Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Cancellation_1844611233_06082021.xlsm
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Cancellation_1844611233_06082021.xlsm.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:43
2020, mtime=Wed Jun 9 11:34:33 2021, atime=Wed Jun 9 11:34:33 2021, length=340171, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$Cancellation_1844611233_06082021.xlsm
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\4D132F3C.tif
|
TIFF image data, little-endian, direntries=19, height=1600, bps=53710, compression=LZW, PhotometricIntepretation=RGB, width=1600
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\01910000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Thu
Jun 27 16:19:49 2019, mtime=Wed Jun 9 11:34:33 2021, atime=Wed Jun 9 11:34:33 2021, length=8192, window=hide
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\Desktop\D1910000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\61190FA7.tif
|
TIFF image data, little-endian, direntries=19, height=1600, bps=53710, compression=LZW, PhotometricIntepretation=RGB, width=1600
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\DCCE0000
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Cancellation_1844611233_06082021.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:13
2020, mtime=Wed Jun 9 11:27:37 2021, atime=Wed Jun 9 11:27:37 2021, length=340119, window=hide
|
dropped
|
|
|
|
C:\Users\user\Desktop\ADCE0000
|
data
|
dropped
|
|
There are 2 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
'C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\Post.storg
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\Post.storg1
|
|
|
|
C:\Windows\SysWOW64\regsvr32.exe
|
regsvr32 -s ..\Post.storg2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s ..\Post.storg
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s ..\Post.storg1
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -s ..\Post.storg2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://103.155.92.95/44356.2323287037.dat
|
103.155.92.95
|
|
|
|
http://51.89.115.125/44356.2323287037.dat
|
51.89.115.125
|
|
|
|
http://103.155.92.95/44356.227524537.dat
|
103.155.92.95
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://51.89.115.125/44356.227524537.dat
|
51.89.115.125
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
103.155.92.95
|
unknown
|
unknown
|
|
|
|
51.89.115.125
|
unknown
|
France
|
|
|
|
45.144.31.105
|
unknown
|
United Kingdom
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
3a5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
4a5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
17E25
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSForms
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
MSComctlLib
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1848D
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
185F5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1871E
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18846
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1896F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18AA8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18C00
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18CFA
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18DF4
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
18F4B
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
19045
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1913F
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
1920A
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
wz5
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2BDD8
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
2BFFB
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
FileFormatBallotBoxAppIDBootedOnce
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
en-US
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingConfigurableSettings
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastSyncTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
RoamingLastWriteTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastRequest
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
CacheReady
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
NextUpdate
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastBootTime
|
|
|
|
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{~6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC19A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC5DE
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC67A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC745
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC7D2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC86E
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC938
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EC9C5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECA61
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECB5A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECBE7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECCB2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECD7C
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ECE18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
un6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FD4FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FD71D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SavedLegacySettings
|
|
There are 156 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
7FF5213EE000
|
unkown
|
page readonly
|
|
|
|
175CD815000
|
unkown
|
page read and write
|
|
|
|
1C9560D0000
|
unkown
|
page readonly
|
|
|
|
1C955E02000
|
unkown
|
page read and write
|
|
|
|
7FF5EDAF0000
|
unkown
|
page readonly
|
|
|
|
7FF543728000
|
unkown
|
page readonly
|
|
|
|
175CCF90000
|
unkown
|
page read and write
|
|
|
|
7FF543742000
|
unkown
|
page readonly
|
|
|
|
26D1D800000
|
unkown
|
