Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\counter-1248368226.xls
|
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Name of Creating Application:
Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Tue Nov 30 06:43:37 2021, Security: 0
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\FFC2.tmp
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\~DF3298678F3B11AF32.TMP
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Temp\~DF55CA0BB42F5D2008.TMP
|
data
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\besta.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestb.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
"C:\Windows\System32\regsvr32.exe" C:\Datop\bestc.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://playsis.com.br/Y~T
|
unknown
|
|
|
|
https://playsis.com.br/qJSi
|
unknown
|
|
|
|
https://playsis.com.br/
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html117.vn/TSh7GBeIR/tiynh.htmlink
|
unknown
|
|
|
|
https://playsis.com.br/qJSL117.
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html5
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1B.b
|
unknown
|
|
|
|
https://playsis.com.br/qhtt
|
unknown
|
|
|
|
https://playsis.com.br/qJSL1BN5V/tiynh.html
|
162.241.2.78
|
|
|
|
https://playsis.com.br/qJSL1BNt
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
https://greenflag.esp.br/s
|
unknown
|
|
|
|
http://crl.entrust.net/server1.crl0
|
unknown
|
|
|
|
http://ocsp.entrust.net03
|
unknown
|
|
|
|
https://playsis.com
|
unknown
|
|
|
|
https://greenflag.esp.br/
|
unknown
|
|
|
|
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
|
|
|
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
https://playsis.cre
|
unknown
|
|
|
|
https://noithat117.vn/TSh7GBeIR/tiynh.html
|
103.28.36.171
|
|
|
|
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
https://greenflag.esp.br/yuINdRbM/tiynh.html
|
108.179.192.98
|
|
|
|
https://noithat117.vn/
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
https://playsis.com.boi
|
unknown
|
|
|
|
http://ocsp.entrust.net0D
|
unknown
|
|
|
|
https://secure.comodo.com/CPS0
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://crl.entrust.net/2048ca.crl0
|
unknown
|
|
There are 27 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
greenflag.esp.br
|
108.179.192.98
|
|
|
|
playsis.com.br
|
162.241.2.78
|
|
|
|
noithat117.vn
|
103.28.36.171
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
162.241.2.78
|
playsis.com.br
|
United States
|
|
|
|
108.179.192.98
|
greenflag.esp.br
|
United States
|
|
|
|
103.28.36.171
|
noithat117.vn
|
Viet Nam
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
&~,
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2E9C3
|
2E9C3
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
$m,
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\system32\qagentrt.dll,-10
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-843
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\fveui.dll,-844
|
|
|
|
HKEY_CURRENT_USER_CLASSES\Local Settings\MuiCache\151\52C64B7E
|
@%SystemRoot%\System32\wuaueng.dll,-400
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\40ECF
|
40ECF
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\41BE9
|
41BE9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
|
ProductNonBootFilesIntl_1033
|
|
There are 61 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2615000
|
heap private
|
page read and write
|
|
|
|
1FC0000
|
unkown image
|
page readonly
|
|
|
|
A9000
|
unkown
|
page read and write
|
|
|
|
8499000
|
unkown
|
page read and write
|
|
|
|
50B0000
|
unkown image
|
page readonly
|
|
|
|
80CA000
|
unkown
|
page read and write
|
|
|
|
5991000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
3F45000
|
heap private
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
4079000
|
heap private
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
801D000
|
unkown
|
page read and write
|
|
|
|
200000
|
heap private
|
page read and write
|
|
|
|
B650000
|
unkown
|
page read and write
|
|
|
|
B50C000
|
unkown
|
page read and write
|
|
|
|
BA14000
|
unkown
|
page read and write
|
|
|
|
B20C000
|
unkown
|
page read and write
|
|
|
|
B3A2000
|
unkown
|
page read and write
|
|
|
|
7FFF000
|
unkown
|
page read and write
|
|
|
|
8196000
|
unkown
|
page read and write
|
|
|
|
3A6000
|
unkown
|
page read and write
|
|
|
|
BA4F000
|
unkown
|
page read and write
|
|
|
|
B89F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
841E000
|
unkown
|
page read and write
|
|
|
|
34C000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
B141000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown
|
page read and write
|
|
|
|
4970000
|
unkown
|
page read and write
|
|
|
|
35EA000
|
unkown
|
page read and write
|
|
|
|
6DE5000
|
heap private
|
page read and write
|
|
|
|
856F000
|
unkown
|
page read and write
|
|
|
|
819C000
|
unkown
|
page read and write
|
|
|
|
B43E000
|
unkown
|
page read and write
|
|
|
|
7D66000
|
unkown
|
page read and write
|
|
|
|
7B8F000
|
stack
|
page read and write
|
|
|
|
2380000
|
unkown
|
page read and write
|
|
|
|
B211000
|
unkown
|
page read and write
|
|
|
|
5A30000
|
unkown
|
page read and write
|
|
|
|
8499000
|
unkown
|
page read and write
|
|
|
|
BA45000
|
unkown
|
page read and write
|
|
|
|
5BA0000
|
stack
|
page read and write
|
|
|
|
194000
|
unkown
|
page read and write
|
|
|
|
7B23000
|
unkown
|
page read and write
|
|
|
|
7280000
|
heap private
|
page read and write
|
|
|
|
394000
|
heap private
|
page read and write
|
|
|
|
1CF0000
|
unkown
|
page read and write
|
|
|
|
8435000
|
unkown
|
page read and write
|
|
|
|
2C6000
|
unkown
|
page read and write
|
|
|
|
8547000
|
unkown
|
page read and write
|
|
|
|
4075000
|
heap private
|
page read and write
|
|
|
|
818B000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7DB4000
|
heap private
|
page read and write
|
|
|
|
5700000
|
unkown
|
page read and write
|
|
|
|
32BF000
|
stack
|
page read and write
|
|
|
|
B23E000
|
unkown
|
page read and write
|
|
|
|
AFE9000
|
unkown
|
page read and write
|
|
|
|
B443000
|
unkown
|
page read and write
|
|
|
|
8043000
|
unkown
|
page read and write
|
|
|
|
B19F000
|
unkown
|
page read and write
|
|
|
|
366000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
8022000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
80D1000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown image
|
page readonly
|
|
|
|
855D000
|
unkown
|
page read and write
|
|
|
|
6C20000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown
|
page read and write
|
|
|
|
8556000
|
unkown
|
page read and write
|
|
|
|
BA41000
|
unkown
|
page read and write
|
|
|
|
80C8000
|
unkown
|
page read and write
|
|
|
|
8430000
|
unkown
|
page read and write
|
|
|
|
85DE000
|
stack
|
page read and write
|
|
|
|
4A60000
|
stack
|
page read and write
|
|
|
|
720000
|
heap private
|
page read and write
|
|
|
|
8500000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
5984000
|
unkown
|
page read and write
|
|
|
|
B304000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
B5F9000
|
unkown
|
page read and write
|
|
|
|
8057000
|
unkown
|
page read and write
|
|
|
|
5DF000
|
stack
|
page read and write
|
|
|
|
8534000
|
unkown
|
page read and write
|
|
|
|
2FE0000
|
unkown
|
page read and write
|
|
|
|
B6FB000
|
unkown
|
page read and write
|
|
|
|
B6FB000
|
unkown
|
page read and write
|
|
|
|
8091000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
