Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
ComplaintDetails-1244065104-Nov-17.xlsb
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\Desktop\ComplaintDetails-1244065104-Nov-17.xlsb17 (copy)
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\~$ComplaintDetails-1244065104-Nov-17.xlsb
|
data
|
dropped
|
|
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DC095B18.jpg
|
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames
3
|
dropped
|
 |
|
|
C:\Users\user\Desktop\D1440000
|
Microsoft Excel 2007+
|
dropped
|
|
|
|
C:\Users\user\Desktop\D1440000:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
|
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32.exe ..\Tot1.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32.exe ..\Tot2.ocx
|
|
|
|
C:\Windows\System32\regsvr32.exe
|
regsvr32.exe ..\Tot3.ocx
|
|
URLs
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
http://185.138.164.244/44532.8710387731.date9:00
|
unknown
|
|
|
|
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
|
unknown
|
|
|
|
http://www.windows.com/pctv.
|
unknown
|
|
|
|
http://investor.msn.com
|
unknown
|
|
|
|
http://www.msnbc.com/news/ticker.txt
|
unknown
|
|
|
|
http://www.icra.org/vocabulary/.
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/r
|
unknown
|
|
|
|
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
|
unknown
|
|
|
|
http://185.138.164.244/E
|
unknown
|
|
|
|
http://schemas.openformatrg/package/2006/content-t
|
unknown
|
|
|
|
http://investor.msn.com/
|
unknown
|
|
|
|
http://190.14.37.101/A
|
unknown
|
|
|
|
http://www.%s.comPA
|
unknown
|
|
|
|
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
|
unknown
|
|
|
|
http://www.hotmail.com/oe
|
unknown
|
|
|
|
http://190.14.37.101/44532.8710387731.dat
|
190.14.37.101
|
|
|
|
http://185.138.164.244/44532.8710387731.datc9:00
|
unknown
|
|
|
|
http://schemas.open
|
unknown
|
|
|
|
http://servername/isapibackend.dll
|
unknown
|
|
|
|
http://185.81.114.236/C
|
unknown
|
|
|
|
http://185.138.164.244/44532.8710387731.dat
|
185.138.164.244
|
|
There are 11 hidden URLs, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
190.14.37.101
|
unknown
|
Panama
|
|
|
|
185.138.164.244
|
unknown
|
Germany
|
|
|
|
185.81.114.236
|
unknown
|
United Kingdom
|
|
Registry
|
Path
|
Value
|
Malicious
|
|
|---|---|---|---|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
da-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
|
MTTT
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
|
ReviewToken
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2D864
|
2D864
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
VBAFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
|
`i-
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
|
LastPurgeTime
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Max Display
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 1
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 2
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 3
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 4
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 5
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 6
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 7
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 8
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 9
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 10
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 11
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 12
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 13
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 14
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 15
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 16
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 17
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 18
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 19
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
|
Item 20
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\44431
|
44431
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
|
1033
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
EXCELFiles
|
|
|
|
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
|
ProductFiles
|
|
|
|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
|
SavedLegacySettings
|
|
There are 25 hidden registries, click here to show them.
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
420000
|
unkown
|
page read and write
|
|
|
|
8148000
|
unkown
|
page read and write
|
|
|
|
802B000
|
unkown
|
page read and write
|
|
|
|
7899000
|
unkown
|
page read and write
|
|
|
|
2279000
|
heap private
|
page read and write
|
|
|
|
110000
|
heap default
|
page read and write
|
|
|
|
8074000
|
unkown
|
page read and write
|
|
|
|
226B000
|
heap private
|
page read and write
|
|
|
|
1DAE000
|
unkown
|
page read and write
|
|
|
|
4E86000
|
unkown
|
page read and write
|
|
|
|
339D000
|
unkown
|
page read and write
|
|
|
|
77AB000
|
unkown
|
page read and write
