Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Remittance_Advice_details001009142021.xlsx
|
CDFV2 Encrypted
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\loader1[1].exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
downloaded
|
|
|
|
C:\Users\user\Desktop\~$Remittance_Advice_details001009142021.xlsx
|
data
|
dropped
|
|
|
|
C:\Users\Public\vbc.exe
|
PE32 executable (console) Intel 80386, for MS Windows
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\266FC07D.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2A86AD78.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 333x151, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\33990A46.png
|
PNG image data, 613 x 80, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3E0D1557.png
|
PNG image data, 684 x 477, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\3EA6FB2E.png
|
PNG image data, 613 x 80, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\4693945A.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1275x1650,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5824BFDB.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\72A9BF6C.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian,
direntries=2], baseline, precision 8, 474x379, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\99225644.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian,
direntries=2], baseline, precision 8, 474x379, frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\99B3698F.png
|
PNG image data, 684 x 477, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A0FA92C2.jpeg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1275x1650,
frames 3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A36C1A1.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\AA6CA394.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C2AC9F19.png
|
PNG image data, 476 x 244, 8-bit/color RGB, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DAB20020.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 333x151, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DF646493.jpeg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames
3
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E1C17975.png
|
PNG image data, 566 x 429, 8-bit/color RGBA, non-interlaced
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\EA254685.emf
|
Windows Enhanced Metafile (EMF) image data version 0x10000
|
dropped
|
|
There are 12 hidden files, click here to show them.
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
|
|
|
|
C:\Users\Public\vbc.exe
|
'C:\Users\Public\vbc.exe'
|
|
|
|
C:\Users\Public\vbc.exe
|
'C:\Users\Public\vbc.exe'
|
|
|
|
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
|
|
|
C:\Windows\SysWOW64\wuapp.exe
|
C:\Windows\SysWOW64\wuapp.exe
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
|
|
|
|
C:\Windows\SysWOW64\cmd.exe
|
/c del 'C:\Users\Public\vbc.exe'
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://www.ecofingers.com/dy8g/?illD=X9Az7RtkaU81d6o9S6tJRjQeFUHqBPh6fbjII6Bm04v0rRN3gQJahLAd3CrM9JEnxgRa3A==&7nh=0br0WzXxgHiLa
|
52.58.78.16
|
|
|
|
http://107.173.219.122/files/loader1.exe
|
107.173.219.122
|
|
|
|
http://www.matcitekids.com/dy8g/?illD=dI9eO6GBnSulhV6EbBGZI9CJMc/scmM0Fshd6X+e3vq0VlxBF2NWOUbA55lfRDBFVPtqQQ==&7nh=0br0WzXxgHiLa
|
50.87.248.20
|
|
|
|
www.extinctionbrews.com/dy8g/
|
|
||
|
http://www.doityourselfism.com/dy8g/?illD=Y4JBfBjEKLG3bE/nPu+ARLK4ZQab+dap1kyoobOuuyzzJOKZWwpYr6zx24KPHwTC7q0HDg==&7nh=0br0WzXxgHiLa
|
169.62.91.142
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.eot
|
unknown
|
|
|
|
http://www.iis.fhg.de/audioPA
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.otf
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/pics/12471/kwbg.jpg)
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.ttf
|
unknown
|
|
|
|
http://treyresearch.net
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/display.cfm
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/pics/12471/arrow.png)
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/Best_Penny_Stocks.cfm?fp=qmv9xFBTKEA6LAcskD2eWPFr51ekSLBBN0JW8jVu%2FUU
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/find_a_tutor.cfm?fp=qmv9xFBTKEA6LAcskD2eWPFr51ekSLBBN0JW8jVu%2FUUZJTLt
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/pics/12471/libgh.png)
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/pics/12471/logo.png)
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://computername/printers/printername/.printer
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://www.autoitscript.com/autoit3
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.eot?#iefix
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/Credit_Card_Application.cfm?fp=qmv9xFBTKEA6LAcskD2eWPFr51ekSLBBN0JW8jV
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/sk-logabpstatus.php?a=VWFRUU1lL1pRcXBSSlh6S0wrZnpqVkRFSTlReFR5VHJjUENN
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/pics/12471/bodybg.png)
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.eot
|
unknown
|
|
|
|
http://wellformedweb.org/CommentAPI/
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/Work_from_Home.cfm?fp=qmv9xFBTKEA6LAcskD2eWPFr51ekSLBBN0JW8jVu%2FUUZJT
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/Best_Mortgage_Rates.cfm?fp=qmv9xFBTKEA6LAcskD2eWPFr51ekSLBBN0JW8jVu%2F
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/pics/12471/search-icon.png)
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/Free_Credit_Report.cfm?fp=qmv9xFBTKEA6LAcskD2eWPFr51ekSLBBN0JW8jVu%2FU
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.ttf
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/Anti_Wrinkle_Creams.cfm?fp=qmv9xFBTKEA6LAcskD2eWPFr51ekSLBBN0JW8jVu%2F
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.eot?#iefix
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.otf
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://java.sun.com
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/pics/12471/libg.png)
|
unknown
|
|
|
|
http://www.day.com/dam/1.0
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.woff
|
unknown
|
|
|
|
http://www.piriform.com/ccleaner
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.svg#ubuntu-b
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.svg#ubuntu-r
|
unknown
|
|
|
|
http://www.onedadtwodudes.com/px.js?ch=2
|
unknown
|
|
|
|
https://support.mozilla.org
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.woff
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/js/min.js?v2.2
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.woff2
|
unknown
|
|
|
|
http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.woff2
|
unknown
|
|
There are 48 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
matcitekids.com
|
50.87.248.20
|
|
|
|
www.onedadtwodudes.com
|
209.99.64.51
|
|
|
|
www.doityourselfism.com
|
169.62.91.142
|
|
|
|
www.ecofingers.com
|
52.58.78.16
|
|
|
|
www.matcitekids.com
|
unknown
|
|
|
|
www.garimpeirastore.online
|
unknown
|
|
|
|
www.builtbydawn.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.58.78.16
|
www.ecofingers.com
|
United States
|
|
|
|
209.99.64.51
|
www.onedadtwodudes.com
|
United States
|
|
|
|
169.62.91.142
|
www.doityourselfism.com
|
United States
|
|
|
|
50.87.248.20
|
matcitekids.com
|
United States
|
|
|
|
107.173.219.122
|
unknown
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ex(
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
MTTT
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ReviewToken
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
300DB
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
FontCachePath
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
VBAFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
x&)
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
3514B
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
35D3D
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Max Display
