Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
AGG POWER RFQ.xlsx
|
CDFV2 Encrypted
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\vbc[1].exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$AGG POWER RFQ.xlsx
|
data
|
dropped
|
|
|
|
C:\Users\Public\vbc.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\1F51718A.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\20D9C003.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2DDAF228.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\36823C09.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 550x310,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\37086ED0.png
|
PNG image data, 399 x 605, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3CDE61C7.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, baseline, precision 8, 550x310,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3EAF411C.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\49FD4D5E.png
|
PNG image data, 1686 x 725, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4AC0AF44.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5E93766D.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\96B46D4B.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\9725E68F.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AF41FE75.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B2989F2.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F7AB3B46.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\F9E48091.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\mb0hhwca.zd2\Chrome\Default\Cookies
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\mb0hhwca.zd2\Firefox\Profiles\7xwghk55.default\cookies.sqlite
|
SQLite 3.x database, user version 7, last written using SQLite version 3017000
|
dropped
|
|
There are 13 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
|
|
|
|
C:\Users\Public\vbc.exe
|
'C:\Users\Public\vbc.exe'
|
|
|
|
C:\Users\Public\vbc.exe
|
C:\Users\Public\vbc.exe
|
|
|
|
C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe
|
'C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe'
|
|
|
|
C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe
|
C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe
|
|
|
|
C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe
|
'C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe'
|
|
|
|
C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe
|
C:\Users\user\AppData\Roaming\tnvLnx\tnvLnx.exe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://192.3.141.146/win/vbc.exe
|
192.3.141.146
|
|
|
|
http://127.0.0.1:HTTP/1.1
|
unknown
|
|
|
|
http://DynDns.comDynDNS
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
|
unknown
|
|
|
|
http://DTHLcG.com
|
unknown
|
|
|
|
https://api.ipify.org%GETMozilla/5.0
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://gN3yhO7qZ2vk1Dl2x8.com
|
unknown
|
|
|
|
https://github.com/georgw777/MediaManager
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
|
|
|
https://api.ipify.org%
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
|
unknown
|
|
|
|
https://stackpath.bootstrapcdn.com/bootstrap/4.5.0/css/bootstrap.min.css
|
unknown
|
|
|
|
https://github.com/georgw777/
|
unknown
|
|
|
|
https://github.com/georgw777/MediaManager;https://github.com/georgw777/
|
unknown
|
|
|
|
http://mail.alkhaleejautoparts.com
|
unknown
|
|
There are 7 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
mail.alkhaleejautoparts.com
|
148.66.138.106
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
148.66.138.106
|
mail.alkhaleejautoparts.com
|
Singapore
|
|
|
|
192.3.141.146
|
unknown
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
/?6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EEB2A
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FontCachePath
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DefaultSheetR2L
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
UseSystemSeparators
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ThousandsSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
DecimalSeparator
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
x,6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F3ADE
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F4A78
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_3082
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1036
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
SpellingAndGrammarFiles_1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F3ADE
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
EquationEditorFilesIntl_1033
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
SavedLegacySettings
|
|
|
|
C:\Users\Public\vbc.exe
|
tnvLnx
|
|
There are 52 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2346000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
2821000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
3409000
|
unkown
|
page read and write
|
|
|
|
2351000
|
unkown
|
page read and write
|
|
|
|
27E2000
|
unkown
|
page read and write
|
|
|
|
3409000
|
unkown
|
page read and write
|
|
|
|
2426000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
3329000
|
unkown
|
page read and write
|
|
|
|
2161000
|
unkown
|
page read and write
|
|
|
|
2426000
|
unkown
|
page read and write
|
|
|
|
2741000
|
unkown
|
page read and write
|
|
|
|
2010000
|
unkown
|
page read and write
|
|
|
|
505E000
|
unkown
|
page read and write
|
|
|
|
4400000
|
unkown
|
page readonly
|
|
|
|
2000000
|
unkown
|
page read and write
|
|
|
|
370000
|
unkown
|
page execute and read and write
|
|
|
|
1EA000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