|
|
|
|
322000
|
unkown
|
page read and write
|
|
|
|
A5F000
|
stack
|
page read and write
|
|
|
|
505F000
|
unkown
|
page read and write
|
|
|
|
25F0000
|
unkown
|
page read and write
|
|
|
|
2275000
|
heap private
|
page read and write
|
|
|
|
7CE0000
|
unkown
|
page read and write
|
|
|
|
339B000
|
unkown
|
page read and write
|
|
|
|
37C0000
|
unkown
|
page read and write
|
|
|
|
2230000
|
heap private
|
page read and write
|
|
|
|
6E85C000
|
unkown image
|
page read and write
|
|
|
|
5C43000
|
unkown
|
page read and write
|
|
|
|
5BCB000
|
unkown
|
page read and write
|
|
|
|
294000
|
heap private
|
page read and write
|
|
|
|
5BF8000
|
unkown
|
page read and write
|
|
|
|
6E531000
|
unkown image
|
page execute read
|
|
|
|
5C0D000
|
unkown
|
page read and write
|
|
|
|
8038000
|
unkown
|
page read and write
|
|
|
|
8037000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
70E0000
|
unkown
|
page read and write
|
|
|
|
4E78000
|
unkown
|
page read and write
|
|
|
|
2040000
|
unkown image
|
page readonly
|
|
|
|
5A90000
|
stack
|
page read and write
|
|
|
|
84E3000
|
unkown
|
page read and write
|
|
|
|
1D6000
|
unkown
|
page read and write
|
|
|
|
7CC4000
|
unkown
|
page read and write
|
|
|
|
2190000
|
unkown
|
page read and write
|
|
|
|
5B78000
|
unkown
|
page read and write
|
|
|
|
1A3000
|
unkown
|
page read and write
|
|
|
|
25E0000
|
unkown
|
page read and write
|
|
|
|
31C0000
|
unkown
|
page read and write
|
|
|
|
8220000
|
unkown
|
page read and write
|
|
|
|
5C77000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
heap default
|
page read and write
|
|
|
|
4E2F000
|
stack
|
page read and write
|
|
|
|
170000
|
unkown
|
page read and write
|
|
|
|
8422000
|
unkown
|
page read and write
|
|
|
|
1E0000
|
unkown
|
page read and write
|
|
|
|
3370000
|
unkown
|
page read and write
|
|
|
|
5D0D000
|
unkown
|
page read and write
|
|
|
|
64F000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
349000
|
unkown
|
page read and write
|
|
|
|
413000
|
unkown
|
page read and write
|
|
|
|
5B00000
|
stack
|
page read and write
|
|
|
|
5CDD000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
5CB1000
|
unkown
|
page read and write
|
|
|
|
1EB000
|
unkown
|
page read and write
|
|
|
|
7EE4000
|
unkown
|
page read and write
|
|
|
|
5A80000
|
stack
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7310000
|
heap private
|
page read and write
|
|
|
|
5AB0000
|
stack
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
8051000
|
unkown
|
page read and write
|
|
|
|
70F0000
|
heap private
|
page read and write
|
|
|
|
2630000
|
unkown
|
page read and write
|
|
|
|
427F000
|
stack
|
page read and write
|
|
|
|
842F000
|
unkown
|
page read and write
|
|
|
|
5B00000
|
stack
|
page read and write
|
|
|
|
5110000
|
unkown
|
page read and write
|
|
|
|
2580000
|
unkown image
|
page readonly
|
|
|
|
336000
|
unkown
|
page read and write
|
|
|
|
1DD0000
|
unkown
|
page read and write
|
|
|
|
71BE000
|
stack
|
page read and write
|
|
|
|
7F0000
|
unkown image
|
page readonly
|
|
|
|
3F79000
|
heap private
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
4B07000
|
unkown image
|
page readonly
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
2310000
|
unkown
|
page read and write
|
|
|
|
8620000
|
unkown
|
page read and write
|
|
|
|
457000
|
heap default
|
page read and write
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
852A000
|
unkown
|
page read and write
|
|
|
|
680000
|
unkown image
|
page readonly
|
|
|
|
140000
|
unkown
|
page read and write
|
|
|
|
5A70000
|
stack
|
page read and write
|
|
|
|
1FD5000
|
heap private
|
page read and write
|
|
|
|
31B000
|
heap private
|
page read and write
|
|
|
|
8077000
|
unkown
|
page read and write
|
|
|
|
7944000
|
unkown
|
page read and write
|
|
|
|
4138000
|
unkown
|
page read and write
|
|
|
|
6E858000
|
unkown image
|
page write copy
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
857F000
|
unkown
|
page read and write
|
|
|
|
21B0000
|
unkown
|
page read and write
|
|
|
|
7170000
|
stack
|
page read and write
|
|
|
|
25B0000
|
unkown
|
page read and write
|
|
|
|
3190000
|
unkown
|
page read and write
|
|
|
|
85A1000
|
unkown
|
page read and write
|
|
|
|
371000
|
unkown
|
page read and write
|
|
|
|
366000
|
unkown
|
page read and write
|
|
|
|
6DA6000
|
unkown
|
page read and write
|
|
|
|
5AC0000
|
stack
|
page read and write
|
|
|
|
2190000
|
unkown image
|
page readonly
|
|
|
|
6EA0000
|
heap private
|
page read and write
|
|
|
|
5C46000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
3EC5000
|
heap private
|
page read and write
|
|
|
|
84ED000
|
unkown
|
page read and write
|
|
|
|
2130000
|
unkown
|
page read and write
|
|
|
|
5600000
|
unkown
|
page read and write
|
|
|
|
81B2000
|
unkown
|
page read and write
|
|
|
|
6FC2000
|
unkown
|
page read and write
|
|
|
|
843C000
|
unkown
|
page read and write
|
|
|
|
244000
|
heap private
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
2115000
|
heap private
