Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Doc2.xlsx
|
CDFV2 Encrypted
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Doc_87654334567[1].exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\AppData\Local\Temp\tmpB2BC.tmp
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\MLdAu\MLdAu.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Roaming\WzyRXCWtdGSdEA.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$Doc2.xlsx
|
data
|
dropped
|
|
|
|
C:\Users\Public\vbc.exe
|
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
 |
|
|
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3593FE9D.png
|
PNG image data, 458 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\38D6D8CE.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4AAF8EAF.png
|
PNG image data, 816 x 552, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4E649BE6.jpeg
|
[TIFF image data, big-endian, direntries=4], baseline, precision 8, 654x513, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5BA4E7B3.png
|
PNG image data, 816 x 552, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\8762AF39.png
|
PNG image data, 458 x 211, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\8D4B7BFA.jpeg
|
[TIFF image data, big-endian, direntries=4], baseline, precision 8, 654x513, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A9691677.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AAE88E0C.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1275x1650,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FC2C1618.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1275x1650,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\mso4E71.tmp
|
PC bitmap, Windows 3.x format, 20 x 20 x 24
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\mso4EA1.tmp
|
PC bitmap, Windows 3.x format, 20 x 20 x 24
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\mso4EA2.tmp
|
PC bitmap, Windows 3.x format, 20 x 20 x 24
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\msoF96C.tmp
|
PC bitmap, Windows 3.x format, 20 x 20 x 24
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\msoF96D.tmp
|
PC bitmap, Windows 3.x format, 20 x 20 x 24
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\msoF96E.tmp
|
PC bitmap, Windows 3.x format, 20 x 20 x 24
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\Cab6E6E.tmp
|
Microsoft Cabinet archive data, 61020 bytes, 1 file
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\Tar6E6F.tmp
|
data
|
modified
|
|
|
|
C:\Users\user\AppData\Local\Temp\tmp74F2.tmp
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\tmp7511.tmp
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
|
There are 19 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
|
|
|
|
C:\Users\Public\vbc.exe
|
'C:\Users\Public\vbc.exe'
|
|
|
|
C:\Windows\SysWOW64\schtasks.exe
|
'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\WzyRXCWtdGSdEA' /XML 'C:\Users\user\AppData\Local\Temp\tmpB2BC.tmp'
|
|
|
|
C:\Users\Public\vbc.exe
|
{path}
|
|
|
|
C:\Users\user\AppData\Roaming\MLdAu\MLdAu.exe
|
'C:\Users\user\AppData\Roaming\MLdAu\MLdAu.exe'
|
|
|
|
C:\Users\user\AppData\Roaming\MLdAu\MLdAu.exe
|
'C:\Users\user\AppData\Roaming\MLdAu\MLdAu.exe'
|
|
|
|
C:\Windows\SysWOW64\schtasks.exe
|
'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\WzyRXCWtdGSdEA' /XML 'C:\Users\user\AppData\Local\Temp\tmp74F2.tmp'
|
|
|
|
C:\Windows\SysWOW64\schtasks.exe
|
'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\WzyRXCWtdGSdEA' /XML 'C:\Users\user\AppData\Local\Temp\tmp7511.tmp'
|
|
|
|
C:\Users\user\AppData\Roaming\MLdAu\MLdAu.exe
|
{path}
|
|
|
|
C:\Users\user\AppData\Roaming\MLdAu\MLdAu.exe
|
{path}
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
There are 1 hidden processes, click here to show them.
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://arkemagrup.com/Doc_87654334567.exe
|
185.26.106.165
|
|
|
|
http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt0#
|
unknown
|
|
|
|
http://127.0.0.1:HTTP/1.1
|
unknown
|
|
|
|
http://DynDns.comDynDNS
|
unknown
|
|
|
|
https://sectigo.com/CPS0
|
unknown
|
|
|
|
http://crl.entrust.net/server1.crl0
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
|
unknown
|
|
|
|
http://ocsp.entrust.net03
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
|
|
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
|
|
|
https://login.blockchain.com/ObjectLengthChainingModeGCMAuthTagLengthChainingModeKeyDataBlobAESMicro
|
unknown
|
|
|
|
http://ocsp.sectigo.com0%
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://login.blockchain.com/HD?m
|
unknown
|
|
|
|
https://api.ipify.org%GETMozilla/5.0
|
unknown
|
|
|
|
http://mail.spamora.net
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://ocsp.entrust.net0D
|
unknown
|
|
|
|
http://BGwprh.com
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
|
unknown
|
|
|
|
https://secure.comodo.com/CPS0
|
unknown
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
|
There are 15 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
mail.spamora.net
|
185.26.106.194
|
|
|
|
arkemagrup.com
|
185.26.106.165
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.26.106.194
|
mail.spamora.net
|
France
|
|
|
|
185.26.106.165
|
arkemagrup.com
|
France
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
tb8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EF3C1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FontCachePath
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
)p8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F41E1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F4E01
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Name
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
F41E1
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
EquationEditorFilesIntl_1033
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
SavedLegacySettings
|
|
|
|
C:\Users\Public\vbc.exe
|
MLdAu
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
|
|
C:\Users\Public\vbc.exe
|
Blob
|
|
There are 44 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3191000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
2251000
|
unkown
|
page read and write
|
|
|
|
1FD1000
|
unkown
|
page read and write
|
|
|
|
2FF1000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
402000
|
unkown
|
page execute and read and write
|
|
|
|
2261000
|
unkown
|
page read and write
|
|
|
|
34B9000
|
unkown
|
page read and write
|
|
|
|
3311000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
23CA000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
3D0000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
4EEE000
|
unkown
|
page read and write
|
|
|
|
5959000
|
unkown
|
page readonly
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
620000
|
heap default
|
page read and write
|
|
|
|
5669000
|
unkown
|
page readonly
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
8610000
|
unkown
|
page readonly
|
|
|
|
5960000
|
unkown
|
page read and write
|
|
|
|
4CF0000
|
unkown
|
page readonly
|
|
|
|
21F8000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
20EC000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
5A02000
|
unkown
|
page readonly
|
|
|
|
BC20000
|
unkown
|
page readonly
