Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
FACTURAS.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\M9XgMRXaN30mgEl56ja236
|
data
|
dropped
|
 |
|
|
C:\Users\user\AppData\Local\Temp\~DF503944F8FF7253A1.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\FACTURAS.exe
|
"C:\Users\user\Desktop\FACTURAS.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
|
"C:\Users\user\Desktop\FACTURAS.exe"
|
|
|
|
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
|
"C:\Users\user\Desktop\FACTURAS.exe"
|
|
|
|
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
https://doc-0g-7s-docs.googleusercontent.com/
|
unknown
|
|
|
|
http://127.0.0.1:HTTP/1.1
|
unknown
|
|
|
|
http://DynDns.comDynDNS
|
unknown
|
|
|
|
https://doc-0g-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/09s7mqju06nhfef03e9jkahgn04c8qp1/1639485750000/01707528263340534167/*/1e3nVGX3LlhNn9Zf6RwTjDw6FKTCAih9T?e=download
|
142.250.181.225
|
|
|
|
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
|
unknown
|
|
|
|
https://drive.google.com/
|
unknown
|
|
|
|
https://drive.google.com/st
|
unknown
|
|
|
|
https://doc-0g-7s-docs.googleusercontent.com/e
|
unknown
|
|
|
|
https://doc-0g-7s-docs.googleusercontent.com/1
|
unknown
|
|
|
|
http://kFWRbv.com
|
unknown
|
|
|
|
https://doc-0g-7s-docs.googleusercontent.com/u
|
unknown
|
|
|
|
https://doc-0g-7s-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/09s7mqju
|
unknown
|
|
|
|
https://csp.withgoogle.com/csp/report-to/gse_l9ocaq
|
unknown
|
|
There are 3 hidden URLs, click here to show them.
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
drive.google.com
|
142.250.181.238
|
|
|
|
googlehosted.l.googleusercontent.com
|
142.250.181.225
|
|
|
|
doc-0g-7s-docs.googleusercontent.com
|
unknown
|
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.181.238
|
drive.google.com
|
United States
|
|
|
|
142.250.181.225
|
googlehosted.l.googleusercontent.com
|
United States
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\SOFTWARE\VB and VBA Program Settings\Turcize6\Sacrocotyloidean8
|
SLIDFAST
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
1DF31000
|
unkown
|
page read and write
|
|
|
|
E10000
|
unkown
|
page execute and read and write
|
|
|
|
1EF59000
|
unkown
|
page read and write
|
|
|
|
424000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2370000
|
heap private
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DEE0000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
201EE000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F220000
|
unkown image
|
page readonly
|
|
|
|
20400000
|
heap private
|
page execute and read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2C50000
|
heap private
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B41000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
1DFE3000
|
unkown
|
page read and write
|
|
|
|
1DFF6000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
1DCC7000
|
stack
|
page read and write
|
|
|
|
7F7E0000
|
unkown image
|
page readonly
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
A10000
|
unkown image
|
page readonly
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown image
|
page readonly
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
1DED0000
|
unkown
|
page execute and read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DD26000
|
unkown
|
page execute and read and write
|
|
|
|
3239000
|
unkown
|
page read and write
|
|
|
|
7F222000
|
unkown image
|
page readonly
|
|
|
|
1D2F1000
|
unkown
|
page read and write
|
|
|
|
1DF20000
|
heap private
|
page execute and read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
7F222000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F7E2000
|
unkown image
|
page readonly
|
|
|
|
201FD000
|
unkown
|
page read and write
|
|
|
|
1830000
|
unkown image
|
page readonly
|
|
|
|
1DF1A000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1D8DD000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown image
|
page readonly
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1D4000
|
unkown
|
page read and write
|
|
|
|
B7C000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD50000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1FFEC000
|
unkown
|
page read and write
|
|
|
|
FC3000
|
heap default
|
page read and write
|
|
|
|
1DEF0000
|
unkown
|
page read and write
|
|
|
|
20268000
|
unkown
|
page read and write
|
|
|
|
2C70000
|
heap private
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
BBE000
|
stack
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
B00000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
E27000
|
unkown
|
page execute and read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2C99000
|
unkown
|
page read and write
|
|
|
|
203AE000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
FCA000
|
heap default
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1D71E000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
2000F000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DFD1000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
21C0000
|
unkown
|
page read and write
|
|
|
|
2006A000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown image
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
7F680000
|
unkown image
|
page readonly
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
14B0000
|
unkown image
|
page readonly
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
201D4000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2022E000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page read and write
|
|
|
|
1CFE0000
|
heap private
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20210000
|
unkown
|
page read and write
|
|
|
|
1041000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DD80000
|
heap private
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B41000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
2310000
|
heap private
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
201D6000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF16000
|
unkown
|
page read and write
|
|
|
|
BD0000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown image
|
page readonly
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1DD0D000
|
unkown
|
page execute and read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1D6AE000
|
stack
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
20250000
|
unkown
|
page read and write
|
|
|
|
1050000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown image
|
page readonly
|
|
|
|
1DFE0000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
C11000
|
unkown image
|
page readonly
|
|
|
|
20280000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B20000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
