Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
ClaimCopy-355714047-12022021.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\ClaimCopy-355714047-12022021.xlsbE. (copy)
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$ClaimCopy-355714047-12022021.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DD699F23.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
 |
|
|
C:\Users\user\Desktop\C8260000
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\C8260000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet1.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet2.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 C:\ProgramData\Volet3.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet4.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet5.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32 -e -n -i:&Tiposa!G22& C:\ProgramData\Volet6.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://185.82.126.78/574766024224.dat
|
unknown
|
|
|
|
http://185.82.126.78/574766024224.dat2
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://158.69.133.78/574766024224.dat2
|
158.69.133.78
|
|
|
|
http://45.142.211.62/574766024224.dat#/
|
unknown
|
|
|
|
http://45.142.211.62/574766024224.dat2
|
unknown
|
|
|
|
http://158.69.133.78/574766024224.dat
|
158.69.133.78
|
|
|
|
http://185.82.126.78/574766024224.dat29
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://45.142.211.62/574766024224.dat
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
There are 9 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
45.142.211.62
|
unknown
|
Russian Federation
|
|
|
|
158.69.133.78
|
unknown
|
Canada
|
|
|
|
185.82.126.78
|
unknown
|
Latvia
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
#i-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2D411
|
2D411
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
4r-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\62B25
|
62B25
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
There are 25 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2190000
|
unkown
|
page read and write
|
|
|
|
8311000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown image
|
page readonly
|
|
|
|
7E26000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
160000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
4190000
|
heap private
|
page execute and read and write
|
|
|
|
500000
|
unkown image
|
page readonly
|
|
|
|
7E30000
|
unkown
|
page read and write
|
|
|
|
83BE000
|
unkown
|
page read and write
|
|
|
|
C2F000
|
stack
|
page read and write
|
|
|
|
2144000
|
unkown
|
page read and write
|
|
|
|
7E4B000
|
unkown
|
page read and write
|
|
|
|
48A0000
|
unkown image
|
page readonly
|
|
|
|
3560000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown
|
page read and write
|
|
|
|
7F11000
|
unkown
|
page read and write
|
|
|
|
828C000
|
unkown
|
page read and write
|
|
|
|
3300000
|
unkown
|
page read and write
|
|
|
|
7F78000
|
unkown
|
page read and write
|
|
|
|
1B1000
|
unkown
|
page read and write
|
|
|
|
5A5E000
|
unkown
|
page read and write
|
|
|
|
1CE6000
|
unkown
|
page read and write
|
|
|
|
6E530000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
570000
|
heap private
|
page read and write
|
|
|
|
7A6A000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
960000
|
unkown
|
page read and write
|
|
|
|
1DF0000
|
unkown image
|
page readonly
|
|
|
|
2380000
|
unkown
|
page read and write
|
|
|
|
5A51000
|
unkown
|
page read and write
|
|
|
|
74000
|
heap private
|
page read and write
|
|
|
|
6D2A000
|
heap private
|
page read and write
|
|
|
|
83CF000
|
unkown
|
page read and write
|
|
|
|
25E0000
|
unkown
|
page read and write
|
|
|
|
CB000
|
heap default
|
page read and write
|
|
|
|
355A000
|
unkown
|
page read and write
|
|
|
|
6C70000
|
unkown image
|
page readonly
|
|
|
|
2B9000
|
unkown
|
page read and write
|
|
|
|
3530000
|
unkown
|
page read and write
|
|
|
|
7FFB000
|
unkown
|
page read and write
|
|
|
|
4C57000
|
unkown image
|
page readonly
|
|
|
|
6DB0000
|
unkown
|
page read and write
|
|
|
|
8F000
|
heap default
|
page read and write
|
|
|
|
3540000
|
unkown
|
page read and write
|
|
|
|
3AB0000
|
unkown image
|
page readonly
|
|
|
|
1610000
|
unkown image
|
page readonly
|
|
|
|
3B7000
|
unkown
|
page read and write
|
|
|
|
6C7F000
|
unkown image
|
page readonly
|
|
|
|
330000
|
unkown
|
page read and write
|
|
|
|
2110000
|
unkown
|
page read and write
|
|
|
|
75D8000
|
unkown
|
page read and write
|
|
|
|
7C76000
|
unkown
|
page read and write
|
|
|
|
2610000
|
unkown
|
page read and write
|
|
|
|
7CEE000
|
stack
|
page read and write
|
|
|
|
82BF000
|
unkown
|
page read and write
|
|
|
|
838E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
D0000
|
heap default
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
1B3000
|
unkown
|
page read and write
|
|
|
|
3492000
|
unkown
|
page read and write
|
|
|
|
75F5000
|
unkown
|
page read and write
|
|
|
|
466000
|
unkown
|
page read and write
|
|
|
|
7E4D000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
7E10000
|
unkown
|
page read and write
|
|
|
|
C0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
2A7000
|
heap default
|
page read and write
|
|
|
|
7F0A000
|
unkown
|
page read and write
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
7E1C000
|
unkown
|
page read and write
|
|
|
|
799B000
|
unkown
|
page read and write
|
|
|
|
5A5000
|
heap private
|
page read and write
|
|
|
|
2140000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
4D20000
|
stack
|
page read and write
|
|
|
|
5A28000
|
unkown
|
page read and write
|
|
|
|
3480000
|
unkown
|
page read and write
|
|
|
|
31C8000
|
unkown
|
page read and write
|
|
|
|
2116000
|
unkown
|
page read and write
|
|
|
|
4210000
|
unkown
|
page read and write
|
|
|
|
610000
|
heap private
|
page read and write
|
|
|
|
