Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Purchase Order Price List 061021.xlsx
|
CDFV2 Encrypted
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\new[1].exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
downloaded
|
|
|
|
C:\Users\user\AppData\Roaming\EA860E7A-A87F-4A88-92EF-38F744458171\run.dat
|
ISO-8859 text, with no line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\monsuyajo\opjlpsercy.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
dropped
|
|
|
|
C:\Users\Public\vbc.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\16BF6BD7.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\19EDB42.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\317D1105.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\8840ECDA.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9675EE9F.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\ADC419F8.png
|
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B740DAFD.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C9DF6E5B.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D33DCA0.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E129F421.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EAF4E313.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EE977814.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F4AF23EC.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FD9F8BAE.png
|
PNG image data, 1268 x 540, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\eq64oqvr7vut3n4dt5cu
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\fonknpk
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\nse21F3.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\nsjBD86.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\nsjBD87.tmp\System.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\nsu1B7.tmp
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\nsu1B8.tmp\System.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$Purchase Order Price List 061021.xlsx
|
data
|
dropped
|
|
There are 17 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
|
|
|
|
C:\Users\Public\vbc.exe
|
'C:\Users\Public\vbc.exe'
|
|
|
|
C:\Users\Public\vbc.exe
|
'C:\Users\Public\vbc.exe'
|
|
|
|
C:\Users\user\AppData\Roaming\monsuyajo\opjlpsercy.exe
|
'C:\Users\user\AppData\Roaming\monsuyajo\opjlpsercy.exe'
|
|
|
|
C:\Users\user\AppData\Roaming\monsuyajo\opjlpsercy.exe
|
'C:\Users\user\AppData\Roaming\monsuyajo\opjlpsercy.exe'
|
|
|
|
C:\Users\user\AppData\Roaming\monsuyajo\opjlpsercy.exe
|
'C:\Users\user\AppData\Roaming\monsuyajo\opjlpsercy.exe'
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://198.12.127.155/new.exe
|
198.12.127.155
|
|
|
|
wekeepworking.sytes.net
|
|
||
|
wekeepworking12.sytes.net
|
|
||
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://nsis.sf.net/NSIS_Error
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://nsis.sf.net/NSIS_ErrorError
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
There are 5 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
wekeepworking.sytes.net
|
79.134.225.90
|
|
|
|
wekeepworking12.sytes.net
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
79.134.225.90
|
wekeepworking.sytes.net
|
Switzerland
|
|
|
|
198.12.127.155
|
unknown
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
+98
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EDD93
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FontCachePath
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
x&8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F2B45
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F38FB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F2B45
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
EquationEditorFilesIntl_1033
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
SavedLegacySettings
|
|
|
|
C:\Users\Public\vbc.exe
|
ppeejliapu
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
44C2000
|
unkown
|
page execute and read and write
|
|
|
|
1C80000
|
unkown
|
page read and write
|
|
|
|
217E000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown image
|
page execute and read and write
|
|
|
|
43A0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
5620000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown image
|
page execute and read and write
|
|
|
|
1DA0000
|
unkown
|
page read and write
|
|
|
|
3171000
|
unkown
|
page read and write
|
|
|
|
31FC000
|
unkown
|
page read and write
|
|
|
|
4432000
|
unkown
|
page execute and read and write
|
|
|
|
2201000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
4310000
|
unkown
|
page read and write
|
|
|
|
4430000
|
unkown
|
page read and write
|
|
|
|
43A0000
|
unkown
|
page read and write
|
|
|
|
33AC000
|
unkown
|
page read and write
|
|
|
|
2B2000
|
unkown
|
page execute and read and write
|
|
|
|
647000
|
heap default
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
29CD000
|
unkown
|
page read and write
|
|
|
|
5657000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
38C000
|
unkown
|
page read and write
|
|
|
|
498C000
|
unkown
|
page readonly
|
|
|
|
4560000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
430E000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
68B000
|
unkown
|
page read and write
|
|
|
|
6B2000
|
unkown
|
page read and write
|
|
|