|
page read and write
|
|
|
|
7840000
|
unkown
|
page read and write
|
|
|
|
51F000
|
stack
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
8056000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
2A7000
|
heap default
|
page read and write
|
|
|
|
5CA2000
|
unkown
|
page read and write
|
|
|
|
8542000
|
unkown
|
page read and write
|
|
|
|
1C9000
|
unkown
|
page read and write
|
|
|
|
39D0000
|
unkown image
|
page readonly
|
|
|
|
8030000
|
unkown
|
page read and write
|
|
|
|
5720000
|
unkown
|
page read and write
|
|
|
|
1DC3000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
71B0000
|
stack
|
page read and write
|
|
|
|
5C25000
|
unkown
|
page read and write
|
|
|
|
806D000
|
unkown
|
page read and write
|
|
|
|
6E7F000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
5CFE000
|
unkown
|
page read and write
|
|
|
|
5C48000
|
unkown
|
page read and write
|
|
|
|
5BE9000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
5BC8000
|
unkown
|
page read and write
|
|
|
|
5BE9000
|
unkown
|
page read and write
|
|
|
|
5C7E000
|
unkown
|
page read and write
|
|
|
|
5C03000
|
unkown
|
page read and write
|
|
|
|
1EF0000
|
unkown image
|
page readonly
|
|
|
|
466000
|
unkown
|
page read and write
|
|
|
|
31D0000
|
unkown
|
page read and write
|
|
|
|
801E000
|
unkown
|
page read and write
|
|
|
|
441000
|
unkown
|
page read and write
|
|
|
|
5020000
|
unkown
|
page read and write
|
|
|
|
6D0000
|
unkown image
|
page readonly
|
|
|
|
21B0000
|
unkown
|
page read and write
|
|
|
|
6D70000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
1B0000
|
unkown
|
page read and write
|
|
|
|
3F70000
|
heap private
|
page read and write
|
|
|
|
34C0000
|
unkown
|
page read and write
|
|
|
|
84F0000
|
unkown
|
page read and write
|
|
|
|
7A59000
|
unkown
|
page read and write
|
|
|
|
59B0000
|
heap private
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
5D2F000
|
unkown
|
page read and write
|
|
|
|
1DD6000
|
unkown
|
page read and write
|
|
|
|
3380000
|
unkown
|
page read and write
|
|
|
|
4C6F000
|
stack
|
page read and write
|
|
|
|
8067000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
48E000
|
heap default
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
3819000
|
unkown
|
page read and write
|
|
|
|
3690000
|
unkown
|
page read and write
|
|
|
|
81EF000
|
unkown
|
page read and write
|
|
|
|
3EC0000
|
heap private
|
page read and write
|
|
|
|
2235000
|
heap private
|
page read and write
|
|
|
|
2110000
|
heap private
|
page read and write
|
|
|
|
7170000
|
stack
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
4150000
|
unkown image
|
page readonly
|
|
|
|
1D98000
|
unkown
|
page read and write
|
|
|
|
650000
|
unkown image
|
page readonly
|
|
|
|
5C34000
|
unkown
|
page read and write
|
|
|
|
8588000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
2660000
|
unkown image
|
page read and write
|
|
|
|
803F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
80AC000
|
unkown
|
page read and write
|
|
|
|
3830000
|
unkown
|
page read and write
|
|
|
|
5D19000
|
unkown
|
page read and write
|
|
|
|
8033000
|
unkown
|
page read and write
|
|
|
|
7196000
|
stack
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
7E98000
|
unkown
|
page read and write
|
|
|
|
80F8000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
1EC000
|
unkown
|
page read and write
|
|
|
|
842B000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
5066000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
2D8000
|
unkown
|
page read and write
|
|
|
|
5610000
|
unkown
|
page read and write
|
|
|
|
3794000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
1BE0000
|
unkown image
|
page readonly
|
|
|
|
8012000
|
unkown
|
page read and write
|
|
|
|
2F3000
|
heap default
|
page read and write
|
|
|
|
8070000
|
unkown
|
page read and write
|
|
|
|
6E85F000
|
unkown image
|
page readonly
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
5066000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
31C8000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
5B18000
|
stack
|
page read and write
|
|
|
|
6E70000
|
unkown image
|
page readonly
|
|
|
|
8036000
|
unkown
|
page read and write
|
|
|
|
5B40000
|
stack
|
page read and write
|
|
|
|
3580000
|
unkown
|
page read and write
|
|
|
|
821B000
|
unkown
|
page read and write
|
|
|
|
84DF000
|
unkown
|
page read and write
|
|
|
|
5AE0000
|
stack
|
page read and write
|
|
|
|
3819000
|
unkown
|
page read and write
|
|
|
|
859D000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
466000
|
unkown
|
page read and write
|
|
|
|
D0000
|
unkown image
|
page readonly
|
|
|
|
8045000
|
unkown
|
page read and write
|
|
|
|
3160000
|
unkown
|
page read and write
|
|
|
|
31F8000
|
unkown
|
page read and write
|
|
|
|
126000
|
heap default
|
page read and write
|
|
|
|
8030000
|
unkown
|
page read and write
|
|
|
|
7192000
|
stack
|
page read and write
|
|
|
|
8548000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
1D90000
|
unkown image
|