2620000
|
heap private
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
6F4000
|
heap private
|
page read and write
|
|
|
|
77DD000
|
unkown
|
page read and write
|
|
|
|
1B9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
6D000
|
heap default
|
page read and write
|
|
|
|
340E000
|
stack
|
page read and write
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
36E000
|
heap default
|
page read and write
|
|
|
|
5A49000
|
unkown
|
page read and write
|
|
|
|
6DA4000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
4160000
|
unkown
|
page read and write
|
|
|
|
5A03000
|
unkown
|
page read and write
|
|
|
|
5CF000
|
stack
|
page read and write
|
|
|
|
7728000
|
unkown
|
page read and write
|
|
|
|
7E08000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown
|
page read and write
|
|
|
|
2625000
|
heap private
|
page read and write
|
|
|
|
5B1D000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
4C00000
|
unkown
|
page read and write
|
|
|
|
217000
|
heap default
|
page read and write
|
|
|
|
5A7A000
|
unkown
|
page read and write
|
|
|
|
7F00000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
83F7000
|
unkown
|
page read and write
|
|
|
|
5A6F000
|
unkown
|
page read and write
|
|
|
|
830D000
|
unkown
|
page read and write
|
|
|
|
833B000
|
unkown
|
page read and write
|
|
|
|
3499000
|
unkown
|
page read and write
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
7F22000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
620000
|
unkown
|
page read and write
|
|
|
|
8214000
|
unkown
|
page read and write
|
|
|
|
359000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown
|
page read and write
|
|
|
|
291000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page read and write
|
|
|
|
7E8C000
|
unkown
|
page read and write
|
|
|
|
5A33000
|
unkown
|
page read and write
|
|
|
|
823A000
|
unkown
|
page read and write
|
|
|
|
1A2000
|
unkown
|
page read and write
|
|
|
|
31B0000
|
unkown
|
page read and write
|
|
|
|
223B000
|
heap private
|
page read and write
|
|
|
|
4D6C000
|
unkown
|
page read and write
|
|
|
|
38A000
|
heap default
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown image
|
page readonly
|
|
|
|
7F3B000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4E2000
|
unkown
|
page read and write
|
|
|
|
1A2000
|
unkown
|
page read and write
|
|
|
|
349D000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
7BCF000
|
unkown
|
page read and write
|
|
|
|
A40000
|
unkown image
|
page readonly
|
|
|
|
4F60000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
840000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
347E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
32E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
453A000
|
unkown
|
page read and write
|
|
|
|
6D20000
|
heap private
|
page read and write
|
|
|
|
83B9000
|
unkown
|
page read and write
|
|
|
|
23EE000
|
stack
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
388000
|
unkown
|
page read and write
|
|
|
|
960000
|
unkown
|
page read and write
|
|
|
|
7170000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page read and write
|
|
|
|
3A00000
|
unkown image
|
page readonly
|
|
|
|
363000
|
heap default
|
page read and write
|
|
|
|
130000
|
unkown
|
page read and write
|
|
|
|
7E68000
|
unkown
|
page read and write
|
|
|
|
1DBE000
|
unkown
|
page read and write
|
|
|
|
3F29000
|
heap private
|
page read and write
|
|
|
|
4F50000
|
unkown
|
page read and write
|
|
|
|
2F2000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
835F000
|
unkown
|
page read and write
|
|
|
|
4CF000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
3030000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
8288000
|
unkown
|
page read and write
|
|
|
|
3488000
|
unkown
|
page read and write
|
|
|
|
2F1000
|
unkown
|
page read and write
|
|
|
|
2B0000
|
unkown
|
page read and write
|
|
|
|
81FE000
|
unkown
|
page read and write
|
|
|
|
323000
|
heap default
|
page read and write
|
|
|
|
4CF3000
|
stack
|
page read and write
|
|
|
|
70000
|
unkown image
|
page read and write
|
|
|
|
2B9000
|
unkown
|
page read and write
|
|
|
|
366F000
|
stack
|
page read and write
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7A24000
|
unkown
|
page read and write
|
|
|
|
2B9000
|
unkown
|
page read and write
|
|
|
|
2124000
|
unkown
|
page read and write
|
|
|
|
1B1000
|
unkown
|
page read and write
|
|
|
|
18D000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
7EC3000
|
unkown
|
page read and write
|
|
|
|
4F80000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
4D30000
|
stack
|
page read and write
|
|
|
|
2B9000
|
unkown
|
page read and write
|
|
|
|
7B5E000
|
unkown
|
page read and write
|
|
|
|
6E858000
|
unkown image
|
page write copy
|
|
|
|
65300000
|
unkown image
|
page readonly
|
|
|
|
346000
|
unkown
|
page read and write
|
|
|
|
7F8A000
|
unkown
|
page read and write
|
|
|
|
83C0000
|
heap private
|
page read and write
|
|
|
|
4A37000
|
unkown image
|
page readonly
|
|
|
|
5D0000
|
unkown
|
page read and write
|
|
|
|
7E17000
|
unkown
|
page read and write
|
|
|
|
7FCF000
|
unkown
|
page read and write
|
|
|
|
370000
|
unkown image
|
page readonly
|
|
|
|
51A0000
|
unkown
|
page read and write
|
|
|
|
8300000
|
unkown
|
page read and write
|
|
|
|
30000
|
heap default
|
page read and write
|
|
|
|
A0000
|
unkown
|
page execute and read and write
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
325000
|
heap default
|
page read and write
|
|
|
|
830A000
|
unkown
|
page read and write
|
|
|
|
3670000
|
unkown
|
page read and write
|
|
|
|
824B000
|
unkown
|
page read and write
|
|
|
|
503000
|
unkown
|
page read and write
|
|
|
|
B1F000
|
stack
|
page read and write
|
|
|
|
4138000
|
unkown
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
950000
|
unkown image
|
page readonly
|
|
|
|
6F0000
|