|
|
|
|
2C7000
|
unkown
|
page read and write
|
|
|
|
65FE000
|
unkown
|
page read and write
|
|
|
|
650A000
|
unkown
|
page read and write
|
|
|
|
6400000
|
unkown
|
page read and write
|
|
|
|
6705000
|
unkown
|
page read and write
|
|
|
|
580000
|
heap default
|
page read and write
|
|
|
|
58E2000
|
unkown
|
page readonly
|
|
|
|
274E000
|
unkown
|
page read and write
|
|
|
|
485B000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
B00000
|
unkown
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
48C0000
|
heap private
|
page read and write
|
|
|
|
43AB000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
4370000
|
heap private
|
page read and write
|
|
|
|
52A0000
|
unkown
|
page readonly
|
|
|
|
56B9000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
56E9000
|
unkown
|
page readonly
|
|
|
|
5FCE000
|
unkown
|
page read and write
|
|
|
|
3AD6000
|
unkown
|
page read and write
|
|
|
|
1F5E000
|
unkown
|
page read and write | page guard
|
|
|
|
5456000
|
heap private
|
page read and write
|
|
|
|
ABC000
|
unkown
|
page read and write
|
|
|
|
585000
|
heap default
|
page read and write
|
|
|
|
5F7E000
|
unkown
|
page read and write
|
|
|
|
43C0000
|
heap private
|
page read and write
|
|
|
|
860D000
|
unkown
|
page read and write
|
|
|
|
10722000
|
unkown image
|
page execute read
|
|
|
|
388000
|
unkown
|
page read and write
|
|
|
|
827B000
|
unkown
|
page read and write
|
|
|
|
90F000
|
heap default
|
page read and write
|
|
|
|
57E4000
|
unkown
|
page readonly
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
17B000
|
unkown
|
page read and write
|
|
|
|
6108000
|
unkown
|
page read and write
|
|
|
|
197000
|
unkown
|
page execute and read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
A860000
|
unkown
|
page read and write
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
C1DE000
|
unkown
|
page read and write
|
|
|
|
488E000
|
unkown
|
page read and write
|
|
|
|
1D30000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
350000
|
heap private
|
page read and write
|
|
|
|
230E000
|
unkown
|
page read and write | page guard
|
|
|
|
4D7000
|
heap default
|
page read and write
|
|
|
|
627D000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
5A49000
|
unkown
|
page readonly
|
|
|
|
5B4000
|
heap private
|
page read and write
|
|
|
|
484000
|
heap default
|
page read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
5584000
|
unkown
|
page readonly
|
|
|
|
25A000
|
unkown
|
page read and write
|
|
|
|
10720000
|
unkown image
|
page readonly
|
|
|
|
5564000
|
unkown
|
page readonly
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
3419000
|
unkown
|
page read and write
|
|
|
|
2160000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
263000
|
unkown
|
page execute and read and write
|
|
|
|
8F60000
|
unkown
|
page read and write
|
|
|
|
2050000
|
heap private
|
page read and write
|
|
|
|
2150000
|
heap private
|
page execute and read and write
|
|
|
|
47F8000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
880000
|
heap default
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
5060000
|
heap private
|
page execute and read and write
|
|
|
|
43CE000
|
unkown
|
page read and write
|
|
|
|
5B50000
|
unkown
|
page readonly
|
|
|
|
120000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
3472000
|
unkown
|
page read and write
|
|
|
|
638F000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
496E000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
5985000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
66F0000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
2200000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
2DE000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
8CD000
|
heap default
|
page read and write
|
|
|
|
4EBE000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
5FE000
|
unkown
|
page read and write
|
|
|
|
440000
|
unkown
|
page readonly
|
|
|
|
240000
|
unkown
|
page readonly
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
3F0000
|
unkown
|
page readonly
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
59A2000
|
unkown
|
page readonly
|
|
|
|
590000
|
heap private
|
page execute and read and write
|
|
|
|
50AE000
|
unkown
|
page read and write
|
|
|
|
5430000
|
heap private
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
5240000
|
heap private
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page execute and read and write
|
|
|
|
5945000
|
unkown
|
page readonly
|
|
|
|
517E000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
1FF1000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
1FCE000
|
unkown
|
page read and write
|
|
|
|
631D000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
5220000
|
unkown
|
page read and write
|
|
|
|
5842000
|
unkown
|
page readonly
|
|
|
|
22FA000
|
unkown
|
page read and write
|
|
|
|
1FA0000
|
unkown
|
page readonly
|
|
|
|
3379000
|
unkown
|
page read and write
|
|
|
|
486E000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
5824000
|
unkown
|
page readonly
|
|
|
|
5722000
|
unkown
|
page readonly
|
|
|
|
763000
|
unkown
|
page read and write
|
|
|
|
5000000
|
unkown
|
page readonly
|
|
|
|
6400000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
23D5000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
3299000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
886B000
|
unkown
|
page read and write
|
|
|
|
677E000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page execute and read and write
|
|
|
|
1B4000
|
unkown
|
page read and write
|
|
|
|
43E3000
|
unkown
|
page read and write
|
|
|
|
4992000
|
heap private
|
page read and write
|
|
|
|
60CE000
|
unkown
|
page read and write
|
|
|
|
6170000
|
unkown
|
page read and write
|
|
|
|
473F000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
57F0000
|
heap private
|
page read and write
|
|
|
|
5A2D000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page read and write
|
|
|
|
589E000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
25F3000
|
unkown
|
page read and write
|
|
|
|
76CE000
|
unkown
|
page read and write
|
|
|
|
5223000
|
unkown
|
page read and write
|
|
|
|
C01D000
|
unkown
|
page read and write
|
|
|
|
48C4000
|
heap private
|
page read and write
|
|
|
|
AD60000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
5470000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
444F000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
433E000
|
unkown
|
page read and write
|
|
|
|
4E40000
|
unkown
|
page read and write
|
|
|
|
460000
|
unkown
|
page readonly
|
|
|
|
46DC000
|
unkown
|
page read and write
|
|
|
|
124000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
51A000
|
heap default
|
page read and write
|
|
|
|
570000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page read and write
|
|
|
|
B0000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
25AA000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
5922000
|
unkown
|
page readonly
|
|
|
|
4850000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
44EF000
|
unkown
|
page read and write
|
|
|
|
1F5F000
|
unkown
|
page read and write
|
|
|
|
91A000
|
heap default
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
