Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
ClaimCopy-46148734-12012021.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\ClaimCopy-46148734-12012021.xlsb.E (copy)
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$ClaimCopy-46148734-12012021.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5F5C3290.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
 |
|
|
C:\Users\user\Desktop\12260000
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\12260000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet1.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet2.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet3.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://185.106.123.73/882070564739.dat2
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://94.140.114.63/882070564739.dat2v
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://146.19.170.39/882070564739.dat
|
146.19.170.39
|
|
|
|
http://94.140.114.63/882070564739.dat2
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://146.19.170.39/882070564739.dat2
|
146.19.170.39
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://185.106.123.73/882070564739.dat2l
|
unknown
|
|
There are 7 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
94.140.114.63
|
unknown
|
Latvia
|
|
|
|
146.19.170.39
|
unknown
|
France
|
|
|
|
185.106.123.73
|
unknown
|
Netherlands
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
ii.
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2D04A
|
2D04A
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
2r.
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\62471
|
62471
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
There are 25 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
49B000
|
heap default
|
page read and write
|
|
|
|
4FDC000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
3A30000
|
unkown image
|
page readonly
|
|
|
|
219B000
|
heap private
|
page read and write
|
|
|
|
241000
|
unkown
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
2AE000
|
unkown
|
page read and write
|
|
|
|
4AA8000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7EFF000
|
unkown
|
page read and write
|
|
|
|
49F0000
|
stack
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
4FB7000
|
unkown
|
page read and write
|
|
|
|
5918000
|
unkown
|
page read and write
|
|
|
|
7DF0000
|
unkown
|
page read and write
|
|
|
|
814C000
|
unkown
|
page read and write
|
|
|
|
1D33000
|
unkown
|
page read and write
|
|
|
|
540000
|
heap private
|
page read and write
|
|
|
|
7E8E000
|
unkown
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
1D75000
|
heap private
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
40E000
|
heap default
|
page read and write
|
|
|
|
589F000
|
unkown
|
page read and write
|
|
|
|
7B8B000
|
unkown
|
page read and write
|
|
|
|
1D20000
|
unkown image
|
page readonly
|
|
|
|
7908000
|
unkown
|
page read and write
|
|
|
|
407E000
|
unkown
|
page read and write
|
|
|
|
6C00000
|
unkown
|
page read and write
|
|
|
|
22A000
|
unkown
|
page read and write
|
|
|
|
780000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
650000
|
unkown image
|
page readonly
|
|
|
|
1E9000
|
unkown
|
page read and write
|
|
|
|
6B40000
|
unkown
|
page read and write
|
|
|
|
3060000
|
unkown
|
page read and write
|
|
|
|
4B0000
|
unkown image
|
page readonly
|
|
|
|
5936000
|
unkown
|
page read and write
|
|
|
|
3E75000
|
heap private
|
page read and write
|
|
|
|
49B0000
|
unkown image
|
page readonly
|
|
|
|
599E000
|
unkown
|
page read and write
|
|
|
|
33DE000
|
stack
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
B0000
|
unkown image
|
page readonly
|
|
|
|
4820000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
6E83B000
|
unkown image
|
page read and write
|
|
|
|
41E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
2BD000
|
unkown
|
page read and write
|
|
|
|
3698000
|
unkown
|
page read and write
|
|
|
|
593F000
|
unkown
|
page read and write
|
|
|
|
1F75000
|
heap private
|
page read and write
|
|
|
|
4B30000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown image
|
page read and write
|
|
|
|
320F000
|
stack
|
page read and write
|
|
|
|
5914000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
heap default
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page execute and read and write
|
|
|
|
57E000
|
stack
|
page read and write
|
|
|
|
5907000
|
unkown
|
page read and write
|
|
|
|
2E40000
|
unkown
|
page read and write
|
|
|
|
6C70000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
21CB000
|
heap private
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
6AC8000
|
unkown
|
page read and write
|
|
|
|
209000
|
unkown
|
page read and write
|
|
|
|
3F69000
|
heap private
|
page read and write
|
|
|
|
7D71000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown image
|
page readonly
|
|
|
|
4A0E000
|
stack
|
page read and write
|
|
|
|
336000
|
unkown
|
page read and write
|
|
|
|
4250000
|
heap private
|
page execute and read and write
|
|
|
|
730000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
heap private
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
80F5000
|
unkown
|
page read and write
|
|
|
|
8190000
|
unkown
|
page read and write
|
|
|
|
290000
|
heap private
|
page read and write
|
|
|
|
37BF000
|
stack
|
page read and write
|
|
|
|
8144000
|
unkown
|
page read and write
|
|
|
|
8584000
|
unkown
|
page read and write
|
|
|
|
232000
|
unkown
|
page read and write
|
|
|
|
1DA0000
|
unkown
|
page read and write
|
|
|
|
4BD0000
|
stack
|
page read and write
|
|
|
|
4F66000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
81C1000
|
unkown
|
page read and write
|
|
|
|
8652000
|
unkown
|
page read and write
|
|
|
|
232000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6E7F1000
|
unkown image
|
page readonly
|
|
|
|
5905000
|
unkown
|
page read and write
|
|
|
|
1F70000
|
heap private
|
