Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
ClaimCopy-1848214335-12022021.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
||
C:\Users\user\Desktop\ClaimCopy-1848214335-12022021.xlsb.. (copy)
|
Microsoft Excel 2007+
|
dropped
|
||
C:\Users\user\Desktop\~$ClaimCopy-1848214335-12022021.xlsb
|
data
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2E2CF162.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
||
C:\Users\user\Desktop\1ED30000
|
Microsoft Excel 2007+
|
dropped
|
||
C:\Users\user\Desktop\1ED30000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet1.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet2.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet3.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
|
||
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://www.windows.com/pctv.
|
unknown
|
||
http://investor.msn.com
|
unknown
|
||
http://www.msnbc.com/news/ticker.txt
|
unknown
|
||
http://185.82.126.78/710203175032.dat
|
185.82.126.78
|
||
http://schemas.openformatrg/package/2006/content-t
|
unknown
|
||
http://45.142.211.62/710203175032.dat2
|
45.142.211.62
|
||
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
||
http://www.hotmail.com/oe
|
unknown
|
||
http://schemas.open
|
unknown
|
||
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
||
http://158.69.133.78/710203175032.dat
|
158.69.133.78
|
||
http://45.142.211.62/710203175032.dat
|
45.142.211.62
|
||
http://185.82.126.78/710203175032.dat2
|
185.82.126.78
|
||
http://www.icra.org/vocabulary/.
|
unknown
|
||
http://185.82.126.78/710203175032.dat2H
|
unknown
|
||
http://schemas.openformatrg/package/2006/r
|
unknown
|
||
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
||
http://investor.msn.com/
|
unknown
|
||
http://185.82.126.78/710203175032.dat2work
|
unknown
|
||
http://www.%s.comPA
|
unknown
|
||
http://185.82.126.78/710203175032.dat(.
|
unknown
|
||
http://158.69.133.78/710203175032.dat2
|
158.69.133.78
|
||
http://158.69.133.78/710203175032.dat2l
|
unknown
|
||
http://servername/isapibackend.dll
|
unknown
|
||
http://158.69.133.78/710203175032.dat2t
|
unknown
|
There are 15 hidden URLs, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
45.142.211.62
|
unknown
|
Russian Federation
|
||
158.69.133.78
|
unknown
|
Canada
|
||
185.82.126.78
|
unknown
|
Latvia
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
<&,
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2EE16
|
2EE16
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
:3,
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\3E051
|
3E051
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
There are 25 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
7920000
|
unkown
|
page read and write
|
||
2030000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
40000
|
unkown image
|
page readonly
|
||
20000
|
unkown image
|
page readonly
|
||
5715000
|
heap private
|
page read and write
|
||
6F01000
|
heap private
|
page read and write
|
||
46D000
|
unkown
|
page read and write
|
||
20A0000
|
unkown image
|
page readonly
|
||
22BF000
|
stack
|
page read and write
|
||
119000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
47D0000
|
unkown image
|
page readonly
|
||
5650000
|
unkown
|
page read and write
|
||
8087000
|
unkown
|
page read and write
|
||
40BD000
|
unkown
|
page read and write
|
||
1A0000
|
unkown image
|
page readonly
|
||
830F000
|
unkown
|
page read and write
|
||
100000
|
unkown
|
page read and write
|
||
7FF8000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
119000
|
unkown
|
page read and write
|
||
5B8D000
|
unkown
|
page read and write
|
||
30A000
|
heap default
|
page read and write
|
||
834F000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
417000
|
heap default
|
page read and write
|
||
7160000
|
unkown
|
page read and write
|
||
2C0000
|
unkown
|
page read and write
|
||
48B0000
|
unkown image
|
page readonly
|
||
F0000
|
unkown
|
page read and write
|
||
82A4000
|
unkown
|
page read and write
|
||
170000
|
heap private
|
page read and write
|
||
7D06000
|
unkown
|
page read and write
|
||
7EA0000
|
unkown
|
page read and write
|
||
3630000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
8449000
|
unkown
|
page read and write
|
||
6E530000
|
unkown image
|
page readonly
|
||
83A1000
|
unkown
|
page read and write
|
||
215000
|
heap private
|
page read and write
|
||
142000
|
unkown
|
page read and write
|
||
83CB000
|
unkown
|
page read and write
|
||
5D0000
|
heap private
|
page read and write
|
||
690000
|
unkown image
|
page readonly
|
||
459000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
2000000
|
unkown image
|
page readonly
|
||
8422000
|
unkown
|
page read and write
|
||
5A0000
|
unkown
|
page read and write
|
||
28D000
|
unkown
|
page read and write
|
||
6E858000
|
unkown image
|
page write copy
|
||
3620000
|
unkown
|
page read and write
|
||
5480000
|
heap private
|
page read and write
|
||
3A0000
|
unkown image
|
page readonly
|
||
4090000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7AB0000
|
unkown
|
page read and write
|
||
100000
|
heap default
|
page read and write
|
||
1B9000
|
unkown
|
page read and write
|
||
730000
|
unkown image
|
page readonly
|
||
6EC0000
|
heap private
|
page read and write
|
||
F7000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
5C1F000
|
unkown
|
page read and write
|
||
2A6000
|
unkown
|
page read and write
|
||
384000
|
heap default
|
page read and write
|
||
2320000
|
unkown
|
page read and write
|
||
280000
|
unkown
|
page read and write
|
||
474000
|
heap private
|
page read and write
|
||
1E3000
|
heap default
|
page read and write
|
||
7BEE000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7EA3000
