Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\DAB5.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\~DF3B4EA5BD8BBCDF15.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DFEAC2A307FBF2A788.TMP
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://playsis.com.br/viderJ
|
unknown
|
|
|
|
https://playsis.com.br/qJSi
|
unknown
|
|
|
|
https://playsis.com.br/
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html117.vn/TSh7GBeIR/tiynh.htmlink
|
unknown
|
|
|
|
https://playsis.com.br/qJSL117.
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html3W(y
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1B.b
|
unknown
|
|
|
|
https://playsis.com.br/qhtt
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html
|
162.241.2.78
|
|
|
|
https://playsis.com.br/qJSL1BNt
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
https://noithat117.vn/TSh7GBeIR/tiynh.htmlfs7y
|
unknown
|
|
|
|
http://crl.entrust.net/server1.crl0
|
unknown
|
|
|
|
http://schemas.openformatrg/drawml/2006/spreadsheetD
|
unknown
|
|
|
|
http://ocsp.entrust.net03
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/content-t
|
unknown
|
|
|
|
https://playsis.com
|
unknown
|
|
|
|
https://greenflag.esp.br/
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
|
|
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
|
|
|
https://greenflag.esp.br/~
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://schemas.open
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
https://playsis.cre
|
unknown
|
|
|
|
https://noithat117.vn/TSh7GBeIR/tiynh.html
|
103.28.36.171
|
|
|
|
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/r
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://greenflag.esp.br/yuINdRbM/tiynh.htmltv7y
|
unknown
|
|
|
|
https://greenflag.esp.br/yuINdRbM/tiynh.html
|
108.179.192.98
|
|
|
|
https://noithat117.vn/
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
https://playsis.com.boi
|
unknown
|
|
|
|
http://ocsp.entrust.net0D
|
unknown
|
|
|
|
https://secure.comodo.com/CPS0
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
|
There are 33 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
greenflag.esp.br
|
108.179.192.98
|
|
|
|
playsis.com.br
|
162.241.2.78
|
|
|
|
noithat117.vn
|
103.28.36.171
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.241.2.78
|
playsis.com.br
|
United States
|
|
|
|
108.179.192.98
|
greenflag.esp.br
|
United States
|
|
|
|
103.28.36.171
|
noithat117.vn
|
Viet Nam
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
10-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2E2D0
|
2E2D0
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
|<-
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3EA8D
|
3EA8D
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\40167
|
40167
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
There are 61 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
538E000
|
unkown
|
page read and write
|
|
|
|
6EF0000
|
unkown image
|
page readonly
|
|
|
|
B36F000
|
unkown
|
page read and write
|
|
|
|
BB33000
|
unkown
|
page read and write
|
|
|
|
BB4D000
|
unkown
|
page read and write
|
|
|
|
5618000
|
unkown
|
page read and write
|
|
|
|
1D40000
|
unkown image
|
page readonly
|
|
|
|
2210000
|
heap private
|
page read and write
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
BB3C000
|
unkown
|
page read and write
|
|
|
|
B20F000
|
unkown
|
page read and write
|
|
|
|
6B30000
|
heap private
|
page read and write
|
|
|
|
B6C7000
|
unkown
|
page read and write
|
|
|
|
B059000
|
unkown
|
page read and write
|
|
|
|
2010000
|
unkown image
|
page readonly
|
|
|
|
B617000
|
unkown
|
page read and write
|
|
|
|
21EB000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
78F1000
|
unkown
|
page read and write
|
|
|
|
346000
|
unkown
|
page read and write
|
|
|
|
614000
|
heap private
|
page read and write
|
|
|
|
7200000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
7DC1000
|
unkown
|
page read and write
|
|
|
|
B6C5000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
82A7000
|
unkown
|
page read and write
|
|
|
|
4CAD000
|
unkown
|
page read and write
|
|
|
|
7D58000
|
unkown
|
page read and write
|
|
|
|
BB2D000
|
unkown
|
page read and write
|
|
|
|
6E85C000
|
unkown image
|
page read and write
|
|
|
|
2DE000
|
heap default
|
page read and write
|
|
|
|
58F2000
|
unkown image
|
page read and write
|
|
|
|
4CAF000
|
stack
|
page read and write
|
|
|
|
219000
|
unkown
|
page read and write
|
|
|
|
2110000
|
unkown
|
page read and write
|
|
|
|
8750000
|
heap private
|
page read and write
|
|
|
|
822F000
|
unkown
|
page read and write
|
|
|
|
55CE000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
BB24000
|
unkown
|
page read and write
|
|
|
|
335000
|
unkown
|
page read and write
|
|
|
|
440000
|
unkown image
|
page readonly
|
|
|
|
B61F000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
7D68000
|
unkown
|
page read and write
|
|
|
|
4420000
|
unkown image
|
page readonly
|
|
|
|
7D54000
|
unkown
|
page read and write
|
|
|
|
7D65000
|
unkown
|
page read and write
|
|
|
|
B624000
|
unkown
|
page read and write
|
|
|
|
7E46000
|
unkown
|
page read and write
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
BA02000
|
unkown
|
page read and write
|
|
|
|
7D63000
|
unkown
|
page read and write
|
|
|
|
2149000
|
unkown
|
page read and write
|
|
|
|
557D000
|
unkown
|
page read and write
|
|
|
|
B77D000
|
unkown
|
page read and write
|
|
|
|
BB82000
|
unkown
|
page read and write
|
|
|
|
8130000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
1DBE000
|
unkown
|
page read and write
|
|
|
|
B20F000
|
unkown
|
page read and write
|
|
|
|
3270000
|
unkown
|
page read and write
|
|
|
|
6936000
|
unkown
|
page read and write
|
|
|
|
7D60000
|
unkown
|
page read and write
|
|
|
|
7DB7000
|
unkown
|
page read and write
|
|
|
|
670000
|
heap private
|
page read and write
|
|
|
|
B546000
|
unkown
|
page read and write
|
|
|
|
5647000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
8186000
|
unkown
|
page read and write
|
|
|
|
3A5000
|
unkown
|
page read and write
|
|
|
|
B09C000
|
unkown
|
page read and write
|
|
|
|
5532000
|
unkown
|
page read and write
|
|
|
|
785F000
|
unkown
|
page read and write
|
|
|
|
6E00000
|
unkown
|
page read and write
|
|
|
|
1D80000
|
unkown
|
page read and write
|
|
|
|
5647000
|
unkown
|
page read and write
|
|
|
|
3F69000
|
heap private
|
page read and write
|
|
|
|
B531000
|
unkown
|
page read and write
|
|
|
|
82B1000
|
unkown
|
page read and write
|
|
|
|
55CE000
|
unkown
|
page read and write
|
|
|
|
6AE0000
|
unkown
|
page read and write
|
|
|
|
7976000
|
unkown
|
page read and write
|
|
|
|
1DE0000
|
unkown image
|
page readonly
|
|
|
|
B614000
|
unkown
|
page read and write
|
|
|
|
AF50000
|
unkown
|
page read and write
|
|
|
|
3A60000
|
unkown image
|
page readonly
|
|
|
|
B070000
|
unkown
|
page read and write
|
|
|
|
82BB000
|
unkown
|
page read and write
|
|
|
|
BAF6000
|
unkown
|
page read and write
|
|
|
|
7DB8000
|
unkown
|
page read and write
|
|
|
|
4D07000
|
unkown
|
page read and write
|
|
|
|
82C0000
|
unkown
|
page read and write
|
|
|
|
7D5B000
|
unkown
|
page read and write
|
|
|
|
7D0E000
|
stack
|
page read and write
|
|
|
|
1D43000
|
unkown
|
page read and write
|
|
|
|
24E000
|
unkown
|
page read and write
|
|
|
|
BA2A000
