Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
camphoto_1144747756.mp4
|
ISO Media, HEIF Image HEVC Main or Main Still Picture Profile
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\{0879FDF1-3C18-4895-B405-9D2102018F3D}.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Art Cache\LocalMLS\{24E563B7-38E3-45A3-91E3-C6DAE51EA1CD}.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components
3
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\CurrentDatabase_372.wmdb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\01_Music_auto_rated_at_5_stars.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\02_Music_added_in_the_last_month.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\03_Music_rated_at_4_or_5_stars.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\04_Music_played_in_the_last_month.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\05_Pictures_taken_in_the_last_month.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\06_Pictures_rated_4_or_5_stars.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\07_TV_recorded_in_the_last_week.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\08_Video_rated_at_4_or_5_stars.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\09_Music_played_the_most.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\10_All_Music.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\11_All_Pictures.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\000064AB\12_All_Video.wpl
|
HTML document, ASCII text, with CRLF line terminators
|
modified
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\74d7f43c1561fc1e.customDestinations-ms (copy)
|
Matlab v4 mat-file (little endian) \253\373\277\272\002, sparse, rows 2, columns 0, imaginary
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\PC1JEWHXE4X3LXR54OYW.temp
|
Matlab v4 mat-file (little endian) \253\373\277\272\002, sparse, rows 2, columns 0, imaginary
|
dropped
|
||
C:\Users\Public\Music\Sample Music\AlbumArtSmall.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 75x75, components
3
|
dropped
|
||
C:\Users\Public\Music\Sample Music\AlbumArt_{5FA05D35-A682-4AF6-96F7-0773E42D4D16}_Large.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components
3
|
dropped
|
||
C:\Users\Public\Music\Sample Music\AlbumArt_{5FA05D35-A682-4AF6-96F7-0773E42D4D16}_Small.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 75x75, components
3
|
dropped
|
||
C:\Users\Public\Music\Sample Music\Folder.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 200x200, components
3
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\DiagPackage.diagpkg
|
HTML document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\DiagPackage.dll
|
PE32+ executable (DLL) (console) x86-64, for MS Windows
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\RS_MediaLibCorrupted.ps1
|
ISO-8859 text, with CRLF line terminators
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\TS_IsWMPUnavailable.ps1
|
ISO-8859 text, with CRLF line terminators
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\TS_WindowsMediaPlayer.ps1
|
ISO-8859 text, with CRLF line terminators
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\en-US\CL_LocalizationData.psd1
|
Unicode text, UTF-16, little-endian text, with CRLF line terminators
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\en-US\DiagPackage.dll.mui
|
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
|
dropped
|
||
C:\Windows\Temp\SDIAG_57d12060-20b6-45ab-a73b-de5201e22bf7\result\results.xsl
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
There are 20 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
|
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\user\Desktop\camphoto_1144747756.mp4"
|
||
C:\Windows\SysWOW64\msdt.exe
|
"C:\Windows\System32\msdt.exe" -id WindowsMediaPlayerLibraryDiagnostic
|
||
C:\Windows\SysWOW64\msdt.exe
|
"C:\Windows\System32\msdt.exe" -id WindowsMediaPlayerLibraryDiagnostic
|
||
C:\Windows\SysWOW64\msdt.exe
|
"C:\Windows\System32\msdt.exe" -id WindowsMediaPlayerLibraryDiagnostic
|
||
C:\Windows\SysWOW64\msdt.exe
|
"C:\Windows\System32\msdt.exe" -id WindowsMediaPlayerLibraryDiagnostic
|
||
C:\Windows\SysWOW64\msdt.exe
|
"C:\Windows\System32\msdt.exe" -id WindowsMediaPlayerLibraryDiagnostic
|
||
C:\Windows\SysWOW64\msdt.exe
|
"C:\Windows\System32\msdt.exe" -id WindowsMediaPlayerLibraryDiagnostic
|
||
C:\Windows\SysWOW64\msdt.exe
|
"C:\Windows\System32\msdt.exe" -id WindowsMediaPlayerLibraryDiagnostic
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://pro.corbis.com/search/searchresults.asp?txt=42-15564978&openImage=42-15564978:li
|
unknown
|
||
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
|
unknown
|
||
http://crl.pkioverheid.nl/DomOvLatestCRL.crl0
|
unknown
|
||
http://www.diginotar.nl/cps/pkioverheid0
|
unknown
|
||
http://crl.entrust.net/server1.crl0
|
unknown
|
||
http://pro.corbis.com/search/searchresults.asp?txt=42-17167222&openImage=42-171672228BIM
|
unknown
|
||
http://ocsp.entrust.net0D
|
unknown
|
||
http://pro.corbis.com/search/searchresults.asp?txt=42-17066732&openImage=42-17066732XRe
|
unknown
|
||
http://ocsp.entrust.net03
|
unknown
|
||
https://secure.comodo.com/CPS0
|
unknown
|
||
http://crl.entrust.net/2048ca.crl0
|
unknown
|
There are 1 hidden URLs, click here to show them.