B3000
|
unkown
|
page execute and read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
53E0000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
530000
|
heap private
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
4CA000
|
heap default
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
3F0000
|
unkown
|
page readonly
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
79D000
|
unkown
|
page read and write
|
|
|
|
BD000
|
unkown
|
page execute and read and write
|
|
|
|
28BB000
|
unkown
|
page read and write
|
|
|
|
2401000
|
unkown
|
page read and write
|
|
|
|
23D4000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
570000
|
heap default
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
80000
|
heap default
|
page read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
231F000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
520000
|
unkown
|
page execute and read and write
|
|
|
|
133000
|
unkown
|
page execute and read and write
|
|
|
|
782000
|
heap private
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
heap private
|
page execute and read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
5150000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
23DE000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
6D4000
|
heap private
|
page read and write
|
|
|
|
4B0E000
|
unkown
|
page read and write
|
|
|
|
516D000
|
unkown
|
page read and write
|
|
|
|
561000
|
heap default
|
page read and write
|
|
|
|
2190000
|
unkown
|
page read and write
|
|
|
|
867000
|
heap default
|
page read and write
|
|
|
|
5A4D000
|
unkown
|
page read and write
|
|
|
|
4B20000
|
unkown
|
page readonly
|
|
|
|
287C000
|
unkown
|
page read and write
|
|
|
|
B9C000
|
unkown image
|
page readonly
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown
|
page readonly
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
20B0000
|
unkown
|
page read and write
|
|
|
|
68CF000
|
unkown
|
page read and write
|
|
|
|
4E30000
|
heap private
|
page execute and read and write
|
|
|
|
780000
|
unkown
|
page readonly
|
|
|
|
2886000
|
unkown
|
page read and write
|
|
|
|
186000
|
unkown
|
page execute and read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
4A4000
|
heap default
|
page read and write
|
|
|
|
510000
|
unkown
|
page readonly
|
|
|
|
21F0000
|
heap private
|
page read and write
|
|
|
|
21BD000
|
unkown
|
page read and write
|
|
|
|
598000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
3401000
|
unkown
|
page read and write
|
|
|
|
C6000
|
unkown
|
page read and write
|
|
|
|
C0000
|
unkown
|
page read and write
|
|
|
|
58E000
|
heap default
|
page read and write
|
|
|
|
565000
|
unkown
|
page read and write
|
|
|
|
2260000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
553000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
468E000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
5D85000
|
unkown
|
page read and write
|
|
|
|
539000
|
heap default
|
page read and write
|
|
|
|
AC0000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
465F000
|
unkown
|
page read and write
|
|
|
|
234E000
|
unkown
|
page read and write | page guard
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
4C40000
|
unkown
|
page read and write
|
|
|
|
542000
|
unkown
|
page read and write
|
|
|
|
4FE000
|
unkown
|
page read and write
|
|
|
|
2401000
|
unkown
|
page read and write
|
|
|
|
5E8000
|
unkown
|
page read and write
|
|
|
|
51FE000
|
unkown
|
page read and write
|
|
|
|
440000
|
unkown
|
page execute and read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
2419000
|
unkown
|
page read and write
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
74E000
|
unkown
|
page read and write
|
|
|
|
53EF000
|
unkown
|
page read and write
|
|
|
|
590D000
|
unkown
|
page read and write
|
|
|
|
D0000
|
heap private
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
5D4E000
|
unkown
|
page read and write
|
|
|
|
56E000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
4400000
|
unkown
|
page read and write
|
|
|
|
450000
|
heap default
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
2416000
|
unkown
|
page read and write
|
|
|
|
D70000
|
unkown
|
page readonly
|
|
|
|
AAF000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
2C0000
|
unkown
|
page read and write
|
|
|
|
4B0000
|
unkown
|
page read and write
|
|
|
|
60C0000
|
unkown
|
page readonly
|
|
|
|
182000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
504000
|
heap default
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
7D4000
|
unkown
|
page read and write
|
|
|
|
197000
|
unkown
|
page execute and read and write
|
|
|
|
464E000
|
unkown
|
page read and write
|
|
|
|
4CC000
|
heap default
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
CD000
|
unkown
|
page execute and read and write
|
|
|
|
2150000
|
unkown
|
page read and write
|
|
|
|
241C000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
4CB2000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
480000
|
heap default
|
page read and write
|
|
|
|
B32F000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
497000
|
heap default
|
page read and write
|
|
|
|
BF0000
|
unkown
|
page readonly
|
|
|
|
180000
|
unkown
|
page readonly
|
|
|
|
468E000
|
unkown
|
page read and write
|
|
|
|
AF5E000
|
unkown
|
page read and write | page guard
|
|
|
|
4CC0000
|
heap private
|
page execute and read and write
|
|
|
|
56CE000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
46D0000
|
unkown
|
page readonly
|
|
|
|
4AC000
|
unkown
|
page read and write
|
|
|
|
482E000
|
unkown
|
page read and write
|
|
|
|