page readonly
|
|
|
|
454000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
5D30000
|
unkown
|
page read and write
|
|
|
|
855B000
|
unkown
|
page read and write
|
|
|
|
8083000
|
unkown
|
page read and write
|
|
|
|
2608000
|
unkown
|
page read and write
|
|
|
|
2650000
|
unkown image
|
page readonly
|
|
|
|
337E000
|
unkown
|
page read and write
|
|
|
|
6E530000
|
unkown image
|
page readonly
|
|
|
|
3D6000
|
unkown
|
page read and write
|
|
|
|
7CBF000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
366000
|
unkown
|
page read and write
|
|
|
|
81EB000
|
unkown
|
page read and write
|
|
|
|
3850000
|
heap private
|
page read and write
|
|
|
|
7A78000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
1FD0000
|
heap private
|
page read and write
|
|
|
|
7C42000
|
unkown
|
page read and write
|
|
|
|
423000
|
unkown
|
page read and write
|
|
|
|
240000
|
heap private
|
page read and write
|
|
|
|
8474000
|
unkown
|
page read and write
|
|
|
|
2E5000
|
heap private
|
page read and write
|
|
|
|
806B000
|
unkown
|
page read and write
|
|
|
|
7C40000
|
unkown
|
page read and write
|
|
|
|
37BA000
|
unkown
|
page read and write
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2680000
|
heap private
|
page read and write
|
|
|
|
3810000
|
heap private
|
page read and write
|
|
|
|
5BE7000
|
unkown
|
page read and write
|
|
|
|
5CDC000
|
unkown
|
page read and write
|
|
|
|
192000
|
unkown
|
page read and write
|
|
|
|
5C7C000
|
unkown
|
page read and write
|
|
|
|
325000
|
unkown
|
page read and write
|
|
|
|
5BC4000
|
unkown
|
page read and write
|
|
|
|
6FC6000
|
unkown
|
page read and write
|
|
|
|
1D70000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
100000
|
unkown
|
page read and write
|
|
|
|
6FA0000
|
unkown
|
page read and write
|
|
|
|
425000
|
unkown
|
page read and write
|
|
|
|
1CA6000
|
unkown
|
page read and write
|
|
|
|
37B000
|
unkown
|
page read and write
|
|
|
|
85EF000
|
unkown
|
page read and write
|
|
|
|
37A2000
|
unkown
|
page read and write
|
|
|
|
1DE5000
|
heap private
|
page read and write
|
|
|
|
8131000
|
unkown
|
page read and write
|
|
|
|
4E90000
|
unkown
|
page read and write
|
|
|
|
5CDC000
|
unkown
|
page read and write
|
|
|
|
34BF000
|
stack
|
page read and write
|
|
|
|
4A70000
|
unkown
|
page read and write
|
|
|
|
57D0000
|
unkown
|
page read and write
|
|
|
|
33A0000
|
unkown
|
page read and write
|
|
|
|
81AA000
|
unkown
|
page read and write
|
|
|
|
360000
|
heap private
|
page read and write
|
|
|
|
850D000
|
unkown
|
page read and write
|
|
|
|
460000
|
unkown
|
page read and write
|
|
|
|
5ACC000
|
stack
|
page read and write
|
|
|
|
72FE000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
5C38000
|
unkown
|
page read and write
|
|
|
|
571E000
|
stack
|
page read and write
|
|
|
|
47B000
|
unkown
|
page read and write
|
|
|
|
7180000
|
stack
|
page read and write
|
|
|
|
8617000
|
unkown
|
page read and write
|
|
|
|
6F20000
|
heap private
|
page read and write
|
|
|
|
1D90000
|
unkown
|
page read and write
|
|
|
|
4EA0000
|
unkown
|
page read and write
|
|
|
|
5066000
|
unkown
|
page read and write
|
|
|
|
8034000
|
unkown
|
page read and write
|
|
|
|
85F8000
|
unkown
|
page read and write
|
|
|
|
812D000
|
unkown
|
page read and write
|
|
|
|
8026000
|
unkown
|
page read and write
|
|
|
|
33B0000
|
unkown
|
page read and write
|
|
|
|
5B30000
|
stack
|
page read and write
|
|
|
|
8152000
|
unkown
|
page read and write
|
|
|
|
5C48000
|
unkown
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
810000
|
unkown image
|
page readonly
|
|
|
|
4B4000
|
heap private
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
8480000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
32C000
|
unkown
|
page read and write
|
|
|
|
4D8A000
|
stack
|
page read and write
|
|
|
|
80F0000
|
unkown
|
page read and write
|
|
|
|
5C1C000
|
unkown
|
page read and write
|
|
|
|
5057000
|
unkown
|
page read and write
|
|
|
|
80B1000
|
unkown
|
page read and write
|
|
|
|
11D000
|
heap default
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
5C09000
|
unkown
|
page read and write
|
|
|
|
3E5F000
|
stack
|
page read and write
|
|
|
|
7060000
|
heap private
|
page read and write
|
|
|
|
845A000
|
unkown
|
page read and write
|
|
|
|
550000
|
unkown image
|
page readonly
|
|
|
|
5CBE000
|
unkown
|
page read and write
|
|
|
|
5C2C000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
166000
|
unkown
|
page read and write
|
|
|
|
8120000
|
unkown
|
page read and write
|
|
|
|
2124000
|
unkown
|
page read and write
|
|
|
|
79FB000
|
unkown
|
page read and write
|
|
|
|
4EA0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
466000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
117000
|
heap default
|
page read and write
|
|
|
|
85DE000
|
unkown
|
page read and write
|
|
|
|
2220000
|
unkown image
|
page readonly
|
|
|
|
6FD0000
|
heap private
|
page read and write
|
|
|
|
4680000
|
unkown image
|
page readonly
|
|
|
|
8088000
|
unkown
|