page read and write
|
|
|
|
7FF5ED65E000
|
unkown
|
page readonly
|
|
|
|
1733A06E000
|
unkown
|
page read and write
|
|
|
|
7FF5ED985000
|
unkown
|
page readonly
|
|
|
|
2010000
|
unkown
|
page readonly
|
|
|
|
2501D630000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB37000
|
unkown
|
page readonly
|
|
|
|
175CE030000
|
unkown
|
page readonly
|
|
|
|
175CD959000
|
unkown
|
page read and write
|
|
|
|
7FF543408000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB34000
|
unkown
|
page readonly
|
|
|
|
7FF57343D000
|
unkown
|
page readonly
|
|
|
|
7FF521306000
|
unkown
|
page readonly
|
|
|
|
231DC902000
|
unkown
|
page read and write
|
|
|
|
1F83000
|
unkown
|
page readonly
|
|
|
|
7FF543748000
|
unkown
|
page readonly
|
|
|
|
43B0000
|
unkown
|
page readonly
|
|
|
|
7FF5437AC000
|
unkown
|
page readonly
|
|
|
|
709CC7E000
|
unkown
|
page read and write
|
|
|
|
19050A49000
|
unkown
|
page read and write
|
|
|
|
7FF573555000
|
unkown
|
page readonly
|
|
|
|
1C955E6E000
|
unkown
|
page read and write
|
|
|
|
7FF54377F000
|
unkown
|
page readonly
|
|
|
|
7FF5ED6CF000
|
unkown
|
page readonly
|
|
|
|
264817D000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
heap default
|
page read and write
|
|
|
|
175D2520000
|
unkown
|
page read and write
|
|
|
|
7FF53D086000
|
unkown
|
page readonly
|
|
|
|
1FF0000
|
unkown
|
page readonly
|
|
|
|
1F67000
|
unkown
|
page readonly
|
|
|
|
7FF571715000
|
unkown
|
page readonly
|
|
|
|
1F90000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA49000
|
unkown
|
page readonly
|
|
|
|
7FF5734E7000
|
unkown
|
page readonly
|
|
|
|
1733A680000
|
unkown
|
page readonly
|
|
|
|
175CDF10000
|
unkown
|
page read and write
|
|
|
|
1E1AC950000
|
unkown
|
page read and write
|
|
|
|
7FF57155A000
|
unkown
|
page readonly
|
|
|
|
175CD918000
|
unkown
|
page read and write
|
|
|
|
175CD09B000
|
unkown
|
page read and write
|
|
|
|
175D2820000
|
unkown
|
page read and write
|
|
|
|
7FF5EDAF9000
|
unkown
|
page readonly
|
|
|
|
1C955E6A000
|
unkown
|
page read and write
|
|
|
|
7FF54395C000
|
unkown
|
page readonly
|
|
|
|
231DC800000
|
unkown
|
page read and write
|
|
|
|
7FF5434EE000
|
unkown
|
page readonly
|
|
|
|
28C0000
|
heap private
|
page read and write
|
|
|
|
1F90000
|
unkown
|
page readonly
|
|
|
|
60D247F000
|
unkown
|
page read and write
|
|
|
|
7FF52136C000
|
unkown
|
page readonly
|
|
|
|
849FE7D000
|
unkown
|
page read and write
|
|
|
|
2501D790000
|
unkown
|
page readonly
|
|
|
|
1E1ACD30000
|
heap private
|
page read and write
|
|
|
|
26D1D902000
|
unkown
|
page read and write
|
|
|
|
7FF571698000
|
unkown
|
page readonly
|
|
|
|
175D2524000
|
unkown
|
page read and write
|
|
|
|
1F54000
|
unkown
|
page readonly
|
|
|
|
2501D5B0000
|
unkown
|
page readonly
|
|
|
|
231DC8C1000
|
unkown
|
page read and write
|
|
|
|
264807D000
|
unkown
|
page read and write
|
|
|
|
7FF5439FC000
|
unkown
|
page readonly
|
|
|
|
175D2640000
|
unkown
|
page readonly
|
|
|
|
2960000
|
unkown
|
page readonly
|
|
|
|
1733A029000
|
unkown
|
page read and write
|
|
|
|
231DCA00000
|
unkown
|
page readonly
|
|
|
|
190509C0000
|
unkown
|
page read and write
|
|
|
|
2501D570000
|
unkown
|
page read and write
|
|
|
|
1C955E7C000
|
unkown
|
page read and write
|
|
|
|
2501DCA0000
|
unkown
|
page readonly
|
|
|
|
7FF5483B6000
|
unkown
|
page readonly
|
|
|
|
7FF53D07D000
|
unkown
|
page readonly
|
|
|
|
2004000
|
unkown
|
page readonly
|
|
|
|
7FF5482C5000
|
unkown
|
page readonly
|
|
|
|
1E1ACD35000
|
heap private
|
page read and write
|
|
|
|
1733A013000
|
unkown
|
page read and write
|
|
|
|
22A0000
|
heap private
|
page read and write
|
|
|
|
175CD200000
|
unkown
|
page readonly
|
|
|
|
190509F0000
|
unkown
|
page read and write
|
|
|
|
24D3000
|
unkown
|
page read and write
|
|
|
|
7FF5737E9000
|
unkown
|
page readonly
|
|
|
|
1C955E44000
|
unkown
|
page read and write
|
|
|
|
7FF5ED9FD000
|
unkown
|
page readonly
|
|
|
|
7FF5439E6000
|
unkown
|
page readonly
|
|
|
|
7FF5437BC000
|
unkown
|
page readonly
|
|
|
|
134E5402000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page readonly
|
|
|
|
7FF5737A6000
|
unkown
|
page readonly
|
|
|
|
7FF521390000
|
unkown
|
page readonly
|
|
|
|
7FF53D022000
|
unkown
|
page readonly
|
|
|
|
7FF521376000
|
unkown
|
page readonly
|
|
|
|
7FF52129E000
|
unkown
|
page readonly
|
|
|
|
25AD000
|
unkown
|
page read and write
|
|
|
|
26D1D813000
|
unkown
|
page read and write
|
|
|
|
2221000
|
unkown
|
page readonly
|
|
|
|
134E4C3D000
|
unkown
|
page read and write
|
|
|
|
7FF5ADADF000
|
unkown
|
page readonly
|
|
|
|
231DC829000
|
unkown
|
page read and write
|
|
|
|
175D25F0000
|
unkown
|
page read and write
|
|
|
|
175CD913000
|
unkown
|
page read and write
|
|
|
|
190523E0000
|
unkown
|
page readonly
|
|
|
|
19050A48000
|
unkown
|
page read and write
|
|
|
|
7FF52139D000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA5D000
|
unkown
|
page readonly
|
|
|
|
2647C7E000
|
unkown
|
page read and write
|
|
|
|
1C955E66000
|
unkown
|
page read and write
|
|
|
|
1F0E000
|
unkown
|
page readonly
|
|
|
|
175CE050000
|
unkown
|
page readonly
|
|
|
|
7FF5714F0000
|
unkown
|
page readonly
|
|
|
|
231DD200000
|
unkown
|
page readonly
|
|
|
|
709C1EC000
|
unkown
|
page read and write
|
|
|
|
2600000
|
unkown
|
page readonly
|
|
|
|
175D28AA000
|
unkown
|
page read and write
|
|
|
|
7FF573560000
|
unkown
|
page readonly
|
|
|
|
2501D69B000
|
heap default
|
page read and write
|
|
|
|
60D2A7F000
|
unkown
|
page read and write
|
|
|
|
1F0E000
|
unkown
|
page readonly
|
|
|
|
7FF54393B000
|
unkown
|
page readonly
|
|
|
|
175CCE20000
|
heap private
|
page read and write
|
|
|
|
2260000
|
unkown
|
page readonly
|
|
|
|
7FF573275000
|
unkown
|
page readonly
|
|
|
|
7DFB229FA000
|
unkown
|
page readonly
|
|
|
|
231DC7E0000
|
unkown
|
page readonly
|
|
|
|
7FF573792000
|
unkown
|
page readonly
|
|
|
|
7FF5737A8000
|
unkown
|
page readonly
|
|
|
|
19050B13000
|
unkown
|
page read and write