|
unkown
|
page read and write
|
|
|
|
2245000
|
heap private
|
page read and write
|
|
|
|
41B9000
|
unkown
|
page read and write
|
|
|
|
6F03000
|
unkown
|
page read and write
|
|
|
|
52F000
|
unkown
|
page read and write
|
|
|
|
3230000
|
unkown image
|
page readonly
|
|
|
|
4C5000
|
unkown
|
page read and write
|
|
|
|
7F51000
|
unkown
|
page read and write
|
|
|
|
BA89000
|
unkown
|
page read and write
|
|
|
|
BB4D000
|
unkown
|
page read and write
|
|
|
|
B61F000
|
unkown
|
page read and write
|
|
|
|
B878000
|
unkown
|
page read and write
|
|
|
|
2103000
|
unkown
|
page read and write
|
|
|
|
B7CC000
|
unkown
|
page read and write
|
|
|
|
330000
|
heap private
|
page read and write
|
|
|
|
1C8D000
|
heap private
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
71B0000
|
unkown
|
page read and write
|
|
|
|
7DBE000
|
unkown
|
page read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
2630000
|
heap private
|
page read and write
|
|
|
|
BB24000
|
unkown
|
page read and write
|
|
|
|
B098000
|
unkown
|
page read and write
|
|
|
|
B556000
|
unkown
|
page read and write
|
|
|
|
B2AB000
|
unkown
|
page read and write
|
|
|
|
BA25000
|
unkown
|
page read and write
|
|
|
|
B0BF000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
B4AE000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
6E40000
|
unkown
|
page read and write
|
|
|
|
B5D0000
|
unkown
|
page read and write
|
|
|
|
2330000
|
unkown
|
page read and write
|
|
|
|
B75B000
|
unkown
|
page read and write
|
|
|
|
6EE0000
|
unkown
|
page read and write
|
|
|
|
819F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
2140000
|
unkown
|
page read and write
|
|
|
|
817C000
|
unkown
|
page read and write
|
|
|
|
5575000
|
unkown
|
page read and write
|
|
|
|
82F2000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page execute and read and write
|
|
|
|
5573000
|
unkown
|
page read and write
|
|
|
|
7D51000
|
unkown
|
page read and write
|
|
|
|
6E530000
|
unkown image
|
page readonly
|
|
|
|
1E6000
|
unkown
|
page read and write
|
|
|
|
7D56000
|
unkown
|
page read and write
|
|
|
|
4840000
|
unkown image
|
page readonly
|
|
|
|
556E000
|
unkown
|
page read and write
|
|
|
|
BB55000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
81F9000
|
unkown
|
page read and write
|
|
|
|
B367000
|
unkown
|
page read and write
|
|
|
|
BAF0000
|
unkown
|
page read and write
|
|
|
|
55C4000
|
unkown
|
page read and write
|
|
|
|
34B000
|
heap default
|
page read and write
|
|
|
|
2A7000
|
heap default
|
page read and write
|
|
|
|
403F000
|
stack
|
page read and write
|
|
|
|
317000
|
heap default
|
page read and write
|
|
|
|
4CBF000
|
unkown
|
page read and write
|
|
|
|
550000
|
heap private
|
page read and write
|
|
|
|
564C000
|
unkown
|
page read and write
|
|
|
|
3360000
|
unkown
|
page read and write
|
|
|
|
344000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
B6C2000
|
unkown
|
page read and write
|
|
|
|
7883000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
7D65000
|
unkown
|
page read and write
|
|
|
|
B279000
|
unkown
|
page read and write
|
|
|
|
8289000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown image
|
page readonly
|
|
|
|
6E858000
|
unkown image
|
page write copy
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
55BC000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
7DF3000
|
unkown
|
page read and write
|
|
|
|
6B4000
|
heap private
|
page read and write
|
|
|
|
B8B4000
|
unkown
|
page read and write
|
|
|
|
B90F000
|
unkown
|
page read and write
|
|
|
|
7F42000
|
unkown
|
page read and write
|
|
|
|
6E2A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7F25000
|
unkown
|
page read and write
|
|
|
|
227B000
|
heap private
|
page read and write
|
|
|
|
1CE0000
|
unkown
|
page read and write
|
|
|
|
BB50000
|
unkown
|
page read and write
|
|
|
|
1CC0000
|
unkown
|
page read and write
|
|
|
|
816D000
|
unkown
|
page read and write
|
|
|
|
B521000
|
unkown
|
page read and write
|
|
|
|
B4B8000
|
unkown
|
page read and write
|
|
|
|
B488000
|
unkown
|
page read and write
|
|
|
|
6910000
|
unkown
|
page read and write
|
|
|
|
7013000
|
unkown
|
page read and write
|
|
|
|
B7C7000
|
unkown
|
page read and write
|
|
|
|
447000
|
heap default
|
page read and write
|
|
|
|
7DFB000
|
unkown
|
page read and write
|
|
|
|
B488000
|
unkown
|
page read and write
|
|
|
|
5270000
|
unkown
|
page read and write
|
|
|
|
5564000
|
unkown
|
page read and write
|
|
|
|
BB41000
|
unkown
|
page read and write
|
|
|
|
54D6000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
22C0000
|
unkown
|
page read and write
|
|
|
|
B669000
|
unkown
|
page read and write
|
|
|
|
B415000
|
unkown
|
page read and write
|
|
|
|
346000
|
heap default
|
page read and write
|
|
|
|
7B10000
|
unkown
|
page read and write
|
|
|
|
47E000
|
heap default
|
page read and write
|
|
|
|
7F78000
|
unkown
|
page read and write
|
|
|
|
7E2A000
|
unkown
|
page read and write
|
|
|
|
7E5F000
|
unkown
|
page read and write
|
|
|
|
560000
|
unkown
|
page read and write
|
|
|
|
B3FC000
|
unkown
|
page read and write
|
|
|
|
B524000
|
unkown
|
page read and write
|
|
|
|
6B20000
|
unkown
|
page read and write
|
|
|
|
71F0000
|
unkown
|
page read and write
|
|
|
|
6F50000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
BB3E000
|
unkown
|
page read and write
|
|
|
|
7F24000
|
unkown
|
page read and write
|
|
|
|
6940000
|
unkown
|
page read and write
|
|
|
|
5772000
|
unkown
|
page read and write
|
|
|
|
5541000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
3220000
|
unkown image
|
page readonly
|
|
|
|
21B0000
|
heap private
|
page read and write
|
|
|
|
B526000
|
unkown
|
page read and write
|
|
|
|
B29E000
|
unkown
|
page read and write
|
|
|
|
82B6000
|
unkown
|
page read and write
|
|
|
|
5578000
|
unkown
|
page read and write
|
|
|
|
B51F000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown
|
page read and write
|
|
|
|
4A27000
|
unkown image
|
page readonly
|
|
|
|
82CB000
|
unkown
|
page read and write
|
|
|
|
B35F000
|
unkown
|
page read and write
|
|
|
|
8177000
|
unkown
|
page read and write
|
|
|
|
34E000
|
heap default
|
page read and write
|
|
|
|
2120000
|
unkown
|
page read and write
|
|
|
|
3E99000
|
heap private
|
page read and write
|
|
|
|
BA0E000
|
unkown
|
page read and write
|
|
|
|
6D30000
|
heap private
|
page read and write
|
|
|
|
559A000
|
unkown
|
page read and write
|
|
|
|
37E000
|
unkown
|
page read and write
|
|
|
|
BA07000
|
unkown
|
page read and write
|
|
|
|
7E5A000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown
|
page read and write
|
|
|
|
BAF0000
|
unkown
|
page read and write
|
|
|
|
1C60000
|
unkown
|
page read and write
|
|
|
|
3D20000
|
unkown image
|
page read and write
|
|
|
|
B57E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7F24000
|
unkown
|
page read and write
|
|
|
|
B549000
|
unkown
|
page read and write
|
|
|
|
7FB4000
|
unkown
|
page read and write
|
|
|
|
6930000
|
unkown
|
page read and write
|
|
|
|
B6CA000
|
unkown
|
page read and write
|
|
|
|
B281000
|
unkown
|
page read and write
|
|
|
|
7D4C000
|
unkown
|
page read and write
|
|
|
|
1DA0000
|
unkown image
|
page readonly
|
|
|
|
8294000
|
unkown
|
page read and write
|
|
|
|
7AE0000
|
unkown
|
page read and write
|
|
|
|
BA11000
|
unkown
|
page read and write
|
|
|
