Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
ClaimCopy-539408676-12022021.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\Users\user\Desktop\ClaimCopy-539408676-12022021.xlsbE. (copy)
|
Microsoft Excel 2007+
|
dropped
|
||
C:\Users\user\Desktop\~$ClaimCopy-539408676-12022021.xlsb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\A5812A59.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
||
C:\Users\user\Desktop\6FC30000
|
Microsoft Excel 2007+
|
dropped
|
||
C:\Users\user\Desktop\6FC30000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet1.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet2.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet3.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
||
http://www.windows.com/pctv.
|
unknown
|
||
http://investor.msn.com
|
unknown
|
||
http://www.msnbc.com/news/ticker.txt
|
unknown
|
||
http://www.icra.org/vocabulary/.
|
unknown
|
||
http://schemas.openformatrg/package/2006/r
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
||
http://45.142.211.62/533792932717.dat2nter
|
unknown
|
||
http://schemas.openformatrg/package/2006/content-t
|
unknown
|
||
http://185.82.126.78/533792932717.dat2bus
|
unknown
|
||
http://investor.msn.com/
|
unknown
|
||
http://185.82.126.78/533792932717.dat
|
185.82.126.78
|
||
http://158.69.133.78/533792932717.dat2
|
158.69.133.78
|
||
http://www.%s.comPA
|
unknown
|
||
http://158.69.133.78/533792932717.dat
|
158.69.133.78
|
||
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
||
http://www.hotmail.com/oe
|
unknown
|
||
http://185.82.126.78/533792932717.dat2
|
185.82.126.78
|
||
http://schemas.open
|
unknown
|
||
http://servername/isapibackend.dll
|
unknown
|
||
http://45.142.211.62/533792932717.dat
|
45.142.211.62
|
||
http://45.142.211.62/533792932717.dat2
|
45.142.211.62
|
There are 12 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
45.142.211.62
|
unknown
|
Russian Federation
|
||
158.69.133.78
|
unknown
|
Canada
|
||
185.82.126.78
|
unknown
|
Latvia
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
*t-
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2F7C7
|
2F7C7
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
f#-
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3D1A1
|
3D1A1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
There are 25 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
1D00000
|
unkown
|
page read and write
|
||
794E000
|
unkown
|
page read and write
|
||
536E000
|
unkown
|
page read and write
|
||
30C0000
|
heap private
|
page read and write
|
||
3F95000
|
heap private
|
page read and write
|
||
82FD000
|
unkown
|
page read and write
|
||
272000
|
unkown
|
page read and write
|
||
232F000
|
stack
|
page read and write
|
||
58C3000
|
unkown
|
page read and write
|
||
2A3000
|
heap default
|
page read and write
|
||
7E7B000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
4A0000
|
unkown
|
page read and write
|
||
594D000
|
unkown
|
page read and write
|
||
227000
|
unkown
|
page read and write
|
||
7E90000
|
unkown
|
page read and write
|
||
1F0000
|
unkown
|
page read and write
|
||
58C6000
|
unkown
|
page read and write
|
||
7B9D000
|
unkown
|
page read and write
|
||
59AD000
|
unkown
|
page read and write
|
||
40E0000
|
unkown
|
page read and write
|
||
24E000
|
unkown
|
page read and write
|
||
40B5000
|
unkown
|
page read and write
|
||
593B000
|
unkown
|
page read and write
|
||
30D000
|
unkown
|
page read and write
|
||
3E10000
|
heap private
|
page read and write
|
||
221000
|
unkown
|
page read and write
|
||
7116000
|
unkown
|
page read and write
|
||
3F89000
|
heap private
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
7050000
|
unkown
|
page read and write
|
||
1CE0000
|
unkown
|
page read and write
|
||
836F000
|
unkown
|
page read and write
|
||
4E96000
|
unkown
|
page read and write
|
||
6DD6000
|
unkown
|
page read and write
|
||
486000
|
unkown
|
page read and write
|
||
7E44000
|
unkown
|
page read and write
|
||
26A000
|
heap default
|
page read and write
|
||
6BA5000
|
heap private
|
page read and write
|
||
210000
|
unkown
|
page read and write
|
||
590A000
|
unkown
|
page read and write
|
||
5927000
|
unkown
|
page read and write
|
||
4D6F000
|
stack
|
page read and write
|
||
1C0000
|
unkown
|
page read and write
|
||
3E30000
|
unkown
|
page read and write
|
||
7E2E000
|
unkown
|
page read and write
|
||
2F9000
|
unkown
|
page read and write
|
||
30C000
|
unkown
|
page read and write
|
||
2130000
|
heap private
|
page read and write
|
||
31EF000
|
stack
|
page read and write
|
||
249000
|
unkown
|
page read and write
|
||
6F90000
|
unkown
|
page read and write
|
||
109000
|
unkown
|
page read and write
|
||
3E60000
|
unkown
|
page read and write
|
||
8237000
|
unkown
|
page read and write
|
||
220000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
6C64000
|
heap private
|
page read and write
|
||
8341000
|
unkown
|
page read and write
|
||
7F08000
|
unkown
|
page read and write
|
||
415000
|
heap private
|
page read and write
|
||
120000
|
heap private
|
page read and write
|
||
6A0000
|
unkown image
|
page readonly
|
||
34CE000
|
stack
|
page read and write
|
||
248000
|
unkown
|
page read and write
|
||
826A000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
249000
|
unkown
|
page read and write
|
||
3220000
|
unkown
|
page read and write
|
||
2E0000
|
unkown
|
page read and write
|
||
7F00000
|
unkown
|
page read and write
|
||
24E0000
|
unkown
|
page read and write
|
||
2280000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
23E000
|
unkown
|
page read and write
|
||
83A8000
|
unkown
|
page read and write