440C000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
163000
|
unkown
|
page execute and read and write
|
|
|
|
7240000
|
heap private
|
page read and write
|
|
|
|
5C90000
|
unkown
|
page readonly
|
|
|
|
20B0000
|
unkown
|
page read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
64B0000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
64C5000
|
unkown
|
page read and write
|
|
|
|
483F000
|
unkown
|
page read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
507D000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown
|
page read and write
|
|
|
|
5F30000
|
unkown
|
page readonly
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
3251000
|
unkown
|
page read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
270000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
35F2000
|
unkown
|
page read and write
|
|
|
|
616D000
|
unkown
|
page read and write
|
|
|
|
3DF6000
|
unkown
|
page read and write
|
|
|
|
340000
|
heap private
|
page execute and read and write
|
|
|
|
81F8000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
58B2000
|
unkown
|
page readonly
|
|
|
|
B8F0000
|
unkown
|
page readonly
|
|
|
|
8253000
|
unkown
|
page read and write
|
|
|
|
58A6000
|
unkown
|
page read and write
|
|
|
|
5882000
|
unkown
|
page readonly
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
230000
|
unkown
|
page read and write
|
|
|
|
4F2C000
|
unkown
|
page read and write
|
|
|
|
B60000
|
unkown
|
page read and write
|
|
|
|
C55E000
|
unkown
|
page read and write | page guard
|
|
|
|
5996000
|
unkown
|
page readonly
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
4FF0000
|
unkown
|
page readonly
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
355000
|
heap private
|
page read and write
|
|
|
|
1AA000
|
unkown
|
page read and write
|
|
|
|
49C2000
|
heap private
|
page read and write
|
|
|
|
502000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
A360000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
4E68000
|
unkown
|
page read and write
|
|
|
|
23C2000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
274A000
|
unkown
|
page read and write
|
|
|
|
470000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
58AD000
|
unkown
|
page read and write
|
|
|
|
21F6000
|
unkown
|
page read and write
|
|
|
|
56E2000
|
unkown
|
page readonly
|
|
|
|
5AAC000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
627C000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
22BC000
|
unkown
|
page read and write
|
|
|
|
212E000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
22A1000
|
unkown
|
page read and write
|
|
|
|
449000
|
heap private
|
page read and write
|
|
|
|
5243000
|
unkown
|
page read and write
|
|
|
|
5612000
|
unkown
|
page readonly
|
|
|
|
48B2000
|
unkown
|
page read and write
|
|
|
|
220000
|
unkown
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown
|
page read and write
|
|
|
|
5852000
|
unkown
|
page readonly
|
|
|
|
5895000
|
unkown
|
page readonly
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
566D000
|
unkown
|
page readonly
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
320000
|
heap default
|
page read and write
|
|
|
|
12D000
|
unkown
|
page execute and read and write
|
|
|
|
560000
|
heap private
|
page execute and read and write
|
|
|
|
65E0000
|
unkown
|
page read and write
|
|
|
|
1F2E000
|
unkown
|
page read and write
|
|
|
|
44FE000
|
unkown
|
page read and write
|
|
|
|
18D000
|
unkown
|
page execute and read and write
|
|
|
|
524B000
|
heap private
|
page read and write
|
|
|
|
5368000
|
heap private
|
page read and write
|
|
|
|
7BD0000
|
unkown
|
page read and write
|
|
|
|
58F5000
|
unkown
|
page readonly
|
|
|
|
4C9000
|
heap default
|
page read and write
|
|
|
|
388000
|
unkown
|
page read and write
|
|
|
|
3342000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
C46F000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
53FD000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page read and write
|
|
|
|
5B90000
|
unkown
|
page readonly
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
5952000
|
unkown
|
page readonly
|
|
|
|
56A5000
|
unkown
|
page readonly
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
61A1000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
645E000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
330000
|
heap private
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
5906000
|
unkown
|
page readonly
|
|
|
|
664E000
|
unkown
|
page read and write
|
|
|
|
3359000
|
unkown
|
page read and write
|
|
|
|
84ED000
|
unkown
|
page read and write
|
|
|
|
723D000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
130000
|
heap private
|
page execute and read and write
|
|
|
|
59E5000
|
unkown
|
page readonly
|
|
|
|
25B000
|
unkown
|
page read and write
|
|
|
|
203D000
|
unkown
|
page read and write
|
|
|
|
5682000
|
unkown
|
page readonly
|
|
|
|
6170000
|
unkown
|
page read and write
|
|
|
|
D2000
|
unkown
|
page read and write
|
|
|
|
61A1000
|
unkown
|
page read and write
|
|
|
|
57E2000
|
unkown
|
page readonly
|
|
|
|
1E6E000
|
unkown
|
page read and write | page guard
|
|
|
|
61A2000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
6153000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
2FD9000
|
unkown
|
page read and write
|
|
|
|
5542000
|
unkown
|
page readonly
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
932000
|
heap default
|
page read and write
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
33D9000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
5A65000
|
unkown
|
page readonly
|
|
|
|
61B0000
|
unkown
|
page read and write
|
|
|
|
5B70000
|
unkown
|
page readonly
|
|
|
|
240000
|
unkown
|
page read and write
|
|
|
|
5625000
|
unkown
|
page readonly
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
3C76000
|
unkown
|
page read and write
|
|
|
|
5248000
|
heap private
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
21BD000
|
unkown
|
page read and write
|
|
|
|
488D000
|
unkown
|
page read and write
|
|
|
|
C04F000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
heap private
|
page execute and read and write
|
|
|
|
5ACE000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
423E000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
5CD0000
|
unkown
|
page readonly
|
|
|
|
1E6F000
|
unkown
|
page read and write
|
|
|
|
4375000
|
heap private
|
page read and write
|
|
|
|
5655000
|
unkown
|
page readonly
|
|
|
|
827B000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
2293000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
62FF000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
1F40000
|
heap private
|
page read and write
|
|
|
|
79C000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
4950000
|
unkown
|
page read and write
|
|
|
|
258000
|
unkown
|
page read and write
|
|
|
|
C41D000
|
unkown
|
page read and write
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
8CC000
|
heap default
|
page read and write
|
|
|
|
51C000
|
heap default
|
page read and write
|
|
|
|
4E3E000
|
unkown
|
page read and write
|
|
|
|
4900000
|
unkown
|
page readonly
|
|
|
|
5942000
|
unkown
|
page readonly
|
|
|
|
B60000
|
unkown
|
page read and write
|
|
|
|
640000
|
