD8000
|
unkown
|
page readonly
|
|
|
|
7FF59E26E000
|
unkown
|
page readonly
|
|
|
|
DBC75FE000
|
unkown
|
page read and write
|
|
|
|
2247A647000
|
unkown
|
page read and write
|
|
|
|
7FF50B332000
|
unkown
|
page readonly
|
|
|
|
F51C0FE000
|
unkown
|
page read and write
|
|
|
|
25045269000
|
unkown
|
page read and write
|
|
|
|
268BE600000
|
unkown
|
page readonly
|
|
|
|
14E10AB6000
|
unkown
|
page read and write
|
|
|
|
2504523C000
|
unkown
|
page read and write
|
|
|
|
7FF50B38E000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFC5000
|
unkown
|
page readonly
|
|
|
|
29C306BD000
|
unkown
|
page read and write
|
|
|
|
7FF580F20000
|
unkown
|
page readonly
|
|
|
|
14E1088C000
|
unkown
|
page readonly
|
|
|
|
7FF57EE96000
|
unkown
|
page readonly
|
|
|
|
7FF548B66000
|
unkown
|
page readonly
|
|
|
|
14E0C061000
|
unkown
|
page read and write
|
|
|
|
29C30647000
|
unkown
|
page read and write
|
|
|
|
53E000
|
unkown
|
page read and write
|
|
|
|
250451E0000
|
unkown
|
page readonly
|
|
|
|
7FF558EC5000
|
unkown
|
page readonly
|
|
|
|
2DA8000
|
unkown
|
page readonly
|
|
|
|
29C30990000
|
unkown
|
page read and write
|
|
|
|
2CF7000
|
unkown
|
page readonly
|
|
|
|
7FF59E1F6000
|
unkown
|
page readonly
|
|
|
|
2247C400000
|
unkown
|
page readonly
|
|
|
|
2247A5F0000
|
unkown
|
page readonly
|
|
|
|
7FF578550000
|
unkown
|
page readonly
|
|
|
|
14E0BB18000
|
unkown
|
page read and write
|
|
|
|
14E10A9D000
|
unkown
|
page read and write
|
|
|
|
7FF56F442000
|
unkown
|
page readonly
|
|
|
|
14E108D0000
|
unkown
|
page read and write
|
|
|
|
7FF59E1B5000
|
unkown
|
page readonly
|
|
|
|
7FF5CE875000
|
unkown
|
page readonly
|
|
|
|
14E10ACB000
|
unkown
|
page read and write
|
|
|
|
7FF558E9D000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFAC000
|
unkown
|
page readonly
|
|
|
|
14E0B302000
|
unkown
|
page read and write
|
|
|
|
7FF578766000
|
unkown
|
page readonly
|
|
|
|
F51C37C000
|
unkown
|
page read and write
|
|
|
|
7FF50B51A000
|
unkown
|
page readonly
|
|
|
|
14E107B0000
|
unkown
|
page read and write
|
|
|
|
7FF50B67A000
|
unkown
|
page readonly
|
|
|
|
29C306BD000
|
unkown
|
page read and write
|
|
|
|
14E10A2C000
|
unkown
|
page read and write
|
|
|
|
1B7A6800000
|
unkown
|
page read and write
|
|
|
|
2247A63D000
|
unkown
|
page read and write
|
|
|
|
14E108E0000
|
unkown
|
page read and write
|
|
|
|
7FF57ED23000
|
unkown
|
page readonly
|
|
|
|
7FF56F4E4000
|
unkown
|
page readonly
|
|
|
|
7FF5786F6000
|
unkown
|
page readonly
|
|
|
|
29C308E0000
|
unkown
|
page readonly
|
|
|
|
14E10788000
|
unkown
|
page read and write
|
|
|
|
7FF580E8C000
|
unkown
|
page readonly
|
|
|
|
254999D0000
|
unkown
|
page read and write
|
|
|
|
14E10AB2000
|
unkown
|
page read and write
|
|
|
|
4B9437F000
|
unkown
|
page read and write
|
|
|
|
29C30641000
|
unkown
|
page read and write
|
|
|
|
7FF548BF4000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF30000
|
unkown
|
page readonly
|
|
|
|
14E10A16000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page readonly
|
|
|
|
7FF548C59000
|
unkown
|
page readonly
|
|
|
|
7FF580F11000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF46000
|
unkown
|
page readonly
|
|
|
|
1B7A5D20000
|
heap private
|
page read and write
|
|
|
|
1B7A6460000
|
unkown
|
page readonly
|
|
|
|
7FF558E6E000
|
unkown
|
page readonly
|
|
|
|
268BDC88000
|
unkown
|
page read and write
|
|
|
|
21E516C0000
|
unkown
|
page read and write
|
|
|
|
B36F8BC000
|
unkown
|
page read and write
|
|
|
|
7FF5786E2000
|
unkown
|
page readonly
|
|
|
|
268BDC6D000
|
unkown
|
page read and write
|
|
|
|
14E0B290000
|
unkown
|
page read and write
|
|
|
|
7FF56F417000
|
unkown
|
page readonly
|
|
|
|
F5FA1EB000
|
unkown
|
page read and write
|
|
|
|
538000
|
unkown
|
page read and write
|
|
|
|
7FF558F2E000
|
unkown
|
page readonly
|
|
|
|
7FF59E279000
|
unkown
|
page readonly
|
|
|
|
F5FA77E000
|
unkown
|
page read and write
|
|
|
|
7FF558CBF000
|
unkown
|
page readonly
|
|
|
|
268BDD02000
|
unkown
|
page read and write
|
|
|
|
4B93CFE000
|
unkown
|
page read and write
|
|
|
|
29C306BD000
|
unkown
|
page read and write
|
|
|
|
7FF5CE77F000
|
unkown
|
page readonly
|
|
|
|
7FF548B50000
|
unkown
|
page readonly
|
|
|
|
14E0B130000
|
unkown