|
||
307F000
|
stack
|
page read and write
|
||
230000
|
unkown
|
page read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
2D6000
|
heap default
|
page read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
230000
|
heap default
|
page read and write
|
||
590C000
|
unkown
|
page read and write
|
||
7050000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
217000
|
unkown
|
page read and write
|
||
82EF000
|
unkown
|
page read and write
|
||
6E7F1000
|
unkown image
|
page readonly
|
||
802B000
|
unkown
|
page read and write
|
||
8290000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
416000
|
unkown
|
page read and write
|
||
6C60000
|
heap private
|
page read and write
|
||
386000
|
unkown
|
page read and write
|
||
4850000
|
unkown
|
page read and write
|
||
3D0000
|
heap default
|
page read and write
|
||
337000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
2D0000
|
heap default
|
page read and write
|
||
3DF0000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
281000
|
unkown
|
page read and write
|
||
2E0000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
5910000
|
unkown
|
page read and write
|
||
30B8000
|
unkown
|
page read and write
|
||
40A0000
|
unkown
|
page read and write
|
||
520000
|
unkown
|
page read and write
|
||
416000
|
unkown
|
page read and write
|
||
2C0000
|
unkown
|
page read and write
|
||
2D9000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
7D19000
|
heap private
|
page read and write
|
||
6FF3000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7E3C000
|
unkown
|
page read and write
|
||
216B000
|
heap private
|
page read and write
|
||
838F000
|
unkown
|
page read and write
|
||
130000
|
unkown image
|
page readonly
|
||
2E7000
|
heap default
|
page read and write
|
||
4A6000
|
unkown
|
page read and write
|
||
2205000
|
heap private
|
page read and write
|
||
5870000
|
unkown
|
page read and write
|
||
370000
|
unkown
|
page read and write
|
||
25A5000
|
heap private
|
page read and write
|
||
270000
|
unkown
|
page read and write
|
||
7E40000
|
unkown
|
page read and write
|
||
5680000
|
unkown
|
page read and write
|
||
250000
|
heap private
|
page read and write
|
||
3F35000
|
heap private
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
E0000
|
unkown image
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
1D36000
|
unkown
|
page read and write
|
||
2AA000
|
heap default
|
page read and write
|
||
2144000
|
unkown
|
page read and write
|
||
7E6C000
|
unkown
|
page read and write
|
||
3200000
|
unkown image
|
page readonly
|
||
40000
|
unkown image
|
page readonly
|
||
2D7000
|
unkown
|
page read and write
|
||
1B0000
|
unkown
|
page read and write
|
||
4AEF000
|
stack
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
660000
|
unkown image
|
page readonly
|
||
26A000
|
unkown
|
page read and write
|
||
E0000
|
unkown image
|
page read and write
|
||
281000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
2F50000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
82AF000
|
unkown
|
page read and write
|
||
694000
|
heap private
|
page read and write
|
||
1B0000
|
heap private
|
page read and write
|
||
220000
|
heap default
|
page read and write
|
||
58EC000
|
unkown
|
page read and write
|
||
5927000
|
unkown
|
page read and write
|
||
1C43000
|
unkown
|
page read and write
|
||
690000
|
heap private
|
page read and write
|
||
7F8F000
|
unkown
|
page read and write
|
||
7C47000
|
unkown
|
page read and write
|
||
3F09000
|
heap private
|
page read and write
|
||
6E83B000
|
unkown image
|
page read and write
|
||
83F2000
|
unkown
|
page read and write
|
||
220000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7EA6000
|
unkown
|
page read and write
|
||
8280000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
1C00000
|
unkown
|
page read and write
|
||
7057000
|
unkown
|
page read and write
|
||
2FE000
|
unkown
|
page read and write
|
||
7E4F000
|
unkown
|
page read and write
|
||
210000
|
heap default
|
page read and write
|
||
594D000
|
unkown
|
page read and write
|
||
5720000
|
unkown
|
page read and write
|
||
82DE000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
8430000
|
unkown
|
page read and write
|
||
7758000
|
unkown
|
page read and write
|
||
7030000
|
unkown
|
page read and write
|
||
7F1D000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
281000
|
unkown
|
page read and write
|
||
150000
|
heap private
|
page read and write
|
||
41F000
|
unkown
|
page read and write
|
||
7A9A000
|
unkown
|
page read and write
|
||
7EEF000
|
unkown
|
page read and write
|
||
20F0000
|
unkown
|
page read and write
|
||
82BC000
|
unkown
|
page read and write
|
||
7E68000
|
unkown
|
page read and write
|
||
386000
|
heap default
|
page read and write
|
||
33BF000
|
stack
|
page read and write
|
||
26A000
|
unkown
|
page read and write
|
||
211B000
|
heap private
|
page read and write
|
||
7F3A000
|
unkown
|
page read and write
|
||
3FC5000
|
heap private
|
page read and write
|
||
3F99000
|
heap private
|
page read and write
|
||
3A60000
|
unkown image
|
page readonly
|
||
7EDE000
|
unkown
|
page read and write
|
||
2135000
|
heap private
|
page read and write
|
||
295000
|
heap default
|
page read and write
|
||
1C70000
|
unkown
|
page read and write
|
||
170000
|
heap private
|
page read and write
|
||
7A52000
|
unkown
|
page read and write
|
||
288000
|
unkown
|
page read and write
|
||
49E8000
|
unkown
|
page read and write
|
||
6C20000
|
unkown image
|
page readonly
|
||
7726000
|
unkown
|
page read and write
|
||
154000
|
unkown
|
page read and write
|
||
7608000
|
unkown
|
page read and write