|
|
|
|
175D2501000
|
unkown
|
page read and write
|
|
|
|
709C77D000
|
unkown
|
page read and write
|
|
|
|
175D24EE000
|
unkown
|
page read and write
|
|
|
|
175D25E7000
|
unkown
|
page write copy
|
|
|
|
19050A26000
|
unkown
|
page read and write
|
|
|
|
7FF543839000
|
unkown
|
page readonly
|
|
|
|
2795000
|
unkown
|
page read and write
|
|
|
|
1C955E46000
|
unkown
|
page read and write
|
|
|
|
7FF543947000
|
unkown
|
page readonly
|
|
|
|
849FBFF000
|
unkown
|
page read and write
|
|
|
|
7FF54359E000
|
unkown
|
page readonly
|
|
|
|
7FF5434E7000
|
unkown
|
page readonly
|
|
|
|
7FF5436C8000
|
unkown
|
page readonly
|
|
|
|
849FCFF000
|
unkown
|
page read and write
|
|
|
|
1F62000
|
unkown
|
page readonly
|
|
|
|
175CCE80000
|
heap default
|
page read and write
|
|
|
|
7FF53D10E000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA2E000
|
unkown
|
page readonly
|
|
|
|
1C955E83000
|
unkown
|
page read and write
|
|
|
|
7FF5737CE000
|
unkown
|
page readonly
|
|
|
|
23A0000
|
unkown
|
page read and write
|
|
|
|
1C955E2A000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA1A000
|
unkown
|
page readonly
|
|
|
|
2647CFE000
|
unkown
|
page read and write
|
|
|
|
7FF573891000
|
unkown
|
page readonly
|
|
|
|
2300000
|
unkown
|
page readonly
|
|
|
|
175CE010000
|
unkown
|
page readonly
|
|
|
|
7FF54379D000
|
unkown
|
page readonly
|
|
|
|
7FF54340A000
|
unkown
|
page readonly
|
|
|
|
2930000
|
unkown
|
page read and write
|
|
|
|
2280000
|
unkown
|
page readonly
|
|
|
|
84A01FC000
|
unkown
|
page read and write
|
|
|
|
19050F90000
|
unkown
|
page readonly
|
|
|
|
1C955E79000
|
unkown
|
page read and write
|
|
|
|
7FF5ED898000
|
unkown
|
page readonly
|
|
|
|
1E1AC970000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA94000
|
unkown
|
page readonly
|
|
|
|
7FF573899000
|
unkown
|
page readonly
|
|
|
|
175D25B0000
|
unkown
|
page read and write
|
|
|
|
47722FF000
|
unkown
|
page read and write
|
|
|
|
7FF57361F000
|
unkown
|
page readonly
|
|
|
|
1C955E5A000
|
unkown
|
page read and write
|
|
|
|
7FF5439B5000
|
unkown
|
page readonly
|
|
|
|
7FF5437B6000
|
unkown
|
page readonly
|
|
|
|
7FF571358000
|
unkown
|
page readonly
|
|
|
|
7FF53D0A5000
|
unkown
|
page readonly
|
|
|
|
1E45000
|
unkown
|
page readonly
|
|
|
|
2155000
|
unkown
|
page readonly
|
|
|
|
7FF53D119000
|
unkown
|
page readonly
|
|
|
|
134E4AB0000
|
heap private
|
page read and write
|
|
|
|
7FF5213F1000
|
unkown
|
page readonly
|
|
|
|
134E4C13000
|
unkown
|
page read and write
|
|
|
|
17B000
|
unkown
|
page read and write
|
|
|
|
225C000
|
unkown
|
page read and write
|
|
|
|
7FF5730D5000
|
unkown
|
page readonly
|
|
|
|
2D7C0FF000
|
unkown
|
page read and write
|
|
|
|
175D2640000
|
unkown
|
page read and write
|
|
|
|
A7B0F2C000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA6C000
|
unkown
|
page readonly
|
|
|
|
1C955F02000
|
unkown
|
page read and write
|
|
|
|
175CD03D000
|
unkown
|
page read and write
|
|
|
|
7FF54839E000
|
unkown
|
page readonly
|
|
|
|
17339EA0000
|
heap private
|
page read and write
|
|
|
|
175D2760000
|
unkown
|
page readonly
|
|
|
|
7FF52107C000
|
unkown
|
page readonly
|
|
|
|
19050840000
|
heap private
|
page read and write
|
|
|
|
47724FF000
|
unkown
|
page read and write
|
|
|
|
7FF52130A000
|
unkown
|
page readonly
|
|
|
|
1F1F000
|
unkown
|
page readonly
|
|
|
|
134E4BF0000
|
unkown
|
page readonly
|
|
|
|
7FF52129A000
|
unkown
|
page readonly
|
|
|
|
2501D6E7000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
heap private
|
page read and write
|
|
|
|
849FD7C000
|
unkown
|
page read and write
|
|
|
|
134E52A0000
|
unkown
|
page read and write
|
|
|
|
7FF547C74000
|
unkown
|
page readonly
|
|
|
|
7FF5439EC000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA35000
|
unkown
|
page readonly
|
|
|
|
1C955E7D000
|
unkown
|
page read and write
|
|
|
|
26D1D802000
|
unkown
|
page read and write
|
|
|
|
1FF6000
|
unkown
|
page readonly
|
|
|
|
134E4C59000
|
unkown
|
page read and write
|
|
|
|
7FF57166C000
|
unkown
|
page readonly
|
|
|
|
7FF521335000
|
unkown
|
page readonly
|
|
|
|
1C955E74000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
2860000
|
unkown
|
page readonly
|
|
|
|
175CD802000
|
unkown
|
page read and write
|
|
|
|
7FF5483AC000
|
unkown
|
page readonly
|
|
|
|
7FF5435BF000
|
unkown
|
page readonly
|
|
|
|
7FF5ADAD5000
|
unkown
|
page readonly
|
|
|
|
7FF52131A000
|
unkown
|
page readonly
|
|
|
|
1F56000
|
unkown
|
page readonly
|
|
|
|
7FF5733D1000
|
unkown
|
page readonly
|
|
|
|
7FF5ED87F000
|
unkown
|
page readonly
|
|
|
|
7FF543609000
|
unkown
|
page readonly
|
|
|
|
EA8717F000
|
unkown
|
page read and write
|
|
|
|
74CD4FE000
|
unkown
|
page read and write
|
|
|
|
2320000
|
unkown
|
page readonly
|
|
|
|
7FF5ED96C000
|
unkown
|
page readonly
|
|
|
|
477247F000
|
unkown
|
page read and write
|
|
|
|
7FF5438EC000
|
unkown
|
page readonly
|
|
|
|
175D2875000
|
unkown
|
page read and write
|
|
|
|
175D288F000
|
unkown
|
page read and write
|
|
|
|
175D25E4000
|
unkown
|
page write copy
|
|
|
|
134E4E00000
|
unkown
|
page readonly
|
|
|
|
7FF54842E000
|
unkown
|
page readonly
|
|
|
|
7FF521292000
|
unkown
|
page readonly
|
|
|
|
2501D670000
|
heap private
|
page read and write
|
|
|
|
7FF5ADB8E000
|
unkown
|
page readonly
|
|
|
|
175D2510000
|
unkown
|
page read and write
|
|
|
|
1733A590000
|
unkown
|
page readonly
|
|
|
|
134E4C24000
|
unkown
|
page read and write
|
|
|
|
1C955E00000
|
unkown
|
page read and write
|
|
|
|
231DC8CA000
|
unkown
|
page read and write
|
|
|
|
26477CC000
|
unkown
|
page read and write
|
|
|
|
1733A068000
|
unkown
|
page read and write
|
|
|
|
1733A061000
|
unkown
|
page read and write
|
|
|
|
7FF5436D6000
|
unkown
|
page readonly
|
|
|
|
19050B2D000
|
unkown
|
page read and write
|
|
|
|
2018000
|
unkown
|
page readonly
|
|
|
|
1C955E63000
|
unkown
|
page read and write
|
|
|
|
849FFFD000
|
unkown
|
page read and write
|
|
|
|
709C87B000
|
unkown
|
