Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
SRLTX-1266305223.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\SRLTX-1266305223.xlsb (copy)
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$SRLTX-1266305223.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E5B98A58.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
 |
|
|
C:\Users\user\Desktop\11750000
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\11750000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet1.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet2.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet3.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://185.104.195.81/650918116841.datl
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://101.99.95.15/650918116841.datu
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://101.99.95.15/650918116841.dat0
|
unknown
|
|
|
|
http://185.104.195.81/650918116841.dat
|
unknown
|
|
|
|
http://80.71.157.224/650918116841.dat
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://101.99.95.15/650918116841.dat
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://80.71.157.224/650918116841.dat$
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 8 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
185.104.195.81
|
unknown
|
Iran (ISLAMIC Republic Of)
|
|
|
|
101.99.95.15
|
unknown
|
Malaysia
|
|
|
|
80.71.157.224
|
unknown
|
unknown
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
%;+
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2C9A5
|
2C9A5
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
i$+
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\5736B
|
5736B
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
There are 25 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
4BF0000
|
unkown image
|
page readonly
|
|
|
|
3DA0000
|
unkown image
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
520000
|
unkown
|
page read and write
|
|
|
|
2496000
|
unkown
|
page read and write
|
|
|
|
3F4000
|
unkown
|
page read and write
|
|
|
|
812F000
|
unkown
|
page read and write
|
|
|
|
37A000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
330F000
|
stack
|
page read and write
|
|
|
|
57EE000
|
unkown
|
page read and write
|
|
|
|
4ED7000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
unkown
|
page read and write
|
|
|
|
7BEF000
|
unkown
|
page read and write
|
|
|
|
57A1000
|
unkown
|
page read and write
|
|
|
|
5460000
|
unkown
|
page read and write
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
7BEC000
|
unkown
|
page read and write
|
|
|
|
65F000
|
stack
|
page read and write
|
|
|
|
4980000
|
stack
|
page read and write
|
|
|
|
7426000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown
|
page read and write
|
|
|
|
3AC000
|
unkown
|
page read and write
|
|
|
|
321000
|
heap default
|
page read and write
|
|
|
|
57DD000
|
unkown
|
page read and write
|
|
|
|
2460000
|
unkown
|
page read and write
|
|
|
|
2D6000
|
unkown
|
page read and write
|
|
|
|
7D89000
|
unkown
|
page read and write
|
|
|
|
33F0000
|
heap private
|
page read and write
|
|
|
|
363000
|
heap default
|
page read and write
|
|
|
|
7C46000
|
unkown
|
page read and write
|
|
|
|
32C000
|
heap default
|
page read and write
|
|
|
|
4EE6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
1D97000
|
unkown
|
page read and write
|
|
|
|
5802000
|
unkown
|
page read and write
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
24C9000
|
heap private
|
page read and write
|
|
|
|
3A6000
|
unkown
|
page read and write
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
7BF6000
|
unkown
|
page read and write
|
|
|
|
289000
|
heap private
|
page read and write
|
|
|
|
3A30000
|
unkown image
|
page readonly
|
|
|
|
6E70000
|
unkown
|
page read and write
|
|
|
|
2480000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7C23000
|
unkown
|
page read and write
|
|
|
|
3E6000
|
unkown
|
page read and write
|
|
|
|
8054000
|
unkown
|
page read and write
|
|
|
|
4AD2000
|
stack
|
page read and write
|
|
|
|
2E4000
|
heap default
|
page read and write
|
|
|
|
7BC7000
|
unkown
|
page read and write
|
|
|
|
3E1000
|
unkown
|
page read and write
|
|
|
|
49F7000
|
unkown image
|
page readonly
|
|
|
|
2FB0000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
73C5000
|
unkown
|
page read and write
|
|
|
|
20A0000
|
unkown image
|
page readonly
|
|
|
|
4A10000
|
stack
|
page read and write
|
|
|
|
5819000
|
unkown
|
page read and write
|
|
|
|
36A000
|
heap default
|
page read and write
|
|
|
|
5740000
|
unkown
|
page read and write
|
|
|
|
4989000
|
stack
|
page read and write
|
|
|
|
