Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
instruct_11.21.doc.docm
|
Microsoft Word 2007+
|
initial sample
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\warning[1]
|
GIF image data, version 89a, 36 x 38
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\error[1]
|
UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[1]
|
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C6D3C2DB.gif
|
GIF image data, version 89a, 774 x 198
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRF{21724630-2B33-445C-A10E-E71E570B535F}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{70B53CFD-265E-4516-AFB0-C6E692CB3FB3}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{A92381E7-919A-4DD3-B53A-282AF29674DF}.tmp
|
data
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Public.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue
Jul 14 02:20:08 2009, mtime=Sat Nov 13 03:59:17 2021, atime=Sat Nov 13 03:59:17 2021, length=4096, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\instruct_11.21.doc.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Sat Nov 13 03:59:11
2021, mtime=Sat Nov 13 03:59:11 2021, atime=Sat Nov 13 03:59:14 2021, length=33868, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\powPowNext.LNK
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Sat Nov 13 03:59:17
2021, mtime=Sat Nov 13 03:59:17 2021, atime=Sat Nov 13 03:59:17 2021, length=3346, window=hide
|
modified
|
||
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
|
data
|
dropped
|
||
C:\Users\user\Desktop\~$struct_11.21.doc.docm
|
data
|
dropped
|
||
C:\Users\Public\~$wPowNext.hta
|
data
|
dropped
|
||
C:\Users\Public\~WRD0000.tmp
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\users\public\powPowNext.hta (copy)
|
HTML document, ASCII text, with very long lines, with CRLF line terminators
|
dropped
|
There are 7 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
|
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /Automation -Embedding
|
||
C:\Windows\explorer.exe
|
c:\windows\explorer c:\users\public\powPowNext.hta
|
||
C:\Windows\explorer.exe
|
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
|
||
C:\Windows\SysWOW64\mshta.exe
|
"C:\Windows\SysWOW64\mshta.exe" "C:\Users\Public\powPowNext.hta"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://shoulderelliottd.com/boolk/QlaJk8C6vYqIyEwbdypBHv3yJR/wrWWNCD/77427/bebys8?cid=Bm9cAP&wP8zhkK
|
unknown
|
||
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
||
http://www.%s.comPA
|
unknown
|
||
http://www.icra.org/vocabulary/.
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
||
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
shoulderelliottd.com
|
194.62.42.144
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
194.62.42.144
|
shoulderelliottd.com
|
Russian Federation
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
ni-
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word
|
MTTT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
6k-
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems
|
8m-
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
|
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2D6CF
|
2D6CF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Place MRU
|
Item 1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 21
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 5
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 6
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 7
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 9
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 10
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 11
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 13
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 14
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 15
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 16
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 17
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 18
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 19
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 20
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\file mru
|
Item 21
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2DF67
|
2DF67
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Security\Trusted Documents
|
LastPurgeTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
WORDFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\DocumentRecovery\2D6CF
|
2D6CF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hta\OpenWithProgids
|
htafile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
There are 56 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
4C3000
|
unkown
|
page read and write
|
||
4CD000
|
unkown
|
page read and write
|
||
26B000
|
unkown
|
page read and write
|
||
6623000
|
unkown
|
