Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
shorefront.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{B147A46E-C485-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B147A470-C485-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{B147A472-C485-11EB-90EB-ECF4BBEA1588}.dat
|
Microsoft Word Document
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\down[1]
|
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\httpErrorPagesScripts[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\NewErrorPageTemplate[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\dnserror[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\errorPageStrings[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
|
ASCII text, with CRLF line terminators
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF2325E3FA7AA39907.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF762A57E90D6A65CD.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF896FBAE33087E32E.TMP
|
data
|
dropped
|
|
There are 8 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\shorefront.dll'
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\shorefront.dll,Child
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\shorefront.dll',#1
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\shorefront.dll,Forcearea
|
|
|
|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\shorefront.dll,Stationmeat
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\shorefront.dll',#1
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:816 CREDAT:17410 /prefetch:2
|
|
|
|
C:\Program Files (x86)\Internet Explorer\iexplore.exe
|
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:816 CREDAT:17414 /prefetch:2
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://app.buboleinov.com/7dGVcD7hOw3lYt5/1yqoO_2BT5cAFQCvp3/7fGu2bPOM/Y70HlHuovLn2gp_2B2GH/4_2FYxaP
|
unknown
|
|
|
|
http://app.buboleinov.com/BHxjQVeA3bCRL3A0U_2Bhx/6Mf2XW6xM9nlO/OBBDiHLG/gVHcEz5iH6i5Er6PkMAnMWX/IOi2
|
unknown
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
app.buboleinov.com
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\internet explorer\iexplore.exe
|
{B147A46E-C485-11EB-90EB-ECF4BBEA1588}
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Window_Placement
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Blocked
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Count
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
Time
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LoadTimeArray
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
DecayDateQueue
|
|
|
|
C:\Program Files\internet explorer\iexplore.exe
|
LastProcessed
|
|
There are 12 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
530000
|
unkown
|
page execute and read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
30E0000
|
unkown
|
page execute and read and write
|
|
|
|
27F0000
|
unkown
|
page execute and read and write
|
|
|
|
2220000
|
unkown
|
page execute and read and write
|
|
|
|
3210000
|
unkown
|
page execute and read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
2FE8000
|
heap private
|
page read and write
|
|
|
|
50E8000
|
heap private
|
page read and write
|
|
|
|
2057000
|
unkown
|
page readonly
|
|
|
|
205D000
|
unkown
|
page readonly
|
|
|
|
3423000
|
unkown
|
page read and write
|
|
|
|
4779000
|
unkown
|
page readonly
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
4BCE000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
4F89000
|
heap private
|
page read and write
|
|
|
|
7FF5D9CD5000
|
unkown
|
page readonly
|
|
|
|
2B85000
|
unkown
|
page readonly
|
|
|
|
7FF5D9D91000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown
|
page readonly
|
|
|
|
22B3000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DCA000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
5CA0000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
9D000
|
unkown
|
page read and write
|
|
|
|
7FF5D9CD1000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page execute and read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF52DE2C000
|
unkown
|
page readonly
|
|
|
|
1DF7000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3181000
|
unkown
|
page execute read
|
|
|
|
1F6B000
|
unkown
|
page readonly
|
|
|
|
605E000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
2BF0000
|
heap private
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2FEA000
|
heap private
|
page read and write
|
|
|
|
2260000
|
unkown
|
page read and write
|
|
|
|
7FF5D9EE8000
|
unkown
|
page readonly
|
|
|
|
4810000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9EF4000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DAC000
|
unkown
|
page readonly
|
|
|
|
21605B13000