|
unkown
|
page read and write
|
||
40B9000
|
unkown
|
page read and write
|
||
7F18000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
5790000
|
unkown
|
page read and write
|
||
2040000
|
heap private
|
page read and write
|
||
326F000
|
stack
|
page read and write
|
||
3FD0000
|
unkown
|
page read and write
|
||
410000
|
heap default
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
7B50000
|
unkown
|
page read and write
|
||
159000
|
unkown
|
page read and write
|
||
5B77000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
6F60000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
82C1000
|
unkown
|
page read and write
|
||
7AA8000
|
unkown
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
40E0000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
220000
|
unkown
|
page read and write
|
||
170000
|
unkown
|
page read and write
|
||
7F1C000
|
unkown
|
page read and write
|
||
59A0000
|
unkown
|
page read and write
|
||
100000
|
unkown
|
page read and write
|
||
290000
|
unkown
|
page read and write
|
||
5B8B000
|
unkown
|
page read and write
|
||
5AFE000
|
unkown
|
page read and write
|
||
3160000
|
unkown
|
page read and write
|
||
5540000
|
unkown
|
page read and write
|
||
11D000
|
unkown
|
page read and write
|
||
47A000
|
unkown
|
page read and write
|
||
F9000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
7EA2000
|
unkown
|
page read and write
|
||
459000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
2EE000
|
heap default
|
page read and write
|
||
4FD0000
|
unkown image
|
page readonly
|
||
20000
|
unkown image
|
page readonly
|
||
5900000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
6F50000
|
heap private
|
page read and write
|
||
40FA000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
142000
|
unkown
|
page read and write
|
||
805F000
|
unkown
|
page read and write
|
||
1A4000
|
unkown
|
page read and write
|
||
7F06000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
830000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7E96000
|
unkown
|
page read and write
|
||
4F17000
|
unkown
|
page read and write
|
||
4C6000
|
unkown
|
page read and write
|
||
40F7000
|
unkown
|
page read and write
|
||
5BE5000
|
unkown
|
page read and write
|
||
564C000
|
stack
|
page read and write
|
||
5C6F000
|
unkown
|
page read and write
|
||
2B0000
|
unkown image
|
page readonly
|
||
7FCB000
|
unkown
|
page read and write
|
||
2EB0000
|
unkown
|
page read and write
|
||
7FB8000
|
unkown
|
page read and write
|
||
6AF000
|
stack
|
page read and write
|
||
7EAB000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
786D000
|
unkown
|
page read and write
|
||
5B4C000
|
unkown
|
page read and write
|
||
77BE000
|
stack
|
page read and write
|
||
4B27000
|
unkown image
|
page readonly
|
||
7EF8000
|
unkown
|
page read and write
|
||
542A000
|
unkown
|
page read and write
|
||
442000
|
unkown
|
page read and write
|
||
7A70000
|
unkown
|
page read and write
|
||
4230000
|
unkown
|
page read and write
|
||
3F3000
|
heap default
|
page read and write
|
||
422000
|
heap default
|
page read and write
|
||
57D0000
|
unkown
|
page read and write
|
||
459000
|
unkown
|
page read and write
|
||
5C40000
|
unkown
|
page read and write
|
||
5660000
|
unkown
|
page read and write
|
||
6D4000
|
heap private
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
409E000
|
unkown
|
page read and write
|
||
83F8000
|
unkown
|
page read and write
|
||
7A60000
|
unkown
|
page read and write
|
||
78CC000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
6CE0000
|
unkown image
|
page readonly
|
||
3290000
|
unkown
|
page read and write
|
||
1D53000
|
unkown
|
page read and write
|
||
13A000
|
unkown
|
page read and write
|
||
7A90000
|
unkown
|
page read and write
|
||
5B06000
|
unkown
|
page read and write
|
||
20D0000
|
heap private
|
page read and write
|
||
151000
|
unkown
|
page read and write
|
||
32D0000
|
unkown
|
page read and write
|
||
5428000
|
unkown
|
page read and write
|
||
351F000
|
stack
|
page read and write
|
||
7BC8000
|
unkown
|
page read and write
|
||
3F05000
|
heap private
|
page read and write
|
||
23EF000
|
stack
|
page read and write
|
||
7FF4000
|
unkown
|
page read and write
|
||
240000
|
unkown
|
page read and write
|
||
3EE000
|
heap default
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
440000
|
unkown
|
page read and write
|
||
480000
|
heap private
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
275000
|
heap default
|
page read and write
|
||
83CF000
|
unkown
|
page read and write
|
||
6E854000
|
unkown image
|
page read and write
|
||
3FB0000
|
unkown
|
page read and write
|
||
2020000
|
heap private
|
page read and write
|
||
440000
|
heap default
|
page read and write
|
||
6E84B000
|
unkown image
|
page read and write
|
||
5E0000
|
unkown image
|
page readonly
|
||
1C66000
|
unkown
|
page read and write
|
||
1EA000
|
heap default
|
page read and write
|
||
4B60000
|
unkown
|
page read and write
|
||
684000
|
heap private
|
page read and write
|
||
290000
|
unkown
|
page read and write
|
||
5B39000
|
unkown
|
page read and write
|
||
8318000
|
unkown
|
page read and write
|
||
5B8D000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
7F14000
|
unkown
|
page read and write
|
||
6E85F000
|
unkown image
|
page readonly
|
||
142000
|
unkown
|
page read and write
|
||
82E0000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
13A000
|
unkown
|
page read and write
|
||
6A0000
|
unkown image
|
page readonly
|
||
1E0000
|
unkown image
|
page read and write
|
||
3FE0000
|
unkown
|
page read and write
|
||
3F0000
|
unkown
|
page read and write
|
||
485000
|
heap private
|
page read and write
|
||