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 1
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 2
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 3
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 4
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 5
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 6
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 7
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 8
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 9
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 10
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 11
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 12
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 13
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 14
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 15
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 16
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 17
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 18
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 19
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 20
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Item 21
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
LastPurgeTime
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
1033
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
EXCELFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
ProductFiles
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
Name
|
|
|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
3514B
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
EquationEditorFilesIntl_1033
|
|
|
|
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
|
SavedLegacySettings
|
|
There are 33 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2C0000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown image
|
page execute and read and write
|
|
|
|
2B0000
|
unkown image
|
page execute and read and write
|
|
|
|
2D0000
|
unkown
|
page read and write
|
|
|
|
9554000
|
unkown image
|
page execute and read and write
|
|
|
|
9554000
|
unkown image
|
page execute and read and write
|
|
|
|
E0000
|
unkown image
|
page execute and read and write
|
|
|
|
250000
|
unkown image
|
page execute and read and write
|
|
|
|
400000
|
unkown image
|
page execute and read and write
|
|
|
|
1BE0000
|
unkown image
|
page readonly
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
2EC1000
|
unkown
|
page read and write
|
|
|
|
30D0000
|
unkown image
|
page readonly
|
|
|
|
2A10000
|
unkown
|
page read and write
|
|
|
|
21BF000
|
unkown
|
page read and write
|
|
|
|
255000
|
heap default
|
page read and write
|
|
|
|
438E000
|
unkown
|
page read and write
|
|
|
|
28F2000
|
unkown image
|
page read and write
|
|
|
|
7E1E000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
6E50000
|
heap private
|
page read and write
|
|
|
|
23D000
|
heap default
|
page read and write
|
|
|
|
4BB0000
|
heap private
|
page read and write
|
|
|
|
4AC0000
|
unkown
|
page read and write
|
|
|
|
20B6000
|
unkown
|
page read and write
|
|
|
|
E4000
|
heap private
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
E52000
|
unkown image
|
page write copy
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
450000
|
heap private
|
page read and write
|
|
|
|
93A0000
|
unkown
|
page read and write
|
|
|
|
6BBE000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
43A0000
|
unkown image
|
page readonly
|
|
|
|
301E000
|
unkown
|
page read and write
|
|
|
|
83C7000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown
|
page read and write
|
|
|
|
3D4B000
|
unkown
|
page read and write
|
|
|
|
255000
|
heap default
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
220000
|
unkown image
|
page readonly
|
|
|
|
1B50000
|
unkown
|
page read and write
|
|
|
|
43B0000
|
heap private
|
page read and write
|
|
|
|
1169000
|
unkown image
|
page execute and read and write
|
|
|
|
2BF000
|
unkown
|
page execute and read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
255000
|
heap default
|
page read and write
|
|
|
|
3CA0000
|
unkown
|
page read and write
|
|
|
|
728E000
|
unkown
|
page read and write
|
|
|
|
6C6A000
|
unkown
|
page read and write
|
|
|
|
8B20000
|
unkown
|
page read and write
|
|
|
|
4AC0000
|
unkown
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
430000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown
|
page read and write
|
|
|
|
C97000
|
unkown
|
page execute and read and write
|
|
|
|
2A00000
|
unkown
|
page read and write
|
|
|
|
30E0000
|
unkown image
|
page readonly
|
|
|
|
90000
|
unkown
|
page read and write
|
|
|
|
2CC000
|
unkown
|
page read and write
|
|
|
|
E14000
|
unkown
|
page execute and read and write
|
|
|
|
2B6000
|
unkown
|
page read and write
|
|
|
|
4AF0000
|
unkown image
|
page readonly
|
|
|
|
A14000
|
unkown
|
page execute and read and write
|
|
|
|
B64000
|
unkown
|
page read and write
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
4DB1000
|
unkown image
|
page read and write
|
|
|
|
1FD0000
|
unkown image
|
page readonly
|
|
|
|
21BF000
|
unkown
|
page read and write
|
|
|
|
4575000
|
unkown
|
page read and write
|
|
|
|
24F0000
|
unkown image
|
page readonly
|
|
|
|
4D30000
|
unkown image
|
page readonly
|
|
|
|
4300000
|
unkown
|
page read and write
|
|
|
|
32A5000
|
heap private
|
page read and write
|
|
|
|
457A000
|
unkown
|
page read and write
|
|
|
|
A10000
|
unkown
|
page execute and read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2A70000
|
unkown
|
page read and write
|
|
|
|
B90000
|
unkown
|
page execute and read and write
|
|
|
|
2A20000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
56E000
|
unkown
|
page read and write
|
|
|
|
E4D000
|
unkown image
|
page readonly
|
|
|
|
41F8000
|
unkown
|
page read and write
|
|
|
|
7048000
|
unkown
|
page read and write
|
|
|
|
2942000
|
unkown
|
page read and write
|
|
|
|
2CC7000
|
unkown image
|
page readonly
|
|
|
|
3D90000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
9551000
|
unkown image
|
page execute and read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
6C6A000
|
unkown
|
page read and write
|
|
|
|
4150000
|
unkown image
|
page readonly
|
|
|
|
4650000
|
unkown image
|
page readonly
|
|
|
|
4BB0000
|
heap private
|
page read and write
|
|
|
|
B97000
|
unkown
|
page execute and read and write
|
|
|
|
4D30000
|
unkown image
|
page readonly
|
|
|
|
30F0000
|
unkown image
|
page readonly
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
1FD0000
|
unkown image
|
page readonly
|
|
|
|
24A000
|
heap default
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
7779000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
6D40000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown image
|
page readonly
|
|
|
|
420000
|
heap private
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
9520000
|
unkown image
|
page execute and read and write
|
|
|
|
2520000
|
unkown
|
page read and write
|
|
|
|
4C70000
|
heap private
|
page read and write
|
|
|
|
6A60000
|
heap private
|
page read and write
|
|
|
|
4AC0000
|
unkown
|
page read and write
|
|
|
|
6D48000
|
unkown
|
page read and write
|
|
|
|
817000
|
heap default
|
page read and write
|
|
|
|
4D40000
|
unkown image
|
page readonly
|
|
|
|
920000
|
unkown
|
page execute and read and write
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
4D40000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
9362000
|
unkown
|
page read and write
|
|
|
|
9423000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page read and write
|
|
|
|
4D80000
|
unkown image
|
page readonly
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
8720000
|
unkown
|
page read and write
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
4150000
|
unkown image
|
page readonly
|
|
|
|
25C3000
|
unkown
|
page read and write
|
|
|
|
D0000