|
||
1CE0000
|
unkown image
|
page readonly
|
||
160000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
40FE000
|
unkown
|
page read and write
|
||
591F000
|
unkown
|
page read and write
|
||
7E4C000
|
unkown
|
page read and write
|
||
6E84C000
|
unkown image
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
26A000
|
unkown
|
page read and write
|
||
3F00000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
70000
|
unkown
|
page read and write
|
||
211000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7D4F000
|
heap private
|
page read and write
|
||
510000
|
heap private
|
page read and write
|
||
283000
|
unkown
|
page read and write
|
||
190000
|
unkown
|
page execute and read and write
|
||
7B68000
|
unkown
|
page read and write
|
||
82F3000
|
unkown
|
page read and write
|
||
262000
|
unkown
|
page read and write
|
||
190000
|
unkown
|
page execute and read and write
|
||
590C000
|
unkown
|
page read and write
|
||
6B40000
|
unkown
|
page read and write
|
||
7F6B000
|
unkown
|
page read and write
|
||
7FB1000
|
unkown
|
page read and write
|
||
1CC3000
|
unkown
|
page read and write
|
||
155000
|
heap private
|
page read and write
|
||
7046000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
1CE000
|
heap default
|
page read and write
|
||
31A000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
7686000
|
unkown
|
page read and write
|
||
4AC7000
|
unkown image
|
page readonly
|
||
265000
|
heap private
|
page read and write
|
||
2500000
|
unkown
|
page read and write
|
||
8277000
|
unkown
|
page read and write
|
||
30D0000
|
unkown
|
page read and write
|
||
1CD6000
|
unkown
|
page read and write
|
||
2140000
|
unkown
|
page read and write
|
||
2050000
|
unkown image
|
page readonly
|
||
1B4000
|
heap private
|
page read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
332000
|
unkown
|
page read and write
|
||
6F79000
|
unkown
|
page read and write
|
||
7FA8000
|
unkown
|
page read and write
|
||
60000
|
unkown image
|
page readonly
|
||
58F0000
|
unkown
|
page read and write
|
||
225000
|
unkown
|
page read and write
|
||
4210000
|
unkown
|
page read and write
|
||
80000
|
unkown
|
page read and write
|
||
7040000
|
unkown
|
page read and write
|
||
223B000
|
heap private
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
333000
|
heap default
|
page read and write
|
||
570000
|
heap private
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
6E84F000
|
unkown image
|
page readonly
|
||
250000
|
heap default
|
page read and write
|
||
83B1000
|
unkown
|
page read and write
|
||
830000
|
unkown image
|
page readonly
|
||
780D000
|
unkown
|
page read and write
|
||
590A000
|
unkown
|
page read and write
|
||
4E90000
|
unkown
|
page read and write
|
||
83FF000
|
unkown
|
page read and write
|
||
4E90000
|
unkown
|
page read and write
|
||
140000
|
unkown
|
page read and write
|
||
272000
|
unkown
|
page read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
4E40000
|
unkown
|
page read and write
|
||
388000
|
heap default
|
page read and write
|
||
362000
|
heap default
|
page read and write
|
||
331000
|
unkown
|
page read and write
|
||
7E56000
|
unkown
|
page read and write
|
||
58EC000
|
unkown
|
page read and write
|
||
364000
|
heap private
|
page read and write
|
||
262000
|
unkown
|
page read and write
|
||
30E0000
|
unkown
|
page read and write
|
||
200000
|
unkown image
|
page readonly
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
58FB000
|
unkown
|
page read and write
|
||
A0000
|
unkown
|
page execute and read and write
|
||
4080000
|
unkown
|
page read and write
|
||
1FA000
|
heap default
|
page read and write
|
||
7F41000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
3F30000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
6D13000
|
unkown
|
page read and write
|
||
49B0000
|
unkown image
|
page readonly
|
||
31E000
|
heap default
|
page read and write
|
||
5460000
|
unkown
|
page read and write
|
||
8248000
|
unkown
|
page read and write
|
||
514000
|
heap private
|
page read and write
|
||
2130000
|
unkown
|
page read and write
|
||
710000
|
unkown image
|
page readonly
|
||
25A000
|
unkown
|
page read and write
|
||
5906000
|
unkown
|
page read and write
|
||
8358000
|
unkown
|
page read and write
|
||
7020000
|
unkown
|
page read and write
|
||
58C6000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
6FBE000
|
unkown
|
page read and write
|
||
3D6000
|
heap default
|
page read and write
|
||
7A50000
|
unkown
|
page read and write
|
||
31A000
|
unkown
|
page read and write
|
||
3FC9000
|
heap private
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
322000
|
unkown
|
page read and write
|
||
3AE0000
|
unkown image
|
page readonly
|
||
594B000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7000000
|
unkown
|
page read and write
|
||
4000000
|
heap private
|
page read and write
|
||
499F000
|
stack
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
83C2000
|
unkown
|
page read and write
|
||
3F05000
|
heap private
|
page read and write
|
||
2175000
|
heap private
|
page read and write
|
||
160000
|
unkown
|
page read and write
|
||
24D000
|
unkown
|
page read and write
|
||
7E6A000
|
unkown
|
page read and write
|
||
7050000
|
unkown
|
page read and write
|
||
1D40000
|
unkown image
|
page readonly
|
||
347000
|
heap default
|
page read and write
|
||
770000
|
unkown image
|
page readonly
|
||
5B4000
|
heap private
|
page read and write
|
||
8232000
|
unkown
|
page read and write
|
||
3F50000
|
unkown
|
page read and write
|
||
21AB000
|
heap private
|
page read and write
|
||
7F4F000
|
unkown
|
page read and write
|
||