3D40000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
807E000
|
unkown
|
page read and write
|
|
|
|
6B4000
|
heap private
|
page read and write
|
|
|
|
49F0000
|
stack
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
73A8000
|
unkown
|
page read and write
|
|
|
|
815E000
|
unkown
|
page read and write
|
|
|
|
58C2000
|
unkown
|
page read and write
|
|
|
|
7BC0000
|
unkown
|
page read and write
|
|
|
|
33A000
|
heap default
|
page read and write
|
|
|
|
BB000
|
heap default
|
page read and write
|
|
|
|
2110000
|
heap private
|
page read and write
|
|
|
|
77AB000
|
unkown
|
page read and write
|
|
|
|
4A96000
|
stack
|
page read and write
|
|
|
|
4870000
|
unkown
|
page read and write
|
|
|
|
7944000
|
unkown image
|
page readonly
|
|
|
|
7CA0000
|
unkown
|
page read and write
|
|
|
|
819B000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
74F8000
|
unkown
|
page read and write
|
|
|
|
4892000
|
unkown
|
page read and write
|
|
|
|
6EC0000
|
heap private
|
page read and write
|
|
|
|
40FF000
|
stack
|
page read and write
|
|
|
|
7D5E000
|
unkown
|
page read and write
|
|
|
|
7D51000
|
unkown
|
page read and write
|
|
|
|
4990000
|
stack
|
page read and write
|
|
|
|
410000
|
heap default
|
page read and write
|
|
|
|
6B50000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
33F9000
|
unkown
|
page read and write
|
|
|
|
1D75000
|
unkown
|
page read and write
|
|
|
|
7CA8000
|
unkown
|
page read and write
|
|
|
|
6E87B000
|
unkown image
|
page read and write
|
|
|
|
57F5000
|
unkown
|
page read and write
|
|
|
|
7BE0000
|
unkown
|
page read and write
|
|
|
|
8102000
|
unkown
|
page read and write
|
|
|
|
4160000
|
unkown
|
page read and write
|
|
|
|
7C38000
|
unkown
|
page read and write
|
|
|
|
2200000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7BD9000
|
unkown
|
page read and write
|
|
|
|
7FCE000
|
unkown
|
page read and write
|
|
|
|
7DA8000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
heap private
|
page read and write
|
|
|
|
7C30000
|
unkown
|
page read and write
|
|
|
|
4AA0000
|
stack
|
page read and write
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
2220000
|
unkown image
|
page readonly
|
|
|
|
1D5000
|
heap private
|
page read and write
|
|
|
|
3C36000
|
unkown
|
page read and write
|
|
|
|
3A5000
|
unkown
|
page read and write
|
|
|
|
8020000
|
unkown
|
page read and write
|
|
|
|
1D4E000
|
unkown
|
page read and write
|
|
|
|
33FA000
|
unkown
|
page read and write
|
|
|
|
6DF0000
|
heap private
|
page read and write
|
|
|
|
3F80000
|
unkown
|
page read and write
|
|
|
|
3E6000
|
unkown
|
page read and write
|
|
|
|
1D43000
|
unkown
|
page read and write
|
|
|
|
5899000
|
unkown
|
page read and write
|
|
|
|
7C0B000
|
unkown
|
page read and write
|
|
|
|
7A4B000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4F90000
|
unkown image
|
page readonly
|
|
|
|
447E000
|
stack
|
page read and write
|
|
|
|
6DE0000
|
unkown
|
page read and write
|
|
|
|
3EC000
|
unkown
|
page read and write
|
|
|
|
3C0000
|
heap private
|
page read and write
|
|
|
|
4899000
|
unkown
|
page read and write
|
|
|
|
320000
|
heap default
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
79E7000
|
unkown
|
page read and write
|
|
|
|
581E000
|
unkown
|
page read and write
|
|
|
|
4810000
|
unkown image
|
page readonly
|
|
|
|
7811000
|
unkown
|
page read and write
|
|
|
|
7990000
|
heap private
|
page read and write
|
|
|
|
4D8E000
|
stack
|
page read and write
|
|
|
|
7BE4000
|
unkown
|
page read and write
|
|
|
|
5887000
|
unkown
|
page read and write
|
|
|
|
5910000
|
unkown
|
page read and write
|
|
|
|
4170000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
7FF1000
|
unkown
|
page read and write
|
|
|
|
3FB0000
|
unkown
|
page read and write
|
|
|
|
6BE0000
|
unkown
|
page read and write
|
|
|
|
348000
|
heap default
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
3D20000
|
unkown
|
page read and write
|
|
|
|
489B000
|
unkown
|
page read and write
|
|
|
|
4880000
|
unkown
|
page read and write
|
|
|
|
8134000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
22D000
|
unkown
|
page read and write
|
|
|
|
7BDA000
|
unkown
|
page read and write
|
|
|
|
582E000
|
unkown
|
page read and write
|
|
|
|
7C27000
|
unkown
|
page read and write
|
|
|
|
1DAE000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
815A000
|
unkown
|
page read and write
|
|
|
|
556000
|
unkown
|
page read and write
|
|
|
|
7BD7000
|
unkown
|
page read and write
|
|
|
|
6FF000
|
stack
|
page read and write
|
|
|
|
150000
|
unkown
|
page read and write
|
|
|
|
4A80000
|
stack
|
page read and write
|
|
|
|
130000
|
unkown image
|
page readonly
|
|