heap private
|
page read and write
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
5390000
|
heap private
|
page read and write
|
|
|
|
1CD000
|
unkown
|
page execute and read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
heap private
|
page read and write
|
|
|
|
61A1000
|
unkown
|
page read and write
|
|
|
|
1D10000
|
unkown
|
page read and write
|
|
|
|
486D000
|
unkown
|
page read and write
|
|
|
|
3B8000
|
heap private
|
page read and write
|
|
|
|
5D2000
|
heap private
|
page read and write
|
|
|
|
5364000
|
heap private
|
page read and write
|
|
|
|
4E40000
|
unkown
|
page readonly
|
|
|
|
6170000
|
unkown
|
page read and write
|
|
|
|
1EB000
|
unkown
|
page execute and read and write
|
|
|
|
980000
|
unkown
|
page readonly
|
|
|
|
2F0000
|
unkown
|
page execute and read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown
|
page read and write
|
|
|
|
6580000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
13D000
|
unkown
|
page execute and read and write
|
|
|
|
8F4000
|
heap default
|
page read and write
|
|
|
|
7D0000
|
heap private
|
page read and write
|
|
|
|
80000
|
unkown
|
page readonly
|
|
|
|
5642000
|
unkown
|
page readonly
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
350000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
heap default
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
1D20000
|
unkown
|
page execute and read and write
|
|
|
|
468000
|
unkown
|
page read and write
|
|
|
|
64AD000
|
unkown
|
page read and write
|
|
|
|
22B000
|
unkown
|
page read and write
|
|
|
|
5876000
|
unkown
|
page readonly
|
|
|
|
3339000
|
unkown
|
page read and write
|
|
|
|
1F60000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
28CA000
|
unkown
|
page read and write
|
|
|
|
5989000
|
unkown
|
page readonly
|
|
|
|
4E2E000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
280000
|
unkown
|
page read and write
|
|
|
|
5B12000
|
unkown
|
page readonly
|
|
|
|
31B000
|
unkown
|
page read and write
|
|
|
|
8A0000
|
heap default
|
page read and write
|
|
|
|
5A79000
|
unkown
|
page readonly
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
65DA000
|
unkown
|
page read and write
|
|
|
|
6FE000
|
unkown
|
page read and write
|
|
|
|
5B6C000
|
unkown
|
page read and write
|
|
|
|
230000
|
unkown
|
page execute and read and write
|
|
|
|
73E000
|
unkown
|
page read and write
|
|
|
|
C55F000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
2066000
|
unkown
|
page read and write
|
|
|
|
30D000
|
unkown
|
page read and write
|
|
|
|
64B0000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
820000
|
unkown
|
page execute and read and write
|
|
|
|
4CFE000
|
unkown
|
page read and write
|
|
|
|
4ED2000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
5C1E000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page readonly
|
|
|
|
4404000
|
unkown
|
page read and write
|
|
|
|
5872000
|
unkown
|
page readonly
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
64CB000
|
unkown
|
page read and write
|
|
|
|
827B000
|
unkown
|
page read and write
|
|
|
|
50CD000
|
unkown
|
page read and write
|
|
|
|
93A000
|
heap default
|
page read and write
|
|
|
|
4060000
|
unkown
|
page read and write
|
|
|
|
5636000
|
unkown
|
page readonly
|
|
|
|
386000
|
unkown
|
page read and write
|
|
|
|
5360000
|
heap private
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
5AE000
|
heap default
|
page read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
3279000
|
unkown
|
page read and write
|
|
|
|
4310000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
2714000
|
unkown
|
page read and write
|
|
|
|
350000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
458000
|
unkown
|
page read and write
|
|
|
|
5DDE000
|
unkown
|
page read and write
|
|
|
|
320000
|
unkown
|
page execute and read and write
|
|
|
|
608E000
|
unkown
|
page read and write
|
|
|
|
5D0000
|
unkown
|
page readonly
|
|
|
|
770000
|
unkown
|
page readonly
|
|
|
|
887000
|
heap default
|
page read and write
|
|
|
|
56B2000
|
unkown
|
page readonly
|
|
|
|
860000
|
heap default
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page readonly
|
|
|
|
670000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
197000
|
unkown
|
page execute and read and write
|
|
|
|
421E000
|
unkown
|
page read and write
|
|
|
|
B260000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
heap default
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
5742000
|
unkown
|
page readonly
|
|
|
|
1B3000
|
unkown
|
page execute and read and write
|
|
|
|
467000
|
heap default
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
270E000
|
unkown
|
page read and write
|
|
|
|
1BD000
|
unkown
|
page execute and read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
34B9000
|
unkown
|
page read and write
|
|
|
|
152000
|
unkown
|
page read and write
|
|
|
|
2080000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
4310000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
heap default
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
24C2000
|
unkown
|
page read and write
|
|
|
|
649E000
|
unkown
|
page read and write
|
|
|
|
10794000
|
unkown image
|
page readonly
|
|
|
|
48BC000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown
|
page execute and read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
4984000
|
heap private
|
page read and write
|
|
|
|
5975000
|
unkown
|
page readonly
|
|
|
|
6184000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page readonly
|
|
|
|
58A0000
|
unkown
|
page read and write
|
|
|
|
360000
|
heap private
|
page read and write
|
|
|
|
58C5000
|
unkown
|
page readonly
|
|
|
|
58B0000
|
unkown
|
page readonly
|
|
|
|
867000
|
heap default
|
page read and write
|
|
|
|
616D000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
48C0000
|
heap private
|
page execute and read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
29B000
|
unkown
|
page execute and read and write
|
|
|
|
887000
|
heap default
|
page read and write
|
|
|
|
5365000
|
heap private
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
53C0000
|
unkown
|
page readonly
|
|
|
|
5922000
|
unkown
|
page readonly
|
|
|
|
4A9E000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
10720000
|
unkown image
|
page readonly
|
|
|
|
1E90000
|
unkown
|
page readonly
|
|
|
|
123000
|
unkown
|
page execute and read and write
|
|
|
|
6180000
|
unkown
|
page read and write
|
|
|
|
880000
|
heap default
|
page read and write
|
|
|
|
5909000
|
unkown
|
page readonly
|
|
|
|
75BE000
|
unkown
|
page read and write
|
|
|
|
8A4000
|
heap default
|
page read and write
|
|
|
|
86E000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
5544000
|
unkown
|
page readonly
|
|
|
|
238E000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
17D000
|
unkown
|
page execute and read and write
|
|
|
|
667E000
|
unkown
|
page read and write
|
|
|
|
455F000
|
unkown
|
page read and write
|
|
|
|
8A4000
|
heap default
|
page read and write
|
|
|
|
5A29000
|
unkown
|
page readonly
|
|
|
|
620000
|
heap default
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
32D9000
|
unkown
|
page read and write
|
|
|
|
2058000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