page read and write
|
||
264000
|
heap private
|
page read and write
|
||
55C000
|
unkown
|
page read and write
|
||
2674000
|
unkown
|
page read and write
|
||
3D0000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7EF70000
|
unkown
|
page execute read
|
||
2760000
|
unkown
|
page read and write
|
||
284000
|
unkown
|
page read and write
|
||
530000
|
unkown
|
page read and write
|
||
23E000
|
heap default
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
6C50000
|
heap private
|
page read and write
|
||
28F2000
|
unkown
|
page read and write
|
||
519000
|
unkown
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
7288000
|
heap private
|
page read and write
|
||
54E000
|
unkown
|
page read and write
|
||
538000
|
unkown
|
page read and write
|
||
265000
|
heap default
|
page read and write
|
||
2494000
|
unkown
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
4D0000
|
unkown image
|
page readonly
|
||
249B000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
2B2D000
|
stack
|
page read and write
|
||
7C52000
|
unkown
|
page read and write
|
||
230000
|
heap private
|
page read and write
|
||
55B000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
2D8A000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
51B000
|
unkown
|
page read and write
|
||
292000
|
unkown
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
24A7000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
7C4C000
|
unkown
|
page read and write
|
||
56F000
|
unkown
|
page read and write
|
||
65D0000
|
unkown
|
page read and write
|
||
538000
|
unkown
|
page read and write
|
||
6622000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
2C6000
|
unkown
|
page read and write
|
||
66C5000
|
unkown
|
page read and write
|
||
480000
|
heap default
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
282000
|
unkown
|
page read and write
|
||
2495000
|
unkown
|
page read and write
|
||
A9B000
|
unkown
|
page read and write
|
||
A82000
|
unkown
|
page read and write
|
||
516000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
28FE000
|
stack
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
66C5000
|
unkown
|
page read and write
|
||
A8D000
|
unkown
|
page read and write
|
||
A99000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
7C55000
|
unkown
|
page read and write
|
||
7284000
|
heap private
|
page read and write
|
||
2AE000
|
heap default
|
page read and write
|
||
3AD0000
|
unkown
|
page read and write
|
||
248A000
|
unkown
|
page read and write
|
||
2D90000
|
unkown
|
page read and write
|
||
24A9000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
A4A000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
4D8000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
56F000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
292000
|
unkown
|
page read and write
|
||
A60000
|
unkown
|
page read and write
|
||
4C5000
|
unkown
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
A95000
|
unkown
|
page read and write
|
||
600000
|
unkown image
|
page readonly
|
||
50000
|
unkown image
|
page readonly
|
||
28ED000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
248C000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
2870000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
530000
|
unkown
|
page read and write
|
||
7C46000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
7C55000
|
unkown
|
page read and write
|
||
5C8C000
|
stack
|
page read and write
|
||
64BD000
|
stack
|
page read and write
|
||
470000
|
unkown image
|
page readonly
|
||
2688000
|
unkown
|
page read and write
|
||
F0000
|
heap private
|
page read and write
|
||
2B80000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7C7B000
|
unkown
|
page read and write
|
||
511000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
4C5000
|
heap default
|
page read and write
|
||
66AE000
|
unkown
|
page read and write
|
||
7C46000
|
unkown
|
page read and write
|
||
3180000
|
unkown image
|
page readonly
|
||
530000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
7EFC0000
|
unkown image
|
page readonly
|
||
AB1000
|
unkown
|
page read and write
|
||
538000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
A7F000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
54E000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
7E90000
|
unkown
|
page read and write
|
||
A0A000
|
unkown
|
page read and write
|
||
2D12000
|
unkown
|
page read and write
|
||
56B000
|
unkown
|
page read and write
|
||
66C1000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
2485000
|
unkown
|
page read and write
|
||
24BC000
|
unkown
|
page read and write
|
||
26B0000
|
unkown image
|
page readonly
|
||
A7C000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
51B000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
2679000
|
unkown
|
page read and write