791000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
2AC000
|
unkown
|
page read and write
|
|
|
|
14B000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
2000000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
54F000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
3321000
|
unkown
|
page read and write
|
|
|
|
4B4E000
|
unkown
|
page read and write
|
|
|
|
542000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
19B000
|
unkown
|
page execute and read and write
|
|
|
|
590000
|
unkown
|
page execute and read and write
|
|
|
|
779000
|
heap private
|
page read and write
|
|
|
|
8C0000
|
heap private
|
page execute and read and write
|
|
|
|
4660000
|
unkown
|
page readonly
|
|
|
|
46E0000
|
heap private
|
page read and write
|
|
|
|
AD2000
|
unkown image
|
page execute read
|
|
|
|
A7A000
|
unkown
|
page read and write
|
|
|
|
58DE000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
611E000
|
unkown
|
page read and write | page guard
|
|
|
|
730000
|
unkown
|
page readonly
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
57BE000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
546000
|
unkown
|
page read and write
|
|
|
|
93A000
|
heap default
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
4B6D000
|
unkown
|
page read and write
|
|
|
|
6F2000
|
heap private
|
page read and write
|
|
|
|
76E000
|
unkown
|
page read and write
|
|
|
|
B3000
|
unkown
|
page execute and read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
829000
|
heap default
|
page read and write
|
|
|
|
A0000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
11A000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
21E6000
|
unkown
|
page read and write
|
|
|
|
60E000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2020000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
604000
|
heap default
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
585000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
860000
|
heap private
|
page read and write
|
|
|
|
58F000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown
|
page read and write
|
|
|
|
A952000
|
unkown
|
page read and write
|
|
|
|
AAE000
|
unkown
|
page read and write | page guard
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
710000
|
heap private
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
1FD0000
|
unkown
|
page readonly
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
167000
|
unkown
|
page execute and read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
20B0000
|
heap private
|
page read and write
|
|
|
|
410000
|
unkown
|
page readonly
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
569E000
|
unkown
|
page read and write | page guard
|
|
|
|
500E000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
798000
|
unkown
|
page read and write
|
|
|
|
BD000
|
unkown
|
page execute and read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
78E000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown
|
page read and write
|
|
|
|
164000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown
|
page read and write
|
|
|
|
16D000
|
unkown
|
page execute and read and write
|
|
|
|
6A10000
|
heap private
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
1C7000
|
unkown
|
page execute and read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
C3000
|
unkown
|
page read and write
|
|
|
|
51A0000
|
heap private
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
5250000
|
unkown
|
page read and write
|
|
|
|
4580000
|
unkown
|
page readonly
|
|
|
|
542000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
2419000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page readonly
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
2010000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
4350000
|
unkown
|
page readonly
|
|
|
|
5B0000
|
unkown
|
page readonly
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
heap default
|
page read and write
|
|
|
|
530E000
|
unkown
|
page read and write
|
|
|
|
20A000
|
unkown
|
page execute and read and write
|
|
|
|
4C30000
|
unkown
|
page readonly
|
|
|
|
4E70000
|
unkown
|
page readonly
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
630000
|
unkown
|
page read and write
|
|
|
|
2700000
|
heap private
|
page execute and read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
4DC000
|
heap default
|
page read and write
|
|
|
|
B9C000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown
|
page readonly
|
|
|
|
37B000
|
unkown
|
page read and write
|
|
|
|
49AF000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
5E7000
|
heap default
|
page read and write
|
|
|
|
2795000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
452E000
|
unkown
|
page read and write
|
|
|
|
2894000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
633E000
|
unkown
|
page read and write
|
|
|
|
23FF000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page readonly
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
86D000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
5C1000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
570000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
4850000
|
unkown
|
page readonly
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
1DA000
|
unkown
|
page execute and read and write
|
|
|
|
16D000
|
unkown
|
page execute and read and write
|
|
|
|
897000
|
heap private
|
page read and write
|
|
|
|
5D5F000
|
unkown
|
page read and write
|
|
|
|
41ED000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
630000
|
unkown
|
page read and write
|
|
|
|
A0000
|
unkown
|
page read and write
|
|
|
|