24C000
|
unkown
|
page read and write
|
||
B5F000
|
stack
|
page read and write
|
||
39D0000
|
unkown image
|
page readonly
|
||
120000
|
unkown image
|
page readonly
|
||
7CA7000
|
unkown
|
page read and write
|
||
2175000
|
heap private
|
page read and write
|
||
7EC6000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7BC9000
|
unkown
|
page read and write
|
||
6D20000
|
unkown image
|
page readonly
|
||
22A0000
|
heap private
|
page read and write
|
||
2A0000
|
unkown image
|
page readonly
|
||
7AD1000
|
unkown
|
page read and write
|
||
44CE000
|
stack
|
page read and write
|
||
2170000
|
heap private
|
page read and write
|
||
6F78000
|
unkown
|
page read and write
|
||
47A000
|
unkown
|
page read and write
|
||
33C5000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
278000
|
unkown
|
page read and write
|
||
220000
|
heap private
|
page read and write
|
||
5AB8000
|
unkown
|
page read and write
|
||
22A0000
|
unkown
|
page read and write
|
||
32C0000
|
unkown
|
page read and write
|
||
5C5C000
|
unkown
|
page read and write
|
||
7EE7000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
7FEFF1A0000
|
unkown
|
page execute read
|
||
1D50000
|
unkown
|
page read and write
|
||
3270000
|
unkown
|
page read and write
|
||
5B53000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
82F0000
|
unkown
|
page read and write
|
||
7A56000
|
unkown
|
page read and write
|
||
1D71000
|
unkown
|
page read and write
|
||
5790000
|
unkown
|
page read and write
|
||
332000
|
heap default
|
page read and write
|
||
5BC9000
|
unkown
|
page read and write
|
||
82E4000
|
unkown
|
page read and write
|
||
7036000
|
unkown
|
page read and write
|
||
7170000
|
unkown
|
page read and write
|
||
760000
|
unkown image
|
page readonly
|
||
1F0000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
4D96000
|
unkown
|
page read and write
|
||
40B0000
|
unkown
|
page read and write
|
||
5AF5000
|
unkown
|
page read and write
|
||
3F98000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
5B86000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
5B29000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
4A97000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
1D00000
|
unkown image
|
page readonly
|
||
3E20000
|
heap private
|
page read and write
|
||
24D000
|
unkown
|
page read and write
|
||
269000
|
unkown
|
page read and write
|
||
7A0000
|
unkown image
|
page readonly
|
||
7133000
|
unkown
|
page read and write
|
||
403000
|
heap default
|
page read and write
|
||
3E50000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
3FA000
|
heap default
|
page read and write
|
||
7823000
|
unkown
|
page read and write
|
||
2B7000
|
heap default
|
page read and write
|
||
40B2000
|
unkown
|
page read and write
|
||
2020000
|
unkown
|
page read and write
|
||
6D0000
|
heap private
|
page read and write
|
||
3EF5000
|
heap private
|
page read and write
|
||
2165000
|
heap private
|
page read and write
|
||
459000
|
unkown
|
page read and write
|
||
9B0000
|
unkown image
|
page readonly
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7F53000
|
unkown
|
page read and write
|
||
3A50000
|
unkown image
|
page readonly
|
||
217000
|
unkown
|
page read and write
|
||
7F7D000
|
unkown
|
page read and write
|
||
580000
|
unkown image
|
page readonly
|
||
2010000
|
unkown image
|
page readonly
|
||
262000
|
unkown
|
page read and write
|
||
290000
|
unkown
|
page execute and read and write
|
||
82A8000
|
unkown
|
page read and write
|
||
7EB1000
|
unkown
|
page read and write
|
||
510000
|
unkown image
|
page readonly
|
||
197000
|
heap default
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
83B0000
|
heap private
|
page read and write
|
||
7B30000
|
heap private
|
page read and write
|
||
5B30000
|
unkown
|
page read and write
|
||
7F0B000
|
unkown
|
page read and write
|
||
841E000
|
unkown
|
page read and write
|
||
40D0000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
151000
|
unkown
|
page read and write
|
||
2165000
|
heap private
|
page read and write
|
||
4F26000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
3150000
|
unkown
|
page read and write
|
||
2C6000
|
unkown
|
page read and write
|
||
8321000
|
unkown
|
page read and write
|
||
7BC0000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7120000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
8068000
|
unkown
|
page read and write
|
||
8353000
|
unkown
|
page read and write
|
||
317000
|
heap default
|
page read and write
|
||
47A000
|
unkown
|
page read and write
|
||
3F00000
|
heap private
|
page read and write
|
||
272000
|
unkown
|
page read and write
|
||
7110000
|
unkown
|
page read and write
|
||
E0000
|
unkown image
|
page read and write
|
||
40C0000
|
unkown
|
page read and write
|
||
845B000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
118000
|
unkown
|
page read and write
|
||
7180000
|
heap private
|
page read and write
|
||
3404000
|
heap private
|
page read and write
|
||
8022000
|
unkown
|
page read and write
|
||
C9000
|
unkown
|
page read and write
|
||
5BD0000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
219B000
|
heap private
|
page read and write
|
||
491000
|
unkown
|
page read and write
|
||
5B0B000
|
unkown
|
page read and write
|
||
4F1F000
|
unkown
|
page read and write
|
||
43C0000
|
unkown
|
page read and write
|
||
40A0000
|
unkown
|
page read and write
|
||
2E44000
|
unkown
|
page read and write
|
||
7FCF000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
2045000
|
heap private
|
page read and write
|
||
7F68000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
848B000
|
unkown
|
page read and write
|
||
831C000
|
unkown
|
page read and write
|
||
7E9C000
|