|
unkown
|
page read and write
|
|
|
|
46DF000
|
unkown
|
page read and write
|
|
|
|
2071000
|
unkown
|
page readonly
|
|
|
|
3423000
|
unkown
|
page read and write
|
|
|
|
60A0000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2FE0000
|
unkown
|
page readonly
|
|
|
|
477C000
|
unkown
|
page readonly
|
|
|
|
2936000
|
heap default
|
page read and write
|
|
|
|
6C500000
|
unkown image
|
page readonly
|
|
|
|
7FF52E19F000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
205F000
|
unkown
|
page readonly
|
|
|
|
2844000
|
unkown
|
page readonly
|
|
|
|
7FF52E19C000
|
unkown
|
page readonly
|
|
|
|
2B8D000
|
unkown
|
page readonly
|
|
|
|
7FF5D9F26000
|
unkown
|
page readonly
|
|
|
|
2A168F40000
|
unkown
|
page readonly
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
2993000
|
unkown
|
page readonly
|
|
|
|
7FF5D9F2D000
|
unkown
|
page readonly
|
|
|
|
2DF0000
|
unkown
|
page execute and read and write
|
|
|
|
295C000
|
unkown
|
page readonly
|
|
|
|
4CF0000
|
heap private
|
page read and write
|
|
|
|
21605A56000
|
unkown
|
page read and write
|
|
|
|
3421000
|
unkown
|
page read and write
|
|
|
|
6D8000
|
unkown
|
page read and write
|
|
|
|
21605B02000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2C33000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
22A8000
|
unkown
|
page read and write
|
|
|
|
3110000
|
unkown
|
page read and write
|
|
|
|
1ADBF848000
|
unkown
|
page read and write
|
|
|
|
318A000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DE8000
|
unkown
|
page readonly
|
|
|
|
2A168261000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
23D2EFA000
|
unkown
|
page read and write
|
|
|
|
7FF52E254000
|
unkown
|
page readonly
|
|
|
|
2086000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2FEB000
|
heap private
|
page read and write
|
|
|
|
7FF52E051000
|
unkown
|
page readonly
|
|
|
|
2925000
|
unkown
|
page read and write
|
|
|
|
4F80000
|
heap private
|
page read and write
|
|
|
|
2933000
|
unkown
|
page readonly
|
|
|
|
342D000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2A16823C000
|
unkown
|
page read and write
|
|
|
|
1FF9000
|
unkown
|
page readonly
|
|
|
|
3418000
|
unkown
|
page read and write
|
|
|
|
1FC4000
|
unkown
|
page readonly
|
|
|
|
679000
|
heap default
|
page read and write
|
|
|
|
3373000
|
unkown
|
page read and write
|
|
|
|
2A05000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2670000
|
unkown
|
page readonly
|
|
|
|
7FF5D9EFA000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
2B33000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F1E000
|
unkown
|
page readonly
|
|
|
|
6C506000
|
unkown image
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
22A5000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
A75F6FE000
|
unkown
|
page read and write
|
|
|
|
2A168170000
|
heap private
|
page read and write
|
|
|
|
2A16822A000
|
unkown
|
page read and write
|
|
|
|
26D0000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DAF000
|
unkown
|
page readonly
|
|
|
|
2A1684D0000
|
unkown
|
page readonly
|
|
|
|
6EDE000
|
unkown
|
page read and write
|
|
|
|
1F62000
|
unkown
|
page readonly
|
|
|
|
3374000
|
heap default
|
page read and write
|
|
|
|
1ADBFAD0000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
299A000
|
unkown
|
page readonly
|
|
|
|
7278000
|
heap private
|
page read and write
|
|
|
|
2A1681D0000
|
heap default
|
page read and write
|
|
|
|
21605A6C000
|
unkown
|
page read and write
|
|
|
|
1ADC1270000
|
unkown
|
page read and write
|
|
|
|
6E5E000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A33000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
6C790000
|
unkown image
|
page readonly
|
|
|
|
2B70000
|
unkown
|
page readonly
|
|
|
|
2B55000
|
unkown
|
page readonly
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DF9000
|
unkown
|
page readonly
|
|
|
|
7FF52E16A000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1F35000
|
unkown
|
page readonly
|
|
|
|
23D2F79000
|
unkown
|
page read and write
|
|
|
|
1ADBF913000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF52E261000
|
unkown
|
page readonly
|
|
|
|
1FE3000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A01000
|
unkown
|
page readonly
|
|
|
|
2838000
|
unkown
|
page readonly
|
|
|
|
1D76000
|
unkown
|
page readonly
|
|
|
|
2BA0000
|
heap private
|
page read and write
|
|
|
|
2A16825E000
|
unkown
|
page read and write
|
|
|
|
6C562000
|
unkown image
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page execute and read and write
|
|
|
|
21605A6C000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
3637000
|
heap private
|
page read and write
|
|
|
|
7FF5D9B7F000
|
unkown
|
page readonly
|
|
|
|
7FF52E16E000