|
page readonly
|
|
|
|
7FF580E0E000
|
unkown
|
page readonly
|
|
|
|
840107F000
|
unkown
|
page read and write
|
|
|
|
8400D7D000
|
unkown
|
page read and write
|
|
|
|
29C30810000
|
unkown
|
page readonly
|
|
|
|
7FF56F4BC000
|
unkown
|
page readonly
|
|
|
|
275F0D13000
|
unkown
|
page read and write
|
|
|
|
7FF50B5E5000
|
unkown
|
page readonly
|
|
|
|
7FF580CD0000
|
unkown
|
page readonly
|
|
|
|
2247A800000
|
unkown
|
page readonly
|
|
|
|
2C9E000
|
unkown
|
page readonly
|
|
|
|
14E0C290000
|
unkown
|
page readonly
|
|
|
|
7FF580D5D000
|
unkown
|
page readonly
|
|
|
|
7FF580C91000
|
unkown
|
page readonly
|
|
|
|
7FF5810DC000
|
unkown
|
page readonly
|
|
|
|
7FF5810BD000
|
unkown
|
page readonly
|
|
|
|
2247A560000
|
heap default
|
page read and write
|
|
|
|
1B7A5E13000
|
unkown
|
page read and write
|
|
|
|
7FF56F458000
|
unkown
|
page readonly
|
|
|
|
B36FD7F000
|
unkown
|
page read and write
|
|
|
|
7FF581150000
|
unkown
|
page readonly
|
|
|
|
7FF578323000
|
unkown
|
page readonly
|
|
|
|
CD0000
|
unkown
|
page readonly
|
|
|
|
25045231000
|
unkown
|
page read and write
|
|
|
|
25045400000
|
unkown
|
page readonly
|
|
|
|
7FF5CE77D000
|
unkown
|
page readonly
|
|
|
|
29C306C8000
|
unkown
|
page read and write
|
|
|
|
F51C1FF000
|
unkown
|
page read and write
|
|
|
|
7FF50B6BD000
|
unkown
|
page readonly
|
|
|
|
29C307E0000
|
unkown
|
page read and write
|
|
|
|
275F0C3D000
|
unkown
|
page read and write
|
|
|
|
29C314F0000
|
unkown
|
page read and write
|
|
|
|
25499B00000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF24000
|
unkown
|
page readonly
|
|
|
|
4B93FFE000
|
unkown
|
page read and write
|
|
|
|
268BDD13000
|
unkown
|
page read and write
|
|
|
|
29C30F30000
|
unkown
|
page readonly
|
|
|
|
14E0C280000
|
unkown
|
page readonly
|
|
|
|
7FF50B6F7000
|
unkown
|
page readonly
|
|
|
|
7FF57EEED000
|
unkown
|
page readonly
|
|
|
|
2D25000
|
unkown
|
page readonly
|
|
|
|
7FF57EF15000
|
unkown
|
page readonly
|
|
|
|
7FF56F107000
|
unkown
|
page readonly
|
|
|
|
4B93DFD000
|
unkown
|
page read and write
|
|
|
|
29C30600000
|
heap default
|
page read and write
|
|
|
|
1B7A5E3E000
|
unkown
|
page read and write
|
|
|
|
1B7A6602000
|
unkown
|
page read and write
|
|
|
|
7FF548B48000
|
unkown
|
page readonly
|
|
|
|
25045229000
|
unkown
|
page read and write
|
|
|
|
F51BEFC000
|
unkown
|
page read and write
|
|
|
|
7FF50B759000
|
unkown
|
page readonly
|
|
|
|
7FF57872F000
|
unkown
|
page readonly
|
|
|
|
29C31540000
|
unkown
|
page read and write
|
|
|
|
7FF548B62000
|
unkown
|
page readonly
|
|
|
|
7FF548B68000
|
unkown
|
page readonly
|
|
|
|
7FF558E75000
|
unkown
|
page readonly
|
|
|
|
4B940FB000
|
unkown
|
page read and write
|
|
|
|
25499A02000
|
unkown
|
page read and write
|
|
|
|
2247C070000
|
unkown
|
page read and write
|
|
|
|
7FF57EED9000
|
unkown
|
page readonly
|
|
|
|
51A000
|
heap default
|
page read and write
|
|
|
|
2D86000
|
unkown
|
page readonly
|
|
|
|
2247A624000
|
unkown
|
page read and write
|
|
|
|
2504526A000
|
unkown
|
page read and write
|
|
|
|
7FF578517000
|
unkown
|
page readonly
|
|
|
|
7FF5786CC000
|
unkown
|
page readonly
|
|
|
|
2CAF000
|
unkown
|
page readonly
|
|
|
|
2247A600000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page readonly
|
|
|
|
2247C0B0000
|
unkown
|
page read and write
|
|
|
|
7FF580FCC000
|
unkown
|
page readonly
|
|
|
|
14E10AB4000
|
unkown
|
page read and write
|
|
|
|
840147F000
|
unkown
|
page read and write
|
|
|
|
2247C130000
|
unkown
|
page readonly
|
|
|
|
7FF56F4C6000
|
unkown
|
page readonly
|
|
|
|
7FF56F103000
|
unkown
|
page readonly
|
|
|
|
25045258000
|
unkown
|
page read and write
|
|
|
|
25045242000
|
unkown
|
page read and write
|
|
|
|
7FF580D66000
|
unkown
|
page readonly
|
|
|
|
275F0C29000
|
unkown
|
page read and write
|
|
|
|
7FF57E6ED000
|
unkown
|
page readonly
|
|
|
|
7FF580995000
|
unkown
|
page readonly
|
|
|
|
25045262000
|
unkown
|
page read and write
|
|
|
|
275F0C65000
|
unkown
|
page read and write
|
|
|
|
4B93A7C000
|
unkown
|
page read and write
|
|
|
|
7FF558E7F000
|
unkown
|
page readonly
|
|
|
|
7FF580D6C000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF28000
|
unkown
|
page readonly
|
|
|
|
275F0BD0000
|
unkown
|
page read and write