page read and write
|
|
|
|
3A0000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
486000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
97B000
|
stack
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
32D8000
|
unkown
|
page read and write
|
|
|
|
3F99000
|
heap private
|
page read and write
|
|
|
|
4CD7000
|
unkown image
|
page readonly
|
|
|
|
6CB0000
|
heap private
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
73A0000
|
heap private
|
page read and write
|
|
|
|
4E6F000
|
stack
|
page read and write
|
|
|
|
5997000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown
|
page read and write
|
|
|
|
1F2000
|
unkown
|
page read and write
|
|
|
|
8200000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
6AD0000
|
unkown
|
page read and write
|
|
|
|
4940000
|
unkown image
|
page readonly
|
|
|
|
7AF2000
|
unkown
|
page read and write
|
|
|
|
82E9000
|
unkown
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
5888000
|
unkown
|
page read and write
|
|
|
|
313000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
unkown image
|
page readonly
|
|
|
|
580000
|
heap private
|
page read and write
|
|
|
|
8138000
|
unkown
|
page read and write
|
|
|
|
590000
|
heap private
|
page read and write
|
|
|
|
36A5000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
7925000
|
unkown
|
page read and write
|
|
|
|
4A0A000
|
stack
|
page read and write
|
|
|
|
5918000
|
unkown
|
page read and write
|
|
|
|
3210000
|
unkown image
|
page read and write
|
|
|
|
58CB000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
3020000
|
unkown image
|
page readonly
|
|
|
|
4A56000
|
stack
|
page read and write
|
|
|
|
151000
|
unkown
|
page read and write
|
|
|
|
58D3000
|
unkown
|
page read and write
|
|
|
|
247000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
355000
|
unkown
|
page read and write
|
|
|
|
857B000
|
unkown
|
page read and write
|
|
|
|
4490000
|
unkown image
|
page readonly
|
|
|
|
4077000
|
unkown
|
page read and write
|
|
|
|
49B3000
|
stack
|
page read and write
|
|
|
|
82AD000
|
unkown
|
page read and write
|
|
|
|
20E000
|
unkown
|
page read and write
|
|
|
|
8590000
|
unkown
|
page read and write
|
|
|
|
2D2000
|
unkown
|
page read and write
|
|
|
|
5F4000
|
heap private
|
page read and write
|
|
|
|
25A000
|
heap default
|
page read and write
|
|
|
|
4820000
|
unkown image
|
page readonly
|
|
|
|
7DD4000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6E520000
|
unkown image
|
page readonly
|
|
|
|
186000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown image
|
page readonly
|
|
|
|
861D000
|
unkown
|
page read and write
|
|
|
|
463000
|
heap default
|
page read and write
|
|
|
|
4B70000
|
stack
|
page read and write
|
|
|
|
240000
|
unkown
|
page read and write
|
|
|
|
1C6000
|
unkown
|
page read and write
|
|
|
|
4992000
|
unkown
|
page read and write
|
|
|
|
1B80000
|
unkown
|
page read and write
|
|
|
|
7420000
|
heap private
|
page read and write
|
|
|
|
6AD0000
|
unkown
|
page read and write
|
|
|
|
4149000
|
heap private
|
page read and write
|
|
|
|
36AD000
|
unkown
|
page read and write
|
|
|
|
7FEFF1A0000
|
unkown
|
page execute read
|
|
|
|
7A26000
|
unkown
|
page read and write
|
|
|
|
1C70000
|
unkown image
|
page readonly
|
|
|
|
3E79000
|
heap private
|
page read and write
|
|
|
|
2B6000
|
unkown
|
page read and write
|
|
|
|
2100000
|
heap private
|
page read and write
|
|
|
|
7C0000
|
unkown
|
page read and write
|
|
|
|
408000
|
heap default
|
page read and write
|
|
|
|
3A0000
|
unkown image
|
page readonly
|
|
|
|
280000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
232000
|
unkown
|
page read and write
|
|
|
|
595A000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
3520000
|
unkown
|
page read and write
|
|
|
|
1CF0000
|
unkown
|
page read and write
|
|
|
|
6BE0000
|
unkown
|
page read and write
|
|
|
|
30F0000
|
unkown
|
page read and write
|
|
|
|
81FD000
|
unkown
|
page read and write
|
|
|
|
82EE000
|
unkown
|
page read and write
|
|
|
|
143000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
6C33000
|
unkown
|
page read and write
|
|
|
|
297000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
584000
|
heap private
|
page read and write
|
|
|
|
4A30000
|
stack
|
page read and write
|
|
|
|
323000
|
heap default
|
page read and write
|
|
|
|
7BC0000
|
unkown
|
page read and write
|
|
|
|
2165000
|
heap private
|
page read and write
|
|
|
|
82FB000
|
unkown
|
page read and write
|
|
|
|
5A80000
|
unkown
|
page read and write
|
|
|
|
7D54000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
20C0000
|
unkown image
|
page readonly
|
|
|
|
D0000
|
unkown image
|
page readonly
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
1F0000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
210000
|
unkown
|
page execute and read and write
|
|
|
|
FA000
|
heap default
|
page read and write
|
|
|
|
5955000
|
unkown
|
page read and write
|
|
|
|
4A80000
|
stack
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
58FE000
|
unkown
|
page read and write
|
|
|
|
817B000
|
unkown
|
page read and write
|
|
|
|
6C11000
|
unkown
|
page read and write
|
|
|
|
2E1000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
2A8000
|
unkown
|
page read and write
|
|
|
|
2CA000
|
unkown
|
page read and write
|
|
|
|
8187000
|
unkown
|
page read and write
|
|
|
|
169000
|
unkown
|
page read and write
|
|
|
|
8694000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
8123000
|
unkown
|
page read and write
|
|
|
|
8C0000
|
unkown image
|
page readonly
|
|
|
|
863A000
|
unkown
|
page read and write
|
|
|
|
2E7000
|
heap default
|
page read and write
|
|
|
|
30C0000
|
unkown
|
page read and write
|
|
|
|
74A0000
|
unkown
|
page read and write
|
|
|
|
4AD0000
|
unkown
|
page read and write
|
|
|
|
2CA000
|
unkown
|
page read and write
|
|
|
|
21E0000
|
unkown
|
page read and write
|
|
|
|
6E84C000
|
unkown image
|