|
2CC000
|
unkown
|
page execute and read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
9E30000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
550000
|
heap private
|
page read and write
|
|
|
|
4556000
|
unkown
|
page read and write
|
|
|
|
18A000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
429000
|
unkown image
|
page read and write
|
|
|
|
1D0E000
|
unkown
|
page read and write
|
|
|
|
A462000
|
unkown
|
page readonly
|
|
|
|
9D81000
|
unkown
|
page read and write
|
|
|
|
2AA1000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
55B0000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
9CAD000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
4C80000
|
unkown
|
page readonly
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2BA000
|
unkown
|
page execute and read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
1D10000
|
unkown
|
page read and write
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2B2000
|
unkown
|
page read and write
|
|
|
|
1D30000
|
heap private
|
page read and write
|
|
|
|
29CD000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
5820000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
51E000
|
heap default
|
page read and write
|
|
|
|
1D40000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
9C90000
|
unkown
|
page read and write
|
|
|
|
44C0000
|
unkown
|
page execute and read and write
|
|
|
|
2AA4000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
heap default
|
page read and write
|
|
|
|
9CAA000
|
unkown
|
page read and write
|
|
|
|
A852000
|
unkown
|
page readonly
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
35DA000
|
unkown
|
page read and write
|
|
|
|
3201000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
4987000
|
unkown
|
page readonly
|
|
|
|
45C0000
|
unkown
|
page readonly
|
|
|
|
8B000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
4734000
|
heap private
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page write copy
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
72FE1000
|
unkown image
|
page execute read
|
|
|
|
1E7D000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
26E0000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
2BA000
|
unkown
|
page execute and read and write
|
|
|
|
72FE0000
|
unkown image
|
page readonly
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
9D30000
|
unkown
|
page read and write
|
|
|
|
9D20000
|
unkown
|
page read and write
|
|
|
|
2E3000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
4730000
|
heap private
|
page read and write
|
|
|
|
696000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page readonly
|
|
|
|
696000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page write copy
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page readonly
|
|
|
|
2FD000
|
unkown
|
page read and write
|
|
|
|
307000
|
heap default
|
page read and write
|
|
|
|
640000
|
unkown
|
page readonly
|
|
|
|
2B41000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page execute and read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page read and write
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
1DE4000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
4788000
|
unkown
|
page read and write
|
|
|
|
9E90000
|
unkown
|
page read and write
|
|
|
|
1E02000
|
heap private
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
5FAF000
|
unkown
|
page read and write
|
|
|
|
9D81000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
5820000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
9C0A000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
9D87000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
1CB0000
|
unkown
|
page readonly
|
|
|
|
4C70000
|
unkown
|
page read and write
|
|
|
|
455C000
|
unkown
|
page read and write
|
|
|
|
8A000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
6AB000
|
unkown
|
page read and write
|
|
|
|
2CC000
|
unkown
|
page execute and read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
2AA1000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page read and write
|
|
|
|
4752000
|
heap private
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page execute and read and write
|
|
|
|
A685000
|
unkown
|
page readonly
|
|
|
|
569E000
|
unkown
|
page read and write
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
4568000
|
unkown
|
page read and write
|
|
|
|
4A7000
|
heap default
|
page read and write
|
|
|
|
359A000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
9C0D000
|
unkown
|
page read and write
|
|
|
|
5B01000
|
unkown
|
page read and write
|
|
|
|
9E27000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown
|
page readonly
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
2D0000
|
unkown
|
page readonly
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
1D20000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
33B000
|
unkown
|
page execute and read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page readonly
|
|
|
|
5450000
|
unkown
|
page read and write
|
|
|
|
6A3000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
8B000
|
unkown
|
page read and write
|
|
|
|
696000
|
unkown
|
page read and write
|
|
|
|
49AB000
|
unkown
|
page readonly
|
|
|
|
4C77000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