|
||
A81000
|
unkown
|
page read and write
|
||
4A4000
|
heap default
|
page read and write
|
||
6623000
|
unkown
|
page read and write
|
||
5BD0000
|
heap private
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
249F000
|
unkown
|
page read and write
|
||
666B000
|
unkown
|
page read and write
|
||
4EA000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
A99000
|
unkown
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
288000
|
unkown
|
page read and write
|
||
4E1000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
226F000
|
stack
|
page read and write
|
||
210000
|
unkown image
|
page readonly
|
||
2491000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
5EB0000
|
heap private
|
page read and write
|
||
2D85000
|
unkown
|
page read and write
|
||
2C00000
|
unkown
|
page read and write
|
||
52E000
|
stack
|
page read and write
|
||
7C4F000
|
unkown
|
page read and write
|
||
A80000
|
unkown
|
page read and write
|
||
D0000
|
unkown image
|
page readonly
|
||
277000
|
heap default
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
7C5D000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
4CF000
|
unkown
|
page read and write
|
||
248B000
|
unkown
|
page read and write
|
||
7EFC0000
|
unkown image
|
page readonly
|
||
7C81000
|
unkown
|
page read and write
|
||
65F4000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
7C7D000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
7CA5000
|
unkown
|
page read and write
|
||
510000
|
unkown
|
page read and write
|
||
6632000
|
unkown
|
page read and write
|
||
527000
|
unkown
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
56F000
|
unkown
|
page read and write
|
||
52B000
|
unkown
|
page read and write
|
||
24A6000
|
unkown
|
page read and write
|
||
529000
|
unkown
|
page read and write
|
||
265E000
|
stack
|
page read and write
|
||
2D87000
|
unkown
|
page read and write
|
||
538000
|
unkown
|
page read and write
|
||
2D84000
|
unkown
|
page read and write
|
||
2677000
|
unkown
|
page read and write
|
||
3060000
|
unkown
|
page execute
|
||
A99000
|
unkown
|
page read and write
|
||
6652000
|
unkown
|
page read and write
|
||
2E9D000
|
stack
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
6600000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
650000
|
unkown image
|
page readonly
|
||
5F33000
|
unkown
|
page read and write
|
||
A9B000
|
unkown
|
page read and write
|
||
28E1000
|
unkown
|
page read and write
|
||
24BA000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
7C55000
|
unkown
|
page read and write
|
||
24AE000
|
unkown
|
page read and write
|
||
260000
|
unkown
|
page read and write
|
||
275E000
|
stack
|
page read and write
|
||
662000
|
heap private
|
page read and write
|
||
7EFD0000
|
unkown image
|
page readonly
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
AB4000
|
unkown
|
page read and write
|
||
66CC000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
A36000
|
unkown
|
page read and write
|
||
AB7000
|
unkown
|
page read and write
|
||
500000
|
unkown
|
page read and write
|
||
3C56000
|
heap private
|
page read and write
|
||
A42000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
2AC000
|
unkown
|
page read and write
|
||
66CA000
|
unkown
|
page read and write
|
||
7C55000
|
unkown
|
page read and write
|
||
28DE000
|
stack
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
130000
|
unkown
|
page read and write
|
||
1C45000
|
heap private
|
page read and write
|
||
24AD000
|
unkown
|
page read and write
|
||
519000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
370000
|
unkown
|
page read and write
|
||
538000
|
unkown
|
page read and write
|
||
2D84000
|
unkown
|
page read and write
|
||
2D12000
|
unkown
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
7C4C000
|
unkown
|
page read and write
|
||
6FEC000
|
stack
|
page read and write
|
||
207000
|
heap default
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
29FF000
|
stack
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
6D0000
|
heap private
|
page read and write
|
||
2D81000
|
unkown
|
page read and write
|
||
5F34000
|
unkown
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
4D1000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
7C08000
|
unkown
|
page read and write
|
||
52E000
|
unkown
|
page read and write
|
||
6623000
|
unkown
|
page read and write
|
||
66C5000
|
unkown
|
page read and write
|
||
24A0000
|
unkown
|
page read and write
|
||
1DAB000
|
heap private
|
page read and write
|
||
249E000
|
unkown
|
page read and write
|
||
2D87000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
2D82000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
249C000
|
unkown
|
page read and write
|
||
661A000
|
unkown
|
page read and write
|
||
28EA000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
3C0000
|