|
|
5874000
|
unkown
|
page read and write
|
|
|
|
2300000
|
unkown
|
page read and write
|
|
|
|
492000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
3FD9000
|
heap private
|
page read and write
|
|
|
|
81C7000
|
unkown
|
page read and write
|
|
|
|
4EE1000
|
unkown
|
page read and write
|
|
|
|
7D62000
|
unkown
|
page read and write
|
|
|
|
4BD8000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4A70000
|
stack
|
page read and write
|
|
|
|
6C85000
|
heap private
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
5370000
|
unkown
|
page read and write
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
1D00000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
8061000
|
unkown
|
page read and write
|
|
|
|
2F6F000
|
stack
|
page read and write
|
|
|
|
7C8F000
|
unkown
|
page read and write
|
|
|
|
3A3000
|
unkown
|
page read and write
|
|
|
|
4AE2000
|
stack
|
page read and write
|
|
|
|
58AE000
|
unkown
|
page read and write
|
|
|
|
5970000
|
unkown
|
page read and write
|
|
|
|
420000
|
unkown
|
page read and write
|
|
|
|
73F1000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
590A000
|
unkown
|
page read and write
|
|
|
|
6A90000
|
unkown
|
page read and write
|
|
|
|
581E000
|
unkown
|
page read and write
|
|
|
|
270000
|
heap default
|
page read and write
|
|
|
|
373000
|
heap default
|
page read and write
|
|
|
|
33F9000
|
unkown
|
page read and write
|
|
|
|
57D7000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4AC0000
|
stack
|
page read and write
|
|
|
|
49C000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7DD0000
|
unkown
|
page read and write
|
|
|
|
68E000
|
stack
|
page read and write
|
|
|
|
4A32000
|
stack
|
page read and write
|
|
|
|
8138000
|
unkown
|
page read and write
|
|
|
|
5872000
|
unkown
|
page read and write
|
|
|
|
7FDF000
|
unkown
|
page read and write
|
|
|
|
58E3000
|
unkown
|
page read and write
|
|
|
|
8151000
|
unkown
|
page read and write
|
|
|
|
7FD2000
|
unkown
|
page read and write
|
|
|
|
810F000
|
unkown
|
page read and write
|
|
|
|
4950000
|
stack
|
page read and write
|
|
|
|
4EC000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6C80000
|
heap private
|
page read and write
|
|
|
|
3FD5000
|
heap private
|
page read and write
|
|
|
|
5177000
|
unkown image
|
page readonly
|
|
|
|
5811000
|
unkown
|
page read and write
|
|
|
|
556E000
|
stack
|
page read and write
|
|
|
|
3FF0000
|
unkown
|
page read and write
|
|
|
|
3DE000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
260000
|
unkown
|
page read and write
|
|
|
|
7FE4000
|
unkown
|
page read and write
|
|
|
|
3D70000
|
unkown
|
page read and write
|
|
|
|
57E6000
|
unkown
|
page read and write
|
|
|
|
8189000
|
unkown
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
39C000
|
unkown
|
page read and write
|
|
|
|
3E6000
|
unkown
|
page read and write
|
|
|
|
57F2000
|
unkown
|
page read and write
|
|
|
|
1CF0000
|
unkown
|
page read and write
|
|
|
|
1D50000
|
unkown
|
page read and write
|
|
|
|
4970000
|
stack
|
page read and write
|
|
|
|
7CDD000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
2115000
|
heap private
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
49C0000
|
stack
|
page read and write
|
|
|
|
53F000
|
stack
|
page read and write
|
|
|
|
3D2000
|
unkown
|
page read and write
|
|
|
|
7D9B000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
6D10000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
48C0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7D2F000
|
unkown
|
page read and write
|
|
|
|
776B000
|
unkown
|
page read and write
|
|
|
|
495000
|
unkown
|
page read and write
|
|
|
|
1D60000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
4AE6000
|
stack
|
page read and write
|
|
|
|
4A30000
|
stack
|
page read and write
|
|
|
|
585C000
|
unkown
|
page read and write
|
|
|
|
5813000
|
unkown
|
page read and write
|
|
|
|
5A93000
|
unkown image
|
page read and write
|
|
|
|
5A90000
|
unkown
|
page read and write
|
|
|
|
5570000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown
|
page execute and read and write
|
|
|
|
589F000
|
unkown
|
page read and write
|
|
|
|
7563000
|
unkown
|
page read and write
|
|
|
|
5915000
|
unkown
|
page read and write
|
|
|
|
7C4F000
|
unkown
|
page read and write
|
|
|
|
37E000
|
unkown
|
page read and write
|
|
|
|
3CE000
|
unkown
|
page read and write
|
|
|
|
77F0000
|
unkown
|
page read and write
|
|
|
|
3FC000
|
unkown
|
page read and write
|
|
|
|
38A000
|
unkown
|
page read and write
|
|
|
|
8046000
|
unkown
|
page read and write
|
|
|
|
546000
|
unkown
|
page read and write
|
|
|
|
582C000
|
unkown
|
page read and write