heap private
|
page read and write
|
|
|
|
46F0000
|
unkown
|
page read and write
|
|
|
|
7C0000
|
unkown image
|
page readonly
|
|
|
|
5A42000
|
unkown
|
page read and write
|
|
|
|
45D000
|
heap default
|
page read and write
|
|
|
|
2F0000
|
unkown
|
page read and write
|
|
|
|
4AB7000
|
unkown image
|
page readonly
|
|
|
|
820F000
|
unkown
|
page read and write
|
|
|
|
6E50000
|
heap private
|
page read and write
|
|
|
|
290000
|
unkown
|
page execute and read and write
|
|
|
|
5B0000
|
unkown
|
page read and write
|
|
|
|
6BB0000
|
unkown
|
page read and write
|
|
|
|
4AC7000
|
unkown image
|
page readonly
|
|
|
|
3F0000
|
heap default
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
2010000
|
unkown image
|
page readonly
|
|
|
|
6D10000
|
heap private
|
page read and write
|
|
|
|
4EE000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7F0D000
|
unkown
|
page read and write
|
|
|
|
5B0B000
|
unkown
|
page read and write
|
|
|
|
4150000
|
unkown image
|
page readonly
|
|
|
|
7F28000
|
unkown
|
page read and write
|
|
|
|
8247000
|
unkown
|
page read and write
|
|
|
|
7840000
|
unkown
|
page read and write
|
|
|
|
4D02000
|
stack
|
page read and write
|
|
|
|
530C000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
767F000
|
stack
|
page read and write
|
|
|
|
A20000
|
unkown image
|
page readonly
|
|
|
|
D7000
|
heap default
|
page read and write
|
|
|
|
162000
|
unkown
|
page read and write
|
|
|
|
5A35000
|
unkown
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
7B38000
|
unkown
|
page read and write
|
|
|
|
3000000
|
unkown image
|
page readonly
|
|
|
|
65F000
|
stack
|
page read and write
|
|
|
|
2130000
|
unkown
|
page read and write
|
|
|
|
2103000
|
unkown
|
page read and write
|
|
|
|
2D0000
|
heap default
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
8218000
|
unkown
|
page read and write
|
|
|
|
1B8000
|
unkown
|
page read and write
|
|
|
|
2120000
|
unkown
|
page read and write
|
|
|
|
5A85000
|
unkown
|
page read and write
|
|
|
|
70F0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
4045000
|
heap private
|
page read and write
|
|
|
|
7DC5000
|
unkown
|
page read and write
|
|
|
|
160000
|
unkown
|
page read and write
|
|
|
|
3470000
|
unkown
|
page read and write
|
|
|
|
860000
|
unkown image
|
page readonly
|
|
|
|
159000
|
unkown
|
page read and write
|
|
|
|
7FF7000
|
unkown
|
page read and write
|
|
|
|
6BB0000
|
unkown
|
page read and write
|
|
|
|
8284000
|
unkown
|
page read and write
|
|
|
|
337000
|
heap default
|
page read and write
|
|
|
|
4122000
|
unkown
|
page read and write
|
|
|
|
DF0000
|
unkown
|
page read and write
|
|
|
|
4A70000
|
unkown image
|
page readonly
|
|
|
|
21A0000
|
heap private
|
page read and write
|
|
|
|
4F94000
|
heap private
|
page read and write
|
|
|
|
6BB0000
|
unkown
|
page read and write
|
|
|
|
367000
|
unkown
|
page read and write
|
|
|
|
59AE000
|
stack
|
page read and write
|
|
|
|
380000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown
|
page read and write
|
|
|
|
220B000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
40C5000
|
heap private
|
page read and write
|
|
|
|
323000
|
unkown
|
page read and write
|
|
|
|
2050000
|
unkown image
|
page readonly
|
|
|
|
2F1000
|
unkown
|
page read and write
|
|
|
|
6E531000
|
unkown image
|
page execute read
|
|
|
|
2180000
|
unkown
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
2270000
|
unkown
|
page read and write
|
|
|
|
4F0000
|
unkown image
|
page readonly
|
|
|
|
1E20000
|
unkown image
|
page readonly
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
46A0000
|
unkown
|
page read and write
|
|
|
|
21D0000
|
heap private
|
page read and write
|
|
|
|
3EF9000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
59F3000
|
unkown
|
page read and write
|
|
|
|
2F3000
|
heap default
|
page read and write
|
|
|
|
630000
|
unkown image
|
page readonly
|
|
|
|
4690000
|
unkown
|
page read and write
|
|
|
|
362000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
3B2000
|
unkown
|
page read and write
|
|
|
|
5A6D000
|
unkown
|
page read and write
|
|
|
|
574000
|
heap private
|
page read and write
|
|
|
|
333000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
6DA0000
|
unkown
|
page read and write
|
|
|
|
AD000
|
heap private
|
page read and write
|
|
|
|
314F000
|
stack
|
page read and write
|
|
|
|
1B1000
|
unkown
|
page read and write
|
|
|
|
4D40000
|
stack
|
page read and write
|
|
|
|
8400000
|
unkown
|
page read and write
|
|
|
|
123000
|
heap default
|
page read and write
|
|
|
|
83FB000
|
unkown
|
page read and write
|
|
|
|
B0000
|
unkown image
|
page readonly
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
3557000
|
unkown
|
page read and write
|
|
|
|
2BD000
|
unkown
|
page read and write
|
|
|
|
2DA000
|
unkown
|
page read and write
|
|
|
|
6DA0000
|
unkown
|
page read and write
|
|
|
|
6BB0000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
6BB0000
|
unkown
|
page read and write
|
|
|
|
5B6D000
|
unkown
|
page read and write
|
|
|
|
2FE0000
|
unkown
|
page read and write
|
|
|
|
4530000
|
unkown
|
page read and write
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
4FE000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
179000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
3AA0000
|
unkown image
|
page readonly
|
|
|
|
395000
|
heap default
|
page read and write
|
|
|
|
317000
|
heap default
|
page read and write
|
|
|
|
6DB0000
|
unkown
|
page read and write
|
|
|
|
6B0000
|
unkown image
|
page readonly
|
|
|
|
5B10000
|
unkown
|
page read and write
|
|
|
|
E0000
|
heap default
|
page read and write
|
|
|
|
2A0000
|
heap default
|
page read and write
|
|
|
|
6DC6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
320000
|
unkown
|
page read and write
|
|
|
|
160000
|
heap default
|
page read and write
|
|
|
|
7E53000
|
unkown
|
page read and write