8000000
|
unkown
|
page read and write
|
|
|
|
71E000
|
stack
|
page read and write
|
|
|
|
59BF000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
BAE0000
|
unkown
|
page read and write
|
|
|
|
7D8A000
|
unkown
|
page read and write
|
|
|
|
B4B1000
|
unkown
|
page read and write
|
|
|
|
2480000
|
unkown
|
page read and write
|
|
|
|
B3A7000
|
unkown
|
page read and write
|
|
|
|
81CB000
|
unkown
|
page read and write
|
|
|
|
B25E000
|
unkown
|
page read and write
|
|
|
|
B3A0000
|
unkown
|
page read and write
|
|
|
|
842B000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
730000
|
unkown image
|
page readonly
|
|
|
|
8101000
|
unkown
|
page read and write
|
|
|
|
5958000
|
unkown
|
page read and write
|
|
|
|
3030000
|
unkown
|
page read and write
|
|
|
|
395000
|
unkown
|
page read and write
|
|
|
|
1D50000
|
unkown image
|
page readonly
|
|
|
|
59E3000
|
unkown
|
page read and write
|
|
|
|
8529000
|
unkown
|
page read and write
|
|
|
|
B3A5000
|
unkown
|
page read and write
|
|
|
|
4970000
|
unkown
|
page read and write
|
|
|
|
7F5F000
|
unkown
|
page read and write
|
|
|
|
B25C000
|
unkown
|
page read and write
|
|
|
|
4DAC000
|
stack
|
page read and write
|
|
|
|
8421000
|
unkown
|
page read and write
|
|
|
|
59FA000
|
unkown
|
page read and write
|
|
|
|
25D0000
|
unkown
|
page read and write
|
|
|
|
8123000
|
unkown
|
page read and write
|
|
|
|
856B000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
8430000
|
unkown
|
page read and write
|
|
|
|
49A0000
|
unkown
|
page read and write
|
|
|
|
8551000
|
unkown
|
page read and write
|
|
|
|
5950000
|
unkown
|
page read and write
|
|
|
|
5925000
|
unkown
|
page read and write
|
|
|
|
402000
|
unkown
|
page read and write
|
|
|
|
B4BC000
|
unkown
|
page read and write
|
|
|
|
B59F000
|
unkown
|
page read and write
|
|
|
|
524000
|
unkown
|
page read and write
|
|
|
|
7018000
|
unkown
|
page read and write
|
|
|
|
20F5000
|
heap private
|
page read and write
|
|
|
|
B226000
|
unkown
|
page read and write
|
|
|
|
1DA0000
|
unkown
|
page read and write
|
|
|
|
6E858000
|
unkown image
|
page write copy
|
|
|
|
5954000
|
unkown
|
page read and write
|
|
|
|
8022000
|
unkown
|
page read and write
|
|
|
|
5955000
|
unkown
|
page read and write
|
|
|
|
5A56000
|
unkown
|
page read and write
|
|
|
|
80CC000
|
unkown
|
page read and write
|
|
|
|
B25C000
|
unkown
|
page read and write
|
|
|
|
5AD0000
|
unkown
|
page read and write
|
|
|
|
530000
|
unkown image
|
page readonly
|
|
|
|
B9BF000
|
unkown
|
page read and write
|
|
|
|
80ED000
|
unkown
|
page read and write
|
|
|
|
4A86000
|
stack
|
page read and write
|
|
|
|
5BB0000
|
stack
|
page read and write
|
|
|
|
BB12000
|
unkown
|
page read and write
|
|
|
|
205000
|
heap private
|
page read and write
|
|
|
|
8093000
|
unkown
|
page read and write
|
|
|
|
3DF000
|
unkown
|
page read and write
|
|
|
|
525000
|
unkown
|
page read and write
|
|
|
|
B02C000
|
unkown
|
page read and write
|
|
|
|
B304000
|
unkown
|
page read and write
|
|
|
|
59C3000
|
unkown
|
page read and write
|
|
|
|
1D50000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
3F40000
|
heap private
|
page read and write
|
|
|
|
41E000
|
unkown
|
page read and write
|
|
|
|
B2FF000
|
unkown
|
page read and write
|
|
|
|
480000
|
heap default
|
page read and write
|
|
|
|
4A70000
|
stack
|
page read and write
|
|
|
|
5720000
|
heap private
|
page read and write
|
|
|
|
B119000
|
unkown
|
page read and write
|
|
|
|
4A90000
|
stack
|
page read and write
|
|
|
|
B22E000
|
unkown
|
page read and write
|
|
|
|
2C0000
|
heap default
|
page read and write
|
|
|
|
1DBE000
|
unkown
|
page read and write
|
|
|
|
87CC000
|
stack
|
page read and write
|
|
|
|
35C0000
|
unkown
|
page read and write
|
|
|
|
1D10000
|
unkown
|
page read and write
|
|
|
|
B6EB000
|
unkown
|
page read and write
|
|
|
|
55E8000
|
unkown
|
page read and write
|
|
|
|
B5AF000
|
unkown
|
page read and write
|
|
|
|
36F0000
|
heap private
|
page execute and read and write
|
|
|
|
21B5000
|
heap private
|
page read and write
|
|
|
|
84CA000
|
unkown
|
page read and write
|
|
|
|
B04D000
|
unkown
|
page read and write
|
|
|
|
59F1000
|
unkown
|
page read and write
|
|
|
|
7BE0000
|
unkown
|
page read and write
|
|
|
|
8068000
|
unkown
|
page read and write
|
|
|
|
7FF6000
|
unkown
|
page read and write
|
|
|
|
247B000
|
unkown
|
page read and write
|
|
|
|
BAEB000
|
unkown
|
page read and write
|
|
|
|
B9B5000
|
unkown
|
page read and write
|
|
|
|
3E5F000
|
stack
|
page read and write
|
|
|
|
B44F000
|
unkown
|
page read and write
|
|
|
|
BAC7000
|
unkown
|
page read and write
|
|
|
|
B4E6000
|
unkown
|
page read and write
|
|
|
|
B950000
|
unkown
|
page read and write
|
|
|
|
8506000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
B749000
|
unkown
|
page read and write
|
|
|
|
5A4D000
|
unkown
|
page read and write
|
|
|
|
7FEC000
|
unkown
|
page read and write
|
|
|
|
843A000
|
unkown
|
page read and write
|
|
|
|
B0D3000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
32E000
|
heap default
|
page read and write
|
|
|
|
B4B6000
|
unkown
|
page read and write
|
|
|
|
620000
|
heap private
|
page read and write
|
|
|
|
7D8D000
|
unkown
|
page read and write
|
|
|
|
8005000
|
unkown
|
page read and write
|
|
|
|
364000
|
unkown
|
page read and write
|
|
|
|
7FF6000
|
unkown
|
page read and write
|
|
|
|
8560000
|
unkown
|
page read and write
|
|
|
|
BADB000
|
unkown
|
page read and write
|
|
|
|
8076000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
B4B4000
|
unkown
|
page read and write
|
|
|
|
B4B9000
|
unkown
|
page read and write
|
|
|
|
B19D000
|
unkown
|
page read and write
|
|
|
|
1BF0000
|
unkown
|
page read and write
|
|
|
|
355000
|
unkown
|
page read and write
|
|
|
|
2200000
|
heap private
|
page read and write
|
|
|
|
3490000
|
unkown
|
page read and write
|
|
|
|
8025000
|
unkown
|
page read and write
|
|
|
|
5AC0000
|
unkown
|
page read and write
|
|
|
|
4FFF000
|
unkown
|
page read and write
|
|
|
|
B04F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
8500000
|
unkown
|
page read and write
|
|
|
|
BAC3000
|
unkown
|
page read and write
|
|
|
|
7FFB000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page execute and read and write
|
|
|
|
B5B4000
|
unkown
|
page read and write
|
|
|
|
BAA9000
|
unkown
|
page read and write
|
|
|
|
BAD1000
|
unkown
|
page read and write
|
|
|
|
39B000
|
heap default
|
page read and write
|
|
|
|
89DA000
|
stack
|
page read and write
|
|
|
|
B75F000
|
unkown
|
page read and write
|
|
|
|
58B4000
|
stack
|
page read and write
|
|
|
|
8534000
|
unkown
|
page read and write
|
|
|
|
57A0000
|
unkown
|
page read and write
|
|
|
|
5A17000
|
unkown
|
page read and write
|
|
|
|
8164000
|
unkown
|
page read and write
|
|
|
|
34A000
|
unkown
|
page read and write
|
|
|
|
B4B1000
|
unkown
|
page read and write
|
|
|
|
B9B0000
|
unkown
|
page read and write
|
|
|
|
B211000
|
unkown
|
page read and write
|
|
|
|
59EA000
|
unkown
|
page read and write
|
|
|
|
B6F3000
|
unkown
|
page read and write
|
|
|
|
8020000
|
unkown
|
page read and write
|
|
|
|
6E85C000
|
unkown image
|
page read and write
|
|
|
|
8020000
|
unkown
|
page read and write
|
|
|
|
5953000
|
unkown
|
page read and write
|
|
|
|
B43E000
|
unkown
|
page read and write
|
|
|
|
2470000
|
unkown
|
page read and write
|
|
|
|
4A60000
|
stack
|
page read and write
|
|
|
|
B6E6000
|
unkown
|
page read and write
|
|
|
|