3F18000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
20000
|
unkown image
|
page readonly
|
||
7110000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
822E000
|
unkown
|
page read and write
|
||
310000
|
heap default
|
page read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
20000
|
unkown image
|
page readonly
|
||
40F5000
|
unkown
|
page read and write
|
||
7E7B000
|
unkown
|
page read and write
|
||
340000
|
heap default
|
page read and write
|
||
7F3D000
|
unkown
|
page read and write
|
||
5A0000
|
unkown image
|
page readonly
|
||
392000
|
heap default
|
page read and write
|
||
331000
|
unkown
|
page read and write
|
||
40F2000
|
unkown
|
page read and write
|
||
6ED0000
|
heap private
|
page read and write
|
||
7F6F000
|
unkown
|
page read and write
|
||
3A6000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
83EC000
|
unkown
|
page read and write
|
||
593B000
|
unkown
|
page read and write
|
||
3230000
|
heap private
|
page read and write
|
||
23E0000
|
unkown
|
page read and write
|
||
3E0000
|
unkown
|
page read and write
|
||
1A0000
|
heap default
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
40BD000
|
unkown
|
page read and write
|
||
6E521000
|
unkown image
|
page execute read
|
||
10000
|
unkown image
|
page read and write
|
||
2FD000
|
unkown
|
page read and write
|
||
2570000
|
unkown image
|
page readonly
|
||
4D40000
|
unkown
|
page read and write
|
||
7070000
|
unkown
|
page read and write
|
||
B9F000
|
stack
|
page read and write
|
||
3DD5000
|
unkown
|
page read and write
|
||
59C1000
|
unkown
|
page read and write
|
||
197000
|
heap default
|
page read and write
|
||
8398000
|
unkown
|
page read and write
|
||
5400000
|
unkown
|
page read and write
|
||
5C0000
|
unkown image
|
page readonly
|
||
1D9000
|
unkown
|
page read and write
|
||
592A000
|
unkown
|
page read and write
|
||
2200000
|
heap private
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
237000
|
unkown
|
page read and write
|
||
591F000
|
unkown
|
page read and write
|
||
262000
|
unkown
|
page read and write
|
||
7060000
|
unkown
|
page read and write
|
||
83AD000
|
unkown
|
page read and write
|
||
5A08000
|
unkown
|
page read and write
|
||
7A0E000
|
unkown
|
page read and write
|
||
2050000
|
heap private
|
page read and write
|
||
36A000
|
heap default
|
page read and write
|
||
7E98000
|
unkown
|
page read and write
|
||
4B17000
|
unkown image
|
page readonly
|
||
24C000
|
unkown
|
page read and write
|
||
7050000
|
unkown
|
page read and write
|
||
249000
|
unkown
|
page read and write
|
||
31F0000
|
unkown
|
page read and write
|
||
7E3B000
|
unkown
|
page read and write
|
||
360000
|
heap private
|
page read and write
|
||
31A000
|
unkown
|
page read and write
|
||
322000
|
unkown
|
page read and write
|
||
1C50000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
5946000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
5931000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7E7D000
|
unkown
|
page read and write
|
||
59DE000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
129000
|
unkown
|
page read and write
|
||
7605000
|
unkown
|
page read and write
|
||
40B9000
|
unkown
|
page read and write
|
||
516000
|
unkown
|
page read and write
|
||
1CC0000
|
unkown image
|
page readonly
|
||
1C40000
|
unkown
|
page read and write
|
||
7042000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
3E0000
|
unkown
|
page read and write
|
||
7F62000
|
unkown
|
page read and write
|
||
3080000
|
unkown
|
page read and write
|
||
322000
|
unkown
|
page read and write
|
||
4C3A000
|
stack
|
page read and write
|
||
4E5E000
|
stack
|
page read and write
|
||
8C0000
|
unkown image
|
page readonly
|
||
82A6000
|
unkown
|
page read and write
|
||
7F52000
|
unkown
|
page read and write
|
||
6C30000
|
unkown image
|
page readonly
|
||
282000
|
unkown
|
page read and write
|
||
7CA6000
|
unkown
|
page read and write
|
||
7E77000
|
unkown
|
page read and write
|
||
7A71000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7E3F000
|
unkown
|
page read and write
|
||
7002000
|
unkown
|
page read and write
|
||
5E0000
|
heap private
|
page read and write
|
||
7A54000
|
unkown
|
page read and write
|
||
730000
|
unkown image
|
page readonly
|
||
7E40000
|
unkown
|
page read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
1C30000
|
unkown
|
page read and write
|
||
7FC2000
|
unkown
|
page read and write
|
||
82B4000
|
unkown
|
page read and write
|
||
86B4000
|
heap private
|
page read and write
|
||
2010000
|
unkown image
|
page readonly
|
||
7A0B000
|
unkown
|
page read and write
|
||
65300000
|
unkown image
|
page readonly
|
||
7E32000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
58F9000
|
unkown
|
page read and write
|
||
3F00000
|
heap private
|
page read and write
|
||
410000
|
heap private
|
page read and write
|
||
6FE0000
|
unkown
|
page read and write
|
||
3EF0000
|
unkown
|
page read and write
|
||
3F30000
|
heap private
|
page read and write
|
||
720000
|
unkown image
|
page readonly
|
||
490000
|
heap private
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
5690000
|
unkown
|
page read and write
|
||
2560000
|
unkown
|
page read and write
|
||
31A000
|
unkown
|
page read and write
|
||
110000
|
unkown
|
page execute and read and write
|
||
8266000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
83E9000
|
unkown
|
page read and write
|
||
4E37000
|
unkown
|
page read and write
|
||
82C1000
|
unkown
|
page read and write
|
||
7E84000
|
unkown
|
page read and write
|
||
4200000
|
unkown
|
page read and write
|
||
1FE0000
|
unkown image
|
page readonly
|
||
7D7C000