3401000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
unkown image
|
page readonly
|
|
|
|
443F000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
DCE000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page read and write
|
|
|
|
2082000
|
heap private
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
536F000
|
unkown
|
page read and write
|
|
|
|
3C8000
|
unkown
|
page read and write
|
|
|
|
21DE000
|
unkown
|
page read and write
|
|
|
|
2010000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
3169000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
134000
|
unkown
|
page read and write
|
|
|
|
54A000
|
heap default
|
page read and write
|
|
|
|
1BA000
|
unkown
|
page read and write
|
|
|
|
4C10000
|
heap private
|
page execute and read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
2060000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
4740000
|
unkown
|
page readonly
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
A860000
|
unkown
|
page read and write
|
|
|
|
CD000
|
unkown
|
page execute and read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
478000
|
unkown
|
page read and write
|
|
|
|
52CE000
|
unkown
|
page read and write
|
|
|
|
337000
|
unkown
|
page execute and read and write
|
|
|
|
640000
|
unkown
|
page execute and read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
75E000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
2150000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
5685000
|
heap private
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
207000
|
unkown
|
page execute and read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3741000
|
unkown
|
page read and write
|
|
|
|
B38E000
|
unkown
|
page read and write
|
|
|
|
B12F000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
5A50000
|
unkown
|
page read and write
|
|
|
|
610000
|
heap default
|
page read and write
|
|
|
|
528E000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown
|
page readonly
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
549E000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown
|
page readonly
|
|
|
|
911000
|
heap default
|
page read and write
|
|
|
|
327000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
23DC000
|
unkown
|
page read and write
|
|
|
|
53EE000
|
unkown
|
page read and write
|
|
|
|
6750000
|
heap private
|
page read and write
|
|
|
|
20BF000
|
unkown
|
page read and write
|
|
|
|
AF5F000
|
unkown
|
page read and write
|
|
|
|
5011000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
5E8000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
heap default
|
page read and write
|
|
|
|
618000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
4330000
|
unkown
|
page readonly
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
heap default
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
53D000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
233C000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
597000
|
heap default
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
56A2000
|
heap private
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
heap private
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
2336000
|
unkown
|
page read and write
|
|
|
|
28CE000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
449C000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
4D40000
|
unkown
|
page read and write
|
|
|
|
590000
|
heap private
|
page read and write
|
|
|
|
4C3E000
|
unkown
|
page read and write
|
|
|
|
8A0000
|
heap default
|
page read and write
|
|
|
|
BA0000
|
unkown image
|
page readonly
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
AD2000
|
unkown image
|
page execute read
|
|
|
|
5DAF000
|
unkown
|
page read and write
|
|
|
|
7FA000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
234E000
|
unkown
|
page read and write
|
|
|
|
674000
|
heap default
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
A8D1000
|
unkown
|
page read and write
|
|
|
|
740000
|
unkown
|
page read and write
|
|
|
|
69D0000
|
heap private
|
page read and write
|
|
|
|
6F0000
|
unkown
|
page read and write
|
|
|
|
5010000
|
unkown
|
page read and write
|
|
|
|
2064000
|
heap private
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
6CF000
|
unkown
|
page read and write
|
|
|
|
13D000
|
unkown
|
page execute and read and write
|
|
|
|
71F000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
23E6000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
heap default
|
page read and write
|
|
|
|
52C000
|
heap default
|
page read and write
|
|
|
|
630000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
4DEE000
|
unkown
|
page read and write
|
|
|
|
2321000
|
unkown
|
page read and write
|
|
|
|
4AB0000
|
heap private
|
page read and write
|
|
|
|
2120000
|
heap private
|
page execute and read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
B4000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
72E000
|
unkown
|
page read and write
|
|
|
|
7AA000
|
unkown
|
page read and write
|
|
|
|
9F0000
|
unkown
|
page readonly
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
7F7000
|
heap private
|
page read and write
|
|
|
|
2080000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
1EB000
|
unkown
|
page execute and read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
1D2000
|
unkown
|
page read and write
|
|
|
|
860000
|
heap default
|
page read and write
|
|
|
|
810000
|
heap private
|
page read and write
|
|
|
|
2416000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
770000
|
heap private
|
page read and write
|
|
|
|
2060000
|
unkown
|