68E000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1FFD2000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
78F000
|
stack
|
page read and write
|
|
|
|
1D81E000
|
stack
|
page read and write
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
201CE000
|
stack
|
page read and write
|
|
|
|
7CE000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
BC0000
|
unkown
|
page read and write
|
|
|
|
1D56E000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
1CFCE000
|
stack
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
20410000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1D5AE000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
CFD000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1060000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1033000
|
unkown
|
page read and write
|
|
|
|
51D000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
201D2000
|
unkown
|
page read and write
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1260000
|
heap private
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
20268000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20029000
|
unkown
|
page read and write
|
|
|
|
F95000
|
heap default
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
2BC0000
|
unkown
|
page read and write
|
|
|
|
202BD000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1D2F0000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
201D0000
|
unkown
|
page read and write
|
|
|
|
B41000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
201E4000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
2000F000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
2230000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1EF31000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2AC0000
|
unkown
|
page read and write
|
|
|
|
1DA40000
|
unkown
|
page read and write
|
|
|
|
1DCF0000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
1D42E000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
102F000
|
unkown
|
page read and write
|
|
|
|
401000
|
unkown image
|
page execute read
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
20264000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
3080000
|
unkown image
|
page readonly
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B41000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
FD8000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7F220000
|
unkown image
|
page readonly
|
|
|
|
1DD04000
|
unkown
|
page read and write
|
|
|
|
1D4000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2269000
|
heap private
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
7F7E0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
201F1000
|
unkown
|
page read and write
|
|
|
|
20250000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
1DBCA000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
500000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DB7E000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
BC1000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
B20000
|
unkown
|
page execute and read and write
|
|
|
|
7F7E0000
|
unkown image
|
page readonly
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
7F220000
|
unkown image
|
page readonly
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
FB9000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
F58000
|
heap default
|
page read and write
|
|
|
|
534000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F7E2000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20280000
|
unkown
|
page read and write
|
|
|
|
1FFE9000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20270000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DD7E000
|
stack
|
page read and write
|
|
|
|
B00000
|
unkown
|
page read and write
|
|
|
|
7F7E2000
|
unkown image
|
page readonly
|
|
|
|
F50000
|
heap default
|
page read and write
|
|
|
|
2002E000
|
unkown
|
page read and write
|
|
|
|
7FFC0000
|
unkown image
|
page readonly
|
|
|
|
FD5000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
102E000
|
unkown
|
page read and write
|
|
|
|
1DFDC000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2F4000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
104E000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
9A000
|
unkown
|
page read and write
|
|
|
|
203EE000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
422000
|
unkown image
|
page read and write
|
|
|
|
21D0000
|
unkown
|
page execute read
|
|
|
|
FC7000
|
heap default
|
page read and write
|
|
|
|
1DA40000
|
unkown
|
page read and write
|
|
|
|
1DCD0000
|
unkown image
|
page read and write
|
|
|
|
BD1000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
2C80000
|
unkown image
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF17000
|
unkown
|
page read and write
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F7E0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1D9DC000
|
stack
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DE8F000
|
stack
|
page read and write
|
|
|
|
420000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20240000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
20228000
|
unkown
|
page read and write
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
1DD1D000
|
unkown
|
page execute and read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7FFB2000
|
unkown image
|
page readonly
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DD2A000
|
unkown
|
page execute and read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7F7E2000
|
unkown image
|
page readonly
|
|
|
|
1DD20000
|
unkown
|
page read and write
|
|
|
|
2300000
|
unkown image
|
page readonly
|
|
|
|
1CFE7000
|
heap private
|
page read and write
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
519000
|
heap default
|
page read and write
|
|
|
|
20251000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2116E000
|
stack
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F800000
|
unkown image
|
page readonly
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
1DD10000
|
unkown
|
page read and write
|
|
|
|
1DF17000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DA7E000
|
stack
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1470000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
FEC000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F620000
|
unkown
|
page execute and read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
2106E000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
F30000
|
unkown image
|
page readonly
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
FDF000
|
unkown
|
page read and write
|
|
|
|
7F220000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7FFD0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DFCE000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