3040000
|
heap private
|
page read and write
|
|
|
|
8194000
|
unkown
|
page read and write
|
|
|
|
49C0000
|
unkown
|
page read and write
|
|
|
|
858D000
|
unkown
|
page read and write
|
|
|
|
841E000
|
unkown
|
page read and write
|
|
|
|
59C5000
|
unkown
|
page read and write
|
|
|
|
BA86000
|
unkown
|
page read and write
|
|
|
|
8093000
|
unkown
|
page read and write
|
|
|
|
BAEB000
|
unkown
|
page read and write
|
|
|
|
1D40000
|
unkown
|
page read and write
|
|
|
|
BA41000
|
unkown
|
page read and write
|
|
|
|
81CB000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
80EF000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
heap private
|
page read and write
|
|
|
|
3F90000
|
unkown
|
page read and write
|
|
|
|
B5A7000
|
unkown
|
page read and write
|
|
|
|
B20C000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
59E5000
|
unkown
|
page read and write
|
|
|
|
5A30000
|
unkown
|
page read and write
|
|
|
|
4A20000
|
unkown image
|
page readonly
|
|
|
|
80F4000
|
unkown
|
page read and write
|
|
|
|
7A50000
|
unkown
|
page read and write
|
|
|
|
B4D6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4FF9000
|
unkown
|
page read and write
|
|
|
|
524000
|
heap private
|
page read and write
|
|
|
|
B778000
|
unkown
|
page read and write
|
|
|
|
3010000
|
unkown
|
page read and write
|
|
|
|
8547000
|
unkown
|
page read and write
|
|
|
|
5019000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
6F50000
|
unkown
|
page read and write
|
|
|
|
7DC9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
8592000
|
unkown
|
page read and write
|
|
|
|
7EBC000
|
unkown
|
page read and write
|
|
|
|
7DB0000
|
heap private
|
page read and write
|
|
|
|
B44B000
|
unkown
|
page read and write
|
|
|
|
5969000
|
unkown
|
page read and write
|
|
|
|
630000
|
unkown image
|
page readonly
|
|
|
|
594F000
|
unkown
|
page read and write
|
|
|
|
B808000
|
unkown
|
page read and write
|
|
|
|
B988000
|
unkown
|
page read and write
|
|
|
|
B04F000
|
unkown
|
page read and write
|
|
|
|
7FF1000
|
unkown
|
page read and write
|
|
|
|
592C000
|
unkown
|
page read and write
|
|
|
|
B6F8000
|
unkown
|
page read and write
|
|
|
|
B457000
|
unkown
|
page read and write
|
|
|
|
B028000
|
unkown
|
page read and write
|
|
|
|
84C1000
|
unkown
|
page read and write
|
|
|
|
4980000
|
unkown
|
page read and write
|
|
|
|
5993000
|
unkown
|
page read and write
|
|
|
|
B70A000
|
unkown
|
page read and write
|
|
|
|
17D000
|
unkown
|
page read and write
|
|
|
|
8058000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
B44F000
|
unkown
|
page read and write
|
|
|
|
6ED0000
|
unkown
|
page read and write
|
|
|
|
80CA000
|
unkown
|
page read and write
|
|
|
|
843A000
|
unkown
|
page read and write
|
|
|
|
5937000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
840D000
|
unkown
|
page read and write
|
|
|
|
B747000
|
unkown
|
page read and write
|
|
|
|
5C00000
|
stack
|
page read and write
|
|
|
|
7A7C000
|
unkown
|
page read and write
|
|
|
|
8412000
|
unkown
|
page read and write
|
|
|
|
355000
|
unkown
|
page read and write
|
|
|
|
B3AA000
|
unkown
|
page read and write
|
|
|
|
B657000
|
unkown
|
page read and write
|
|
|
|
84CA000
|
unkown
|
page read and write
|
|
|
|
25C0000
|
unkown
|
page read and write
|
|
|
|
2115000
|
heap private
|
page read and write
|
|
|
|
AFE9000
|
unkown
|
page read and write
|
|
|
|
4A90000
|
stack
|
page read and write
|
|
|
|
4AA0000
|
stack
|
page read and write
|
|
|
|
4360000
|
unkown
|
page read and write
|
|
|
|
801D000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
84A3000
|
unkown
|
page read and write
|
|
|
|
80CA000
|
unkown
|
page read and write
|
|
|
|
2490000
|
unkown
|
page read and write
|
|
|
|
2110000
|
heap private
|
page read and write
|
|
|
|
B6EB000
|
unkown
|
page read and write
|
|
|
|
856B000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
8408000
|
unkown
|
page read and write
|
|
|
|
35F0000
|
unkown
|
page read and write
|
|
|
|
7EC0000
|
unkown
|
page read and write
|
|
|
|
289000
|
unkown
|
page read and write
|
|
|
|
4990000
|
unkown
|
page read and write
|
|
|
|
B418000
|
unkown
|
page read and write
|
|
|
|
B75A000
|
unkown
|
page read and write
|
|
|
|
B4C1000
|
unkown
|
page read and write
|
|
|
|
BAD6000
|
unkown
|
page read and write
|
|
|
|
59F0000
|
unkown
|
page read and write
|
|
|
|
7B64000
|
unkown
|
page read and write
|
|
|
|
6EC4000
|
unkown image
|
page readonly
|
|
|
|
8085000
|
unkown
|
page read and write
|
|
|
|
B4D9000
|
unkown
|
page read and write
|
|
|
|
1D75000
|
unkown
|
page read and write
|
|
|
|
B757000
|
unkown
|
page read and write
|
|
|
|
8551000
|
unkown
|
page read and write
|
|
|
|
BA14000
|
unkown
|
page read and write
|
|
|
|
80F2000
|
unkown
|
page read and write
|
|
|
|
8085000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
597F000
|
unkown
|
page read and write
|
|
|
|
4950000
|
unkown
|
page read and write
|
|
|
|
7FF4000
|
unkown
|
page read and write
|
|
|
|
B3A2000
|
unkown
|
page read and write
|
|
|
|
455E000
|
stack
|
page read and write
|
|
|
|
B236000
|
unkown
|
page read and write
|
|
|
|
BACC000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
595A000
|
unkown
|
page read and write
|
|
|
|
32C0000
|
unkown
|
page read and write
|
|
|
|
4A47000
|
unkown image
|
page readonly
|
|
|
|
25F0000
|
unkown
|
page read and write
|
|
|
|
394000
|
unkown
|
page read and write
|
|
|
|
1C26000
|
unkown
|
page read and write
|
|
|
|
B75A000
|
unkown
|
page read and write
|
|
|
|
313000
|
heap default
|
page read and write
|
|
|
|
B1A7000
|
unkown
|
page read and write
|
|
|
|
59E0000
|
unkown
|
page read and write
|
|
|
|
BA45000
|
unkown
|
page read and write
|
|
|
|
5975000
|
unkown
|
page read and write
|
|
|
|
724000
|
heap private
|
page read and write
|
|
|
|
BAD6000
|
unkown
|
page read and write
|
|
|
|
6E83000
|
unkown
|
page read and write
|
|
|
|
B219000
|
unkown
|
page read and write
|
|
|
|
B4C1000
|
unkown
|
page read and write
|
|
|
|
59F2000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
BAC7000
|
unkown
|
page read and write
|
|
|
|
8494000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
160000
|
unkown image
|
page read and write
|
|
|
|
B657000
|
unkown
|
page read and write
|
|
|
|
5297000
|
unkown image
|
page readonly
|
|
|
|
B992000
|
unkown
|
page read and write
|
|
|
|
8005000
|
unkown
|
page read and write
|
|
|
|
AEE0000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
5972000
|
unkown
|
page read and write
|
|
|
|
40C0000
|
unkown
|
page read and write
|
|
|
|
5978000
|
unkown
|
page read and write
|
|
|
|
59F5000
|
unkown
|
page read and write
|
|
|
|
84E8000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
B9BA000
|
unkown
|
page read and write
|
|
|
|
59E2000
|
unkown
|
page read and write
|
|
|
|
B4D1000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
5013000
|
unkown
|
page read and write
|
|
|
|
8025000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
BAA9000
|
unkown
|
page read and write
|
|
|
|
B209000
|
unkown
|
page read and write
|
|
|
|
3460000
|
unkown
|
page read and write
|
|
|
|
B418000
|
unkown
|
page read and write
|
|
|
|
80F5000
|
unkown
|
page read and write
|
|
|
|
5C0000
|
unkown
|
page read and write
|
|
|
|
849E000
|
unkown
|
page read and write
|
|
|
|
6DA0000
|
unkown
|
page read and write
|
|
|
|
2570000
|
unkown image
|
page readonly
|
|
|
|
345000
|
unkown
|
page read and write
|
|
|
|
B6E6000
|
unkown
|