|
|
|
|
14E10AB1000
|
unkown
|
page read and write
|
|
|
|
7FF5786F8000
|
unkown
|
page readonly
|
|
|
|
2B93000
|
unkown
|
page readonly
|
|
|
|
7FF558ED4000
|
unkown
|
page readonly
|
|
|
|
2247A71C000
|
unkown
|
page read and write
|
|
|
|
1B7A5D90000
|
unkown
|
page readonly
|
|
|
|
7FF5787E9000
|
unkown
|
page readonly
|
|
|
|
14E0C2A0000
|
unkown
|
page readonly
|
|
|
|
14E0B264000
|
unkown
|
page read and write
|
|
|
|
275F0C6F000
|
unkown
|
page read and write
|
|
|
|
25045276000
|
unkown
|
page read and write
|
|
|
|
268BDC2A000
|
unkown
|
page read and write
|
|
|
|
14E0C180000
|
unkown
|
page read and write
|
|
|
|
2504522F000
|
unkown
|
page read and write
|
|
|
|
535000
|
unkown
|
page read and write
|
|
|
|
4B93C77000
|
unkown
|
page read and write
|
|
|
|
7FF5808C4000
|
unkown
|
page readonly
|
|
|
|
2247A681000
|
unkown
|
page read and write
|
|
|
|
53D000
|
unkown
|
page read and write
|
|
|
|
7FF59DAAC000
|
unkown
|
page readonly
|
|
|
|
7FF50B6A9000
|
unkown
|
page readonly
|
|
|
|
2D02000
|
unkown
|
page readonly
|
|
|
|
7FF57EEF6000
|
unkown
|
page readonly
|
|
|
|
7FF50B32F000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFD4000
|
unkown
|
page readonly
|
|
|
|
790000
|
unkown
|
page readonly
|
|
|
|
E7B31FF000
|
unkown
|
page read and write
|
|
|
|
14E0B269000
|
unkown
|
page read and write
|
|
|
|
7FF50B62A000
|
unkown
|
page readonly
|
|
|
|
14E108E0000
|
unkown
|
page read and write
|
|
|
|
7FF580F18000
|
unkown
|
page readonly
|
|
|
|
2504526C000
|
unkown
|
page read and write
|
|
|
|
29C30639000
|
unkown
|
page read and write
|
|
|
|
7FF56F69C000
|
unkown
|
page readonly
|
|
|
|
29C30985000
|
heap private
|
page read and write
|
|
|
|
7FF581159000
|
unkown
|
page readonly
|
|
|
|
14E0C090000
|
unkown
|
page read and write
|
|
|
|
7FF548BCC000
|
unkown
|
page readonly
|
|
|
|
7FF56F549000
|
unkown
|
page readonly
|
|
|
|
14E0C0A0000
|
unkown
|
page read and write
|
|
|
|
4B93EFA000
|
unkown
|
page read and write
|
|
|
|
7FF57EDF5000
|
unkown
|
page readonly
|
|
|
|
2504523D000
|
unkown
|
page read and write
|
|
|
|
29C30920000
|
unkown
|
page read and write
|
|
|
|
E7B2BAB000
|
unkown
|
page read and write
|
|
|
|
14E0BB13000
|
unkown
|
page read and write
|
|
|
|
7FF50B65D000
|
unkown
|
page readonly
|
|
|
|
14E0BB59000
|
unkown
|
page read and write
|
|
|
|
7FF56F48F000
|
unkown
|
page readonly
|
|
|
|
AE563AB000
|
unkown
|
page read and write
|
|
|
|
25499800000
|
heap default
|
page read and write
|
|
|
|
7FF558ED0000
|
unkown
|
page readonly
|
|
|
|
25499A13000
|
unkown
|
page read and write
|
|
|
|
7FF5783B8000
|
unkown
|
page readonly
|
|
|
|
14E0C080000
|
unkown
|
page read and write
|
|
|
|
14E10A00000
|
unkown
|
page read and write
|
|
|
|
7FF558EBC000
|
unkown
|
page readonly
|
|
|
|
2CE6000
|
unkown
|
page readonly
|
|
|
|
7FF5787DE000
|
unkown
|
page readonly
|
|
|
|
29C30590000
|
unkown
|
page read and write
|
|
|
|
7FF578321000
|
unkown
|
page readonly
|
|
|
|
21E5173E000
|
heap default
|
page read and write
|
|
|
|
7FF578697000
|
unkown
|
page readonly
|
|
|
|
14E10877000
|
unkown
|
page readonly
|
|
|
|
14E0B400000
|
unkown
|
page readonly
|
|
|
|
14E10930000
|
unkown
|
page readonly
|
|
|
|
268BE500000
|
unkown
|
page read and write
|
|
|
|
FFB0679000
|
unkown
|
page read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
4B947FF000
|
unkown
|
page read and write
|
|
|
|
14E1078E000
|
unkown
|
page read and write
|
|
|
|
7FF548BBD000
|
unkown
|
page readonly
|
|
|
|
4B945FB000
|
unkown
|
page read and write
|
|
|
|
7FF5489DF000
|
unkown
|
page readonly
|
|
|
|
7FF50B567000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF75000
|
unkown
|
page readonly
|
|
|
|
7FF58096B000
|
unkown
|
page readonly
|
|
|
|
268BDC3E000
|
unkown
|
page read and write
|
|
|
|
2247A661000
|
unkown
|
page read and write
|
|
|
|
2247A500000
|
heap private
|
page read and write
|
|
|
|
2D35000
|
unkown
|
page readonly
|
|
|
|
396000
|
unkown
|
page read and write
|
|
|
|
7FF581027000
|
unkown
|
page readonly
|
|
|
|
7FF57EE98000
|
unkown
|
page readonly
|
|
|
|
7FF5786F2000
|
unkown
|
page readonly
|
|
|
|
8400C7E000
|
unkown
|
page read and write
|
|
|
|
7FF580D6F000
|
unkown
|
page readonly
|
|
|
|
14E108C0000
|