unkown
|
page read and write
|
||
142000
|
unkown
|
page read and write
|
||
100000
|
unkown
|
page read and write
|
||
5B4A000
|
unkown
|
page read and write
|
||
2025000
|
heap private
|
page read and write
|
||
40B5000
|
unkown
|
page read and write
|
||
224000
|
heap private
|
page read and write
|
||
311E000
|
stack
|
page read and write
|
||
2B6000
|
heap default
|
page read and write
|
||
7A60000
|
unkown
|
page read and write
|
||
484000
|
heap private
|
page read and write
|
||
2045000
|
heap private
|
page read and write
|
||
7FB2000
|
unkown
|
page read and write
|
||
47A000
|
unkown
|
page read and write
|
||
5B53000
|
unkown
|
page read and write
|
||
720000
|
unkown image
|
page readonly
|
||
8487000
|
unkown
|
page read and write
|
||
700000
|
unkown image
|
page readonly
|
||
5B34000
|
unkown
|
page read and write
|
||
7F21000
|
unkown
|
page read and write
|
||
1D75000
|
unkown
|
page read and write
|
||
45D000
|
unkown
|
page read and write
|
||
483000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
839A000
|
unkown
|
page read and write
|
||
370000
|
heap default
|
page read and write
|
||
20D5000
|
heap private
|
page read and write
|
||
5B7B000
|
unkown
|
page read and write
|
||
51B7000
|
unkown image
|
page readonly
|
||
3A40000
|
unkown image
|
page readonly
|
||
5C49000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7668000
|
unkown
|
page read and write
|
||
5B5F000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
49E8000
|
unkown
|
page read and write
|
||
8306000
|
unkown
|
page read and write
|
||
1A8000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
271000
|
unkown
|
page read and write
|
||
7A92000
|
unkown
|
page read and write
|
||
5AD0000
|
unkown
|
page read and write
|
||
7BFD000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
153000
|
unkown
|
page read and write
|
||
151000
|
unkown
|
page read and write
|
||
830B000
|
unkown
|
page read and write
|
||
7000000
|
unkown
|
page read and write
|
||
7EDB000
|
unkown
|
page read and write
|
||
7EAC000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
8490000
|
unkown
|
page read and write
|
||
20C5000
|
heap private
|
page read and write
|
||
34E000
|
heap default
|
page read and write
|
||
5B4C000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
30000
|
unkown image
|
page readonly
|
||
11E000
|
unkown
|
page read and write
|
||
77000
|
heap default
|
page read and write
|
||
440000
|
unkown
|
page read and write
|
||
835D000
|
unkown
|
page read and write
|
||
8008000
|
unkown
|
page read and write
|
||
480000
|
unkown
|
page read and write
|
||
65300000
|
unkown image
|
page readonly
|
||
40BB000
|
unkown
|
page read and write
|
||
205B000
|
heap private
|
page read and write
|
||
5790000
|
unkown
|
page read and write
|
||
492000
|
unkown
|
page read and write
|
||
497000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
33C3000
|
unkown
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
5BEB000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
5B4A000
|
unkown
|
page read and write
|
||
32B8000
|
unkown
|
page read and write
|
||
482000
|
unkown
|
page read and write
|
||
390000
|
unkown
|
page execute and read and write
|
||
47E000
|
unkown
|
page read and write
|
||
3D0000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
5B7B000
|
unkown
|
page read and write
|
||
829B000
|
unkown
|
page read and write
|
||
5B3B000
|
unkown
|
page read and write
|
||
820000
|
unkown image
|
page readonly
|
||
7E55000
|
unkown
|
page read and write
|
||
5C6F000
|
unkown
|
page read and write
|
||
158000
|
unkown
|
page read and write
|
||
210000
|
unkown image
|
page readonly
|
||
160000
|
unkown image
|
page read and write
|
||
3280000
|
unkown
|
page read and write
|
||
5CB3000
|
unkown image
|
page read and write
|
||
219000
|
unkown
|
page read and write
|
||
70000
|
heap default
|
page read and write
|
||
1CB0000
|
unkown image
|
page readonly
|
||
458000
|
unkown
|
page read and write
|
||
151000
|
unkown
|
page read and write
|
||
83C2000
|
unkown
|
page read and write
|
||
24A000
|
heap default
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
4080000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
40A8000
|
unkown
|
page read and write
|
||
7AB2000
|
unkown
|
page read and write
|
||
F5000
|
heap default
|
page read and write
|
||
6ECA000
|
heap private
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
3AC000
|
heap default
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
828E000
|
unkown
|
page read and write
|
||
590000
|
unkown image
|
page readonly
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
4370000
|
unkown
|
page read and write
|
||
3B10000
|
unkown image
|
page readonly
|
||
424000
|
heap private
|
page read and write
|
||
5C0C000
|
unkown
|
page read and write
|
||
7F3E000
|
unkown
|
page read and write
|
||
710000
|
unkown image
|
page readonly
|
||
5B29000
|
unkown
|
page read and write
|
||
840D000
|
unkown
|
page read and write
|
||
106000
|
unkown
|
page read and write
|
||
470000
|
heap private
|
page read and write
|
||
7EE3000
|
unkown
|
page read and write
|
||
1B0000
|
unkown
|
page read and write
|
||
4100000
|
unkown
|
page read and write
|
||
6F60000
|
unkown
|
page read and write
|
||
40FE000
|
unkown
|
page read and write
|
||
5B43000
|
unkown
|
page read and write
|
||
5B50000
|
unkown
|
page read and write
|
||
F5000
|
unkown
|
page read and write
|
||
7FA1000
|
unkown
|
page read and write
|
||
5BAF000
|
unkown
|
page read and write
|
||
20C0000
|
heap private
|
page read and write
|
||
620000
|
unkown image
|
page readonly
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
190000
|
unkown
|
page execute and read and write