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
Migrating
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
LaunchIndex
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
SQMLaunchIndex
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Skins
|
LastViewModeVTen
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
AppColorLimited
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
|
Version
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
|
FriendlyName
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
|
CLSID
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
|
FilterData
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
|
MidiOutId
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
|
FriendlyName
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
|
CLSID
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
|
FilterData
|
||
HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
|
DSGuid
|
||
HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache
|
0
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Skins\res://wmploc/RT_TEXT/player.wsz
|
Prefs
|
||
HKEY_CURRENT_USER\Software\Microsoft\MPEG2Demultiplexer
|
StreamType
|
||
HKEY_CURRENT_USER\Software\Microsoft\MPEG2Demultiplexer
|
WriteCapture
|
||
HKEY_CURRENT_USER\Software\Microsoft\MPEG2Demultiplexer
|
WriteCaptureDir
|
||
HKEY_CURRENT_USER\Software\Microsoft\MPEG2Demultiplexer
|
WriteCapturePath
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
TranscodedFilesCacheSize
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
TranscodedFilesCacheDefaultSizeSet
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup
|
UpdateTimeStamp
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
LastLicenseRefresh
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MostRecentFileAddOrRemove
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
LibraryHasBeenPopulated
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{A38B883C-1682-497E-97B0-0A3A9E801682} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{E37A73F8-FB01-43DC-914E-AAEE76095AB9} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
ShadowFileMaxClients
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
SwagBitsPerSecond
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
FileDiscontinuitiesPerSecond
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
FileGrowthQuantumSeconds
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
FileInlineGrowthQuantumSeconds
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
FileGrowthBudgetMs
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
LogInitialPageCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
LogMinJobWaitTimeMs
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
LogMaxJobDemoteTimeMs
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
CommitMaxCheckPointPageCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
CommitMaxCheckPoitnRateMs
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
CacheLongPageCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
CacheShortPageCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
CacheHashTableSize
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
CacheWaitForSize
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
NvpRecCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
NvpClientsCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
NvpRecWaitForCounts
|
||
HKEY_CURRENT_USER\Software\Microsoft\SBE\SAL
|
CriticalLowDiskSpace
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{AEB16279-B750-48F1-8586-97956060175A} {886D8EEB-8CF2-4446-8D02-CDBA1DBDCF99} 0xFFFF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Direct3D\MostRecentApplication
|
Name
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Skins\res://wmploc/RT_TEXT/player.wsz
|
Prefs
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
AutoMetadataLastResetTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexList
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexMusic
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexList
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexMusic
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
AutoMetadataCurrentDownloadCount
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-wmplayer
|
CLSID
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MostRecentFileAddOrRemove
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexList
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexList
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexMusic
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MostRecentFileAddOrRemove
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexMusic
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
|
UniqueID
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
|
ComputerName
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
|
VolumeSerialNumber
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
AutoMetadataCurrentDownloadCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
AutoMetadataCurrentDownloadCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
AutoMetadataCurrentNetworkErrorCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
AutoMetadataCurrentNetworkErrorCount
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexMusic
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexMusic
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexPhoto
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MostRecentFileAddOrRemove