unkown
|
page read and write
|
|
|
|
275F1940000
|
unkown
|
page readonly
|
|
|
|
25045260000
|
unkown
|
page read and write
|
|
|
|
7FF5CF031000
|
unkown
|
page readonly
|
|
|
|
14E0B2BA000
|
unkown
|
page read and write
|
|
|
|
14E0B229000
|
unkown
|
page read and write
|
|
|
|
7FF558717000
|
unkown
|
page readonly
|
|
|
|
2CD6000
|
unkown
|
page readonly
|
|
|
|
14E108A0000
|
unkown
|
page read and write
|
|
|
|
DD0000
|
unkown
|
page read and write
|
|
|
|
E7B32FE000
|
unkown
|
page read and write
|
|
|
|
1B7A5F02000
|
unkown
|
page read and write
|
|
|
|
2D13000
|
unkown
|
page readonly
|
|
|
|
1B7A5E29000
|
unkown
|
page read and write
|
|
|
|
7FF50B69F000
|
unkown
|
page readonly
|
|
|
|
29C3063A000
|
unkown
|
page read and write
|
|
|
|
7FF56F549000
|
unkown
|
page readonly
|
|
|
|
7FF56F485000
|
unkown
|
page readonly
|
|
|
|
2D00000
|
unkown
|
page readonly
|
|
|
|
2CE4000
|
unkown
|
page readonly
|
|
|
|
1B7A5E57000
|
unkown
|
page read and write
|
|
|
|
7FF578784000
|
unkown
|
page readonly
|
|
|
|
7FF558ED7000
|
unkown
|
page readonly
|
|
|
|
14E10780000
|
unkown
|
page read and write
|
|
|
|
268BE190000
|
unkown
|
page readonly
|
|
|
|
14E10890000
|
unkown
|
page read and write
|
|
|
|
1B7A5E02000
|
unkown
|
page read and write
|
|
|
|
14E0B870000
|
unkown
|
page readonly
|
|
|
|
7FF5808CE000
|
unkown
|
page readonly
|
|
|
|
14E109C0000
|
unkown
|
page readonly
|
|
|
|
2247A718000
|
unkown
|
page read and write
|
|
|
|
7FF580E07000
|
unkown
|
page readonly
|
|
|
|
2549A200000
|
unkown
|
page readonly
|
|
|
|
7FF56F4E7000
|
unkown
|
page readonly
|
|
|
|
7FF5810E5000
|
unkown
|
page readonly
|
|
|
|
2504524E000
|
unkown
|
page read and write
|
|
|
|
7DFE73270000
|
unkown
|
page readonly
|
|
|
|
14E0C2B0000
|
unkown
|
page readonly
|
|
|
|
FFB02BB000
|
unkown
|
page read and write
|
|
|
|
7FF56EC84000
|
unkown
|
page readonly
|
|
|
|
547000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF7F000
|
unkown
|
page readonly
|
|
|
|
14E0B28B000
|
unkown
|
page read and write
|
|
|
|
7DFE73264000
|
unkown
|
page readonly
|
|
|
|
7FF56F47E000
|
unkown
|
page readonly
|
|
|
|
1B7A5DA0000
|
unkown
|
page readonly
|
|
|
|
29C307C0000
|
unkown
|
page read and write
|
|
|
|
2504523E000
|
unkown
|
page read and write
|
|
|
|
7FF580D28000
|
unkown
|
page readonly
|
|
|
|
7FF57869A000
|
unkown
|
page readonly
|
|
|
|
14E0BB18000
|
unkown
|
page read and write
|
|
|
|
14E10670000
|
unkown
|
page read and write
|
|
|
|
7FF58103C000
|
unkown
|
page readonly
|
|
|
|
275F1600000
|
unkown
|
page readonly
|
|
|
|
7FF5787E9000
|
unkown
|
page readonly
|
|
|
|
268BDE00000
|
unkown
|
page readonly
|
|
|
|
7FF56F69C000
|
unkown
|
page readonly
|
|
|
|
2B9C000
|
unkown
|
page readonly
|
|
|
|
84006DB000
|
unkown
|
page read and write
|
|
|
|
1B7A5DE0000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page readonly
|
|
|
|
840137E000
|
unkown
|
page read and write
|
|
|
|
7FF5CEFBC000
|
unkown
|
page readonly
|
|
|
|
25045245000
|
unkown
|
page read and write
|
|
|
|
7FF548915000
|
unkown
|
page readonly
|
|
|
|
14E0B9F0000
|
unkown
|
page read and write
|
|
|
|
268BDCC0000
|
unkown
|
page read and write
|
|
|
|
7FF578787000
|
unkown
|
page readonly
|
|
|
|
14E109E0000
|
unkown
|
page readonly
|
|
|
|
8400F7D000
|
unkown
|
page read and write
|
|
|
|
7FF5CEBDD000
|
unkown
|
page readonly
|
|
|
|
14E10920000
|
unkown
|
page readonly
|
|
|
|
7FF558E48000
|
unkown
|
page readonly
|
|
|
|
DBC77FC000
|
unkown
|
page read and write
|
|
|
|
25499A64000
|
unkown
|
page read and write
|
|
|
|
7FF50B4DF000
|
unkown
|
page readonly
|
|
|
|
25045283000
|
unkown
|
page read and write
|
|
|
|
7FF59E205000
|
unkown
|
page readonly
|
|
|
|
29C306F0000
|
unkown
|
page readonly
|
|
|
|
FFB06F9000
|
unkown
|
page read and write
|
|
|
|
29C3069D000
|
unkown
|
page read and write
|
|
|
|
4B9417E000
|
unkown
|
page read and write
|
|
|
|
7FF581011000
|
unkown
|
page readonly
|
|
|
|
14E0B990000
|
unkown
|
page read and write
|
|
|
|
7FF5786A1000
|
unkown
|
page readonly
|
|
|
|
7FF581033000
|
unkown
|
page readonly
|
|
|
|
DBC737E000
|
unkown
|
page read and write
|
|
|
|
25045302000
|
unkown
|
page read and write
|
|
|
|
275F0C65000
|
unkown
|
page read and write
|
|
|
|