page read and write
|
|
|
|
495000
|
heap default
|
page read and write
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
3416000
|
unkown
|
page read and write
|
|
|
|
3255000
|
unkown
|
page read and write
|
|
|
|
3B3000
|
unkown
|
page read and write
|
|
|
|
25000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
2A4000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
208000
|
unkown
|
page read and write
|
|
|
|
7D50000
|
unkown
|
page read and write
|
|
|
|
4060000
|
unkown
|
page read and write
|
|
|
|
4E70000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
58FA000
|
unkown
|
page read and write
|
|
|
|
4009000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
362000
|
unkown
|
page read and write
|
|
|
|
1CC0000
|
unkown image
|
page readonly
|
|
|
|
5460000
|
unkown
|
page read and write
|
|
|
|
311000
|
unkown
|
page read and write
|
|
|
|
824F000
|
unkown
|
page read and write
|
|
|
|
8327000
|
unkown
|
page read and write
|
|
|
|
460000
|
heap private
|
page read and write
|
|
|
|
367000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown
|
page read and write
|
|
|
|
173000
|
heap default
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
22A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
360000
|
heap default
|
page read and write
|
|
|
|
14D000
|
unkown
|
page read and write
|
|
|
|
2CA000
|
unkown
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
810A000
|
stack
|
page read and write
|
|
|
|
8698000
|
unkown
|
page read and write
|
|
|
|
813F000
|
unkown
|
page read and write
|
|
|
|
417000
|
heap default
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
86AD000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2A9000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
64F000
|
stack
|
page read and write
|
|
|
|
8308000
|
unkown
|
page read and write
|
|
|
|
3A8000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
241000
|
unkown
|
page read and write
|
|
|
|
71E9000
|
heap private
|
page read and write
|
|
|
|
856A000
|
unkown
|
page read and write
|
|
|
|
431E000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown image
|
page readonly
|
|
|
|
59EE000
|
unkown
|
page read and write
|
|
|
|
38D000
|
unkown
|
page read and write
|
|
|
|
8641000
|
unkown
|
page read and write
|
|
|
|
2175000
|
heap private
|
page read and write
|
|
|
|
5936000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5909000
|
unkown
|
page read and write
|
|
|
|
2AD000
|
unkown
|
page read and write
|
|
|
|
49DA000
|
stack
|
page read and write
|
|
|
|
390000
|
unkown
|
page execute and read and write
|
|
|
|
127000
|
heap default
|
page read and write
|
|
|
|
86F2000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown image
|
page readonly
|
|
|
|
23C5000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
287000
|
unkown
|
page read and write
|
|
|
|
5907000
|
unkown
|
page read and write
|
|
|
|
C0000
|
unkown image
|
page readonly
|
|
|
|
3253000
|
unkown
|
page read and write
|
|
|
|
798D000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
3290000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7C4E000
|
unkown
|
page read and write
|
|
|
|
5A37000
|
unkown
|
page read and write
|
|
|
|
58C4000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
1DAE000
|
unkown
|
page read and write
|
|
|
|
82BE000
|
unkown
|
page read and write
|
|
|
|
37D000
|
unkown
|
page read and write
|
|
|
|
85AF000
|
unkown
|
page read and write
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
21AB000
|
heap private
|
page read and write
|
|
|
|
1E6000
|
heap default
|
page read and write
|
|
|
|
70D0000
|
heap private
|
page read and write
|
|
|
|
3A8000
|
unkown
|
page read and write
|
|
|
|
C0000
|
unkown
|
page read and write
|
|
|
|
82BA000
|
unkown
|
page read and write
|
|
|
|
6AC3000
|
unkown
|
page read and write
|
|
|
|
7E44000
|
heap private
|
page read and write
|
|
|
|
6BF0000
|
unkown
|
page read and write
|
|
|
|
8630000
|
unkown
|
page read and write
|
|
|
|
2A9000
|
unkown
|
page read and write
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
5A44000
|
unkown
|
page read and write
|
|
|
|
8198000
|
unkown
|
page read and write
|
|
|
|
A0000
|
heap default
|
page read and write
|
|
|
|
1E5000
|
heap default
|
page read and write
|
|
|
|
5A17000
|
unkown
|
page read and write
|
|
|
|
5902000
|
unkown
|
page read and write
|
|
|
|
6C89000
|
unkown image
|
page readonly
|
|
|
|
2E90000
|
unkown
|
page read and write
|
|
|
|
81B8000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
30E000
|
unkown
|
page read and write
|
|
|
|
294000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
85BC000
|
unkown
|
page read and write
|
|
|
|
21A0000
|
unkown
|
page read and write
|
|
|
|
6B0C000
|
unkown
|
page read and write
|
|
|
|
59ED000
|
unkown
|
page read and write
|
|
|
|
8577000
|
unkown
|
page read and write
|
|
|
|
8177000
|
unkown
|
page read and write
|
|
|
|
207B000
|
heap private
|
page read and write
|
|
|
|
23C9000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
23FF000
|
stack
|
page read and write
|
|
|
|
70000
|
unkown image
|
page read and write
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
82FF000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
1D65000
|
unkown
|
page read and write
|
|
|
|
44E000
|
heap default
|
page read and write
|
|
|
|
281000
|
unkown
|
page read and write
|
|
|
|
209000
|
unkown
|
page read and write
|
|
|
|
2E1000
|
unkown
|
page read and write
|
|
|
|
860000
|
unkown image
|
page readonly
|
|
|
|
2455000
|
heap private
|
page read and write
|
|
|
|
4E0000
|
unkown image
|
page readonly
|
|
|
|
A7000
|
heap default
|
page read and write
|
|
|
|
832B000
|
unkown
|
page read and write
|
|
|
|
7FF4000
|
unkown
|
page read and write
|
|
|
|
595A000
|
unkown
|
page read and write
|
|
|
|
6AD0000
|
unkown
|
page read and write
|
|
|
|
4BA0000
|
stack
|
page read and write
|
|
|
|
2E24000