|
125000
|
unkown
|
page read and write
|
|
|
|
1DAE000
|
unkown
|
page read and write
|
|
|
|
B4BD000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
B614000
|
unkown
|
page read and write
|
|
|
|
347000
|
heap default
|
page read and write
|
|
|
|
B7C7000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
B7CA000
|
unkown
|
page read and write
|
|
|
|
B29E000
|
unkown
|
page read and write
|
|
|
|
B0BD000
|
unkown
|
page read and write
|
|
|
|
559F000
|
unkown
|
page read and write
|
|
|
|
7D82000
|
unkown
|
page read and write
|
|
|
|
7E50000
|
unkown
|
page read and write
|
|
|
|
B51C000
|
unkown
|
page read and write
|
|
|
|
B291000
|
unkown
|
page read and write
|
|
|
|
B549000
|
unkown
|
page read and write
|
|
|
|
7FAD000
|
unkown
|
page read and write
|
|
|
|
7210000
|
heap private
|
page read and write
|
|
|
|
360000
|
unkown image
|
page read and write
|
|
|
|
BAB1000
|
unkown
|
page read and write
|
|
|
|
48F000
|
stack
|
page read and write
|
|
|
|
33D000
|
heap default
|
page read and write
|
|
|
|
20F5000
|
heap private
|
page read and write
|
|
|
|
6AED000
|
unkown
|
page read and write
|
|
|
|
6962000
|
unkown
|
page read and write
|
|
|
|
5557000
|
unkown
|
page read and write
|
|
|
|
2FA000
|
heap default
|
page read and write
|
|
|
|
B521000
|
unkown
|
page read and write
|
|
|
|
6E20000
|
unkown
|
page read and write
|
|
|
|
7E48000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5D0000
|
unkown image
|
page readonly
|
|
|
|
1CD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
6910000
|
unkown
|
page read and write
|
|
|
|
7940000
|
unkown
|
page read and write
|
|
|
|
310000
|
heap default
|
page read and write
|
|
|
|
3B4000
|
unkown
|
page read and write
|
|
|
|
7DBE000
|
unkown
|
page read and write
|
|
|
|
7D4C000
|
unkown
|
page read and write
|
|
|
|
77D8000
|
unkown
|
page read and write
|
|
|
|
7AEA000
|
unkown
|
page read and write
|
|
|
|
7FB7000
|
unkown
|
page read and write
|
|
|
|
537E000
|
stack
|
page read and write
|
|
|
|
B3FC000
|
unkown
|
page read and write
|
|
|
|
7F26000
|
unkown
|
page read and write
|
|
|
|
B0BD000
|
unkown
|
page read and write
|
|
|
|
4E6000
|
unkown
|
page read and write
|
|
|
|
1D60000
|
unkown
|
page read and write
|
|
|
|
4080000
|
heap private
|
page read and write
|
|
|
|
65300000
|
unkown image
|
page readonly
|
|
|
|
693A000
|
unkown
|
page read and write
|
|
|
|
B41A000
|
unkown
|
page read and write
|
|
|
|
BB5B000
|
unkown
|
page read and write
|
|
|
|
6ED0000
|
unkown
|
page read and write
|
|
|
|
B2CE000
|
unkown
|
page read and write
|
|
|
|
8289000
|
unkown
|
page read and write
|
|
|
|
7D31000
|
unkown
|
page read and write
|
|
|
|
B529000
|
unkown
|
page read and write
|
|
|
|
55C3000
|
unkown
|
page read and write
|
|
|
|
41E8000
|
unkown
|
page read and write
|
|
|
|
7D31000
|
unkown
|
page read and write
|
|
|
|
6D00000
|
unkown
|
page read and write
|
|
|
|
37E000
|
heap default
|
page read and write
|
|
|
|
7D4E000
|
unkown
|
page read and write
|
|
|
|
B26F000
|
unkown
|
page read and write
|
|
|
|
829D000
|
unkown
|
page read and write
|
|
|
|
3330000
|
unkown
|
page read and write
|
|
|
|
8266000
|
unkown
|
page read and write
|
|
|
|
395000
|
unkown
|
page read and write
|
|
|
|
B27C000
|
unkown
|
page read and write
|
|
|
|
4C80000
|
unkown
|
page read and write
|
|
|
|
7E55000
|
unkown
|
page read and write
|
|
|
|
4E5000
|
unkown
|
page read and write
|
|
|
|
3280000
|
heap private
|
page read and write
|
|
|
|
55C0000
|
unkown
|
page read and write
|
|
|
|
BA07000
|
unkown
|
page read and write
|
|
|
|
7FE5000
|
unkown
|
page read and write
|
|
|
|
2144000
|
unkown
|
page read and write
|
|
|
|
BA65000
|
unkown
|
page read and write
|
|
|
|
7DB8000
|
unkown
|
page read and write
|
|
|
|
4085000
|
heap private
|
page read and write
|
|
|
|
B41A000
|
unkown
|
page read and write
|
|
|
|
7E52000
|
unkown
|
page read and write
|
|
|
|
BB37000
|
unkown
|
page read and write
|
|
|
|
6920000
|
unkown
|
page read and write
|
|
|
|
B4AB000
|
unkown
|
page read and write
|
|
|
|
BB50000
|
unkown
|
page read and write
|
|
|
|
B276000
|
unkown
|
page read and write
|
|
|
|
54F1000
|
unkown
|
page read and write
|
|
|
|
7DF3000
|
unkown
|
page read and write
|
|
|
|
B0BF000
|
unkown
|
page read and write
|
|
|
|
6E30000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7DEA000
|
unkown
|
page read and write
|
|
|
|
77B0000
|
unkown
|
page read and write
|
|
|
|
8190000
|
unkown
|
page read and write
|
|
|
|
4AA000
|
unkown
|
page read and write
|
|
|
|
B20D000
|
unkown
|
page read and write
|
|
|
|
B617000
|
unkown
|
page read and write
|
|
|
|
B417000
|
unkown
|
page read and write
|
|
|
|
4AF7000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5601000
|
unkown
|
page read and write
|
|
|
|
5699000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown image
|
page readonly
|
|
|
|
7CBF000
|
unkown
|
page read and write
|
|
|
|
7940000
|
unkown
|
page read and write
|
|
|
|
1DA0000
|
unkown
|
page read and write
|
|
|
|
B6C2000
|
unkown
|
page read and write
|
|
|
|
334000
|
heap private
|
page read and write
|
|
|
|
B7D4000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
B8AC000
|
unkown
|
page read and write
|
|
|
|
B4C7000
|
unkown
|
page read and write
|
|
|
|
BB14000
|
unkown
|
page read and write
|
|
|
|
B52C000
|
unkown
|
page read and write
|
|
|
|
77DC000
|
unkown
|
page read and write
|
|
|
|
BAB5000
|
unkown
|
page read and write
|
|
|
|
B296000
|
unkown
|
page read and write
|
|
|
|
325000
|
unkown
|
page read and write
|
|
|
|
7DF3000
|
unkown
|
page read and write
|
|
|
|
3B6000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
B756000
|
unkown
|
page read and write
|
|
|
|
BB19000
|
unkown
|
page read and write
|
|
|
|
BA2F000
|
unkown
|
page read and write
|
|
|
|
7DB8000
|
unkown
|
page read and write
|
|
|
|
B417000
|
unkown
|
page read and write
|
|
|
|
B546000
|
unkown
|
page read and write
|
|
|
|
82A3000
|
unkown
|
page read and write
|
|
|
|
B51C000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
55C4000
|
unkown
|
page read and write
|
|
|
|
55C0000
|
unkown
|
page read and write
|
|
|
|
7D82000
|
unkown
|
page read and write
|
|
|
|
BB55000
|
unkown
|
page read and write
|
|
|
|
B94F000
|
unkown
|
page read and write
|
|
|
|
1D4E000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
BABA000
|
unkown
|
page read and write
|
|
|
|
BABF000
|
unkown
|
page read and write
|
|
|
|
7C84000
|
unkown
|
page read and write
|
|
|
|
B374000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
8181000
|
unkown
|
page read and write
|
|
|
|
4870000
|
stack
|
page read and write
|
|
|
|
55E2000
|
unkown
|
page read and write
|
|
|
|
54D0000
|
unkown
|
page read and write
|
|
|
|
B274000
|
unkown
|
page read and write
|
|
|
|
55CE000
|
unkown
|
page read and write
|
|
|
|
2620000
|
unkown
|
page read and write
|
|
|
|
5548000
|
unkown
|
page read and write
|
|
|
|
B09C000
|
unkown
|
page read and write
|
|
|
|
B954000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
4163000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
816D000
|
unkown
|
page read and write
|
|
|
|
7CC4000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
B8B0000
|
unkown
|
page read and write
|
|
|
|
4850000
|
stack
|
page read and write
|
|
|
|
238000
|
unkown
|