|
|
|
|
78FF000
|
heap private
|
page read and write
|
|
|
|
1CB0000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
7C93000
|
unkown
|
page read and write
|
|
|
|
7BCE000
|
unkown
|
page read and write
|
|
|
|
77000
|
heap default
|
page read and write
|
|
|
|
4850000
|
unkown image
|
page readonly
|
|
|
|
3B0000
|
unkown image
|
page readonly
|
|
|
|
1D40000
|
unkown
|
page read and write
|
|
|
|
4AA0000
|
stack
|
page read and write
|
|
|
|
3FD8000
|
unkown
|
page read and write
|
|
|
|
38E000
|
unkown
|
page read and write
|
|
|
|
8380000
|
heap private
|
page read and write
|
|
|
|
205B000
|
heap private
|
page read and write
|
|
|
|
7D38000
|
unkown
|
page read and write
|
|
|
|
7D0B000
|
unkown
|
page read and write
|
|
|
|
590F000
|
unkown
|
page read and write
|
|
|
|
7D8E000
|
unkown
|
page read and write
|
|
|
|
2010000
|
unkown image
|
page readonly
|
|
|
|
7BDF000
|
unkown
|
page read and write
|
|
|
|
4120000
|
unkown
|
page read and write
|
|
|
|
392000
|
unkown
|
page read and write
|
|
|
|
80EF000
|
unkown
|
page read and write
|
|
|
|
1F5000
|
heap private
|
page read and write
|
|
|
|
1CE0000
|
unkown
|
page read and write
|
|
|
|
786F000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
792E000
|
unkown
|
page read and write
|
|
|
|
489D000
|
unkown
|
page read and write
|
|
|
|
5765000
|
unkown
|
page read and write
|
|
|
|
2490000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
1D37000
|
heap private
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
320E000
|
stack
|
page read and write
|
|
|
|
7CDA000
|
unkown
|
page read and write
|
|
|
|
417000
|
heap default
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7D48000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7C5C000
|
unkown
|
page read and write
|
|
|
|
3C4000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
4BC2000
|
unkown
|
page read and write
|
|
|
|
783A000
|
unkown
|
page read and write
|
|
|
|
4E90000
|
unkown
|
page read and write
|
|
|
|
582C000
|
unkown
|
page read and write
|
|
|
|
620000
|
unkown image
|
page readonly
|
|
|
|
49C0000
|
stack
|
page read and write
|
|
|
|
4C2000
|
unkown
|
page read and write
|
|
|
|
4480000
|
unkown image
|
page readonly
|
|
|
|
4F4000
|
unkown
|
page read and write
|
|
|
|
7615000
|
unkown
|
page read and write
|
|
|
|
57F5000
|
unkown
|
page read and write
|
|
|
|
324000
|
heap default
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
5A8C000
|
stack
|
page read and write
|
|
|
|
4EE6000
|
unkown
|
page read and write
|
|
|
|
2040000
|
unkown image
|
page readonly
|
|
|
|
7BD8000
|
unkown
|
page read and write
|
|
|
|
57CC000
|
unkown
|
page read and write
|
|
|
|
809D000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
49D8000
|
stack
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
110000
|
heap private
|
page read and write
|
|
|
|
760C000
|
unkown
|
page read and write
|
|
|
|
7A46000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
7DC7000
|
unkown
|
page read and write
|
|
|
|
3E69000
|
heap private
|
page read and write
|
|
|
|
3330000
|
heap private
|
page read and write
|
|
|
|
214B000
|
heap private
|
page read and write
|
|
|
|
4140000
|
unkown
|
page read and write
|
|
|
|
840000
|
unkown image
|
page readonly
|
|
|
|
230000
|
unkown
|
page read and write
|
|
|
|
3B3000
|
unkown
|
page read and write
|
|
|
|
3FB000
|
unkown
|
page read and write
|
|
|
|
742D000
|
unkown
|
page read and write
|
|
|
|
8093000
|
unkown
|
page read and write
|
|
|
|
6D40000
|
unkown
|
page read and write
|
|
|
|
2499000
|
unkown
|
page read and write
|
|
|
|
33D0000
|
unkown
|
page read and write
|
|
|
|
7B1C000
|
unkown
|
page read and write
|
|
|
|
3A7000
|
unkown
|
page read and write
|
|
|
|
762B000
|
unkown
|
page read and write
|
|
|
|
7DCB000
|
unkown
|
page read and write
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
5802000
|
unkown
|
page read and write
|
|
|
|
3EB000
|
unkown
|
page read and write
|
|
|
|
7C4B000
|
unkown
|
page read and write
|
|
|
|
7BDC000
|
unkown
|
page read and write
|
|
|
|
6BD0000
|
unkown
|
page read and write
|
|
|
|
48E0000
|
unkown
|
page read and write
|
|
|
|
80DD000
|
unkown
|
page read and write
|
|
|
|
6E88C000
|
unkown image
|
page read and write
|
|
|
|
487E000
|
unkown
|
page read and write
|
|
|
|
4CFF000
|
stack
|
page read and write
|
|
|
|
456000
|
unkown
|
page read and write
|
|
|
|
57D9000
|
unkown
|
page read and write
|
|
|
|
2380000
|
unkown
|
page read and write
|
|
|
|
85DE000
|
stack
|
page read and write
|
|
|
|
7FE8000
|
unkown
|
page read and write
|
|
|
|
265000
|
heap private
|
page read and write
|
|
|
|