4557000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
4556000
|
unkown
|
page read and write
|
|
|
|
9C0D000
|
unkown
|
page read and write
|
|
|
|
2E27000
|
unkown
|
page readonly
|
|
|
|
284000
|
heap default
|
page read and write
|
|
|
|
1CC0000
|
unkown
|
page readonly
|
|
|
|
2AA7000
|
unkown
|
page read and write
|
|
|
|
48F5000
|
unkown
|
page read and write
|
|
|
|
324000
|
heap default
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
unkown
|
page read and write
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
4790000
|
unkown
|
page read and write
|
|
|
|
2A8000
|
heap default
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
55AE000
|
unkown
|
page read and write
|
|
|
|
6B6000
|
unkown
|
page read and write
|
|
|
|
27000
|
heap private
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
9FE0000
|
unkown
|
page readonly
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
4975000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
A5C2000
|
unkown
|
page readonly
|
|
|
|
1E72000
|
heap private
|
page read and write
|
|
|
|
374000
|
unkown
|
page read and write
|
|
|
|
9D70000
|
unkown
|
page read and write
|
|
|
|
2C0000
|
unkown
|
page readonly
|
|
|
|
9E21000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
1E80000
|
heap private
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
2171000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
5460000
|
unkown
|
page read and write
|
|
|
|
29CA000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
2386000
|
unkown
|
page read and write
|
|
|
|
292B000
|
heap private
|
page read and write
|
|
|
|
6E0000
|
unkown
|
page readonly
|
|
|
|
679000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
34D000
|
heap default
|
page read and write
|
|
|
|
6A2000
|
unkown
|
page read and write
|
|
|
|
4827000
|
heap private
|
page execute and read and write
|
|
|
|
4555000
|
unkown
|
page read and write
|
|
|
|
2AA1000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2F6000
|
heap default
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
3639000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page readonly
|
|
|
|
292A000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2FB0000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
373000
|
unkown
|
page read and write
|
|
|
|
2CA000
|
unkown
|
page execute and read and write
|
|
|
|
228E000
|
unkown
|
page read and write
|
|
|
|
1E20000
|
unkown
|
page readonly
|
|
|
|
2B5000
|
heap default
|
page read and write
|
|
|
|
2AA4000
|
unkown
|
page read and write
|
|
|
|
4556000
|
unkown
|
page read and write
|
|
|
|
5070000
|
unkown
|
page read and write
|
|
|
|
317000
|
unkown
|
page execute and read and write
|
|
|
|
28F0000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
187000
|
unkown
|
page read and write | page guard
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
9BD0000
|
unkown
|
page read and write
|
|
|
|
9C80000
|
unkown
|
page read and write
|
|
|
|
50CE000
|
unkown
|
page read and write
|
|
|
|
6B3000
|
unkown
|
page read and write
|
|
|
|
477C000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
9D84000
|
unkown
|
page read and write
|
|
|
|
225E000
|
unkown
|
page read and write
|
|
|
|
5460000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
9FC0000
|
unkown
|
page readonly
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
1E54000
|
heap private
|
page read and write
|
|
|
|
2E9000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
2AA7000
|
unkown
|
page read and write
|
|
|
|
9D90000
|
unkown
|
page read and write
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
5656000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page readonly
|
|
|
|
69E000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
unkown
|
page read and write
|
|
|
|
9C80000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
2AB0000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
24F6000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
4530000
|
unkown
|
page write copy
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
1E90000
|
heap private
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
70D05000
|
unkown image
|
page readonly
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown
|
page readonly
|
|
|
|
32EC000
|
unkown
|
page read and write
|
|
|
|
4556000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
9E30000
|
unkown
|
page read and write
|
|
|
|
324A000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
A6C9000
|
unkown
|
page readonly
|
|
|
|
654000
|
heap default
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
2D3000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
360000
|
heap default
|
page read and write
|
|
|
|
49E0000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
1D20000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
4780000
|
unkown
|
page read and write
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
2D8000
|
unkown
|
page read and write
|
|
|
|
48F0000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
5A0E000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
6AB000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
2B44000
|
unkown
|
page read and write
|
|
|
|
9D81000
|
unkown
|
page read and write
|
|
|
|
8B000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