5B10000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFB6000
|
unkown
|
page readonly
|
|
|
|
7FF50B6C1000
|
unkown
|
page readonly
|
|
|
|
7FF558F39000
|
unkown
|
page readonly
|
|
|
|
7FF57EF81000
|
unkown
|
page readonly
|
|
|
|
14E0C2C0000
|
unkown
|
page readonly
|
|
|
|
14E10A1E000
|
unkown
|
page read and write
|
|
|
|
14E0B266000
|
unkown
|
page read and write
|
|
|
|
14E10AB9000
|
unkown
|
page read and write
|
|
|
|
FFB077E000
|
unkown
|
page read and write
|
|
|
|
53D000
|
unkown
|
page read and write
|
|
|
|
7FF57EEBE000
|
unkown
|
page readonly
|
|
|
|
2D20000
|
unkown
|
page readonly
|
|
|
|
7FF578325000
|
unkown
|
page readonly
|
|
|
|
8400AFB000
|
unkown
|
page read and write
|
|
|
|
7FF558EB6000
|
unkown
|
page readonly
|
|
|
|
254999C0000
|
unkown
|
page readonly
|
|
|
|
29C306C8000
|
unkown
|
page read and write
|
|
|
|
21E51A80000
|
heap private
|
page read and write
|
|
|
|
7FF578725000
|
unkown
|
page readonly
|
|
|
|
B37027D000
|
unkown
|
page read and write
|
|
|
|
7FF56F440000
|
unkown
|
page readonly
|
|
|
|
AE567FE000
|
unkown
|
page read and write
|
|
|
|
25045930000
|
unkown
|
page read and write
|
|
|
|
268BDC00000
|
unkown
|
page read and write
|
|
|
|
29C3065B000
|
unkown
|
page read and write
|
|
|
|
2BB8000
|
unkown
|
page readonly
|
|
|
|
7FF57EF89000
|
unkown
|
page readonly
|
|
|
|
7FF57EEFC000
|
unkown
|
page readonly
|
|
|
|
268BDBB0000
|
unkown
|
page read and write
|
|
|
|
7FF580EFE000
|
unkown
|
page readonly
|
|
|
|
7FF548BC6000
|
unkown
|
page readonly
|
|
|
|
29C314D0000
|
unkown
|
page readonly
|
|
|
|
7FF548828000
|
unkown
|
page readonly
|
|
|
|
2504523A000
|
unkown
|
page read and write
|
|
|
|
7FF5786D8000
|
unkown
|
page readonly
|
|
|
|
7FF558677000
|
unkown
|
page readonly
|
|
|
|
275F0E00000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF32000
|
unkown
|
page readonly
|
|
|
|
7FF57EF89000
|
unkown
|
page readonly
|
|
|
|
14E108B0000
|
unkown
|
page read and write
|
|
|
|
25045170000
|
heap private
|
page read and write
|
|
|
|
2247A64A000
|
unkown
|
page read and write
|
|
|
|
7FF56F4CC000
|
unkown
|
page readonly
|
|
|
|
268BDC24000
|
unkown
|
page read and write
|
|
|
|
7FF581066000
|
unkown
|
page readonly
|
|
|
|
7FF5CED60000
|
unkown
|
page readonly
|
|
|
|
2247A65A000
|
unkown
|
page read and write
|
|
|
|
E7B33FE000
|
unkown
|
page read and write
|
|
|
|
2247A713000
|
unkown
|
page read and write
|
|
|
|
E7B30FB000
|
unkown
|
page read and write
|
|
|
|
7FF581007000
|
unkown
|
page readonly
|
|
|
|
29C30686000
|
unkown
|
page read and write
|
|
|
|
F5FA87F000
|
unkown
|
page read and write
|
|
|
|
7FF5810D6000
|
unkown
|
page readonly
|
|
|
|
7FF5785BA000
|
unkown
|
page readonly
|
|
|
|
7FF56F165000
|
unkown
|
page readonly
|
|
|
|
275F0D02000
|
unkown
|
page read and write
|
|
|
|
7FF548BF7000
|
unkown
|
page readonly
|
|
|
|
7FF5483A9000
|
unkown
|
page readonly
|
|
|
|
7FF57841E000
|
unkown
|
page readonly
|
|
|
|
14E10AB4000
|
unkown
|
page read and write
|
|
|
|
F5FA67E000
|
unkown
|
page read and write
|
|
|
|
29C31279000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page readonly
|
|
|
|
7FF57E811000
|
unkown
|
page readonly
|
|
|
|
2504527A000
|
unkown
|
page read and write
|
|
|
|
14E10630000
|
unkown
|
page readonly
|
|
|
|
14E0B7A0000
|
unkown
|
page readonly
|
|
|
|
2247A570000
|
unkown
|
page readonly
|
|
|
|
2247A8D0000
|
unkown
|
page readonly
|
|
|
|
7FF56F4B1000
|
unkown
|
page readonly
|
|
|
|
7FF578775000
|
unkown
|
page readonly
|
|
|
|
1B7A5DE0000
|
unkown
|
page read and write
|
|
|
|
2B87000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB75000
|
unkown
|
page readonly
|
|
|
|
2247A5B0000
|
unkown
|
page read and write
|
|
|
|
2CCD000
|
unkown
|
page readonly
|
|
|
|
7FF50B695000
|
unkown
|
page readonly
|
|
|
|
7FF58114E000
|
unkown
|
page readonly
|
|
|
|
2D94000
|
unkown
|
page readonly
|
|
|
|
7FF50B6CC000
|
unkown
|
page readonly
|
|
|
|
847000
|
heap private
|
page read and write
|
|
|
|
25045202000
|
unkown
|
page read and write
|
|
|
|
25045244000
|
unkown
|
page read and write
|
|
|
|
268BE402000
|
unkown
|
page read and write
|
|
|
|
268BDAB0000
|
heap default
|
page read and write
|
|
|
|
254998E0000
|
unkown
|
page readonly
|
|
|
|
2247A702000
|
unkown