|
unkown
|
page read and write
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
5911000
|
unkown
|
page read and write
|
|
|
|
85B4000
|
unkown
|
page read and write
|
|
|
|
285000
|
heap default
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
59C3000
|
unkown
|
page read and write
|
|
|
|
30E000
|
heap default
|
page read and write
|
|
|
|
289000
|
unkown
|
page read and write
|
|
|
|
30C8000
|
unkown
|
page read and write
|
|
|
|
2CA000
|
unkown
|
page read and write
|
|
|
|
4D4000
|
heap private
|
page read and write
|
|
|
|
7E40000
|
heap private
|
page read and write
|
|
|
|
4E0000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
58F8000
|
unkown
|
page read and write
|
|
|
|
6C84000
|
unkown image
|
page readonly
|
|
|
|
807C000
|
unkown
|
page read and write
|
|
|
|
5902000
|
unkown
|
page read and write
|
|
|
|
8208000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
heap private
|
page read and write
|
|
|
|
209000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
8561000
|
unkown
|
page read and write
|
|
|
|
4B27000
|
unkown image
|
page readonly
|
|
|
|
492000
|
heap default
|
page read and write
|
|
|
|
1A5000
|
heap default
|
page read and write
|
|
|
|
8184000
|
unkown
|
page read and write
|
|
|
|
6FB6000
|
unkown
|
page read and write
|
|
|
|
8120000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
82C2000
|
unkown
|
page read and write
|
|
|
|
86BE000
|
unkown
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
20000
|
heap private
|
page read and write
|
|
|
|
5A40000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
5A3F000
|
unkown
|
page read and write
|
|
|
|
2E20000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
866F000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
3530000
|
unkown
|
page read and write
|
|
|
|
8156000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
30A0000
|
heap private
|
page read and write
|
|
|
|
410000
|
heap default
|
page read and write
|
|
|
|
470000
|
unkown
|
page read and write
|
|
|
|
59A0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
2459000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6B55000
|
heap private
|
page read and write
|
|
|
|
3220000
|
unkown
|
page read and write
|
|
|
|
5911000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
3680000
|
unkown
|
page read and write
|
|
|
|
41DE000
|
stack
|
page read and write
|
|
|
|
2D6000
|
unkown
|
page read and write
|
|
|
|
448D000
|
stack
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
6E20000
|
heap private
|
page read and write
|
|
|
|
58D5000
|
unkown
|
page read and write
|
|
|
|
1E1000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page read and write
|
|
|
|
8566000
|
unkown
|
page read and write
|
|
|
|
4005000
|
heap private
|
page read and write
|
|
|
|
1E7000
|
unkown
|
page read and write
|
|
|
|
3690000
|
unkown
|
page read and write
|
|
|
|
7B0D000
|
unkown
|
page read and write
|
|
|
|
85EF000
|
unkown
|
page read and write
|
|
|
|
232000
|
unkown
|
page read and write
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
3D7000
|
heap default
|
page read and write
|
|
|
|
A9000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
1D43000
|
unkown
|
page read and write
|
|
|
|
7F47000
|
unkown
|
page read and write
|
|
|
|
3240000
|
unkown
|
page read and write
|
|
|
|
8143000
|
unkown
|
page read and write
|
|
|
|
7E68000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
378000
|
unkown
|
page read and write
|
|
|
|
813C000
|
unkown
|
page read and write
|
|
|
|
58F8000
|
unkown
|
page read and write
|
|
|
|
8241000
|
unkown
|
page read and write
|
|
|
|
3A00000
|
unkown image
|
page readonly
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
243000
|
unkown
|
page read and write
|
|
|
|
2045000
|
heap private
|
page read and write
|
|
|
|
82F2000
|
unkown
|
page read and write
|
|
|
|
36A0000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
unkown image
|
page readonly
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
86A8000
|
unkown
|
page read and write
|
|
|
|
3F90000
|
heap private
|
page read and write
|
|
|
|
125000
|
heap default
|
page read and write
|
|
|
|
4B70000
|
stack
|
page read and write
|
|
|
|
292000
|
unkown
|
page read and write
|
|
|
|
1F70000
|
unkown image
|
page readonly
|
|
|
|
4AF0000
|
unkown image
|
page readonly
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
3B00000
|
unkown image
|
page readonly
|
|
|
|
8166000
|
unkown
|
page read and write
|
|
|
|
3F95000
|
heap private
|
page read and write
|
|
|
|
213B000
|
heap private
|
page read and write
|
|
|
|
F70000
|
unkown
|
page read and write
|
|
|
|
5A2B000
|
unkown
|
page read and write
|
|
|
|
2E3000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
1BA000
|
heap default
|
page read and write
|
|
|
|
6D0000
|
unkown image
|
page readonly
|
|
|
|
550000
|
unkown image
|
page readonly
|
|
|
|
4DAE000
|
stack
|
page read and write
|
|
|
|
4FCF000
|
unkown
|
page read and write
|
|
|
|
4B20000
|
unkown
|
page read and write
|
|
|
|
59B3000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7A58000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
32B0000
|
unkown
|
page read and write
|
|
|
|
58FE000
|
unkown
|
page read and write
|
|
|
|
351000
|
unkown
|
page read and write
|
|
|
|
59DF000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
6D4000
|
heap private
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
364F000
|
stack
|
page read and write
|
|
|
|
4910000
|
unkown image
|
page readonly
|
|
|
|
37E0000
|
heap private
|
page read and write
|
|
|
|
817D000
|
unkown
|
page read and write
|
|
|
|
1FAB000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
32A000
|
heap default
|
page read and write
|
|
|
|
4145000
|
heap private
|
page read and write
|
|
|
|
1CB000
|
unkown
|
page read and write
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
610000
|
unkown image
|