page read and write
|
|
|
|
B4BB000
|
unkown
|
page read and write
|
|
|
|
7B5C000
|
unkown
|
page read and write
|
|
|
|
41F0000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
4DC0000
|
unkown
|
page read and write
|
|
|
|
B517000
|
unkown
|
page read and write
|
|
|
|
31DF000
|
stack
|
page read and write
|
|
|
|
1C85000
|
heap private
|
page read and write
|
|
|
|
817E000
|
unkown
|
page read and write
|
|
|
|
7020000
|
unkown
|
page read and write
|
|
|
|
1CA4000
|
unkown
|
page read and write
|
|
|
|
B200000
|
unkown
|
page read and write
|
|
|
|
55D9000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
6950000
|
unkown
|
page read and write
|
|
|
|
8294000
|
unkown
|
page read and write
|
|
|
|
7FDF000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
BA84000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
B410000
|
unkown
|
page read and write
|
|
|
|
7DEF000
|
unkown
|
page read and write
|
|
|
|
560B000
|
unkown
|
page read and write
|
|
|
|
6AF0000
|
unkown
|
page read and write
|
|
|
|
413E000
|
stack
|
page read and write
|
|
|
|
7DFB000
|
unkown
|
page read and write
|
|
|
|
1B60000
|
unkown
|
page read and write
|
|
|
|
6BB0000
|
unkown
|
page read and write
|
|
|
|
B8B4000
|
unkown
|
page read and write
|
|
|
|
B35A000
|
unkown
|
page read and write
|
|
|
|
6AE8000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
81F9000
|
unkown
|
page read and write
|
|
|
|
55CF000
|
unkown
|
page read and write
|
|
|
|
70000
|
unkown image
|
page read and write
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
BA65000
|
unkown
|
page read and write
|
|
|
|
4C90000
|
unkown
|
page read and write
|
|
|
|
82BB000
|
unkown
|
page read and write
|
|
|
|
2190000
|
unkown
|
page read and write
|
|
|
|
5612000
|
unkown
|
page read and write
|
|
|
|
7EC2000
|
unkown
|
page read and write
|
|
|
|
55C0000
|
unkown
|
page read and write
|
|
|
|
53A0000
|
unkown
|
page read and write
|
|
|
|
BB37000
|
unkown
|
page read and write
|
|
|
|
B756000
|
unkown
|
page read and write
|
|
|
|
B4AB000
|
unkown
|
page read and write
|
|
|
|
6966000
|
unkown
|
page read and write
|
|
|
|
7DF1000
|
unkown
|
page read and write
|
|
|
|
B281000
|
unkown
|
page read and write
|
|
|
|
54D4000
|
unkown
|
page read and write
|
|
|
|
37A000
|
unkown
|
page read and write
|
|
|
|
3DF000
|
heap default
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
B54E000
|
unkown
|
page read and write
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
7C1C000
|
unkown
|
page read and write
|
|
|
|
BB5B000
|
unkown
|
page read and write
|
|
|
|
7F26000
|
unkown
|
page read and write
|
|
|
|
5387000
|
unkown
|
page read and write
|
|
|
|
6DFB000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
7D30000
|
unkown
|
page read and write
|
|
|
|
3D30000
|
heap private
|
page read and write
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
540000
|
unkown image
|
page readonly
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
7D60000
|
unkown
|
page read and write
|
|
|
|
4C8E000
|
unkown
|
page read and write
|
|
|
|
51B0000
|
unkown
|
page read and write
|
|
|
|
B1B1000
|
unkown
|
page read and write
|
|
|
|
7DBE000
|
unkown
|
page read and write
|
|
|
|
238000
|
unkown
|
page read and write
|
|
|
|
7FBD000
|
unkown
|
page read and write
|
|
|
|
BB41000
|
unkown
|
page read and write
|
|
|
|
8350000
|
unkown
|
page read and write
|
|
|
|
4FB7000
|
unkown image
|
page readonly
|
|
|
|
2E0000
|
unkown
|
page read and write
|
|
|
|
8350000
|
unkown
|
page read and write
|
|
|
|
7D51000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
1C90000
|
unkown
|
page read and write
|
|
|
|
B7B7000
|
unkown
|
page read and write
|
|
|
|
B2AB000
|
unkown
|
page read and write
|
|
|
|
1D50000
|
unkown
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
4E4000
|
unkown
|
page read and write
|
|
|
|
B541000
|
unkown
|
page read and write
|
|
|
|
6F44000
|
unkown image
|
page readonly
|
|
|
|
49A000
|
heap default
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
2215000
|
heap private
|
page read and write
|
|
|
|
819A000
|
unkown
|
page read and write
|
|
|
|
BB7D000
|
unkown
|
page read and write
|
|
|
|
779F000
|
stack
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
7B58000
|
unkown
|
page read and write
|
|
|
|
B2AE000
|
unkown
|
page read and write
|
|
|
|
1D53000
|
unkown
|
page read and write
|
|
|
|
82C5000
|
unkown
|
page read and write
|
|
|
|
55BC000
|
unkown
|
page read and write
|
|
|
|
8260000
|
unkown
|
page read and write
|
|
|
|
7690000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
B189000
|
unkown
|
page read and write
|
|
|
|
6DF0000
|
unkown
|
page read and write
|
|
|
|
8284000
|
unkown
|
page read and write
|
|
|
|
4C40000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
BA02000
|
unkown
|
page read and write
|
|
|
|
5566000
|
unkown
|
page read and write
|
|
|
|
BA84000
|
unkown
|
page read and write
|
|
|
|
7DEA000
|
unkown
|
page read and write
|
|
|
|
81D5000
|
unkown
|
page read and write
|
|
|
|
BB5F000
|
unkown
|
page read and write
|
|
|
|
BA0C000
|
unkown
|
page read and write
|
|
|
|
244000
|
unkown
|
page read and write
|
|
|
|
8195000
|
unkown
|
page read and write
|
|
|
|
B914000
|
unkown
|
page read and write
|
|
|
|
B524000
|
unkown
|
page read and write
|
|
|
|
5559000
|
unkown
|
page read and write
|
|
|
|
81FE000
|
unkown
|
page read and write
|
|
|
|
5780000
|
unkown
|
page read and write
|
|
|
|
7F4C000
|
unkown
|
page read and write
|
|
|
|
B878000
|
unkown
|
page read and write
|
|
|
|
412000
|
heap default
|
page read and write
|
|
|
|
7D51000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
B76B000
|
unkown
|
page read and write
|
|
|
|
B526000
|
unkown
|
page read and write
|
|
|
|
B410000
|
unkown
|
page read and write
|
|
|
|
7D63000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
8172000
|
unkown
|
page read and write
|
|
|
|
594000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
3350000
|
unkown
|
page read and write
|
|
|
|
B3B9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7C20000
|
unkown
|
page read and write
|
|
|
|
8177000
|
unkown
|
page read and write
|
|
|
|
6F00000
|
unkown
|
page read and write
|
|
|
|
B6AC000
|
unkown
|
page read and write
|
|
|
|
7F47000
|
unkown
|
page read and write
|
|
|
|
7D82000
|
unkown
|
page read and write
|
|
|
|
4D21000
|
unkown
|
page read and write
|
|
|
|
BA2A000
|
unkown
|
page read and write
|
|
|
|
2129000
|
unkown
|
page read and write
|
|
|
|
7AC6000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown image
|
page readonly
|
|
|
|
7B20000
|
heap private
|
page read and write
|
|
|
|
B57E000
|
unkown
|
page read and write
|
|
|
|
6E801000
|
unkown image
|
page readonly
|
|
|
|
6920000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown image
|
page read and write
|
|
|
|
7D31000
|
unkown
|
page read and write
|
|
|
|
B271000
|
unkown
|
page read and write
|
|
|
|
6920000
|
unkown
|
page read and write
|
|
|
|
6E50000
|
heap private
|
page read and write
|
|
|
|
7D65000
|
unkown
|
page read and write
|
|
|
|
7E4E000
|
unkown
|
page read and write
|
|
|
|
82ED000
|
unkown
|
page read and write
|
|
|
|
1D00000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6BD0000
|
heap private
|
page read and write
|
|
|
|
8190000
|
unkown
|
page read and write