57E6000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7CF8000
|
unkown
|
page read and write
|
|
|
|
8024000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
31C000
|
heap default
|
page read and write
|
|
|
|
6D00000
|
unkown
|
page read and write
|
|
|
|
5940000
|
unkown
|
page read and write
|
|
|
|
48EB000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
49DA000
|
stack
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
3E6000
|
unkown
|
page read and write
|
|
|
|
8040000
|
heap private
|
page read and write
|
|
|
|
810B000
|
unkown
|
page read and write
|
|
|
|
7C58000
|
unkown
|
page read and write
|
|
|
|
B6000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
58EC000
|
unkown
|
page read and write
|
|
|
|
590F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
6E560000
|
unkown image
|
page readonly
|
|
|
|
7BE7000
|
unkown
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
590A000
|
unkown
|
page read and write
|
|
|
|
57F2000
|
unkown
|
page read and write
|
|
|
|
4B00000
|
stack
|
page read and write
|
|
|
|
7CD0000
|
unkown
|
page read and write
|
|
|
|
7CBD000
|
unkown
|
page read and write
|
|
|
|
8058000
|
unkown
|
page read and write
|
|
|
|
5915000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
77F4000
|
unkown
|
page read and write
|
|
|
|
3ED5000
|
unkown
|
page read and write
|
|
|
|
4EE6000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
49DE000
|
stack
|
page read and write
|
|
|
|
3DB0000
|
unkown
|
page read and write
|
|
|
|
80A8000
|
unkown
|
page read and write
|
|
|
|
4A50000
|
unkown
|
page read and write
|
|
|
|
48D7000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
3D90000
|
unkown image
|
page readonly
|
|
|
|
790000
|
unkown image
|
page readonly
|
|
|
|
6EB0000
|
heap private
|
page read and write
|
|
|
|
7CE1000
|
unkown
|
page read and write
|
|
|
|
4AE8000
|
stack
|
page read and write
|
|
|
|
4B67000
|
unkown image
|
page readonly
|
|
|
|
3D4000
|
unkown
|
page read and write
|
|
|
|
269000
|
unkown
|
page read and write
|
|
|
|
3C4000
|
unkown
|
page read and write
|
|
|
|
73A5000
|
unkown
|
page read and write
|
|
|
|
4A40000
|
unkown
|
page read and write
|
|
|
|
751E000
|
stack
|
page read and write
|
|
|
|
3EC0000
|
unkown
|
page read and write
|
|
|
|
44E000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
49B0000
|
stack
|
page read and write
|
|
|
|
2474000
|
unkown
|
page read and write
|
|
|
|
4C70000
|
unkown
|
page read and write
|
|
|
|
3FC0000
|
unkown
|
page read and write
|
|
|
|
223B000
|
heap private
|
page read and write
|
|
|
|
6C0000
|
unkown image
|
page readonly
|
|
|
|
4940000
|
stack
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
200000
|
unkown
|
page read and write
|
|
|
|
299000
|
unkown
|
page read and write
|
|
|
|
57D9000
|
unkown
|
page read and write
|
|
|
|
80DA000
|
unkown
|
page read and write
|
|
|
|
3E60000
|
heap private
|
page read and write
|
|
|
|
7890000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
3B30000
|
unkown image
|
page readonly
|
|
|
|
600000
|
unkown image
|
page readonly
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
4C10000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown image
|
page readonly
|
|
|
|
57CC000
|
unkown
|
page read and write
|
|
|
|
C6E000
|
stack
|
page read and write
|
|
|
|
7C9D000
|
unkown
|
page read and write
|
|
|
|
5858000
|
unkown
|
page read and write
|
|
|
|
1C9000
|
unkown
|
page read and write
|
|
|
|
57B1000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7C33000
|
unkown
|
page read and write
|
|
|
|
280000
|
heap private
|
page read and write
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
7CF2000
|
unkown
|
page read and write
|
|
|
|
3D30000
|
unkown
|
page read and write
|
|
|
|
4130000
|
unkown
|
page read and write
|
|
|
|
7BDB000
|
unkown
|
page read and write
|
|
|
|
277000
|
heap default
|
page read and write
|
|
|
|
580A000
|
unkown
|
page read and write
|
|
|
|
7940000
|
unkown image
|
page readonly
|
|
|
|
463000
|
heap default
|
page read and write
|
|
|
|
3320000
|
unkown image
|
page readonly
|
|
|
|
3C2000
|
unkown
|
page read and write
|
|
|
|
48F0000
|
unkown
|
page read and write
|
|
|
|
58EB000
|
unkown
|
page read and write
|
|
|
|
3D00000
|
unkown
|
page read and write
|
|
|
|
6E888000
|
unkown image
|
page write copy
|
|
|
|
5854000
|
unkown
|
page read and write
|
|
|
|
7FEC000
|
unkown
|
page read and write
|
|
|
|
6A90000
|
unkown
|
page read and write
|
|
|
|
470000
|
unkown image
|
page readonly
|
|
|
|
220000
|
unkown
|
page read and write
|
|
|
|
3E0000
|
unkown
|
page read and write
|
|
|
|
580A000
|
unkown
|
page read and write