page read and write
|
|
|
|
B04D000
|
unkown
|
page read and write
|
|
|
|
B1FF000
|
unkown
|
page read and write
|
|
|
|
5987000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
5A31000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
818F000
|
unkown
|
page read and write
|
|
|
|
3EF000
|
unkown
|
page read and write
|
|
|
|
324000
|
heap default
|
page read and write
|
|
|
|
B4EE000
|
unkown
|
page read and write
|
|
|
|
4CA0000
|
unkown
|
page read and write
|
|
|
|
841C000
|
unkown
|
page read and write
|
|
|
|
70B0000
|
unkown
|
page read and write
|
|
|
|
7FF0000
|
unkown
|
page read and write
|
|
|
|
6E530000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
4A60000
|
stack
|
page read and write
|
|
|
|
B63C000
|
unkown
|
page read and write
|
|
|
|
B99C000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1FA0000
|
unkown image
|
page readonly
|
|
|
|
8524000
|
unkown
|
page read and write
|
|
|
|
B4DE000
|
unkown
|
page read and write
|
|
|
|
B778000
|
unkown
|
page read and write
|
|
|
|
BAC3000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
heap private
|
page read and write
|
|
|
|
394000
|
unkown
|
page read and write
|
|
|
|
843F000
|
unkown
|
page read and write
|
|
|
|
8543000
|
unkown
|
page read and write
|
|
|
|
4ACA000
|
stack
|
page read and write
|
|
|
|
502000
|
unkown
|
page read and write
|
|
|
|
35D0000
|
unkown
|
page read and write
|
|
|
|
841C000
|
unkown
|
page read and write
|
|
|
|
B028000
|
unkown
|
page read and write
|
|
|
|
220000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
BAE0000
|
unkown
|
page read and write
|
|
|
|
7FD1000
|
unkown
|
page read and write
|
|
|
|
58C0000
|
unkown
|
page read and write
|
|
|
|
B8E4000
|
unkown
|
page read and write
|
|
|
|
259000
|
unkown
|
page read and write
|
|
|
|
BA6C000
|
unkown
|
page read and write
|
|
|
|
6DE0000
|
heap private
|
page read and write
|
|
|
|
B436000
|
unkown
|
page read and write
|
|
|
|
81CC000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
BB12000
|
unkown
|
page read and write
|
|
|
|
35E7000
|
unkown
|
page read and write
|
|
|
|
435E000
|
stack
|
page read and write
|
|
|
|
B206000
|
unkown
|
page read and write
|
|
|
|
815A000
|
unkown
|
page read and write
|
|
|
|
4A60000
|
stack
|
page read and write
|
|
|
|
2B6000
|
heap default
|
page read and write
|
|
|
|
49C6000
|
unkown
|
page read and write
|
|
|
|
595D000
|
unkown
|
page read and write
|
|
|
|
4972000
|
unkown
|
page read and write
|
|
|
|
B4EB000
|
unkown
|
page read and write
|
|
|
|
4980000
|
unkown
|
page read and write
|
|
|
|
B1A7000
|
unkown
|
page read and write
|
|
|
|
8192000
|
unkown
|
page read and write
|
|
|
|
5A15000
|
unkown
|
page read and write
|
|
|
|
854C000
|
unkown
|
page read and write
|
|
|
|
B23B000
|
unkown
|
page read and write
|
|
|
|
B44D000
|
unkown
|
page read and write
|
|
|
|
223B000
|
heap private
|
page read and write
|
|
|
|
854E000
|
unkown
|
page read and write
|
|
|
|
8068000
|
unkown
|
page read and write
|
|
|
|
B9F000
|
stack
|
page read and write
|
|
|
|
5929000
|
unkown
|
page read and write
|
|
|
|
B4B4000
|
unkown
|
page read and write
|
|
|
|
B2F7000
|
unkown
|
page read and write
|
|
|
|
6D90000
|
unkown
|
page read and write
|
|
|
|
22F0000
|
unkown
|
page read and write
|
|
|
|
B997000
|
unkown
|
page read and write
|
|
|
|
7F50000
|
heap private
|
page read and write
|
|
|
|
3EB5000
|
heap private
|
page read and write
|
|
|
|
BACC000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
B6F8000
|
unkown
|
page read and write
|
|
|
|
B992000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
8417000
|
unkown
|
page read and write
|
|
|
|
400000
|
heap private
|
page read and write
|
|
|
|
5A0E000
|
unkown
|
page read and write
|
|
|
|
BACE000
|
unkown
|
page read and write
|
|
|
|
570000
|
unkown
|
page read and write
|
|
|
|
6F5B000
|
unkown
|
page read and write
|
|
|
|
BAB4000
|
unkown
|
page read and write
|
|
|
|
BA4A000
|
unkown
|
page read and write
|
|
|
|
6DD0000
|
unkown
|
page read and write
|
|
|
|
B204000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
5A02000
|
unkown
|
page read and write
|
|
|
|
809B000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
8106000
|
unkown
|
page read and write
|
|
|
|
59FC000
|
unkown
|
page read and write
|
|
|
|
4A90000
|
stack
|
page read and write
|
|
|
|
B9B5000
|
unkown
|
page read and write
|
|
|
|
6E854000
|
unkown image
|
page read and write
|
|
|
|
6C20000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown
|
page read and write
|
|
|
|
2103000
|
unkown
|
page read and write
|
|
|
|
5953000
|
unkown
|
page read and write
|
|
|
|
B000000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
414000
|
unkown
|
page read and write
|
|
|
|
B764000
|
unkown
|
page read and write
|
|
|
|
7030000
|
heap private
|
page read and write
|
|
|
|
803D000
|
unkown
|
page read and write
|
|
|
|
B0D3000
|
unkown
|
page read and write
|
|
|
|
2F0000
|
heap default
|
page read and write
|
|
|
|
500F000
|
unkown
|
page read and write
|
|
|
|
8565000
|
unkown
|
page read and write
|
|
|
|
8565000
|
unkown
|
page read and write
|
|
|
|
73F0000
|
heap private
|
page read and write
|
|
|
|
55A0000
|
unkown
|
page read and write
|
|
|
|
2B7000
|
heap default
|
page read and write
|
|
|
|
5955000
|
unkown
|
page read and write
|
|
|
|
B747000
|
unkown
|
page read and write
|
|
|
|
21FE000
|
stack
|
page read and write
|
|
|
|
B757000
|
unkown
|
page read and write
|
|
|
|
2FD0000
|
unkown
|
page read and write
|
|
|
|
37D000
|
heap default
|
page read and write
|
|
|
|
B652000
|
unkown
|
page read and write
|
|
|
|
8103000
|
unkown
|
page read and write
|
|
|
|
214B000
|
heap private
|
page read and write
|
|
|
|
4A90000
|
stack
|
page read and write
|
|
|
|
7F59000
|
heap private
|
page read and write
|
|
|
|
597A000
|
unkown
|
page read and write
|
|
|
|
5962000
|
unkown
|
page read and write
|
|
|
|
3F6000
|
unkown
|
page read and write
|
|
|
|
3788000
|
heap private
|
page read and write
|
|
|
|
B4AA000
|
unkown
|
page read and write
|
|
|
|
375000
|
unkown
|
page read and write
|
|
|
|
5A56000
|
unkown
|
page read and write
|
|
|
|
36E0000
|
unkown
|
page read and write
|
|
|
|
B448000
|
unkown
|
page read and write
|
|
|
|
59BF000
|
unkown
|
page read and write
|
|
|
|
7BE0000
|
unkown
|
page read and write
|
|
|
|
B236000
|
unkown
|
page read and write
|
|
|
|
8085000
|
unkown
|
page read and write
|
|
|
|
803D000
|
unkown
|
page read and write
|
|
|
|
8089000
|
unkown
|
page read and write
|
|
|
|
2FE000
|
heap default
|
page read and write
|
|
|
|
B8DF000
|
unkown
|
page read and write
|
|
|
|
7FD0000
|
unkown
|
page read and write
|
|
|
|
B3A5000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4982000
|
unkown
|
page read and write
|
|
|
|
3410000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
21B0000
|
heap private
|
page read and write
|
|
|
|
48F0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
394000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
59A6000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown
|
page read and write
|
|
|
|
4BE000
|
heap default
|
page read and write
|
|
|
|
2610000
|
heap private
|
page read and write
|
|
|
|
80EA000
|
unkown
|
page read and write
|
|
|
|
57B0000
|
unkown
|
page read and write
|
|
|
|
B560000
|
unkown
|
page read and write
|
|
|
|
4FF8000
|
unkown
|
page read and write
|
|
|
|
49D0000
|
stack
|
page read and write
|
|
|