page read and write
|
|
|
|
1DE0000
|
heap private
|
page read and write
|
|
|
|
8427000
|
unkown
|
page read and write
|
|
|
|
4EF0000
|
unkown
|
page read and write
|
|
|
|
6E84B000
|
unkown image
|
page read and write
|
|
|
|
670000
|
unkown image
|
page readonly
|
|
|
|
8456000
|
unkown
|
page read and write
|
|
|
|
5C0D000
|
unkown
|
page read and write
|
|
|
|
7A5D000
|
unkown
|
page read and write
|
|
|
|
7C44000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
7815000
|
unkown
|
page read and write
|
|
|
|
37B0000
|
unkown
|
page read and write
|
|
|
|
5220000
|
unkown image
|
page readonly
|
|
|
|
7915000
|
unkown
|
page read and write
|
|
|
|
787C000
|
unkown
|
page read and write
|
|
|
|
5C10000
|
unkown
|
page read and write
|
|
|
|
25A0000
|
unkown
|
page read and write
|
|
|
|
466000
|
unkown
|
page read and write
|
|
|
|
85AE000
|
unkown
|
page read and write
|
|
|
|
39F0000
|
unkown image
|
page readonly
|
|
|
|
58EE000
|
stack
|
page read and write
|
|
|
|
5CBA000
|
unkown
|
page read and write
|
|
|
|
2146000
|
unkown
|
page read and write
|
|
|
|
4500000
|
heap private
|
page read and write
|
|
|
|
17A000
|
unkown
|
page read and write
|
|
|
|
1F4000
|
unkown
|
page read and write
|
|
|
|
81AE000
|
unkown
|
page read and write
|
|
|
|
5C2E000
|
unkown
|
page read and write
|
|
|
|
368F000
|
stack
|
page read and write
|
|
|
|
5740000
|
heap private
|
page read and write
|
|
|
|
4EC0000
|
unkown
|
page read and write
|
|
|
|
5BF6000
|
unkown
|
page read and write
|
|
|
|
5C38000
|
unkown
|
page read and write
|
|
|
|
128000
|
heap default
|
page read and write
|
|
|
|
5C09000
|
unkown
|
page read and write
|
|
|
|
3043000
|
unkown
|
page read and write
|
|
|
|
5BBA000
|
unkown
|
page read and write
|
|
|
|
80CE000
|
unkown
|
page read and write
|
|
|
|
2140000
|
unkown
|
page read and write
|
|
|
|
819D000
|
unkown
|
page read and write
|
|
|
|
4EE0000
|
unkown
|
page read and write
|
|
|
|
8010000
|
unkown
|
page read and write
|
|
|
|
5C6C000
|
unkown
|
page read and write
|
|
|
|
16A000
|
heap default
|
page read and write
|
|
|
|
206000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
640000
|
unkown image
|
page readonly
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
5C07000
|
unkown
|
page read and write
|
|
|
|
7B3A000
|
unkown
|
page read and write
|
|
|
|
65300000
|
unkown image
|
page readonly
|
|
|
|
7C61000
|
unkown
|
page read and write
|
|
|
|
815B000
|
unkown
|
page read and write
|
|
|
|
5C25000
|
unkown
|
page read and write
|
|
|
|
460000
|
unkown
|
page read and write
|
|
|
|
7CC1000
|
unkown
|
page read and write
|
|
|
|
5C86000
|
unkown
|
page read and write
|
|
|
|
84B1000
|
unkown
|
page read and write
|
|
|
|
364000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
2E0000
|
unkown
|
page read and write
|
|
|
|
130000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
3790000
|
heap private
|
page read and write
|
|
|
|
7C8A000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
8584000
|
unkown
|
page read and write
|
|
|
|
352000
|
unkown
|
page read and write
|
|
|
|
315F000
|
stack
|
page read and write
|
|
|
|
16D000
|
unkown
|
page read and write
|
|
|
|
1C70000
|
unkown
|
page read and write
|
|
|
|
44AD000
|
stack
|
page read and write
|
|
|
|
5B1E000
|
stack
|
page read and write
|
|
|
|
7D1E000
|
stack
|
page read and write
|
|
|
|
1A0000
|
unkown image
|
page readonly
|
|
|
|
80E3000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page execute and read and write
|
|
|
|
325000
|
unkown
|
page read and write
|
|
|
|
2210000
|
unkown
|
page read and write
|
|
|
|
2DE000
|
heap default
|
page read and write
|
|
|
|
36E000
|
unkown
|
page read and write
|
|
|
|
5B8E000
|
unkown
|
page read and write
|
|
|
|
84CE000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
802F000
|
unkown
|
page read and write
|
|
|
|
7D7E000
|
unkown
|
page read and write
|
|
|
|
84E0000
|
heap private
|
page read and write
|
|
|
|
6E79000
|
unkown image
|
page readonly
|
|
|
|
452000
|
unkown
|
page read and write
|
|
|
|
7390000
|
unkown
|
page read and write
|
|
|
|
8096000
|
unkown
|
page read and write
|
|
|
|
4122000
|
unkown
|
page read and write
|
|
|
|
46F0000
|
unkown image
|
page readonly
|
|
|
|
8041000
|
unkown
|
page read and write
|
|
|
|
4C4000
|
heap default
|
page read and write
|
|
|
|
2689000
|
heap private
|
page read and write
|
|
|
|
6E854000
|
unkown image
|
page read and write
|
|
|
|
849F000
|
unkown
|
page read and write
|
|
|
|
8142000
|
unkown
|
page read and write
|
|
|
|
445000
|
unkown
|
page read and write
|
|
|
|
84AC000
|
unkown
|
page read and write
|
|
|
|
31A0000
|
unkown
|
page read and write
|
|
|
|
2090000
|
unkown image
|
page readonly
|
|
|
|
19C000
|
unkown
|
page read and write
|
|
|
|
5C46000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
4EC000
|
heap default
|
page read and write
|
|
|
|
422000
|
unkown
|
page read and write
|
|
|
|
1D6000
|
unkown
|
page read and write
|
|
|
|
79B1000
|
unkown
|