|
unkown image
|
page readonly
|
|
|
|
74F000
|
unkown
|
page read and write
|
|
|
|
8374000
|
unkown
|
page read and write
|
|
|
|
9705000
|
heap private
|
page read and write
|
|
|
|
1B50000
|
unkown
|
page read and write
|
|
|
|
45A1000
|
unkown
|
page read and write
|
|
|
|
E0000
|
heap private
|
page read and write
|
|
|
|
4160000
|
unkown
|
page read and write
|
|
|
|
2760000
|
unkown image
|
page readonly
|
|
|
|
7320000
|
unkown
|
page read and write
|
|
|
|
48E000
|
unkown
|
page read and write
|
|
|
|
3DF8000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
5410000
|
heap private
|
page read and write
|
|
|
|
237000
|
heap default
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
449C000
|
unkown
|
page read and write
|
|
|
|
691000
|
unkown image
|
page execute and read and write
|
|
|
|
1FD0000
|
unkown image
|
page readonly
|
|
|
|
457A000
|
unkown
|
page read and write
|
|
|
|
D0000
|
unkown image
|
page readonly
|
|
|
|
B80000
|
unkown
|
page execute and read and write
|
|
|
|
74B0000
|
heap private
|
page read and write
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
C80000
|
unkown
|
page execute and read and write
|
|
|
|
43B0000
|
heap private
|
page read and write
|
|
|
|
7B50000
|
heap private
|
page read and write
|
|
|
|
9423000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
4D40000
|
unkown image
|
page readonly
|
|
|
|
73B9000
|
unkown
|
page read and write
|
|
|
|
E11000
|
unkown
|
page execute and read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
E52000
|
unkown image
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page read and write
|
|
|
|
30C0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
4D60000
|
unkown image
|
page readonly
|
|
|
|
140000
|
unkown image
|
page readonly
|
|
|
|
5390000
|
heap private
|
page read and write
|
|
|
|
2533000
|
unkown
|
page read and write
|
|
|
|
7B4B000
|
unkown
|
page read and write
|
|
|
|
2500000
|
unkown image
|
page readonly
|
|
|
|
490000
|
unkown
|
page execute and read and write
|
|
|
|
2A10000
|
unkown
|
page read and write
|
|
|
|
447A000
|
unkown
|
page read and write
|
|
|
|
B94000
|
unkown
|
page execute and read and write
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
371000
|
unkown
|
page read and write
|
|
|
|
36B000
|
unkown
|
page read and write
|
|
|
|
263C000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown image
|
page execute read
|
|
|
|
83EC000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown image
|
page readonly
|
|
|
|
A20000
|
unkown
|
page execute and read and write
|
|
|
|
8380000
|
unkown
|
page read and write
|
|
|
|
3CC0000
|
unkown image
|
page readonly
|
|
|
|
732B000
|
unkown
|
page read and write
|
|
|
|
E56000
|
unkown image
|
page readonly
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
F90000
|
unkown image
|
page readonly
|
|
|
|
9362000
|
unkown
|
page read and write
|
|
|
|
556F000
|
unkown
|
page read and write
|
|
|
|
41F0000
|
unkown
|
page read and write
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
2C7000
|
heap default
|
page read and write
|
|
|
|
1B83000
|
heap private
|
page read and write
|
|
|
|
30C0000
|
unkown
|
page read and write
|
|
|
|
834B000
|
unkown
|
page read and write
|
|
|
|
94A0000
|
unkown
|
page read and write
|
|
|
|
83EC000
|
unkown
|
page read and write
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
B2E000
|
unkown
|
page read and write
|
|
|
|
32A5000
|
heap private
|
page read and write
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
110000
|
unkown
|
page read and write
|
|
|
|
1120000
|
unkown image
|
page readonly
|
|
|
|
E52000
|
unkown image
|
page write copy
|
|
|
|
2121000
|
unkown image
|
page read and write
|
|
|
|
C10000
|
unkown
|
page execute and read and write
|
|
|
|
8B20000
|
unkown
|
page read and write
|
|
|
|
9423000
|
unkown
|
page read and write
|
|
|
|
1170000
|
unkown image
|
page readonly
|
|
|
|
130000
|
unkown
|
page execute and read and write
|
|
|
|
4260000
|
heap private
|
page read and write
|
|
|
|
5270000
|
unkown
|
page execute read
|
|
|
|
4260000
|
heap private
|
page read and write
|
|
|
|
4B00000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2740000
|
unkown image
|
page readonly
|
|
|
|
83C7000
|
unkown
|
page read and write
|
|
|
|
81AE000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
70E8000
|
unkown
|
page read and write
|
|
|
|
2760000
|
unkown image
|
page readonly
|
|
|
|
680000
|
heap default
|
page read and write
|
|
|
|
243000
|
heap default
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
7B40000
|
unkown
|
page read and write
|
|
|
|
4AAD000
|
unkown
|
page read and write
|
|
|
|
1D7000
|
unkown
|
page read and write
|
|
|
|
93E4000
|
unkown
|
page read and write
|
|
|
|
73BB000
|
unkown
|
page read and write
|
|
|
|
2C7000
|
heap default
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page read and write
|
|
|
|
E56000
|
unkown image
|
page readonly
|
|
|
|
729A000
|
unkown
|
page read and write
|
|
|
|
D00000
|
unkown
|
page execute and read and write
|
|
|
|
2A00000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
301E000
|
unkown
|
page read and write
|
|
|
|
24A000
|
heap default
|
page read and write
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
24F0000
|
unkown image
|
page readonly
|
|
|
|
3C7000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
74D3000
|
heap private
|
page read and write
|
|
|
|
9EA000
|
unkown
|
page read and write
|
|
|
|
87000
|
heap default
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown image
|
page execute read
|
|
|
|
4DD0000
|
heap private
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
4D30000
|
unkown image
|
page readonly
|
|
|
|
6D40000
|
unkown
|
page read and write
|
|
|
|
76CF000
|
unkown
|
page read and write
|
|
|
|
2F78000
|
unkown
|
page read and write
|
|
|
|
B61000
|
unkown
|
page read and write
|
|
|
|
1160000
|
unkown image
|
page execute and read and write
|
|
|
|
2646000
|
unkown
|
page read and write
|
|
|
|
B67000
|
unkown
|
page read and write
|
|
|
|
4D70000
|
unkown image
|
page readonly
|
|
|
|
E56000
|
unkown image
|
page readonly
|
|
|
|
25C3000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
263C000
|
unkown
|
page read and write
|
|
|
|
9705000
|
heap private
|
page read and write
|
|
|
|
C6E000
|
unkown
|
page read and write
|
|
|
|
460B000
|
unkown
|
page read and write
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
74B4000
|
heap private
|
page read and write
|
|
|
|
2923000
|
unkown
|
page read and write
|
|
|
|
532E000
|
unkown
|
page read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
7779000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
A00000
|
unkown
|
page execute and read and write
|
|
|
|
4BB0000
|
heap private
|
page read and write
|
|
|
|
4B00000
|
unkown image
|
page readonly
|
|
|
|
2A10000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown image
|
page readonly
|
|
|
|
8320000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
728E000
|
unkown
|
page read and write
|
|
|
|
2646000
|
unkown
|
page read and write
|
|
|
|
9ED000
|
unkown
|
page read and write
|
|
|
|
83E4000
|
unkown
|
page read and write
|
|
|
|
1BE0000
|
unkown image
|
page readonly
|
|
|
|
C6000
|
heap default
|
page read and write
|
|
|
|
73B9000
|
unkown
|
page read and write
|
|
|
|
4260000
|
heap private
|
page read and write
|
|
|
|
6A60000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
41F8000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
3D4B000
|
unkown
|
page read and write
|
|
|
|
29B000
|
heap default
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
5270000
|
unkown
|
page execute read
|
|
|
|
9463000
|
unkown
|
page read and write
|
|
|
|
220000
|
unkown image
|
page readonly
|
|
|
|
1AD000
|
unkown
|
page execute and read and write
|
|
|
|
8446000
|
unkown
|
page read and write
|
|
|
|