|
unkown
|
page readonly
|
|
|
|
7FF5B3C7E000
|
unkown
|
page readonly
|
|
|
|
7FF52DF36000
|
unkown
|
page readonly
|
|
|
|
2C33000
|
unkown
|
page readonly
|
|
|
|
2425000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2987000
|
unkown
|
page readonly
|
|
|
|
342B000
|
unkown
|
page read and write
|
|
|
|
47F0000
|
unkown
|
page read and write
|
|
|
|
2BBB000
|
unkown
|
page readonly
|
|
|
|
21605A68000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
A75F37B000
|
unkown
|
page read and write
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2A168313000
|
unkown
|
page read and write
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
471C000
|
unkown
|
page read and write
|
|
|
|
7290000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
2934000
|
heap default
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2C14000
|
unkown
|
page readonly
|
|
|
|
2B9A000
|
unkown
|
page readonly
|
|
|
|
4C4E000
|
unkown
|
page read and write
|
|
|
|
2A16827D000
|
unkown
|
page read and write
|
|
|
|
7FF52E25A000
|
unkown
|
page readonly
|
|
|
|
469E000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
1DDD000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
6C55E000
|
unkown image
|
page execute and read and write
|
|
|
|
4800000
|
heap private
|
page read and write
|
|
|
|
7FF52E073000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
21605A6D000
|
unkown
|
page read and write
|
|
|
|
2A1681F0000
|
unkown
|
page readonly
|
|
|
|
4C10000
|
heap private
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page readonly
|
|
|
|
7FF52E133000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
C4F4D7E000
|
unkown
|
page read and write
|
|
|
|
4C0F000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9DB8000
|
unkown
|
page readonly
|
|
|
|
1FED000
|
unkown
|
page readonly
|
|
|
|
1ADBF829000
|
unkown
|
page read and write
|
|
|
|
6C505000
|
unkown image
|
page read and write
|
|
|
|
229E000
|
unkown
|
page read and write
|
|
|
|
6C562000
|
unkown image
|
page read and write
|
|
|
|
2FD0000
|
unkown
|
page readonly
|
|
|
|
21605B00000
|
unkown
|
page read and write
|
|
|
|
263B000
|
unkown
|
page read and write
|
|
|
|
3240000
|
unkown
|
page read and write
|
|
|
|
7FF52E1ED000
|
unkown
|
page readonly
|
|
|
|
50A000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
686E000
|
unkown
|
page read and write
|
|
|
|
5B50000
|
heap private
|
page read and write
|
|
|
|
23D2B6B000
|
unkown
|
page read and write
|
|
|
|
6CDD000
|
unkown
|
page read and write
|
|
|
|
31F0000
|
heap default
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1ADC1370000
|
unkown
|
page readonly
|
|
|
|
C4F4B7F000
|
unkown
|
page read and write
|
|
|
|
2A168254000
|
unkown
|
page read and write
|
|
|
|
2250000
|
heap private
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
6C500000
|
unkown image
|
page readonly
|
|
|
|
2103000
|
unkown
|
page readonly
|
|
|
|
22BB000
|
unkown
|
page read and write
|
|
|
|
35EE000
|
unkown
|
page read and write
|
|
|
|
1ADBF802000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F0E000
|
unkown
|
page readonly
|
|
|
|
7FF52E110000
|
unkown
|
page readonly
|
|
|
|
35AF000
|
unkown
|
page read and write
|
|
|
|
1F51000
|
unkown
|
page readonly
|
|
|
|
7FF5B3D6C000
|
unkown
|
page readonly
|
|
|
|
2421000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
650000
|
heap default
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
695000
|
heap default
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
4EA0000
|
unkown
|
page read and write
|
|
|
|
6C500000
|
unkown image
|
page readonly
|
|
|
|
27D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9EAA000
|
unkown
|
page readonly
|
|
|
|
29B6000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF52E1C4000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
220000
|
unkown
|
page read and write
|
|
|
|
601E000
|
unkown
|
page read and write
|
|
|
|
3423000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page readonly
|
|
|
|
299F000
|
unkown
|
page readonly
|
|
|
|
6C500000
|
unkown image
|
page readonly
|
|
|
|
6C50F000
|
unkown image
|
page execute read
|
|
|
|
32BE000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
9A000
|
unkown
|
page read and write
|
|
|
|
50EB000
|
heap private
|
page read and write
|
|
|
|
7FF52DFC9000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
2A168C00000
|
unkown
|
page readonly
|
|
|
|
6C50E000
|
unkown image
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2F40000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F9A000
|
unkown
|
page readonly
|
|
|
|
7FF52DE47000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2B9F000
|
unkown
|
page readonly
|
|
|
|
6C503000