884000
|
heap default
|
page read and write
|
|
|
|
620000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
634A000
|
heap private
|
page read and write
|
|
|
|
4E30000
|
unkown
|
page read and write
|
|
|
|
4EF3000
|
unkown
|
page read and write
|
|
|
|
450000
|
unkown
|
page read and write
|
|
|
|
3399000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
10722000
|
unkown image
|
page execute read
|
|
|
|
7EF94000
|
unkown
|
page read and write
|
|
|
|
24B3000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
5622000
|
unkown
|
page readonly
|
|
|
|
5A42000
|
unkown
|
page readonly
|
|
|
|
2376000
|
unkown
|
page read and write
|
|
|
|
49A4000
|
heap private
|
page read and write
|
|
|
|
440000
|
heap private
|
page read and write
|
|
|
|
50B0000
|
unkown
|
page read and write
|
|
|
|
4F03000
|
unkown
|
page read and write
|
|
|
|
51B0000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
5C32000
|
unkown
|
page readonly
|
|
|
|
616D000
|
unkown
|
page read and write
|
|
|
|
22D1000
|
unkown
|
page read and write
|
|
|
|
6180000
|
unkown
|
page read and write
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
81E1000
|
unkown
|
page read and write
|
|
|
|
524C000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
AC0000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
192000
|
unkown
|
page read and write
|
|
|
|
C25E000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
586D000
|
unkown
|
page read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
5562000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
4CC0000
|
unkown
|
page read and write
|
|
|
|
9D3000
|
unkown
|
page read and write
|
|
|
|
38B000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
147000
|
unkown
|
page execute and read and write
|
|
|
|
62FE000
|
unkown
|
page read and write | page guard
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
570E000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
5438000
|
heap private
|
page read and write
|
|
|
|
20FF000
|
unkown
|
page read and write
|
|
|
|
4560000
|
unkown
|
page readonly
|
|
|
|
41DE000
|
unkown
|
page read and write
|
|
|
|
A0000
|
unkown
|
page read and write
|
|
|
|
4893000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
5200000
|
unkown
|
page read and write
|
|
|
|
5628000
|
unkown
|
page readonly
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
6180000
|
unkown
|
page read and write
|
|
|
|
4F90000
|
heap private
|
page read and write
|
|
|
|
1C8000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown
|
page read and write
|
|
|
|
1FB0000
|
heap private
|
page execute and read and write
|
|
|
|
4883000
|
unkown
|
page read and write
|
|
|
|
55F5000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
5AA2000
|
unkown
|
page readonly
|
|
|
|
1D2000
|
unkown
|
page read and write
|
|
|
|
18A000
|
unkown
|
page execute and read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
3AE000
|
unkown
|
page read and write
|
|
|
|
BA000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page read and write
|
|
|
|
23B7000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
1D30000
|
unkown
|
page read and write
|
|
|
|
22A5000
|
unkown
|
page read and write
|
|
|
|
5A26000
|
unkown
|
page readonly
|
|
|
|
4E0000
|
unkown
|
page readonly
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
616D000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
48B4000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
182000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
44DF000
|
unkown
|
page read and write
|
|
|
|
8A4000
|
heap default
|
page read and write
|
|
|
|
659B000
|
unkown
|
page read and write
|
|
|
|
49A2000
|
heap private
|
page read and write
|
|
|
|
55D6000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
49B0000
|
unkown
|
page write copy
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
60E0000
|
unkown
|
page read and write
|
|
|
|
58D0000
|
unkown
|
page readonly
|
|
|
|
1FF3000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
59F6000
|
unkown
|
page readonly
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
205E000
|
unkown
|
page read and write
|
|
|
|
4E40000
|
unkown
|
page readonly
|
|
|
|
536B000
|
heap private
|
page read and write
|
|
|
|
5804000
|
unkown
|
page readonly
|
|
|
|
5395000
|
heap private
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
6780000
|
unkown
|
page read and write
|
|
|
|
46D000
|
heap default
|
page read and write
|
|
|
|
4D80000
|
unkown
|
page read and write
|
|
|
|
157000
|
unkown
|
page execute and read and write
|
|
|
|
65AA000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page readonly
|
|
|
|
49A4000
|
heap private
|
page read and write
|
|
|
|
5AC5000
|
unkown
|
page readonly
|
|
|
|
59C6000
|
unkown
|
page readonly
|
|
|
|
4870000
|
unkown
|
page read and write
|
|
|
|
24BA000
|
unkown
|
page read and write
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
234A000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
460000
|
heap default
|
page read and write
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
44F0000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
590D000
|
unkown
|
page readonly
|
|
|
|
1C3000
|
unkown
|
page read and write
|
|
|
|
4BAE000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown
|
page read and write
|
|
|
|
7180000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
7D7000
|
heap private
|
page read and write
|
|
|
|
61A2000
|
unkown
|
page read and write
|
|
|
|
258000
|
unkown
|
page read and write
|
|
|
|
30E000
|
unkown
|
page read and write
|
|
|
|
40AD000
|
unkown
|
page read and write
|
|
|
|
8A5E000
|
unkown
|
page read and write
|
|
|
|
64DA000
|
unkown
|
page read and write
|
|
|
|
5904000
|
unkown
|
page readonly
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
830000
|
unkown
|
page readonly
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
4B7D000
|
unkown
|
page read and write
|
|
|
|
20FE000
|
unkown
|
page read and write
|
|
|
|
2FD1000
|
unkown
|
page read and write
|
|
|
|
B79000
|
heap private
|
page read and write
|
|
|
|
6595000
|
unkown
|
page read and write
|
|
|
|
8AD000
|
heap default
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
470000
|
unkown
|
page read and write
|
|
|
|
4900000
|
unkown
|
page readonly
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
23C6000
|
unkown
|
page read and write
|
|
|
|
750000
|
unkown
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
234E000
|
unkown
|
page read and write
|
|
|
|
5A95000
|
unkown
|
page readonly
|
|
|
|
4470000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
592D000
|
unkown
|
page read and write
|
|
|
|
49FE000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
428D000
|
unkown
|
page read and write
|
|
|
|
10722000
|
unkown image
|
page execute read
|
|
|
|
400000
|
unkown
|
page readonly
|
|
|
|
CA0000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
510000
|
heap default
|
page read and write
|
|
|
|
620E000
|
unkown
|
page read and write
|
|
|
|
4FEF000
|
unkown
|
page read and write
|
|
|
|
6161000
|
unkown
|
page read and write
|
|
|
|
40B0000
|
unkown
|
page readonly
|
|
|
|
5C70000
|
unkown
|
page readonly
|
|
|
|
267000
|
unkown