page read and write
|
|
|
|
1C955E58000
|
unkown
|
page read and write
|
|
|
|
7FF5736A7000
|
unkown
|
page readonly
|
|
|
|
175CD087000
|
unkown
|
page read and write
|
|
|
|
2501D600000
|
heap private
|
page read and write
|
|
|
|
26D1D720000
|
unkown
|
page readonly
|
|
|
|
709D37E000
|
unkown
|
page read and write
|
|
|
|
709CB7B000
|
unkown
|
page read and write
|
|
|
|
134E4D02000
|
unkown
|
page read and write
|
|
|
|
231DCF30000
|
unkown
|
page write copy
|
|
|
|
1733AA00000
|
unkown
|
page readonly
|
|
|
|
7FF5213F9000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB99000
|
unkown
|
page readonly
|
|
|
|
1C955E13000
|
unkown
|
page read and write
|
|
|
|
1F62000
|
unkown
|
page readonly
|
|
|
|
7FF543478000
|
unkown
|
page readonly
|
|
|
|
7FF543735000
|
unkown
|
page readonly
|
|
|
|
175CCF80000
|
unkown
|
page read and write
|
|
|
|
7FF53D04E000
|
unkown
|
page readonly
|
|
|
|
7FF57170C000
|
unkown
|
page readonly
|
|
|
|
231DD540000
|
unkown
|
page readonly
|
|
|
|
1C955E64000
|
unkown
|
page read and write
|
|
|
|
17339F00000
|
heap default
|
page read and write
|
|
|
|
1C956602000
|
unkown
|
page read and write
|
|
|
|
7FF53D08C000
|
unkown
|
page readonly
|
|
|
|
7FF54399A000
|
unkown
|
page readonly
|
|
|
|
7FF543740000
|
unkown
|
page readonly
|
|
|
|
7FF571682000
|
unkown
|
page readonly
|
|
|
|
134E5270000
|
unkown
|
page read and write
|
|
|
|
7FF521366000
|
unkown
|
page readonly
|
|
|
|
A7B12FD000
|
unkown
|
page read and write
|
|
|
|
1FFB000
|
unkown
|
page readonly
|
|
|
|
26D1D829000
|
unkown
|
page read and write
|
|
|
|
7FF543986000
|
unkown
|
page readonly
|
|
|
|
175D28B6000
|
unkown
|
page read and write
|
|
|
|
1C956540000
|
unkown
|
page read and write
|
|
|
|
60D237C000
|
unkown
|
page read and write
|
|
|
|
175D23E0000
|
unkown
|
page read and write
|
|
|
|
7FF5ADB91000
|
unkown
|
page readonly
|
|
|
|
7FF53D05F000
|
unkown
|
page readonly
|
|
|
|
7FF5712C1000
|
unkown
|
page readonly
|
|
|
|
28D0000
|
unkown
|
page readonly
|
|
|
|
7FF5714B7000
|
unkown
|
page readonly
|
|
|
|
7FF5436C5000
|
unkown
|
page readonly
|
|
|
|
7FF521057000
|
unkown
|
page readonly
|
|
|
|
175CDE30000
|
unkown
|
page read and write
|
|
|
|
19050C00000
|
unkown
|
page readonly
|
|
|
|
7FF54367D000
|
unkown
|
page readonly
|
|
|
|
1C955E69000
|
unkown
|
page read and write
|
|
|
|
175CE000000
|
unkown
|
page readonly
|
|
|
|
1733A03C000
|
unkown
|
page read and write
|
|
|
|
7FF543968000
|
unkown
|
page readonly
|
|
|
|
7FF543840000
|
unkown
|
page readonly
|
|
|
|
175CD05E000
|
unkown
|
page read and write
|
|
|
|
17339FE0000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB1C000
|
unkown
|
page readonly
|
|
|
|
2600000
|
unkown
|
page readonly
|
|
|
|
22BA000
|
unkown
|
page readonly
|
|
|
|
19050A13000
|
unkown
|
page read and write
|
|
|
|
7FF5ADB99000
|
unkown
|
page readonly
|
|
|
|
477227B000
|
unkown
|
page read and write
|
|
|
|
7FF5483C5000
|
unkown
|
page readonly
|
|
|
|
1C955E5C000
|
unkown
|
page read and write
|
|
|
|
175D2620000
|
unkown
|
page read and write
|
|
|
|
26D1DE60000
|
unkown
|
page readonly
|
|
|
|
175D24E0000
|
unkown
|
page read and write
|
|
|
|
1F1F000
|
unkown
|
page readonly
|
|
|
|
7FF5ED824000
|
unkown
|
page readonly
|
|
|
|
7FF543373000
|
unkown
|
page readonly
|
|
|
|
231DC86D000
|
unkown
|
page read and write
|
|
|
|
175CCFF3000
|
unkown
|
page read and write
|
|
|
|
175D288A000
|
unkown
|
page read and write
|
|
|
|
19050A59000
|
unkown
|
page read and write
|
|
|
|
84A00FE000
|
unkown
|
page read and write
|
|
|
|
7FF5ED72E000
|
unkown
|
page readonly
|
|
|
|
EA8727E000
|
unkown
|
page read and write
|
|
|
|
26D1E200000
|
unkown
|
page readonly
|
|
|
|
19050A59000
|
unkown
|
page read and write
|
|
|
|
26D1D7F0000
|
unkown
|
page readonly
|
|
|
|
2501D610000
|
unkown
|
page readonly
|
|
|
|
7FF5735E5000
|
unkown
|
page readonly
|
|
|
|
74CD0FE000
|
unkown
|
page read and write
|
|
|
|
1C955E5F000
|
unkown
|
page read and write
|
|
|
|
7FF54381E000
|
unkown
|
page readonly
|
|
|
|
1F46000
|
unkown
|
page readonly
|
|
|
|
A7B13FE000
|
unkown
|
page read and write
|
|
|
|
7FF5716CF000
|
unkown
|
page readonly
|
|
|
|
1F72000
|
unkown
|
page readonly
|
|
|
|
7FF5734FD000
|
unkown
|
page readonly
|
|
|
|
1C955E4E000
|
unkown
|
page read and write
|
|
|
|
7FF571692000
|
unkown
|
page readonly
|
|
|
|
25BC000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA76000
|
unkown
|
page readonly
|
|
|
|
2004000
|
unkown
|
page readonly
|
|
|
|
709C5F7000
|
unkown
|
page read and write
|
|
|
|
7FF573600000
|
unkown
|
page readonly
|
|
|
|
2D7C3FD000
|
unkown
|
page read and write
|
|
|
|
7FF5734D0000
|
unkown
|
page readonly
|
|
|
|
17339FF0000
|
unkown
|
page readonly
|
|
|
|
175D25B0000
|
unkown
|
page write copy
|
|
|
|
7FF53D028000
|
unkown
|
page readonly
|
|
|
|
1C955E61000
|
unkown
|
page read and write
|
|
|
|
231DC7B0000
|
unkown
|
page read and write
|
|
|
|
7FF57177E000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA85000
|
unkown
|
page readonly
|
|
|
|
19052600000
|
unkown
|
page read and write
|
|
|
|
1FA5000
|
unkown
|
page readonly
|
|
|
|
7FF5735C0000
|
unkown
|
page readonly
|
|
|
|
222F000
|
unkown
|
page readonly
|
|
|
|
7FF521394000
|
unkown
|
page readonly
|
|
|
|
7FF5ED6E1000
|
unkown
|
page readonly
|
|
|
|
7FF53D012000
|
unkown
|
page readonly
|
|
|
|
7FF5437FF000
|
unkown
|
page readonly
|
|
|
|
7FF573816000
|
unkown
|
page readonly
|
|
|
|
1C955E57000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA97000
|
unkown
|
page readonly
|
|
|
|
7FF54382C000
|
unkown
|
page readonly
|
|
|
|
134E4C2A000
|
unkown
|
page read and write
|
|
|
|
7FF571789000
|
unkown
|
page readonly
|
|
|
|
1C12000
|
unkown
|
page readonly
|
|
|
|
A7B147C000
|
unkown
|
page read and write
|
|
|
|
EA869CB000
|
unkown
|
page read and write
|
|
|
|
175D2720000
|
unkown
|
page readonly
|
|
|
|
74CD07E000
|
unkown
|
page read and write
|
|
|
|
1F67000
|
unkown
|
page readonly