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexPhoto
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexPhoto
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexPhoto
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexVideo
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MostRecentFileAddOrRemove
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexMusic
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MLSChangeIndexVideo
|
||
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
|
MostRecentFileAddOrRemove
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
|
Blob
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
|
Blob
|
There are 79 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
2E05000
|
heap
|
page read and write
|
||
8B0000
|
heap
|
page read and write
|
||
22BD000
|
stack
|
page read and write
|
||
3A02000
|
heap
|
page read and write
|
||
3E9E000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5137000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
3AF0000
|
trusted library allocation
|
page read and write
|
||
42E000
|
heap
|
page read and write
|
||
24B0000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
1BB000
|
stack
|
page read and write
|
||
3A04000
|
heap
|
page read and write
|
||
93E000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
43B000
|
heap
|
page read and write
|
||
5DB9000
|
heap
|
page read and write
|
||
2240000
|
heap
|
page read and write
|
||
203F000
|
stack
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5133000
|
heap
|
page read and write
|
||
99A000
|
heap
|
page read and write
|
||
4022000
|
heap
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
5151000
|
heap
|
page read and write
|
||
830000
|
trusted library allocation
|
page read and write
|
||
2F20000
|
trusted library allocation
|
page read and write
|
||
8B0000
|
heap
|
page read and write
|
||
3A90000
|
trusted library allocation
|
page read and write
|
||
5320000
|
heap
|
page read and write
|
||
48B7000
|
trusted library section
|
page read and write
|
||
400000
|
heap
|
page read and write
|
||
2330000
|
heap
|
page read and write
|
||
2020000
|
heap
|
page read and write
|
||
3A0000
|
trusted library allocation
|
page read and write
|
||
2CA000
|
heap
|
page read and write
|
||
38DA000
|
heap
|
page read and write
|
||
3D3D000
|
heap
|
page read and write
|
||
70C000
|
heap
|
page read and write
|
||
241E000
|
stack
|
page read and write
|
||
5FD0000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
490E000
|
trusted library section
|
page read and write
|
||
2731000
|
heap
|
page read and write
|
||
402E000
|
heap
|
page read and write
|
||
4E3C000
|
stack
|
page read and write
|
||
2C50000
|
trusted library allocation
|
page read and write
|
||
6BA000
|
heap
|
page read and write
|
||
2540000
|
heap
|
page read and write
|
||
2872000
|
trusted library allocation
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
3A90000
|
trusted library allocation
|
page read and write
|
||
180000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
1E4000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
9A0000
|
heap
|
page read and write
|
||
3CB9000
|
heap
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
201F000
|
stack
|
page read and write
|
||
700000
|
heap
|
page read and write
|
||
12A000
|
stack
|
page read and write
|
||
3E10000
|
heap
|
page read and write
|
||
4911000
|
trusted library section
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
94D000
|
heap
|
page read and write
|
||
48F0000
|
trusted library section
|
page read and write
|
||
511C000
|
heap
|
page read and write
|
||
2B0000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
4E60000
|
heap
|
page read and write
|
||
5145000
|
heap
|
page read and write
|
||
7AF000
|
stack
|
page read and write
|
||
920000
|
trusted library allocation
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
20E000
|
heap
|
page read and write
|
||
3D34000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5112000
|
heap
|
page read and write
|
||
96E000
|
stack
|
page read and write
|
||
490C000
|
trusted library section
|
page read and write
|
||
2E0E000
|
heap
|
page read and write
|
||
260E000
|
stack
|
page read and write
|
||
61D000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
244E000
|
stack
|
page read and write
|
||
2F20000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3E8A000
|
heap
|
page read and write
|
||
3A6E000
|
heap
|
page read and write
|
||
3C0000
|
trusted library allocation
|
page read and write
|
||
5520000
|
trusted library allocation
|
page read and write
|
||
38DB000
|
heap
|
page read and write
|
||
8B2000
|
heap
|
page read and write
|
||
3C60000
|
heap
|
page read and write
|
||
4935000
|
trusted library section
|
page read and write
|
||
271000
|
heap
|
page read and write
|
||
2660000
|
heap
|
page read and write
|
||
21B000
|
heap
|
page read and write
|
||
24C0000
|
heap
|
page read and write
|
||
975000
|
heap
|
page read and write
|
||
3EC0000
|
heap
|
page read and write
|
||
280000
|
heap
|
page read and write
|
||
2CC9000
|
heap
|
page read and write
|
||
1E0000
|
trusted library allocation
|
page read and write
|
||
488A000
|
trusted library section
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5B10000
|
heap
|
page read and write
|
||
67E000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
970000
|
heap
|
page read and write
|
||
9E0000
|
heap
|
page read and write
|
||
23C0000
|
heap
|