page read and write
|
|
|
|
8B0000
|
unkown
|
page readonly
|
|
|
|
566000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
4DA000
|
heap default
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
37F000
|
unkown
|
page read and write
|
|
|
|
AFFE000
|
unkown
|
page read and write
|
|
|
|
20A0000
|
unkown
|
page read and write
|
|
|
|
28D9000
|
unkown
|
page read and write
|
|
|
|
20FA000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
53F0000
|
unkown
|
page write copy
|
|
|
|
5AF000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
D3000
|
unkown
|
page read and write
|
|
|
|
55A2000
|
heap private
|
page read and write
|
|
|
|
419E000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
4A9E000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
5F5E000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
62E000
|
heap default
|
page read and write
|
|
|
|
E0000
|
heap default
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
20FE000
|
unkown
|
page read and write
|
|
|
|
4AD2000
|
heap private
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page readonly
|
|
|
|
28AF000
|
unkown
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
46E4000
|
heap private
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
163000
|
unkown
|
page execute and read and write
|
|
|
|
289C000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
19A000
|
unkown
|
page execute and read and write
|
|
|
|
565000
|
unkown
|
page read and write
|
|
|
|
AD2000
|
unkown image
|
page execute read
|
|
|
|
33B000
|
unkown
|
page execute and read and write
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
4720000
|
unkown
|
page readonly
|
|
|
|
553000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
496E000
|
unkown
|
page read and write | page guard
|
|
|
|
4B4000
|
heap default
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
B07E000
|
unkown
|
page read and write
|
|
|
|
18A000
|
unkown
|
page execute and read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
5B50000
|
unkown
|
page readonly
|
|
|
|
5EB000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
5585000
|
heap private
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
478000
|
unkown
|
page read and write
|
|
|
|
5AE000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
unkown image
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
A20000
|
unkown
|
page readonly
|
|
|
|
20E0000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
7EA000
|
heap default
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
B1AE000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
unkown
|
page read and write
|
|
|
|
3351000
|
unkown
|
page read and write
|
|
|
|
2110000
|
heap private
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
577000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
472000
|
heap private
|
page read and write
|
|
|
|
4ACE000
|
unkown
|
page read and write
|
|
|
|
2880000
|
unkown
|
page read and write
|
|
|
|
5C5000
|
unkown
|
page read and write
|
|
|
|
7A1000
|
unkown
|
page read and write
|
|
|
|
760000
|
heap private
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
heap default
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
7AB000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown
|
page read and write
|
|
|
|
537E000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
A20000
|
unkown
|
page readonly
|
|
|
|
4C0000
|
heap default
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
6FF000
|
unkown
|
page read and write
|
|
|
|
D9000
|
heap private
|
page read and write
|
|
|
|
5D87000
|
unkown
|
page read and write
|
|
|
|
588D000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown
|
page read and write
|
|
|
|
9AE000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
565000
|
unkown
|
page read and write
|
|
|
|
224E000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
630000
|
unkown
|
page read and write
|
|
|
|
512D000
|
unkown
|
page read and write
|
|
|
|
464D000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
54F0000
|
heap private
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
220000
|
unkown
|
page execute and read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
4EDC000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
55ED000
|
unkown
|
page read and write
|
|
|
|
5DA8000
|
unkown
|
page read and write
|
|
|
|
1E7000
|
unkown
|
page execute and read and write
|
|
|
|
4D00000
|
unkown
|
page readonly
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
5530000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
4BB0000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
AD2000
|
unkown image
|
page execute read
|
|
|
|
1A7000
|
unkown
|
page execute and read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
52D000
|
heap default
|
page read and write
|
|
|
|
BD000
|
unkown
|
page execute and read and write
|
|
|
|
50AE000
|
unkown
|
page read and write
|
|
|
|
569F000
|
unkown
|
page read and write
|
|
|
|
493F000
|
unkown
|
page read and write
|
|
|
|
2000000
|
unkown
|
page read and write
|
|
|
|
51CD000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
7EF97000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown
|
page readonly
|
|
|
|
23C0000
|
heap private
|
page execute and read and write
|
|
|
|
6B0000
|
unkown
|
page read and write
|
|
|
|
1FCD000
|
unkown
|
page read and write
|
|
|
|
867000
|
heap private
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
450000
|
heap private
|
page read and write
|
|
|
|
7A7000
|
heap default
|
page read and write
|
|
|
|
1DB000
|
unkown
|
page execute and read and write