|
84C1000
|
unkown
|
page read and write
|
|
|
|
B19F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
855D000
|
unkown
|
page read and write
|
|
|
|
B77C000
|
unkown
|
page read and write
|
|
|
|
B75C000
|
unkown
|
page read and write
|
|
|
|
6F50000
|
unkown
|
page read and write
|
|
|
|
406000
|
unkown
|
page read and write
|
|
|
|
5989000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
1D53000
|
unkown
|
page read and write
|
|
|
|
35BF000
|
stack
|
page read and write
|
|
|
|
196000
|
unkown
|
page read and write
|
|
|
|
8104000
|
unkown
|
page read and write
|
|
|
|
598E000
|
unkown
|
page read and write
|
|
|
|
49C2000
|
unkown
|
page read and write
|
|
|
|
4110000
|
unkown image
|
page readonly
|
|
|
|
B6F3000
|
unkown
|
page read and write
|
|
|
|
3600000
|
unkown
|
page read and write
|
|
|
|
3AB0000
|
unkown image
|
page readonly
|
|
|
|
6E84B000
|
unkown image
|
page read and write
|
|
|
|
59C8000
|
unkown
|
page read and write
|
|
|
|
404000
|
heap private
|
page read and write
|
|
|
|
BADD000
|
unkown
|
page read and write
|
|
|
|
8043000
|
unkown
|
page read and write
|
|
|
|
B219000
|
unkown
|
page read and write
|
|
|
|
4FC0000
|
unkown
|
page read and write
|
|
|
|
B4A7000
|
unkown
|
page read and write
|
|
|
|
8076000
|
unkown
|
page read and write
|
|
|
|
BAE5000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown
|
page read and write
|
|
|
|
5A12000
|
unkown
|
page read and write
|
|
|
|
80B9000
|
unkown
|
page read and write
|
|
|
|
4EA000
|
unkown
|
page read and write
|
|
|
|
F0000
|
heap private
|
page read and write
|
|
|
|
8058000
|
unkown
|
page read and write
|
|
|
|
B4AC000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
3780000
|
heap private
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
20F0000
|
heap private
|
page read and write
|
|
|
|
8058000
|
unkown
|
page read and write
|
|
|
|
7D9A000
|
stack
|
page read and write
|
|
|
|
32F0000
|
unkown
|
page read and write
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
B190000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
3450000
|
unkown
|
page read and write
|
|
|
|
B1FF000
|
unkown
|
page read and write
|
|
|
|
B9F5000
|
unkown
|
page read and write
|
|
|
|
5BA0000
|
stack
|
page read and write
|
|
|
|
5019000
|
unkown
|
page read and write
|
|
|
|
2FF0000
|
unkown image
|
page readonly
|
|
|
|
1D60000
|
unkown
|
page read and write
|
|
|
|
BACE000
|
unkown
|
page read and write
|
|
|
|
49C0000
|
unkown
|
page read and write
|
|
|
|
842B000
|
unkown
|
page read and write
|
|
|
|
B206000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown image
|
page read and write
|
|
|
|
8426000
|
unkown
|
page read and write
|
|
|
|
55ED000
|
unkown
|
page read and write
|
|
|
|
8408000
|
unkown
|
page read and write
|
|
|
|
B70A000
|
unkown
|
page read and write
|
|
|
|
7A39000
|
unkown
|
page read and write
|
|
|
|
B5A4000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
unkown image
|
page readonly
|
|
|
|
136000
|
unkown
|
page read and write
|
|
|
|
B50E000
|
unkown
|
page read and write
|
|
|
|
524000
|
unkown
|
page read and write
|
|
|
|
8475000
|
unkown
|
page read and write
|
|
|
|
5984000
|
unkown
|
page read and write
|
|
|
|
8000000
|
unkown
|
page read and write
|
|
|
|
80FC000
|
unkown
|
page read and write
|
|
|
|
36D0000
|
unkown
|
page read and write
|
|
|
|
BB0D000
|
unkown
|
page read and write
|
|
|
|
7FEE000
|
unkown
|
page read and write
|
|
|
|
B4E6000
|
unkown
|
page read and write
|
|
|
|
6EF0000
|
heap private
|
page read and write
|
|
|
|
6E801000
|
unkown image
|
page readonly
|
|
|
|
33FF000
|
stack
|
page read and write
|
|
|
|
24E0000
|
unkown
|
page read and write
|
|
|
|
BAB4000
|
unkown
|
page read and write
|
|
|
|
3470000
|
unkown
|
page read and write
|
|
|
|
B4B1000
|
unkown
|
page read and write
|
|
|
|
B4A7000
|
unkown
|
page read and write
|
|
|
|
35E5000
|
unkown
|
page read and write
|
|
|
|
BA23000
|
unkown
|
page read and write
|
|
|
|
B23B000
|
unkown
|
page read and write
|
|
|
|
3055000
|
unkown
|
page read and write
|
|
|
|
B229000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
BA4A000
|
unkown
|
page read and write
|
|
|
|
6C20000
|
unkown
|
page read and write
|
|
|
|
385000
|
unkown
|
page read and write
|
|
|
|
1D70000
|
unkown
|
page read and write
|
|
|
|
8421000
|
unkown
|
page read and write
|
|
|
|
B5AC000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
B204000
|
unkown
|
page read and write
|
|
|
|
BA80000
|
unkown
|
page read and write
|
|
|
|
31B0000
|
unkown
|
page read and write
|
|
|
|
BA59000
|
unkown
|
page read and write
|
|
|
|
3E5000
|
unkown
|
page read and write
|
|
|
|
B4AF000
|
unkown
|
page read and write
|
|
|
|
8076000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown
|
page read and write
|
|
|
|
B221000
|
unkown
|
page read and write
|
|
|
|
592C000
|
unkown
|
page read and write
|
|
|
|
5932000
|
unkown
|
page read and write
|
|
|
|
811E000
|
unkown
|
page read and write
|
|
|
|
6C20000
|
unkown
|
page read and write
|
|
|
|
805E000
|
unkown
|
page read and write
|
|
|
|
2460000
|
unkown
|
page read and write
|
|
|
|
4E0E000
|
stack
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
B4EB000
|
unkown
|
page read and write
|
|
|
|
6ED0000
|
unkown
|
page read and write
|
|
|
|
7FF8000
|
unkown
|
page read and write
|
|
|
|
B457000
|
unkown
|
page read and write
|
|
|
|
3480000
|
unkown
|
page read and write
|
|
|
|
B4AC000
|
unkown
|
page read and write
|
|
|
|
6DF0000
|
heap private
|
page read and write
|
|
|
|
35E000
|
unkown
|
page read and write
|
|
|
|
B3A7000
|
unkown
|
page read and write
|
|
|
|
624000
|
heap private
|
page read and write
|
|
|
|
2500000
|
unkown
|
page read and write
|
|
|
|
5967000
|
unkown
|
page read and write
|
|
|
|
B0000
|
unkown image
|
page readonly
|
|
|
|
4AA0000
|
stack
|
page read and write
|
|
|
|
BA59000
|
unkown
|
page read and write
|
|
|
|
8529000
|
unkown
|
page read and write
|
|
|
|
7010000
|
unkown
|
page read and write
|
|
|
|
277000
|
heap default
|
page read and write
|
|
|
|
B8DF000
|
unkown
|
page read and write
|
|
|
|
B201000
|
unkown
|
page read and write
|
|
|
|
805E000
|
unkown
|
page read and write
|
|
|
|
AEE0000
|
unkown
|
page read and write
|
|
|
|
B22E000
|
unkown
|
page read and write
|
|
|
|
B221000
|
unkown
|
page read and write
|
|
|
|
1CA0000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
364000
|
unkown
|
page read and write
|
|
|
|
B5B4000
|
unkown
|
page read and write
|
|
|
|
8038000
|
unkown
|
page read and write
|
|
|
|
21EB000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
B19D000
|
unkown
|
page read and write
|
|
|
|
B99E000
|
unkown
|
page read and write
|
|
|
|
5490000
|
unkown
|
page read and write
|
|
|
|
56F000
|
unkown
|
page read and write
|
|
|
|
595F000
|
unkown
|
page read and write
|
|
|
|
4D3000
|
heap default
|
page read and write
|
|
|
|
524000
|
unkown
|
page read and write
|
|
|
|
364000
|
unkown
|
page read and write
|
|
|
|
2AD000
|
heap default
|
page read and write
|
|
|
|
8417000
|
unkown
|
page read and write
|
|
|
|
4980000
|
unkown
|
page read and write
|
|
|
|
B000000
|
unkown
|
page read and write
|
|
|
|
B950000
|
unkown
|
page read and write
|
|
|
|
8008000
|
unkown
|
page read and write
|
|
|
|
32D8000
|
unkown
|
page read and write
|
|
|
|
B141000
|
unkown
|
page read and write
|
|
|
|
818A000
|
unkown
|
page read and write
|
|
|
|
396000
|
unkown
|
page read and write