page read and write
|
||
48BD000
|
trusted library section
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
38A2000
|
heap
|
page read and write
|
||
51E0000
|
heap
|
page read and write
|
||
63E000
|
stack
|
page read and write
|
||
691000
|
heap
|
page read and write
|
||
5520000
|
trusted library allocation
|
page read and write
|
||
426000
|
trusted library allocation
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
97F000
|
heap
|
page read and write
|
||
231F000
|
stack
|
page read and write
|
||
1D0000
|
heap
|
page read and write
|
||
38A0000
|
heap
|
page read and write
|
||
491B000
|
trusted library section
|
page read and write
|
||
428000
|
trusted library allocation
|
page read and write
|
||
401A000
|
heap
|
page read and write
|
||
240C000
|
stack
|
page read and write
|
||
8C0000
|
heap
|
page read and write
|
||
27C0000
|
trusted library allocation
|
page read and write
|
||
5112000
|
heap
|
page read and write
|
||
2873000
|
trusted library allocation
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
2830000
|
trusted library allocation
|
page read and write
|
||
2780000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
50FF000
|
stack
|
page read and write
|
||
90000
|
heap
|
page read and write
|
||
2BE000
|
heap
|
page read and write
|
||
2CFF000
|
heap
|
page read and write
|
||
5D0000
|
heap
|
page read and write
|
||
830000
|
trusted library allocation
|
page read and write
|
||
2795000
|
heap
|
page read and write
|
||
3A60000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
2870000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
1F1F000
|
stack
|
page read and write
|
||
277000
|
heap
|
page read and write
|
||
2350000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
667000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
5112000
|
heap
|
page read and write
|
||
3AF0000
|
trusted library allocation
|
page read and write
|
||
5700000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
94D000
|
heap
|
page read and write
|
||
24A000
|
heap
|
page read and write
|
||
2DA2000
|
trusted library allocation
|
page read and write
|
||
2A7000
|
heap
|
page read and write
|
||
3A6A000
|
heap
|
page read and write
|
||
68D000
|
heap
|
page read and write
|
||
2720000
|
heap
|
page read and write
|
||
944000
|
trusted library allocation
|
page read and write
|
||
2620000
|
heap
|
page read and write
|
||
5D70000
|
heap
|
page read and write
|
||
280000
|
heap
|
page read and write
|
||
960000
|
heap
|
page read and write
|
||
310000
|
trusted library allocation
|
page read and write
|
||
401B000
|
heap
|
page read and write
|
||
99B000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
276000
|
heap
|
page read and write
|
||
48CA000
|
trusted library section
|
page read and write
|
||
240000
|
trusted library allocation
|
page read and write
|
||
760000
|
heap
|
page read and write
|
||
2E3000
|
heap
|
page read and write
|
||
5164000
|
heap
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
2E0F000
|
heap
|
page read and write
|
||
354F000
|
stack
|
page read and write
|
||
401B000
|
heap
|
page read and write
|
||
27C0000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
22B0000
|
heap
|
page read and write
|
||
14B000
|
stack
|
page read and write
|
||
31D000
|
heap
|
page read and write
|
||
512E000
|
heap
|
page read and write
|
||
51AA000
|
heap
|
page read and write
|
||
4879000
|
trusted library section
|
page read and write
|
||
3D63000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
3D42000
|
heap
|
page read and write
|
||
264000
|
heap
|
page read and write
|
||
230000
|
heap
|
page read and write
|
||
23C000
|
heap
|
page read and write
|
||
3A05000
|
heap
|
page read and write
|
||
418000
|
trusted library allocation
|
page read and write
|
||
22C8000
|
heap
|
page read and write
|
||
420000
|
trusted library allocation
|
page read and write
|
||
38D9000
|
heap
|
page read and write
|
||
2970000
|
heap
|
page read and write
|
||
2E0E000
|
heap
|
page read and write
|
||
3A6E000
|
heap
|
page read and write
|
||
6410000
|
trusted library allocation
|
page read and write
|
||
2350000
|
heap
|
page read and write
|
||
8F0000
|
heap
|
page read and write
|
||
5165000
|
heap
|
page read and write
|
||
140000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
48C5000
|
trusted library section
|
page read and write
|
||
5157000
|
heap
|
page read and write
|
||
308B000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3C0000
|
trusted library allocation
|
page read and write
|
||
2480000
|
heap
|
page read and write
|
||
5700000
|
trusted library allocation
|
page read and write
|
||
2CA0000
|
heap
|
page read and write
|
||
26F7000
|
heap
|
page read and write
|
||
15B000
|
stack
|
page read and write
|
||
491E000
|
trusted library section
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
2780000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
4860000
|
trusted library section
|
page read and write
|
||
21CE000
|
stack
|
page read and write
|
||
2580000
|
heap
|
page read and write
|
||
1E60000
|
trusted library allocation
|
page read and write
|
||
277000
|
heap
|
page read and write
|
||
5F7000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
307D000
|
stack
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
2360000
|
heap
|
page read and write
|
||
18D000
|
stack
|
page read and write
|
||
490A000
|
trusted library section
|
page read and write
|
||
5B90000
|
heap
|
page read and write
|
||