1C37000
|
unkown
|
page readonly
|
|
|
|
187000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
2D9000
|
unkown
|
page read and write
|
|
|
|
57E0000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
534F000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
9C80000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
2924000
|
heap private
|
page read and write
|
|
|
|
55D0000
|
unkown
|
page read and write
|
|
|
|
68D000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
5450000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
9E21000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
55E0000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
189000
|
unkown
|
page read and write
|
|
|
|
1E50000
|
heap private
|
page read and write
|
|
|
|
A5B6000
|
unkown
|
page readonly
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
230000
|
heap default
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
4776000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
4554000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
2AA4000
|
unkown
|
page read and write
|
|
|
|
6B3000
|
unkown
|
page read and write
|
|
|
|
2428000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page readonly
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page readonly
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
4776000
|
unkown
|
page read and write
|
|
|
|
4556000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
58AD000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
2C2000
|
unkown
|
page execute and read and write
|
|
|
|
9E10000
|
unkown
|
page read and write
|
|
|
|
5B01000
|
unkown
|
page read and write
|
|
|
|
2B41000
|
unkown
|
page read and write
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
292D000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
2496000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page read and write
|
|
|
|
4780000
|
unkown
|
page read and write
|
|
|
|
9D20000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
677000
|
unkown
|
page read and write
|
|
|
|
36D000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1F30000
|
unkown
|
page readonly
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
A562000
|
unkown
|
page readonly
|
|
|
|
9C0D000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
2B50000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
9D30000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
326C000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
heap private
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
5600000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
6AB000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page read and write
|
|
|
|
5648000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
29CA000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
3639000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
22FA000
|
unkown
|
page read and write
|
|
|
|
48ED000
|
unkown
|
page read and write
|
|
|
|
9DF0000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
9D84000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
9BD0000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
1DE0000
|
heap private
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
47A0000
|
unkown
|
page read and write
|
|
|
|
32D000
|
heap default
|
page read and write
|
|
|
|
9D70000
|
unkown
|
page read and write
|
|
|
|
24A7000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
51CF000
|
unkown
|
page read and write
|
|
|
|
A564000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
heap default
|
page read and write
|
|
|
|
A5E6000
|
unkown
|
page readonly
|
|
|
|
6AA000
|
unkown
|
page read and write
|
|
|
|
20000
|
heap private
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
4776000
|
unkown
|
page read and write
|
|
|
|
6B2000
|
unkown
|
page read and write
|
|
|
|
429000
|
unkown image
|
page read and write
|
|
|
|
4B0000
|
heap private
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
A522000
|
unkown
|
page readonly
|
|
|
|
57B0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
72FE3000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page readonly
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
47AE000
|
unkown
|
page read and write
|
|
|
|
2928000
|
heap private
|
page read and write
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
1EC0000
|
unkown
|
page readonly
|
|
|
|
1C20000
|
unkown
|
page readonly
|
|
|
|
4DE000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
9D87000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
1D20000
|
unkown
|
page read and write
|
|
|
|
4560000
|
unkown
|
page read and write
|
|
|
|
4900000
|
unkown
|
page execute and read and write
|
|
|
|
2DB000
|
unkown
|
page execute and read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
439F000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
292D000
|
unkown
|
page read and write
|
|
|
|
9C90000
|
unkown
|
page read and write
|
|
|
|
292000
|
unkown
|
page execute and read and write
|
|
|
|
282000
|
unkown
|
page execute and read and write
|
|
|
|
4208000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown
|
page readonly
|
|
|
|
9C0A000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
31A000
|
unkown
|