|
unkown
|
page read and write
|
||
120000
|
unkown image
|
page readonly
|
||
48B0000
|
unkown image
|
page readonly
|
||
58F4000
|
unkown
|
page read and write
|
||
260000
|
heap private
|
page read and write
|
||
7E36000
|
unkown
|
page read and write
|
||
227000
|
unkown
|
page read and write
|
||
539A000
|
unkown
|
page read and write
|
||
7D10000
|
heap private
|
page read and write
|
||
4E96000
|
unkown
|
page read and write
|
||
21E0000
|
unkown
|
page read and write
|
||
28E000
|
heap default
|
page read and write
|
||
A9000
|
unkown
|
page read and write
|
||
3E20000
|
unkown
|
page read and write
|
||
4860000
|
unkown
|
page read and write
|
||
8A40000
|
heap private
|
page read and write
|
||
25D000
|
unkown
|
page read and write
|
||
4B57000
|
unkown image
|
page readonly
|
||
3FC0000
|
heap private
|
page read and write
|
||
440000
|
heap private
|
page read and write
|
||
7E37000
|
unkown
|
page read and write
|
||
580000
|
unkown image
|
page readonly
|
||
4B97000
|
unkown image
|
page readonly
|
||
4E96000
|
unkown
|
page read and write
|
||
7870000
|
unkown
|
page read and write
|
||
2D0000
|
unkown
|
page read and write
|
||
7E43000
|
unkown
|
page read and write
|
||
7E93000
|
unkown
|
page read and write
|
||
1DC0000
|
unkown image
|
page readonly
|
||
7FEFF1A0000
|
unkown
|
page execute read
|
||
4E9C000
|
unkown
|
page read and write
|
||
24C000
|
unkown
|
page read and write
|
||
6F80000
|
unkown
|
page read and write
|
||
24E000
|
heap default
|
page read and write
|
||
F0000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
83BA000
|
unkown
|
page read and write
|
||
77F2000
|
unkown
|
page read and write
|
||
4940000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
215000
|
heap default
|
page read and write
|
||
26A000
|
unkown
|
page read and write
|
||
597C000
|
unkown
|
page read and write
|
||
8352000
|
unkown
|
page read and write
|
||
6B60000
|
unkown
|
page read and write
|
||
5903000
|
unkown
|
page read and write
|
||
8308000
|
unkown
|
page read and write
|
||
230000
|
unkown
|
page read and write
|
||
249000
|
unkown
|
page read and write
|
||
5903000
|
unkown
|
page read and write
|
||
7060000
|
unkown
|
page read and write
|
||
58F4000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
59BC000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
8251000
|
unkown
|
page read and write
|
||
272000
|
unkown
|
page read and write
|
||
1C61000
|
unkown
|
page read and write
|
||
5410000
|
unkown
|
page read and write
|
||
2E0000
|
heap default
|
page read and write
|
||
8362000
|
unkown
|
page read and write
|
||
7FEC000
|
unkown
|
page read and write
|
||
440000
|
unkown
|
page read and write
|
||
7E53000
|
unkown
|
page read and write
|
||
3A90000
|
unkown image
|
page readonly
|
||
4B10000
|
unkown
|
page read and write
|
||
564E000
|
stack
|
page read and write
|
||
B1E000
|
stack
|
page read and write
|
||
444000
|
heap private
|
page read and write
|
||
6B50000
|
unkown
|
page read and write
|
||
365000
|
heap default
|
page read and write
|
||
833A000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
7AD1000
|
unkown
|
page read and write
|
||
1C98000
|
unkown
|
page read and write
|
||
278000
|
unkown
|
page read and write
|
||
4740000
|
unkown
|
page read and write
|
||
2E2000
|
unkown
|
page read and write
|
||
59A5000
|
unkown
|
page read and write
|
||
4E9C000
|
unkown
|
page read and write
|
||
8261000
|
unkown
|
page read and write
|
||
23D000
|
unkown
|
page read and write
|
||
40C0000
|
unkown
|
page read and write
|
||
331000
|
unkown
|
page read and write
|
||
434C000
|
stack
|
page read and write
|
||
7006000
|
unkown
|
page read and write
|
||
24AE000
|
stack
|
page read and write
|
||
2D1000
|
unkown
|
page read and write
|
||
7E7E000
|
unkown
|
page read and write
|
||
6B70000
|
unkown
|
page read and write
|
||
5F0000
|
unkown image
|
page readonly
|
||
3F85000
|
heap private
|
page read and write
|
||
3A60000
|
unkown image
|
page readonly
|
||
8340000
|
heap private
|
page read and write
|
||
272000
|
unkown
|
page read and write
|
||
7118000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
2165000
|
heap private
|
page read and write
|
||
6BA0000
|
heap private
|
page read and write
|
||
4930000
|
unkown image
|
page readonly
|
||
7E47000
|
unkown
|
page read and write
|
||
29B000
|
heap private
|
page read and write
|
||
8427000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
82B8000
|
unkown
|
page read and write
|
||
281000
|
unkown
|
page read and write
|
||
2040000
|
unkown image
|
page readonly
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
5660000
|
unkown
|
page read and write
|
||
5127000
|
unkown image
|
page readonly
|
||
4E96000
|
unkown
|
page read and write
|
||
7FBA000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
4970000
|
unkown image
|
page readonly
|
||
40BB000
|
unkown
|
page read and write
|
||
310000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
4E0000
|
unkown image
|
page readonly
|
||
7E20000
|
unkown
|
page read and write
|
||
110000
|
unkown
|
page execute and read and write
|
||
1C87000
|
unkown
|
page read and write
|
||
208B000
|
heap private
|
page read and write
|
||
4E96000
|
unkown
|
page read and write
|
||
30A0000
|
unkown
|
page read and write
|
||
170000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
3D06000
|
unkown
|
page read and write
|
||
59DE000
|
unkown
|
page read and write
|
||
910000
|
unkown image
|
page readonly
|
||
740000
|
unkown image
|
page readonly
|
||
338000
|
unkown
|
page read and write
|
||
6D20000
|
heap private
|
page read and write
|
||
1C3E000