|
|
|
|
231DC7A0000
|
unkown
|
page readonly
|
|
|
|
7FF5435F8000
|
unkown
|
page readonly
|
|
|
|
175D2610000
|
unkown
|
page read and write
|
|
|
|
7FF543831000
|
unkown
|
page readonly
|
|
|
|
231DD100000
|
unkown
|
page read and write
|
|
|
|
7FF548348000
|
unkown
|
page readonly
|
|
|
|
7FF543A70000
|
unkown
|
page readonly
|
|
|
|
7FF571627000
|
unkown
|
page readonly
|
|
|
|
231DC8B9000
|
unkown
|
page read and write
|
|
|
|
134E52B0000
|
unkown
|
page read and write
|
|
|
|
7FF543849000
|
unkown
|
page readonly
|
|
|
|
2D7BB5B000
|
unkown
|
page read and write
|
|
|
|
7FF573790000
|
unkown
|
page readonly
|
|
|
|
60D2B7F000
|
unkown
|
page read and write
|
|
|
|
231DCE60000
|
unkown
|
page readonly
|
|
|
|
EA8707F000
|
unkown
|
page read and write
|
|
|
|
7FF5716F1000
|
unkown
|
page readonly
|
|
|
|
7FF573217000
|
unkown
|
page readonly
|
|
|
|
175D24E8000
|
unkown
|
page read and write
|
|
|
|
1F56000
|
unkown
|
page readonly
|
|
|
|
7FF571680000
|
unkown
|
page readonly
|
|
|
|
2266000
|
unkown
|
page readonly
|
|
|
|
7FF543A79000
|
unkown
|
page readonly
|
|
|
|
2314000
|
unkown
|
page readonly
|
|
|
|
7FF5ADACE000
|
unkown
|
page readonly
|
|
|
|
7FF571637000
|
unkown
|
page readonly
|
|
|
|
1733A113000
|
unkown
|
page read and write
|
|
|
|
134E4C02000
|
unkown
|
page read and write
|
|
|
|
19052402000
|
unkown
|
page read and write
|
|
|
|
7FF543686000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB30000
|
unkown
|
page readonly
|
|
|
|
7FF5ADAE9000
|
unkown
|
page readonly
|
|
|
|
1C956530000
|
unkown
|
page readonly
|
|
|
|
1F83000
|
unkown
|
page readonly
|
|
|
|
7FF5716ED000
|
unkown
|
page readonly
|
|
|
|
1C12000
|
unkown
|
page readonly
|
|
|
|
7FF543970000
|
unkown
|
page readonly
|
|
|
|
175D2504000
|
unkown
|
page read and write
|
|
|
|
19050A00000
|
unkown
|
page read and write
|
|
|
|
7FF5212A4000
|
unkown
|
page readonly
|
|
|
|
2C10000
|
unkown
|
page readonly
|
|
|
|
7FF543A05000
|
unkown
|
page readonly
|
|
|
|
7FF573788000
|
unkown
|
page readonly
|
|
|
|
2AA0000
|
unkown
|
page readonly
|
|
|
|
26D1D913000
|
unkown
|
page read and write
|
|
|
|
1F46000
|
unkown
|
page readonly
|
|
|
|
1F3D000
|
unkown
|
page readonly
|
|
|
|
2501D6E7000
|
unkown
|
page read and write
|
|
|
|
7FF543730000
|
unkown
|
page readonly
|
|
|
|
175D2600000
|
unkown
|
page read and write
|
|
|
|
1733A200000
|
unkown
|
page readonly
|
|
|
|
2501D910000
|
unkown
|
page readonly
|
|
|
|
175CD125000
|
unkown
|
page read and write
|
|
|
|
175CD013000
|
unkown
|
page read and write
|
|
|
|
1C955E78000
|
unkown
|
page read and write
|
|
|
|
13C000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA06000
|
unkown
|
page readonly
|
|
|
|
7FF53D010000
|
unkown
|
page readonly
|
|
|
|
1FAA000
|
unkown
|
page readonly
|
|
|
|
7FF5716F6000
|
unkown
|
page readonly
|
|
|
|
709CBFE000
|
unkown
|
page read and write
|
|
|
|
175CD7F0000
|
unkown
|
page read and write
|
|
|
|
7FF5ADABA000
|
unkown
|
page readonly
|
|
|
|
190523F0000
|
unkown
|
page readonly
|
|
|
|
7FF5437DE000
|
unkown
|
page readonly
|
|
|
|
2501D440000
|
unkown
|
page readonly
|
|
|
|
7FF5ED662000
|
unkown
|
page readonly
|
|
|
|
7FF5213F9000
|
unkown
|
page readonly
|
|
|
|
7FF5439DD000
|
unkown
|
page readonly
|
|
|
|
709D07D000
|
unkown
|
page read and write
|
|
|
|
7FF5212F0000
|
unkown
|
page readonly
|
|
|
|
7FF54382E000
|
unkown
|
page readonly
|
|
|
|
7FF5437D0000
|
unkown
|
page readonly
|
|
|
|
7FF53D111000
|
unkown
|
page readonly
|
|
|
|
26D1E002000
|
unkown
|
page read and write
|
|
|
|
29C1000
|
heap default
|
page read and write
|
|
|
|
7FF573725000
|
unkown
|
page readonly
|
|
|
|
7FF5439E1000
|
unkown
|
page readonly
|
|
|
|
7FF5737DF000
|
unkown
|
page readonly
|
|
|
|
134E4C35000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA02000
|
unkown
|
page readonly
|
|
|
|
1F70000
|
unkown
|
page readonly
|
|
|
|
7FF543727000
|
unkown
|
page readonly
|
|
|
|
25FB000
|
unkown
|
page read and write
|
|
|
|
7FF543789000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB06000
|
unkown
|
page readonly
|
|
|
|
2D7C2FF000
|
unkown
|
page read and write
|
|
|
|
7FF521073000
|
unkown
|
page readonly
|
|
|
|
225B000
|
unkown
|
page readonly
|
|
|
|
2647B7E000
|
unkown
|
page read and write
|
|
|
|
175CD0A3000
|
unkown
|
page read and write
|
|
|
|
7FF5EDAF9000
|
unkown
|
page readonly
|
|
|
|
7FF5ED9F2000
|
unkown
|
page readonly
|
|
|
|
231DD132000
|
unkown
|
page read and write
|
|
|
|
1F4B000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA3F000
|
unkown
|
page readonly
|
|
|
|
2B10000
|
heap default
|
page read and write
|
|
|
|
7FF5436CD000
|
unkown
|
page readonly
|
|
|
|
7FF54368C000
|
unkown
|
page readonly
|
|
|
|
224A000
|
unkown
|
page readonly
|
|
|
|
7FF5439BF000
|
unkown
|
page readonly
|
|
|
|
175D2855000
|
unkown
|
page read and write
|
|
|
|
19050A65000
|
unkown
|
page read and write
|
|
|
|
7FF543982000
|
unkown
|
page readonly
|
|
|
|
7FF5737FD000
|
unkown
|
page readonly
|
|
|
|
7FF5734F0000
|
unkown
|
page readonly
|
|
|
|
7FF53CD35000
|
unkown
|
page readonly
|
|
|
|
134E52A0000
|
unkown
|
page read and write
|
|
|
|
7FF543A6E000
|
unkown
|
page readonly
|
|
|
|
74CCDFB000
|
unkown
|
page read and write
|
|
|
|
7FF5435B1000
|
unkown
|
page readonly
|
|
|
|
26D1DA00000
|
unkown
|
page readonly
|
|
|
|
26D1DD90000
|
unkown
|
page readonly
|
|
|
|
1733A05A000
|
unkown
|
page read and write
|
|
|
|
2018000
|
unkown
|
page readonly
|
|
|
|
709CF7E000
|
unkown
|
page read and write
|
|
|
|
1C955E62000
|
unkown
|
page read and write
|
|
|
|
EA86F7B000
|
unkown
|
page read and write
|
|
|
|
7FF5713BE000
|
unkown
|
page readonly
|
|
|
|
26D1D868000
|
unkown
|
page read and write
|
|
|
|
1733A071000
|
unkown
|
page read and write
|
|
|
|
24CF000
|
unkown
|
page read and write
|
|
|
|
175D2881000
|
unkown
|
page read and write
|
|
|
|
7FF53CFE7000
|
unkown
|
page readonly
|
|
|
|
175D2740000
|
unkown
|
page readonly
|
|
|
|
7FF543931000