heap private
|
page read and write
|
||
6627000
|
unkown
|
page read and write
|
||
661A000
|
unkown
|
page read and write
|
||
6618000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
728B000
|
heap private
|
page read and write
|
||
6652000
|
unkown
|
page read and write
|
||
870000
|
unkown image
|
page readonly
|
||
249B000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
1D75000
|
heap private
|
page read and write
|
||
6632000
|
unkown
|
page read and write
|
||
A61000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
24AB000
|
unkown
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
56F000
|
unkown
|
page read and write
|
||
2BD000
|
heap default
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
A8A000
|
unkown
|
page read and write
|
||
3C4000
|
heap private
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
A9B000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
466000
|
unkown
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
7C08000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
55B000
|
unkown
|
page read and write
|
||
656C000
|
stack
|
page read and write
|
||
66C1000
|
unkown
|
page read and write
|
||
7EF76000
|
unkown
|
page execute read
|
||
2488000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
66C5000
|
unkown
|
page read and write
|
||
A7B000
|
unkown
|
page read and write
|
||
28E6000
|
unkown
|
page read and write
|
||
2685000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
66A2000
|
unkown
|
page read and write
|
||
29B000
|
unkown
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
6632000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
2C6000
|
heap default
|
page read and write
|
||
7CA5000
|
unkown
|
page read and write
|
||
A46000
|
unkown
|
page read and write
|
||
4C5000
|
unkown
|
page read and write
|
||
3A90000
|
heap private
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
500000
|
unkown
|
page read and write
|
||
7C48000
|
unkown
|
page read and write
|
||
6623000
|
unkown
|
page read and write
|
||
56B000
|
unkown
|
page read and write
|
||
7EF78000
|
unkown
|
page execute read
|
||
7BF1000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
229E000
|
stack
|
page read and write
|
||
66CA000
|
unkown
|
page read and write
|
||
51B000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
4D8000
|
unkown
|
page read and write
|
||
1A0000
|
unkown
|
page read and write
|
||
78F000
|
stack
|
page read and write
|
||
2E4000
|
heap default
|
page read and write
|
||
2D9000
|
unkown
|
page read and write
|
||
500000
|
unkown
|
page read and write
|
||
A92000
|
unkown
|
page read and write
|
||
248D000
|
unkown
|
page read and write
|
||
4EA000
|
unkown
|
page read and write
|
||
524000
|
unkown
|
page read and write
|
||
406000
|
unkown
|
page read and write
|
||
28E2000
|
unkown
|
page read and write
|
||
A63000
|
unkown
|
page read and write
|
||
500000
|
heap default
|
page read and write
|
||
5EF0000
|
heap private
|
page read and write
|
||
517000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
25E4000
|
unkown image
|
page readonly
|
||
2483000
|
unkown
|
page read and write
|
||
7C52000
|
unkown
|
page read and write
|
||
7C55000
|
unkown
|
page read and write
|
||
7EFB2000
|
unkown image
|
page readonly
|
||
AB1000
|
unkown
|
page read and write
|
||
A63000
|
unkown
|
page read and write
|
||
3B6000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
2F1000
|
heap default
|
page read and write
|
||
24B0000
|
unkown
|
page read and write
|
||
29B000
|
unkown
|
page read and write
|
||
26D000
|
unkown
|
page read and write
|
||
268D000
|
unkown
|
page read and write
|
||
AB2000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
56B000
|
unkown
|
page read and write
|
||
F4000
|
heap private
|
page read and write
|
||
1FA000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
7CA5000
|
unkown
|
page read and write
|
||
376000
|
heap default
|
page read and write
|
||
2D80000
|
unkown
|
page read and write
|
||
7EF74000
|
unkown
|
page execute read
|
||
2490000
|
unkown
|
page read and write
|
||
529000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
7C04000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
310000
|
heap default
|
page read and write
|
||
54C000
|
unkown
|
page read and write
|
||
2D60000
|
unkown
|
page read and write
|
||
2681000
|
unkown
|
page read and write
|
||
644000
|
heap private
|
page read and write
|
||
7C5B000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
24BB000
|
unkown
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
500000
|
unkown
|
page read and write
|
||
4D0000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
24B4000
|
unkown
|
page read and write
|
||
28F1000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
24B4000
|
unkown
|
page read and write
|
||
297E000
|
stack