|
unkown
|
page read and write
|
||
7FE9000
|
unkown
|
page read and write
|
||
5A73000
|
unkown image
|
page read and write
|
||
4A97000
|
unkown image
|
page readonly
|
||
F0000
|
unkown
|
page read and write
|
||
3F4F000
|
stack
|
page read and write
|
||
831D000
|
unkown
|
page read and write
|
||
2F9000
|
unkown
|
page read and write
|
||
7A0000
|
unkown image
|
page readonly
|
||
1EA000
|
heap default
|
page read and write
|
||
3E50000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
7EF3000
|
unkown
|
page read and write
|
||
827B000
|
unkown
|
page read and write
|
||
8008000
|
unkown
|
page read and write
|
||
5A15000
|
unkown
|
page read and write
|
||
7CC0000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
53F0000
|
unkown
|
page read and write
|
||
7A00000
|
unkown
|
page read and write
|
||
8030000
|
unkown
|
page read and write
|
||
322000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
363000
|
heap default
|
page read and write
|
||
2F8000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
4F40000
|
unkown image
|
page readonly
|
||
219B000
|
heap private
|
page read and write
|
||
2D5000
|
heap default
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
620000
|
unkown image
|
page readonly
|
||
7FF2000
|
unkown
|
page read and write
|
||
820000
|
unkown image
|
page readonly
|
||
4005000
|
heap private
|
page read and write
|
||
6FB8000
|
unkown
|
page read and write
|
||
1C9E000
|
unkown
|
page read and write
|
||
20D0000
|
unkown image
|
page readonly
|
||
7F94000
|
unkown
|
page read and write
|
||
788B000
|
unkown
|
page read and write
|
||
5E4000
|
heap private
|
page read and write
|
||
54F0000
|
unkown
|
page read and write
|
||
3210000
|
unkown image
|
page read and write
|
||
5470000
|
heap private
|
page read and write
|
||
125000
|
heap private
|
page read and write
|
||
476000
|
unkown
|
page read and write
|
||
273000
|
unkown
|
page read and write
|
||
3F80000
|
heap private
|
page read and write
|
||
6F50000
|
unkown image
|
page readonly
|
||
1F3000
|
heap default
|
page read and write
|
||
2330000
|
unkown
|
page read and write
|
||
1E0000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
40000
|
unkown image
|
page readonly
|
||
6B80000
|
unkown
|
page read and write
|
||
40B0000
|
unkown
|
page read and write
|
||
5913000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
440000
|
unkown
|
page read and write
|
||
219000
|
unkown
|
page read and write
|
||
409E000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
6F7C000
|
unkown
|
page read and write
|
||
8284000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
5931000
|
unkown
|
page read and write
|
||
395000
|
heap default
|
page read and write
|
||
786C000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
76AA000
|
unkown
|
page read and write
|
||
836B000
|
unkown
|
page read and write
|
||
6F59000
|
unkown image
|
page readonly
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
1D10000
|
unkown image
|
page readonly
|
||
7112000
|
unkown
|
page read and write
|
||
7E51000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
77C3000
|
unkown
|
page read and write
|
||
7F98000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
3E00000
|
unkown
|
page read and write
|
||
7E80000
|
unkown
|
page read and write
|
||
5540000
|
unkown
|
page read and write
|
||
20E5000
|
heap private
|
page read and write
|
||
8394000
|
unkown
|
page read and write
|
||
3B10000
|
unkown image
|
page readonly
|
||
5937000
|
unkown
|
page read and write
|
||
33A000
|
heap default
|
page read and write
|
||
6DA0000
|
unkown
|
page read and write
|
||
1CF0000
|
heap private
|
page read and write
|
||
58F0000
|
unkown
|
page read and write
|
||
7FAD000
|
unkown
|
page read and write
|
||
1CA0000
|
unkown image
|
page readonly
|
||
7625000
|
unkown
|
page read and write
|
||
750000
|
unkown image
|
page readonly
|
||
2D6000
|
unkown
|
page read and write
|
||
48E0000
|
unkown image
|
page readonly
|
||
2B0000
|
unkown
|
page read and write
|
||
7080000
|
heap private
|
page read and write
|
||
31A000
|
unkown
|
page read and write
|
||
2055000
|
heap private
|
page read and write
|
||
58E9000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
59CC000
|
unkown
|
page read and write
|
||
1C33000
|
unkown
|
page read and write
|
||
70000
|
unkown image
|
page read and write
|
||
31E000
|
heap default
|
page read and write
|
||
5B0000
|
heap private
|
page read and write
|
||
8300000
|
unkown
|
page read and write
|
||
540A000
|
unkown
|
page read and write
|
||
292000
|
heap default
|
page read and write
|
||
83EE000
|
unkown
|
page read and write
|
||
6B90000
|
unkown
|
page read and write
|
||
5975000
|
unkown
|
page read and write
|
||
3A0000
|
unkown image
|
page readonly
|
||
594B000
|
unkown
|
page read and write
|
||
834F000
|
unkown
|
page read and write
|
||
3DD3000
|
unkown
|
page read and write
|
||
238000
|
unkown
|
page read and write
|
||
5398000
|
unkown
|
page read and write
|
||
3A0000
|
heap default
|
page read and write
|
||
4E0000
|
unkown
|
page read and write
|
||
800000
|
unkown image
|
page readonly
|
||
2E0000
|
heap default
|
page read and write
|
||
429000
|
unkown
|
page read and write
|
||
2E0000
|
heap default
|
page read and write
|
||
6B30000
|
unkown
|
page read and write
|
||
2F9000
|
unkown
|
page read and write
|
||
1CB0000
|
unkown image
|
page readonly
|
||
262000
|
unkown
|
page read and write
|
||
40FA000
|
unkown
|
page read and write
|
||
7E78000
|
unkown
|
page read and write
|
||
E0000
|
unkown image
|
page read and write
|
||
49E0000
|
unkown
|
page read and write
|