|
unkown image
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
4608000
|
heap private
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3220000
|
heap private
|
page read and write
|
|
|
|
3630000
|
heap private
|
page read and write
|
|
|
|
356E000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3C23000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
2C01000
|
unkown
|
page readonly
|
|
|
|
3114000
|
unkown
|
page read and write
|
|
|
|
2955000
|
unkown
|
page readonly
|
|
|
|
6E9E000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F04000
|
unkown
|
page readonly
|
|
|
|
7FF52DE3F000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1F7000
|
heap private
|
page read and write
|
|
|
|
6770000
|
unkown
|
page readonly
|
|
|
|
21605A69000
|
unkown
|
page read and write
|
|
|
|
7FF5B3E71000
|
unkown
|
page readonly
|
|
|
|
7FF5D9EAE000
|
unkown
|
page readonly
|
|
|
|
2C05000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
318C000
|
unkown
|
page readonly
|
|
|
|
1DE8000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
60E000
|
unkown
|
page read and write
|
|
|
|
4771000
|
unkown
|
page execute read
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1ADBF840000
|
unkown
|
page read and write
|
|
|
|
2639000
|
heap private
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2A16825A000
|
unkown
|
page read and write
|
|
|
|
7FF5B3C7B000
|
unkown
|
page readonly
|
|
|
|
3177000
|
heap private
|
page read and write
|
|
|
|
6C55C000
|
unkown image
|
page read and write
|
|
|
|
7FF5D9E50000
|
unkown
|
page readonly
|
|
|
|
FBF000
|
unkown
|
page readonly
|
|
|
|
30F0000
|
unkown
|
page readonly
|
|
|
|
22BA000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
21605A6D000
|
unkown
|
page read and write
|
|
|
|
27B0000
|
unkown
|
page execute and read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
4210000
|
heap private
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page readonly
|
|
|
|
28B0000
|
heap default
|
page read and write
|
|
|
|
293A000
|
unkown
|
page read and write
|
|
|
|
7FF5B3E6A000
|
unkown
|
page readonly
|
|
|
|
22A8000
|
unkown
|
page read and write
|
|
|
|
7FF52DF95000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF52E170000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
2B6C000
|
unkown
|
page readonly
|
|
|
|
2458000
|
unkown
|
page read and write
|
|
|
|
65B000
|
heap default
|
page read and write
|
|
|
|
206F000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown
|
page readonly
|
|
|
|
4C8F000
|
unkown
|
page read and write
|
|
|
|
362F000
|
unkown
|
page read and write
|
|
|
|
3421000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A1681E0000
|
unkown
|
page readonly
|
|
|
|
C4F4BF9000
|
unkown
|
page read and write
|
|
|
|
7FF5D9FA1000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
2A28000
|
unkown
|
page readonly
|
|
|
|
342A000
|
unkown
|
page read and write
|
|
|
|
6C500000
|
unkown image
|
page readonly
|
|
|
|
7FF52E112000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
7FF5D9C6B000
|
unkown
|
page readonly
|
|
|
|
7FF5B3D6A000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2260000
|
unkown
|
page read and write
|
|
|
|
3EF0000
|
heap private
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
2BB6000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
21605A68000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3E64000
|
unkown
|
page readonly
|
|
|
|
1ADBF900000
|
unkown
|
page read and write
|
|
|
|
1ADBF800000
|
unkown
|
page read and write
|
|
|
|
2A168A02000
|
unkown
|
page read and write
|
|
|
|
7FF5D9DB3000
|
unkown
|
page readonly
|
|
|
|
520000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
1F20000
|
unkown
|
page readonly
|
|
|
|
27B0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
22BB000
|
unkown
|
page read and write
|
|
|
|
5B0F000
|
unkown
|
page read and write
|
|
|
|
6E80000
|
heap private
|
page read and write
|
|
|
|
420E000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
C4F4A7B000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
21605A6F000
|
unkown
|
page read and write
|
|
|
|
33FA000
|
heap default
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
6C506000
|
unkown image
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
206A000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
A75F5F7000
|
unkown
|
page read and write
|
|
|
|
1ADBF780000
|
heap default
|
page read and write
|
|
|
|
7FF5D9F29000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3290000
|
unkown
|
page read and write
|
|
|
|
23C0000
|
heap default
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
23D2FFF000
|
unkown
|
page read and write
|
|
|
|