page read and write
|
|
|
|
5C34000
|
unkown
|
page read and write
|
|
|
|
85EB000
|
unkown
|
page read and write
|
|
|
|
1C0000
|
unkown
|
page read and write
|
|
|
|
1A7000
|
unkown
|
page read and write
|
|
|
|
5B66000
|
stack
|
page read and write
|
|
|
|
3030000
|
unkown
|
page read and write
|
|
|
|
59C0000
|
heap private
|
page read and write
|
|
|
|
85E2000
|
unkown
|
page read and write
|
|
|
|
506F000
|
unkown
|
page read and write
|
|
|
|
7E37000
|
unkown
|
page read and write
|
|
|
|
855F000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
800000
|
unkown image
|
page readonly
|
|
|
|
4EB0000
|
unkown
|
page read and write
|
|
|
|
E0000
|
heap default
|
page read and write
|
|
|
|
5CC9000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
7050000
|
unkown
|
page read and write
|
|
|
|
BD000
|
unkown
|
page read and write
|
|
|
|
5BF1000
|
unkown
|
page read and write
|
|
|
|
5AC8000
|
stack
|
page read and write
|
|
|
|
2270000
|
heap private
|
page read and write
|
|
|
|
3330000
|
unkown
|
page read and write
|
|
|
|
8438000
|
unkown
|
page read and write
|
|
|
|
3200000
|
unkown
|
page read and write
|
|
|
|
5C2C000
|
unkown
|
page read and write
|
|
|
|
2D6000
|
unkown
|
page read and write
|
|
|
|
30A000
|
unkown
|
page read and write
|
|
|
|
8028000
|
unkown
|
page read and write
|
|
|
|
3820000
|
unkown
|
page read and write
|
|
|
|
2620000
|
unkown
|
page read and write
|
|
|
|
7DCF000
|
heap private
|
page read and write
|
|
|
|
3350000
|
unkown
|
page read and write
|
|
|
|
20000
|
unkown image
|
page readonly
|
|
|
|
7064000
|
heap private
|
page read and write
|
|
|
|
6E801000
|
unkown image
|
page readonly
|
|
|
|
3A40000
|
unkown image
|
page readonly
|
|
|
|
195000
|
unkown
|
page read and write
|
|
|
|
8198000
|
unkown
|
page read and write
|
|
|
|
8531000
|
unkown
|
page read and write
|
|
|
|
316000
|
unkown
|
page read and write
|
|
|
|
3045000
|
unkown
|
page read and write
|
|
|
|
81DC000
|
unkown
|
page read and write
|
|
|
|
8441000
|
unkown
|
page read and write
|
|
|
|
4B0000
|
heap private
|
page read and write
|
|
|
|
4920000
|
unkown image
|
page readonly
|
|
|
|
25D0000
|
unkown
|
page read and write
|
|
|
|
37A5000
|
unkown
|
page read and write
|
|
|
|
3180000
|
unkown
|
page read and write
|
|
|
|
8598000
|
unkown
|
page read and write
|
|
|
|
5C00000
|
unkown
|
page read and write
|
|
|
|
57E0000
|
unkown image
|
page readonly
|
|
|
|
163000
|
heap default
|
page read and write
|
|
|
|
37A7000
|
unkown
|
page read and write
|
|
|
|
7BFB000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
5C07000
|
unkown
|
page read and write
|
|
|
|
3F3000
|
heap default
|
page read and write
|
|
|
|
6FC0000
|
unkown
|
page read and write
|
|
|
|
1C9000
|
unkown
|
page read and write
|
|
|
|
815F000
|
unkown
|
page read and write
|
|
|
|
1D6000
|
unkown
|
page read and write
|
|
|
|
84A8000
|
unkown
|
page read and write
|
|
|
|
8188000
|
unkown
|
page read and write
|
|
|
|
373000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
unkown
|
page read and write
|
|
|
|
1DA0000
|
unkown image
|
page readonly
|
|
|
|
40E000
|
unkown
|
page read and write
|
|
|
|
E7000
|
heap default
|
page read and write
|
|
|
|
30000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
5BF1000
|
unkown
|
page read and write
|
|
|
|
8080000
|
unkown
|
page read and write
|
|
|
|
849B000
|
unkown
|
page read and write
|
|
|
|
5BC2000
|
unkown
|
page read and write
|
|
|
|
425000
|
unkown
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
330F000
|
stack
|
page read and write
|
|
|
|
84F8000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
3388000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
37AE000
|
unkown
|
page read and write
|
|
|
|
41E000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
4330000
|
unkown
|
page read and write
|
|
|
|
44F0000
|
unkown
|
page read and write
|
|
|
|
3A7000
|
heap default
|
page read and write
|
|
|
|
5C72000
|
unkown
|
page read and write
|
|
|
|
430000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
660000
|
heap private
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
7D58000
|
unkown
|
page read and write
|
|
|
|
3392000
|
unkown
|
page read and write
|
|
|
|
2150000
|
unkown
|
page read and write
|
|
|
|
8467000
|
unkown
|
page read and write
|
|
|
|
5B70000
|
unkown
|
page read and write
|
|
|
|
809B000
|
unkown
|
page read and write
|
|
|
|
8046000
|
unkown
|
page read and write
|
|
|
|
664000
|
heap private
|
page read and write
|
|
|
|
5C8D000
|
unkown
|
page read and write
|
|
|
|
85AA000
|
unkown
|
page read and write
|
|
|
|
3A0000
|
unkown
|
page read and write
|
|
|
|
809F000
|
unkown
|
page read and write
|
|
|
|
360000
|
unkown
|
page read and write
|
|
|
|
81DE000
|
unkown
|
page read and write
|
|
|
|
6F25000
|
heap private
|
page read and write
|
|
|
|
3399000
|
unkown
|
page read and write
|
|
|
|
7BB7000
|
unkown
|
page read and write
|
|
|
|
5BED000
|
unkown
|
page read and write
|
|
|
|
3340000
|