B67000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page execute and read and write
|
|
|
|
15C000
|
unkown
|
page read and write
|
|
|
|
4D40000
|
unkown image
|
page readonly
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
30E0000
|
unkown image
|
page readonly
|
|
|
|
30A8000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
7CFE000
|
unkown
|
page read and write
|
|
|
|
45A1000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
2A00000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
8320000
|
unkown
|
page read and write
|
|
|
|
834000
|
heap default
|
page read and write
|
|
|
|
5410000
|
heap private
|
page read and write
|
|
|
|
2A80000
|
unkown
|
page read and write
|
|
|
|
810000
|
heap default
|
page read and write
|
|
|
|
2646000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page read and write
|
|
|
|
44E7000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
unkown
|
page read and write
|
|
|
|
30F0000
|
unkown image
|
page readonly
|
|
|
|
4150000
|
unkown image
|
page readonly
|
|
|
|
5270000
|
unkown
|
page execute read
|
|
|
|
27C0000
|
unkown
|
page read and write
|
|
|
|
6D40000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
110000
|
unkown
|
page read and write
|
|
|
|
9705000
|
heap private
|
page read and write
|
|
|
|
8B3E000
|
unkown
|
page read and write
|
|
|
|
94E3000
|
unkown
|
page read and write
|
|
|
|
6C62000
|
unkown
|
page read and write
|
|
|
|
8B3E000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
E4D000
|
unkown image
|
page readonly
|
|
|
|
80000
|
heap default
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
E17000
|
unkown
|
page execute and read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
3D4B000
|
unkown
|
page read and write
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
4C7A000
|
heap private
|
page read and write
|
|
|
|
79F0000
|
heap private
|
page read and write
|
|
|
|
819000
|
unkown
|
page read and write
|
|
|
|
4AF0000
|
unkown image
|
page readonly
|
|
|
|
83E4000
|
unkown
|
page read and write
|
|
|
|
2942000
|
unkown
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
4160000
|
unkown
|
page read and write
|
|
|
|
20DA000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
230000
|
heap default
|
page read and write
|
|
|
|
782F000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
2EC1000
|
unkown
|
page read and write
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown image
|
page readonly
|
|
|
|
4D20000
|
unkown
|
page execute and read and write
|
|
|
|
4AAD000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
3D40000
|
unkown
|
page read and write
|
|
|
|
D10000
|
unkown
|
page execute and read and write
|
|
|
|
2F78000
|
unkown
|
page read and write
|
|
|
|
6D48000
|
unkown
|
page read and write
|
|
|
|
43B0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7B4B000
|
unkown
|
page read and write
|
|
|
|
CD000
|
heap default
|
page read and write
|
|
|
|
E4000
|
heap private
|
page read and write
|
|
|
|
81AE000
|
unkown
|
page read and write
|
|
|
|
3C8000
|
unkown
|
page read and write
|
|
|
|
2CC7000
|
unkown image
|
page readonly
|
|
|
|
5390000
|
heap private
|
page read and write
|
|
|
|
4300000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown image
|
page readonly
|
|
|
|
782F000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown image
|
page execute read
|
|
|
|
44E7000
|
unkown
|
page read and write
|
|
|
|
230000
|
heap default
|
page read and write
|
|
|
|
9700000
|
heap private
|
page read and write
|
|
|
|
2AA0000
|
unkown
|
page read and write
|
|
|
|
2550000
|
unkown
|
page read and write
|
|
|
|
9EA000
|
unkown
|
page read and write
|
|
|
|
E0000
|
heap private
|
page read and write
|
|
|
|
839000
|
heap default
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown
|
page read and write
|
|
|
|
9700000
|
heap private
|
page read and write
|
|
|
|
4D50000
|
unkown image
|
page readonly
|
|
|
|
140000
|
unkown image
|
page readonly
|
|
|
|
3D50000
|
unkown
|
page read and write
|
|
|
|
81AE000
|
unkown
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
39000
|
unkown image
|
page execute and read and write
|
|
|
|
B67000
|
unkown
|
page read and write
|
|
|
|
29C0000
|
unkown
|
page read and write
|
|
|
|
4650000
|
unkown image
|
page readonly
|
|
|
|
4AAD000
|
unkown
|
page read and write
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown image
|
page execute read
|
|
|
|
31D000
|
heap default
|
page read and write
|
|
|
|
45CB000
|
unkown
|
page read and write
|
|
|
|
24A000
|
heap default
|
page read and write
|
|
|
|
5390000
|
heap private
|
page read and write
|
|
|
|
BA0000
|
unkown
|
page execute and read and write
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
79F0000
|
heap private
|
page read and write
|
|
|
|
7D20000
|
heap private
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
3D4B000
|
unkown
|
page read and write
|
|
|
|
8B3E000
|
unkown
|
page read and write
|
|
|
|
41F0000
|
unkown
|
page read and write
|
|
|
|
1B60000
|
heap private
|
page read and write
|
|
|
|
8355000
|
unkown
|
page read and write
|
|
|
|
1CE000
|
unkown
|
page read and write
|
|
|
|
2777000
|
unkown image
|
page read and write
|
|
|
|
20B6000
|
unkown
|
page read and write
|
|
|
|
36F000
|
unkown
|
page read and write
|
|
|
|
31D000
|
heap default
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
237000
|
heap default
|
page read and write
|
|
|
|
2121000
|
unkown image
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
732B000
|
unkown
|
page read and write
|
|
|
|
729A000
|
unkown
|
page read and write
|
|
|
|
744D000
|
unkown
|
page read and write
|
|
|
|
74D3000
|
heap private
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
4C70000
|
heap private
|
page read and write
|
|
|
|
45CB000
|
unkown
|
page read and write
|
|
|
|
E52000
|
unkown image
|
page write copy
|
|
|
|
4575000
|
unkown
|
page read and write
|
|
|
|
4B9D000
|
unkown
|
page read and write
|
|
|
|
7B4B000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
237000
|
heap default
|
page read and write
|
|
|
|
6BBE000
|
unkown
|
page read and write
|
|
|
|
8320000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page read and write
|
|
|
|
4C70000
|
heap private
|
page read and write
|
|
|
|
36B000
|
unkown
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
5360000
|
unkown image
|
page read and write
|
|
|
|
2942000
|
unkown
|
page read and write
|
|
|
|
B64000
|
unkown
|
page read and write
|
|
|
|
E0000
|
heap private
|
page read and write
|
|
|
|
29B000
|
heap default
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4BB0000
|
heap private
|
page read and write
|
|
|
|
9ED000
|
unkown
|
page read and write
|
|
|
|
1CE000
|
unkown
|
page read and write
|
|
|
|
94E3000
|
unkown
|
page read and write
|
|
|
|
B61000
|
unkown
|
page read and write
|
|
|
|
7BD0000
|
heap private
|
page read and write
|
|
|
|
93A0000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
32A9000
|
heap private
|
page read and write
|
|
|
|
DDE000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
4B9D000
|
unkown
|
page read and write
|
|
|
|
44E7000
|
unkown
|
page read and write
|
|
|
|
B61000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
4C7A000
|
heap private
|
page read and write
|
|
|
|
29C0000
|
unkown
|
page read and write
|
|
|
|
2560000
|
unkown
|
page read and write
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
460000
|
heap default
|
page read and write
|
|
|
|
B67000
|
unkown
|
page read and write
|
|
|
|
1B65000
|
heap private
|
page read and write
|
|
|
|
1B65000
|
heap private
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
834B000
|
unkown
|
page read and write
|
|
|
|
7BD0000
|
heap private
|
page read and write
|
|
|
|
2111000
|
unkown image
|
page read and write
|
|
|
|
73B9000
|
unkown
|
page read and write
|
|
|
|
2AE0000
|
unkown image
|
page readonly
|
|
|
|
3C2000
|
heap default