|
|
|
|
7D63000
|
unkown
|
page read and write
|
|
|
|
7AD0000
|
unkown
|
page read and write
|
|
|
|
7F5B000
|
unkown
|
page read and write
|
|
|
|
BA2F000
|
unkown
|
page read and write
|
|
|
|
25FF000
|
stack
|
page read and write
|
|
|
|
B60A000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
5610000
|
unkown
|
page read and write
|
|
|
|
344000
|
unkown
|
page read and write
|
|
|
|
5542000
|
unkown
|
page read and write
|
|
|
|
6E10000
|
unkown
|
page read and write
|
|
|
|
B289000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
7EB1000
|
unkown
|
page read and write
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
82B1000
|
unkown
|
page read and write
|
|
|
|
6940000
|
unkown
|
page read and write
|
|
|
|
B27C000
|
unkown
|
page read and write
|
|
|
|
535000
|
unkown
|
page read and write
|
|
|
|
7AC0000
|
unkown
|
page read and write
|
|
|
|
B7EC000
|
unkown
|
page read and write
|
|
|
|
41D0000
|
unkown
|
page read and write
|
|
|
|
8203000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
390000
|
heap private
|
page read and write
|
|
|
|
B217000
|
unkown
|
page read and write
|
|
|
|
3300000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
55C0000
|
unkown
|
page read and write
|
|
|
|
6940000
|
unkown
|
page read and write
|
|
|
|
5578000
|
unkown
|
page read and write
|
|
|
|
6AD0000
|
unkown
|
page read and write
|
|
|
|
1D97000
|
unkown
|
page read and write
|
|
|
|
BADC000
|
unkown
|
page read and write
|
|
|
|
B521000
|
unkown
|
page read and write
|
|
|
|
554D000
|
unkown
|
page read and write
|
|
|
|
6950000
|
unkown
|
page read and write
|
|
|
|
4180000
|
unkown
|
page read and write
|
|
|
|
B94F000
|
unkown
|
page read and write
|
|
|
|
5608000
|
unkown
|
page read and write
|
|
|
|
F9000
|
unkown
|
page read and write
|
|
|
|
8239000
|
unkown
|
page read and write
|
|
|
|
1B96000
|
unkown
|
page read and write
|
|
|
|
BA8E000
|
unkown
|
page read and write
|
|
|
|
4C98000
|
unkown
|
page read and write
|
|
|
|
B1B1000
|
unkown
|
page read and write
|
|
|
|
B55E000
|
unkown
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
214000
|
heap private
|
page read and write
|
|
|
|
B77D000
|
unkown
|
page read and write
|
|
|
|
8225000
|
unkown
|
page read and write
|
|
|
|
6930000
|
unkown
|
page read and write
|
|
|
|
82A7000
|
unkown
|
page read and write
|
|
|
|
B90F000
|
unkown
|
page read and write
|
|
|
|
8260000
|
unkown
|
page read and write
|
|
|
|
344000
|
unkown
|
page read and write
|
|
|
|
2130000
|
unkown
|
page read and write
|
|
|
|
BA93000
|
unkown
|
page read and write
|
|
|
|
55DE000
|
unkown
|
page read and write
|
|
|
|
69F0000
|
unkown
|
page read and write
|
|
|
|
5564000
|
unkown
|
page read and write
|
|
|
|
B2A6000
|
unkown
|
page read and write
|
|
|
|
3C80000
|
heap private
|
page execute and read and write
|
|
|
|
B2CC000
|
unkown
|
page read and write
|
|
|
|
51FC000
|
unkown
|
page read and write
|
|
|
|
409000
|
heap default
|
page read and write
|
|
|
|
564C000
|
unkown
|
page read and write
|
|
|
|
392000
|
unkown
|
page read and write
|
|
|
|
296000
|
unkown
|
page read and write
|
|
|
|
7170000
|
unkown
|
page read and write
|
|
|
|
5667000
|
unkown
|
page read and write
|
|
|
|
7B00000
|
unkown
|
page read and write
|
|
|
|
6920000
|
unkown
|
page read and write
|
|
|
|
7DE9000
|
unkown
|
page read and write
|
|
|
|
7D68000
|
unkown
|
page read and write
|
|
|
|
6E84B000
|
unkown image
|
page read and write
|
|
|
|
7F56000
|
unkown
|
page read and write
|
|
|
|
3D34000
|
heap private
|
page read and write
|
|
|
|
7BE0000
|
unkown
|
page read and write
|
|
|
|
221F000
|
unkown
|
page read and write
|
|
|
|
B7EC000
|
unkown
|
page read and write
|
|
|
|
4E4000
|
unkown
|
page read and write
|
|
|
|
550D000
|
unkown
|
page read and write
|
|
|
|
407000
|
heap default
|
page read and write
|
|
|
|
2639000
|
heap private
|
page read and write
|
|
|
|
55BF000
|
unkown
|
page read and write
|
|
|
|
7EED000
|
unkown
|
page read and write
|
|
|
|
818B000
|
unkown
|
page read and write
|
|
|
|
89C0000
|
heap private
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
B7E8000
|
unkown
|
page read and write
|
|
|
|
5690000
|
unkown
|
page read and write
|
|
|
|
36A000
|
heap default
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
4D5000
|
unkown
|
page read and write
|
|
|
|
77FF000
|
unkown
|
page read and write
|
|
|
|
B070000
|
unkown
|
page read and write
|
|
|
|
B517000
|
unkown
|
page read and write
|
|
|
|
B756000
|
unkown
|
page read and write
|
|
|
|
5607000
|
unkown
|
page read and write
|
|
|
|
B4BB000
|
unkown
|
page read and write
|
|
|
|
B4A6000
|
unkown
|
page read and write
|
|
|
|
8284000
|
unkown
|
page read and write
|
|
|
|
4165000
|
unkown
|
page read and write
|
|
|
|
B4B3000
|
unkown
|
page read and write
|
|
|
|
B77A000
|
unkown
|
page read and write
|
|
|
|
B6C0000
|
unkown
|
page read and write
|
|
|
|
6DF000
|
stack
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
5560000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
6950000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
760000
|
unkown image
|
page readonly
|
|
|
|
248F000
|
stack
|
page read and write
|
|
|
|
7D31000
|
unkown
|
page read and write
|
|
|
|
7D4E000
|
unkown
|
page read and write
|
|
|
|
404000
|
heap default
|
page read and write
|
|
|
|
BAD8000
|
unkown
|
page read and write
|
|
|
|
B367000
|
unkown
|
page read and write
|
|
|
|
B55B000
|
unkown
|
page read and write
|
|
|
|
5385000
|
unkown
|
page read and write
|
|
|
|
224B000
|
heap private
|
page read and write
|
|
|
|
7E62000
|
unkown
|
page read and write
|
|
|
|
4AE000
|
unkown
|
page read and write
|
|
|
|
5580000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
2124000
|
unkown
|
page read and write
|
|
|
|
B35A000
|
unkown
|
page read and write
|
|
|
|
1CF0000
|
unkown
|
page read and write
|
|
|
|
BA0E000
|
unkown
|
page read and write
|
|
|
|
BA1B000
|
unkown
|
page read and write
|
|
|
|
B51A000
|
unkown
|
page read and write
|
|
|
|
6A50000
|
unkown
|
page read and write
|
|
|
|
B143000
|
unkown
|
page read and write
|
|
|
|
819A000
|
unkown
|
page read and write
|
|
|
|
B61C000
|
unkown
|
page read and write
|
|
|
|
B756000
|
unkown
|
page read and write
|
|
|
|
5697000
|
unkown
|
page read and write
|
|
|
|
B2AE000
|
unkown
|
page read and write
|
|
|
|
8248000
|
unkown
|
page read and write
|
|
|
|
4CA5000
|
unkown
|
page read and write
|
|
|
|
1AD000
|
unkown
|
page read and write
|
|
|
|
55DB000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page execute and read and write
|
|
|
|
B54E000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
3E40000
|
unkown
|
page read and write
|
|
|
|
3340000
|
unkown
|
page read and write
|
|
|
|
B61C000
|
unkown
|
page read and write
|
|
|
|
B189000
|
unkown
|
page read and write
|
|
|
|
B374000
|
unkown
|
page read and write
|
|
|
|
4E4000
|
unkown
|
page read and write
|
|
|
|
B7D1000
|
unkown
|
page read and write
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
6960000
|
unkown
|
page read and write
|
|
|
|
B954000
|
unkown
|
page read and write
|
|
|
|
7AD0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
5648000
|
unkown
|
page read and write
|
|
|
|
7D4C000
|
unkown
|
page read and write
|
|
|
|
B4BF000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