|
||
326000
|
unkown
|
page read and write
|
||
102000
|
unkown
|
page read and write
|
||
215000
|
unkown
|
page read and write
|
||
7EDD000
|
unkown
|
page read and write
|
||
3B0000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
2D0000
|
unkown
|
page read and write
|
||
78EB000
|
unkown
|
page read and write
|
||
467000
|
heap default
|
page read and write
|
||
6F7A000
|
unkown
|
page read and write
|
||
6E531000
|
unkown image
|
page execute read
|
||
6D2F000
|
unkown image
|
page readonly
|
||
5B77000
|
unkown
|
page read and write
|
||
7EE4000
|
unkown
|
page read and write
|
||
459000
|
unkown
|
page read and write
|
||
3130000
|
unkown image
|
page readonly
|
||
8411000
|
unkown
|
page read and write
|
||
5910000
|
heap private
|
page read and write
|
||
801A000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
22C0000
|
unkown
|
page read and write
|
||
83B2000
|
unkown
|
page read and write
|
||
7E92000
|
unkown
|
page read and write
|
||
6CB0000
|
unkown
|
page read and write
|
||
7A60000
|
unkown
|
page read and write
|
||
4B0000
|
unkown
|
page read and write
|
||
482000
|
unkown
|
page read and write
|
||
4E6000
|
unkown
|
page read and write
|
||
46C000
|
unkown
|
page read and write
|
||
5B34000
|
unkown
|
page read and write
|
||
7B31000
|
unkown
|
page read and write
|
||
1DBE000
|
unkown
|
page read and write
|
||
5B05000
|
unkown
|
page read and write
|
||
7BE000
|
stack
|
page read and write
|
||
6F54000
|
heap private
|
page read and write
|
||
4740000
|
unkown image
|
page readonly
|
||
6D29000
|
unkown image
|
page readonly
|
||
12C000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
8049000
|
unkown
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
40A000
|
heap default
|
page read and write
|
||
7C5F000
|
unkown
|
page read and write
|
||
390000
|
unkown
|
page execute and read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
1D40000
|
unkown
|
page read and write
|
||
238000
|
unkown
|
page read and write
|
||
2023000
|
unkown
|
page read and write
|
||
33B0000
|
unkown
|
page read and write
|
||
7FEF000
|
unkown
|
page read and write
|
||
160000
|
unkown image
|
page read and write
|
||
7EA4000
|
unkown
|
page read and write
|
||
491000
|
unkown
|
page read and write
|
||
7EDB000
|
unkown
|
page read and write
|
||
833E000
|
unkown
|
page read and write
|
||
2E0000
|
unkown
|
page read and write
|
||
F0000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
4F21000
|
unkown
|
page read and write
|
||
255000
|
unkown
|
page read and write
|
||
7F60000
|
unkown
|
page read and write
|
||
4A00000
|
unkown image
|
page readonly
|
||
82B1000
|
unkown
|
page read and write
|
||
8314000
|
unkown
|
page read and write
|
||
456000
|
heap default
|
page read and write
|
||
808B000
|
unkown
|
page read and write
|
||
4CA0000
|
unkown
|
page read and write
|
||
5B43000
|
unkown
|
page read and write
|
||
53B0000
|
unkown
|
page read and write
|
||
5BB5000
|
unkown
|
page read and write
|
||
805B000
|
unkown
|
page read and write
|
||
58F0000
|
unkown
|
page read and write
|
||
40F2000
|
unkown
|
page read and write
|
||
5B30000
|
unkown
|
page read and write
|
||
437000
|
unkown
|
page read and write
|
||
5B67000
|
unkown
|
page read and write
|
||
262000
|
unkown
|
page read and write
|
||
7D08000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
8390000
|
unkown
|
page read and write
|
||
7E97000
|
unkown
|
page read and write
|
||
44F000
|
unkown
|
page read and write
|
||
1DB0000
|
unkown image
|
page readonly
|
||
8090000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7F9D000
|
unkown
|
page read and write
|
||
2B0000
|
heap default
|
page read and write
|
||
2310000
|
unkown
|
page read and write
|
||
5B71000
|
unkown
|
page read and write
|
||
3F60000
|
unkown
|
page read and write
|
||
940000
|
unkown image
|
page readonly
|
||
5BBA000
|
unkown
|
page read and write
|
||
13A000
|
unkown
|
page read and write
|
||
439000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
26E000
|
unkown
|
page read and write
|
||
6CC0000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
7EAF000
|
unkown
|
page read and write
|
||
7665000
|
unkown
|
page read and write
|
||
4CDF000
|
stack
|
page read and write
|
||
76B1000
|
unkown
|
page read and write
|
||
804E000
|
unkown
|
page read and write
|
||
462000
|
unkown
|
page read and write
|
||
3E25000
|
heap private
|
page read and write
|
||
4927000
|
unkown image
|
page readonly
|
||
420000
|
heap private
|
page read and write
|
||
4210000
|
unkown
|
page read and write
|
||
447000
|
unkown
|
page read and write
|
||
47A000
|
unkown
|
page read and write
|
||
6E85C000
|
unkown image
|
page read and write
|
||
710000
|
unkown image
|
page readonly
|
||
482000
|
unkown
|
page read and write
|
||
2E40000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
20D0000
|
heap private
|
page read and write
|
||
1CD0000
|
unkown image
|
page readonly
|
||
205000
|
heap private
|
page read and write
|
||
5B5F000
|
unkown
|
page read and write
|
||
110000
|
unkown
|
page execute and read and write
|
||
7B2F000
|
unkown
|
page read and write
|
||
E0000
|
unkown image
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
804C000
|
unkown
|
page read and write
|
||
570C000
|
unkown
|
page read and write
|
||
845F000
|
unkown
|
page read and write
|
||
3120000
|
unkown image
|
page readonly
|
||
2F0000
|
unkown
|
page read and write
|
||
3B0000
|
heap default
|
page read and write
|
||
6F7E000
|
unkown
|
page read and write
|
||
5B6F000
|
unkown
|
page read and write
|
||
219B000
|
heap private
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
5BFD000
|
unkown
|
page read and write
|
||
5C20000