|
unkown
|
page readonly
|
|
|
|
29F0000
|
heap default
|
page read and write
|
|
|
|
7FF5716FC000
|
unkown
|
page readonly
|
|
|
|
2264000
|
unkown
|
page readonly
|
|
|
|
175CD000000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA90000
|
unkown
|
page readonly
|
|
|
|
7FF521397000
|
unkown
|
page readonly
|
|
|
|
7FF543746000
|
unkown
|
page readonly
|
|
|
|
849FEFB000
|
unkown
|
page read and write
|
|
|
|
7FF5435B3000
|
unkown
|
page readonly
|
|
|
|
1C955E60000
|
unkown
|
page read and write
|
|
|
|
7FF5437AC000
|
unkown
|
page readonly
|
|
|
|
7FF573669000
|
unkown
|
page readonly
|
|
|
|
7FF571727000
|
unkown
|
page readonly
|
|
|
|
26D1D856000
|
unkown
|
page read and write
|
|
|
|
7FF5ADAFD000
|
unkown
|
page readonly
|
|
|
|
7FF543797000
|
unkown
|
page readonly
|
|
|
|
4580000
|
heap private
|
page read and write
|
|
|
|
47723FE000
|
unkown
|
page read and write
|
|
|
|
7FF5712C5000
|
unkown
|
page readonly
|
|
|
|
1733A660000
|
unkown
|
page read and write
|
|
|
|
7FF53D081000
|
unkown
|
page readonly
|
|
|
|
7FF57388E000
|
unkown
|
page readonly
|
|
|
|
1C955E3A000
|
unkown
|
page read and write
|
|
|
|
231DCAD0000
|
unkown
|
page readonly
|
|
|
|
849F87C000
|
unkown
|
page read and write
|
|
|
|
7FF57365A000
|
unkown
|
page readonly
|
|
|
|
2501F1AF000
|
heap private
|
page read and write
|
|
|
|
7FF5733D5000
|
unkown
|
page readonly
|
|
|
|
7FF5ADAA8000
|
unkown
|
page readonly
|
|
|
|
60D297E000
|
unkown
|
page read and write
|
|
|
|
7FF5437B8000
|
unkown
|
page readonly
|
|
|
|
175CD918000
|
unkown
|
page read and write
|
|
|
|
7FF543831000
|
unkown
|
page readonly
|
|
|
|
1FFB000
|
unkown
|
page readonly
|
|
|
|
175CD090000
|
unkown
|
page read and write
|
|
|
|
2501D905000
|
heap private
|
page read and write
|
|
|
|
1733A04B000
|
unkown
|
page read and write
|
|
|
|
22D0000
|
heap default
|
page read and write
|
|
|
|
175D282D000
|
unkown
|
page read and write
|
|
|
|
7FF53D096000
|
unkown
|
page readonly
|
|
|
|
1C955E26000
|
unkown
|
page read and write
|
|
|
|
7FF5435D8000
|
unkown
|
page readonly
|
|
|
|
7FF53CCD3000
|
unkown
|
page readonly
|
|
|
|
175D2690000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA66000
|
unkown
|
page readonly
|
|
|
|
7FF54375A000
|
unkown
|
page readonly
|
|
|
|
175D2510000
|
unkown
|
page read and write
|
|
|
|
7FF53CCD7000
|
unkown
|
page readonly
|
|
|
|
60D257F000
|
unkown
|
page read and write
|
|
|
|
231DC780000
|
heap default
|
page read and write
|
|
|
|
175D25B4000
|
unkown
|
page readonly
|
|
|
|
7FF573784000
|
unkown
|
page readonly
|
|
|
|
7FF54368F000
|
unkown
|
page readonly
|
|
|
|
19050A8A000
|
unkown
|
page read and write
|
|
|
|
7FF5AD515000
|
unkown
|
page readonly
|
|
|
|
7FF52100C000
|
unkown
|
page readonly
|
|
|
|
19050A49000
|
unkown
|
page read and write
|
|
|
|
7FF571789000
|
unkown
|
page readonly
|
|
|
|
7FF571780000
|
unkown
|
page readonly
|
|
|
|
175D28B7000
|
unkown
|
page read and write
|
|
|
|
23C0000
|
unkown
|
page readonly
|
|
|
|
7FF57380C000
|
unkown
|
page readonly
|
|
|
|
7FF543A10000
|
unkown
|
page readonly
|
|
|
|
1C956000000
|
unkown
|
page readonly
|
|
|
|
2B1A000
|
heap default
|
page read and write
|
|
|
|
7FF543500000
|
unkown
|
page readonly
|
|
|
|
1C955E48000
|
unkown
|
page read and write
|
|
|
|
7FF5ED907000
|
unkown
|
page readonly
|
|
|
|
60D277D000
|
unkown
|
page read and write
|
|
|
|
1F22000
|
unkown
|
page readonly
|
|
|
|
2760000
|
heap private
|
page read and write
|
|
|
|
175CDFF0000
|
unkown
|
page readonly
|
|
|
|
175D2800000
|
unkown
|
page read and write
|
|
|
|
7FF53D119000
|
unkown
|
page readonly
|
|
|
|
7FF5ADA90000
|
unkown
|
page readonly
|
|
|
|
175CD800000
|
unkown
|
page read and write
|
|
|
|
7FF5436D2000
|
unkown
|
page readonly
|
|
|
|
1C955E40000
|
unkown
|
page read and write
|
|
|
|
2501D5C0000
|
unkown
|
page readonly
|
|
|
|
19050A02000
|
unkown
|
page read and write
|
|
|
|
7FF521385000
|
unkown
|
page readonly
|
|
|
|
7FF573638000
|
unkown
|
page readonly
|
|
|
|
7FF5AD717000
|
unkown
|
page readonly
|
|
|
|
1733A102000
|
unkown
|
page read and write
|
|
|
|
1C955DF0000
|
unkown
|
page readonly
|
|
|
|
7FF5734F4000
|
unkown
|
page readonly
|
|
|
|
1C955E6C000
|
unkown
|
page read and write
|
|
|
|
190509F0000
|
unkown
|
page read and write
|
|
|
|
1F4B000
|
unkown
|
page readonly
|
|
|
|
7FF5ED746000
|
unkown
|
page readonly
|
|
|
|
7FF5AD8BA000
|
unkown
|
page readonly
|
|
|
|
1F3A000
|
unkown
|
page readonly
|
|
|
|
1C955D80000
|
heap private
|
page read and write
|
|
|
|
7FF543957000
|
unkown
|
page readonly
|
|
|
|
2018000
|
unkown
|
page readonly
|
|
|
|
175D2640000
|
unkown
|
page read and write
|
|
|
|
175D2390000
|
unkown
|
page readonly
|
|
|
|
7FF5213A2000
|
unkown
|
page readonly
|
|
|
|
26D1D900000
|
unkown
|
page read and write
|
|
|
|
7FF571678000
|
unkown
|
page readonly
|
|
|
|
2647DFF000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA7C000
|
unkown
|
page readonly
|
|
|
|
7FF5439F6000
|
unkown
|
page readonly
|
|
|
|
7FF57321D000
|
unkown
|
page readonly
|
|
|
|
7FF5437C5000
|
unkown
|
page readonly
|
|
|
|
134E4B10000
|
heap default
|
page read and write
|
|
|
|
175CD590000
|
unkown
|
page readonly
|
|
|
|
19050B00000
|
unkown
|
page read and write
|
|
|
|
7FF52102B000
|
unkown
|
page readonly
|
|
|
|
7FF543400000
|
unkown
|
page readonly
|
|
|
|
7FF5438F7000
|
unkown
|
page readonly
|
|
|
|
7FF521349000
|
unkown
|
page readonly
|
|
|
|
190508A0000
|
heap default
|
page read and write
|
|
|
|
7FF5ED9CA000
|
unkown
|
page readonly
|
|
|
|
7FF5EDAEE000
|
unkown
|
page readonly
|
|
|
|
2256000
|
unkown
|
page readonly
|
|
|
|
7FF52137C000
|
unkown
|
page readonly
|
|
|
|
7FF52132E000
|
unkown
|
page readonly
|
|
|
|
29A0000
|
heap default
|
page read and write
|
|
|
|
7FF543A14000
|
unkown
|
page readonly
|
|
|
|
231DC813000
|
unkown
|
page read and write
|
|
|
|
7FF548439000
|
unkown
|
page readonly
|
|
|
|
7FF5438E5000
|
unkown
|
page readonly
|
|
|