page readonly
|
|
|
|
357000
|
unkown
|
page read and write
|
|
|
|
150000
|
unkown
|
page read and write
|
|
|
|
2170000
|
heap private
|
page read and write
|
|
|
|
39E0000
|
unkown image
|
page readonly
|
|
|
|
6AE0000
|
unkown
|
page read and write
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
A0000
|
unkown image
|
page read and write
|
|
|
|
2010000
|
unkown image
|
page readonly
|
|
|
|
3E70000
|
heap private
|
page read and write
|
|
|
|
7DD1000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
5770000
|
unkown
|
page read and write
|
|
|
|
31D000
|
heap default
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
59CF000
|
unkown
|
page read and write
|
|
|
|
81AB000
|
unkown
|
page read and write
|
|
|
|
814F000
|
unkown
|
page read and write
|
|
|
|
2120000
|
heap private
|
page read and write
|
|
|
|
6B30000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
241000
|
unkown
|
page read and write
|
|
|
|
82EC000
|
unkown
|
page read and write
|
|
|
|
78BB000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
4348000
|
unkown
|
page read and write
|
|
|
|
1E00000
|
unkown image
|
page readonly
|
|
|
|
5955000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
4BB2000
|
stack
|
page read and write
|
|
|
|
299000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
3A8000
|
unkown
|
page read and write
|
|
|
|
3A8000
|
unkown
|
page read and write
|
|
|
|
368E000
|
unkown
|
page read and write
|
|
|
|
3B2000
|
unkown
|
page read and write
|
|
|
|
4B97000
|
unkown image
|
page readonly
|
|
|
|
2020000
|
unkown image
|
page readonly
|
|
|
|
209000
|
unkown
|
page read and write
|
|
|
|
7D9A000
|
unkown
|
page read and write
|
|
|
|
480000
|
unkown image
|
page readonly
|
|
|
|
18D000
|
unkown
|
page read and write
|
|
|
|
812E000
|
unkown
|
page read and write
|
|
|
|
6B10000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
864F000
|
unkown
|
page read and write
|
|
|
|
817B000
|
unkown
|
page read and write
|
|
|
|
22A000
|
unkown
|
page read and write
|
|
|
|
804000
|
unkown
|
page read and write
|
|
|
|
5909000
|
unkown
|
page read and write
|
|
|
|
4A86000
|
stack
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
2BC000
|
unkown
|
page read and write
|
|
|
|
5980000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
86BA000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7905000
|
unkown
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
30B0000
|
unkown
|
page read and write
|
|
|
|
207000
|
heap default
|
page read and write
|
|
|
|
36B0000
|
unkown
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
7FAB000
|
unkown
|
page read and write
|
|
|
|
22A000
|
unkown
|
page read and write
|
|
|
|
280000
|
unkown
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
81B4000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
120000
|
heap default
|
page read and write
|
|
|
|
34E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
232000
|
unkown
|
page read and write
|
|
|
|
85F3000
|
unkown
|
page read and write
|
|
|
|
8145000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
4000000
|
heap private
|
page read and write
|
|
|
|
2105000
|
heap private
|
page read and write
|
|
|
|
90000
|
unkown
|
page read and write
|
|
|
|
1790000
|
unkown image
|
page readonly
|
|
|
|
37D0000
|
heap private
|
page read and write
|
|
|
|
8532000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
853F000
|
unkown
|
page read and write
|
|
|
|
598D000
|
unkown
|
page read and write
|
|
|
|
406000
|
unkown
|
page read and write
|
|
|
|
7B70000
|
unkown
|
page read and write
|
|
|
|
5988000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
1C26000
|
unkown
|
page read and write
|
|
|
|
2D2000
|
unkown
|
page read and write
|
|
|
|
4240000
|
unkown
|
page read and write
|
|
|
|
4A70000
|
stack
|
page read and write
|
|
|
|
6E84F000
|
unkown image
|
page readonly
|
|
|
|
380000
|
heap default
|
page read and write
|
|
|
|
81DE000
|
unkown
|
page read and write
|
|
|
|
8330000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
7F70000
|
heap private
|
page read and write
|
|
|
|
86FB000
|
unkown
|
page read and write
|
|
|
|
59C5000
|
unkown
|
page read and write
|
|
|
|
4A20000
|
stack
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
852E000
|
unkown
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
8258000
|
unkown
|
page read and write
|
|
|
|
6E521000
|
unkown image
|
page execute read
|
|
|
|
434000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
190000
|
unkown
|
page read and write
|
|
|
|
4BB0000
|
stack
|
page read and write
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
42D0000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
3540000
|
unkown
|
page read and write
|
|
|
|
241000
|
unkown
|
page read and write
|
|
|
|
8658000
|
unkown
|
page read and write
|
|
|
|
85FD000
|
unkown
|
page read and write
|
|
|
|
5A80000
|
unkown
|
page read and write
|
|
|
|
866B000
|
unkown
|
page read and write
|
|
|
|
59C9000
|
unkown
|
page read and write
|
|
|
|
253000
|
heap default
|
page read and write
|
|
|
|
8149000
|
unkown
|
page read and write
|
|
|
|
4BD8000
|
stack
|
page read and write
|
|
|
|
4A08000
|
stack
|
page read and write
|
|
|
|
33E0000
|
unkown
|
page read and write
|
|
|
|
215B000
|
heap private
|
page read and write
|
|
|
|
4F80000
|
unkown
|
page read and write
|
|
|
|
854C000
|
unkown
|
page read and write
|
|
|
|
21D000
|
unkown
|
page read and write
|
|
|
|
8537000
|
unkown
|
page read and write
|
|
|
|
46C000
|
heap default
|
page read and write
|
|
|
|
2E44000
|
unkown
|
page read and write
|
|
|
|
276000
|
unkown
|
page read and write
|
|
|
|
7986000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5F0000
|
heap private
|
page read and write
|
|
|
|
1C00000
|
unkown image
|
page readonly
|
|
|
|
2A0000
|
heap private
|
page read and write
|
|
|
|
2D6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4D6000