B763000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
39C000
|
unkown
|
page read and write
|
|
|
|
345000
|
unkown
|
page read and write
|
|
|
|
4B30000
|
unkown
|
page read and write
|
|
|
|
6922000
|
unkown
|
page read and write
|
|
|
|
4C70000
|
unkown
|
page read and write
|
|
|
|
7DC1000
|
unkown
|
page read and write
|
|
|
|
82AE000
|
unkown
|
page read and write
|
|
|
|
B4A6000
|
unkown
|
page read and write
|
|
|
|
363000
|
heap default
|
page read and write
|
|
|
|
3B40000
|
unkown image
|
page readonly
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
6F90000
|
heap private
|
page read and write
|
|
|
|
6900000
|
unkown
|
page read and write
|
|
|
|
B60F000
|
unkown
|
page read and write
|
|
|
|
BB33000
|
unkown
|
page read and write
|
|
|
|
4CF8000
|
unkown
|
page read and write
|
|
|
|
1C80000
|
heap private
|
page read and write
|
|
|
|
BAB5000
|
unkown
|
page read and write
|
|
|
|
41B000
|
heap default
|
page read and write
|
|
|
|
BB4B000
|
unkown
|
page read and write
|
|
|
|
4190000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
B098000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
heap default
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
71B0000
|
unkown
|
page read and write
|
|
|
|
55C4000
|
unkown
|
page read and write
|
|
|
|
3D40000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
B9C0000
|
unkown
|
page read and write
|
|
|
|
7F26000
|
unkown
|
page read and write
|
|
|
|
7030000
|
heap private
|
page read and write
|
|
|
|
8181000
|
unkown
|
page read and write
|
|
|
|
7D58000
|
unkown
|
page read and write
|
|
|
|
4CA9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
82C0000
|
unkown
|
page read and write
|
|
|
|
818B000
|
unkown
|
page read and write
|
|
|
|
B4AE000
|
unkown
|
page read and write
|
|
|
|
7D4C000
|
unkown
|
page read and write
|
|
|
|
62F000
|
stack
|
page read and write
|
|
|
|
3D10000
|
unkown image
|
page readonly
|
|
|
|
253000
|
unkown
|
page read and write
|
|
|
|
AF50000
|
unkown
|
page read and write
|
|
|
|
B669000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
BA93000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
B9F8000
|
unkown
|
page read and write
|
|
|
|
BA89000
|
unkown
|
page read and write
|
|
|
|
B8B0000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
B11E000
|
unkown
|
page read and write
|
|
|
|
B524000
|
unkown
|
page read and write
|
|
|
|
B914000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
8BEE000
|
stack
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
590000
|
heap private
|
page read and write
|
|
|
|
B57C000
|
unkown
|
page read and write
|
|
|
|
4D5000
|
unkown
|
page read and write
|
|
|
|
610000
|
heap private
|
page read and write
|
|
|
|
88FA000
|
stack
|
page read and write
|
|
|
|
7D58000
|
unkown
|
page read and write
|
|
|
|
B296000
|
unkown
|
page read and write
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
2F3000
|
heap default
|
page read and write
|
|
|
|
B624000
|
unkown
|
page read and write
|
|
|
|
554000
|
heap private
|
page read and write
|
|
|
|
B7CA000
|
unkown
|
page read and write
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
30E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
B51A000
|
unkown
|
page read and write
|
|
|
|
B4BD000
|
unkown
|
page read and write
|
|
|
|
82CF000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
3FF000
|
heap default
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
B529000
|
unkown
|
page read and write
|
|
|
|
7DFB000
|
unkown
|
page read and write
|
|
|
|
41A0000
|
unkown
|
page read and write
|
|
|
|
390000
|
unkown
|
page read and write
|
|
|
|
7E4B000
|
unkown
|
page read and write
|
|
|
|
82AE000
|
unkown
|
page read and write
|
|
|
|
B364000
|
unkown
|
page read and write
|
|
|
|
B20D000
|
unkown
|
page read and write
|
|
|
|
B412000
|
unkown
|
page read and write
|
|
|
|
5542000
|
unkown
|
page read and write
|
|
|
|
405000
|
unkown
|
page read and write
|
|
|
|
5382000
|
unkown
|
page read and write
|
|
|
|
4CA0000
|
unkown
|
page read and write
|
|
|
|
5700000
|
unkown
|
page read and write
|
|
|
|
5606000
|
unkown
|
page read and write
|
|
|
|
3310000
|
unkown
|
page read and write
|
|
|
|
1D40000
|
unkown
|
page read and write
|
|
|
|
6DF0000
|
unkown
|
page read and write
|
|
|
|
8350000
|
unkown
|
page read and write
|
|
|
|
55E4000
|
unkown
|
page read and write
|
|
|
|
4840000
|
stack
|
page read and write
|
|
|
|
BB14000
|
unkown
|
page read and write
|
|
|
|
300000
|
heap default
|
page read and write
|
|
|
|
3320000
|
unkown
|
page read and write
|
|
|
|
1D75000
|
unkown
|
page read and write
|
|
|
|
B7CF000
|
unkown
|
page read and write
|
|
|
|
82AC000
|
unkown
|
page read and write
|
|
|
|
7020000
|
unkown
|
page read and write
|
|
|
|
B55B000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
6D10000
|
unkown
|
page read and write
|
|
|
|
B541000
|
unkown
|
page read and write
|
|
|
|
6960000
|
unkown
|
page read and write
|
|
|
|
BA20000
|
unkown
|
page read and write
|
|
|
|
4089000
|
heap private
|
page read and write
|
|
|
|
B8AC000
|
unkown
|
page read and write
|
|
|
|
B217000
|
unkown
|
page read and write
|
|
|
|
7E7C000
|
unkown
|
page read and write
|
|
|
|
6920000
|
unkown
|
page read and write
|
|
|
|
7DBE000
|
unkown
|
page read and write
|
|
|
|
440000
|
heap default
|
page read and write
|
|
|
|
BABA000
|
unkown
|
page read and write
|
|
|
|
B7D4000
|
unkown
|
page read and write
|
|
|
|
B26F000
|
unkown
|
page read and write
|
|
|
|
82AC000
|
unkown
|
page read and write
|
|
|
|
B556000
|
unkown
|
page read and write
|
|
|
|
4C2000
|
unkown
|
page read and write
|
|
|
|
32C000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
heap private
|
page read and write
|
|
|
|
41E0000
|
unkown
|
page read and write
|
|
|
|
BB5F000
|
unkown
|
page read and write
|
|
|
|
4C50000
|
unkown
|
page read and write
|
|
|
|
4DD0000
|
unkown image
|
page readonly
|
|
|
|
8266000
|
unkown
|
page read and write
|
|
|
|
7D60000
|
unkown
|
page read and write
|
|
|
|
B6C5000
|
unkown
|
page read and write
|
|
|
|
220000
|
unkown image
|
page readonly
|
|
|
|
B521000
|
unkown
|
page read and write
|
|
|
|
8186000
|
unkown
|
page read and write
|
|
|
|
3D76000
|
unkown
|
page read and write
|
|
|
|
216000
|
unkown
|
page read and write
|
|
|
|
6E854000
|
unkown image
|
page read and write
|
|
|
|
232000
|
unkown
|
page read and write
|
|
|
|
557D000
|
unkown
|
page read and write
|
|
|
|
41C0000
|
unkown
|
page read and write
|
|
|
|
7D58000
|
unkown
|
page read and write
|
|
|
|
B143000
|
unkown
|
page read and write
|
|
|
|
3D00000
|
unkown
|
page read and write
|
|
|
|
817C000
|
unkown
|
page read and write
|
|
|
|
B6CA000
|
unkown
|
page read and write
|
|
|
|
71F0000
|
unkown
|
page read and write
|
|
|
|
4A30000
|
unkown image
|
page readonly
|
|
|
|
B274000
|
unkown
|
page read and write
|
|
|
|
B9F8000
|
unkown
|
page read and write
|
|
|
|
6BC5000
|
heap private
|
page read and write
|
|
|
|
52F000
|
stack
|
page read and write
|
|
|
|
3E95000
|
heap private
|
page read and write
|
|
|
|
B1D8000
|
unkown
|
page read and write
|
|
|
|
3FF000
|
unkown
|
page read and write
|
|
|
|
8221000
|
unkown
|
page read and write
|
|
|
|
B415000
|
unkown
|
page read and write
|
|
|
|
7D65000
|
unkown
|
page read and write
|
|
|
|
B412000