|
|
|
|
2499000
|
unkown
|
page read and write
|
|
|
|
B4D9000
|
unkown
|
page read and write
|
|
|
|
B349000
|
unkown
|
page read and write
|
|
|
|
7A78000
|
unkown
|
page read and write
|
|
|
|
5A1F000
|
unkown
|
page read and write
|
|
|
|
1DAE000
|
unkown
|
page read and write
|
|
|
|
1D43000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown image
|
page read and write
|
|
|
|
BA68000
|
unkown
|
page read and write
|
|
|
|
B5A7000
|
unkown
|
page read and write
|
|
|
|
4EB0000
|
unkown
|
page read and write
|
|
|
|
B840000
|
unkown
|
page read and write
|
|
|
|
25E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
815F000
|
unkown
|
page read and write
|
|
|
|
84CF000
|
unkown
|
page read and write
|
|
|
|
B201000
|
unkown
|
page read and write
|
|
|
|
49A0000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
B988000
|
unkown
|
page read and write
|
|
|
|
B650000
|
unkown
|
page read and write
|
|
|
|
6DC0000
|
unkown
|
page read and write
|
|
|
|
B2FF000
|
unkown
|
page read and write
|
|
|
|
849E000
|
unkown
|
page read and write
|
|
|
|
7E88000
|
unkown
|
page read and write
|
|
|
|
B4D6000
|
unkown
|
page read and write
|
|
|
|
B436000
|
unkown
|
page read and write
|
|
|
|
8169000
|
unkown
|
page read and write
|
|
|
|
BAEF000
|
unkown
|
page read and write
|
|
|
|
B761000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4AD7000
|
unkown image
|
page readonly
|
|
|
|
8158000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
80F9000
|
unkown
|
page read and write
|
|
|
|
7FF8000
|
unkown
|
page read and write
|
|
|
|
505000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
3EB9000
|
heap private
|
page read and write
|
|
|
|
25A0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4F6000
|
unkown
|
page read and write
|
|
|
|
3F49000
|
heap private
|
page read and write
|
|
|
|
B2EF000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
unkown
|
page read and write
|
|
|
|
5013000
|
unkown
|
page read and write
|
|
|
|
BA19000
|
unkown
|
page read and write
|
|
|
|
80E8000
|
unkown
|
page read and write
|
|
|
|
5A31000
|
unkown
|
page read and write
|
|
|
|
423F000
|
stack
|
page read and write
|
|
|
|
3B5000
|
unkown
|
page read and write
|
|
|
|
B2F4000
|
unkown
|
page read and write
|
|
|
|
4120000
|
unkown
|
page read and write
|
|
|
|
49B0000
|
unkown
|
page read and write
|
|
|
|
230000
|
unkown
|
page read and write
|
|
|
|
34B0000
|
unkown
|
page read and write
|
|
|
|
55E0000
|
unkown
|
page read and write
|
|
|
|
808A000
|
unkown
|
page read and write
|
|
|
|
B655000
|
unkown
|
page read and write
|
|
|
|
BABD000
|
unkown
|
page read and write
|
|
|
|
B4DE000
|
unkown
|
page read and write
|
|
|
|
8190000
|
unkown
|
page read and write
|
|
|
|
8412000
|
unkown
|
page read and write
|
|
|
|
6E531000
|
unkown image
|
page execute read
|
|
|
|
4B0000
|
unkown
|
page read and write
|
|
|
|
595F000
|
unkown
|
page read and write
|
|
|
|
84E8000
|
unkown
|
page read and write
|
|
|
|
B2F7000
|
unkown
|
page read and write
|
|
|
|
3E6000
|
unkown
|
page read and write
|
|
|
|
5A2B000
|
unkown
|
page read and write
|
|
|
|
5BD0000
|
stack
|
page read and write
|
|
|
|
499A000
|
unkown
|
page read and write
|
|
|
|
2230000
|
unkown
|
page read and write
|
|
|
|
5BB0000
|
stack
|
page read and write
|
|
|
|
AEE0000
|
unkown
|
page read and write
|
|
|
|
B9A6000
|
unkown
|
page read and write
|
|
|
|
B4AA000
|
unkown
|
page read and write
|
|
|
|
597C000
|
unkown
|
page read and write
|
|
|
|
2010000
|
unkown image
|
page readonly
|
|
|
|
2600000
|
unkown
|
page read and write
|
|
|
|
58E4000
|
unkown
|
page read and write
|
|
|
|
8043000
|
unkown
|
page read and write
|
|
|
|
B4B9000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
BAEF000
|
unkown
|
page read and write
|
|
|
|
843F000
|
unkown
|
page read and write
|
|
|
|
65300000
|
unkown image
|
page readonly
|
|
|
|
7F24000
|
unkown
|
page read and write
|
|
|
|
B75F000
|
unkown
|
page read and write
|
|
|
|
2560000
|
unkown
|
page read and write
|
|
|
|
B8A4000
|
unkown
|
page read and write
|
|
|
|
5AE0000
|
unkown
|
page read and write
|
|
|
|
4070000
|
heap private
|
page read and write
|
|
|
|
3AF000
|
unkown
|
page read and write
|
|
|
|
B9A1000
|
unkown
|
page read and write
|
|
|
|
6E85F000
|
unkown image
|
page readonly
|
|
|
|
B70D000
|
unkown
|
page read and write
|
|
|
|
B38C000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
B4BC000
|
unkown
|
page read and write
|
|
|
|
808F000
|
unkown
|
page read and write
|
|
|
|
815D000
|
unkown
|
page read and write
|
|
|
|
37C000
|
unkown
|
page read and write
|
|
|
|
8068000
|
unkown
|
page read and write
|
|
|
|
1DA8000
|
unkown
|
page read and write
|
|
|
|
4990000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
B63C000
|
unkown
|
page read and write
|
|
|
|
B560000
|
unkown
|
page read and write
|
|
|
|
4AC0000
|
stack
|
page read and write
|
|
|
|
B6EE000
|
unkown
|
page read and write
|
|
|
|
B02C000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
B844000
|
unkown
|
page read and write
|
|
|
|
80ED000
|
unkown
|
page read and write
|
|
|
|
B229000
|
unkown
|
page read and write
|
|
|
|
8153000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page execute and read and write
|
|
|
|
5984000
|
unkown
|
page read and write
|
|
|
|
49B0000
|
unkown
|
page read and write
|
|
|
|
4AB6000
|
stack
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
BADB000
|
unkown
|
page read and write
|
|
|
|
B75C000
|
unkown
|
page read and write
|
|
|
|
3498000
|
unkown
|
page read and write
|
|
|
|
6D00000
|
heap private
|
page read and write
|
|
|
|
515000
|
unkown
|
page read and write
|
|
|
|
6DAA000
|
unkown
|
page read and write
|
|
|
|
B808000
|
unkown
|
page read and write
|
|
|
|
809B000
|
unkown
|
page read and write
|
|
|
|
6F60000
|
heap private
|
page read and write
|
|
|
|
B3A0000
|
unkown
|
page read and write
|
|
|
|
56F8000
|
stack
|
page read and write
|
|
|
|
855B000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4A70000
|
stack
|
page read and write
|
|
|
|
6FF0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
B840000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
65F000
|
stack
|
page read and write
|
|
|
|
4980000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
6EC0000
|
unkown image
|
page readonly
|
|
|
|
80F2000
|
unkown
|
page read and write
|
|
|
|
1D4E000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
BAD1000
|
unkown
|
page read and write
|
|
|
|
B2EA000
|
unkown
|
page read and write
|
|
|
|
5550000
|
unkown
|
page read and write
|
|
|
|
BAA4000
|
unkown
|
page read and write
|
|
|
|
B9A6000
|
unkown
|
page read and write
|
|
|
|
8061000
|
unkown
|
page read and write
|
|
|
|
8101000
|
unkown
|
page read and write
|
|
|
|
32A000
|
unkown
|
page read and write
|
|
|
|
50C000
|
unkown
|
page read and write
|
|
|
|
B59A000
|
unkown
|
page read and write
|
|
|
|
8162000
|
unkown
|
page read and write
|
|
|
|
8524000
|
unkown
|
page read and write
|
|
|
|
526000
|
unkown
|
page read and write
|
|
|
|
80C8000
|
unkown
|
page read and write
|
|
|
|
B99C000
|
unkown
|
page read and write
|
|
|
|
2474000
|
unkown
|
page read and write
|
|
|
|
4FFF000
|
unkown
|
page read and write
|
|
|
|
1D97000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
40E2000
|
unkown
|
page read and write
|
|
|
|
B226000
|
unkown
|
page read and write
|
|
|
|
B89F000
|
unkown
|
page read and write
|
|
|
|
4C07000