2A14000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
6D1E000
|
unkown
|
page read and write
|
|
|
|
A75F07C000
|
unkown
|
page read and write
|
|
|
|
2049000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
298D000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF52E1DE000
|
unkown
|
page readonly
|
|
|
|
5B54000
|
heap private
|
page read and write
|
|
|
|
2B87000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
21605A6F000
|
unkown
|
page read and write
|
|
|
|
418D000
|
unkown
|
page read and write
|
|
|
|
334A000
|
heap default
|
page read and write
|
|
|
|
7FF52E1BA000
|
unkown
|
page readonly
|
|
|
|
21605A29000
|
unkown
|
page read and write
|
|
|
|
C4F4C7A000
|
unkown
|
page read and write
|
|
|
|
30F0000
|
unkown
|
page read and write
|
|
|
|
2EFA000
|
unkown
|
page read and write
|
|
|
|
2B8E000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2B79000
|
unkown
|
page readonly
|
|
|
|
2985000
|
unkown
|
page readonly
|
|
|
|
7FF5B3DF6000
|
unkown
|
page readonly
|
|
|
|
7FF5D9D09000
|
unkown
|
page readonly
|
|
|
|
2B0F000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2025000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
293A000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
222F000
|
unkown
|
page read and write
|
|
|
|
1EEA000
|
unkown
|
page readonly
|
|
|
|
2D40000
|
unkown
|
page readonly
|
|
|
|
7FF52E175000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
27F0000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3CE4000
|
unkown
|
page readonly
|
|
|
|
3EEE000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2DE0000
|
unkown
|
page readonly
|
|
|
|
2280000
|
heap default
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
32B0000
|
heap default
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
DB000
|
unkown
|
page read and write
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
1FD2000
|
unkown
|
page readonly
|
|
|
|
7FF52E1D8000
|
unkown
|
page readonly
|
|
|
|
990000
|
unkown
|
page readonly
|
|
|
|
32C0000
|
unkown
|
page readonly
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
6C503000
|
unkown image
|
page readonly
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
1F4A000
|
unkown
|
page readonly
|
|
|
|
2B29000
|
unkown
|
page readonly
|
|
|
|
6950000
|
heap private
|
page read and write
|
|
|
|
4F5E000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2055000
|
unkown
|
page readonly
|
|
|
|
3230000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
21605A6D000
|
unkown
|
page read and write
|
|
|
|
2CFA000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
2A168308000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2790000
|
heap default
|
page read and write
|
|
|
|
6EE0000
|
unkown
|
page read and write
|
|
|
|
32FF000
|
unkown
|
page read and write
|
|
|
|
21605A6D000
|
unkown
|
page read and write
|
|
|
|
2040000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
3418000
|
unkown
|
page read and write
|
|
|
|
6D569000
|
unkown image
|
page write copy
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
22AC000
|
unkown
|
page read and write
|
|
|
|
20D1000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF52DF91000
|
unkown
|
page readonly
|
|
|
|
6C50F000
|
unkown image
|
page execute read
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2454000
|
unkown
|
page read and write
|
|
|
|
22B1000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
21605A00000
|
unkown
|
page read and write
|
|
|
|
21605A6D000
|
unkown
|
page read and write
|
|
|
|
21605A6F000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF5B3AF7000
|
unkown
|
page readonly
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
2970000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
50EB000
|
heap private
|
page read and write
|
|
|
|
7FF52E1B4000
|
unkown
|
page readonly
|
|
|
|
2082000
|
unkown
|
page readonly
|
|
|
|
2F3C000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2063000
|
unkown
|
page readonly
|
|
|
|
1F29000
|
unkown
|
page readonly
|
|
|
|
363A000
|
heap private
|
page read and write
|
|
|
|
2740000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page readonly
|
|
|
|
4DE0000
|
unkown
|
page readonly
|
|
|
|
27C6000
|
unkown
|
page readonly
|
|
|
|
3423000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
202C000
|
unkown
|
page readonly
|
|
|
|
228A000
|
heap default
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
41CE000
|
unkown
|
page read and write
|
|
|
|
216059A0000
|
unkown
|
page write copy
|
|
|
|
21605A71000
|
unkown
|
page read and write
|
|
|
|
68AF000
|
unkown
|
page read and write
|
|
|
|
2F3B000
|
unkown
|
page read and write
|
|
|
|
3189000
|
unkown
|
page readonly
|
|
|
|
296C000
|