|
page read and write
|
|
|
|
B36FEFF000
|
unkown
|
page read and write
|
|
|
|
DBC76FE000
|
unkown
|
page read and write
|
|
|
|
268BDCE5000
|
unkown
|
page read and write
|
|
|
|
7FF50B6DC000
|
unkown
|
page readonly
|
|
|
|
2CF2000
|
unkown
|
page readonly
|
|
|
|
2504525F000
|
unkown
|
page read and write
|
|
|
|
7FF5810C6000
|
unkown
|
page readonly
|
|
|
|
29C30670000
|
unkown
|
page read and write
|
|
|
|
7FF58108E000
|
unkown
|
page readonly
|
|
|
|
531000
|
unkown
|
page read and write
|
|
|
|
268BDBE0000
|
unkown
|
page readonly
|
|
|
|
2DA8000
|
unkown
|
page readonly
|
|
|
|
500000
|
heap default
|
page read and write
|
|
|
|
14E0BA02000
|
unkown
|
page read and write
|
|
|
|
B36FDFE000
|
unkown
|
page read and write
|
|
|
|
14E0B600000
|
unkown
|
page readonly
|
|
|
|
7FF5CEEC5000
|
unkown
|
page readonly
|
|
|
|
7FF558C5A000
|
unkown
|
page readonly
|
|
|
|
7FF50B662000
|
unkown
|
page readonly
|
|
|
|
7FF581050000
|
unkown
|
page readonly
|
|
|
|
7FF5CECF5000
|
unkown
|
page readonly
|
|
|
|
14E0BB02000
|
unkown
|
page read and write
|
|
|
|
84A000
|
heap private
|
page read and write
|
|
|
|
29C30940000
|
unkown
|
page read and write
|
|
|
|
7FF56F4B6000
|
unkown
|
page readonly
|
|
|
|
B37017D000
|
unkown
|
page read and write
|
|
|
|
4B944FA000
|
unkown
|
page read and write
|
|
|
|
53D000
|
unkown
|
page read and write
|
|
|
|
7FF57EDB3000
|
unkown
|
page readonly
|
|
|
|
29C30930000
|
unkown
|
page read and write
|
|
|
|
29C30970000
|
unkown
|
page read and write
|
|
|
|
840127F000
|
unkown
|
page read and write
|
|
|
|
544000
|
unkown
|
page read and write
|
|
|
|
29C31276000
|
unkown
|
page read and write
|
|
|
|
7FF57874D000
|
unkown
|
page readonly
|
|
|
|
7FF5810C1000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page readonly
|
|
|
|
2504525A000
|
unkown
|
page read and write
|
|
|
|
7FF580E98000
|
unkown
|
page readonly
|
|
|
|
14E0B29B000
|
unkown
|
page read and write
|
|
|
|
25499A00000
|
unkown
|
page read and write
|
|
|
|
2504525E000
|
unkown
|
page read and write
|
|
|
|
268BE260000
|
unkown
|
page write copy
|
|
|
|
14E10AB2000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF9D000
|
unkown
|
page readonly
|
|
|
|
21E516E0000
|
unkown
|
page read and write
|
|
|
|
7FF56F114000
|
unkown
|
page readonly
|
|
|
|
7FF59E105000
|
unkown
|
page readonly
|
|
|
|
544000
|
unkown
|
page read and write
|
|
|
|
7FF5489F8000
|
unkown
|
page readonly
|
|
|
|
7FF581159000
|
unkown
|
page readonly
|
|
|
|
14E108E0000
|
unkown
|
page readonly
|
|
|
|
7FF580C95000
|
unkown
|
page readonly
|
|
|
|
7FF57EF7E000
|
unkown
|
page readonly
|
|
|
|
25499A3E000
|
unkown
|
page read and write
|
|
|
|
7FF580E7B000
|
unkown
|
page readonly
|
|
|
|
7FF56F499000
|
unkown
|
page readonly
|
|
|
|
2247A5E0000
|
unkown
|
page read and write
|
|
|
|
14E10780000
|
unkown
|
page read and write
|
|
|
|
250451D0000
|
heap default
|
page read and write
|
|
|
|
7FF50B4BE000
|
unkown
|
page readonly
|
|
|
|
14E0B0C0000
|
heap private
|
page read and write
|
|
|
|
7FF56F4D5000
|
unkown
|
page readonly
|
|
|
|
7FF5CF039000
|
unkown
|
page readonly
|
|
|
|
7FF5CED85000
|
unkown
|
page readonly
|
|
|
|
2CD1000
|
unkown
|
page readonly
|
|
|
|
268BE2B0000
|
unkown
|
page readonly
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
29C30980000
|
heap private
|
page read and write
|
|
|
|
268BDA50000
|
heap private
|
page read and write
|
|
|
|
14E10850000
|
unkown
|
page write copy
|
|
|
|
4B941FE000
|
unkown
|
page read and write
|
|
|
|
2247C202000
|
unkown
|
page read and write
|
|
|
|
250451F0000
|
unkown
|
page readonly
|
|
|
|
25499C00000
|
unkown
|
page readonly
|
|
|
|
7FF59E279000
|
unkown
|
page readonly
|
|
|
|
29C314E0000
|
unkown
|
page read and write
|
|
|
|
7FF57E6E4000
|
unkown
|
page readonly
|
|
|
|
7FF50B484000
|
unkown
|
page readonly
|
|
|
|
7FF59E188000
|
unkown
|
page readonly
|
|
|
|
7FF5CEF89000
|
unkown
|
page readonly
|
|
|
|
7FF5810F7000
|
unkown
|
page readonly
|
|
|
|
7FF5489BE000
|
unkown
|
page readonly
|
|
|
|
2D80000
|
unkown
|
page readonly
|
|
|
|
1B7A5D80000
|
heap default
|
page read and write
|
|
|
|
7FF581037000
|
unkown
|
page readonly
|
|
|
|
275F0AE0000
|
unkown
|
page readonly
|
|
|
|
7FF50B6C6000
|
unkown
|