page execute and read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
4970000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
34D000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
369000
|
heap default
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
556000
|
heap private
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
47A0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page readonly
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
9CAA000
|
unkown
|
page read and write
|
|
|
|
5800000
|
unkown
|
page read and write
|
|
|
|
504000
|
heap default
|
page read and write
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
unkown
|
page read and write
|
|
|
|
29A0000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
9D70000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
heap default
|
page read and write
|
|
|
|
260000
|
heap default
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
A635000
|
unkown
|
page readonly
|
|
|
|
520000
|
unkown
|
page execute and read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
9E27000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
unkown
|
page read and write
|
|
|
|
422000
|
unkown image
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
55C0000
|
unkown
|
page read and write
|
|
|
|
9D87000
|
unkown
|
page read and write
|
|
|
|
322000
|
unkown
|
page read and write
|
|
|
|
4B5F000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
A669000
|
unkown
|
page readonly
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
29B0000
|
unkown
|
page read and write
|
|
|
|
240000
|
unkown
|
page readonly
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page readonly
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
4A1E000
|
unkown
|
page read and write
|
|
|
|
9E27000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
2B6000
|
unkown
|
page execute and read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
4775000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
664000
|
heap default
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
372000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
4777000
|
unkown
|
page read and write
|
|
|
|
9E10000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
72FE0000
|
unkown image
|
page readonly
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown
|
page read and write
|
|
|
|
A524000
|
unkown
|
page readonly
|
|
|
|
4557000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
unkown
|
page read and write
|
|
|
|
70D03000
|
unkown image
|
page readonly
|
|
|
|
2B44000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
A692000
|
unkown
|
page readonly
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
1E3F000
|
unkown
|
page read and write
|
|
|
|
2B47000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
9D84000
|
unkown
|
page read and write
|
|
|
|
4790000
|
unkown
|
page read and write
|
|
|
|
640000
|
heap default
|
page read and write
|
|
|
|
4900000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
4977000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
242A000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
2D2000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
2BD0000
|
unkown
|
page readonly
|
|
|
|
59C000
|
unkown
|
page read and write
|
|
|
|
A5F2000
|
unkown
|
page readonly
|
|
|
|
24DE000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
9C0D000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
1D20000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
579F000
|
unkown
|
page read and write
|
|
|
|
9E24000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page readonly
|
|
|
|
1D30000
|
heap private
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
18A000
|
unkown
|
page read and write
|
|
|
|
60ED000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
1CA0000
|
heap private
|
page read and write
|
|
|
|
A5D5000
|
unkown
|
page readonly
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
5450000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
A616000
|
unkown
|
page readonly
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
2C40000
|
unkown
|
page readonly
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
4430000
|
unkown
|
page execute and read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page readonly
|
|
|
|
5BF0000
|
unkown
|
page read and write
|
|
|
|
5B10000
|
unkown
|
page read and write
|
|
|
|
4C4000
|
heap default
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
2D7000
|
unkown
|
page read and write
|
|
|
|
9B30000
|
unkown
|
page read and write
|
|
|
|
55F0000
|
unkown
|
page execute and read and write
|
|
|
|
1EA2000
|
heap private
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
375000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
9C90000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
5CF0000
|
unkown
|
page write copy
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
390000
|
unkown
|
page readonly
|
|
|
|
292A000
|
unkown
|
page read and write
|
|
|
|
292A000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page readonly
|
|
|
|
544F000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
4775000
|
unkown
|
page read and write
|
|
|
|
4C5F000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
2D0000
|
heap private