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
162000
|
unkown
|
page read and write
|
|
|
|
212000
|
unkown image
|
page execute read
|
|
|
|
785000
|
unkown
|
page read and write
|
|
|
|
5B5000
|
heap default
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
563000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
28B2000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page execute and read and write
|
|
|
|
715000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
AB0000
|
unkown
|
page read and write
|
|
|
|
150000
|
unkown
|
page read and write
|
|
|
|
241C000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
21D0000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
heap default
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
890000
|
heap private
|
page read and write
|
|
|
|
5580000
|
heap private
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
454000
|
heap private
|
page read and write
|
|
|
|
2B0000
|
unkown
|
page execute and read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown
|
page read and write
|
|
|
|
750000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
84E000
|
unkown
|
page read and write
|
|
|
|
85E000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
40E000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
5D5B000
|
unkown
|
page read and write
|
|
|
|
49EE000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page readonly
|
|
|
|
720000
|
heap private
|
page read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
21D8000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
50DE000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
432E000
|
unkown
|
page read and write
|
|
|
|
218F000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
870000
|
unkown
|
page readonly
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
2060000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
8A0000
|
unkown
|
page readonly
|
|
|
|
C0000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
7E0000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
4E1E000
|
unkown
|
page read and write
|
|
|
|
84F000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
3161000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
537E000
|
unkown
|
page read and write
|
|
|
|
57FE000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
51F0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
5D30000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page readonly
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
630000
|
unkown
|
page read and write
|
|
|
|
26F000
|
unkown
|
page read and write
|
|
|
|
176000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
4B00000
|
unkown
|
page readonly
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
514E000
|
unkown
|
page read and write
|
|
|
|
23A1000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page read and write
|
|
|
|
918000
|
heap default
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
5C00000
|
unkown
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
5D59000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
4920000
|
heap private
|
page read and write
|
|
|
|
7C4000
|
heap default
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
5D80000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
860000
|
heap private
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
4BAE000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
17D000
|
unkown
|
page execute and read and write
|
|
|
|
3E0000
|
unkown
|
page readonly
|
|
|
|
2350000
|
unkown
|
page read and write
|
|
|
|
7EC000
|
heap default
|
page read and write
|
|
|
|
520D000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
4B0000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown
|
page read and write
|
|
|
|
490F000
|
unkown
|
page read and write
|
|
|
|
550E000
|
unkown
|
page read and write
|
|
|
|
41F000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page readonly
|
|
|
|
869000
|
heap private
|
page read and write
|
|
|
|
251E000
|
unkown
|
page read and write
|
|
|
|
2005000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
24CE000
|
unkown
|
page read and write
|
|
|
|
AF5F000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
547000
|
heap default
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
557E000
|
unkown
|
page read and write
|
|
|
|
4DE0000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
4B8D000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
21F0000
|
unkown
|
page read and write
|
|
|
|
17D000
|
unkown
|
page execute and read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
23FE000
|
unkown
|
page read and write | page guard
|
|
|
|
490000
|
unkown
|
page readonly
|
|
|
|
3BB000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3E8000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
730000
|
heap private
|
page execute and read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
20A0000
|
unkown
|
page read and write
|
|
|
|
150000
|
unkown
|
page read and write
|
|
|
|
2170000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
219E000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
56C0000
|
heap private
|
page read and write
|
|
|
|
53FD000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
4C41000
|
unkown
|
page read and write
|
|
|
|
493000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
47AF000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
5DA3000
|
unkown
|
page read and write
|
|
|
|
36C000
|
unkown
|
page read and write
|
|
|
|
2200000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
20D0000
|
unkown
|
page read and write
|
|
|