|
page read and write
|
|
|
|
32A9000
|
heap private
|
page read and write
|
|
|
|
3B4000
|
heap default
|
page read and write
|
|
|
|
2740000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page read and write
|
|
|
|
8B3E000
|
unkown
|
page read and write
|
|
|
|
6C62000
|
unkown
|
page read and write
|
|
|
|
3E50000
|
unkown image
|
page readonly
|
|
|
|
94A0000
|
unkown
|
page read and write
|
|
|
|
729A000
|
unkown
|
page read and write
|
|
|
|
7B50000
|
heap private
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
73BB000
|
unkown
|
page read and write
|
|
|
|
20B6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
36F000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
728E000
|
unkown
|
page read and write
|
|
|
|
4D60000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
44E7000
|
unkown
|
page read and write
|
|
|
|
4C7A000
|
heap private
|
page read and write
|
|
|
|
7048000
|
unkown
|
page read and write
|
|
|
|
9EA000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
1B50000
|
unkown
|
page read and write
|
|
|
|
D0000
|
unkown image
|
page readonly
|
|
|
|
2A80000
|
unkown
|
page read and write
|
|
|
|
1B83000
|
heap private
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
3CA0000
|
unkown
|
page read and write
|
|
|
|
3DF8000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
4D30000
|
unkown image
|
page readonly
|
|
|
|
309E000
|
unkown
|
page read and write
|
|
|
|
A10000
|
unkown
|
page read and write
|
|
|
|
7320000
|
unkown
|
page read and write
|
|
|
|
1D7000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown image
|
page readonly
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
45BE000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
438E000
|
unkown
|
page read and write
|
|
|
|
7B40000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown image
|
page readonly
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown
|
page read and write
|
|
|
|
83EC000
|
unkown
|
page read and write
|
|
|
|
4D70000
|
unkown image
|
page readonly
|
|
|
|
371000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
9ED000
|
unkown
|
page read and write
|
|
|
|
93A0000
|
unkown
|
page read and write
|
|
|
|
2BD000
|
unkown
|
page read and write
|
|
|
|
32A5000
|
heap private
|
page read and write
|
|
|
|
B64000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown
|
page read and write
|
|
|
|
D0000
|
unkown image
|
page readonly
|
|
|
|
5390000
|
heap private
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
1D7000
|
unkown
|
page read and write
|
|
|
|
687000
|
heap default
|
page read and write
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
45BE000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
BD000
|
heap default
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page read and write
|
|
|
|
B04000
|
unkown
|
page read and write
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
2C7000
|
heap default
|
page read and write
|
|
|
|
41F0000
|
unkown
|
page read and write
|
|
|
|
301E000
|
unkown
|
page read and write
|
|
|
|
2A20000
|
unkown
|
page read and write
|
|
|
|
4AC0000
|
unkown
|
page read and write
|
|
|
|
2A10000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
7320000
|
unkown
|
page read and write
|
|
|
|
C90000
|
unkown
|
page execute and read and write
|
|
|
|
3D90000
|
unkown
|
page read and write
|
|
|
|
7048000
|
unkown
|
page read and write
|
|
|
|
2923000
|
unkown
|
page read and write
|
|
|
|
2A60000
|
unkown
|
page read and write
|
|
|
|
43A0000
|
unkown image
|
page readonly
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
2CC7000
|
unkown image
|
page readonly
|
|
|
|
4E60000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
74B4000
|
heap private
|
page read and write
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
32AE000
|
heap private
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
3D90000
|
unkown
|
page read and write
|
|
|
|
9EA000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
E56000
|
unkown image
|
page readonly
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
9723000
|
heap private
|
page read and write
|
|
|
|
1FC000
|
unkown
|
page read and write
|
|
|
|
449C000
|
unkown
|
page read and write
|
|
|
|
4D80000
|
unkown image
|
page readonly
|
|
|
|
7BD0000
|
heap private
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page read and write
|
|
|
|
9ED000
|
unkown
|
page read and write
|
|
|
|
30E0000
|
unkown image
|
page readonly
|
|
|
|
B01000
|
unkown
|
page read and write
|
|
|
|
534000
|
unkown
|
page read and write
|
|
|
|
1BE0000
|
unkown image
|
page readonly
|
|
|
|
27A0000
|
unkown image
|
page readonly
|
|
|
|
4575000
|
unkown
|
page read and write
|
|
|
|
2F78000
|
unkown
|
page read and write
|
|
|
|
1FD0000
|
unkown image
|
page readonly
|
|
|
|
5C0000
|
unkown image
|
page readonly
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
1B65000
|
heap private
|
page read and write
|
|
|
|
9ED000
|
unkown
|
page read and write
|
|
|
|
9723000
|
heap private
|
page read and write
|
|
|
|
B67000
|
unkown
|
page read and write
|
|
|
|
70E8000
|
unkown
|
page read and write
|
|
|
|
30C0000
|
unkown
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
4DD0000
|
heap private
|
page read and write
|
|
|
|
220000
|
unkown image
|
page readonly
|
|
|
|
34D000
|
unkown
|
page read and write
|
|
|
|
43B0000
|
heap private
|
page read and write
|
|
|
|
2F98000
|
unkown
|
page read and write
|
|
|
|
4650000
|
unkown image
|
page readonly
|
|
|
|
2AA0000
|
unkown
|
page read and write
|
|
|
|
2AA0000
|
unkown
|
page read and write
|
|
|
|
2F98000
|
unkown
|
page read and write
|
|
|
|
4160000
|
unkown
|
page read and write
|
|
|
|
433E000
|
unkown
|
page read and write
|
|
|
|
45A1000
|
unkown
|
page read and write
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
4E60000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
834B000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
2500000
|
unkown image
|
page readonly
|
|
|
|
8355000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
456F000
|
unkown
|
page read and write
|
|
|
|
3D50000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
1169000
|
unkown image
|
page execute and read and write
|
|
|
|
30E0000
|
unkown image
|
page readonly
|
|
|
|
2111000
|
unkown image
|
page read and write
|
|
|
|
8446000
|
unkown
|
page read and write
|
|
|
|
457A000
|
unkown
|
page read and write
|
|
|
|
456F000
|
unkown
|
page read and write
|
|
|
|
460B000
|
unkown
|
page read and write
|
|
|
|
4D60000
|
unkown image
|
page readonly
|
|
|
|
4160000
|
unkown
|
page read and write
|
|
|
|
257A000
|
unkown image
|
page read and write
|
|
|
|
94E3000
|
unkown
|
page read and write
|
|
|
|
3CC0000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
4D80000
|
unkown image
|
page readonly
|
|
|
|
9ED000
|
unkown
|
page read and write
|
|
|
|
30A8000
|
unkown
|
page read and write
|
|
|
|
1B83000
|
heap private
|
page read and write
|
|
|
|
3DF8000
|
unkown
|
page read and write
|
|
|
|
32AE000
|
heap private
|
page read and write
|
|
|
|
E4D000
|
unkown image
|
page readonly
|
|
|
|
24A000
|
heap default
|
page read and write
|
|
|
|
4450000
|
unkown
|
page read and write
|
|
|
|
457A000
|
unkown
|
page read and write
|
|
|
|
B64000
|
unkown
|
page read and write
|
|
|
|
4C7A000
|
heap private
|
page read and write
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
5360000
|
unkown image
|
page read and write
|
|
|
|
29D0000
|
unkown
|
page read and write
|
|
|
|
9594000
|
unkown image
|
page execute and read and write
|
|
|
|
45B4000
|
unkown
|
page read and write
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
6C6A000
|
unkown
|
page read and write
|
|
|
|
4D20000
|
unkown
|
page execute and read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1CF000
|
unkown
|
page read and write
|
|
|
|
C94000
|
unkown
|