|
|
|
|
744A000
|
unkown
|
page read and write
|
|
|
|
804F000
|
unkown
|
page read and write
|
|
|
|
7C1B000
|
unkown
|
page read and write
|
|
|
|
70000
|
heap default
|
page read and write
|
|
|
|
317000
|
heap default
|
page read and write
|
|
|
|
33F7000
|
heap private
|
page read and write
|
|
|
|
794F000
|
unkown image
|
page readonly
|
|
|
|
4C6A000
|
unkown
|
page read and write
|
|
|
|
819F000
|
unkown
|
page read and write
|
|
|
|
6A90000
|
unkown
|
page read and write
|
|
|
|
4108000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6BF0000
|
unkown
|
page read and write
|
|
|
|
4895000
|
unkown
|
page read and write
|
|
|
|
573C000
|
stack
|
page read and write
|
|
|
|
3B7000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FEFF1A0000
|
unkown
|
page execute read
|
|
|
|
4BA0000
|
unkown
|
page read and write
|
|
|
|
5811000
|
unkown
|
page read and write
|
|
|
|
7874000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
80F2000
|
unkown
|
page read and write
|
|
|
|
1DA0000
|
unkown
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
35E000
|
heap default
|
page read and write
|
|
|
|
6B0000
|
heap private
|
page read and write
|
|
|
|
6A90000
|
unkown
|
page read and write
|
|
|
|
4A90000
|
stack
|
page read and write
|
|
|
|
1D70000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
5852000
|
unkown
|
page read and write
|
|
|
|
5908000
|
unkown
|
page read and write
|
|
|
|
32A000
|
heap default
|
page read and write
|
|
|
|
57D2000
|
unkown
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
6E88F000
|
unkown image
|
page readonly
|
|
|
|
6D4000
|
heap private
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
6E90000
|
unkown
|
page read and write
|
|
|
|
6D60000
|
heap private
|
page read and write
|
|
|
|
2AE000
|
heap default
|
page read and write
|
|
|
|
260000
|
heap private
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
3D80000
|
unkown
|
page read and write
|
|
|
|
814D000
|
unkown
|
page read and write
|
|
|
|
80BD000
|
unkown
|
page read and write
|
|
|
|
48D5000
|
unkown
|
page read and write
|
|
|
|
3EE0000
|
heap private
|
page execute and read and write
|
|
|
|
3C00000
|
unkown
|
page read and write
|
|
|
|
7BF1000
|
unkown
|
page read and write
|
|
|
|
57A9000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
heap private
|
page read and write
|
|
|
|
57D2000
|
unkown
|
page read and write
|
|
|
|
7B95000
|
unkown
|
page read and write
|
|
|
|
5819000
|
unkown
|
page read and write
|
|
|
|
4EB000
|
unkown
|
page read and write
|
|
|
|
7D4D000
|
unkown
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
2020000
|
heap private
|
page read and write
|
|
|
|
48A0000
|
unkown
|
page read and write
|
|
|
|
6EA0000
|
unkown image
|
page readonly
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
heap private
|
page read and write
|
|
|
|
65300000
|
unkown image
|
page readonly
|
|
|
|
4C00000
|
unkown image
|
page readonly
|
|
|
|
7C7E000
|
unkown
|
page read and write
|
|
|
|
818C000
|
unkown
|
page read and write
|
|
|
|
6A90000
|
unkown
|
page read and write
|
|
|
|
7C1D000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
2205000
|
heap private
|
page read and write
|
|
|
|
7610000
|
unkown
|
page read and write
|
|
|
|
427D000
|
stack
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
33C0000
|
unkown
|
page read and write
|
|
|
|
8017000
|
unkown
|
page read and write
|
|
|
|
6E884000
|
unkown image
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
200000
|
heap private
|
page read and write
|
|
|
|
81D0000
|
unkown
|
page read and write
|
|
|
|
7949000
|
unkown image
|
page readonly
|
|
|
|
148000
|
unkown
|
page read and write
|
|
|
|
2025000
|
heap private
|
page read and write
|
|
|
|
4AE0000
|
stack
|
page read and write
|
|
|
|
30EF000
|
stack
|
page read and write
|
|
|
|
5F0000
|
unkown image
|
page readonly
|
|
|
|
3D60000
|
unkown
|
page read and write
|
|
|
|
3ED3000
|
unkown
|
page read and write
|
|
|
|
808F000
|
unkown
|
page read and write
|
|
|
|
37A000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown image
|
page read and write
|
|
|
|
57D7000
|
unkown
|
page read and write
|
|
|
|
48DA000
|
unkown
|
page read and write
|
|
|
|
6EA0000
|
unkown
|
page read and write
|
|
|
|
4150000
|
unkown
|
page read and write
|
|
|
|
4890000
|
unkown
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
370000
|
unkown
|
page read and write
|
|
|
|
1DE0000
|
unkown image
|
page readonly
|
|
|
|
7A94000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
6E831000
|
unkown image
|
page readonly
|
|
|
|
793D000
|
unkown
|
page read and write
|
|
|
|
3AF000
|
unkown
|