|
unkown image
|
page readonly
|
|
|
|
855B000
|
unkown
|
page read and write
|
|
|
|
7FEC000
|
unkown
|
page read and write
|
|
|
|
54DC000
|
unkown
|
page read and write
|
|
|
|
4EE000
|
unkown
|
page read and write
|
|
|
|
B4AF000
|
unkown
|
page read and write
|
|
|
|
32E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
B65A000
|
unkown
|
page read and write
|
|
|
|
B9A1000
|
unkown
|
page read and write
|
|
|
|
B4B4000
|
unkown
|
page read and write
|
|
|
|
8475000
|
unkown
|
page read and write
|
|
|
|
B38C000
|
unkown
|
page read and write
|
|
|
|
80B9000
|
unkown
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
5900000
|
unkown
|
page read and write
|
|
|
|
5954000
|
unkown
|
page read and write
|
|
|
|
B77C000
|
unkown
|
page read and write
|
|
|
|
4950000
|
unkown
|
page read and write
|
|
|
|
84D9000
|
unkown
|
page read and write
|
|
|
|
49A0000
|
unkown
|
page read and write
|
|
|
|
5989000
|
unkown
|
page read and write
|
|
|
|
3408000
|
unkown
|
page read and write
|
|
|
|
5A55000
|
unkown
|
page read and write
|
|
|
|
B50C000
|
unkown
|
page read and write
|
|
|
|
2619000
|
heap private
|
page read and write
|
|
|
|
343000
|
heap default
|
page read and write
|
|
|
|
7EC4000
|
unkown
|
page read and write
|
|
|
|
BA4F000
|
unkown
|
page read and write
|
|
|
|
35A000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown
|
page read and write
|
|
|
|
854E000
|
unkown
|
page read and write
|
|
|
|
426000
|
unkown
|
page read and write
|
|
|
|
375000
|
unkown
|
page read and write
|
|
|
|
270000
|
heap default
|
page read and write
|
|
|
|
32D0000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown image
|
page readonly
|
|
|
|
598C000
|
unkown
|
page read and write
|
|
|
|
49A0000
|
unkown
|
page read and write
|
|
|
|
5C22000
|
unkown image
|
page read and write
|
|
|
|
7F64000
|
unkown
|
page read and write
|
|
|
|
80DB000
|
unkown
|
page read and write
|
|
|
|
B2FC000
|
unkown
|
page read and write
|
|
|
|
B190000
|
unkown
|
page read and write
|
|
|
|
BA19000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
B997000
|
unkown
|
page read and write
|
|
|
|
B443000
|
unkown
|
page read and write
|
|
|
|
575000
|
unkown
|
page read and write
|
|
|
|
B749000
|
unkown
|
page read and write
|
|
|
|
853D000
|
unkown
|
page read and write
|
|
|
|
7FFB000
|
unkown
|
page read and write
|
|
|
|
B5AF000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
49B0000
|
unkown
|
page read and write
|
|
|
|
BA23000
|
unkown
|
page read and write
|
|
|
|
BA1E000
|
unkown
|
page read and write
|
|
|
|
2BB000
|
heap default
|
page read and write
|
|
|
|
3440000
|
unkown
|
page read and write
|
|
|
|
7F8F000
|
heap private
|
page read and write
|
|
|
|
5964000
|
unkown
|
page read and write
|
|
|
|
8109000
|
unkown
|
page read and write
|
|
|
|
B2F4000
|
unkown
|
page read and write
|
|
|
|
8058000
|
unkown
|
page read and write
|
|
|
|
39F0000
|
unkown image
|
page readonly
|
|
|
|
B761000
|
unkown
|
page read and write
|
|
|
|
5A55000
|
unkown
|
page read and write
|
|
|
|
365000
|
unkown
|
page read and write
|
|
|
|
414000
|
unkown
|
page read and write
|
|
|
|
7DFC000
|
unkown
|
page read and write
|
|
|
|
4860000
|
unkown image
|
page readonly
|
|
|
|
660000
|
unkown image
|
page readonly
|
|
|
|
1D00000
|
unkown
|
page read and write
|
|
|
|
84C5000
|
unkown
|
page read and write
|
|
|
|
B349000
|
unkown
|
page read and write
|
|
|
|
49B0000
|
unkown
|
page read and write
|
|
|
|
8556000
|
unkown
|
page read and write
|
|
|
|
6D80000
|
unkown
|
page read and write
|
|
|
|
BAE5000
|
unkown
|
page read and write
|
|
|
|
6C20000
|
unkown
|
page read and write
|
|
|
|
BA86000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
B168000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page execute and read and write
|
|
|
|
B44D000
|
unkown
|
page read and write
|
|
|
|
B3AA000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
heap default
|
page read and write
|
|
|
|
31A000
|
heap default
|
page read and write
|
|
|
|
856F000
|
unkown
|
page read and write
|
|
|
|
80C8000
|
unkown
|
page read and write
|
|
|
|
6CF0000
|
unkown
|
page read and write
|
|
|
|
5BA0000
|
stack
|
page read and write
|
|
|
|
BAA4000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
3430000
|
unkown
|
page read and write
|
|
|
|
7B91000
|
unkown
|
page read and write
|
|
|
|
7FEFF1A0000
|
unkown
|
page execute read
|
|
|
|
84EC000
|
unkown
|
page read and write
|
|
|
|
853D000
|
unkown
|
page read and write
|
|
|
|
7000000
|
unkown
|
page read and write
|
|
|
|
B2EF000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown image
|
page read and write
|
|
|
|
2479000
|
unkown
|
page read and write
|
|
|
|
B9B0000
|
unkown
|
page read and write
|
|
|
|
345000
|
unkown
|
page read and write
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
7FFD000
|
unkown
|
page read and write
|
|
|
|
1C4000
|
heap private
|
page read and write
|
|
|
|
6ED0000
|
unkown
|
page read and write
|
|
|
|
595D000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
35EE000
|
unkown
|
page read and write
|
|
|
|
7DC7000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
8003000
|
unkown
|
page read and write
|
|
|
|
594F000
|
unkown
|
page read and write
|
|
|
|
8003000
|
unkown
|
page read and write
|
|
|
|
59AE000
|
unkown
|
page read and write
|
|
|
|
5A56000
|
unkown
|
page read and write
|
|
|
|
B4C9000
|
unkown
|
page read and write
|
|
|
|
372000
|
unkown
|
page read and write
|
|
|
|
858D000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5A26000
|
unkown
|
page read and write
|
|
|
|
4996000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5970000
|
unkown
|
page read and write
|
|
|
|
1CC0000
|
unkown image
|
page readonly
|
|
|
|
B70D000
|
unkown
|
page read and write
|
|
|
|
8068000
|
unkown
|
page read and write
|
|
|
|
B9BF000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
342000
|
unkown
|
page read and write
|
|
|
|
5A2B000
|
unkown
|
page read and write
|
|
|
|
BA80000
|
unkown
|
page read and write
|
|
|
|
407000
|
unkown
|
page read and write
|
|
|
|
74B0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
B99E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
8543000
|
unkown
|
page read and write
|
|
|
|
59EB000
|
unkown
|
page read and write
|
|
|
|
4AB0000
|
stack
|
page read and write
|
|
|
|
BADD000
|
unkown
|
page read and write
|
|
|
|
B98D000
|
unkown
|
page read and write
|
|
|
|
B119000
|
unkown
|
page read and write
|
|
|
|
6F5F000
|
unkown
|
page read and write
|
|
|
|
3610000
|
heap private
|
page read and write
|
|
|
|
59B9000
|
unkown
|
page read and write
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
6DAF000
|
unkown
|
page read and write
|
|
|
|
7A9F000
|
unkown
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
2580000
|
unkown image
|
page readonly
|
|
|
|
B9F5000
|
unkown
|
page read and write
|
|
|
|
B4B1000
|
unkown
|
page read and write
|
|
|
|
7F1F000
|
unkown
|
page read and write
|
|
|
|
B4AF000
|
unkown
|
page read and write
|
|
|
|
AEE0000
|
unkown
|
page read and write
|
|
|
|
212B000
|
heap private
|
page read and write
|
|
|
|
7FF1000
|
unkown
|
page read and write
|
|
|
|
597F000
|
unkown
|
page read and write
|
|
|
|
7220000
|
unkown
|
page read and write
|
|
|
|
40F0000
|
unkown
|
page read and write
|
|
|
|
4C0E000
|
stack
|
page read and write
|
|
|
|
4C10000
|
unkown
|
page read and write
|
|
|
|
70E6000
|
unkown
|
page read and write