|
55B000
|
unkown
|
page read and write
|
|
|
|
1FC0000
|
unkown
|
page readonly
|
|
|
|
B4000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
16A000
|
unkown
|
page execute and read and write
|
|
|
|
192000
|
unkown
|
page read and write
|
|
|
|
5C6E000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
heap private
|
page execute and read and write
|
|
|
|
5A3000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
4C0E000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
60BC000
|
unkown
|
page read and write
|
|
|
|
51B0000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
163000
|
unkown
|
page execute and read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
56E2000
|
heap private
|
page read and write
|
|
|
|
61EE000
|
unkown
|
page read and write
|
|
|
|
6C4000
|
heap default
|
page read and write
|
|
|
|
2200000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
488000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
650000
|
heap private
|
page execute and read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
heap private
|
page execute and read and write
|
|
|
|
710000
|
unkown
|
page execute and read and write
|
|
|
|
4960000
|
unkown
|
page read and write
|
|
|
|
B3000
|
unkown
|
page execute and read and write
|
|
|
|
B9C000
|
unkown image
|
page readonly
|
|
|
|
28D4000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
2180000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
564000
|
unkown
|
page read and write
|
|
|
|
4BB1000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
623000
|
unkown
|
page read and write
|
|
|
|
5680000
|
heap private
|
page read and write
|
|
|
|
715000
|
unkown
|
page read and write
|
|
|
|
332000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
4C50000
|
heap private
|
page execute and read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
54EE000
|
unkown
|
page read and write
|
|
|
|
611F000
|
unkown
|
page read and write
|
|
|
|
640000
|
heap private
|
page execute and read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
4BF0000
|
heap private
|
page execute and read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown
|
page read and write
|
|
|
|
7D0000
|
unkown
|
page read and write
|
|
|
|
620000
|
heap default
|
page read and write
|
|
|
|
2339000
|
unkown
|
page read and write
|
|
|
|
541E000
|
unkown
|
page read and write
|
|
|
|
2150000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
497C000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
6AD000
|
heap default
|
page read and write
|
|
|
|
211E000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
205E000
|
unkown
|
page read and write
|
|
|
|
3EB000
|
unkown
|
page read and write
|
|
|
|
764000
|
heap private
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
4B50000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
2070000
|
heap private
|
page read and write
|
|
|
|
7D4000
|
unkown
|
page read and write
|
|
|
|
5B4C000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
210000
|
unkown
|
page read and write
|
|
|
|
20D000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
5BC000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
unkown image
|
page readonly
|
|
|
|
2060000
|
unkown
|
page read and write
|
|
|
|
197000
|
unkown
|
page execute and read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
51EE000
|
unkown
|
page read and write
|
|
|
|
3359000
|
unkown
|
page read and write
|
|
|
|
1C7000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
5E5000
|
unkown
|
page read and write
|
|
|
|
4702000
|
heap private
|
page read and write
|
|
|
|
508000
|
heap default
|
page read and write
|
|
|
|
640000
|
unkown
|
page read and write
|
|
|
|
214E000
|
unkown
|
page read and write
|
|
|
|
556E000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
808000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
27C8000
|
unkown
|
page read and write
|
|
|
|
5890000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
85A000
|
heap default
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
AE3F000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page readonly
|
|
|
|
511E000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
unkown
|
page read and write
|
|
|
|
8AD000
|
heap default
|
page read and write
|
|
|
|
487000
|
heap default
|
page read and write
|
|
|
|
4950000
|
heap private
|
page read and write
|
|
|
|
FB0000
|
unkown
|
page readonly
|
|
|
|
3E8000
|
unkown
|
page read and write
|
|
|
|
7EF2F000
|
unkown
|
page read and write
|
|
|
|
2540000
|
heap private
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
47B0000
|
unkown
|
page readonly
|
|
|
|
7F0000
|
unkown
|
page read and write
|
|
|
|
2060000
|
heap private
|
page read and write
|
|
|
|
71F000
|
unkown
|
page read and write
|
|
|
|
1D7000
|
unkown
|
page execute and read and write
|
|
|
|
2000000
|
unkown
|
page execute and read and write
|
|
|
|
23E4000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page execute and read and write
|
|
|
|
549000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
5510000
|
heap private
|
page read and write
|
|
|
|
53BE000
|
unkown
|
page read and write
|
|
|
|
52B0000
|
unkown
|
page read and write
|
|
|
|
520000
|
heap default
|
page read and write
|
|
|
|
884000
|
heap default
|
page read and write
|
|
|
|
6C0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
4A6F000
|
unkown
|
page read and write
|
|
|
|
B9C000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown
|
page read and write
|
|
|
|
2160000
|
unkown
|
page read and write
|
|
|
|
5CC0000
|
heap private
|
page read and write
|
|
|