unkown
|
page readonly
|
|
|
|
3340000
|
heap default
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
1ADBF7E0000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
1DFE000
|
unkown
|
page readonly
|
|
|
|
216074B0000
|
unkown
|
page readonly
|
|
|
|
5008000
|
heap private
|
page read and write
|
|
|
|
2795000
|
heap default
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3955000
|
unkown
|
page readonly
|
|
|
|
2A33000
|
unkown
|
page readonly
|
|
|
|
3170000
|
heap private
|
page read and write
|
|
|
|
7FF5B3DDF000
|
unkown
|
page readonly
|
|
|
|
6C505000
|
unkown image
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1F0C000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
216073B0000
|
unkown
|
page read and write
|
|
|
|
2B3A000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
1ADBF720000
|
heap private
|
page read and write
|
|
|
|
32FE000
|
unkown
|
page read and write
|
|
|
|
94B000
|
unkown
|
page read and write
|
|
|
|
50C000
|
unkown
|
page readonly
|
|
|
|
6C55E000
|
unkown image
|
page execute and read and write
|
|
|
|
1FD8000
|
unkown
|
page readonly
|
|
|
|
7FF52D9CD000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
30D0000
|
unkown
|
page execute and read and write
|
|
|
|
570000
|
heap default
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
C4F4AFF000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2A47000
|
unkown
|
page readonly
|
|
|
|
7FF5D9EBB000
|
unkown
|
page readonly
|
|
|
|
1ADBF902000
|
unkown
|
page read and write
|
|
|
|
22BC000
|
unkown
|
page read and write
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
7FF52E187000
|
unkown
|
page readonly
|
|
|
|
2BB2000
|
unkown
|
page readonly
|
|
|
|
1F1C000
|
unkown
|
page readonly
|
|
|
|
2DA0000
|
unkown
|
page read and write
|
|
|
|
2C28000
|
unkown
|
page readonly
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
1F30000
|
unkown
|
page readonly
|
|
|
|
216059F0000
|
unkown
|
page readonly
|
|
|
|
1F0000
|
heap private
|
page read and write
|
|
|
|
3421000
|
unkown
|
page read and write
|
|
|
|
29C6000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
5B60000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
19B000
|
unkown
|
page read and write
|
|
|
|
22BB000
|
unkown
|
page read and write
|
|
|
|
1ADBF790000
|
unkown
|
page write copy
|
|
|
|
1F05000
|
unkown
|
page readonly
|
|
|
|
21605A3F000
|
unkown
|
page read and write
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
7FF5B3D7E000
|
unkown
|
page readonly
|
|
|
|
293B000
|
heap default
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DD4000
|
unkown
|
page readonly
|
|
|
|
2B63000
|
unkown
|
page readonly
|
|
|
|
337A000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
heap private
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
501000
|
unkown
|
page execute read
|
|
|
|
7FF5B3D97000
|
unkown
|
page readonly
|
|
|
|
2979000
|
unkown
|
page readonly
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A168213000
|
unkown
|
page read and write
|
|
|
|
1ADBF813000
|
unkown
|
page read and write
|
|
|
|
C4F4CFE000
|
unkown
|
page read and write
|
|
|
|
7FF5B3C61000
|
unkown
|
page readonly
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7FF5D9F21000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A16828D000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
6D56C000
|
unkown image
|
page readonly
|
|
|
|
47EE000
|
unkown
|
page read and write
|
|
|
|
2B8F000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF5B3E72000
|
unkown
|
page readonly
|
|
|
|
2BA1000
|
unkown
|
page readonly
|
|
|
|
6C501000
|
unkown image
|
page execute read
|
|
|
|
6C500000
|
unkown image
|
page readonly
|
|
|
|
1ADBF86B000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
21605A6B000
|
unkown
|
page read and write
|
|
|
|
6D569000
|
unkown image
|
page write copy
|
|
|
|
21605A6B000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
327E000
|
unkown
|
page read and write
|
|
|
|
1F13000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
22B1000
|
unkown
|
page read and write
|
|
|
|
3368000
|
heap default
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF5B3D8B000
|
unkown
|
page readonly
|
|
|
|
1EE3000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DEE000
|
unkown
|
page readonly
|
|
|
|
7FF5D9EDF000
|
unkown
|
page readonly
|
|
|
|
7FF52E1E6000
|
unkown
|
page readonly
|
|
|
|
21605C00000
|
unkown
|
page readonly
|
|
|
|
2B4D000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
21605A6D000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1FB5000
|
unkown
|
page readonly
|
|
|
|
2FA0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B6C000
|
unkown
|
page readonly
|
|
|
|
282D000
|
unkown