page read and write
|
|
|
|
58C1000
|
unkown
|
page read and write
|
|
|
|
285000
|
heap private
|
page read and write
|
|
|
|
7D02000
|
unkown
|
page read and write
|
|
|
|
4EA0000
|
unkown
|
page read and write
|
|
|
|
5863000
|
unkown
|
page read and write
|
|
|
|
1D30000
|
heap private
|
page read and write
|
|
|
|
3FD0000
|
heap private
|
page read and write
|
|
|
|
48DE000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
1D35000
|
heap private
|
page read and write
|
|
|
|
395000
|
unkown
|
page read and write
|
|
|
|
6BE0000
|
unkown
|
page read and write
|
|
|
|
1F0000
|
unkown
|
page read and write
|
|
|
|
8192000
|
unkown
|
page read and write
|
|
|
|
5755000
|
unkown
|
page read and write
|
|
|
|
3D54000
|
heap private
|
page read and write
|
|
|
|
5980000
|
unkown
|
page read and write
|
|
|
|
2300000
|
unkown
|
page read and write
|
|
|
|
34E000
|
heap default
|
page read and write
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
804B000
|
unkown
|
page read and write
|
|
|
|
7AD0000
|
heap private
|
page read and write
|
|
|
|
1BC6000
|
unkown
|
page read and write
|
|
|
|
7C54000
|
unkown
|
page read and write
|
|
|
|
58EE000
|
unkown
|
page read and write
|
|
|
|
78C0000
|
heap private
|
page read and write
|
|
|
|
591A000
|
unkown
|
page read and write
|
|
|
|
7D0F000
|
unkown
|
page read and write
|
|
|
|
55C0000
|
heap private
|
page read and write
|
|
|
|
81A8000
|
unkown
|
page read and write
|
|
|
|
81CB000
|
unkown
|
page read and write
|
|
|
|
800A000
|
unkown
|
page read and write
|
|
|
|
3B9000
|
unkown
|
page read and write
|
|
|
|
8001000
|
unkown
|
page read and write
|
|
|
|
4C4000
|
unkown
|
page read and write
|
|
|
|
7C20000
|
unkown
|
page read and write
|
|
|
|
4A20000
|
stack
|
page read and write
|
|
|
|
3FE0000
|
unkown
|
page read and write
|
|
|
|
114000
|
heap private
|
page read and write
|
|
|
|
5829000
|
unkown
|
page read and write
|
|
|
|
4A36000
|
stack
|
page read and write
|
|
|
|
4A23000
|
stack
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
586B000
|
unkown
|
page read and write
|
|
|
|
5897000
|
unkown
|
page read and write
|
|
|
|
5746000
|
unkown
|
page read and write
|
|
|
|
4AD0000
|
stack
|
page read and write
|
|
|
|
4960000
|
stack
|
page read and write
|
|
|
|
7C01000
|
unkown
|
page read and write
|
|
|
|
4A3000
|
unkown
|
page read and write
|
|
|
|
3E3000
|
unkown
|
page read and write
|
|
|
|
590F000
|
unkown
|
page read and write
|
|
|
|
7C17000
|
unkown
|
page read and write
|
|
|
|
57EE000
|
unkown
|
page read and write
|
|
|
|
404000
|
unkown
|
page read and write
|
|
|
|
144000
|
unkown
|
page read and write
|
|
|
|
7D9F000
|
unkown
|
page read and write
|
|
|
|
8162000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7BE8000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
3E65000
|
heap private
|
page read and write
|
|
|
|
57A7000
|
unkown
|
page read and write
|
|
|
|
510000
|
unkown
|
page read and write
|
|
|
|
6E80000
|
unkown
|
page read and write
|
|
|
|
4E2E000
|
stack
|
page read and write
|
|
|
|
77C6000
|
unkown
|
page read and write
|
|
|
|
8148000
|
unkown
|
page read and write
|
|
|
|
4110000
|
unkown
|
page read and write
|
|
|
|
7FDB000
|
unkown
|
page read and write
|
|
|
|
4AA0000
|
stack
|
page read and write
|
|
|
|
495000
|
unkown
|
page read and write
|
|
|
|
5861000
|
unkown
|
page read and write
|
|
|
|
4980000
|
unkown image
|
page readonly
|
|
|
|
7C0A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
204000
|
heap private
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
6BE0000
|
unkown
|
page read and write
|
|
|
|
7C61000
|
unkown
|
page read and write
|
|
|
|
4B10000
|
stack
|
page read and write
|
|
|
|
75AD000
|
unkown
|
page read and write
|
|
|
|
33E0000
|
unkown
|
page read and write
|
|
|
|
7C06000
|
unkown
|
page read and write
|
|
|
|
7FD7000
|
unkown
|
page read and write
|
|
|
|
7BD6000
|
unkown
|
page read and write
|
|
|
|
4EDF000
|
unkown
|
page read and write
|
|
|
|
48B0000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
4C60000
|
unkown
|
page read and write
|
|
|
|
327000
|
heap default
|
page read and write
|
|
|
|
1CD0000
|
unkown
|
page read and write
|
|
|
|
7D8C000
|
unkown
|
page read and write
|
|
|
|
6E561000
|
unkown image
|
page execute read
|
|
|
|
3310000
|
unkown
|
page read and write
|
|
|
|
58C1000
|
unkown
|
page read and write
|
|
|
|
7D92000
|
unkown
|
page read and write
|
|
|
|
3F70000
|
unkown
|
page read and write
|
|
|
|
6D30000
|
unkown
|
page read and write
|
|
|
|
6C00000
|
heap private
|
page read and write
|
|
|
|
7A0000
|
unkown image
|
page readonly
|
|
|
|
2F90000
|
unkown
|