|
page read and write
|
||
2480000
|
unkown
|
page read and write
|
||
36D000
|
heap default
|
page read and write
|
||
2D10000
|
unkown
|
page read and write
|
||
A82000
|
unkown
|
page read and write
|
||
28E7000
|
unkown
|
page read and write
|
||
2B30000
|
unkown
|
page read and write
|
||
292000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
55B000
|
unkown
|
page read and write
|
||
80E000
|
stack
|
page read and write
|
||
27DE000
|
stack
|
page read and write
|
||
A81000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
6617000
|
unkown
|
page read and write
|
||
7EFDF000
|
unkown
|
page read and write
|
||
2A2000
|
unkown
|
page read and write
|
||
2483000
|
unkown
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
2BE000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
28F0000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7C76000
|
unkown
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
510000
|
unkown
|
page read and write
|
||
430000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
B4F000
|
stack
|
page read and write
|
||
2673000
|
unkown
|
page read and write
|
||
52E000
|
unkown
|
page read and write
|
||
C00000
|
unkown
|
page read and write
|
||
29B000
|
unkown
|
page read and write
|
||
54F000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
66CC000
|
unkown
|
page read and write
|
||
54D000
|
unkown
|
page read and write
|
||
3A6000
|
unkown
|
page read and write
|
||
2672000
|
unkown
|
page read and write
|
||
A8A000
|
unkown
|
page read and write
|
||
24B6000
|
unkown
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
A63000
|
unkown
|
page read and write
|
||
3950000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
667A000
|
unkown
|
page read and write
|
||
2C3000
|
unkown
|
page read and write
|
||
110000
|
unkown
|
page read and write
|
||
5F35000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
4EF000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7C46000
|
unkown
|
page read and write
|
||
7EFB0000
|
unkown image
|
page readonly
|
||
7EFB2000
|
unkown image
|
page readonly
|
||
7CB2000
|
unkown
|
page read and write
|
||
2D10000
|
unkown
|
page read and write
|
||
AB1000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
575000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
66C5000
|
unkown
|
page read and write
|
||
524000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
668A000
|
unkown
|
page read and write
|
||
2CB000
|
heap default
|
page read and write
|
||
2499000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
A42000
|
unkown
|
page read and write
|
||
24AB000
|
unkown
|
page read and write
|
||
24AC000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
28EB000
|
unkown
|
page read and write
|
||
52E000
|
unkown
|
page read and write
|
||
1CC0000
|
unkown image
|
page readonly
|
||
660000
|
unkown image
|
page readonly
|
||
2760000
|
unkown
|
page read and write
|
||
7C5C000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
66CC000
|
unkown
|
page read and write
|
||
2D70000
|
unkown
|
page read and write
|
||
190000
|
unkown
|
page read and write
|
||
2D74000
|
unkown
|
page read and write
|
||
66CC000
|
unkown
|
page read and write
|
||
275000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7C74000
|
unkown
|
page read and write
|
||
267D000
|
unkown
|
page read and write
|
||
55B000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7C4F000
|
unkown
|
page read and write
|
||
539000
|
unkown
|
page read and write
|
||
7C5B000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
219000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
2F20000
|
heap private
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
2684000
|
unkown
|
page read and write
|
||
7C55000
|
unkown
|
page read and write
|
||
5AAE000
|
stack
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
5F32000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
6600000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
337000
|
heap default
|
page read and write
|
||
1D70000
|
heap private
|
page read and write
|
||
7CA5000
|
unkown
|
page read and write
|
||
7C5A000
|
unkown
|
page read and write
|
||
2489000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
7CA5000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
D0000
|
unkown image
|
page readonly
|
||
661A000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
4EF000
|
unkown
|
page read and write
|
||
2D65000
|
unkown
|
page read and write
|
||
260000
|
heap private
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
7EF77000
|
unkown
|
page readonly
|
||
7C70000
|
unkown
|
page read and write
|
||
7C4F000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
487000
|
heap default
|
page read and write
|
||
661D000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
510000
|
unkown