|
|
|
|
6C85000
|
heap private
|
page read and write
|
|
|
|
2045000
|
heap private
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
heap default
|
page read and write
|
|
|
|
2570000
|
unkown image
|
page readonly
|
|
|
|
59FB000
|
unkown
|
page read and write
|
|
|
|
5A05000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7AA1000
|
unkown
|
page read and write
|
|
|
|
831F000
|
unkown
|
page read and write
|
|
|
|
2F8000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
4D70000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
5AB4000
|
unkown
|
page read and write
|
|
|
|
4F1F000
|
stack
|
page read and write
|
|
|
|
210000
|
heap default
|
page read and write
|
|
|
|
4CA0000
|
stack
|
page read and write
|
|
|
|
5297000
|
unkown
|
page read and write
|
|
|
|
590000
|
unkown image
|
page readonly
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
960000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
7E3A000
|
unkown
|
page read and write
|
|
|
|
520000
|
heap private
|
page read and write
|
|
|
|
2608000
|
unkown
|
page read and write
|
|
|
|
8221000
|
unkown
|
page read and write
|
|
|
|
833F000
|
unkown
|
page read and write
|
|
|
|
2560000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
52FF000
|
unkown
|
page read and write
|
|
|
|
700000
|
unkown image
|
page readonly
|
|
|
|
5A0000
|
heap private
|
page read and write
|
|
|
|
5BB0000
|
unkown
|
page read and write
|
|
|
|
7E06000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown image
|
page readonly
|
|
|
|
210000
|
heap default
|
page read and write
|
|
|
|
2200000
|
heap private
|
page read and write
|
|
|
|
1C6000
|
unkown
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
22FF000
|
stack
|
page read and write
|
|
|
|
2F1000
|
unkown
|
page read and write
|
|
|
|
490000
|
unkown
|
page read and write
|
|
|
|
355E000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
501000
|
unkown
|
page read and write
|
|
|
|
6EE0000
|
unkown
|
page read and write
|
|
|
|
7F1F000
|
unkown
|
page read and write
|
|
|
|
3043000
|
unkown
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
3045000
|
unkown
|
page read and write
|
|
|
|
304000
|
heap private
|
page read and write
|
|
|
|
2A2000
|
unkown
|
page read and write
|
|
|
|
25D0000
|
unkown
|
page read and write
|
|
|
|
4D80000
|
unkown
|
page read and write
|
|
|
|
360000
|
heap default
|
page read and write
|
|
|
|
4040000
|
heap private
|
page read and write
|
|
|
|
820B000
|
unkown
|
page read and write
|
|
|
|
446000
|
unkown
|
page read and write
|
|
|
|
53A0000
|
unkown image
|
page readonly
|
|
|
|
79C0000
|
unkown
|
page read and write
|
|
|
|
34A0000
|
heap private
|
page read and write
|
|
|
|
7E14000
|
unkown
|
page read and write
|
|
|
|
83CB000
|
unkown
|
page read and write
|
|
|
|
7621000
|
unkown
|
page read and write
|
|
|
|
2245000
|
heap private
|
page read and write
|
|
|
|
194000
|
unkown
|
page read and write
|
|
|
|
8276000
|
unkown
|
page read and write
|
|
|
|
90000
|
unkown image
|
page readonly
|
|
|
|
B0000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
8254000
|
unkown
|
page read and write
|
|
|
|
230000
|
unkown
|
page read and write
|
|
|
|
8260000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7E0B000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
1FE0000
|
unkown image
|
page readonly
|
|
|
|
4540000
|
unkown
|
page read and write
|
|
|
|
838A000
|
unkown
|
page read and write
|
|
|
|
6C0000
|
unkown image
|
page readonly
|
|
|
|
227B000
|
heap private
|
page read and write
|
|
|
|
3010000
|
unkown image
|
page read and write
|
|
|
|
75D5000
|
unkown
|
page read and write
|
|
|
|
3410000
|
unkown
|
page read and write
|
|
|
|
3B8000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
7DF2000
|
unkown
|
page read and write
|
|
|
|
7E10000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
83C2000
|
unkown
|
page read and write
|
|
|
|
2F1000
|
unkown
|
page read and write
|
|
|
|
900000
|
unkown
|
page read and write
|
|
|
|
82ED000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1A0000
|
unkown
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
2E2000
|
unkown
|
page read and write
|
|
|
|
31E0000
|
unkown
|
page read and write
|
|
|
|
5A42000
|
unkown
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
8322000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
3555000
|
unkown
|
page read and write
|
|
|
|
4F80000
|
unkown image
|
page readonly
|
|
|
|
530000
|
unkown image
|
page readonly
|
|
|
|
7E0C000
|
unkown
|
page read and write
|
|
|
|
36EA000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
1A2000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
656000
|
unkown
|
page read and write
|
|
|
|
7E18000
|
unkown
|
page read and write
|
|
|
|
7A20000
|
unkown
|
page read and write
|
|
|
|
7C78000
|
unkown
|
page read and write
|
|
|
|
4C80000
|
stack
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
207B000
|
heap private
|
page read and write
|
|
|
|
4C50000
|
unkown
|
page read and write
|
|
|
|
21D5000
|
heap private
|
page read and write
|
|
|
|
740000
|
heap private
|
page read and write
|
|
|
|
32F8000
|
unkown
|
page read and write
|
|
|
|
82D0000
|
unkown
|
page read and write
|
|
|
|
4040000
|
unkown
|
page read and write
|
|
|
|
7E88000
|
unkown
|
page read and write
|
|
|
|
1200000
|
unkown
|
page read and write
|
|
|
|
767A000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
A8E000
|
stack
|
page read and write
|
|
|
|
160000
|
unkown image
|
page read and write
|
|
|
|
377000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
6E801000
|
unkown image
|
page readonly
|
|
|
|
524000
|
heap private
|
page read and write
|
|
|
|
430000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7A9F000
|
unkown
|
page read and write
|
|
|
|
40C0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
52E7000