page read and write
|
|
|
|
21A5000
|
heap private
|
page read and write
|
|
|
|
57DD000
|
unkown
|
page read and write
|
|
|
|
1DA8000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown
|
page read and write
|
|
|
|
3FA0000
|
unkown
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
1C70000
|
unkown image
|
page readonly
|
|
|
|
53BC000
|
unkown
|
page read and write
|
|
|
|
7BDA000
|
unkown
|
page read and write
|
|
|
|
24C0000
|
heap private
|
page read and write
|
|
|
|
1D40000
|
unkown image
|
page readonly
|
|
|
|
310000
|
heap default
|
page read and write
|
|
|
|
5813000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown image
|
page readonly
|
|
|
|
735B000
|
unkown
|
page read and write
|
|
|
|
3F90000
|
unkown
|
page read and write
|
|
|
|
6F40000
|
unkown
|
page read and write
|
|
|
|
6D50000
|
unkown
|
page read and write
|
|
|
|
76EE000
|
unkown
|
page read and write
|
|
|
|
80A0000
|
unkown
|
page read and write
|
|
|
|
7D5A000
|
unkown
|
page read and write
|
|
|
|
4AA0000
|
stack
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
24C5000
|
heap private
|
page read and write
|
|
|
|
2470000
|
unkown
|
page read and write
|
|
|
|
80E1000
|
unkown
|
page read and write
|
|
|
|
116000
|
unkown
|
page read and write
|
|
|
|
7C24000
|
unkown
|
page read and write
|
|
|
|
805C000
|
unkown
|
page read and write
|
|
|
|
2103000
|
unkown
|
page read and write
|
|
|
|
799F000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
48D2000
|
unkown
|
page read and write
|
|
|
|
AD000
|
heap default
|
page read and write
|
|
|
|
57A9000
|
unkown
|
page read and write
|
|
|
|
801B000
|
unkown
|
page read and write
|
|
|
|
4A92000
|
stack
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
5915000
|
unkown
|
page read and write
|
|
|
|
80F8000
|
unkown
|
page read and write
|
|
|
|
3D50000
|
heap private
|
page read and write
|
|
|
|
4888000
|
unkown
|
page read and write
|
|
|
|
6EB4000
|
heap private
|
page read and write
|
|
|
|
7592000
|
unkown
|
page read and write
|
|
|
|
7C1B000
|
unkown
|
page read and write
|
|
|
|
7D34000
|
unkown
|
page read and write
|
|
|
|
7A60000
|
unkown
|
page read and write
|
|
|
|
80D0000
|
unkown
|
page read and write
|
|
|
|
1DBE000
|
unkown
|
page read and write
|
|
|
|
21DB000
|
heap private
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
5A90000
|
unkown
|
page read and write
|
|
|
|
395000
|
unkown
|
page read and write
|
|
|
|
3FD0000
|
unkown
|
page read and write
|
|
|
|
5A90000
|
unkown
|
page read and write
|
|
|
|
7871000
|
unkown
|
page read and write
|
|
|
|
1D80000
|
unkown
|
page read and write
|
|
|
|
2D6000
|
unkown
|
page read and write
|
|
|
|
4D90000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
47E000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page execute and read and write
|
|
|
|
7908000
|
unkown
|
page read and write
|
|
|
|
7BD2000
|
unkown
|
page read and write
|
|
|
|
8006000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
58A3000
|
unkown
|
page read and write
|
|
|
|
5A90000
|
unkown
|
page read and write
|
|
|
|
3D38000
|
unkown
|
page read and write
|
|
|
|
590F000
|
unkown
|
page read and write
|
|
|
|
77F2000
|
unkown
|
page read and write
|
|
|
|
4A37000
|
unkown image
|
page readonly
|
|
|
|
7BE3000
|
unkown
|
page read and write
|
|
|
|
7ABA000
|
stack
|
page read and write
|
|
|
|
4AA0000
|
stack
|
page read and write
|
|
|
|
46A000
|
heap default
|
page read and write
|
|
|
|
78C9000
|
heap private
|
page read and write
|
|
|
|
1CC0000
|
unkown image
|
page readonly
|
|
|
|
1C90000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
1B90000
|
unkown
|
page read and write
|
|
|
|
3A5000
|
unkown
|
page read and write
|
|
|
|
47A000
|
unkown
|
page read and write
|
|
|
|
2466000
|
unkown
|
page read and write
|
|
|
|
7A48000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7790000
|
unkown
|
page read and write
|
|
|
|
5829000
|
unkown
|
page read and write
|
|
|
|
7660000
|
unkown
|
page read and write
|
|
|
|
3AB0000
|
unkown image
|
page readonly
|
|
|
|
4B13000
|
stack
|
page read and write
|
|
|
|
4A7000
|
unkown
|
page read and write
|
|
|
|
21A0000
|
heap private
|
page read and write
|
|
|
|
582E000
|
unkown
|
page read and write
|
|
|
|
3D10000
|
unkown
|
page read and write
|
|
|
|
818E000
|
unkown
|
page read and write
|
|
|
|
577C000
|
unkown
|
page read and write
|
|
|
|
7CEF000
|
unkown
|
page read and write
|
|
|
|
8030000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
74C6000
|
unkown
|
page read and write
|
|
|
|
1D53000
|
unkown
|
page read and write
|
|
There are 809 hidden memdumps, click here to show them.