|
heap default
|
page read and write
|
|
|
|
1E0000
|
heap default
|
page read and write
|
|
|
|
2E9000
|
unkown
|
page read and write
|
|
|
|
300000
|
unkown
|
page read and write
|
|
|
|
4A82000
|
stack
|
page read and write
|
|
|
|
114000
|
heap private
|
page read and write
|
|
|
|
8580000
|
unkown
|
page read and write
|
|
|
|
3B7000
|
unkown
|
page read and write
|
|
|
|
8298000
|
unkown
|
page read and write
|
|
|
|
7FA8000
|
unkown
|
page read and write
|
|
|
|
464000
|
heap private
|
page read and write
|
|
|
|
81EF000
|
unkown
|
page read and write
|
|
|
|
3510000
|
unkown
|
page read and write
|
|
|
|
1C70000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
4A60000
|
stack
|
page read and write
|
|
|
|
4B2A000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
6AC0000
|
unkown
|
page read and write
|
|
|
|
285000
|
unkown
|
page read and write
|
|
|
|
416000
|
unkown
|
page read and write
|
|
|
|
6F80000
|
unkown
|
page read and write
|
|
|
|
7A4F000
|
stack
|
page read and write
|
|
|
|
2040000
|
heap private
|
page read and write
|
|
|
|
6D0000
|
heap private
|
page read and write
|
|
|
|
8148000
|
unkown
|
page read and write
|
|
|
|
209000
|
unkown
|
page read and write
|
|
|
|
870000
|
unkown
|
page read and write
|
|
|
|
5921000
|
unkown
|
page read and write
|
|
|
|
587E000
|
stack
|
page read and write
|
|
|
|
2E8000
|
unkown
|
page read and write
|
|
|
|
721F000
|
heap private
|
page read and write
|
|
|
|
6C80000
|
unkown image
|
page readonly
|
|
|
|
59CB000
|
unkown
|
page read and write
|
|
|
|
4A6000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
593F000
|
unkown
|
page read and write
|
|
|
|
8F0000
|
unkown
|
page read and write
|
|
|
|
5957000
|
unkown
|
page read and write
|
|
|
|
2A9000
|
unkown
|
page read and write
|
|
|
|
3090000
|
unkown
|
page read and write
|
|
|
|
5A83000
|
unkown image
|
page read and write
|
|
|
|
326000
|
heap default
|
page read and write
|
|
|
|
8662000
|
unkown
|
page read and write
|
|
|
|
430000
|
heap private
|
page read and write
|
|
|
|
8183000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
4A40000
|
stack
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
38C000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
3650000
|
unkown
|
page read and write
|
|
|
|
37D7000
|
heap private
|
page read and write
|
|
|
|
30E0000
|
unkown
|
page read and write
|
|
|
|
5490000
|
unkown
|
page read and write
|
|
|
|
359000
|
unkown
|
page read and write
|
|
|
|
1B3000
|
heap default
|
page read and write
|
|
|
|
22A000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
2CA000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown
|
page read and write
|
|
|
|
4AF7000
|
unkown image
|
page readonly
|
|
|
|
1D60000
|
unkown
|
page read and write
|
|
|
|
804000
|
unkown
|
page read and write
|
|
|
|
4B80000
|
stack
|
page read and write
|
|
|
|
3F4F000
|
stack
|
page read and write
|
|
|
|
245E000
|
stack
|
page read and write
|
|
|
|
813B000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
3A00000
|
unkown image
|
page readonly
|
|
|
|
6C20000
|
unkown
|
page read and write
|
|
|
|
85C1000
|
unkown
|
page read and write
|
|
|
|
1DA8000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
167000
|
heap default
|
page read and write
|
|
|
|
37E000
|
unkown
|
page read and write
|
|
|
|
65300000
|
unkown image
|
page readonly
|
|
|
|
804000
|
unkown
|
page read and write
|
|
|
|
871A000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
2E1000
|
unkown
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
100000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
5A0F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
5914000
|
unkown
|
page read and write
|
|
|
|
49E0000
|
stack
|
page read and write
|
|
|
|
32B000
|
heap default
|
page read and write
|
|
|
|
3508000
|
unkown
|
page read and write
|
|
|
|
2DF000
|
unkown
|
page read and write
|
|
|
|
4A07000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
417000
|
heap default
|
page read and write
|
|
|
|
5A80000
|
unkown
|
page read and write
|
|
|
|
444000
|
heap private
|
page read and write
|
|
|
|
81AF000
|
unkown
|
page read and write
|
|
|
|
1D00000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
8161000
|
unkown
|
page read and write
|
|
|
|
2D2000
|
unkown
|
page read and write
|
|
|
|
8180000
|
unkown
|
page read and write
|
|
|
|
7FC0000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown
|
page read and write
|
|
|
|
1C6000
|
unkown
|
page read and write
|
|
|
|
1E5000
|
unkown
|
page read and write
|
|
|
|
160000
|
heap default
|
page read and write
|
|
|
|
804000
|
unkown
|
page read and write
|
|
|
|
82A8000
|
unkown
|
page read and write
|
|
|
|
3F60000
|
heap private
|
page read and write
|
|
|
|
7AC3000
|
unkown
|
page read and write
|
|
|
|
49E0000
|
stack
|
page read and write
|
|
|
|
5957000
|
unkown
|
page read and write
|
|
|
|
6DA0000
|
heap private
|
page read and write
|
|
|
|
4345000
|
unkown
|
page read and write
|
|
|
|
15E000
|
heap default
|
page read and write
|
|
|
|
450000
|
unkown
|
page read and write
|
|
|
|
20B0000
|
heap private
|
page read and write
|
|
|
|
23AF000
|
stack
|
page read and write
|
|
|
|
32A0000
|
unkown
|
page read and write
|
|
|
|
6C20000
|
unkown image
|
page readonly
|
|
|
|
80000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
86E9000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
2A9000
|
unkown
|
page read and write
|
|
|
|
593D000
|
unkown
|
page read and write
|
|
|
|
22CE000
|
stack
|
page read and write
|
|
|
|
823D000
|
unkown
|
page read and write
|
|
|
|
2D7000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
8294000
|
unkown
|
page read and write
|
|
|
|
826F000
|
unkown
|
page read and write
|
|
|
|
242000
|
unkown
|
page read and write
|
|
|
|
8708000
|
unkown
|
page read and write
|
|
|
|
2E03000
|
unkown
|
page read and write
|
|
|
|
1A2000
|
heap default