|
unkown
|
page read and write
|
||
5B0E000
|
unkown
|
page read and write
|
||
20000
|
unkown image
|
page readonly
|
||
7F4F000
|
unkown
|
page read and write
|
||
119000
|
unkown
|
page read and write
|
||
270000
|
unkown
|
page read and write
|
||
6E801000
|
unkown image
|
page readonly
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
1D80000
|
unkown
|
page read and write
|
||
49D2000
|
unkown
|
page read and write
|
||
2036000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
491000
|
unkown
|
page read and write
|
||
1B0000
|
unkown
|
page read and write
|
||
270000
|
unkown
|
page read and write
|
||
2049000
|
heap private
|
page read and write
|
||
3C0000
|
heap private
|
page read and write
|
||
4C6000
|
unkown
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
2B0000
|
heap default
|
page read and write
|
||
83B8000
|
unkown
|
page read and write
|
||
CA000
|
heap default
|
page read and write
|
||
44D000
|
heap default
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
6D24000
|
unkown image
|
page readonly
|
||
1D4000
|
heap private
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
32E0000
|
unkown
|
page read and write
|
||
2230000
|
unkown
|
page read and write
|
||
7A63000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
30000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7A6B000
|
unkown
|
page read and write
|
||
227000
|
unkown
|
page read and write
|
||
6CD1000
|
unkown
|
page read and write
|
||
4D6000
|
unkown
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
5C69000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
7B34000
|
unkown
|
page read and write
|
||
289000
|
unkown
|
page read and write
|
||
33F0000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
4ECF000
|
stack
|
page read and write
|
||
1CE000
|
heap default
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
7685000
|
unkown
|
page read and write
|
||
490000
|
unkown
|
page read and write
|
||
3B0000
|
unkown
|
page read and write
|
||
7EC1000
|
unkown
|
page read and write
|
||
3A0000
|
unkown image
|
page readonly
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
4B6000
|
unkown
|
page read and write
|
||
7FAF000
|
unkown
|
page read and write
|
||
4ED0000
|
unkown
|
page read and write
|
||
8292000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
7E9B000
|
unkown
|
page read and write
|
||
482000
|
unkown
|
page read and write
|
||
83AF000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
7A80000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
4B90000
|
unkown
|
page read and write
|
||
7AA2000
|
unkown
|
page read and write
|
||
7140000
|
unkown
|
page read and write
|
||
32F0000
|
heap private
|
page read and write
|
||
3640000
|
heap private
|
page read and write
|
||
482000
|
unkown
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
10000
|
unkown image
|
page read and write
|
||
490000
|
unkown
|
page read and write
|
||
D0000
|
unkown
|
page read and write
|
||
841A000
|
unkown
|
page read and write
|
||
33E0000
|
unkown
|
page read and write
|
||
151000
|
unkown
|
page read and write
|
||
4770000
|
unkown image
|
page readonly
|
||
5B2C000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
82D7000
|
unkown
|
page read and write
|
||
491000
|
unkown
|
page read and write
|
||
7D20000
|
unkown
|
page read and write
|
||
3410000
|
unkown
|
page read and write
|
||
3FF0000
|
unkown
|
page read and write
|
||
431000
|
unkown
|
page read and write
|
||
433E000
|
stack
|
page read and write
|
||
83F4000
|
unkown
|
page read and write
|
||
5B06000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
5B65000
|
unkown
|
page read and write
|
||
1F7000
|
heap default
|
page read and write
|
||
82C6000
|
unkown
|
page read and write
|
||
76E6000
|
unkown
|
page read and write
|
||
200000
|
heap private
|
page read and write
|
||
900000
|
unkown image
|
page readonly
|
||
7E8E000
|
unkown
|
page read and write
|
||
8360000
|
unkown
|
page read and write
|
||
3647000
|
heap private
|
page read and write
|
||
3F09000
|
heap private
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
1DA0000
|
unkown
|
page read and write
|
||
4B10000
|
unkown
|
page read and write
|
||
7786000
|
unkown
|
page read and write
|
||
3380000
|
unkown image
|
page read and write
|
||
107000
|
unkown
|
page read and write
|
||
83EF000
|
unkown
|
page read and write
|
||
6F40000
|
unkown
|
page read and write
|
||
7F9A000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
48A0000
|
unkown image
|
page readonly
|
||
76ED000
|
unkown
|
page read and write
|
||
5B8B000
|
unkown
|
page read and write
|
||
690000
|
unkown image
|
page readonly
|
||
22DB000
|
heap private
|
page read and write
|
||
8A6A000
|
stack
|
page read and write
|
||
3FC0000
|
unkown
|
page read and write
|
||
79AE000
|
unkown
|
page read and write
|
||
6CE0000
|
unkown
|
page read and write
|
||
3556000
|
unkown
|
page read and write
|
||
1D60000
|
unkown
|
page read and write
|
||
21E0000
|
unkown
|
page read and write
|
||
4A87000
|
unkown image
|
page readonly
|
||
4B70000
|
unkown
|
page read and write
|
||
770000
|
unkown image
|
page readonly
|
||
5680000
|
heap private
|
page read and write
|
||
170000
|
unkown
|
page read and write
|
||
262000
|
unkown
|
page read and write
|
||
459000
|
unkown
|
page read and write
|
||
58DE000
|
stack
|
page read and write
|
||
7EF3000
|
unkown
|
page read and write
|
||
480000
|
heap private
|
page read and write
|
||
45E000
|
unkown
|
page read and write
|
||
5B71000
|
unkown
|
page read and write
|
||
277000
|
unkown
|
page read and write
|
||
13A000
|
unkown
|
page read and write
|
||
22E000
|
heap default
|
page read and write
|
||
30000
|
unkown image