|
page readonly
|
|
|
|
201D000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
6C55C000
|
unkown image
|
page read and write
|
|
|
|
203B000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7FF5D9DAB000
|
unkown
|
page readonly
|
|
|
|
28BA000
|
heap default
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
33F0000
|
heap default
|
page read and write
|
|
|
|
20E4000
|
unkown
|
page readonly
|
|
|
|
298F000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2DD0000
|
unkown
|
page readonly
|
|
|
|
7FF52E1A8000
|
unkown
|
page readonly
|
|
|
|
23D2BEE000
|
unkown
|
page read and write
|
|
|
|
1F14000
|
unkown
|
page readonly
|
|
|
|
1ADBF856000
|
unkown
|
page read and write
|
|
|
|
7FF5D9EC7000
|
unkown
|
page readonly
|
|
|
|
3290000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DB7000
|
unkown
|
page readonly
|
|
|
|
7FF5D9EB5000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF52E17B000
|
unkown
|
page readonly
|
|
|
|
7FF5B3946000
|
unkown
|
page readonly
|
|
|
|
3224000
|
heap private
|
page read and write
|
|
|
|
26D0000
|
unkown
|
page readonly
|
|
|
|
7FF5D9F94000
|
unkown
|
page readonly
|
|
|
|
21605A02000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
1FE2000
|
unkown
|
page readonly
|
|
|
|
200A000
|
unkown
|
page readonly
|
|
|
|
21605A6F000
|
unkown
|
page read and write
|
|
|
|
2A168400000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page execute and read and write
|
|
|
|
22B1000
|
unkown
|
page read and write
|
|
|
|
22C0000
|
heap private
|
page read and write
|
|
|
|
3640000
|
unkown
|
page readonly
|
|
|
|
20D5000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2270000
|
unkown
|
page read and write
|
|
|
|
29B2000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown
|
page execute and read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2033000
|
unkown
|
page readonly
|
|
|
|
2A22000
|
unkown
|
page readonly
|
|
|
|
317A000
|
heap private
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9EDC000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
50EA000
|
heap private
|
page read and write
|
|
|
|
7FF5B3DC4000
|
unkown
|
page readonly
|
|
|
|
7FF5B3CCD000
|
unkown
|
page readonly
|
|
|
|
A75F17E000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1FFC000
|
unkown
|
page readonly
|
|
|
|
23D307F000
|
unkown
|
page read and write
|
|
|
|
2D3B000
|
unkown
|
page read and write
|
|
|
|
609F000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9FA2000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2003000
|
unkown
|
page readonly
|
|
|
|
2963000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF5D970D000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A168300000
|
unkown
|
page read and write
|
|
|
|
21605A6F000
|
unkown
|
page read and write
|
|
|
|
20F2000
|
unkown
|
page readonly
|
|
|
|
2A16828A000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page execute and read and write
|
|
|
|
2A2D000
|
unkown
|
page readonly
|
|
|
|
2103000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
7FF5B3DFD000
|
unkown
|
page readonly
|
|
|
|
5ACE000
|
unkown
|
page read and write
|
|
|
|
7FF5B3BD1000
|
unkown
|
page readonly
|
|
|
|
2925000
|
unkown
|
page read and write
|
|
|
|
7FF5B3D7A000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1F35000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A16825C000
|
unkown
|
page read and write
|
|
|
|
7FF5D9E73000
|
unkown
|
page readonly
|
|
|
|
1F66000
|
unkown
|
page readonly
|
|
|
|
30D0000
|
unkown
|
page read and write
|
|
|
|
7FF52E1E1000
|
unkown
|
page readonly
|
|
|
|
7FF52E1CE000
|
unkown
|
page readonly
|
|
|
|
2C22000
|
unkown
|
page readonly
|
|
|
|
477A000
|
unkown
|
page read and write
|
|
|
|
3371000
|
heap default
|
page read and write
|
|
|
|
A75F3FF000
|
unkown
|
page read and write
|
|
|
|
2260000
|
unkown
|
page read and write
|
|
|
|
1FA000
|
heap private
|
page read and write
|
|
|
|
2860000
|
unkown
|
page readonly
|
|
|
|
465F000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown
|
page readonly
|
|
|
|
294D000
|
unkown
|
page readonly
|
|
|
|
2270000
|
unkown
|
page read and write
|
|
|
|
A75F0FE000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
6D6000
|
heap default
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
A75F4FE000
|
unkown
|
page read and write
|
|
|
|
2B93000
|
unkown
|
page readonly
|
|
|
|
21605A6F000
|
unkown
|
page read and write
|
|
|
|
84E000
|
unkown
|
page read and write
|
|
|
|
1FE3000
|
unkown
|
page readonly
|
|
|
|
D20000
|
unkown
|
page readonly
|
|
|
|
56D000
|
unkown
|
page read and write
|
|
|
|
6C501000
|
unkown image
|
page execute read
|
|
|
|
3440000
|
unkown
|
page readonly
|
|
|
|
23CC000
|
unkown
|