||
322000
|
unkown
|
page read and write
|
||
20E0000
|
heap private
|
page read and write
|
||
272000
|
unkown
|
page read and write
|
||
277000
|
unkown
|
page read and write
|
||
597A000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
30B0000
|
unkown
|
page read and write
|
||
823F000
|
unkown
|
page read and write
|
||
3CD0000
|
unkown
|
page read and write
|
||
40B2000
|
unkown
|
page read and write
|
||
225000
|
heap default
|
page read and write
|
||
B0000
|
unkown image
|
page readonly
|
||
30000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
190000
|
heap default
|
page read and write
|
||
4B00000
|
unkown image
|
page readonly
|
||
49B0000
|
unkown
|
page read and write
|
||
3E40000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
6FA0000
|
heap private
|
page read and write
|
||
7F58000
|
unkown
|
page read and write
|
||
3E68000
|
unkown
|
page read and write
|
||
220000
|
unkown
|
page read and write
|
||
64F000
|
stack
|
page read and write
|
||
58E9000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
271000
|
unkown
|
page read and write
|
||
1C90000
|
unkown
|
page read and write
|
||
86B0000
|
heap private
|
page read and write
|
||
1CE4000
|
unkown
|
page read and write
|
||
588F000
|
unkown
|
page read and write
|
||
2170000
|
heap private
|
page read and write
|
||
2E7000
|
unkown
|
page read and write
|
||
450000
|
unkown
|
page read and write
|
||
229000
|
unkown
|
page read and write
|
||
58B5000
|
unkown
|
page read and write
|
||
7102000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
833D000
|
unkown
|
page read and write
|
||
1A9000
|
unkown
|
page read and write
|
||
592A000
|
unkown
|
page read and write
|
||
25A9000
|
heap private
|
page read and write
|
||
6FBA000
|
unkown
|
page read and write
|
||
217000
|
heap default
|
page read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
3E14000
|
heap private
|
page read and write
|
||
5720000
|
unkown
|
page read and write
|
||
83FB000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
80000
|
unkown
|
page read and write
|
||
7E38000
|
unkown
|
page read and write
|
||
446000
|
unkown
|
page read and write
|
||
58FB000
|
unkown
|
page read and write
|
||
7ACF000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
20C0000
|
unkown image
|
page readonly
|
||
406F000
|
stack
|
page read and write
|
||
354000
|
heap default
|
page read and write
|
||
75BB000
|
unkown
|
page read and write
|
||
41FD000
|
stack
|
page read and write
|
||
6E520000
|
unkown image
|
page readonly
|
||
7875000
|
unkown
|
page read and write
|
||
2F9000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
6F54000
|
unkown image
|
page readonly
|
||
670000
|
unkown image
|
page readonly
|
||
7BCE000
|
stack
|
page read and write
|
||
6FF0000
|
unkown
|
page read and write
|
||
59B6000
|
unkown
|
page read and write
|
||
82AB000
|
unkown
|
page read and write
|
||
40F7000
|
unkown
|
page read and write
|
||
7FFF000
|
unkown
|
page read and write
|
||
1CFD000
|
heap private
|
page read and write
|
||
7120000
|
heap private
|
page read and write
|
||
222000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
3F90000
|
heap private
|
page read and write
|
||
3A6000
|
heap default
|
page read and write
|
||
2F70000
|
unkown
|
page read and write
|
||
5395000
|
unkown
|
page read and write
|
||
26A000
|
unkown
|
page read and write
|
||
1CC0000
|
unkown
|
page read and write
|
||
3090000
|
unkown
|
page read and write
|
||
2A0000
|
unkown image
|
page readonly
|
||
2580000
|
unkown image
|
page readonly
|
||
331000
|
unkown
|
page read and write
|
||
25C000
|
unkown
|
page read and write
|
||
596F000
|
unkown
|
page read and write
|
||
40A8000
|
unkown
|
page read and write
|
||
768D000
|
unkown
|
page read and write
|
||
7DF5000
|
unkown
|
page read and write
|
||
249000
|
unkown
|
page read and write
|
||
30C7000
|
heap private
|
page read and write
|
||
346000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
160000
|
unkown image
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
5750000
|
unkown
|
page read and write
|
||
33C0000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
7FFB000
|
unkown
|
page read and write
|
||
7EFD000
|
unkown
|
page read and write
|
||
6E848000
|
unkown image
|
page write copy
|
||
40D0000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
556000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
254000
|
heap private
|
page read and write
|
||
7EBC000
|
unkown
|
page read and write
|
||
71A0000
|
unkown
|
page read and write
|
||
780F000
|
stack
|
page read and write
|
||
4D6000
|
unkown
|
page read and write
|
||
574000
|
heap private
|
page read and write
|
||
5989000
|
unkown
|
page read and write
|
||
59FF000
|
unkown
|
page read and write
|
||
6F70000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
1FA0000
|
unkown image
|
page readonly
|
||
37D000
|
heap default
|
page read and write
|
||
2D5000
|
unkown
|
page read and write
|
||
4090000
|
unkown
|
page read and write
|
||
7EAB000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
4B27000
|
unkown image
|
page readonly
|
||
700000
|
unkown image
|
page readonly
|
||
5937000
|
unkown
|
page read and write
|
||
59DF000
|
unkown
|
page read and write
|
||
78C0000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
5878000
|
unkown
|
page read and write
|
||
215000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
1A0000
|
unkown image
|
page readonly
|
||
272000
|
unkown
|
page read and write
|
||
3990000
|
unkown image
|
page readonly
|
||
F0000
|
unkown
|
page read and write
|
||
8408000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7FEE000