|
unkown
|
page read and write
|
|
|
|
3260000
|
unkown
|
page read and write
|
|
|
|
81D5000
|
unkown
|
page read and write
|
|
|
|
7DC1000
|
unkown
|
page read and write
|
|
|
|
81F4000
|
unkown
|
page read and write
|
|
|
|
7FBF000
|
unkown
|
page read and write
|
|
|
|
4418000
|
stack
|
page read and write
|
|
|
|
71B0000
|
unkown
|
page read and write
|
|
|
|
346F000
|
stack
|
page read and write
|
|
|
|
82ED000
|
unkown
|
page read and write
|
|
|
|
7D56000
|
unkown
|
page read and write
|
|
|
|
4CC000
|
unkown
|
page read and write
|
|
|
|
395000
|
unkown
|
page read and write
|
|
|
|
335000
|
unkown
|
page read and write
|
|
|
|
6D20000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown
|
page read and write
|
|
|
|
7D4E000
|
unkown
|
page read and write
|
|
|
|
7FBD000
|
unkown
|
page read and write
|
|
|
|
822A000
|
unkown
|
page read and write
|
|
|
|
82CF000
|
unkown
|
page read and write
|
|
|
|
30DE000
|
stack
|
page read and write
|
|
|
|
82BD000
|
unkown
|
page read and write
|
|
|
|
82F2000
|
unkown
|
page read and write
|
|
|
|
BABF000
|
unkown
|
page read and write
|
|
|
|
55C0000
|
unkown
|
page read and write
|
|
|
|
B4B3000
|
unkown
|
page read and write
|
|
|
|
819F000
|
unkown
|
page read and write
|
|
|
|
BB46000
|
unkown
|
page read and write
|
|
|
|
55D4000
|
unkown
|
page read and write
|
|
|
|
BB46000
|
unkown
|
page read and write
|
|
|
|
5569000
|
unkown
|
page read and write
|
|
|
|
239000
|
unkown
|
page read and write
|
|
|
|
7D5B000
|
unkown
|
page read and write
|
|
|
|
B3B9000
|
unkown
|
page read and write
|
|
|
|
B7CC000
|
unkown
|
page read and write
|
|
|
|
B768000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
B6C0000
|
unkown
|
page read and write
|
|
|
|
7180000
|
unkown
|
page read and write
|
|
|
|
21F000
|
unkown
|
page read and write
|
|
|
|
7BE8000
|
unkown
|
page read and write
|
|
|
|
674000
|
heap private
|
page read and write
|
|
|
|
210000
|
heap private
|
page read and write
|
|
|
|
3348000
|
unkown
|
page read and write
|
|
|
|
B36C000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
7D5B000
|
unkown
|
page read and write
|
|
|
|
81F4000
|
unkown
|
page read and write
|
|
|
|
82A3000
|
unkown
|
page read and write
|
|
|
|
41B0000
|
unkown
|
page read and write
|
|
|
|
B7B9000
|
unkown
|
page read and write
|
|
|
|
300000
|
unkown image
|
page readonly
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
395000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FEFF1A0000
|
unkown
|
page execute read
|
|
|
|
7F4E000
|
unkown
|
page read and write
|
|
|
|
7FF0000
|
unkown
|
page read and write
|
|
|
|
B059000
|
unkown
|
page read and write
|
|
|
|
4820000
|
unkown
|
page read and write
|
|
|
|
824C000
|
unkown
|
page read and write
|
|
|
|
4810000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
6912000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
7B00000
|
unkown
|
page read and write
|
|
|
|
5390000
|
unkown
|
page read and write
|
|
|
|
B531000
|
unkown
|
page read and write
|
|
|
|
B11E000
|
unkown
|
page read and write
|
|
|
|
2310000
|
unkown
|
page read and write
|
|
|
|
B77A000
|
unkown
|
page read and write
|
|
|
|
1D70000
|
unkown
|
page read and write
|
|
|
|
6970000
|
unkown
|
page read and write
|
|
|
|
7799000
|
unkown
|
page read and write
|
|
|
|
BA8E000
|
unkown
|
page read and write
|
|
|
|
BB3E000
|
unkown
|
page read and write
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
B51F000
|
unkown
|
page read and write
|
|
|
|
B51F000
|
unkown
|
page read and write
|
|
|
|
B299000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
1CBD000
|
unkown
|
page read and write
|
|
|
|
559F000
|
unkown
|
page read and write
|
|
|
|
4318000
|
unkown
|
page read and write
|
|
|
|
8248000
|
unkown
|
page read and write
|
|
|
|
817E000
|
unkown
|
page read and write
|
|
|
|
82C5000
|
unkown
|
page read and write
|
|
|
|
B55E000
|
unkown
|
page read and write
|
|
|
|
6E85F000
|
unkown image
|
page readonly
|
|
|
|
BA16000
|
unkown
|
page read and write
|
|
|
|
82B6000
|
unkown
|
page read and write
|
|
|
|
7DC1000
|
unkown
|
page read and write
|
|
|
|
82D0000
|
heap private
|
page read and write
|
|
|
|
1D10000
|
unkown
|
page read and write
|
|
|
|
1B0000
|
unkown
|
page read and write
|
|
|
|
7E5D000
|
unkown
|
page read and write
|
|
|
|
BB2D000
|
unkown
|
page read and write
|
|
|
|
B75E000
|
unkown
|
page read and write
|
|
|
|
B299000
|
unkown
|
page read and write
|
|
|
|
30A000
|
unkown
|
page read and write
|
|
|
|
8225000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
6F00000
|
unkown
|
page read and write
|
|
|
|
BAC9000
|
unkown
|
page read and write
|
|
|
|
7B29000
|
unkown
|
page read and write
|
|
|
|
39F0000
|
unkown image
|
page readonly
|
|
|
|
824C000
|
unkown
|
page read and write
|
|
|
|
55D6000
|
unkown
|
page read and write
|
|
|
|
B364000
|
unkown
|
page read and write
|
|
|
|
5573000
|
unkown
|
page read and write
|
|
|
|
3A5000
|
unkown
|
page read and write
|
|
|
|
BAB1000
|
unkown
|
page read and write
|
|
|
|
7AED000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
6910000
|
unkown
|
page read and write
|
|
|
|
8203000
|
unkown
|
page read and write
|
|
|
|
B36F000
|
unkown
|
page read and write
|
|
|
|
430F000
|
stack
|
page read and write
|
|
|
|
70C0000
|
heap private
|
page read and write
|
|
|
|
B9FD000
|
unkown
|
page read and write
|
|
|
|
4CA2000
|
unkown
|
page read and write
|
|
|
|
7C7F000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
B60A000
|
unkown
|
page read and write
|
|
|
|
4CB0000
|
unkown
|
page read and write
|
|
|
|
B2CE000
|
unkown
|
page read and write
|
|
|
|
8221000
|
unkown
|
page read and write
|
|
|
|
7D31000
|
unkown
|
page read and write
|
|
|
|
4200000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
B9FD000
|
unkown
|
page read and write
|
|
|
|
B51F000
|
unkown
|
page read and write
|
|
|
|
7DFB000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
heap private
|
page read and write
|
|
|
|
BADC000
|
unkown
|
page read and write
|
|
|
|
7EBB000
|
unkown
|
page read and write
|
|
|
|
5582000
|
unkown
|
page read and write
|
|
|
|
4D1E000
|
unkown
|
page read and write
|
|
|
|
82CB000
|
unkown
|
page read and write
|
|
|
|
B1D8000
|
unkown
|
page read and write
|
|
|
|
71E0000
|
unkown
|
page read and write
|
|
|
|
394000
|
heap private
|
page read and write
|
|
|
|
BB7D000
|
unkown
|
page read and write
|
|
|
|
BA11000
|
unkown
|
page read and write
|
|
|
|
7D63000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
B4B8000
|
unkown
|
page read and write
|
|
|
|
556B000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
B539000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown image
|
page readonly
|
|
|
|
5750000
|
unkown
|
page read and write
|
|
|
|
340000
|
heap default
|
page read and write
|
|
|
|
BA25000
|
unkown
|
page read and write
|
|
|
|
6D20000
|
unkown
|
page read and write
|
|
|
|
2635000
|
heap private
|
page read and write
|
|
|
|
BAF6000
|
unkown
|
page read and write
|
|
|
|
4850000
|
stack
|
page read and write
|
|
|
|
B52C000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown image
|
page readonly
|
|
|
|
71C0000
|
heap private
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
7D56000
|
unkown
|
page read and write
|
|
|
|
38F000
|
unkown
|
page read and write