3AF2000
|
trusted library allocation
|
page read and write
|
||
240000
|
trusted library allocation
|
page read and write
|
||
2CC000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
48DC000
|
trusted library section
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
1C0000
|
trusted library allocation
|
page read and write
|
||
48E5000
|
trusted library section
|
page read and write
|
||
3C30000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
975000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
2440000
|
heap
|
page read and write
|
||
3E14000
|
heap
|
page read and write
|
||
436000
|
heap
|
page read and write
|
||
96E000
|
heap
|
page read and write
|
||
22C0000
|
heap
|
page read and write
|
||
926000
|
heap
|
page read and write
|
||
430000
|
heap
|
page read and write
|
||
654000
|
heap
|
page read and write
|
||
5147000
|
heap
|
page read and write
|
||
38E1000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
2692000
|
heap
|
page read and write
|
||
1C0000
|
trusted library allocation
|
page read and write
|
||
97A000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
64A000
|
heap
|
page read and write
|
||
26E3000
|
heap
|
page read and write
|
||
346000
|
heap
|
page read and write
|
||
184000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
444000
|
heap
|
page read and write
|
||
202000
|
heap
|
page read and write
|
||
975000
|
heap
|
page read and write
|
||
33D000
|
heap
|
page read and write
|
||
170000
|
heap
|
page read and write
|
||
2D3B000
|
heap
|
page read and write
|
||
2E9C000
|
stack
|
page read and write
|
||
922000
|
trusted library allocation
|
page read and write
|
||
1F4000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
410000
|
trusted library allocation
|
page read and write
|
||
4906000
|
trusted library section
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
932000
|
trusted library allocation
|
page read and write
|
||
2A4000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
516F000
|
heap
|
page read and write
|
||
233000
|
heap
|
page read and write
|
||
A0000
|
trusted library allocation
|
page execute and read and write
|
||
287000
|
heap
|
page read and write
|
||
2C9C000
|
stack
|
page read and write
|
||
2B0000
|
heap
|
page read and write
|
||
6416000
|
trusted library allocation
|
page read and write
|
||
3C83000
|
heap
|
page read and write
|
||
36F000
|
stack
|
page read and write
|
||
480E000
|
stack
|
page read and write
|
||
233E000
|
heap
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
38DB000
|
heap
|
page read and write
|
||
410000
|
trusted library allocation
|
page read and write
|
||
224E000
|
heap
|
page read and write
|
||
4009000
|
heap
|
page read and write
|
||
46CA000
|
stack
|
page read and write
|
||
23D000
|
stack
|
page read and write
|
||
A8C000
|
stack
|
page read and write
|
||
5D7000
|
heap
|
page read and write
|
||
2F7F000
|
stack
|
page read and write
|
||
934000
|
trusted library allocation
|
page read and write
|
||
87E000
|
stack
|
page read and write
|
||
69E000
|
heap
|
page read and write
|
||
894000
|
heap
|
page read and write
|
||
3A6E000
|
heap
|
page read and write
|
||
67B000
|
heap
|
page read and write
|
||
400C000
|
heap
|
page read and write
|
||
928000
|
trusted library allocation
|
page read and write
|
||
5164000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
2D4E000
|
heap
|
page read and write
|
||
1D7000
|
heap
|
page read and write
|
||
2F9E000
|
stack
|
page read and write
|
||
48F9000
|
trusted library section
|
page read and write
|
||
2E0E000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
212F000
|
stack
|
page read and write
|
||
5133000
|
heap
|
page read and write
|
||
39FB000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
48E8000
|
trusted library section
|
page read and write
|
||
2CF8000
|
heap
|
page read and write
|
||
A6F000
|
stack
|
page read and write
|
||
2CF4000
|
heap
|
page read and write
|
||
2740000
|
heap
|
page read and write
|
||
2E00000
|
heap
|
page read and write
|
||
3C68000
|
heap
|
page read and write
|
||
20D000
|
stack
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
2140000
|
heap
|
page read and write
|
||
2140000
|
heap
|
page read and write
|
||
96E000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
247E000
|
stack
|
page read and write
|
||
2CBD000
|
heap
|
page read and write
|
||
2F20000
|
trusted library allocation
|
page read and write
|
||
2F22000
|
trusted library allocation
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
92C000
|
trusted library allocation
|
page read and write
|
||
38DC000
|
heap
|
page read and write
|
||
3EBF000
|
heap
|
page read and write
|
||
6010000
|
trusted library allocation
|
page read and write
|
||
2CF1000
|
heap
|
page read and write
|
||
59E0000
|
heap
|
page read and write
|
||
3C61000
|
heap
|
page read and write
|
||
38DA000
|
heap
|
page read and write
|
||
2E0E000
|
heap
|
page read and write
|
||
2E0E000
|
heap
|
page read and write
|
||
66E000
|
heap
|
page read and write
|
||
2AD000
|
stack
|
page read and write
|
||
3A6B000
|
heap
|
page read and write
|
||
3C99000
|
heap
|
page read and write
|
||
3A63000
|
heap
|
page read and write
|
||
2660000
|
heap
|
page read and write
|
||
2E0A000
|
heap
|
page read and write
|
||
5137000
|
heap
|
page read and write
|
||
3E8A000
|
heap
|
page read and write
|
||
160000
|
heap
|
page read and write
|
||
519C000
|
heap
|
page read and write
|
||
5348000
|
heap
|
page read and write