|
unkown
|
page read and write
|
||
317000
|
heap default
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
24D000
|
unkown
|
page read and write
|
||
5720000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
6F90000
|
unkown
|
page read and write
|
||
2A0000
|
unkown
|
page read and write
|
||
470000
|
unkown
|
page read and write
|
||
7100000
|
unkown
|
page read and write
|
||
1C65000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
9C0000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
1DE000
|
heap default
|
page read and write
|
||
49D2000
|
unkown
|
page read and write
|
||
8244000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
8027000
|
unkown
|
page read and write
|
||
2E7000
|
heap default
|
page read and write
|
||
58BB000
|
unkown
|
page read and write
|
||
287000
|
unkown
|
page read and write
|
||
1A7000
|
heap default
|
page read and write
|
||
C0000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
5910000
|
unkown
|
page read and write
|
||
4070000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
5906000
|
unkown
|
page read and write
|
||
5697000
|
unkown
|
page read and write
|
||
174000
|
heap private
|
page read and write
|
||
2F9000
|
unkown
|
page read and write
|
||
7E83000
|
unkown
|
page read and write
|
||
58CB000
|
unkown
|
page read and write
|
||
7E61000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7E48000
|
unkown
|
page read and write
|
||
5730000
|
unkown
|
page read and write
|
||
3F39000
|
heap private
|
page read and write
|
||
1CF5000
|
heap private
|
page read and write
|
||
5720000
|
unkown
|
page read and write
|
||
780000
|
unkown image
|
page readonly
|
||
2270000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
3F40000
|
unkown
|
page read and write
|
||
7EB8000
|
unkown
|
page read and write
|
||
7651000
|
unkown
|
page read and write
|
||
6F5F000
|
unkown image
|
page readonly
|
||
2330000
|
unkown
|
page read and write
|
||
1CAE000
|
unkown
|
page read and write
|
||
25A0000
|
heap private
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
262000
|
unkown
|
page read and write
|
||
245F000
|
stack
|
page read and write
|
||
3F60000
|
unkown
|
page read and write
|
||
120000
|
unkown image
|
page readonly
|
||
5A0B000
|
unkown
|
page read and write
|
||
333000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
455000
|
unkown
|
page read and write
|
||
7FBE000
|
unkown
|
page read and write
|
||
4350000
|
unkown image
|
page readonly
|
||
7CA8000
|
unkown
|
page read and write
|
||
290000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
7EC1000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
410000
|
unkown
|
page read and write
|
||
823B000
|
unkown
|
page read and write
|
||
824C000
|
unkown
|
page read and write
|
||
8330000
|
unkown
|
page read and write
|
||
232000
|
unkown
|
page read and write
|
||
7F30000
|
unkown
|
page read and write
|
||
3F20000
|
unkown
|
page read and write
|
||
6C20000
|
unkown
|
page read and write
|
||
257000
|
heap default
|
page read and write
|
||
216000
|
unkown
|
page read and write
|
||
7E66000
|
unkown
|
page read and write
|
||
842B000
|
unkown
|
page read and write
|
||
831A000
|
stack
|
page read and write
|
||
281000
|
unkown
|
page read and write
|
||
83BE000
|
unkown
|
page read and write
|
||
3E70000
|
heap private
|
page execute and read and write
|
||
53F0000
|
unkown
|
page read and write
|
||
331000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
58CE000
|
unkown
|
page read and write
|
||
7CF4000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
7AD4000
|
unkown
|
page read and write
|
||
1E3000
|
heap default
|
page read and write
|
||
3B0000
|
unkown
|
page read and write
|
||
263000
|
heap default
|
page read and write
|
||
5990000
|
unkown
|
page read and write
|
||
4009000
|
heap private
|
page read and write
|
||
1CD0000
|
unkown
|
page read and write
|
||
2160000
|
heap private
|
page read and write
|
||
7BFF000
|
unkown
|
page read and write
|
||
4E87000
|
unkown
|
page read and write
|
||
5913000
|
unkown
|
page read and write
|
||
130000
|
unkown image
|
page readonly
|
||
7EB4000
|
unkown
|
page read and write
|
||
494000
|
heap private
|
page read and write
|
||
350000
|
unkown
|
page read and write
|
||
6E844000
|
unkown image
|
page read and write
|
||
70000
|
unkown image
|
page read and write
|
||
4E9C000
|
unkown
|
page read and write
|
||
7B8E000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
30000
|
unkown image
|
page readonly
|
||
2F60000
|
unkown
|
page read and write
|
||
432000
|
unkown
|
page read and write
|
||
110000
|
unkown
|
page execute and read and write
|
||
7CAB000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
56A0000
|
heap private
|
page read and write
|
||
58F9000
|
unkown
|
page read and write
|
||
5946000
|
unkown
|
page read and write
|
||
26D000
|
unkown
|
page read and write
|
||
34E000
|
heap default
|
page read and write
|
||
79CB000
|
unkown
|
page read and write
|
||
7AF0000
|
unkown
|
page read and write
|
||
59B4000
|
unkown
|
page read and write
|
||
450000
|
unkown
|
page read and write
|
||
6FD0000
|
unkown
|
page read and write
|
||
2149000
|
unkown
|
page read and write
|
||
158000
|
unkown
|
page read and write
|
||
4E50000
|
unkown
|
page read and write
|
||
5320000
|
unkown
|
page read and write
|
||
7E87000
|
unkown
|
page read and write
|
||
7EAF000
|
unkown
|
page read and write
|
||
7E6B000
|
unkown
|
page read and write
|
||
568C000
|
unkown
|
page read and write
|
||
7B0000
|
unkown image
|
page readonly
|
There are 1016 hidden memdumps, click here to show them.