|
page execute and read and write
|
|
|
|
2290000
|
unkown
|
page readonly
|
|
|
|
29A0000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
337000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
4980000
|
unkown
|
page readonly
|
|
|
|
422000
|
unkown image
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
429000
|
unkown image
|
page read and write
|
|
|
|
360000
|
unkown
|
page readonly
|
|
|
|
550000
|
heap private
|
page read and write
|
|
|
|
22C5000
|
unkown
|
page read and write
|
|
|
|
2B47000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
4774000
|
unkown
|
page read and write
|
|
|
|
200000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
4844000
|
heap private
|
page execute and read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
55D0000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
heap private
|
page execute and read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
277F000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
4776000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
4900000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
44C0000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
9DF0000
|
unkown
|
page read and write
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
9E90000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
21F0000
|
unkown
|
page readonly
|
|
|
|
217C000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
5850000
|
heap private
|
page read and write
|
|
|
|
A622000
|
unkown
|
page readonly
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
338C000
|
unkown
|
page read and write
|
|
|
|
520C000
|
unkown
|
page read and write
|
|
|
|
698000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
4C70000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
4B6000
|
heap private
|
page read and write
|
|
|
|
9D70000
|
unkown
|
page read and write
|
|
|
|
9C0A000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page execute and read and write
|
|
|
|
2B50000
|
unkown
|
page read and write
|
|
|
|
9DF0000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
61D000
|
heap default
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
3F5000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page read and write
|
|
|
|
9CAA000
|
unkown
|
page read and write
|
|
|
|
4DE000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
4540000
|
unkown
|
page execute and read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
186000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
267000
|
heap default
|
page read and write
|
|
|
|
4452000
|
unkown
|
page execute and read and write
|
|
|
|
4570000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
2AA7000
|
unkown
|
page read and write
|
|
|
|
9D20000
|
unkown
|
page read and write
|
|
|
|
9D87000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
A890000
|
unkown
|
page readonly
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
220000
|
heap default
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
67D000
|
unkown
|
page read and write
|
|
|
|
694000
|
heap default
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
300000
|
heap default
|
page read and write
|
|
|
|
34D000
|
unkown
|
page read and write
|
|
|
|
33E000
|
unkown
|
page read and write
|
|
|
|
1EEF000
|
unkown
|
page read and write
|
|
|
|
5655000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
4F2000
|
heap default
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
A605000
|
unkown
|
page readonly
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
313000
|
unkown
|
page read and write
|
|
|
|
2C2000
|
unkown
|
page execute and read and write
|
|
|
|
6B6000
|
unkown
|
page read and write
|
|
|
|
72FE0000
|
unkown image
|
page readonly
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
4910000
|
unkown
|
page readonly
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
2DE000
|
unkown
|
page read and write
|
|
|
|
230000
|
unkown
|
page readonly
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
4820000
|
heap private
|
page execute and read and write
|
|
|
|
9D30000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
4970000
|
unkown
|
page readonly
|
|
|
|
3020000
|
unkown
|
page read and write
|
|
|
|
9DF0000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
28A000
|
unkown
|
page execute and read and write
|
|
|
|
4555000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
6AB000
|
unkown
|
page read and write
|
|
|
|
6A3000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
A649000
|
unkown
|
page readonly
|
|
|
|
9B30000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
657000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
9D81000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page read and write
|
|
|
|
A6B5000
|
unkown
|
page readonly
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
244C000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
4584000
|
heap private
|
page read and write
|
|
|
|
69E000
|
unkown
|
page read and write
|
|
|
|
5650000
|
unkown
|
page read and write
|
|
|
|
4777000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
5890000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
6AB000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
2DB7000
|
unkown
|
page readonly
|
|
|
|
3F0000