|
AD2E000
|
unkown
|
page read and write
|
|
|
|
730000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
4AFE000
|
unkown
|
page read and write
|
|
|
|
B22E000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
7A1000
|
unkown
|
page read and write
|
|
|
|
490000
|
heap default
|
page read and write
|
|
|
|
4AB4000
|
heap private
|
page read and write
|
|
|
|
5082000
|
unkown
|
page read and write
|
|
|
|
8A0000
|
unkown
|
page readonly
|
|
|
|
700000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
5420000
|
unkown
|
page write copy
|
|
|
|
566E000
|
unkown
|
page read and write
|
|
|
|
A50000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
unkown image
|
page readonly
|
|
|
|
710000
|
unkown
|
page execute and read and write
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
1D2000
|
unkown
|
page read and write
|
|
|
|
555000
|
heap default
|
page read and write
|
|
|
|
6F0000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
DE0000
|
heap private
|
page execute and read and write
|
|
|
|
234F000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
21EC000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
4510000
|
heap private
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
69C000
|
heap default
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
5290000
|
heap private
|
page read and write
|
|
|
|
50DE000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown
|
page readonly
|
|
|
|
3B8000
|
unkown
|
page read and write
|
|
|
|
36F000
|
unkown
|
page read and write
|
|
|
|
100000
|
heap private
|
page execute and read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
900000
|
unkown
|
page readonly
|
|
|
|
2000000
|
unkown
|
page read and write
|
|
|
|
4FDD000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
71E000
|
unkown
|
page read and write
|
|
|
|
20C0000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
281E000
|
unkown
|
page read and write
|
|
|
|
771000
|
unkown
|
page read and write
|
|
|
|
2060000
|
unkown
|
page read and write
|
|
|
|
1F6000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown
|
page execute and read and write
|
|
|
|
330000
|
unkown
|
page readonly
|
|
|
|
DD000
|
unkown
|
page execute and read and write
|
|
|
|
4E6E000
|
unkown
|
page read and write
|
|
|
|
7E4000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
56D0000
|
unkown
|
page write copy
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
496F000
|
unkown
|
page read and write
|
|
|
|
D0000
|
unkown
|
page read and write
|
|
|
|
457E000
|
unkown
|
page read and write
|
|
|
|
26CF000
|
unkown
|
page read and write
|
|
|
|
667E000
|
unkown
|
page read and write
|
|
|
|
177000
|
unkown
|
page execute and read and write
|
|
|
|
4B1E000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
17A000
|
unkown
|
page read and write
|
|
|
|
5A5000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
1A2000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
200000
|
unkown
|
page execute and read and write
|
|
|
|
21F8000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
heap private
|
page read and write
|
|
|
|
4D9E000
|
unkown
|
page read and write
|
|
|
|
1AB000
|
unkown
|
page execute and read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
6DE000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
7AA000
|
unkown
|
page read and write
|
|
|
|
20B0000
|
unkown
|
page read and write
|
|
|
|
164000
|
unkown
|
page read and write
|
|
|
|
B4000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown image
|
page readonly
|
|
|
|
5C5000
|
heap default
|
page read and write
|
|
|
|
21A0000
|
unkown
|
page read and write
|
|
|
|
216D000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
heap private
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
545000
|
unkown
|
page read and write
|
|
|
|
5110000
|
unkown
|
page read and write
|
|
|
|
4E7000
|
heap default
|
page read and write
|
|
|
|
4C90000
|
unkown
|
page readonly
|
|
|
|
415000
|
unkown
|
page read and write
|
|
|
|
A0000
|
unkown
|
page read and write
|
|
|
|
5210000
|
unkown
|
page read and write
|
|
|
|
56C5000
|
heap private
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
5BFC000
|
unkown
|
page read and write
|
|
|
|
4F6E000
|
unkown
|
page read and write
|
|
|
|
1CA000
|
unkown
|
page execute and read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
55AE000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
871000
|
heap default
|
page read and write
|
|
|
|
C0000
|
heap private
|
page read and write
|
|
|
|
2220000
|
heap private
|
page execute and read and write
|
|
|
|
195000
|
unkown
|
page execute and read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
2DC000
|
unkown image
|
page readonly
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
770000
|
unkown
|
page read and write
|
|
|
|
4C22000
|
unkown
|
page read and write
|
|
|
|
720000
|
heap private
|
page read and write
|
|
|
|
A50000
|
unkown
|
page read and write
|
|
|
|
52FE000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
3B8000
|
unkown
|
page read and write
|
|
|
|
2080000
|
unkown
|
page read and write
|
|
|
|
2190000
|
heap private
|
page read and write
|
|
|
|
17B000
|
unkown
|
page execute and read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
1FD000
|
unkown
|
page execute and read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
|
|
650000
|
unkown
|
page readonly
|
|
|
|
4C50000
|
unkown
|
page readonly
|
|
|
|
7A0000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
1D7000
|
unkown
|
page execute and read and write
|
|
There are 1207 hidden memdumps, click here to show them.