|
||
5164000
|
heap
|
page read and write
|
||
380000
|
heap
|
page read and write
|
||
48D4000
|
trusted library section
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5520000
|
trusted library allocation
|
page read and write
|
||
1ED000
|
heap
|
page read and write
|
||
5DB0000
|
heap
|
page read and write
|
||
25B000
|
stack
|
page read and write
|
||
3D76000
|
heap
|
page read and write
|
||
2330000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3D46000
|
heap
|
page read and write
|
||
217000
|
stack
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
48CF000
|
trusted library section
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3A66000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
1E0000
|
heap
|
page read and write
|
||
48C0000
|
trusted library section
|
page read and write
|
||
3A04000
|
heap
|
page read and write
|
||
2590000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
D1000
|
stack
|
page read and write
|
||
22CB000
|
heap
|
page read and write
|
||
9A4000
|
heap
|
page read and write
|
||
41A000
|
trusted library allocation
|
page read and write
|
||
2B70000
|
heap
|
page read and write
|
||
27F0000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
920000
|
heap
|
page read and write
|
||
647000
|
heap
|
page read and write
|
||
3C8E000
|
heap
|
page read and write
|
||
2240000
|
heap
|
page read and write
|
||
2130000
|
heap
|
page read and write
|
||
3F30000
|
heap
|
page read and write
|
||
2790000
|
heap
|
page read and write
|
||
6C3000
|
heap
|
page read and write
|
||
26F7000
|
heap
|
page read and write
|
||
28B0000
|
trusted library allocation
|
page read and write
|
||
77D000
|
heap
|
page read and write
|
||
940000
|
trusted library allocation
|
page read and write
|
||
926000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
48EA000
|
trusted library section
|
page read and write
|
||
39F0000
|
heap
|
page read and write
|
||
427000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
2450000
|
heap
|
page read and write
|
||
92A000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
2CF3000
|
heap
|
page read and write
|
||
8D0000
|
heap
|
page read and write
|
||
1D0000
|
heap
|
page read and write
|
||
455000
|
heap
|
page read and write
|
||
283000
|
heap
|
page read and write
|
||
8ED000
|
heap
|
page read and write
|
||
4D74000
|
stack
|
page read and write
|
||
310000
|
trusted library allocation
|
page read and write
|
||
3E24000
|
heap
|
page read and write
|
||
5A20000
|
heap
|
page read and write
|
||
1A2000
|
heap
|
page read and write
|
||
5700000
|
trusted library allocation
|
page read and write
|
||
E7000
|
stack
|
page read and write
|
||
5179000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
1FFD000
|
heap
|
page read and write
|
||
930000
|
heap
|
page read and write
|
||
2DA000
|
heap
|
page read and write
|
||
3F8C000
|
heap
|
page read and write
|
||
5133000
|
heap
|
page read and write
|
||
5112000
|
heap
|
page read and write
|
||
5520000
|
trusted library allocation
|
page read and write
|
||
2700000
|
trusted library allocation
|
page read and write
|
||
2360000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
47CC000
|
stack
|
page read and write
|
||
60E000
|
heap
|
page read and write
|
||
485F000
|
stack
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3BF0000
|
heap
|
page read and write
|
||
4012000
|
heap
|
page read and write
|
||
936000
|
trusted library allocation
|
page read and write
|
||
3E35000
|
heap
|
page read and write
|
||
664000
|
heap
|
page read and write
|
||
96D000
|
heap
|
page read and write
|
||
637000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
499000
|
heap
|
page read and write
|
||
5F0000
|
heap
|
page read and write
|
||
20FD000
|
stack
|
page read and write
|
||
39F8000
|
heap
|
page read and write
|
||
2F0000
|
heap
|
page read and write
|
||
2780000
|
heap
|
page read and write
|
||
400000
|
unkown
|
page read and write
|
||
924000
|
trusted library allocation
|
page read and write
|
||
7E0000
|
heap
|
page read and write
|
||
3A6B000
|
heap
|
page read and write
|
||
3080000
|
heap
|
page read and write
|
||
2E0F000
|
heap
|
page read and write
|
||
518D000
|
heap
|
page read and write
|
||
412000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
275000
|
heap
|
page read and write
|
||
402E000
|
heap
|
page read and write
|
||
511F000
|
heap
|
page read and write
|
||
2D06000
|
heap
|
page read and write
|
||
96000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
5A20000
|
heap
|
page read and write
|
||
5336000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5300000
|
heap
|
page read and write
|
||
ACE000
|
stack
|
page read and write
|
||
1F80000
|
heap
|
page read and write
|
||
6AB000
|
heap
|
page read and write
|
||
630000
|
heap
|
page read and write
|
||
410000
|
trusted library allocation
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
414000
|
trusted library allocation
|
page read and write
|
||
26C000
|
stack
|
page read and write
|
||
8F4000
|
heap
|
page read and write
|
||
3E32000
|
heap
|
page read and write
|
||
93C000
|
trusted library allocation
|
page read and write
|
||
1AD000
|
stack
|
page read and write
|
||
946000
|
trusted library allocation
|
page read and write
|
||
492A000
|
trusted library section
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
68B000
|
heap
|
page read and write
|
||
3CFE000
|
heap
|
page read and write
|
||
5160000
|
heap
|
page read and write
|
||
2E0E000