|
page readonly
|
||
7ED7000
|
unkown
|
page read and write
|
||
425000
|
heap default
|
page read and write
|
||
5B46000
|
unkown
|
page read and write
|
||
1E0000
|
unkown
|
page read and write
|
||
5790000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
4B0C000
|
stack
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
5710000
|
heap private
|
page read and write
|
||
2C0000
|
heap private
|
page read and write
|
||
5B0000
|
unkown image
|
page readonly
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
229E000
|
stack
|
page read and write
|
||
3DE000
|
heap default
|
page read and write
|
||
7F5D000
|
unkown
|
page read and write
|
||
8052000
|
unkown
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
8468000
|
unkown
|
page read and write
|
||
5C01000
|
unkown
|
page read and write
|
||
3010000
|
unkown
|
page read and write
|
||
590000
|
unkown image
|
page readonly
|
||
1FD0000
|
unkown image
|
page readonly
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
3390000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
491000
|
unkown
|
page read and write
|
||
3F80000
|
unkown
|
page read and write
|
||
25A000
|
unkown
|
page read and write
|
||
1D4E000
|
unkown
|
page read and write
|
||
5B39000
|
unkown
|
page read and write
|
||
4A0000
|
unkown
|
page read and write
|
||
5AB0000
|
unkown
|
page read and write
|
||
7200000
|
unkown
|
page read and write
|
||
839D000
|
unkown
|
page read and write
|
||
7A50000
|
unkown
|
page read and write
|
||
7B0000
|
unkown image
|
page readonly
|
||
E0000
|
unkown image
|
page read and write
|
||
2E24000
|
unkown
|
page read and write
|
||
435000
|
unkown
|
page read and write
|
||
82CA000
|
unkown
|
page read and write
|
||
5B6F000
|
unkown
|
page read and write
|
||
269000
|
unkown
|
page read and write
|
||
210B000
|
heap private
|
page read and write
|
||
5B67000
|
unkown
|
page read and write
|
||
2E20000
|
unkown
|
page read and write
|
||
8408000
|
unkown
|
page read and write
|
||
4B0000
|
unkown
|
page read and write
|
||
230000
|
unkown
|
page read and write
|
||
3370000
|
unkown image
|
page readonly
|
||
7130000
|
unkown
|
page read and write
|
||
335000
|
heap default
|
page read and write
|
||
3E6000
|
unkown
|
page read and write
|
||
4B6A000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
45B000
|
heap default
|
page read and write
|
||
1DAE000
|
unkown
|
page read and write
|
||
7F0F000
|
unkown
|
page read and write
|
||
8368000
|
unkown
|
page read and write
|
||
152000
|
unkown
|
page read and write
|
||
23E000
|
unkown
|
page read and write
|
||
130000
|
unkown
|
page read and write
|
||
7A52000
|
unkown
|
page read and write
|
||
3F50000
|
unkown
|
page read and write
|
||
243000
|
heap default
|
page read and write
|
||
680000
|
heap private
|
page read and write
|
||
410000
|
unkown
|
page read and write
|
||
2160000
|
heap private
|
page read and write
|
||
F0000
|
unkown
|
page read and write
|
||
44D0000
|
unkown image
|
page readonly
|
||
F1000
|
unkown
|
page read and write
|
||
844E000
|
unkown
|
page read and write
|
||
210B000
|
heap private
|
page read and write
|
||
7F90000
|
unkown
|
page read and write
|
||
3A0000
|
heap default
|
page read and write
|
||
3F68000
|
unkown
|
page read and write
|
||
460000
|
heap default
|
page read and write
|
||
7EFE0000
|
unkown image
|
page readonly
|
||
2C6000
|
unkown
|
page read and write
|
||
5B46000
|
unkown
|
page read and write
|
||
262000
|
unkown
|
page read and write
|
||
8011000
|
unkown
|
page read and write
|
||
420F000
|
stack
|
page read and write
|
||
7D54000
|
unkown
|
page read and write
|
||
32A0000
|
unkown
|
page read and write
|
||
2A0000
|
unkown
|
page read and write
|
||
1D0000
|
heap private
|
page read and write
|
||
7E40000
|
heap private
|
page read and write
|
||
20D5000
|
heap private
|
page read and write
|
||
53FE000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
4EE0000
|
unkown
|
page read and write
|
||
1CA0000
|
unkown image
|
page readonly
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
7EA8000
|
unkown
|
page read and write
|
||
4D86000
|
unkown
|
page read and write
|
||
7FC2000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
23D000
|
unkown
|
page read and write
|
||
49B7000
|
unkown image
|
page readonly
|
||
222000
|
unkown
|
page read and write
|
||
6F80000
|
heap private
|
page read and write
|
||
7EA7000
|
unkown
|
page read and write
|
||
78D0000
|
unkown
|
page read and write
|
||
7FFFFFB2000
|
unkown image
|
page readonly
|
||
1D97000
|
unkown
|
page read and write
|
||
310000
|
heap default
|
page read and write
|
||
1FB0000
|
unkown image
|
page readonly
|
||
3F70000
|
unkown
|
page read and write
|
||
7EC2000
|
unkown
|
page read and write
|
||
24DF000
|
stack
|
page read and write
|
||
7D0B000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
3EF9000
|
heap private
|
page read and write
|
||
3A20000
|
unkown image
|
page readonly
|
||
7EE0000
|
unkown
|
page read and write
|
||
740000
|
unkown image
|
page readonly
|
||
770A000
|
unkown
|
page read and write
|
||
3A7000
|
heap default
|
page read and write
|
||
1D0000
|
unkown image
|
page readonly
|
||
4000000
|
heap private
|
page execute and read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
8297000
|
unkown
|
page read and write
|
||
498000
|
unkown
|
page read and write
|
||
5650000
|
unkown
|
page read and write
|
||
77B8000
|
unkown
|
page read and write
|
||
615000
|
heap private
|
page read and write
|
||
215000
|
heap default
|
page read and write
|
||
5B6A000
|
unkown
|
page read and write
|
||
3520000
|
unkown
|
page read and write
|
||
22A5000
|
heap private
|
page read and write
|
||
810000
|
unkown image