|
page execute and read and write
|
|
|
|
DA000
|
unkown
|
page execute and read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
5944000
|
unkown
|
page readonly
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
2110000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
338000
|
heap private
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
8253000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
unkown
|
page readonly
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
820000
|
unkown
|
page readonly
|
|
|
|
1F70000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
heap private
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
2378000
|
unkown
|
page read and write
|
|
|
|
4BB0000
|
unkown
|
page readonly
|
|
|
|
48E2000
|
heap private
|
page read and write
|
|
|
|
439E000
|
unkown
|
page read and write
|
|
|
|
5705000
|
unkown
|
page readonly
|
|
|
|
2633000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
207F000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
76D0000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
230000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown
|
page read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
10720000
|
unkown image
|
page readonly
|
|
|
|
4425000
|
heap private
|
page read and write
|
|
|
|
6340000
|
heap private
|
page read and write
|
|
|
|
CD000
|
unkown
|
page execute and read and write
|
|
|
|
955000
|
heap default
|
page read and write
|
|
|
|
4840000
|
unkown
|
page readonly
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
87E000
|
unkown
|
page read and write
|
|
|
|
5482000
|
unkown
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
2352000
|
unkown
|
page read and write
|
|
|
|
4060000
|
unkown
|
page read and write
|
|
|
|
D7000
|
unkown
|
page execute and read and write
|
|
|
|
80000
|
unkown
|
page readonly
|
|
|
|
47C0000
|
unkown
|
page read and write
|
|
|
|
230F000
|
unkown
|
page read and write
|
|
|
|
760000
|
unkown
|
page read and write
|
|
|
|
10720000
|
unkown image
|
page readonly
|
|
|
|
57AE000
|
unkown
|
page read and write
|
|
|
|
3499000
|
unkown
|
page read and write
|
|
|
|
33F9000
|
unkown
|
page read and write
|
|
|
|
63FE000
|
unkown
|
page read and write
|
|
|
|
4F7000
|
heap default
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
444E000
|
unkown
|
page read and write | page guard
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
55C5000
|
unkown
|
page readonly
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
14A000
|
unkown
|
page execute and read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
73ED000
|
unkown
|
page read and write
|
|
|
|
2191000
|
unkown
|
page read and write
|
|
|
|
1D18000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
5A72000
|
unkown
|
page readonly
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown
|
page readonly
|
|
|
|
2313000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page readonly
|
|
|
|
521F000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
264000
|
unkown
|
page read and write
|
|
|
|
64C1000
|
unkown
|
page read and write
|
|
|
|
1DD0000
|
heap private
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
4F4000
|
heap default
|
page read and write
|
|
|
|
827A000
|
unkown
|
page read and write
|
|
|
|
2311000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
5382000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
90000
|
unkown
|
page read and write
|
|
|
|
C0000
|
unkown
|
page readonly
|
|
|
|
4AA0000
|
unkown
|
page readonly
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
3A8000
|
unkown
|
page read and write
|
|
|
|
2710000
|
unkown
|
page read and write
|
|
|
|
58D6000
|
unkown
|
page readonly
|
|
|
|
3C0000
|
heap private
|
page execute and read and write
|
|
|
|
6173000
|
unkown
|
page read and write
|
|
|
|
234C000
|
unkown
|
page read and write
|
|
|
|
4AA000
|
heap default
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
9960000
|
unkown
|
page read and write
|
|
|
|
60FF000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
1FA0000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
60C0000
|
unkown
|
page read and write
|
|
|
|
61A1000
|
unkown
|
page read and write
|
|
|
|
53B2000
|
heap private
|
page read and write
|
|
|
|
61B0000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown
|
page execute and read and write
|
|
|
|
4360000
|
unkown
|
page read and write
|
|
|
|
142000
|
unkown
|
page read and write
|
|
|
|
26D2000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
heap default
|
page read and write
|
|
|
|
5689000
|
unkown
|
page readonly
|
|
|
|
5BBB000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
4500000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
542E000
|
unkown
|
page read and write
|
|
|
|
A1E000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
5929000
|
unkown
|
page readonly
|
|
|
|
47B0000
|
unkown
|
page readonly
|
|
|
|
6090000
|
unkown
|
page readonly
|
|
|
|
4FDE000
|
unkown
|
page read and write
|
|
|
|
10794000
|
unkown image
|
page readonly
|
|
|
|
500000
|
unkown
|
page read and write
|
|
|
|
81DE000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
5822000
|
unkown
|
page readonly
|
|
|
|
4D0000
|
heap private
|
page execute and read and write
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
81E0000
|
unkown
|
page read and write
|
|
|
|
822C000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
5360000
|
heap private
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
59DE000
|
unkown
|
page read and write
|
|
|
|
5EE0000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
887000
|
heap default
|
page read and write
|
|
|
|
4580000
|
unkown
|
page readonly
|
|
|
|
1D10000
|
unkown
|
page read and write
|
|
|
|
1E80000
|
heap private
|
page execute and read and write
|
|
|
|
5F2E000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page readonly
|
|
|
|
5280000
|
unkown
|
page readonly
|
|
|
|
4F70000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
8CC000
|
heap default
|
page read and write
|
|
|
|
300000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
779000
|
heap private
|
page read and write
|
|
|
|
674A000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
6167000
|
unkown
|
page read and write
|
|
|
|
62BD000
|
unkown
|
page read and write
|
|
|
|
21FC000
|
unkown
|
page read and write
|
|
|
|
4370000
|
heap private
|
page read and write
|
|
|
|
164000
|
unkown
|
page read and write
|
|
|
|
5982000
|
unkown
|
page readonly
|
|
|
|
5E6E000
|
unkown
|
page read and write
|
|
|
|
822D000
|
unkown
|
page read and write
|
|
|
|
81D000
|
unkown
|
page read and write
|
|
|
|
56D5000
|
unkown
|
page readonly
|
|
|
|
5E0000
|
unkown
|
page readonly
|
|
|
|
880000
|
heap default
|
page read and write
|
|
|
|
C0000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
43B2000
|
unkown
|
page read and write
|
|
|
|
5C2E000
|
unkown
|
page read and write
|
|
|
|
4C8E000
|
unkown
|
page read and write
|
|
|
|
53A0000
|
unkown
|
page readonly
|
|
|
|
34D9000
|
unkown
|
page read and write
|
|
|
|
270C000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page readonly
|
|
|
|
6400000
|
unkown
|
page read and write
|
|
|
|