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
4A50000
|
stack
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
591E000
|
unkown
|
page read and write
|
|
|
|
7CCB000
|
unkown
|
page read and write
|
|
|
|
4080000
|
unkown
|
page read and write
|
|
|
|
36A2000
|
unkown
|
page read and write
|
|
|
|
3030000
|
unkown image
|
page readonly
|
|
|
|
3C6000
|
unkown
|
page read and write
|
|
|
|
407A000
|
unkown
|
page read and write
|
|
|
|
870000
|
unkown image
|
page readonly
|
|
|
|
8600000
|
unkown
|
page read and write
|
|
|
|
170000
|
heap private
|
page read and write
|
|
|
|
597D000
|
unkown
|
page read and write
|
|
|
|
4B73000
|
stack
|
page read and write
|
|
|
|
6E844000
|
unkown image
|
page read and write
|
|
|
|
2160000
|
heap private
|
page read and write
|
|
|
|
6F00000
|
heap private
|
page read and write
|
|
|
|
3100000
|
unkown image
|
page readonly
|
|
|
|
3B90000
|
unkown image
|
page readonly
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
592D000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
2FE000
|
unkown
|
page read and write
|
|
|
|
160000
|
heap default
|
page read and write
|
|
|
|
F3000
|
heap default
|
page read and write
|
|
|
|
3BD000
|
heap default
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
2E7000
|
unkown
|
page read and write
|
|
|
|
2EB0000
|
unkown
|
page read and write
|
|
|
|
70000
|
unkown image
|
page readonly
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
5949000
|
unkown
|
page read and write
|
|
|
|
122000
|
heap default
|
page read and write
|
|
|
|
119000
|
unkown
|
page read and write
|
|
|
|
169000
|
unkown
|
page read and write
|
|
|
|
15C000
|
unkown
|
page read and write
|
|
|
|
592D000
|
unkown
|
page read and write
|
|
|
|
598F000
|
unkown
|
page read and write
|
|
|
|
828F000
|
unkown
|
page read and write
|
|
|
|
3070000
|
unkown
|
page read and write
|
|
|
|
155000
|
unkown
|
page read and write
|
|
|
|
4072000
|
unkown
|
page read and write
|
|
|
|
5905000
|
unkown
|
page read and write
|
|
|
|
58D5000
|
unkown
|
page read and write
|
|
|
|
2460000
|
unkown
|
page read and write
|
|
|
|
6B50000
|
heap private
|
page read and write
|
|
|
|
804000
|
unkown
|
page read and write
|
|
|
|
59DA000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
17A000
|
heap default
|
page read and write
|
|
|
|
8137000
|
unkown
|
page read and write
|
|
|
|
81A6000
|
unkown
|
page read and write
|
|
|
|
3B8000
|
unkown
|
page read and write
|
|
|
|
3270000
|
unkown
|
page read and write
|
|
|
|
8608000
|
unkown
|
page read and write
|
|
|
|
6E848000
|
unkown image
|
page write copy
|
|
|
|
B8F000
|
stack
|
page read and write
|
|
|
|
200000
|
heap default
|
page read and write
|
|
|
|
3A8000
|
unkown
|
page read and write
|
|
|
|
5A1F000
|
unkown
|
page read and write
|
|
|
|
79AA000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page execute and read and write
|
|
|
|
ABF000
|
stack
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
8727000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
2E10000
|
unkown
|
page read and write
|
|
|
|
239000
|
unkown
|
page read and write
|
|
|
|
4FD4000
|
unkown
|
page read and write
|
|
|
|
248000
|
unkown
|
page read and write
|
|
|
|
386000
|
heap default
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
3670000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
8193000
|
unkown
|
page read and write
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
2C6000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
278000
|
unkown
|
page read and write
|
|
|
|
32D0000
|
unkown
|
page read and write
|
|
|
|
22B0000
|
unkown
|
page read and write
|
|
|
|
816A000
|
unkown
|
page read and write
|
|
|
|
85B8000
|
unkown
|
page read and write
|
|
|
|
90000
|
unkown image
|
page readonly
|
|
|
|
2E0000
|
heap default
|
page read and write
|
|
|
|
872B000
|
unkown
|
page read and write
|
|
|
|
4AC0000
|
unkown image
|
page readonly
|
|
|
|
4D0000
|
heap default
|
page read and write
|
|
|
|
816B000
|
unkown
|
page read and write
|
|
|
|
444000
|
heap default
|
page read and write
|
|
|
|
3F65000
|
heap private
|
page read and write
|
|
|
|
594000
|
heap private
|
page read and write
|
|
|
|
58FA000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown image
|
page read and write
|
|
|
|
2450000
|
heap private
|
page read and write
|
|
|
|
22D0000
|
unkown
|
page read and write
|
|
|
|
7DCF000
|
unkown
|
page read and write
|
|
|
|
4090000
|
unkown
|
page read and write
|
|
|
|
30D0000
|
unkown
|
page read and write
|
|
|
|
434A000
|
unkown
|
page read and write
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
36A9000
|
unkown
|
page read and write
|
|
|
|
5470000
|
unkown
|
page read and write
|
|
|
|
81F3000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
2E1000
|
unkown
|
page read and write
|
|
|
|
2125000
|
heap private
|
page read and write
|
|
|
|
5A0000
|
unkown image
|
page readonly
|
|
|
|
821D000
|
unkown
|
page read and write
|
|
|
|
86FF000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
432000
|
heap default
|
page read and write
|
|
|
|
544000
|
heap private
|
page read and write
|
|
|
|
7B75000
|
unkown
|
page read and write
|
|
|
|
23E000
|
heap default
|
page read and write
|
|
|
|
4140000
|
heap private
|
page read and write
|
|
|
|
86C2000
|
unkown
|
page read and write
|
|
|
|
20D000
|
unkown
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
4880000
|
unkown
|
page read and write
|
|
|
|
1D40000
|
unkown
|
page read and write
|
|
|
|
86EC000
|
unkown
|
page read and write
|
|
|
|
853B000
|
unkown
|
page read and write
|
|
|
|
4B90000
|
stack
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
1BF0000
|
unkown
|
page read and write
|
|
|
|
2A9000
|
unkown
|
page read and write
|
|
|
|
58DD000
|
unkown
|
page read and write
|
|
|
|
5880000
|
unkown
|
page read and write
|
|
|
|
5945000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