|
page read and write
|
||
28E0000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
7CFE000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
529000
|
unkown
|
page read and write
|
||
234000
|
heap private
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
7C8E000
|
unkown
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
4EA000
|
heap default
|
page read and write
|
||
56F000
|
unkown
|
page read and write
|
||
5B00000
|
heap private
|
page read and write
|
||
6B90000
|
heap private
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
524000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
200000
|
heap default
|
page read and write
|
||
56B000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
7280000
|
heap private
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
A30000
|
unkown
|
page read and write
|
||
64F000
|
unkown
|
page read and write
|
||
510000
|
unkown
|
page read and write
|
||
5C90000
|
heap private
|
page read and write
|
||
25E0000
|
unkown image
|
page readonly
|
||
7C8E000
|
unkown
|
page read and write
|
||
2D12000
|
unkown
|
page read and write
|
||
6EF000
|
stack
|
page read and write
|
||
665A000
|
unkown
|
page read and write
|
||
6632000
|
unkown
|
page read and write
|
||
2B30000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
24A6000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
5D40000
|
heap private
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
24B2000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7C72000
|
unkown
|
page read and write
|
||
AB1000
|
unkown
|
page read and write
|
||
66C3000
|
unkown
|
page read and write
|
||
3367000
|
unkown image
|
page readonly
|
||
7EFD0000
|
unkown image
|
page readonly
|
||
7C55000
|
unkown
|
page read and write
|
||
7CA5000
|
unkown
|
page read and write
|
||
2683000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
2D74000
|
unkown
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
2174000
|
heap private
|
page read and write
|
||
2680000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
54C000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7C86000
|
unkown
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
2D88000
|
unkown
|
page read and write
|
||
2D76000
|
unkown
|
page read and write
|
||
29B000
|
unkown
|
page read and write
|
||
280000
|
heap default
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
AB7000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
66CA000
|
unkown
|
page read and write
|
||
66CA000
|
unkown
|
page read and write
|
||
2687000
|
unkown
|
page read and write
|
||
24B5000
|
unkown
|
page read and write
|
||
6628000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
7C52000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
1C7B000
|
heap private
|
page read and write
|
||
276000
|
unkown
|
page read and write
|
||
3560000
|
unkown image
|
page readonly
|
||
30000
|
unkown image
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
4EA000
|
unkown
|
page read and write
|
||
28EE000
|
unkown
|
page read and write
|
||
2675000
|
unkown
|
page read and write
|
||
267C000
|
unkown
|
page read and write
|
||
7C48000
|
unkown
|
page read and write
|
||
510000
|
unkown
|
page read and write
|
||
E0000
|
unkown image
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
28EC000
|
unkown
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
517000
|
unkown
|
page read and write
|
||
287000
|
heap default
|
page read and write
|
||
56B000
|
unkown
|
page read and write
|
||
2690000
|
unkown
|
page execute
|
||
6616000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
2DD000
|
heap default
|
page read and write
|
||
517000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
4EF000
|
heap default
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
288000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
AB1000
|
unkown
|
page read and write
|
||
29B000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7CA5000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7CA5000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
3990000
|
unkown
|
page read and write
|
||
2B5000
|
unkown
|
page read and write
|
||
28E9000
|
unkown
|
page read and write
|
||
28E4000
|
unkown
|
page read and write
|
||
2A10000
|
unkown
|
page execute
|
||
7C74000
|
unkown
|
page read and write
|
||
AA5000
|
unkown
|
page read and write
|
||
6DF000
|
heap private
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
A99000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
2040000
|
unkown image
|
page readonly
|
||
53C000
|
unkown
|
page read and write
|
||
2CC000
|
unkown
|
page read and write
|
||
A97000
|
unkown
|
page read and write
|
||
A65000
|
unkown
|
page read and write
|
||
180000
|
unkown
|
page read and write
|
||
683D000
|
stack
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