unkown
|
page read and write
|
|
|
|
5B53000
|
stack
|
page read and write
|
|
|
|
4390000
|
unkown
|
page read and write
|
|
|
|
350C000
|
unkown
|
page read and write
|
|
|
|
8184000
|
unkown
|
page read and write
|
|
|
|
5C43000
|
unkown
|
page read and write
|
|
|
|
2685000
|
heap private
|
page read and write
|
|
|
|
2E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
80A8000
|
unkown
|
page read and write
|
|
|
|
2170000
|
unkown
|
page read and write
|
|
|
|
574000
|
heap private
|
page read and write
|
|
|
|
2640000
|
unkown
|
page read and write
|
|
|
|
384000
|
unkown
|
page read and write
|
|
|
|
805A000
|
unkown
|
page read and write
|
|
|
|
433000
|
unkown
|
page read and write
|
|
|
|
3310000
|
unkown
|
page read and write
|
|
|
|
450000
|
heap default
|
page read and write
|
|
|
|
3819000
|
unkown
|
page read and write
|
|
|
|
5AF0000
|
stack
|
page read and write
|
|
|
|
58F0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
810D000
|
unkown
|
page read and write
|
|
|
|
813F000
|
unkown
|
page read and write
|
|
|
|
3170000
|
unkown
|
page read and write
|
|
|
|
4EB0000
|
unkown
|
page read and write
|
|
|
|
2E0000
|
heap private
|
page read and write
|
|
|
|
4280000
|
heap private
|
page execute and read and write
|
|
|
|
7F6C000
|
unkown
|
page read and write
|
|
|
|
77F7000
|
unkown
|
page read and write
|
|
|
|
7190000
|
stack
|
page read and write
|
|
|
|
467C000
|
stack
|
page read and write
|
|
|
|
2110000
|
unkown
|
page read and write
|
|
|
|
1DB0000
|
unkown image
|
page readonly
|
|
|
|
5D30000
|
unkown
|
page read and write
|
|
|
|
5AA0000
|
stack
|
page read and write
|
|
|
|
2610000
|
unkown
|
page read and write
|
|
|
|
3320000
|
unkown
|
page read and write
|
|
|
|
8780000
|
heap private
|
page read and write
|
|
|
|
5B1A000
|
stack
|
page read and write
|
|
|
|
120000
|
unkown image
|
page readonly
|
|
|
|
5D2F000
|
unkown
|
page read and write
|
|
|
|
7EB0000
|
unkown
|
page read and write
|
|
|
|
853F000
|
unkown
|
page read and write
|
|
|
|
805B000
|
unkown
|
page read and write
|
|
|
|
6E0000
|
unkown image
|
page readonly
|
|
|
|
8073000
|
unkown
|
page read and write
|
|
|
|
2120000
|
unkown
|
page read and write
|
|
|
|
7FEFF1A0000
|
unkown
|
page execute read
|
|
|
|
8520000
|
unkown
|
page read and write
|
|
|
|
366000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
195000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
40A000
|
unkown
|
page read and write
|
|
|
|
4A0000
|
unkown
|
page read and write
|
|
|
|
870000
|
unkown image
|
page readonly
|
|
|
|
2D4000
|
heap private
|
page read and write
|
|
|
|
505F000
|
unkown
|
page read and write
|
|
|
|
3390000
|
unkown
|
page read and write
|
|
|
|
366000
|
unkown
|
page read and write
|
|
|
|
3395000
|
unkown
|
page read and write
|
|
|
|
80ED000
|
unkown
|
page read and write
|
|
|
|
110000
|
unkown
|
page read and write
|
|
|
|
4160000
|
unkown
|
page read and write
|
|
|
|
2FA000
|
heap default
|
page read and write
|
|
|
|
80A4000
|
unkown
|
page read and write
|
|
|
|
5C00000
|
unkown
|
page read and write
|
|
|
|
437000
|
unkown
|
page read and write
|
|
|
|
1D9E000
|
unkown
|
page read and write
|
|
|
|
E0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
460000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
2600000
|
unkown
|
page read and write
|
|
|
|
37AA000
|
unkown
|
page read and write
|
|
|
|
4100000
|
unkown
|
page read and write
|
|
|
|
300000
|
unkown
|
page read and write
|
|
|
|
5010000
|
unkown
|
page read and write
|
|
|
|
59B4000
|
heap private
|
page read and write
|
|
|
|
E9000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
8470000
|
unkown
|
page read and write
|
|
|
|
806B000
|
unkown
|
page read and write
|
|
|
|
2A0000
|
heap default
|
page read and write
|
|
|
|
214B000
|
heap private
|
page read and write
|
|
|
|
1D6000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
81E2000
|
unkown
|
page read and write
|
|
|
|
134000
|
heap private
|
page read and write
|
|
|
|
337000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
BAE000
|
stack
|
page read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
1D87000
|
unkown
|
page read and write
|
|
|
|
5BC4000
|
unkown
|
page read and write
|
|
|
|
861B000
|
unkown
|
page read and write
|
|
|
|
25C0000
|
unkown
|
page read and write
|
|
|
|
7D99000
|
heap private
|
page read and write
|
|
|
|
57D0000
|
unkown
|
page read and write
|
|
|
|
80DF000
|
unkown
|
page read and write
|
|
|
|
8496000
|
unkown
|
page read and write
|
|
|
|
31B0000
|
unkown
|
page read and write
|
|
|
|
8217000
|
unkown
|
page read and write
|
|
|
|
7FFFFFB2000
|
unkown image
|
page readonly
|
|
|
|
6FB0000
|
unkown
|
page read and write
|
|
|
|
6E74000
|
unkown image
|
page readonly
|
|
|
|
5B6000
|
unkown
|
page read and write
|
|
|
|
484000
|
unkown
|
page read and write
|
|
|
|
3FA000
|
heap default
|
page read and write
|
|
|
|
817F000
|
unkown
|
page read and write
|
|
|
|
1DC0000
|
unkown
|
page read and write
|