|
|
|
|
7FD1000
|
unkown
|
page read and write
|
|
|
|
5009000
|
unkown
|
page read and write
|
|
|
|
B0AE000
|
unkown
|
page read and write
|
|
|
|
270000
|
unkown
|
page read and write
|
|
|
|
B4D1000
|
unkown
|
page read and write
|
|
|
|
80D2000
|
unkown
|
page read and write
|
|
|
|
7930000
|
unkown
|
page read and write
|
|
|
|
2FC0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
B5A4000
|
unkown
|
page read and write
|
|
|
|
B43B000
|
unkown
|
page read and write
|
|
|
|
35E2000
|
unkown
|
page read and write
|
|
|
|
B23E000
|
unkown
|
page read and write
|
|
|
|
B5F9000
|
unkown
|
page read and write
|
|
|
|
7F4E000
|
unkown
|
page read and write
|
|
|
|
B83C000
|
unkown
|
page read and write
|
|
|
|
B8E4000
|
unkown
|
page read and write
|
|
|
|
2F7000
|
heap default
|
page read and write
|
|
|
|
4970000
|
unkown
|
page read and write
|
|
|
|
4C4000
|
heap private
|
page read and write
|
|
|
|
2608000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
4AD0000
|
unkown
|
page read and write
|
|
|
|
6E60000
|
unkown
|
page read and write
|
|
|
|
B6EE000
|
unkown
|
page read and write
|
|
|
|
515000
|
unkown
|
page read and write
|
|
|
|
B50E000
|
unkown
|
page read and write
|
|
|
|
B59F000
|
unkown
|
page read and write
|
|
|
|
4980000
|
unkown
|
page read and write
|
|
|
|
B4EE000
|
unkown
|
page read and write
|
|
|
|
7DF8000
|
unkown
|
page read and write
|
|
|
|
3420000
|
unkown
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
25B0000
|
unkown
|
page read and write
|
|
|
|
7370000
|
heap private
|
page read and write
|
|
|
|
7530000
|
unkown
|
page read and write
|
|
|
|
2EE000
|
heap default
|
page read and write
|
|
|
|
7AFF000
|
unkown
|
page read and write
|
|
|
|
854C000
|
unkown
|
page read and write
|
|
|
|
B9BA000
|
unkown
|
page read and write
|
|
|
|
80F7000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
5924000
|
unkown
|
page read and write
|
|
|
|
B25E000
|
unkown
|
page read and write
|
|
|
|
B59A000
|
unkown
|
page read and write
|
|
|
|
100000
|
unkown
|
page read and write
|
|
|
|
6E70000
|
unkown image
|
page readonly
|
|
|
|
B4AF000
|
unkown
|
page read and write
|
|
|
|
8506000
|
unkown
|
page read and write
|
|
|
|
C0000
|
unkown image
|
page readonly
|
|
|
|
B4C9000
|
unkown
|
page read and write
|
|
|
|
594E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
5967000
|
unkown
|
page read and write
|
|
|
|
8025000
|
unkown
|
page read and write
|
|
|
|
348D000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
5A4D000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
BB0D000
|
unkown
|
page read and write
|
|
|
|
6FE3000
|
unkown
|
page read and write
|
|
|
|
5C20000
|
unkown
|
page read and write
|
|
|
|
B652000
|
unkown
|
page read and write
|
|
|
|
BA68000
|
unkown
|
page read and write
|
|
|
|
BA6C000
|
unkown
|
page read and write
|
|
|
|
84D9000
|
unkown
|
page read and write
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
B448000
|
unkown
|
page read and write
|
|
|
|
650000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
5962000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
B8A4000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
B65A000
|
unkown
|
page read and write
|
|
|
|
4960000
|
unkown
|
page read and write
|
|
|
|
3A20000
|
unkown image
|
page readonly
|
|
|
|
B0AE000
|
unkown
|
page read and write
|
|
|
|
35C4000
|
unkown
|
page read and write
|
|
|
|
1D80000
|
unkown
|
page read and write
|
|
|
|
BA1E000
|
unkown
|
page read and write
|
|
|
|
801D000
|
unkown
|
page read and write
|
|
|
|
5013000
|
unkown
|
page read and write
|
|
|
|
B4B4000
|
unkown
|
page read and write
|
|
|
|
3FC6000
|
unkown
|
page read and write
|
|
|
|
35CB000
|
unkown
|
page read and write
|
|
|
|
B6E6000
|
unkown
|
page read and write
|
|
|
|
8185000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
BABD000
|
unkown
|
page read and write
|
|
|
|
B83C000
|
unkown
|
page read and write
|
|
|
|
8435000
|
unkown
|
page read and write
|
|
|
|
4560000
|
unkown image
|
page readonly
|
|
|
|
3044000
|
heap private
|
page read and write
|
|
|
|
B6E6000
|
unkown
|
page read and write
|
|
|
|
595A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
80B9000
|
unkown
|
page read and write
|
|
|
|
3053000
|
unkown
|
page read and write
|
|
|
|
8B00000
|
heap private
|
page read and write
|
|
|
|
B655000
|
unkown
|
page read and write
|
|
|
|
8560000
|
unkown
|
page read and write
|
|
|
|
B2EA000
|
unkown
|
page read and write
|
|
|
|
84EC000
|
unkown
|
page read and write
|
|
|
|
596C000
|
unkown
|
page read and write
|
|
|
|
B209000
|
unkown
|
page read and write
|
|
|
|
55D0000
|
unkown
|
page read and write
|
|
|
|
5AE0000
|
unkown
|
page read and write
|
|
|
|
4FB0000
|
unkown
|
page read and write
|
|
|
|
B5AC000
|
unkown
|
page read and write
|
|
|
|
8038000
|
unkown
|
page read and write
|
|
|
|
2205000
|
heap private
|
page read and write
|
|
|
|
520000
|
heap private
|
page read and write
|
|
|
|
34C000
|
heap default
|
page read and write
|
|
|
|
8592000
|
unkown
|
page read and write
|
|
|
|
6DB0000
|
unkown
|
page read and write
|
|
|
|
84A3000
|
unkown
|
page read and write
|
|
|
|
B844000
|
unkown
|
page read and write
|
|
|
|
34A000
|
heap default
|
page read and write
|
|
|
|
597A000
|
unkown
|
page read and write
|
|
|
|
37A000
|
unkown
|
page read and write
|
|
|
|
59DC000
|
unkown
|
page read and write
|
|
|
|
5989000
|
unkown
|
page read and write
|
|
|
|
59C9000
|
unkown
|
page read and write
|
|
|
|
5009000
|
unkown
|
page read and write
|
|
|
|
84CF000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
F4000
|
heap private
|
page read and write
|
|
|
|
4A90000
|
stack
|
page read and write
|
|
|
|
B98D000
|
unkown
|
page read and write
|
|
|
|
8426000
|
unkown
|
page read and write
|
|
|
|
B168000
|
unkown
|
page read and write
|
|
|
|
B43B000
|
unkown
|
page read and write
|
|
|
|
7FEE000
|
unkown
|
page read and write
|
|
|
|
B2FC000
|
unkown
|
page read and write
|
|
|
|
8494000
|
unkown
|
page read and write
|
|
|
|
315E000
|
stack
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
421000
|
unkown
|
page read and write
|
|
|
|
8038000
|
unkown
|
page read and write
|
|
|
|
50A000
|
unkown
|
page read and write
|
|
|
|
58D2000
|
unkown
|
page read and write
|
|
|
|
80F7000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
B764000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
B9AB000
|
unkown
|
page read and write
|
|
|
|
4A80000
|
stack
|
page read and write
|
|
|
|
B4B6000
|
unkown
|
page read and write
|
|
|
|
34A0000
|
unkown
|
page read and write
|
|
|
|
8020000
|
unkown
|
page read and write
|
|
|
|
84C5000
|
unkown
|
page read and write
|
|
|
|
487000
|
heap default
|
page read and write
|
|
|
|
3EB0000
|
heap private
|
page read and write
|
|
|
|
80FC000
|
unkown
|
page read and write
|
|
|
|
B44B000
|
unkown
|
page read and write
|
|
|
|
840D000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
4DA000
|
heap default
|
page read and write
|
|
|
|
4960000
|
unkown
|
page read and write
|
|
|
|
B9AB000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
83D0000
|
unkown
|
page read and write
|
|
|
|
803D000
|
unkown
|
page read and write
|
|
|
|
8061000
|
unkown
|
page read and write
|
|
|
|
390000
|
heap private
|
page read and write
|
|
|
|
2C7000
|
heap default
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
There are 1267 hidden memdumps, click here to show them.