page readonly
|
|
|
|
268BDBA0000
|
unkown
|
page readonly
|
|
|
|
2247A700000
|
unkown
|
page read and write
|
|
|
|
25045213000
|
unkown
|
page read and write
|
|
|
|
2BD5000
|
unkown
|
page readonly
|
|
|
|
7FF59E1C9000
|
unkown
|
page readonly
|
|
|
|
7FF57E6F4000
|
unkown
|
page readonly
|
|
|
|
7FF58101B000
|
unkown
|
page readonly
|
|
|
|
DBC74FF000
|
unkown
|
page read and write
|
|
|
|
29C3127B000
|
unkown
|
page read and write
|
|
|
|
7FF548B52000
|
unkown
|
page readonly
|
|
|
|
14E0C270000
|
unkown
|
page readonly
|
|
|
|
7FF5CEFD2000
|
unkown
|
page readonly
|
|
|
|
7FF558E46000
|
unkown
|
page readonly
|
|
|
|
7FF581048000
|
unkown
|
page readonly
|
|
|
|
268BDCB9000
|
unkown
|
page read and write
|
|
|
|
7FF580F0C000
|
unkown
|
page readonly
|
|
|
|
268BDAC0000
|
unkown
|
page readonly
|
|
|
|
B37007E000
|
unkown
|
page read and write
|
|
|
|
7FF5CF02E000
|
unkown
|
page readonly
|
|
|
|
14E10C00000
|
unkown
|
page readonly
|
|
|
|
7FF50B652000
|
unkown
|
page readonly
|
|
|
|
2CE0000
|
unkown
|
page readonly
|
|
|
|
BE0000
|
unkown
|
page readonly
|
|
|
|
7FF5CE78F000
|
unkown
|
page readonly
|
|
|
|
7FF5CEE47000
|
unkown
|
page readonly
|
|
|
|
F51C5FE000
|
unkown
|
page read and write
|
|
|
|
254998F0000
|
unkown
|
page readonly
|
|
|
|
2504522D000
|
unkown
|
page read and write
|
|
|
|
7FF57EE9A000
|
unkown
|
page readonly
|
|
|
|
7FF50B57C000
|
unkown
|
page readonly
|
|
|
|
14E10ABE000
|
unkown
|
page read and write
|
|
|
|
2504525B000
|
unkown
|
page read and write
|
|
|
|
7FF581095000
|
unkown
|
page readonly
|
|
|
|
7FF50B4F8000
|
unkown
|
page readonly
|
|
|
|
DBC79FE000
|
unkown
|
page read and write
|
|
|
|
7FF5CF039000
|
unkown
|
page readonly
|
|
|
|
541000
|
unkown
|
page read and write
|
|
|
|
2D3A000
|
unkown
|
page readonly
|
|
|
|
510000
|
heap default
|
page read and write
|
|
|
|
14E10680000
|
unkown
|
page read and write
|
|
|
|
14E107A0000
|
unkown
|
page read and write
|
|
|
|
21E51A85000
|
heap private
|
page read and write
|
|
|
|
14E107C4000
|
unkown
|
page read and write
|
|
|
|
2247A590000
|
unkown
|
page read and write
|
|
|
|
F5FA97F000
|
unkown
|
page read and write
|
|
|
|
7FF56F100000
|
unkown
|
page readonly
|
|
|
|
14E0C600000
|
unkown
|
page read and write
|
|
|
|
14E0B9F3000
|
unkown
|
page read and write
|
|
|
|
7FF548B2A000
|
unkown
|
page readonly
|
|
|
|
2247C140000
|
unkown
|
page write copy
|
|
|
|
14E0B120000
|
heap default
|
page read and write
|
|
|
|
275F0C13000
|
unkown
|
page read and write
|
|
|
|
7FF57EDFC000
|
unkown
|
page readonly
|
|
|
|
7FF548C4E000
|
unkown
|
page readonly
|
|
|
|
7FF580FC5000
|
unkown
|
page readonly
|
|
|
|
7FF5786E0000
|
unkown
|
page readonly
|
|
|
|
7FF558EAC000
|
unkown
|
page readonly
|
|
|
|
1B7A60D0000
|
unkown
|
page readonly
|
|
|
|
14E10A4B000
|
unkown
|
page read and write
|
|
|
|
43A000
|
unkown
|
page read and write
|
|
|
|
7FF50B668000
|
unkown
|
page readonly
|
|
|
|
275F0BF0000
|
unkown
|
page readonly
|
|
|
|
7FF581062000
|
unkown
|
page readonly
|
|
|
|
7FF548BD6000
|
unkown
|
page readonly
|
|
|
|
840000
|
heap private
|
page read and write
|
|
|
|
DBC78FC000
|
unkown
|
page read and write
|
|
|
|
7FF59E1DE000
|
unkown
|
page readonly
|
|
|
|
275F0A70000
|
heap private
|
page read and write
|
|
|
|
7FF580CEE000
|
unkown
|
page readonly
|
|
|
|
7FF548C59000
|
unkown
|
page readonly
|
|
|
|
7FF50B648000
|
unkown
|
page readonly
|
|
|
|
14E10A9C000
|
unkown
|
page read and write
|
|
|
|
7FF59E271000
|
unkown
|
page readonly
|
|
|
|
2247A657000
|
unkown
|
page read and write
|
|
|
|
F51BABB000
|
unkown
|
page read and write
|
|
|
|
14E10854000
|
unkown
|
page readonly
|
|
|
|
2504523A000
|
unkown
|
page read and write
|
|
|
|
29C31270000
|
unkown
|
page read and write
|
|
|
|
7FF578756000
|
unkown
|
page readonly
|
|
|
|
2D8B000
|
unkown
|
page readonly
|
|
|
|
F51C6FF000
|
unkown
|
page read and write
|
|
|
|
7FF5CE84C000
|
unkown
|
page readonly
|
|
|
|
29C30640000
|
unkown
|
page read and write
|
|
|
|
14E0BA00000
|
unkown
|
page read and write
|
|
|
|
25045279000
|
unkown
|
page read and write
|
|
|
|
275F0C5A000
|
unkown
|
page read and write
|
|
|
|
29C30BA0000
|
unkown
|
page readonly
|
|
|
|
7FF5CEB71000
|
unkown
|
page readonly
|
|
|
|
275F1402000