|
unkown
|
page readonly
|
|
|
|
32AC000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
4B1F000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
9E10000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
530C000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
2B41000
|
unkown
|
page read and write
|
|
|
|
4520000
|
unkown
|
page read and write
|
|
|
|
2B50000
|
unkown
|
page read and write
|
|
|
|
515000
|
heap default
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
9C80000
|
unkown
|
page read and write
|
|
|
|
2B47000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
292A000
|
unkown
|
page read and write
|
|
|
|
47B7000
|
heap private
|
page execute and read and write
|
|
|
|
9B30000
|
unkown
|
page read and write
|
|
|
|
4580000
|
heap private
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page read and write
|
|
|
|
57F0000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
A6E5000
|
unkown
|
page readonly
|
|
|
|
5990000
|
heap private
|
page read and write
|
|
|
|
9E21000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
A699000
|
unkown
|
page readonly
|
|
|
|
9C90000
|
unkown
|
page read and write
|
|
|
|
65C000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
3223000
|
unkown
|
page read and write
|
|
|
|
1D20000
|
unkown
|
page readonly
|
|
|
|
72FE5000
|
unkown image
|
page readonly
|
|
|
|
A64D000
|
unkown
|
page readonly
|
|
|
|
4510000
|
unkown
|
page readonly
|
|
|
|
2A50000
|
unkown
|
page read and write
|
|
|
|
70D01000
|
unkown image
|
page execute read
|
|
|
|
32CC000
|
unkown
|
page read and write
|
|
|
|
9890000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
9B30000
|
unkown
|
page read and write
|
|
|
|
2D5000
|
unkown
|
page read and write
|
|
|
|
A544000
|
unkown
|
page readonly
|
|
|
|
5FEC000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
48F5000
|
unkown
|
page read and write
|
|
|
|
5820000
|
unkown
|
page readonly
|
|
|
|
5AB0000
|
heap private
|
page read and write
|
|
|
|
68D000
|
heap default
|
page read and write
|
|
|
|
2880000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
292D000
|
unkown
|
page read and write
|
|
|
|
5C0D000
|
unkown
|
page read and write
|
|
|
|
9D90000
|
unkown
|
page read and write
|
|
|
|
2AA1000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2C0000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page write copy
|
|
|
|
9CAD000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
557000
|
heap private
|
page read and write
|
|
|
|
4776000
|
unkown
|
page read and write
|
|
|
|
3599000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
45A2000
|
heap private
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
332C000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
2F6000
|
heap private
|
page read and write
|
|
|
|
2DB000
|
unkown
|
page read and write
|
|
|
|
322000
|
unkown
|
page execute and read and write
|
|
|
|
4570000
|
unkown
|
page read and write
|
|
|
|
6AB000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page readonly
|
|
|
|
186000
|
unkown
|
page read and write | page guard
|
|
|
|
1E84000
|
heap private
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
A6C2000
|
unkown
|
page readonly
|
|
|
|
274F000
|
unkown
|
page read and write
|
|
|
|
6AB000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
337000
|
unkown
|
page execute and read and write
|
|
|
|
34DA000
|
unkown
|
page read and write
|
|
|
|
2BB0000
|
unkown
|
page read and write
|
|
|
|
6A2000
|
unkown
|
page read and write
|
|
|
|
9E24000
|
unkown
|
page read and write
|
|
|
|
5820000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page readonly
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
54AE000
|
unkown
|
page read and write
|
|
|
|
5B01000
|
unkown
|
page read and write
|
|
|
|
7EF50000
|
unkown
|
page execute and read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
9D90000
|
unkown
|
page read and write
|
|
|
|
70D00000
|
unkown image
|
page readonly
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
A592000
|
unkown
|
page readonly
|
|
|
|
9C0A000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
60F0000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
5AF0000
|
unkown
|
page read and write
|
|
|
|
48F0000
|
unkown
|
page read and write
|
|
|
|
5640000
|
unkown
|
page read and write
|
|
|
|
334C000
|
unkown
|
page read and write
|
|
|
|
70D00000
|
unkown image
|
page readonly
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
A646000
|
unkown
|
page readonly
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
6B2000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
292D000
|
unkown
|
page read and write
|
|
|
|
3639000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
5458000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown
|
page readonly
|
|
|
|
1D20000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
9E24000
|
unkown
|
page read and write
|
|
|
|
7EF50000
|
unkown
|
page execute and read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
heap private
|
page read and write
|
|
|
|
5D7000
|
heap default
|
page read and write
|
|
|
|
2DF000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
18C000
|
unkown
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
9E90000
|
unkown
|
page read and write
|
|
|
|