5E08000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
63C000
|
unkown
|
page read and write
|
|
|
|
4348000
|
unkown
|
page read and write
|
|
|
|
B4000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
5CB0000
|
unkown
|
page readonly
|
|
|
|
12B000
|
unkown
|
page read and write
|
|
|
|
5802000
|
unkown
|
page readonly
|
|
|
|
2200000
|
unkown
|
page read and write
|
|
|
|
9D0000
|
unkown
|
page read and write
|
|
|
|
2390000
|
unkown
|
page read and write
|
|
|
|
4410000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
49E0000
|
unkown
|
page readonly
|
|
|
|
58A6000
|
unkown
|
page readonly
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
51EE000
|
unkown
|
page read and write
|
|
|
|
1E7000
|
unkown
|
page execute and read and write
|
|
|
|
32B9000
|
unkown
|
page read and write
|
|
|
|
4220000
|
unkown
|
page readonly
|
|
|
|
4460000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page readonly
|
|
|
|
43D7000
|
unkown
|
page read and write
|
|
|
|
24B6000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
5D3E000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
214D000
|
unkown
|
page read and write
|
|
|
|
4190000
|
unkown
|
page readonly
|
|
|
|
33B9000
|
unkown
|
page read and write
|
|
|
|
23B9000
|
unkown
|
page read and write
|
|
|
|
670B000
|
unkown
|
page read and write
|
|
|
|
1F60000
|
unkown
|
page read and write
|
|
|
|
4B2D000
|
unkown
|
page read and write
|
|
|
|
274000
|
unkown
|
page read and write
|
|
|
|
297000
|
unkown
|
page execute and read and write
|
|
|
|
334000
|
heap private
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
6701000
|
unkown
|
page read and write
|
|
|
|
367000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page readonly
|
|
|
|
5CCC000
|
unkown
|
page read and write
|
|
|
|
150000
|
unkown
|
page read and write
|
|
|
|
4450000
|
unkown
|
page read and write
|
|
|
|
2661000
|
unkown
|
page read and write
|
|
|
|
2712000
|
unkown
|
page read and write
|
|
|
|
49C2000
|
heap private
|
page read and write
|
|
|
|
19B000
|
unkown
|
page execute and read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
894D000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
6591000
|
unkown
|
page read and write
|
|
|
|
B760000
|
unkown
|
page read and write
|
|
|
|
6170000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
33B000
|
heap private
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
6DE000
|
unkown
|
page read and write
|
|
|
|
173000
|
unkown
|
page read and write
|
|
|
|
49A0000
|
heap private
|
page read and write
|
|
|
|
3439000
|
unkown
|
page read and write
|
|
|
|
5382000
|
heap private
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
BD000
|
unkown
|
page execute and read and write
|
|
|
|
19A000
|
unkown
|
page execute and read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
2348000
|
unkown
|
page read and write
|
|
|
|
4974000
|
heap private
|
page read and write
|
|
|
|
4EF7000
|
unkown
|
page read and write
|
|
|
|
262000
|
unkown
|
page read and write
|
|
|
|
3479000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
318000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
43D3000
|
unkown
|
page read and write
|
|
|
|
133000
|
unkown
|
page execute and read and write
|
|
|
|
4862000
|
unkown
|
page read and write
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
5910000
|
unkown
|
page read and write
|
|
|
|
B3000
|
unkown
|
page execute and read and write
|
|
|
|
51FE000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
730000
|
heap private
|
page execute and read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
134000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
heap private
|
page execute and read and write
|
|
|
|
C14D000
|
unkown
|
page read and write
|
|
|
|
4E00000
|
heap private
|
page execute and read and write
|
|
|
|
1E0000
|
heap default
|
page read and write
|
|
|
|
5B70000
|
unkown
|
page readonly
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown
|
page read and write
|
|
|
|
2120000
|
heap private
|
page execute and read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
318000
|
unkown
|
page read and write
|
|
|
|
4EF0000
|
heap private
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
A5E000
|
unkown
|
page read and write
|
|
|
|
893A000
|
unkown
|
page read and write
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
5DCF000
|
unkown
|
page read and write
|
|
|
|
4FE0000
|
unkown
|
page readonly
|
|
|
|
533E000
|
unkown
|
page read and write
|
|
|
|
2117000
|
unkown
|
page readonly
|
|
|
|
224F000
|
unkown
|
page read and write
|
|
|
|
4BE000
|
unkown
|
page read and write
|
|
|
|
5666000
|
unkown
|
page readonly
|
|
|
|
63CE000
|
unkown
|
page read and write
|
|
|
|
448000
|
unkown
|
page read and write
|
|
|
|
1FB0000
|
heap private
|
page read and write
|
|
|
|
630000
|
heap default
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
49A0000
|
heap private
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
8CA000
|
heap default
|
page read and write
|
|
|
|
2478000
|
unkown
|
page read and write
|
|
|
|
93D000
|
heap default
|
page read and write
|
|
|
|
1DA000
|
unkown
|
page execute and read and write
|
|
|
|
186000
|
unkown
|
page execute and read and write
|
|
|
|
4F24000
|
unkown
|
page read and write
|
|
|
|
31A2000
|
unkown
|
page read and write
|
|
|
|
225F000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
61B0000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
613E000
|
unkown
|
page read and write
|
|
|
|
81E1000
|
unkown
|
page read and write
|
|
|
|
44E0000
|
unkown
|
page readonly
|
|
|
|
60DE000
|
unkown
|
page read and write
|
|
|
|
5606000
|
unkown
|
page readonly
|
|
|
|
BB50000
|
unkown
|
page readonly
|
|
|
|
4420000
|
heap private
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
1D80000
|
unkown
|
page read and write
|
|
|
|
1E7000
|
unkown
|
page read and write
|
|
|
|
5DFF000
|
unkown
|
page read and write
|
|
|
|
946000
|
heap default
|
page read and write
|
|
|
|
770000
|
heap private
|
page read and write
|
|
|
|
B70000
|
heap private
|
page read and write
|
|
|
|
5D0000
|
heap private
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
552E000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
5DE2000
|
unkown
|
page read and write
|
|
|
|
6A0000
|
unkown
|
page readonly
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown
|
page readonly
|
|
|
|
224E000
|
unkown
|
page read and write | page guard
|
|
|
|
40AE000
|
unkown
|
page read and write
|
|
|
|
5582000
|
unkown
|
page readonly
|
|
|
|
8EA000
|
heap default
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
2587000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page execute and read and write
|
|
|
|
3F0000
|
unkown
|
page execute and read and write
|
|
|
|
10794000
|
unkown image
|
page readonly
|
|
|
|
650000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown
|
page readonly
|
|
|
|
5244000
|
heap private
|
page read and write
|
|
|
|
59A5000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
4980000
|
heap private
|
page read and write
|
|
|
|
3B0000
|
heap private
|
page read and write
|
|
|
|
4ECB000
|
unkown
|
page read and write
|
|
|
|
43D0000
|
unkown
|
page readonly