page read and write
|
|
|
|
6C8000
|
unkown
|
page read and write
|
|
|
|
21605A13000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
7FF52DE3A000
|
unkown
|
page readonly
|
|
|
|
1E96000
|
unkown
|
page readonly
|
|
|
|
7FF5D9F18000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
6D56C000
|
unkown image
|
page readonly
|
|
|
|
29BB000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2DC0000
|
unkown
|
page readonly
|
|
|
|
7FF5B3CEC000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2780000
|
unkown
|
page readonly
|
|
|
|
1F43000
|
unkown
|
page readonly
|
|
|
|
27A0000
|
unkown
|
page execute and read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
23D2E7E000
|
unkown
|
page read and write
|
|
|
|
68B0000
|
unkown
|
page read and write
|
|
|
|
7FF52DF2B000
|
unkown
|
page readonly
|
|
|
|
2760000
|
unkown
|
page readonly
|
|
|
|
3100000
|
unkown
|
page read and write
|
|
|
|
2BEE000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
21605860000
|
heap private
|
page read and write
|
|
|
|
2A16827D000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
5B4E000
|
unkown
|
page read and write
|
|
|
|
1FB1000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF5B3D85000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
2B5C000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF5D9B87000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
433F000
|
unkown
|
page read and write
|
|
|
|
216058D0000
|
unkown
|
page readonly
|
|
|
|
2A38000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
1EFD000
|
unkown
|
page readonly
|
|
|
|
7FF5B3D80000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
1E10000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
216058C0000
|
heap default
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2600000
|
unkown
|
page readonly
|
|
|
|
190000
|
unkown
|
page read and write
|
|
|
|
341C000
|
unkown
|
page read and write
|
|
|
|
2A168202000
|
unkown
|
page read and write
|
|
|
|
1ADBFA00000
|
unkown
|
page readonly
|
|
|
|
7FF5D9B7A000
|
unkown
|
page readonly
|
|
|
|
7FF52E1E9000
|
unkown
|
page readonly
|
|
|
|
509000
|
unkown
|
page readonly
|
|
|
|
342B000
|
unkown
|
page read and write
|
|
|
|
7FF5B3CD3000
|
unkown
|
page readonly
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
208B000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
7FF5D9EB0000
|
unkown
|
page readonly
|
|
|
|
1F3F000
|
unkown
|
page readonly
|
|
|
|
4C90000
|
unkown
|
page read and write
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
1F3D000
|
unkown
|
page readonly
|
|
|
|
6960000
|
unkown
|
page readonly
|
|
|
|
20F8000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2A168200000
|
unkown
|
page read and write
|
|
|
|
7FF5B3940000
|
unkown
|
page readonly
|
|
|
|
1ED9000
|
unkown
|
page readonly
|
|
|
|
5BC000
|
unkown
|
page read and write
|
|
|
|
4589000
|
heap private
|
page read and write
|
|
|
|
7FF5D9E52000
|
unkown
|
page readonly
|
|
|
|
4B8F000
|
unkown
|
page read and write
|
|
|
|
2A168930000
|
unkown
|
page read and write
|
|
|
|
2FEB000
|
heap private
|
page read and write
|
|
|
|
2A168266000
|
unkown
|
page read and write
|
|
|
|
30FF000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
333F000
|
unkown
|
page read and write
|
|
|
|
6AE0000
|
unkown
|
page readonly
|
|
|
|
2770000
|
unkown
|
page readonly
|
|
|
|
7FF5D9C76000
|
unkown
|
page readonly
|
|
|
|
1F37000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
unkown
|
page read and write
|
|
|
|
7FF52E262000
|
unkown
|
page readonly
|
|
|
|
6954000
|
heap private
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
3150000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2FC0000
|
unkown
|
page readonly
|
|
|
|
2B4E000
|
unkown
|
page read and write
|
|
|
|
6C500000
|
unkown image
|
page readonly
|
|
|
|
2936000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
26B8000
|
heap private
|
page read and write
|
|
|
|
2A168302000
|
unkown
|
page read and write
|
|
|
|
475B000
|
unkown
|
page read and write
|
|
|
|
7FF52E06B000
|
unkown
|
page readonly
|
|
|
|
7FF52E078000
|
unkown
|
page readonly
|
|
|
|
2929000
|
unkown
|
page readonly
|
|
|
|
190000
|
unkown
|
page execute and read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
2260000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
6C6000
|
unkown
|
page read and write
|
|
|
|
3250000
|
unkown
|
page read and write
|
|
|
|
22BD000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
6C50E000
|
unkown image
|
page readonly
|
|
|
|
1F4F000
|
unkown
|
page readonly
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
29A1000
|
unkown
|
page readonly
|
|
There are 969 hidden memdumps, click here to show them.