2D7000
|
unkown
|
page execute and read and write
|
|
|
|
1D0000
|
heap default
|
page read and write
|
|
|
|
340000
|
heap private
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2B30000
|
unkown
|
page read and write
|
|
|
|
3519000
|
unkown
|
page read and write
|
|
|
|
44E2000
|
unkown
|
page execute and read and write
|
|
|
|
49D0000
|
unkown
|
page read and write
|
|
|
|
2B10000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
260000
|
heap private
|
page execute and read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
9E30000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page read and write
|
|
|
|
9BD0000
|
unkown
|
page read and write
|
|
|
|
2C0000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
8B000
|
unkown
|
page read and write
|
|
|
|
1E90000
|
unkown
|
page readonly
|
|
|
|
2780000
|
unkown
|
page read and write
|
|
|
|
5610000
|
unkown
|
page read and write
|
|
|
|
24DC000
|
unkown
|
page read and write
|
|
|
|
29CD000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
A5A5000
|
unkown
|
page readonly
|
|
|
|
A8D0000
|
unkown
|
page readonly
|
|
|
|
1E80000
|
unkown
|
page execute and read and write
|
|
|
|
44C0000
|
unkown
|
page readonly
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
4776000
|
unkown
|
page read and write
|
|
|
|
4776000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
1EA0000
|
unkown
|
page readonly
|
|
|
|
2AA4000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page execute and read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page execute and read and write
|
|
|
|
67B000
|
heap default
|
page read and write
|
|
|
|
472E000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
2B44000
|
unkown
|
page read and write
|
|
|
|
A662000
|
unkown
|
page readonly
|
|
|
|
3559000
|
unkown
|
page read and write
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
5658000
|
unkown
|
page read and write
|
|
|
|
1EF0000
|
heap private
|
page execute and read and write
|
|
|
|
35D9000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
A542000
|
unkown
|
page readonly
|
|
|
|
2260000
|
unkown
|
page readonly
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
34D9000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page read and write
|
|
|
|
34F9000
|
unkown
|
page read and write
|
|
|
|
69F000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
2850000
|
unkown
|
page read and write
|
|
|
|
A362000
|
unkown
|
page readonly
|
|
|
|
65B000
|
unkown
|
page read and write
|
|
|
|
3619000
|
unkown
|
page read and write
|
|
|
|
A368000
|
unkown
|
page readonly
|
|
|
|
4560000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown image
|
page readonly
|
|
|
|
4C0000
|
unkown
|
page readonly
|
|
|
|
69D000
|
unkown
|
page read and write
|
|
|
|
47B0000
|
heap private
|
page execute and read and write
|
|
|
|
2B9000
|
heap default
|
page read and write
|
|
|
|
3F1000
|
unkown
|
page read and write
|
|
|
|
5AF1000
|
unkown
|
page read and write
|
|
|
|
35B9000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown image
|
page readonly
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
38E000
|
unkown
|
page read and write
|
|
|
|
6A7000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
heap private
|
page read and write
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
2920000
|
heap private
|
page read and write
|
|
|
|
4780000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
67E000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
422000
|
unkown image
|
page read and write
|
|
|
|
630000
|
unkown
|
page readonly
|
|
|
|
1C0000
|
unkown
|
page readonly
|
|
|
|
9CAD000
|
unkown
|
page read and write
|
|
|
|
A8B0000
|
unkown
|
page readonly
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
409000
|
unkown image
|
page read and write
|
|
|
|
47D4000
|
heap private
|
page execute and read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
4970000
|
unkown
|
page read and write
|
|
|
|
9D84000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
3539000
|
unkown
|
page read and write
|
|
|
|
29CA000
|
unkown
|
page read and write
|
|
|
|
6B6000
|
unkown
|
page read and write
|
|
|
|
4556000
|
unkown
|
page read and write
|
|
|
|
4770000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
51E000
|
unkown
|
page read and write
|
|
|
|
5B01000
|
unkown
|
page read and write
|
|
|
|
9D90000
|
unkown
|
page read and write
|
|
|
|
3579000
|
unkown
|
page read and write
|
|
|
|
69B000
|
unkown
|
page read and write
|
|
|
|
5F4000
|
heap default
|
page read and write
|
|
|
|
5EAD000
|
unkown
|
page read and write
|
|
|
|
35F9000
|
unkown
|
page read and write
|
|
|
|
330C000
|
unkown
|
page read and write
|
|
|
|
44C0000
|
unkown
|
page read and write
|
|
|
|
3639000
|
unkown
|
page read and write
|
|
|
|
60F1000
|
unkown
|
page read and write
|
|
|
|
4550000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
5A4C000
|
unkown
|
page read and write
|
|
|
|
28F0000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
69A000
|
unkown
|
page read and write
|
|
|
|
1D25000
|
unkown
|
page read and write
|
|
|
|
4556000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown
|
page readonly
|
|
|
|
2AA7000
|
unkown
|
page read and write
|
|
There are 1259 hidden memdumps, click here to show them.