|
heap
|
page read and write
|
||
2560000
|
heap
|
page read and write
|
||
4915000
|
trusted library section
|
page read and write
|
||
2CD000
|
heap
|
page read and write
|
||
975000
|
heap
|
page read and write
|
||
3C73000
|
heap
|
page read and write
|
||
2CB000
|
heap
|
page read and write
|
||
3A04000
|
heap
|
page read and write
|
||
3A02000
|
heap
|
page read and write
|
||
227F000
|
stack
|
page read and write
|
||
2FDE000
|
stack
|
page read and write
|
||
464D000
|
stack
|
page read and write
|
||
270000
|
heap
|
page read and write
|
||
3C71000
|
heap
|
page read and write
|
||
39FB000
|
heap
|
page read and write
|
||
5326000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
271E000
|
heap
|
page read and write
|
||
2F6000
|
heap
|
page read and write
|
||
63B000
|
heap
|
page read and write
|
||
3088000
|
heap
|
page read and write
|
||
27B2000
|
heap
|
page read and write
|
||
22A000
|
heap
|
page read and write
|
||
5112000
|
heap
|
page read and write
|
||
3A92000
|
trusted library allocation
|
page read and write
|
||
FB000
|
stack
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
2DA0000
|
trusted library allocation
|
page read and write
|
||
3A69000
|
heap
|
page read and write
|
||
2E4D000
|
stack
|
page read and write
|
||
3E34000
|
heap
|
page read and write
|
||
67D000
|
heap
|
page read and write
|
||
41C000
|
trusted library allocation
|
page read and write
|
||
3E1C000
|
heap
|
page read and write
|
||
48FC000
|
trusted library section
|
page read and write
|
||
2E0E000
|
heap
|
page read and write
|
||
5520000
|
trusted library allocation
|
page read and write
|
||
47B000
|
heap
|
page read and write
|
||
3E9E000
|
heap
|
page read and write
|
||
42DC000
|
stack
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
3084000
|
heap
|
page read and write
|
||
26F0000
|
heap
|
page read and write
|
||
A6E000
|
stack
|
page read and write
|
||
4B0B000
|
trusted library section
|
page read and write
|
||
427D000
|
stack
|
page read and write
|
||
2E7000
|
heap
|
page read and write
|
||
3EC0000
|
heap
|
page read and write
|
||
3E0000
|
heap
|
page read and write
|
||
2CD000
|
heap
|
page read and write
|
||
5112000
|
heap
|
page read and write
|
||
34CE000
|
stack
|
page read and write
|
||
21E0000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
1FA2000
|
heap
|
page read and write
|
||
20DF000
|
stack
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
2090000
|
heap
|
page read and write
|
||
340000
|
heap
|
page read and write
|
||
3BB0000
|
trusted library allocation
|
page read and write
|
||
2D30000
|
heap
|
page read and write
|
||
39FB000
|
heap
|
page read and write
|
||
2D77000
|
heap
|
page read and write
|
||
20FF000
|
stack
|
page read and write
|
||
8E2000
|
heap
|
page read and write
|
||
973000
|
heap
|
page read and write
|
||
6A3000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
4931000
|
trusted library section
|
page read and write
|
||
1CE000
|
stack
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3E8E000
|
heap
|
page read and write
|
||
5110000
|
heap
|
page read and write
|
||
2E06000
|
heap
|
page read and write
|
||
4331000
|
heap
|
page read and write
|
||
8C4000
|
heap
|
page read and write
|
||
420000
|
heap
|
page read and write
|
||
20AE000
|
stack
|
page read and write
|
||
174000
|
heap
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
5133000
|
heap
|
page read and write
|
||
3C4B000
|
heap
|
page read and write
|
||
3CB9000
|
heap
|
page read and write
|
||
5310000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
890000
|
heap
|
page read and write
|
||
640000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
5137000
|
heap
|
page read and write
|
||
4680000
|
trusted library section
|
page read and write
|
||
7C0000
|
heap
|
page read and write
|
||
239E000
|
heap
|
page read and write
|
||
3A0000
|
trusted library allocation
|
page read and write
|
||
6AD000
|
heap
|
page read and write
|
||
1E0000
|
trusted library allocation
|
page read and write
|
||
684000
|
heap
|
page read and write
|
||
400C000
|
heap
|
page read and write
|
||
5188000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
68A000
|
heap
|
page read and write
|
||
422000
|
trusted library allocation
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
6413000
|
trusted library allocation
|
page read and write
|
||
22F0000
|
heap
|
page read and write
|
||
4921000
|
trusted library section
|
page read and write
|
||
2D5C000
|
heap
|
page read and write
|
||
2390000
|
heap
|
page read and write
|
||
9E0000
|
heap
|
page read and write
|
||
5363000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
38E1000
|
heap
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
69A000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
2D76000
|
heap
|
page read and write
|
||
2BB0000
|
trusted library allocation
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
62A000
|
heap
|
page read and write
|
||
513B000
|
heap
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
8B6000
|
heap
|
page read and write
|
||
938000
|
trusted library allocation
|
page read and write
|
||
1FE0000
|
heap
|
page read and write
|
||
942000
|
trusted library allocation
|
page read and write
|
||
5BD0000
|
heap
|
page read and write
|
||
A5F000
|
stack
|
page read and write
|
||
2DA0000
|
trusted library allocation
|
page read and write
|
||
22F0000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3610000
|
heap
|
page read and write
|
||