FEC000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
7FE50000
|
unkown image
|
page readonly
|
|
|
|
20290000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1FFFD000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown image
|
page readonly
|
|
|
|
7F230000
|
unkown image
|
page readonly
|
|
|
|
F9B000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DA40000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
7F7E0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DD13000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DFD9000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DD00000
|
unkown
|
page read and write
|
|
|
|
AA0000
|
unkown
|
page read and write
|
|
|
|
B20000
|
unkown
|
page read and write
|
|
|
|
7F240000
|
unkown image
|
page readonly
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
7F222000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DECD000
|
stack
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7F7E0000
|
unkown image
|
page readonly
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1DD32000
|
unkown
|
page read and write
|
|
|
|
20250000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DD3B000
|
unkown
|
page execute and read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DFF0000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20220000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
FC0000
|
heap default
|
page read and write
|
|
|
|
DA0000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page readonly
|
|
|
|
21F0000
|
unkown
|
page read and write
|
|
|
|
1D4000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
201F6000
|
unkown
|
page read and write
|
|
|
|
1DD37000
|
unkown
|
page execute and read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
7F7E2000
|
unkown image
|
page readonly
|
|
|
|
20E2D000
|
stack
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B00000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F222000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
FEA000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
120E000
|
stack
|
page read and write
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
2270000
|
unkown image
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20202000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B10000
|
unkown
|
page execute and read and write
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
F40000
|
unkown image
|
page readonly
|
|
|
|
A0F000
|
stack
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
A50000
|
unkown image
|
page readonly
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1D46E000
|
stack
|
page read and write
|
|
|
|
FE2000
|
heap default
|
page read and write
|
|
|
|
1DF18000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DD22000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7FFB0000
|
unkown image
|
page readonly
|
|
|
|
B30000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B50000
|
unkown
|
page read and write
|
|
|
|
2260000
|
heap private
|
page read and write
|
|
|
|
7FFC2000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
400000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
16B0000
|
unkown image
|
page readonly
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
BF0000
|
unkown image
|
page readonly
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2C50000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1150000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
2380000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
FE6000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F222000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
F21000
|
unkown image
|
page readonly
|
|
|
|
420000
|
unkown image
|
page readonly
|
|
|
|
20230000
|
unkown
|
page read and write
|
|
|
|
2320000
|
unkown
|
page execute and read and write
|
|
|
|
1070000
|
heap default
|
page read and write
|
|
|
|
7F7E0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
AF1000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF00000
|
heap private
|
page read and write
|
|
|
|
7F7F2000
|
unkown image
|
page readonly
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
510000
|
heap default
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
201E8000
|
unkown
|
page read and write
|
|
|
|
1840000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page read and write
|
|
|
|
BE0000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
201DE000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
7F7E2000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
E00000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
|
|
2102C000
|
stack
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1D2F1000
|
unkown
|
page read and write
|
|
|
|
7F7F0000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
201F9000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1D830000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
heap default
|
page read and write
|
|
|
|
FDF000
|
unkown
|
page read and write
|
|
|
|
FEC000
|
unkown
|
page read and write
|
|
|
|
20250000
|
unkown
|
page read and write
|
|
|
|
1DD30000
|
unkown
|
page read and write
|
|
|
|
7F220000
|
unkown image
|
page readonly
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
A60000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
C20000
|
unkown image
|
page readonly
|
|
|
|
20265000
|
unkown
|
page read and write
|
|
|
|
A80000
|
unkown image
|
page readonly
|
|
|
|
20083000
|
unkown
|
page read and write
|
|
|
|
7F7E2000
|
unkown image
|
page readonly
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF18000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B40000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
1D6D0000
|
unkown
|
page read and write
|
|
|
|
7F232000
|
unkown image
|
page readonly
|
|
|
|
1DD03000
|
unkown
|
page execute and read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20205000
|
unkown
|
page read and write
|
|
|
|
20260000
|
unkown
|
page read and write
|
|
|
|
20250000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20250000
|
unkown
|
page read and write
|
|
|
|
AF0000
|
unkown
|
page read and write
|
|
|
|
1074000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
1DF10000
|
unkown
|
page read and write
|
|
|
|
424000
|
unkown image
|
page readonly
|
|
|
|
610000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
20286000
|
unkown
|
page read and write
|
|
|
|
F10000
|
unkown image
|
page readonly
|
|
|
|
20230000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
B41000
|
unkown
|
page read and write
|
|
|
|
1CD51000
|
unkown
|
page read and write
|
|
|
|
8CF000
|
stack
|
page read and write
|
|
|
|
90E000
|
stack
|
page read and write
|
|
|
|
1DF15000
|
unkown
|
page read and write
|
|
There are 790 hidden memdumps, click here to show them.