|
|
|
|
212B000
|
heap private
|
page read and write
|
|
|
|
7AB0000
|
unkown
|
page read and write
|
|
|
|
4910000
|
unkown image
|
page readonly
|
|
|
|
BA1B000
|
unkown
|
page read and write
|
|
|
|
348000
|
heap default
|
page read and write
|
|
|
|
3250000
|
heap private
|
page read and write
|
|
|
|
8195000
|
unkown
|
page read and write
|
|
|
|
322000
|
unkown
|
page read and write
|
|
|
|
BB4B000
|
unkown
|
page read and write
|
|
|
|
7D4E000
|
unkown
|
page read and write
|
|
|
|
7C24000
|
unkown
|
page read and write
|
|
|
|
3F60000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
55DC000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
B768000
|
unkown
|
page read and write
|
|
|
|
7EE3000
|
unkown
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
212B000
|
unkown
|
page read and write
|
|
|
|
6900000
|
unkown
|
page read and write
|
|
|
|
3C70000
|
unkown
|
page read and write
|
|
|
|
AF50000
|
unkown
|
page read and write
|
|
|
|
244000
|
unkown
|
page read and write
|
|
|
|
B7E8000
|
unkown
|
page read and write
|
|
|
|
4C5000
|
unkown
|
page read and write
|
|
|
|
7AB6000
|
unkown
|
page read and write
|
|
|
|
BAC9000
|
unkown
|
page read and write
|
|
|
|
7D40000
|
unkown
|
page read and write
|
|
|
|
55E4000
|
unkown
|
page read and write
|
|
|
|
71F0000
|
unkown
|
page read and write
|
|
|
|
4DB0000
|
unkown
|
page read and write
|
|
|
|
7DF3000
|
unkown
|
page read and write
|
|
|
|
7F5D000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
7EE9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
71D0000
|
unkown
|
page read and write
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown
|
page read and write
|
|
|
|
1DA8000
|
unkown
|
page read and write
|
|
|
|
596000
|
unkown
|
page read and write
|
|
|
|
810000
|
unkown image
|
page readonly
|
|
|
|
B36C000
|
unkown
|
page read and write
|
|
|
|
7EEB000
|
unkown
|
page read and write
|
|
|
|
B279000
|
unkown
|
page read and write
|
|
|
|
7EB8000
|
unkown
|
page read and write
|
|
|
|
B4C7000
|
unkown
|
page read and write
|
|
|
|
6BC0000
|
heap private
|
page read and write
|
|
|
|
7200000
|
unkown
|
page read and write
|
|
|
|
7D51000
|
unkown
|
page read and write
|
|
|
|
556B000
|
unkown
|
page read and write
|
|
|
|
7D60000
|
unkown
|
page read and write
|
|
|
|
82BD000
|
unkown
|
page read and write
|
|
|
|
3E90000
|
heap private
|
page read and write
|
|
|
|
B5D0000
|
unkown
|
page read and write
|
|
|
|
71E6000
|
unkown
|
page read and write
|
|
|
|
7F35000
|
unkown
|
page read and write
|
|
|
|
B7B9000
|
unkown
|
page read and write
|
|
|
|
32A000
|
unkown
|
page read and write
|
|
|
|
53C0000
|
unkown
|
page read and write
|
|
|
|
8168000
|
unkown
|
page read and write
|
|
|
|
BA16000
|
unkown
|
page read and write
|
|
|
|
BA0C000
|
unkown
|
page read and write
|
|
|
|
B75B000
|
unkown
|
page read and write
|
|
|
|
259000
|
unkown
|
page read and write
|
|
|
|
B9C0000
|
unkown
|
page read and write
|
|
|
|
B57C000
|
unkown
|
page read and write
|
|
|
|
6E531000
|
unkown image
|
page execute read
|
|
|
|
B289000
|
unkown
|
page read and write
|
|
|
|
307000
|
heap default
|
page read and write
|
|
|
|
71D0000
|
unkown
|
page read and write
|
|
|
|
55D5000
|
unkown
|
page read and write
|
|
|
|
55C9000
|
unkown
|
page read and write
|
|
|
|
6AA0000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
unkown
|
page read and write
|
|
|
|
B200000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
B2A6000
|
unkown
|
page read and write
|
|
|
|
B2CC000
|
unkown
|
page read and write
|
|
|
|
BA20000
|
unkown
|
page read and write
|
|
|
|
7D82000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
heap default
|
page read and write
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
7DEA000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page read and write
|
|
|
|
70B0000
|
unkown
|
page read and write
|
|
|
|
7D31000
|
unkown
|
page read and write
|
|
|
|
7EF5000
|
unkown
|
page read and write
|
|
|
|
7290000
|
unkown
|
page read and write
|
|
|
|
B7B7000
|
unkown
|
page read and write
|
|
|
|
B7D1000
|
unkown
|
page read and write
|
|
|
|
7F44000
|
unkown
|
page read and write
|
|
|
|
BB19000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
822A000
|
unkown
|
page read and write
|
|
|
|
7FE9000
|
unkown
|
page read and write
|
|
|
|
493000
|
heap default
|
page read and write
|
|
|
|
4150000
|
unkown
|
page read and write
|
|
|
|
B524000
|
unkown
|
page read and write
|
|
|
|
7188000
|
unkown
|
page read and write
|
|
|
|
4CAB000
|
unkown
|
page read and write
|
|
|
|
B60F000
|
unkown
|
page read and write
|
|
|
|
4B2C000
|
stack
|
page read and write
|
|
|
|
8168000
|
unkown
|
page read and write
|
|
|
|
2170000
|
unkown image
|
page readonly
|
|
|
|
BAD8000
|
unkown
|
page read and write
|
|
|
|
5575000
|
unkown
|
page read and write
|
|
|
|
54C4000
|
stack
|
page read and write
|
|
|
|
B763000
|
unkown
|
page read and write
|
|
|
|
822F000
|
unkown
|
page read and write
|
|
|
|
6A40000
|
unkown
|
page read and write
|
|
|
|
B75E000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
B539000
|
unkown
|
page read and write
|
|
|
|
B276000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown
|
page read and write
|
|
|
|
55A1000
|
unkown
|
page read and write
|
|
|
|
5569000
|
unkown
|
page read and write
|
|
|
|
AF50000
|
unkown
|
page read and write
|
|
|
|
8130000
|
unkown
|
page read and write
|
|
|
|
4CA000
|
unkown
|
page read and write
|
|
|
|
6F50000
|
unkown
|
page read and write
|
|
|
|
B76B000
|
unkown
|
page read and write
|
|
|
|
6F40000
|
unkown image
|
page readonly
|
|
|
|
68F0000
|
unkown
|
page read and write
|
|
|
|
4850000
|
stack
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
7D5B000
|
unkown
|
page read and write
|
|
|
|
BB3C000
|
unkown
|
page read and write
|
|
|
|
8239000
|
unkown
|
page read and write
|
|
|
|
81B0000
|
stack
|
page read and write
|
|
|
|
3258000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
3F65000
|
heap private
|
page read and write
|
|
|
|
7DC8000
|
unkown
|
page read and write
|
|
|
|
55DF000
|
unkown
|
page read and write
|
|
|
|
B6C7000
|
unkown
|
page read and write
|
|
|
|
21B5000
|
heap private
|
page read and write
|
|
|
|
B291000
|
unkown
|
page read and write
|
|
|
|
7B27000
|
unkown
|
page read and write
|
|
|
|
81FE000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7B24000
|
heap private
|
page read and write
|
|
|
|
B6AC000
|
unkown
|
page read and write
|
|
|
|
538A000
|
unkown
|
page read and write
|
|
|
|
BB82000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
B35F000
|
unkown
|
page read and write
|
|
|
|
4C30000
|
unkown
|
page read and write
|
|
|
|
7FBE000
|
unkown
|
page read and write
|
|
|
|
4C17000
|
unkown image
|
page readonly
|
|
|
|
B4BF000
|
unkown
|
page read and write
|
|
|
|
78C4000
|
unkown
|
page read and write
|
|
|
|
2240000
|
heap private
|
page read and write
|
|
|
|
829D000
|
unkown
|
page read and write
|
|
|
|
3B4000
|
unkown
|
page read and write
|
|
|
|
B271000
|
unkown
|
page read and write
|
|
|
|
7D56000
|
unkown
|
page read and write
|
|
|
|
325000
|
unkown
|
page read and write
|
|
|
|
B7CF000
|
unkown
|
page read and write
|
|
|
|
8172000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
There are 1247 hidden memdumps, click here to show them.