|
175CD067000
|
unkown
|
page read and write
|
|
|
|
175D24E0000
|
unkown
|
page read and write
|
|
|
|
2B31000
|
heap default
|
page read and write
|
|
|
|
1C955E73000
|
unkown
|
page read and write
|
|
|
|
175D2680000
|
unkown
|
page readonly
|
|
|
|
175CD113000
|
unkown
|
page read and write
|
|
|
|
26D1D710000
|
heap default
|
page read and write
|
|
|
|
134E4B20000
|
unkown
|
page readonly
|
|
|
|
1FAA000
|
unkown
|
page readonly
|
|
|
|
175D2640000
|
unkown
|
page read and write
|
|
|
|
2D7BF7C000
|
unkown
|
page read and write
|
|
|
|
1F95000
|
unkown
|
page readonly
|
|
|
|
224D000
|
unkown
|
page readonly
|
|
|
|
7FF53CCE4000
|
unkown
|
page readonly
|
|
|
|
175CD7C1000
|
unkown
|
page read and write
|
|
|
|
230B000
|
unkown
|
page readonly
|
|
|
|
7FF53CFDB000
|
unkown
|
page readonly
|
|
|
|
60D2C7F000
|
unkown
|
page read and write
|
|
|
|
7FF5439AE000
|
unkown
|
page readonly
|
|
|
|
2293000
|
unkown
|
page readonly
|
|
|
|
175D283F000
|
unkown
|
page read and write
|
|
|
|
709CA7A000
|
unkown
|
page read and write
|
|
|
|
7FF5AD91F000
|
unkown
|
page readonly
|
|
|
|
2018000
|
unkown
|
page readonly
|
|
|
|
2D7C4FC000
|
unkown
|
page read and write
|
|
|
|
221E000
|
unkown
|
page readonly
|
|
|
|
849FA7C000
|
unkown
|
page read and write
|
|
|
|
1F72000
|
unkown
|
page readonly
|
|
|
|
26D1DE70000
|
unkown
|
page read and write
|
|
|
|
175D2862000
|
unkown
|
page read and write
|
|
|
|
190529C0000
|
unkown
|
page write copy
|
|
|
|
7FF5436FC000
|
unkown
|
page readonly
|
|
|
|
19050A58000
|
unkown
|
page read and write
|
|
|
|
175CD089000
|
unkown
|
page read and write
|
|
|
|
7FF571641000
|
unkown
|
page readonly
|
|
|
|
175CD063000
|
unkown
|
page read and write
|
|
|
|
7FF54379B000
|
unkown
|
page readonly
|
|
|
|
7FF548375000
|
unkown
|
page readonly
|
|
|
|
7FF57163A000
|
unkown
|
page readonly
|
|
|
|
190509F0000
|
unkown
|
page read and write
|
|
|
|
7FF573899000
|
unkown
|
page readonly
|
|
|
|
1C955E3D000
|
unkown
|
page read and write
|
|
|
|
25B1000
|
unkown
|
page read and write
|
|
|
|
229B000
|
unkown
|
page read and write
|
|
|
|
1C955E31000
|
unkown
|
page read and write
|
|
|
|
7FF548389000
|
unkown
|
page readonly
|
|
|
|
175D2630000
|
unkown
|
page read and write
|
|
|
|
2501D590000
|
unkown
|
page read and write
|
|
|
|
7FF5ADB25000
|
unkown
|
page readonly
|
|
|
|
7FF5ADB0C000
|
unkown
|
page readonly
|
|
|
|
7FF543A79000
|
unkown
|
page readonly
|
|
|
|
175CCF70000
|
unkown
|
page readonly
|
|
|
|
231DC913000
|
unkown
|
page read and write
|
|
|
|
7FF5ED91C000
|
unkown
|
page readonly
|
|
|
|
7FF5EDA08000
|
unkown
|
page readonly
|
|
|
|
175CCFF0000
|
unkown
|
page read and write
|
|
|
|
7FF5ED977000
|
unkown
|
page readonly
|
|
|
|
A7B137F000
|
unkown
|
page read and write
|
|
|
|
2950000
|
unkown
|
page readonly
|
|
|
|
7FF543607000
|
unkown
|
page readonly
|
|
|
|
7FF543775000
|
unkown
|
page readonly
|
|
|
|
709CE7F000
|
unkown
|
page read and write
|
|
|
|
1F50000
|
unkown
|
page readonly
|
|
|
|
175CD902000
|
unkown
|
page read and write
|
|
|
|
7FF5EDA61000
|
unkown
|
page readonly
|
|
|
|
19050B02000
|
unkown
|
page read and write
|
|
|
|
2328000
|
unkown
|
page readonly
|
|
|
|
60D21FA000
|
unkown
|
page read and write
|
|
|
|
231DC720000
|
heap private
|
page read and write
|
|
|
|
7FF543A17000
|
unkown
|
page readonly
|
|
|
|
1F18000
|
unkown
|
page readonly
|
|
|
|
2D7C5FE000
|
unkown
|
page read and write
|
|
|
|
709C97F000
|
unkown
|
page read and write
|
|
|
|
1C955DE0000
|
heap default
|
page read and write
|
|
|
|
19050980000
|
unkown
|
page readonly
|
|
|
|
1FF6000
|
unkown
|
page readonly
|
|
|
|
60D287E000
|
unkown
|
page read and write
|
|
|
|
1E1ACA58000
|
heap default
|
page read and write
|
|
|
|
74CD2FF000
|
unkown
|
page read and write
|
|
|
|
7FF53CE9F000
|
unkown
|
page readonly
|
|
|
|
7FF573834000
|
unkown
|
page readonly
|
|
|
|
1F3A000
|
unkown
|
page readonly
|
|
|
|
1F95000
|
unkown
|
page readonly
|
|
|
|
2010000
|
unkown
|
page readonly
|
|
|
|
2647EFD000
|
unkown
|
page read and write
|
|
|
|
1E45000
|
unkown
|
page readonly
|
|
|
|
7FF53D055000
|
unkown
|
page readonly
|
|
|
|
23D0000
|
unkown
|
page readonly
|
|
|
|
709CEFE000
|
unkown
|
page read and write
|
|
|
|
7FF573825000
|
unkown
|
page readonly
|
|
|
|
1C955E5E000
|
unkown
|
page read and write
|
|
|
|
7FF54376E000
|
unkown
|
page readonly
|
|
|
|
7FF543472000
|
unkown
|
page readonly
|
|
|
|
175CD0F9000
|
unkown
|
page read and write
|
|
|
|
19050A71000
|
unkown
|
page read and write
|
|
|
|
1E1AC880000
|
unkown
|
page readonly
|
|
|
|
7FF53D09C000
|
unkown
|
page readonly
|
|
|
|
2501F2A0000
|
heap private
|
page read and write
|
|
|
|
2282000
|
unkown
|
page readonly
|
|
|
|
175D28B5000
|
unkown
|
page read and write
|
|
|
|
175CD102000
|
unkown
|
page read and write
|
|
|
|
22A5000
|
unkown
|
page readonly
|
|
|
|
7FF5435B5000
|
unkown
|
page readonly
|
|
|
|
1733A002000
|
unkown
|
page read and write
|
|
|
|
2501D4A0000
|
unkown
|
page readonly
|
|
|
|
1F3D000
|
unkown
|
page readonly
|
|
|
|
175D23C0000
|
unkown
|
page read and write
|
|
|
|
2501D6CA000
|
heap default
|
page read and write
|
|
|
|
7FF543972000
|
unkown
|
page readonly
|
|
|
|
2306000
|
unkown
|
page readonly
|
|
|
|
19050A2A000
|
unkown
|
page read and write
|
|
|
|
22A0000
|
unkown
|
page readonly
|
|
|
|
7FF5ED6D2000
|
unkown
|
page readonly
|
|
|
|
2647F7E000
|
unkown
|
page read and write
|
|
|
|
60D267E000
|
unkown
|
page read and write
|
|
|
|
19052680000
|
unkown
|
page readonly
|
|
|
|
231DC83E000
|
unkown
|
page read and write
|
|
|
|
175CE390000
|
unkown
|
page read and write
|
|
|
|
7FF548431000
|
unkown
|
page readonly
|
|
|
|
17339F10000
|
unkown
|
page readonly
|
|
|
|
231DC790000
|
unkown
|
page readonly
|
|
|
|
134E5190000
|
unkown
|
page readonly
|
|
|
|
7FF548439000
|
unkown
|
page readonly
|
|
|
|
7FF5439C9000
|
unkown
|
page readonly
|
|
|
|
7FF5ED910000
|
unkown
|
page readonly
|
|
|
|
1F54000
|
unkown