|
|
|
|
60E7000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
unkown
|
page read and write
|
|
|
|
61AE000
|
unkown
|
page read and write
|
|
|
|
43DF000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
1F90000
|
unkown
|
page readonly
|
|
|
|
4887000
|
unkown
|
page read and write
|
|
|
|
56AE000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
43EE000
|
unkown
|
page read and write
|
|
|
|
74FE000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
53A000
|
heap default
|
page read and write
|
|
|
|
47D0000
|
unkown
|
page readonly
|
|
|
|
6186000
|
unkown
|
page read and write
|
|
|
|
529E000
|
unkown
|
page read and write
|
|
|
|
55EE000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
5A1000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
4F6E000
|
unkown
|
page read and write
|
|
|
|
4E2E000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
32D2000
|
unkown
|
page read and write
|
|
|
|
1D10000
|
unkown
|
page read and write
|
|
|
|
27D000
|
unkown
|
page execute and read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
5A10000
|
unkown
|
page read and write
|
|
|
|
2058000
|
unkown
|
page read and write
|
|
|
|
5AA9000
|
unkown
|
page readonly
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
1D70000
|
unkown
|
page readonly
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page execute and read and write
|
|
|
|
C29F000
|
unkown
|
page read and write
|
|
|
|
4270000
|
unkown
|
page read and write
|
|
|
|
1EB000
|
unkown
|
page execute and read and write
|
|
|
|
4C2E000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown
|
page read and write
|
|
|
|
1E7000
|
unkown
|
page execute and read and write
|
|
|
|
62FA000
|
unkown
|
page read and write
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
220000
|
unkown
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
611D000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
1E2000
|
unkown
|
page read and write
|
|
|
|
840000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
32F9000
|
unkown
|
page read and write
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
958000
|
heap default
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
1D7000
|
unkown
|
page execute and read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
4CC0000
|
heap private
|
page execute and read and write
|
|
|
|
8A60000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
59C2000
|
unkown
|
page read and write
|
|
|
|
300000
|
unkown
|
page readonly
|
|
|
|
2F0000
|
heap private
|
page read and write
|
|
|
|
590000
|
unkown
|
page read and write
|
|
|
|
3459000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
43BE000
|
unkown
|
page read and write
|
|
|
|
62AE000
|
unkown
|
page read and write
|
|
|
|
BE8E000
|
unkown
|
page read and write
|
|
|
|
52A0000
|
unkown
|
page write copy
|
|
|
|
4440000
|
unkown
|
page read and write
|
|
|
|
4AC000
|
heap default
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
411C000
|
unkown
|
page read and write
|
|
|
|
3AE000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
238A000
|
unkown
|
page read and write
|
|
|
|
520000
|
heap private
|
page read and write
|
|
|
|
457E000
|
unkown
|
page read and write
|
|
|
|
61A1000
|
unkown
|
page read and write
|
|
|
|
1D90000
|
unkown
|
page readonly
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
822D000
|
unkown
|
page read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
210E000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
4BE0000
|
unkown
|
page read and write
|
|
|
|
13D000
|
unkown
|
page execute and read and write
|
|
|
|
5748000
|
unkown
|
page readonly
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
5F0000
|
unkown
|
page read and write
|
|
|
|
601E000
|
unkown
|
page read and write
|
|
|
|
610000
|
heap default
|
page read and write
|
|
|
|
5388000
|
unkown
|
page readonly
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
3319000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
72B0000
|
heap private
|
page read and write
|
|
|
|
315000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
50FE000
|
unkown
|
page read and write
|
|
|
|
42CD000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
5BEE000
|
unkown
|
page read and write
|
|
|
|
2350000
|
unkown
|
page read and write
|
|
|
|
4CB0000
|
heap private
|
page execute and read and write
|
|
|
|
4402000
|
unkown
|
page read and write
|
|
|
|
55B2000
|
unkown
|
page readonly
|
|
|
|
5DE0000
|
unkown
|
page read and write
|
|
|
|
1D8000
|
unkown
|
page read and write
|
|
|
|
473E000
|
unkown
|
page read and write | page guard
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
59B5000
|
unkown
|
page readonly
|
|
|
|
4F22000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
229D000
|
unkown
|
page read and write
|
|
|
|
548D000
|
unkown
|
page read and write
|
|
|
|
9E60000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
9460000
|
unkown
|
page read and write
|
|
|
|
AD0000
|
heap private
|
page read and write
|
|
|
|
4300000
|
unkown
|
page read and write
|
|
|
|
650000
|
unkown
|
page readonly
|
|
|
|
192000
|
unkown
|
page read and write
|
|
|
|
3261000
|
unkown
|
page read and write
|
|
|
|
5972000
|
unkown
|
page readonly
|
|
|
|
4430000
|
unkown
|
page read and write
|
|
|
|
5A15000
|
unkown
|
page readonly
|
|
|
|
1FF0000
|
unkown
|
page read and write
|
|
|
|
16D000
|
unkown
|
page execute and read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
5924000
|
unkown
|
page readonly
|
|
|
|
4970000
|
heap private
|
page read and write
|
|
|
|
5865000
|
unkown
|
page readonly
|
|
|
|
10FC0000
|
unkown image
|
page readonly
|
|
|
|
587000
|
heap default
|
page read and write
|
|
|
|
404E000
|
unkown
|
page read and write
|
|
|
|
303000
|
unkown
|
page read and write
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
1D10000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
250000
|
unkown
|
page read and write
|
|
|
|
55E2000
|
unkown
|
page readonly
|
|
|
|
10720000
|
unkown image
|
page readonly
|
|
|
|
2131000
|
unkown
|
page read and write
|
|
|
|
22FE000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown
|
page read and write
|
|
|
|
26B000
|
unkown
|
page execute and read and write
|
|
|
|
5A3000
|
heap default
|
page read and write
|
|
|
|
290000
|
unkown
|
page readonly
|
|
|
|
671A000
|
unkown
|
page read and write
|
|
|
|
255000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
1F60000
|
unkown
|
page read and write
|
|
|
|
435C000
|
unkown
|
page read and write
|
|
|
|
10FC2000
|
unkown image
|
page execute read
|
|
|
|
40B0000
|
unkown
|
page readonly
|
|
|
|
26D0000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
6C80000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
heap default
|
page read and write
|
|
|
|
59D2000
|
unkown
|
page readonly
|
|
|
|
5902000
|
unkown
|
page readonly
|
|
|
|
1C0000
|
unkown
|
page read and write
|
|
|
|
15B000
|
unkown
|
page execute and read and write
|
|
|
|
11034000
|
unkown image
|
page readonly
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
60FF000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown
|
page read and write
|
|
There are 1316 hidden memdumps, click here to show them.