A7A000
|
unkown
|
page read and write
|
||
66CC000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
28EF000
|
unkown
|
page read and write
|
||
1C40000
|
heap private
|
page read and write
|
||
640000
|
heap private
|
page read and write
|
||
6628000
|
unkown
|
page read and write
|
||
6673000
|
unkown
|
page read and write
|
||
28E8000
|
unkown
|
page read and write
|
||
66CA000
|
unkown
|
page read and write
|
||
51E000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
65F5000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
7C4C000
|
unkown
|
page read and write
|
||
4D8000
|
unkown
|
page read and write
|
||
2682000
|
unkown
|
page read and write
|
||
519000
|
unkown
|
page read and write
|
||
A7A000
|
unkown
|
page read and write
|
||
28A000
|
unkown
|
page read and write
|
||
2492000
|
unkown
|
page read and write
|
||
3A80000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
3A70000
|
unkown
|
page read and write
|
||
4EA000
|
unkown
|
page read and write
|
||
2A0000
|
unkown
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
A3A000
|
unkown
|
page read and write
|
||
53B000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
26FC000
|
stack
|
page read and write
|
||
524000
|
unkown
|
page read and write
|
||
AB4000
|
unkown
|
page read and write
|
||
2686000
|
unkown
|
page read and write
|
||
538000
|
unkown
|
page read and write
|
||
2CF000
|
heap default
|
page read and write
|
||
7C4C000
|
unkown
|
page read and write
|
||
248E000
|
unkown
|
page read and write
|
||
2D85000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
5F31000
|
unkown
|
page read and write
|
||
56B000
|
unkown
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
24B1000
|
unkown
|
page read and write
|
||
661D000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
AB6000
|
unkown
|
page read and write
|
||
7C52000
|
unkown
|
page read and write
|
||
66C2000
|
unkown
|
page read and write
|
||
5F0000
|
unkown image
|
page readonly
|
||
216C000
|
stack
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
1CD000
|
unkown
|
page read and write
|
||
A95000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
28E5000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
1DF0000
|
unkown image
|
page readonly
|
||
6652000
|
unkown
|
page read and write
|
||
54C000
|
unkown
|
page read and write
|
||
267F000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
2689000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
661B000
|
unkown
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
7BF0000
|
unkown
|
page read and write
|
||
7C46000
|
unkown
|
page read and write
|
||
A27000
|
unkown
|
page read and write
|
||
690000
|
unkown image
|
page readonly
|
||
6E0000
|
unkown image
|
page readonly
|
||
56F000
|
unkown
|
page read and write
|
||
12D000
|
unkown
|
page read and write
|
||
A82000
|
unkown
|
page read and write
|
||
7C7B000
|
unkown
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
661D000
|
unkown
|
page read and write
|
||
6632000
|
unkown
|
page read and write
|
||
7C48000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
7C46000
|
unkown
|
page read and write
|
||
2D89000
|
unkown
|
page read and write
|
||
281000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
7EF72000
|
unkown
|
page execute read
|
||
4EF000
|
unkown
|
page read and write
|
||
1F0000
|
unkown
|
page read and write
|
||
2D10000
|
unkown
|
page read and write
|
||
24B9000
|
unkown
|
page read and write
|
||
25F000
|
heap default
|
page read and write
|
||
7CA5000
|
unkown
|
page read and write
|
||
17B000
|
unkown
|
page read and write
|
||
571000
|
unkown
|
page read and write
|
||
7CA9000
|
unkown
|
page read and write
|
||
ABA000
|
unkown
|
page read and write
|
||
2D8F000
|
unkown
|
page read and write
|
||
E0000
|
unkown image
|
page read and write
|
||
54C000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
4EF000
|
unkown
|
page read and write
|
||
51B000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
4D8000
|
heap default
|
page read and write
|
||
7EFC2000
|
unkown image
|
page readonly
|
||
7C57000
|
unkown
|
page read and write
|
||
2D8B000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
A9B000
|
unkown
|
page read and write
|
||
66CE000
|
unkown
|
page read and write
|
||
2670000
|
unkown
|
page read and write
|
||
55B000
|
unkown
|
page read and write
|
||
23CF000
|
stack
|
page read and write
|
||
A81000
|
unkown
|
page read and write
|
||
2D87000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
524000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
6D6000
|
heap private
|
page read and write
|
||
7C5B000
|
unkown
|
page read and write
|
||
2D12000
|
unkown
|
page read and write
|
||
2497000
|
unkown
|
page read and write
|
||
A45000
|
unkown
|
page read and write
|
||
2678000
|
unkown