page execute and read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
732B000
|
unkown
|
page read and write
|
|
|
|
B91000
|
unkown
|
page execute and read and write
|
|
|
|
30F0000
|
unkown image
|
page readonly
|
|
|
|
34E000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
540000
|
unkown
|
page read and write
|
|
|
|
8355000
|
unkown
|
page read and write
|
|
|
|
74B0000
|
heap private
|
page read and write
|
|
|
|
6D40000
|
unkown
|
page read and write
|
|
|
|
2AA0000
|
unkown
|
page read and write
|
|
|
|
6D4000
|
unkown image
|
page execute and read and write
|
|
|
|
4308000
|
unkown
|
page read and write
|
|
|
|
397000
|
heap default
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
4D70000
|
unkown image
|
page readonly
|
|
|
|
74B4000
|
heap private
|
page read and write
|
|
|
|
23D000
|
heap default
|
page read and write
|
|
|
|
49D000
|
unkown
|
page execute and read and write
|
|
|
|
7779000
|
unkown
|
page read and write
|
|
|
|
2131000
|
unkown image
|
page read and write
|
|
|
|
6A60000
|
heap private
|
page read and write
|
|
|
|
43A0000
|
unkown image
|
page readonly
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
34E000
|
unkown
|
page read and write
|
|
|
|
2F98000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
2A80000
|
unkown
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
8B20000
|
unkown
|
page read and write
|
|
|
|
531000
|
unkown
|
page read and write
|
|
|
|
7839000
|
unkown
|
page read and write
|
|
|
|
E80000
|
unkown
|
page execute and read and write
|
|
|
|
2760000
|
unkown image
|
page readonly
|
|
|
|
45CB000
|
unkown
|
page read and write
|
|
|
|
4450000
|
unkown
|
page read and write
|
|
|
|
93E4000
|
unkown
|
page read and write
|
|
|
|
2121000
|
unkown image
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
3CA0000
|
unkown
|
page read and write
|
|
|
|
98A000
|
unkown
|
page read and write
|
|
|
|
45D6000
|
unkown
|
page read and write
|
|
|
|
3E50000
|
unkown image
|
page readonly
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
36F000
|
unkown
|
page read and write
|
|
|
|
8446000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
heap private
|
page read and write
|
|
|
|
5C0000
|
unkown image
|
page readonly
|
|
|
|
2533000
|
unkown
|
page read and write
|
|
|
|
4E0000
|
unkown image
|
page readonly
|
|
|
|
309E000
|
unkown
|
page read and write
|
|
|
|
20DA000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
E20000
|
unkown
|
page execute and read and write
|
|
|
|
910000
|
unkown
|
page execute and read and write
|
|
|
|
556F000
|
unkown
|
page read and write
|
|
|
|
41F0000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown
|
page read and write
|
|
|
|
4D70000
|
unkown image
|
page readonly
|
|
|
|
371000
|
unkown
|
page read and write
|
|
|
|
4D80000
|
unkown image
|
page readonly
|
|
|
|
8374000
|
unkown
|
page read and write
|
|
|
|
25C3000
|
unkown
|
page read and write
|
|
|
|
B64000
|
unkown
|
page read and write
|
|
|
|
380000
|
heap private
|
page read and write
|
|
|
|
4150000
|
unkown image
|
page readonly
|
|
|
|
6BBE000
|
unkown
|
page read and write
|
|
|
|
31D000
|
heap default
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
8380000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
heap private
|
page read and write
|
|
|
|
7B40000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
5360000
|
unkown image
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
7638000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
2540000
|
unkown
|
page read and write
|
|
|
|
8720000
|
unkown
|
page read and write
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
45B4000
|
unkown
|
page read and write
|
|
|
|
A00000
|
unkown
|
page read and write
|
|
|
|
3E50000
|
unkown image
|
page readonly
|
|
|
|
310000
|
heap private
|
page read and write
|
|
|
|
910000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
74D3000
|
heap private
|
page read and write
|
|
|
|
30F0000
|
unkown image
|
page readonly
|
|
|
|
7B40000
|
unkown
|
page read and write
|
|
|
|
73B9000
|
unkown
|
page read and write
|
|
|
|
95F000
|
unkown
|
page read and write
|
|
|
|
B64000
|
unkown
|
page read and write
|
|
|
|
3CD000
|
unkown
|
page read and write
|
|
|
|
6C62000
|
unkown
|
page read and write
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
3C90000
|
unkown image
|
page read and write
|
|
|
|
9463000
|
unkown
|
page read and write
|
|
|
|
6E50000
|
heap private
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
2533000
|
unkown
|
page read and write
|
|
|
|
744D000
|
unkown
|
page read and write
|
|
|
|
29B000
|
heap default
|
page read and write
|
|
|
|
74B4000
|
heap private
|
page read and write
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
45CF000
|
unkown
|
page read and write
|
|
|
|
30D0000
|
unkown image
|
page readonly
|
|
|
|
45D6000
|
unkown
|
page read and write
|
|
|
|
6A4000
|
heap default
|
page read and write
|
|
|
|
38E000
|
unkown
|
page read and write
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
25C3000
|
unkown
|
page read and write
|
|
|
|
415000
|
heap default
|
page read and write
|
|
|
|
3DF8000
|
unkown
|
page read and write
|
|
|
|
1CE000
|
unkown
|
page read and write
|
|
|
|
6C62000
|
unkown
|
page read and write
|
|
|
|
9EA000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
32AE000
|
heap private
|
page read and write
|
|
|
|
98D000
|
unkown
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page read and write
|
|
|
|
7D20000
|
heap private
|
page read and write
|
|
|
|
2540000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
heap default
|
page read and write
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
2121000
|
unkown image
|
page read and write
|
|
|
|
29F0000
|
unkown
|
page read and write
|
|
|
|
4300000
|
unkown
|
page read and write
|
|
|
|
2500000
|
unkown image
|
page readonly
|
|
|
|
4300000
|
unkown
|
page read and write
|
|
|
|
7638000
|
unkown
|
page read and write
|
|
|
|
556F000
|
unkown
|
page read and write
|
|
|
|
4E5E000
|
unkown
|
page read and write
|
|
|
|
8404000
|
unkown
|
page read and write
|
|
|
|
449C000
|
unkown
|
page read and write
|
|
|
|
2A70000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page execute and read and write
|
|
|
|
309E000
|
unkown
|
page read and write
|
|
|
|
73BB000
|
unkown
|
page read and write
|
|
|
|
3BC000
|
unkown
|
page read and write
|
|
|
|
460B000
|
unkown
|
page read and write
|
|
|
|
30A8000
|
unkown
|
page read and write
|
|
|
|
74B0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7839000
|
unkown
|
page read and write
|
|
|
|
1B83000
|
heap private
|
page read and write
|
|
|
|
3D40000
|
unkown
|
page read and write
|
|
|
|
2AE0000
|
unkown image
|
page readonly
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
3D50000
|
unkown
|
page read and write
|
|
|
|
45B4000
|
unkown
|
page read and write
|
|
|
|
4D50000
|
unkown image
|
page readonly
|
|
|
|
4C30000
|
unkown
|
page read and write
|
|
|
|
5270000
|
unkown
|
page execute read
|
|
|
|
301E000
|
unkown
|
page read and write
|
|
|
|
7CFE000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
6D48000
|
unkown
|
page read and write
|
|
|
|
9EA000
|
unkown
|
page read and write
|
|
|
|
E41000
|
unkown image
|
page execute read
|
|
|
|
31D000
|
heap default
|
page read and write
|
|
|
|
E90000
|
unkown
|
page execute and read and write
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
76CF000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
45D6000
|
unkown
|
page read and write
|
|
|
|
4E5E000
|
unkown
|
page read and write
|
|
|
|
A6E000
|
unkown
|
page read and write
|
|
|
|
7CFE000
|
unkown
|
page read and write
|
|
|
|
438E000
|
unkown
|
page read and write
|
|
|
|
9700000
|
heap private
|
page read and write
|
|
|
|
9362000
|
unkown
|
page read and write
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
1BE0000
|
unkown image
|
page readonly