|
unkown
|
page read and write
|
|
|
|
7FF5810CC000
|
unkown
|
page readonly
|
|
|
|
F5FA4FE000
|
unkown
|
page read and write
|
|
|
|
29C31274000
|
unkown
|
page read and write
|
|
|
|
F51C3FB000
|
unkown
|
page read and write
|
|
|
|
275F0BC0000
|
unkown
|
page readonly
|
|
|
|
14E107C0000
|
unkown
|
page read and write
|
|
|
|
F51C27C000
|
unkown
|
page read and write
|
|
|
|
7FF50B6E5000
|
unkown
|
page readonly
|
|
|
|
250454D0000
|
unkown
|
page readonly
|
|
|
|
7FF50B5CC000
|
unkown
|
page readonly
|
|
|
|
7FF5CEDFA000
|
unkown
|
page readonly
|
|
|
|
7FF5810A9000
|
unkown
|
page readonly
|
|
|
|
2247A68B000
|
unkown
|
page read and write
|
|
|
|
2DA0000
|
unkown
|
page readonly
|
|
|
|
7FF57E6EF000
|
unkown
|
page readonly
|
|
|
|
7EE000
|
unkown
|
page read and write
|
|
|
|
25045A02000
|
unkown
|
page read and write
|
|
|
|
7FF581068000
|
unkown
|
page readonly
|
|
|
|
14E107B0000
|
unkown
|
page read and write
|
|
|
|
7FF548BDC000
|
unkown
|
page readonly
|
|
|
|
7FF50B6F4000
|
unkown
|
page readonly
|
|
|
|
4B943FF000
|
unkown
|
page read and write
|
|
|
|
7FF580FF1000
|
unkown
|
page readonly
|
|
|
|
7FF58109F000
|
unkown
|
page readonly
|
|
|
|
7FF50B6D6000
|
unkown
|
page readonly
|
|
|
|
7FF50B759000
|
unkown
|
page readonly
|
|
|
|
14E0B240000
|
unkown
|
page read and write
|
|
|
|
7FF57875C000
|
unkown
|
page readonly
|
|
|
|
47B000
|
stack
|
page read and write
|
|
|
|
14E10874000
|
unkown
|
page readonly
|
|
|
|
14E10AB9000
|
unkown
|
page read and write
|
|
|
|
5E50000
|
unkown
|
page read and write
|
|
|
|
7FF50B2BE000
|
unkown
|
page readonly
|
|
|
|
7FF548907000
|
unkown
|
page readonly
|
|
|
|
14E108E0000
|
unkown
|
page read and write
|
|
|
|
14E10A54000
|
unkown
|
page read and write
|
|
|
|
7FF50B63C000
|
unkown
|
page readonly
|
|
|
|
7FF558E30000
|
unkown
|
page readonly
|
|
|
|
1B7A6000000
|
unkown
|
page readonly
|
|
|
|
7FF5CEDA0000
|
unkown
|
page readonly
|
|
|
|
7FF548A18000
|
unkown
|
page readonly
|
|
|
|
29C3069B000
|
unkown
|
page read and write
|
|
|
|
25499A79000
|
unkown
|
page read and write
|
|
|
|
14E10850000
|
unkown
|
page read and write
|
|
|
|
14E0C260000
|
unkown
|
page readonly
|
|
|
|
14E0B25F000
|
unkown
|
page read and write
|
|
|
|
1B7A5E40000
|
unkown
|
page read and write
|
|
|
|
29C30640000
|
unkown
|
page read and write
|
|
|
|
7FF50B3A6000
|
unkown
|
page readonly
|
|
|
|
21E51737000
|
heap default
|
page read and write
|
|
|
|
7FF580E15000
|
unkown
|
page readonly
|
|
|
|
2CCA000
|
unkown
|
page readonly
|
|
|
|
7FF548B8E000
|
unkown
|
page readonly
|
|
|
|
535000
|
unkown
|
page read and write
|
|
|
|
7FF5CEF6E000
|
unkown
|
page readonly
|
|
|
|
14E0B2AA000
|
unkown
|
page read and write
|
|
|
|
14E0B213000
|
unkown
|
page read and write
|
|
|
|
29C305F0000
|
heap default
|
page read and write
|
|
|
|
2247A580000
|
unkown
|
page readonly
|
|
|
|
7FF5CEDBF000
|
unkown
|
page readonly
|
|
|
|
7FF578687000
|
unkown
|
page readonly
|
|
|
|
2CDB000
|
unkown
|
page readonly
|
|
|
|
25499810000
|
unkown
|
page readonly
|
|
|
|
7FF59E1FC000
|
unkown
|
page readonly
|
|
|
|
7FF56F452000
|
unkown
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
14E10A61000
|
unkown
|
page read and write
|
|
|
|
7FF548BF0000
|
unkown
|
page readonly
|
|
|
|
DCF000
|
stack
|
page read and write
|
|
|
|
7FF548BA9000
|
unkown
|
page readonly
|
|
|
|
2247A62A000
|
unkown
|
page read and write
|
|
|
|
7FF548C51000
|
unkown
|
page readonly
|
|
|
|
14E107A4000
|
unkown
|
page read and write
|
|
|
|
25045200000
|
unkown
|
page read and write
|
|
|
|
7FF57E767000
|
unkown
|
page readonly
|
|
|
|
14E107A1000
|
unkown
|
page read and write
|
|
|
|
7FF50B666000
|
unkown
|
page readonly
|
|
|
|
2504527D000
|
unkown
|
page read and write
|
|
|
|
25499A58000
|
unkown
|
page read and write
|
|
|
|
275F0BB0000
|
unkown
|
page readonly
|
|
|
|
268BDCCA000
|
unkown
|
page read and write
|
|
|
|
2247A65A000
|
unkown
|
page read and write
|
|
|
|
4B942FE000
|
unkown
|
page read and write
|
|
|
|
2CA8000
|
unkown
|
page readonly
|
|
|
|
1B7A5DE0000
|
unkown
|
page read and write
|
|
|
|
7FF548920000
|
unkown
|
page readonly
|
|
|
|
2247A5E0000
|
unkown
|
page read and write
|
|
There are 836 hidden memdumps, click here to show them.