|
page readonly
|
|
|
|
7FF54371C000
|
unkown
|
page readonly
|
|
|
|
19050B29000
|
unkown
|
page read and write
|
|
|
|
1E1ACA50000
|
heap default
|
page read and write
|
|
|
|
7FF5712C3000
|
unkown
|
page readonly
|
|
|
|
7FF5716D9000
|
unkown
|
page readonly
|
|
|
|
190523A0000
|
unkown
|
page read and write
|
|
|
|
7FF54372E000
|
unkown
|
page readonly
|
|
|
|
7FF571696000
|
unkown
|
page readonly
|
|
|
|
7FF543648000
|
unkown
|
page readonly
|
|
|
|
7FF5716C5000
|
unkown
|
page readonly
|
|
|
|
1733A000000
|
unkown
|
page read and write
|
|
|
|
7FF571724000
|
unkown
|
page readonly
|
|
|
|
7FF53D069000
|
unkown
|
page readonly
|
|
|
|
709CCFF000
|
unkown
|
page read and write
|
|
|
|
175CE020000
|
unkown
|
page readonly
|
|
|
|
7FF5ED85E000
|
unkown
|
page readonly
|
|
|
|
7FF543927000
|
unkown
|
page readonly
|
|
|
|
7FF5716BE000
|
unkown
|
page readonly
|
|
|
|
175D25D4000
|
unkown
|
page readonly
|
|
|
|
74CD3FE000
|
unkown
|
page read and write
|
|
|
|
7FF54834A000
|
unkown
|
page readonly
|
|
|
|
19050A60000
|
unkown
|
page read and write
|
|
|
|
1F70000
|
unkown
|
page readonly
|
|
|
|
26D1D879000
|
unkown
|
page read and write
|
|
|
|
7FF5ED9DC000
|
unkown
|
page readonly
|
|
|
|
175D284C000
|
unkown
|
page read and write
|
|
|
|
7FF5434F5000
|
unkown
|
page readonly
|
|
|
|
1733A802000
|
unkown
|
page read and write
|
|
|
|
7FF54370A000
|
unkown
|
page readonly
|
|
|
|
1C955E59000
|
unkown
|
page read and write
|
|
|
|
7FF5ADB16000
|
unkown
|
page readonly
|
|
|
|
29AA000
|
heap default
|
page read and write
|
|
|
|
26D1D83C000
|
unkown
|
page read and write
|
|
|
|
7FF5ADAA6000
|
unkown
|
page readonly
|
|
|
|
7FF5437A6000
|
unkown
|
page readonly
|
|
|
|
7FF52135D000
|
unkown
|
page readonly
|
|
|
|
7FF53CCD0000
|
unkown
|
page readonly
|
|
|
|
1FA5000
|
unkown
|
page readonly
|
|
|
|
175D28B2000
|
unkown
|
page read and write
|
|
|
|
2501D620000
|
unkown
|
page readonly
|
|
|
|
175D23D0000
|
unkown
|
page read and write
|
|
|
|
7FF5212F2000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
heap default
|
page read and write
|
|
|
|
134E5260000
|
unkown
|
page readonly
|
|
|
|
175CCF60000
|
unkown
|
page readonly
|
|
|
|
7FF521361000
|
unkown
|
page readonly
|
|
|
|
175D2640000
|
unkown
|
page read and write
|
|
|
|
2328000
|
unkown
|
page readonly
|
|
|
|
7FF53CA8F000
|
unkown
|
page readonly
|
|
|
|
7FF543953000
|
unkown
|
page readonly
|
|
|
|
175CD02A000
|
unkown
|
page read and write
|
|
|
|
175CD900000
|
unkown
|
page read and write
|
|
|
|
7FF5737A2000
|
unkown
|
page readonly
|
|
|
|
190508B0000
|
unkown
|
page readonly
|
|
|
|
1C955E45000
|
unkown
|
page read and write
|
|
|
|
1F50000
|
unkown
|
page readonly
|
|
|
|
22F1000
|
heap default
|
page read and write
|
|
|
|
7FF53D0B7000
|
unkown
|
page readonly
|
|
|
|
2230000
|
unkown
|
page readonly
|
|
|
|
190509A0000
|
unkown
|
page read and write
|
|
|
|
19050990000
|
unkown
|
page readonly
|
|
|
|
1F11000
|
unkown
|
page readonly
|
|
|
|
175D26A0000
|
unkown
|
page readonly
|
|
|
|
22DA000
|
heap default
|
page read and write
|
|
|
|
7FF571706000
|
unkown
|
page readonly
|
|
|
|
7FF5ED9F0000
|
unkown
|
page readonly
|
|
|
|
231DD002000
|
unkown
|
page read and write
|
|
|
|
2277000
|
unkown
|
page readonly
|
|
|
|
7FF543838000
|
unkown
|
page readonly
|
|
|
|
2799000
|
unkown
|
page read and write
|
|
|
|
60D1DCB000
|
unkown
|
page read and write
|
|
|
|
7FF573837000
|
unkown
|
page readonly
|
|
|
|
84A02FF000
|
unkown
|
page read and write
|
|
|
|
2501D690000
|
heap default
|
page read and write
|
|
|
|
7FF5432B5000
|
unkown
|
page readonly
|
|
|
|
175CCE90000
|
unkown
|
page readonly
|
|
|
|
2700000
|
heap private
|
page read and write
|
|
|
|
709D179000
|
unkown
|
page read and write
|
|
|
|
7FF5437D7000
|
unkown
|
page readonly
|
|
|
|
175D2500000
|
unkown
|
page read and write
|
|
|
|
7FF5483BC000
|
unkown
|
page readonly
|
|
|
|
175CD959000
|
unkown
|
page read and write
|
|
|
|
7FF573832000
|
unkown
|
page readonly
|
|
|
|
1C955E41000
|
unkown
|
page read and write
|
|
|
|
1C955E42000
|
unkown
|
page read and write
|
|
|
|
7DFBC7058000
|
unkown
|
page readonly
|
|
|
|
7FF521308000
|
unkown
|
page readonly
|
|
|
|
2272000
|
unkown
|
page readonly
|
|
|
|
2228000
|
unkown
|
page readonly
|
|
|
|
7FF5435F0000
|
unkown
|
page readonly
|
|
|
|
175CD7E0000
|
unkown
|
page read and write
|
|
|
|
22B5000
|
unkown
|
page readonly
|
|
|
|
2501D900000
|
heap private
|
page read and write
|
|
|
|
19050A3D000
|
unkown
|
page read and write
|
|
|
|
7FF543732000
|
unkown
|
page readonly
|
|
|
|
2501F0B0000
|
heap private
|
page read and write
|
|
|
|
1F18000
|
unkown
|
page readonly
|
|
|
|
3EE0000
|
unkown
|
page readonly
|
|
|
|
7FF54360E000
|
unkown
|
page readonly
|
|
|
|
7FF5437D4000
|
unkown
|
page readonly
|
|
|
|
7FF5ED9E8000
|
unkown
|
page readonly
|
|
|
|
7FF57381C000
|
unkown
|
page readonly
|
|
|
|
22D0000
|
unkown
|
page readonly
|
|
|
|
7FF543988000
|
unkown
|
page readonly
|
|
|
|
175D2811000
|
unkown
|
page read and write
|
|
|
|
7FF5ED8BA000
|
unkown
|
page readonly
|
|
|
|
134E4C00000
|
unkown
|
page read and write
|
|
|
|
175CE040000
|
unkown
|
page readonly
|
|
|
|
709CD7F000
|
unkown
|
page read and write
|
|
|
|
7FF543839000
|
unkown
|
page readonly
|
|
|
|
1C955E7A000
|
unkown
|
page read and write
|
|
|
|
7FF53D0B4000
|
unkown
|
page readonly
|
|
|
|
7FF573806000
|
unkown
|
page readonly
|
|
|
|
231DC867000
|
unkown
|
page read and write
|
|
|
|
7FF5737D5000
|
unkown
|
page readonly
|
|
|
|
26D1D6B0000
|
heap private
|
page read and write
|
|
|
|
231DC888000
|
unkown
|
page read and write
|
|
|
|
1F11000
|
unkown
|
page readonly
|
|
|
|
134E52A0000
|
unkown
|
page read and write
|
|
|
|
1C955E67000
|
unkown
|
page read and write
|
|
|
|
175D25D7000
|
unkown
|
page readonly
|
|
|
|
2D7C1FE000
|
unkown
|
page read and write
|
|
|
|
477237F000
|
unkown
|
page read and write
|
|
There are 870 hidden memdumps, click here to show them.