|
unkown
|
page read and write
|
|
|
|
4C4000
|
heap private
|
page read and write
|
|
|
|
76F6000
|
unkown
|
page read and write
|
|
|
|
21A5000
|
heap private
|
page read and write
|
|
|
|
2040000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
5BB0000
|
unkown
|
page read and write
|
|
|
|
7ED0000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
151000
|
unkown
|
page read and write
|
|
|
|
3CE000
|
heap default
|
page read and write
|
|
|
|
79F6000
|
unkown
|
page read and write
|
|
|
|
5A49000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7E63000
|
unkown
|
page read and write
|
|
|
|
295000
|
heap default
|
page read and write
|
|
|
|
256000
|
heap default
|
page read and write
|
|
|
|
2D0000
|
unkown
|
page read and write
|
|
|
|
8378000
|
unkown
|
page read and write
|
|
|
|
5AAE000
|
unkown
|
page read and write
|
|
|
|
36A000
|
heap default
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
7E47000
|
unkown
|
page read and write
|
|
|
|
52B0000
|
unkown
|
page read and write
|
|
|
|
7F92000
|
unkown
|
page read and write
|
|
|
|
3490000
|
unkown
|
page read and write
|
|
|
|
A6C000
|
stack
|
page read and write
|
|
|
|
5ABB000
|
unkown
|
page read and write
|
|
|
|
7F68000
|
unkown
|
page read and write
|
|
|
|
3495000
|
unkown
|
page read and write
|
|
|
|
7E19000
|
unkown
|
page read and write
|
|
|
|
82D8000
|
unkown
|
page read and write
|
|
|
|
2E2000
|
unkown
|
page read and write
|
|
|
|
4094000
|
heap private
|
page read and write
|
|
|
|
6E85F000
|
unkown image
|
page readonly
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
4D9000
|
unkown
|
page read and write
|
|
|
|
2F7000
|
unkown
|
page read and write
|
|
|
|
2205000
|
heap private
|
page read and write
|
|
|
|
3420000
|
unkown
|
page read and write
|
|
|
|
3F8E000
|
stack
|
page read and write
|
|
|
|
8364000
|
unkown
|
page read and write
|
|
|
|
850000
|
unkown image
|
page readonly
|
|
|
|
4C20000
|
unkown
|
page read and write
|
|
|
|
7FC2000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
6DD0000
|
heap private
|
page read and write
|
|
|
|
750000
|
unkown image
|
page readonly
|
|
|
|
615000
|
heap private
|
page read and write
|
|
|
|
37D000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
59CE000
|
unkown
|
page read and write
|
|
|
|
7AC0000
|
unkown
|
page read and write
|
|
|
|
E4000
|
heap default
|
page read and write
|
|
|
|
5A2E000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
4F71000
|
unkown
|
page read and write
|
|
|
|
209000
|
unkown
|
page read and write
|
|
|
|
3460000
|
unkown
|
page read and write
|
|
|
|
837D000
|
unkown
|
page read and write
|
|
|
|
397000
|
heap default
|
page read and write
|
|
|
|
2140000
|
unkown
|
page read and write
|
|
|
|
4F20000
|
unkown
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
5E6000
|
unkown
|
page read and write
|
|
|
|
7E57000
|
unkown
|
page read and write
|
|
|
|
635000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
10E000
|
heap default
|
page read and write
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
3D0000
|
unkown
|
page read and write
|
|
|
|
263000
|
heap default
|
page read and write
|
|
|
|
2FA000
|
heap default
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
270000
|
unkown
|
page read and write
|
|
|
|
3730000
|
heap private
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
2B0000
|
unkown
|
page read and write
|
|
|
|
48E0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4CD0000
|
stack
|
page read and write
|
|
|
|
7890000
|
unkown
|
page read and write
|
|
|
|
179000
|
unkown
|
page read and write
|
|
|
|
3520000
|
unkown
|
page read and write
|
|
|
|
8368000
|
unkown
|
page read and write
|
|
|
|
7793000
|
unkown
|
page read and write
|
|
|
|
1B7000
|
unkown
|
page read and write
|
|
|
|
827F000
|
unkown
|
page read and write
|
|
|
|
3F25000
|
heap private
|
page read and write
|
|
|
|
3B2000
|
heap default
|
page read and write
|
|
|
|
2580000
|
unkown image
|
page readonly
|
|
|
|
340000
|
unkown
|
page read and write
|
|
|
|
6DA0000
|
unkown
|
page read and write
|
|
|
|
4810000
|
unkown image
|
page readonly
|
|
|
|
4100000
|
unkown
|
page read and write
|
|
|
|
42F000
|
heap default
|
page read and write
|
|
|
|
24D000
|
heap default
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
4C30000
|
unkown
|
page read and write
|
|
|
|
7E76000
|
unkown
|
page read and write
|
|
|
|
179000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
21DB000
|
heap private
|
page read and write
|
|
|
|
3EF5000
|
heap private
|
page read and write
|
|
|
|
880000
|
unkown image
|
page readonly
|
|
|
|
480C000
|
stack
|
page read and write
|
|
|
|
25B000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
406000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7F3F000
|
unkown
|
page read and write
|
|
|
|
5A51000
|
unkown
|
page read and write
|
|
|
|
5A4E000
|
unkown
|
page read and write
|
|
|
|
167000
|
unkown
|
page read and write
|
|
|
|
364000
|
heap private
|
page read and write
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
525000
|
heap private
|
page read and write
|
|
|
|
3552000
|
unkown
|
page read and write
|
|
|
|
124000
|
heap private
|
page read and write
|
|
|
|
1A2000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4BD7000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
2A7000
|
unkown
|
page read and write
|
|
|
|
6D61000
|
heap private
|
page read and write
|
|
|
|
378000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
5B1E000
|
unkown
|
page read and write
|
|
|
|
3430000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
25B0000
|
unkown
|
page read and write
|
|
|
|
5A66000
|
unkown
|
page read and write
|
|
|
|
7FEFF1A0000
|
unkown
|
page execute read
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
279000
|
unkown
|
page read and write
|
|
|
|
720000
|
unkown image
|