|
page readonly
|
||
7142000
|
unkown
|
page read and write
|
||
10000
|
unkown image
|
page read and write
|
||
136000
|
unkown
|
page read and write
|
||
1F0000
|
heap default
|
page read and write
|
||
3F95000
|
heap private
|
page read and write
|
||
303000
|
heap default
|
page read and write
|
||
78D5000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
5B50000
|
unkown
|
page read and write
|
||
7AA0000
|
unkown
|
page read and write
|
||
7EB6000
|
unkown
|
page read and write
|
||
46E000
|
unkown
|
page read and write
|
||
C3000
|
heap default
|
page read and write
|
||
82AC000
|
unkown
|
page read and write
|
||
4D3E000
|
stack
|
page read and write
|
||
5990000
|
unkown
|
page read and write
|
||
119000
|
unkown
|
page read and write
|
||
262000
|
unkown
|
page read and write
|
||
58E3000
|
unkown
|
page read and write
|
||
120000
|
unkown image
|
page readonly
|
||
273000
|
unkown
|
page read and write
|
||
376000
|
heap default
|
page read and write
|
||
3FA0000
|
unkown
|
page read and write
|
||
7E98000
|
unkown
|
page read and write
|
||
7A2B000
|
unkown
|
page read and write
|
||
1D40000
|
unkown image
|
page readonly
|
||
2C4000
|
heap private
|
page read and write
|
||
7AA6000
|
unkown
|
page read and write
|
||
142000
|
unkown
|
page read and write
|
||
844C000
|
unkown
|
page read and write
|
||
2040000
|
heap private
|
page read and write
|
||
2140000
|
unkown image
|
page readonly
|
||
32B0000
|
unkown
|
page read and write
|
||
8452000
|
unkown
|
page read and write
|
||
761B000
|
unkown
|
page read and write
|
||
5470000
|
unkown
|
page read and write
|
||
5B3B000
|
unkown
|
page read and write
|
||
800D000
|
unkown
|
page read and write
|
||
1DA8000
|
unkown
|
page read and write
|
||
7DDC000
|
unkown
|
page read and write
|
||
2E49000
|
unkown
|
page read and write
|
||
4E6000
|
unkown
|
page read and write
|
||
6D50000
|
heap private
|
page read and write
|
||
3F90000
|
heap private
|
page read and write
|
||
40F5000
|
unkown
|
page read and write
|
||
119000
|
unkown
|
page read and write
|
||
6EB0000
|
unkown
|
page read and write
|
||
5B2C000
|
unkown
|
page read and write
|
||
7852000
|
unkown
|
page read and write
|
||
220000
|
unkown
|
page read and write
|
||
837D000
|
unkown
|
page read and write
|
||
AE000
|
heap default
|
page read and write
|
||
7AB0000
|
heap private
|
page read and write
|
||
1D43000
|
unkown
|
page read and write
|
||
493000
|
unkown
|
page read and write
|
||
6EB7000
|
unkown
|
page read and write
|
||
7E9F000
|
unkown
|
page read and write
|
||
5BC1000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
2E30000
|
unkown
|
page read and write
|
||
2049000
|
heap private
|
page read and write
|
||
4940000
|
unkown image
|
page readonly
|
||
3C4000
|
heap private
|
page read and write
|
||
610000
|
heap private
|
page read and write
|
||
3400000
|
heap private
|
page read and write
|
||
272000
|
heap default
|
page read and write
|
||
4F26000
|
unkown
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7AFA000
|
unkown
|
page read and write
|
||
3E29000
|
heap private
|
page read and write
|
||
7ECB000
|
unkown
|
page read and write
|
||
2FFF000
|
stack
|
page read and write
|
||
2179000
|
heap private
|
page read and write
|
||
12D000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
5D4000
|
heap private
|
page read and write
|
||
2E90000
|
unkown
|
page read and write
|
||
5BF4000
|
unkown
|
page read and write
|
||
211000
|
unkown
|
page read and write
|
||
3F99000
|
heap private
|
page read and write
|
||
5700000
|
unkown
|
page read and write
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
174000
|
heap private
|
page read and write
|
||
210000
|
heap private
|
page read and write
|
||
5425000
|
unkown
|
page read and write
|
||
271000
|
unkown
|
page read and write
|
||
110000
|
unkown
|
page execute and read and write
|
||
2F0000
|
unkown
|
page read and write
|
||
1C30000
|
unkown
|
page read and write
|
||
5C1F000
|
unkown
|
page read and write
|
||
481000
|
unkown
|
page read and write
|
||
3EF0000
|
heap private
|
page read and write
|
||
2150000
|
unkown image
|
page readonly
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
7ECA000
|
unkown
|
page read and write
|
||
7146000
|
unkown
|
page read and write
|
||
20FB000
|
heap private
|
page read and write
|
||
7EF0000
|
unkown
|
page read and write
|
||
7A70000
|
unkown
|
page read and write
|
||
5B86000
|
unkown
|
page read and write
|
||
4F26000
|
unkown
|
page read and write
|
||
7E80000
|
unkown
|
page read and write
|
||
5B65000
|
unkown
|
page read and write
|
||
39F0000
|
unkown image
|
page readonly
|
||
829F000
|
unkown
|
page read and write
|
||
239000
|
unkown
|
page read and write
|
||
57A0000
|
unkown
|
page read and write
|
||
7FFFFFC2000
|
unkown image
|
page readonly
|
||
7FFFFFB0000
|
unkown image
|
page readonly
|
||
5B6A000
|
unkown
|
page read and write
|
||
190000
|
heap default
|
page read and write
|
||
7FFFFFD0000
|
unkown image
|
page readonly
|
||
220000
|
heap default
|
page read and write
|
||
3B7000
|
heap default
|
page read and write
|
||
4957000
|
unkown image
|
page readonly
|
||
57C0000
|
unkown
|
page read and write
|
||
7EA0000
|
unkown
|
page read and write
|
||
2160000
|
heap private
|
page read and write
|
||
801E000
|
unkown
|
page read and write
|
||
7E82000
|
unkown
|
page read and write
|
||
82DB000
|
unkown
|
page read and write
|
||
7FFFFFC0000
|
unkown image
|
page readonly
|
||
157000
|
unkown
|
page read and write
|
||
13A000
|
unkown
|
page read and write
|
||
435000
|
heap default
|
page read and write
|
||
446000
|
unkown
|
page read and write
|
There are 1011 hidden memdumps, click here to show them.