|
page read and write
|
||
20B0000
|
unkown image
|
page readonly
|
||
7C93000
|
unkown
|
page read and write
|
||
530000
|
unkown
|
page read and write
|
||
6616000
|
unkown
|
page read and write
|
||
7C74000
|
unkown
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
7C81000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
2879000
|
unkown
|
page read and write
|
||
AB4000
|
unkown
|
page read and write
|
||
7C76000
|
unkown
|
page read and write
|
||
7C7D000
|
unkown
|
page read and write
|
||
52E000
|
unkown
|
page read and write
|
||
330000
|
heap default
|
page read and write
|
||
2A0F000
|
stack
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
1BF0000
|
unkown image
|
page readonly
|
||
24B8000
|
unkown
|
page read and write
|
||
65F8000
|
unkown
|
page read and write
|
||
380000
|
unkown
|
page read and write
|
||
65DE000
|
unkown
|
page read and write
|
||
6AED000
|
stack
|
page read and write
|
||
2D8C000
|
unkown
|
page read and write
|
||
29B000
|
unkown
|
page read and write
|
||
173000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
7C5A000
|
unkown
|
page read and write
|
||
ABF000
|
unkown
|
page read and write
|
||
7C6E000
|
unkown
|
page read and write
|
||
2D78000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
28E3000
|
unkown
|
page read and write
|
||
A81000
|
unkown
|
page read and write
|
||
7CA5000
|
unkown
|
page read and write
|
||
2D8E000
|
unkown
|
page read and write
|
||
3A80000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
A3A000
|
unkown
|
page read and write
|
||
66CA000
|
unkown
|
page read and write
|
||
66CC000
|
unkown
|
page read and write
|
||
7CFD000
|
unkown
|
page read and write
|
||
7C79000
|
unkown
|
page read and write
|
||
7C7F000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
7C8E000
|
unkown
|
page read and write
|
||
2D10000
|
unkown
|
page read and write
|
||
270000
|
heap default
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
60000
|
unkown image
|
page readonly
|
||
7C5A000
|
unkown
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
519000
|
unkown
|
page read and write
|
||
7EFC2000
|
unkown image
|
page readonly
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
6652000
|
unkown
|
page read and write
|
||
7C93000
|
unkown
|
page read and write
|
||
2486000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
||
2CB000
|
unkown
|
page read and write
|
||
A03000
|
unkown
|
page read and write
|
||
28F3000
|
unkown
|
page read and write
|
||
298000
|
unkown
|
page read and write
|
||
7C4F000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
7C86000
|
unkown
|
page read and write
|
||
7C04000
|
unkown
|
page read and write
|
||
6D8D000
|
stack
|
page read and write
|
||
6652000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
6590000
|
heap private
|
page read and write
|
||
2170000
|
heap private
|
page read and write
|
||
24B7000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
2B0000
|
unkown
|
page read and write
|
||
5B7C000
|
stack
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7C59000
|
unkown
|
page read and write
|
||
661D000
|
unkown
|
page read and write
|
||
7C70000
|
unkown
|
page read and write
|
||
6618000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
7C5B000
|
unkown
|
page read and write
|
||
A78000
|
unkown
|
page read and write
|
||
7C48000
|
unkown
|
page read and write
|
||
2760000
|
unkown
|
page read and write
|
||
7EFB0000
|
unkown image
|
page readonly
|
||
3C30000
|
heap private
|
page read and write
|
||
6682000
|
unkown
|
page read and write
|
||
292000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7C84000
|
unkown
|
page read and write
|
||
3BF0000
|
unkown
|
page read and write
|
||
A7C000
|
unkown
|
page read and write
|
||
5BCC000
|
stack
|
page read and write
|
||
529000
|
unkown
|
page read and write
|
||
66C3000
|
unkown
|
page read and write
|
||
29B000
|
unkown
|
page read and write
|
||
51C000
|
unkown
|
page read and write
|
||
860000
|
unkown image
|
page readonly
|
||
28A000
|
unkown
|
page read and write
|
||
7C84000
|
unkown
|
page read and write
|
||
7C05000
|
unkown
|
page read and write
|
||
24A8000
|
unkown
|
page read and write
|
||
37B000
|
heap default
|
page read and write
|
||
7C44000
|
unkown
|
page read and write
|
||
2490000
|
unkown
|
page read and write
|
||
7C72000
|
unkown
|
page read and write
|
||
249D000
|
unkown
|
page read and write
|
||
2D79000
|
unkown
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
5F30000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
300000
|
unkown image
|
page readonly
|
||
7C70000
|
unkown
|
page read and write
|
||
7CB2000
|
unkown
|
page read and write
|
||
3C38000
|
heap private
|
page read and write
|
||
249B000
|
unkown
|
page read and write
|
There are 927 hidden memdumps, click here to show them.