page readonly
|
|
|
|
2CD000
|
unkown
|
page read and write
|
|
|
|
6E85C000
|
unkown image
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
36BE000
|
unkown
|
page read and write
|
|
|
|
310000
|
heap default
|
page read and write
|
|
|
|
59B0000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
3440000
|
unkown
|
page read and write
|
|
|
|
5304000
|
unkown
|
page read and write
|
|
|
|
295000
|
unkown
|
page read and write
|
|
|
|
7E60000
|
unkown
|
page read and write
|
|
|
|
17E000
|
unkown
|
page read and write
|
|
|
|
6DC2000
|
unkown
|
page read and write
|
|
|
|
360000
|
heap private
|
page read and write
|
|
|
|
5AD0000
|
unkown
|
page read and write
|
|
|
|
23F0000
|
unkown
|
page read and write
|
|
|
|
8207000
|
unkown
|
page read and write
|
|
|
|
349B000
|
unkown
|
page read and write
|
|
|
|
7FBE000
|
unkown
|
page read and write
|
|
|
|
1CE0000
|
unkown image
|
page readonly
|
|
|
|
7E07000
|
unkown
|
page read and write
|
|
|
|
8231000
|
unkown
|
page read and write
|
|
|
|
7D4C000
|
unkown
|
page read and write
|
|
|
|
5AB0000
|
unkown
|
page read and write
|
|
|
|
6C74000
|
unkown image
|
page readonly
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
25B000
|
unkown
|
page read and write
|
|
|
|
66B000
|
heap private
|
page read and write
|
|
|
|
890000
|
unkown image
|
page readonly
|
|
|
|
A9000
|
unkown
|
page read and write
|
|
|
|
390000
|
heap default
|
page read and write
|
|
|
|
821C000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
12A000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
5AB8000
|
unkown
|
page read and write
|
|
|
|
4C20000
|
unkown
|
page read and write
|
|
|
|
300000
|
heap private
|
page read and write
|
|
|
|
326000
|
unkown
|
page read and write
|
|
|
|
198000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown image
|
page readonly
|
|
|
|
3F40000
|
unkown
|
page read and write
|
|
|
|
210000
|
unkown
|
page read and write
|
|
|
|
299000
|
unkown
|
page read and write
|
|
|
|
744000
|
heap private
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
1AC000
|
unkown
|
page read and write
|
|
|
|
7C90000
|
unkown
|
page read and write
|
|
|
|
2F1000
|
unkown
|
page read and write
|
|
|
|
7E54000
|
unkown
|
page read and write
|
|
|
|
3B5000
|
heap default
|
page read and write
|
|
|
|
17D000
|
unkown
|
page read and write
|
|
|
|
7CC4000
|
unkown
|
page read and write
|
|
|
|
32A000
|
heap default
|
page read and write
|
|
|
|
4C6000
|
unkown
|
page read and write
|
|
|
|
2CC000
|
unkown
|
page read and write
|
|
|
|
5AF5000
|
unkown
|
page read and write
|
|
|
|
7DFE000
|
unkown
|
page read and write
|
|
|
|
440F000
|
stack
|
page read and write
|
|
|
|
366000
|
heap default
|
page read and write
|
|
|
|
355000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4C20000
|
unkown
|
page read and write
|
|
|
|
40B0000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7F32000
|
unkown
|
page read and write
|
|
|
|
2629000
|
heap private
|
page read and write
|
|
|
|
25F0000
|
unkown
|
page read and write
|
|
|
|
5A0A000
|
unkown
|
page read and write
|
|
|
|
38D000
|
unkown
|
page read and write
|
|
|
|
34E000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5A75000
|
unkown
|
page read and write
|
|
|
|
39A0000
|
unkown image
|
page readonly
|
|
|
|
178000
|
unkown
|
page read and write
|
|
|
|
810000
|
unkown
|
page read and write
|
|
|
|
827B000
|
unkown
|
page read and write
|
|
|
|
3D6000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
420000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
4F40000
|
unkown
|
page read and write
|
|
|
|
5A6D000
|
unkown
|
page read and write
|
|
|
|
5A7A000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2E0000
|
unkown
|
page read and write
|
|
|
|
1B2000
|
unkown
|
page read and write
|
|
|
|
7F5F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
18C000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7E21000
|
unkown
|
page read and write
|
|
|
|
7E50000
|
unkown
|
page read and write
|
|
|
|
52A0000
|
unkown
|
page read and write
|
|
|
|
2DA000
|
unkown
|
page read and write
|
|
|
|
1B1000
|
unkown
|
page read and write
|
|
|
|
80000
|
unkown
|
page read and write
|
|
|
|
40A0000
|
unkown
|
page read and write
|
|
|
|
2FD0000
|
unkown
|
page read and write
|
|
|
|
3450000
|
unkown
|
page read and write
|
|
|
|
5AFB000
|
unkown
|
page read and write
|
|
|
|
4C88000
|
stack
|
page read and write
|
|
|
|
7E0F000
|
unkown
|
page read and write
|
|
|
|
758B000
|
unkown
|
page read and write
|
|
|
|
190000
|
unkown
|
page read and write
|
|
|
|
3A2000
|
unkown
|
page read and write
|
|
|
|
83D8000
|
unkown
|
page read and write
|
|
|
|
5B1E000
|
unkown
|
page read and write
|
|
|
|
360000
|
heap default
|
page read and write
|
|
|
|
383000
|
heap default
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
6C0000
|
heap private
|
page read and write
|
|
|
|
5A2E000
|
unkown
|
page read and write
|
|
|
|
4CA0000
|
stack
|
page read and write
|
|
|
|
5AF3000
|
unkown
|
page read and write
|
|
|
|
710000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
2220000
|
unkown
|
page read and write
|
|
|
|
7B60000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7B64000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
8B0000
|
unkown image
|
page readonly
|
|
|
|
3F39000
|
heap private
|
page read and write
|
|
|
|
346000
|
unkown
|
page read and write
|
|
|
|
40C9000
|
heap private
|
page read and write
|
|
|
|
5A75000
|
unkown
|
page read and write
|
|
|
|
7E84000
|
unkown
|
page read and write
|
|
|
|
5A35000
|
unkown
|
page read and write
|
|
|
|
2B8000
|
unkown
|
page read and write
|
|
|
|
297000
|
unkown
|
page read and write
|
|
|
|
783C000
|
unkown
|
page read and write
|
|
|
|
4C20000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
36E5000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