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
2131000
|
unkown image
|
page read and write
|
|
|
|
6E50000
|
heap private
|
page read and write
|
|
|
|
2A30000
|
unkown
|
page read and write
|
|
|
|
744D000
|
unkown
|
page read and write
|
|
|
|
5E0000
|
heap default
|
page read and write
|
|
|
|
728E000
|
unkown
|
page read and write
|
|
|
|
32A9000
|
heap private
|
page read and write
|
|
|
|
45BE000
|
unkown
|
page read and write
|
|
|
|
3C90000
|
unkown image
|
page read and write
|
|
|
|
1D7000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
B61000
|
unkown
|
page read and write
|
|
|
|
E55000
|
unkown image
|
page read and write
|
|
|
|
18C000
|
unkown
|
page read and write
|
|
|
|
449C000
|
unkown
|
page read and write
|
|
|
|
2F78000
|
unkown
|
page read and write
|
|
|
|
2500000
|
unkown image
|
page readonly
|
|
|
|
2CC7000
|
unkown image
|
page readonly
|
|
|
|
2A50000
|
unkown
|
page read and write
|
|
|
|
4D60000
|
unkown image
|
page readonly
|
|
|
|
4B00000
|
unkown image
|
page readonly
|
|
|
|
74D3000
|
heap private
|
page read and write
|
|
|
|
70E8000
|
unkown
|
page read and write
|
|
|
|
24F0000
|
unkown image
|
page readonly
|
|
|
|
83EC000
|
unkown
|
page read and write
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
A17000
|
unkown
|
page execute and read and write
|
|
|
|
7BD0000
|
heap private
|
page read and write
|
|
|
|
1160000
|
unkown image
|
page execute and read and write
|
|
|
|
8374000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
3CD000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
8380000
|
unkown
|
page read and write
|
|
|
|
8320000
|
unkown
|
page read and write
|
|
|
|
93E4000
|
unkown
|
page read and write
|
|
|
|
74B0000
|
heap private
|
page read and write
|
|
|
|
2550000
|
unkown
|
page read and write
|
|
|
|
220000
|
unkown image
|
page readonly
|
|
|
|
2923000
|
unkown
|
page read and write
|
|
|
|
7048000
|
unkown
|
page read and write
|
|
|
|
20D000
|
unkown
|
page read and write
|
|
|
|
B70000
|
unkown
|
page read and write
|
|
|
|
94A0000
|
unkown
|
page read and write
|
|
|
|
834B000
|
unkown
|
page read and write
|
|
|
|
460B000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown
|
page execute and read and write
|
|
|
|
32A9000
|
heap private
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
230000
|
heap default
|
page read and write
|
|
|
|
34A000
|
unkown
|
page read and write
|
|
|
|
2AE0000
|
unkown image
|
page readonly
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
9551000
|
unkown image
|
page execute and read and write
|
|
|
|
5410000
|
heap private
|
page read and write
|
|
|
|
F8F000
|
unkown
|
page read and write
|
|
|
|
B2F000
|
unkown
|
page read and write
|
|
|
|
B67000
|
unkown
|
page read and write
|
|
|
|
4308000
|
unkown
|
page read and write
|
|
|
|
8720000
|
unkown
|
page read and write
|
|
|
|
DD000
|
unkown
|
page read and write
|
|
|
|
2540000
|
unkown
|
page read and write
|
|
|
|
C00000
|
unkown
|
page execute and read and write
|
|
|
|
7839000
|
unkown
|
page read and write
|
|
|
|
371000
|
unkown
|
page read and write
|
|
|
|
3C7000
|
unkown
|
page read and write
|
|
|
|
20DA000
|
unkown
|
page read and write
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
263C000
|
unkown
|
page read and write
|
|
|
|
7D20000
|
heap private
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
6D48000
|
unkown
|
page read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
E0000
|
heap private
|
page read and write
|
|
|
|
41F8000
|
unkown
|
page read and write
|
|
|
|
280000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
243000
|
heap default
|
page read and write
|
|
|
|
140000
|
unkown image
|
page readonly
|
|
|
|
7320000
|
unkown
|
page read and write
|
|
|
|
9520000
|
unkown image
|
page execute and read and write
|
|
|
|
447A000
|
unkown
|
page read and write
|
|
|
|
7EFD0000
|
unkown image
|
page readonly
|
|
|
|
230000
|
heap default
|
page read and write
|
|
|
|
4308000
|
unkown
|
page read and write
|
|
|
|
B61000
|
unkown
|
page read and write
|
|
|
|
2740000
|
unkown image
|
page readonly
|
|
|
|
309E000
|
unkown
|
page read and write
|
|
|
|
3AE000
|
unkown
|
page read and write
|
|
|
|
2EC1000
|
unkown
|
page read and write
|
|
|
|
3E50000
|
unkown image
|
page readonly
|
|
|
|
7CFE000
|
unkown
|
page read and write
|
|
|
|
2131000
|
unkown image
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
243000
|
heap default
|
page read and write
|
|
|
|
36B000
|
unkown
|
page read and write
|
|
|
|
B07000
|
unkown
|
page read and write
|
|
|
|
3CC0000
|
unkown image
|
page readonly
|
|
|
|
2EC1000
|
unkown
|
page read and write
|
|
|
|
20B6000
|
unkown
|
page read and write
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
93A0000
|
unkown
|
page read and write
|
|
|
|
4308000
|
unkown
|
page read and write
|
|
|
|
21BF000
|
unkown
|
page read and write
|
|
|
|
1CE000
|
unkown
|
page read and write
|
|
|
|
83C7000
|
unkown
|
page read and write
|
|
|
|
9463000
|
unkown
|
page read and write
|
|
|
|
2550000
|
unkown
|
page read and write
|
|
|
|
96D000
|
unkown
|
page execute and read and write
|
|
|
|
4DB1000
|
unkown image
|
page read and write
|
|
|
|
729A000
|
unkown
|
page read and write
|
|
|
|
31FF000
|
unkown
|
page read and write
|
|
|
|
A90000
|
unkown
|
page execute and read and write
|
|
|
|
36F000
|
unkown
|
page read and write
|
|
|
|
43A0000
|
unkown image
|
page readonly
|
|
|
|
7EFC0000
|
unkown image
|
page readonly
|
|
|
|
4AF0000
|
unkown image
|
page readonly
|
|
|
|
3BE000
|
unkown
|
page read and write
|
|
|
|
4DB1000
|
unkown image
|
page read and write
|
|
|
|
8404000
|
unkown
|
page read and write
|
|
|
|
2A80000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
2131000
|
unkown image
|
page read and write
|
|
|
|
744D000
|
unkown
|
page read and write
|
|
|
|
81AE000
|
unkown
|
page read and write
|
|
|
|
3C90000
|
unkown image
|
page read and write
|
|
|
|
4265000
|
heap private
|
page read and write
|
|
|
|
2520000
|
unkown
|
page read and write
|
|
|
|
2750000
|
unkown
|
page read and write
|
|
|
|
8B20000
|
unkown
|
page read and write
|
|
|
|
2A00000
|
unkown
|
page read and write
|
|
|
|
29C0000
|
unkown
|
page read and write
|
|
|
|
34E000
|
unkown
|
page read and write
|
|
|
|
E4D000
|
unkown image
|
page readonly
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
83E4000
|
unkown
|
page read and write
|
|
|
|
1110000
|
unkown image
|
page readonly
|
|
|
|
7779000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
1B50000
|
unkown
|
page read and write
|
|
|
|
4AF0000
|
unkown image
|
page readonly
|
|
|
|
456F000
|
unkown
|
page read and write
|
|
|
|
9362000
|
unkown
|
page read and write
|
|
|
|
29E0000
|
unkown
|
page read and write
|
|
|
|
B7F000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
454000
|
heap private
|
page read and write
|
|
|
|
79F0000
|
heap private
|
page read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
4DB1000
|
unkown image
|
page read and write
|
|
|
|
782F000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown
|
page execute and read and write
|
|
|
|
537000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page execute and read and write
|
|
|
|
4265000
|
heap private
|
page read and write
|
|
|
|
237000
|
heap default
|
page read and write
|
|
|
|
532E000
|
unkown
|
page read and write
|
|
|
|
7638000
|
unkown
|
page read and write
|
|
|
|
CA0000
|
unkown
|
page execute and read and write
|
|
|
|
6C6A000
|
unkown
|
page read and write
|
|
|
|
7E1E000
|
unkown
|
page read and write
|
|
|
|
D20000
|
unkown
|
page execute and read and write
|
|
|
|
5B0000
|
unkown image
|
page readonly
|
|
|
|
960000
|
unkown
|
page execute and read and write
|
|
|
|
2760000
|
unkown image
|
page readonly
|
|
|
|
4D20000
|
unkown
|
page execute and read and write
|
|
|
|
E4D000
|
unkown image
|
page readonly
|
|
|
|
2533000
|
unkown
|