|
|
|
35E000
|
unkown
|
page read and write
|
|
|
|
7876000
|
unkown
|
page read and write
|
|
|
|
3DE000
|
heap default
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
333000
|
unkown
|
page read and write
|
|
|
|
48D7000
|
unkown image
|
page readonly
|
|
|
|
8036000
|
unkown
|
page read and write
|
|
|
|
42C000
|
unkown
|
page read and write
|
|
|
|
4870000
|
unkown image
|
page readonly
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
4C0000
|
unkown image
|
page readonly
|
|
|
|
5730000
|
unkown
|
page read and write
|
|
|
|
81A1000
|
unkown
|
page read and write
|
|
|
|
81D9000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
803C000
|
unkown
|
page read and write
|
|
|
|
7EFE0000
|
unkown image
|
page readonly
|
|
|
|
5D06000
|
unkown
|
page read and write
|
|
|
|
5BF6000
|
unkown
|
page read and write
|
|
|
|
410000
|
unkown
|
page read and write
|
|
|
|
8451000
|
unkown
|
page read and write
|
|
|
|
10000
|
unkown image
|
page read and write
|
|
|
|
846B000
|
unkown
|
page read and write
|
|
|
|
8022000
|
unkown
|
page read and write
|
|
|
|
5C03000
|
unkown
|
page read and write
|
|
|
|
5B62000
|
stack
|
page read and write
|
|
|
|
57C0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFD0000
|
unkown image
|
page readonly
|
|
|
|
C0000
|
unkown image
|
page readonly
|
|
|
|
40000
|
unkown image
|
page readonly
|
|
|
|
2D0000
|
heap private
|
page read and write
|
|
|
|
110000
|
unkown
|
page execute and read and write
|
|
|
|
7FFFFFB0000
|
unkown image
|
page readonly
|
|
|
|
E0000
|
unkown image
|
page read and write
|
|
|
|
190000
|
unkown
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
43A0000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC0000
|
unkown image
|
page readonly
|
|
|
|
17E000
|
unkown
|
page read and write
|
|
|
|
7D8D000
|
unkown
|
page read and write
|
|
|
|
8434000
|
unkown
|
page read and write
|
|
|
|
570000
|
heap private
|
page read and write
|
|
|
|
7DEF000
|
unkown
|
page read and write
|
|
|
|
7D90000
|
heap private
|
page read and write
|
|
|
|
1C2000
|
unkown
|
page read and write
|
|
|
|
290000
|
heap private
|
page read and write
|
|
|
|
1C4000
|
unkown
|
page read and write
|
|
|
|
5B50000
|
stack
|
page read and write
|
|
|
|
47C000
|
unkown
|
page read and write
|
|
|
|
5BED000
|
unkown
|
page read and write
|
|
|
|
4340000
|
unkown
|
page read and write
|
|
|
|
37C000
|
unkown
|
page read and write
|
|
|
|
4D90000
|
unkown
|
page read and write
|
|
|
|
78FF000
|
stack
|
page read and write
|
|
|
|
1D0000
|
unkown
|
page read and write
|
|
|
|
81F8000
|
unkown
|
page read and write
|
|
|
|
33F000
|
unkown
|
page read and write
|
|
|
|
8027000
|
unkown
|
page read and write
|
|
|
|
802C000
|
unkown
|
page read and write
|
|
|
|
30E000
|
unkown
|
page read and write
|
|
|
|
5BE7000
|
unkown
|
page read and write
|
|
|
|
3817000
|
heap private
|
page read and write
|
|
|
|
4D6000
|
unkown
|
page read and write
|
|
|
|
3360000
|
unkown
|
page read and write
|
|
|
|
506F000
|
unkown
|
page read and write
|
|
|
|
460000
|
unkown
|
page read and write
|
|
|
|
4A57000
|
unkown image
|
page readonly
|
|
|
|
85DC000
|
unkown
|
page read and write
|
|
|
|
8552000
|
unkown
|
page read and write
|
|
|
|
84A4000
|
unkown
|
page read and write
|
|
|
|
200B000
|
heap private
|
page read and write
|
|
|
|
5B60000
|
stack
|
page read and write
|
|
|
|
5407000
|
unkown image
|
page readonly
|
|
|
|
5AD0000
|
stack
|
page read and write
|
|
|
|
1EE0000
|
unkown image
|
page readonly
|
|
|
|
852D000
|
unkown
|
page read and write
|
|
|
|
37BC000
|
unkown
|
page read and write
|
|
|
|
5C1C000
|
unkown
|
page read and write
|
|
|
|
7AAE000
|
unkown
|
page read and write
|
|
|
|
85D9000
|
unkown
|
page read and write
|
|
|
|
812A000
|
unkown
|
page read and write
|
|
|
|
580000
|
unkown
|
page read and write
|
|
|
|
7FFFFFC2000
|
unkown image
|
page readonly
|
|
|
|
31E0000
|
unkown
|
page read and write
|
|
|
|
5C2E000
|
unkown
|
page read and write
|
|
|
|
841E000
|
unkown
|
page read and write
|
|
|
|
100000
|
unkown image
|
page readonly
|
|
|
|
F0000
|
unkown image
|
page read and write
|
|
|
|
787A000
|
unkown
|
page read and write
|
|
|
|
2D4000
|
unkown
|
page read and write
|
|
|
|
36C6000
|
unkown
|
page read and write
|
|
|
|
7E96000
|
unkown
|
page read and write
|
|
|
|
14E000
|
heap default
|
page read and write
|
|
|
|
7E9B000
|
unkown
|
page read and write
|
|
|
|
7FE5000
|
unkown
|
page read and write
|
|
|
|
F0000
|
unkown
|
page read and write
|
|
|
|
5BF8000
|
unkown
|
page read and write
|
|
|
|
85B2000
|
unkown
|
page read and write
|
|
|
|
5BB3000
|
unkown
|
page read and write
|
|
|
|
5D2F000
|
unkown
|
page read and write
|
|
|
|
3F75000
|
heap private
|
page read and write
|
|
|
|
521F000
|
stack
|
page read and write
|
|
|
|
3EC9000
|
heap private
|
page read and write
|
|
|
|
354000
|
unkown
|
page read and write
|
|
|
|
5D73000
|
unkown image
|
page read and write
|
|
There are 793 hidden memdumps, click here to show them.