157000
|
unkown
|
page read and write
|
|
|
|
4D46000
|
stack
|
page read and write
|
|
|
|
3EA0000
|
heap private
|
page read and write
|
|
|
|
A70000
|
unkown
|
page read and write
|
|
|
|
7F81000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
2600000
|
unkown
|
page read and write
|
|
|
|
7FD8000
|
unkown
|
page read and write
|
|
|
|
7E36000
|
unkown
|
page read and write
|
|
|
|
424000
|
heap private
|
page read and write
|
|
|
|
2100000
|
unkown
|
page read and write
|
|
|
|
7C7B000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
350000
|
unkown
|
page read and write
|
|
|
|
3F6000
|
heap default
|
page read and write
|
|
|
|
2F3000
|
unkown
|
page read and write
|
|
|
|
4A87000
|
unkown image
|
page readonly
|
|
|
|
2DA000
|
unkown
|
page read and write
|
|
|
|
4F90000
|
heap private
|
page read and write
|
|
|
|
7EED000
|
unkown
|
page read and write
|
|
|
|
155000
|
unkown
|
page read and write
|
|
|
|
5ABD000
|
unkown
|
page read and write
|
|
|
|
834F000
|
stack
|
page read and write
|
|
|
|
1C50000
|
unkown image
|
page readonly
|
|
|
|
8A0000
|
unkown image
|
page readonly
|
|
|
|
3B20000
|
unkown image
|
page readonly
|
|
|
|
3F20000
|
heap private
|
page read and write
|
|
|
|
355000
|
unkown
|
page read and write
|
|
|
|
5B67000
|
unkown
|
page read and write
|
|
|
|
2240000
|
heap private
|
page read and write
|
|
|
|
310000
|
unkown
|
page read and write
|
|
|
|
49F0000
|
unkown image
|
page readonly
|
|
|
|
8236000
|
unkown
|
page read and write
|
|
|
|
4850000
|
unkown image
|
page readonly
|
|
|
|
322000
|
heap default
|
page read and write
|
|
|
|
1A2000
|
unkown
|
page read and write
|
|
|
|
3EA5000
|
heap private
|
page read and write
|
|
|
|
630000
|
heap private
|
page read and write
|
|
|
|
2C0000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
5A5E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
8392000
|
unkown
|
page read and write
|
|
|
|
B0000
|
unkown image
|
page readonly
|
|
|
|
60000
|
unkown image
|
page readonly
|
|
|
|
5A66000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
150000
|
heap private
|
page read and write
|
|
|
|
256000
|
unkown
|
page read and write
|
|
|
|
8291000
|
unkown
|
page read and write
|
|
|
|
169000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
6DA0000
|
unkown
|
page read and write
|
|
|
|
765D000
|
unkown
|
page read and write
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
5A0D000
|
unkown
|
page read and write
|
|
|
|
7E7F000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
4D0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
120000
|
heap private
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
5AFF000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7F64000
|
unkown
|
page read and write
|
|
|
|
2DA000
|
unkown
|
page read and write
|
|
|
|
7E91000
|
unkown
|
page read and write
|
|
|
|
7F8E000
|
unkown
|
page read and write
|
|
|
|
5A3A000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
59B8000
|
unkown
|
page read and write
|
|
|
|
7DF0000
|
unkown
|
page read and write
|
|
|
|
8250000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
6C4000
|
heap private
|
page read and write
|
|
|
|
8332000
|
unkown
|
page read and write
|
|
|
|
36000
|
heap default
|
page read and write
|
|
|
|
5B3D000
|
unkown
|
page read and write
|
|
|
|
904000
|
unkown
|
page read and write
|
|
|
|
7B6D000
|
unkown
|
page read and write
|
|
|
|
25A0000
|
unkown
|
page read and write
|
|
|
|
5ACE000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
1B1000
|
unkown
|
page read and write
|
|
|
|
A0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
6EEA000
|
unkown
|
page read and write
|
|
|
|
5ABF000
|
unkown
|
page read and write
|
|
|
|
4CF0000
|
stack
|
page read and write
|
|
|
|
48D0000
|
unkown image
|
page readonly
|
|
|
|
39A0000
|
unkown image
|
page readonly
|
|
|
|
4D60000
|
unkown
|
page read and write
|
|
|
|
7FCB000
|
unkown
|
page read and write
|
|
|
|
357000
|
unkown
|
page read and write
|
|
|
|
6F30000
|
heap private
|
page read and write
|
|
|
|
6E84B000
|
unkown image
|
page read and write
|
|
|
|
FD000
|
unkown
|
page read and write
|
|
|
|
4090000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
3737000
|
heap private
|
page read and write
|
|
|
|
229000
|
unkown
|
page read and write
|
|
|
|
690000
|
unkown image
|
page readonly
|
|
|
|
3B3000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
155000
|
heap default
|
page read and write
|
|
|
|
1B6000
|
unkown
|
page read and write
|
|
|
|
32EF000
|
stack
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
4D06000
|
stack
|
page read and write
|
|
|
|
4DA0000
|
heap private
|
page read and write
|
|
|
|
4049000
|
heap private
|
page read and write
|
|
|
|
38E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
237F000
|
stack
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7845000
|
unkown
|
page read and write
|
|
|
|
5BB3000
|
unkown image
|
page read and write
|
|
|
|
5A6F000
|
unkown
|
page read and write
|
|
|
|
30E000
|
heap default
|
page read and write
|
|
|
|
506000
|
unkown
|
page read and write
|
|
|
|
7AA4000
|
unkown
|
page read and write
|
|
|
|
4D50000
|
stack
|
page read and write
|
|
|
|
4F30000
|
unkown
|
page read and write
|
|
|
|
2E2000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
19A000
|
unkown
|
page read and write
|
|
|
|
5A28000
|
unkown
|
page read and write
|
|
|
|
25C0000
|
unkown
|
page read and write
|
|
|
|
5587000
|
unkown image
|
page readonly
|
|
|
|
79DB000
|
unkown
|
page read and write
|
|
|
|
6DC8000
|
unkown
|
page read and write
|
|
|
|
37E000
|
unkown
|
page read and write
|
|
|
|
8000000
|
unkown
|
page read and write
|
|
|
|
4C0000
|
heap private
|
page read and write
|
|
|
|
587E000
|
stack
|
page read and write
|
|
|
|
4CBE000
|
stack
|
page read and write
|
|
|
|
2FF0000
|
unkown
|
page read and write