page read and write
|
|
|
|
E00000
|
unkown
|
page execute and read and write
|
|
|
|
7EFB0000
|
unkown image
|
page readonly
|
|
|
|
8404000
|
unkown
|
page read and write
|
|
|
|
2520000
|
unkown
|
page read and write
|
|
|
|
7EFDF000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown image
|
page readonly
|
|
|
|
2111000
|
unkown image
|
page read and write
|
|
|
|
45CB000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
2C7000
|
heap default
|
page read and write
|
|
|
|
7638000
|
unkown
|
page read and write
|
|
|
|
50000
|
unkown image
|
page readonly
|
|
|
|
4B00000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown image
|
page readonly
|
|
|
|
20DA000
|
unkown
|
page read and write
|
|
|
|
263C000
|
unkown
|
page read and write
|
|
|
|
9723000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
8EF000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
243000
|
heap default
|
page read and write
|
|
|
|
32AE000
|
heap private
|
page read and write
|
|
|
|
45BE000
|
unkown
|
page read and write
|
|
|
|
27A0000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown image
|
page readonly
|
|
|
|
34E000
|
unkown
|
page read and write
|
|
|
|
3D40000
|
unkown
|
page read and write
|
|
|
|
4265000
|
heap private
|
page read and write
|
|
|
|
3D90000
|
unkown
|
page read and write
|
|
|
|
36B000
|
unkown
|
page read and write
|
|
|
|
83E4000
|
unkown
|
page read and write
|
|
|
|
4C70000
|
heap private
|
page read and write
|
|
|
|
8374000
|
unkown
|
page read and write
|
|
|
|
2AE0000
|
unkown image
|
page readonly
|
|
|
|
45A1000
|
unkown
|
page read and write
|
|
|
|
4260000
|
heap private
|
page read and write
|
|
|
|
3D40000
|
unkown
|
page read and write
|
|
|
|
6BBE000
|
unkown
|
page read and write
|
|
|
|
4E60000
|
unkown
|
page read and write
|
|
|
|
E56000
|
unkown image
|
page readonly
|
|
|
|
2942000
|
unkown
|
page read and write
|
|
|
|
580000
|
heap private
|
page read and write
|
|
|
|
2990000
|
unkown
|
page read and write
|
|
|
|
2111000
|
unkown image
|
page read and write
|
|
|
|
4450000
|
unkown
|
page read and write
|
|
|
|
140000
|
unkown image
|
page readonly
|
|
|
|
556F000
|
unkown
|
page read and write
|
|
|
|
532E000
|
unkown
|
page read and write
|
|
|
|
45CF000
|
unkown
|
page read and write
|
|
|
|
24F0000
|
unkown image
|
page readonly
|
|
|
|
4E5E000
|
unkown
|
page read and write
|
|
|
|
41F8000
|
unkown
|
page read and write
|
|
|
|
BA0000
|
unkown
|
page execute and read and write
|
|
|
|
D6F000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown
|
page read and write
|
|
|
|
3CA0000
|
unkown
|
page read and write
|
|
|
|
6A60000
|
heap private
|
page read and write
|
|
|
|
4B9D000
|
unkown
|
page read and write
|
|
|
|
4D20000
|
unkown
|
page execute and read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
390000
|
heap default
|
page read and write
|
|
|
|
21BF000
|
unkown
|
page read and write
|
|
|
|
4450000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
9594000
|
unkown image
|
page execute and read and write
|
|
|
|
B61000
|
unkown
|
page read and write
|
|
|
|
3C90000
|
unkown image
|
page read and write
|
|
|
|
2520000
|
unkown
|
page read and write
|
|
|
|
70E8000
|
unkown
|
page read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
5CF000
|
unkown
|
page read and write
|
|
|
|
2A50000
|
unkown
|
page read and write
|
|
|
|
45CF000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
4575000
|
unkown
|
page read and write
|
|
|
|
447A000
|
unkown
|
page read and write
|
|
|
|
1B60000
|
heap private
|
page read and write
|
|
|
|
7839000
|
unkown
|
page read and write
|
|
|
|
3D50000
|
unkown
|
page read and write
|
|
|
|
32A5000
|
heap private
|
page read and write
|
|
|
|
29B000
|
heap default
|
page read and write
|
|
|
|
2A90000
|
unkown
|
page read and write
|
|
|
|
2740000
|
unkown image
|
page readonly
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
4D50000
|
unkown image
|
page readonly
|
|
|
|
32A0000
|
heap private
|
page read and write
|
|
|
|
45B4000
|
unkown
|
page read and write
|
|
|
|
27D000
|
unkown
|
page execute and read and write
|
|
|
|
81E000
|
unkown
|
page read and write
|
|
|
|
79F0000
|
heap private
|
page read and write
|
|
|
|
4E5E000
|
unkown
|
page read and write
|
|
|
|
8404000
|
unkown
|
page read and write
|
|
|
|
73BB000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
A60000
|
unkown
|
page read and write
|
|
|
|
29D0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
4E60000
|
unkown
|
page read and write
|
|
|
|
5410000
|
heap private
|
page read and write
|
|
|
|
29C0000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
7E1E000
|
unkown
|
page read and write
|
|
|
|
83C7000
|
unkown
|
page read and write
|
|
|
|
2646000
|
unkown
|
page read and write
|
|
|
|
45D6000
|
unkown
|
page read and write
|
|
|
|
732B000
|
unkown
|
page read and write
|
|
|
|
23D000
|
heap default
|
page read and write
|
|
|
|
2A20000
|
unkown
|
page read and write
|
|
|
|
532E000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
4DD0000
|
heap private
|
page read and write
|
|
|
|
440000
|
unkown
|
page read and write
|
|
|
|
255000
|
heap default
|
page read and write
|
|
|
|
5360000
|
unkown image
|
page read and write
|
|
|
|
E4000
|
heap private
|
page read and write
|
|
|
|
4650000
|
unkown image
|
page readonly
|
|
|
|
720000
|
unkown image
|
page readonly
|
|
|
|
782F000
|
unkown
|
page read and write
|
|
|
|
8B0000
|
unkown
|
page read and write
|
|
|
|
4D50000
|
unkown image
|
page readonly
|
|
|
|
30D0000
|
unkown image
|
page readonly
|
|
|
|
30D0000
|
unkown image
|
page readonly
|
|
|
|
8720000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown
|
page execute and read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
4DD0000
|
heap private
|
page read and write
|
|
|
|
10DE000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
320000
|
heap private
|
page read and write
|
|
|
|
447A000
|
unkown
|
page read and write
|
|
|
|
3BC000
|
unkown
|
page read and write
|
|
|
|
32A0000
|
heap private
|
page read and write
|
|
|
|
2550000
|
unkown
|
page read and write
|
|
|
|
3CC0000
|
unkown image
|
page readonly
|
|
|
|
1B60000
|
heap private
|
page read and write
|
|
|
|
81F000
|
unkown
|
page read and write
|
|
|
|
7EFC2000
|
unkown image
|
page readonly
|
|
|
|
6E50000
|
heap private
|
page read and write
|
|
|
|
7E1E000
|
unkown
|
page read and write
|
|
|
|
2F98000
|
unkown
|
page read and write
|
|
|
|
7B4B000
|
unkown
|
page read and write
|
|
|
|
45CF000
|
unkown
|
page read and write
|
|
|
|
30C0000
|
unkown
|
page read and write
|
|
|
|
4B9D000
|
unkown
|
page read and write
|
|
|
|
2F20000
|
unkown
|
page read and write
|
|
|
|
2F70000
|
unkown
|
page read and write
|
|
|
|
93E4000
|
unkown
|
page read and write
|
|
|
|
1B60000
|
heap private
|
page read and write
|
|
|
|
8380000
|
unkown
|
page read and write
|
|
|
|
8355000
|
unkown
|
page read and write
|
|
|
|
30A8000
|
unkown
|
page read and write
|
|
|
|
2A20000
|
unkown
|
page read and write
|
|
|
|
4AAD000
|
unkown
|
page read and write
|
|
|
|
7D20000
|
heap private
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
2A40000
|
unkown
|
page read and write
|
|
|
|
27E0000
|
unkown
|
page read and write
|
|
|
|
E52000
|
unkown image
|
page write copy
|
|
|
|
23D000
|
heap default
|
page read and write
|
|
|
|
E40000
|
unkown image
|
page readonly
|
|
|
|
7B50000
|
heap private
|
page read and write
|
|
|
|
7B50000
|
heap private
|
page read and write
|
|
|
|
76CF000
|
unkown
|
page read and write
|
|
|
|
2540000
|
unkown
|
page read and write
|
|
|
|
4265000
|
heap private
|
page read and write
|
|
|
|
1B65000
|
heap private
|
page read and write
|
|
|
|
456F000
|
unkown
|
page read and write
|
|
|
|
7EFB2000
|
unkown image
|
page readonly
|
|
|
|
E4000
|
heap private
|
page read and write
|
|
There are 1215 hidden memdumps, click here to show them.