192000
|
heap
|
page read and write
|
||
9C2000
|
heap
|
page read and write
|
||
3F15000
|
heap
|
page read and write
|
||
5100000
|
trusted library allocation
|
page read and write
|
||
1F84000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
513B000
|
heap
|
page read and write
|
||
369C000
|
stack
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3E8E000
|
heap
|
page read and write
|
||
236E000
|
heap
|
page read and write
|
||
420000
|
heap
|
page read and write
|
||
224E000
|
heap
|
page read and write
|
||
1FD000
|
stack
|
page read and write
|
||
513C000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
41E000
|
trusted library allocation
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
2D09000
|
heap
|
page read and write
|
||
A2F000
|
stack
|
page read and write
|
||
39F6000
|
heap
|
page read and write
|
||
3E0000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
424000
|
trusted library allocation
|
page read and write
|
||
2871000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
5F4000
|
heap
|
page read and write
|
||
5880000
|
heap
|
page read and write
|
||
5F60000
|
heap
|
page read and write
|
||
ABF000
|
stack
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
975000
|
heap
|
page read and write
|
||
38DC000
|
heap
|
page read and write
|
||
61B000
|
heap
|
page read and write
|
||
3B2F000
|
stack
|
page read and write
|
||
5520000
|
trusted library allocation
|
page read and write
|
||
21D000
|
heap
|
page read and write
|
||
25BC000
|
stack
|
page read and write
|
||
22C4000
|
heap
|
page read and write
|
||
5300000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
38D8000
|
heap
|
page read and write
|
||
3EE000
|
stack
|
page read and write
|
||
3CA1000
|
heap
|
page read and write
|
||
912000
|
heap
|
page read and write
|
||
2DA2000
|
trusted library allocation
|
page read and write
|
||
511F000
|
heap
|
page read and write
|
||
3EBF000
|
heap
|
page read and write
|
||
38DC000
|
heap
|
page read and write
|
||
5700000
|
trusted library allocation
|
page read and write
|
||
3EBF000
|
heap
|
page read and write
|
||
3F98000
|
heap
|
page read and write
|
||
467000
|
heap
|
page read and write
|
||
3EBF000
|
heap
|
page read and write
|
||
223F000
|
stack
|
page read and write
|
||
2E0000
|
heap
|
page read and write
|
||
38D9000
|
heap
|
page read and write
|
||
38DB000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
A8E000
|
stack
|
page read and write
|
||
3FE6000
|
heap
|
page read and write
|
||
2510000
|
heap
|
page read and write
|
||
39FF000
|
heap
|
page read and write
|
||
4904000
|
trusted library section
|
page read and write
|
||
614000
|
heap
|
page read and write
|
||
5100000
|
heap
|
page read and write
|
||
977000
|
heap
|
page read and write
|
||
2E0A000
|
heap
|
page read and write
|
||
11B000
|
stack
|
page read and write
|
||
92E000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
390000
|
heap
|
page read and write
|
||
653000
|
heap
|
page read and write
|
||
660000
|
heap
|
page read and write
|
||
2870000
|
trusted library allocation
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
38D9000
|
heap
|
page read and write
|
||
9EE000
|
stack
|
page read and write
|
||
2F1E000
|
stack
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
3D0000
|
heap
|
page read and write
|
||
5BD0000
|
heap
|
page read and write
|
||
302E000
|
stack
|
page read and write
|
||
26C0000
|
heap
|
page read and write
|
||
977000
|
heap
|
page read and write
|
||
402E000
|
heap
|
page read and write
|
||
22C0000
|
heap
|
page read and write
|
||
3A04000
|
heap
|
page read and write
|
||
38E1000
|
heap
|
page read and write
|
||
2560000
|
heap
|
page read and write
|
||
2F20000
|
trusted library allocation
|
page read and write
|
||
ADF000
|
stack
|
page read and write
|
||
3EBF000
|
heap
|
page read and write
|
||
402E000
|
heap
|
page read and write
|
||
3B00000
|
trusted library allocation
|
page read and write
|
||
3C0000
|
trusted library allocation
|
page execute and read and write
|
||
38D8000
|
heap
|
page read and write
|
||
20B0000
|
heap
|
page read and write
|
||
48AD000
|
trusted library section
|
page read and write
|
||
930000
|
heap
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
5334000
|
heap
|
page read and write
|
||
10000
|
heap
|
page read and write
|
||
38DB000
|
heap
|
page read and write
|
||
1F5F000
|
stack
|
page read and write
|
||
3C62000
|
heap
|
page read and write
|
||
63D000
|
heap
|
page read and write
|
||
416000
|
trusted library allocation
|
page read and write
|
||
93A000
|
trusted library allocation
|
page read and write
|
||
633000
|
heap
|
page read and write
|
||
2D59000
|
heap
|
page read and write
|
||
2E0B000
|
heap
|
page read and write
|
||
48B9000
|
trusted library section
|
page read and write
|
||
343000
|
heap
|
page read and write
|
||
62E000
|
heap
|
page read and write
|
||
3E34000
|
heap
|
page read and write
|
||
5030000
|
trusted library allocation
|
page read and write
|
||
21DE000
|
stack
|
page read and write
|
||
3E31000
|
heap
|
page read and write
|
||
23CE000
|
heap
|
page read and write
|
||
2E05000
|
heap
|
page read and write
|
||
5110000
|
heap
|
page read and write
|
||
2874000
|
trusted library allocation
|
page read and write
|
||
2CE8000
|
heap
|
page read and write
|
||
3F71000
|
heap
|
page read and write
|
||
2760000
|
heap
|
page read and write
|
||
975000
|
heap
|
page read and write
|
There are 771 hidden memdumps, click here to show them.