3280000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
2F10000
|
unkown
|
page read and write
|
|
|
|
6C8F000
|
unkown image
|
page readonly
|
|
|
|
85AB000
|
unkown
|
page read and write
|
|
|
|
30A4000
|
heap private
|
page read and write
|
|
|
|
110000
|
heap private
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7E9D000
|
unkown
|
page read and write
|
|
|
|
59ED000
|
unkown
|
page read and write
|
|
|
|
823A000
|
unkown
|
page read and write
|
|
|
|
826B000
|
unkown
|
page read and write
|
|
|
|
1F7000
|
unkown
|
page read and write
|
|
|
|
8140000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown image
|
page readonly
|
|
|
|
19E000
|
heap default
|
page read and write
|
|
|
|
14A000
|
unkown
|
page read and write
|
|
|
|
86EE000
|
unkown
|
page read and write
|
|
|
|
4F55000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
546000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7260000
|
heap private
|
page read and write
|
|
|
|
8132000
|
unkown
|
page read and write
|
|
|
|
8544000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
2260000
|
unkown
|
page read and write
|
|
|
|
8262000
|
unkown
|
page read and write
|
|
|
|
3050000
|
unkown
|
page read and write
|
|
|
|
5984000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
4A72000
|
stack
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
863D000
|
unkown
|
page read and write
|
|
|
|
1D70000
|
heap private
|
page read and write
|
|
|
|
41F0000
|
unkown
|
page read and write
|
|
|
|
8230000
|
unkown
|
page read and write
|
|
|
|
355000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
1D97000
|
unkown
|
page read and write
|
|
|
|
7D0B000
|
unkown
|
page read and write
|
|
|
|
301F000
|
stack
|
page read and write
|
|
|
|
7951000
|
unkown
|
page read and write
|
|
|
|
37C0000
|
unkown
|
page read and write
|
|
|
|
3D5000
|
heap private
|
page read and write
|
|
|
|
2E00000
|
unkown
|
page read and write
|
|
|
|
7D52000
|
unkown
|
page read and write
|
|
|
|
8140000
|
unkown
|
page read and write
|
|
|
|
4F70000
|
unkown
|
page read and write
|
|
|
|
8136000
|
unkown
|
page read and write
|
|
|
|
86B1000
|
unkown
|
page read and write
|
|
|
|
2E1000
|
unkown
|
page read and write
|
|
|
|
5070000
|
unkown image
|
page readonly
|
|
|
|
85A6000
|
unkown
|
page read and write
|
|
|
|
8730000
|
unkown
|
page read and write
|
|
|
|
5921000
|
unkown
|
page read and write
|
|
|
|
1F00000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
1D50000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
6BD0000
|
unkown
|
page read and write
|
|
|
|
5257000
|
unkown image
|
page readonly
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
8151000
|
unkown
|
page read and write
|
|
|
|
58DF000
|
unkown
|
page read and write
|
|
|
|
6A80000
|
unkown
|
page read and write
|
|
|
|
8147000
|
unkown
|
page read and write
|
|
|
|
5949000
|
unkown
|
page read and write
|
|
|
|
2D2000
|
unkown
|
page read and write
|
|
|
|
4BB6000
|
stack
|
page read and write
|
|
|
|
7FA6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
A00000
|
unkown image
|
page readonly
|
|
|
|
1380000
|
unkown
|
page read and write
|
|
|
|
1DBE000
|
unkown
|
page read and write
|
|
|
|
8551000
|
unkown
|
page read and write
|
|
|
|
7B6C000
|
unkown
|
page read and write
|
|
|
|
1D3E000
|
unkown
|
page read and write
|
|
|
|
2195000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
4A07000
|
unkown image
|
page readonly
|
|
|
|
6B00000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
5945000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
4089000
|
unkown
|
page read and write
|
|
|
|
440000
|
heap private
|
page read and write
|
|
|
|
85DE000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
868F000
|
unkown
|
page read and write
|
|
|
|
8252000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
166000
|
heap default
|
page read and write
|
|
|
|
4075000
|
unkown
|
page read and write
|
|
|
|
23C0000
|
heap private
|
page read and write
|
|
|
|
82B1000
|
unkown
|
page read and write
|
|
|
|
1D80000
|
unkown
|
page read and write
|
|
|
|
2E2000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
21C000
|
unkown
|
page read and write
|
|
|
|
DE000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
2B0000
|
unkown image
|
page readonly
|
|
|
|
4A52000
|
stack
|
page read and write
|
|
|
|
175000
|
heap private
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
49D0000
|
stack
|
page read and write
|
|
|
|
591E000
|
unkown
|
page read and write
|
|
|
|
1F70000
|
unkown image
|
page readonly
|
|
|
|
71E0000
|
heap private
|
page read and write
|
|
|
|
49D5000
|
stack
|
page read and write
|
|
|
|
2D0000
|
heap default
|
page read and write
|
|
|
|
2E16000
|
unkown
|
page read and write
|
|
|
|
2190000
|
heap private
|
page read and write
|
|
|
|
5A80000
|
unkown
|
page read and write
|
|
|
|
241000
|
unkown
|
page read and write
|
|
|
|
81BC000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4B70000
|
stack
|
page read and write
|
|
|
|
2D2000
|
unkown
|
page read and write
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
6AC0000
|
unkown
|
page read and write
|
|
|
|
3080000
|
unkown
|
page read and write
|
|
|
|
2E30000
|
unkown
|
page read and write
|
|
|
|
8160000
|
unkown
|
page read and write
|
|
|
|
3660000
|
unkown
|
page read and write
|
|
|
|
46A000
|
heap default
|
page read and write
|
|
|
|
34F0000
|
unkown
|
page read and write
|
|
|
|
559C000
|
stack
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
8548000
|
unkown
|
page read and write
|
|
|
|
290000
|
heap default
|
page read and write
|
|
|
|
274000
|
unkown
|
page read and write
|
|
|
|
1D30000
|
unkown
|
page read and write
|
|
|
|
860000
|
unkown
|
page read and write
|
|
|
|
593D000
|
unkown
|
page read and write
|
|
|
|
36AB000
|
unkown
|
page read and write
|
|
There are 1081 hidden memdumps, click here to show them.