|
|
|
|
7E1F000
|
unkown
|
page read and write
|
|
|
|
7E13000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
520000
|
heap private
|
page read and write
|
|
|
|
7E4B000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
77C2000
|
unkown
|
page read and write
|
|
|
|
39A000
|
unkown
|
page read and write
|
|
|
|
4CE0000
|
stack
|
page read and write
|
|
|
|
355000
|
unkown
|
page read and write
|
|
|
|
566000
|
unkown
|
page read and write
|
|
|
|
82CD000
|
unkown
|
page read and write
|
|
|
|
8202000
|
unkown
|
page read and write
|
|
|
|
1A00000
|
unkown
|
page read and write
|
|
|
|
5BB0000
|
unkown
|
page read and write
|
|
|
|
70000
|
heap private
|
page read and write
|
|
|
|
7C17000
|
unkown
|
page read and write
|
|
|
|
8328000
|
unkown
|
page read and write
|
|
|
|
7FBC000
|
unkown
|
page read and write
|
|
|
|
290000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
heap default
|
page read and write
|
|
|
|
351000
|
unkown
|
page read and write
|
|
|
|
7E14000
|
unkown
|
page read and write
|
|
|
|
785B000
|
unkown
|
page read and write
|
|
|
|
3EF0000
|
heap private
|
page read and write
|
|
|
|
1E40000
|
unkown image
|
page readonly
|
|
|
|
8B0000
|
unkown image
|
page readonly
|
|
|
|
7B0000
|
unkown image
|
page readonly
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
3E0F000
|
stack
|
page read and write
|
|
|
|
5A3A000
|
unkown
|
page read and write
|
|
|
|
1F50000
|
unkown image
|
page readonly
|
|
|
|
6DC0000
|
unkown
|
page read and write
|
|
|
|
467E000
|
stack
|
page read and write
|
|
|
|
38C000
|
unkown
|
page read and write
|
|
|
|
2E2000
|
unkown
|
page read and write
|
|
|
|
3EA9000
|
heap private
|
page read and write
|
|
|
|
6C80000
|
heap private
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
5A85000
|
unkown
|
page read and write
|
|
|
|
392000
|
heap default
|
page read and write
|
|
|
|
791E000
|
unkown
|
page read and write
|
|
|
|
154000
|
heap private
|
page read and write
|
|
|
|
230000
|
unkown image
|
page readonly
|
|
|
|
4C90000
|
stack
|
page read and write
|
|
|
|
26A000
|
heap default
|
page read and write
|
|
|
|
7EBF000
|
unkown
|
page read and write
|
|
|
|
4D00000
|
stack
|
page read and write
|
|
|
|
330000
|
heap default
|
page read and write
|
|
|
|
509A000
|
stack
|
page read and write
|
|
|
|
7EAE000
|
unkown
|
page read and write
|
|
|
|
23CF000
|
stack
|
page read and write
|
|
|
|
2520000
|
unkown
|
page read and write
|
|
|
|
2BE000
|
unkown
|
page read and write
|
|
|
|
179000
|
unkown
|
page read and write
|
|
|
|
8490000
|
heap private
|
page read and write
|
|
|
|
2D7000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
2DE000
|
heap default
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
290000
|
unkown
|
page execute and read and write
|
|
|
|
24E000
|
heap default
|
page read and write
|
|
|
|
4CBA000
|
stack
|
page read and write
|
|
|
|
8381000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
2149000
|
unkown
|
page read and write
|
|
|
|
7E31000
|
unkown
|
page read and write
|
|
|
|
36E8000
|
unkown
|
page read and write
|
|
|
|
7FB9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
70000
|
unkown
|
page read and write
|
|
|
|
5A05000
|
unkown
|
page read and write
|
|
|
|
83BC000
|
unkown
|
page read and write
|
|
|
|
2200000
|
heap private
|
page read and write
|
|
|
|
220000
|
unkown
|
page read and write
|
|
|
|
217000
|
heap default
|
page read and write
|
|
|
|
3F76000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
5B1D000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
1FF0000
|
heap private
|
page read and write
|
|
|
|
4D90000
|
unkown
|
page read and write
|
|
|
|
5BB0000
|
unkown
|
page read and write
|
|
|
|
7E02000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
20F0000
|
unkown image
|
page readonly
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
1CB0000
|
unkown
|
page read and write
|
|
|
|
5AE3000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
179000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5AC7000
|
unkown
|
page read and write
|
|
|
|
3F30000
|
heap private
|
page read and write
|
|
|
|
5A33000
|
unkown
|
page read and write
|
|
|
|
379000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
2DA000
|
unkown
|
page read and write
|
|
|
|
223B000
|
heap private
|
page read and write
|
|
|
|
7A22000
|
unkown
|
page read and write
|
|
|
|
7E3B000
|
unkown
|
page read and write
|
|
|
|
7A41000
|
unkown
|
page read and write
|
|
|
|
4D82000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5A4E000
|
unkown
|
page read and write
|
|
|
|
130000
|
unkown image
|
page readonly
|
|
|
|
7E7B000
|
unkown
|
page read and write
|
|
|
|
320000
|
unkown image
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
82AE000
|
unkown
|
page read and write
|
|
|
|
3F35000
|
heap private
|
page read and write
|
|
|
|
A5000
|
heap private
|
page read and write
|
|
|
|
2205000
|
heap private
|
page read and write
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
7ECD000
|
unkown
|
page read and write
|
|
|
|
404000
|
heap default
|
page read and write
|
|
|
|
7ED8000
|
unkown
|
page read and write
|
|
|
|
6FB0000
|
heap private
|
page read and write
|
|
|
|
6E854000
|
unkown image
|
page read and write
|
|
|
|
7656000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
4D42000
|
stack
|
page read and write
|
|
|
|
2E2000
|
unkown
|
page read and write
|
|
|
|
82C3000
|
unkown
|
page read and write
|
|
|
|
180000
|
unkown
|
page read and write
|
|
|
|
6C79000
|
unkown image
|
page readonly
|
|
|
|
4CB8000
|
stack
|
page read and write
|
|
|
|
7F7D000
|
unkown
|
page read and write
|
|
|
|
1D50000
|
unkown image
|
page readonly
|
|
|
|
3B1000
|
unkown
|
page read and write
|
|
|
|
2B9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
There are 1059 hidden memdumps, click here to show them.