Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
01885599.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\Users\user\AppData\Roaming\vbjjhwi
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Roaming\vbjjhwi:Zone.Identifier
|
ASCII text, with CRLF line terminators
|
modified
|
||
C:\Users\user\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat
|
JSON data
|
dropped
|
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\01885599.exe
|
C:\Users\user\Desktop\01885599.exe
|
||
C:\Users\user\Desktop\01885599.exe
|
C:\Users\user\Desktop\01885599.exe
|
||
C:\Windows\explorer.exe
|
C:\Windows\Explorer.EXE
|
||
C:\Users\user\AppData\Roaming\vbjjhwi
|
C:\Users\user\AppData\Roaming\vbjjhwi
|
||
C:\Users\user\AppData\Roaming\vbjjhwi
|
C:\Users\user\AppData\Roaming\vbjjhwi
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://host-file-host6.com/
|
194.50.153.68
|
||
http://host-host-file8.com/
|
|||
http://components.groove.net/Groove/Components/Root.osd?Package=net.groove.Groove.Tools.System.Groov
|
unknown
|
||
http://components.groove.net/Groove/Components/SystemComponents/SystemComponents.osd?Package=net.gro
|
unknown
|
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
host-file-host6.com
|
194.50.153.68
|
||
host-host-file8.com
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
194.50.153.68
|
host-file-host6.com
|
United Kingdom
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.zip\OpenWithProgids
|
Unpacker
|
||
HKEY_CURRENT_USER_Classes\Local Settings\MuiCache\f1\52C64B7E
|
@C:\Program Files (x86)\Common Files\Microsoft Shared\Office16\oregres.dll,-305
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.101
|
CheckSetting
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.102
|
CheckSetting
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance\Checks\{E8433B72-5842-4d43-8645-BC2C35960837}.check.100
|
CheckSetting
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Security and Maintenance
|
MessageTime
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
Zvpebfbsg.Jvaqbjf.FuryyRkcrevraprUbfg_pj5a1u2gklrjl!Ncc
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count
|
HRZR_PGYFRFFVBA
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
|
SlowContextMenuEntries
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3g2\OpenWithProgids
|
WMP11.AssocFile.3G2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp\OpenWithProgids
|
WMP11.AssocFile.3GP
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gp2\OpenWithProgids
|
WMP11.AssocFile.3G2
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.3gpp\OpenWithProgids
|
WMP11.AssocFile.3GP
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aac\OpenWithProgids
|
WMP11.AssocFile.ADTS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.adt\OpenWithProgids
|
WMP11.AssocFile.ADTS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.adts\OpenWithProgids
|
WMP11.AssocFile.ADTS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\OpenWithProgids
|
WMP11.AssocFile.AIFF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\OpenWithProgids
|
WMP11.AssocFile.AIFF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\OpenWithProgids
|
WMP11.AssocFile.AIFF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asf\OpenWithProgids
|
WMP11.AssocFile.ASF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\OpenWithProgids
|
WMP11.AssocFile.ASX
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\OpenWithProgids
|
WMP11.AssocFile.AU
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au3\OpenWithProgids
|
AutoIt3Script
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avi\OpenWithProgids
|
WMP11.AssocFile.AVI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\OpenWithProgids
|
Paint.Picture
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cab\OpenWithProgids
|
CABFolder
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cdxml\OpenWithProgids
|
Microsoft.PowerShellCmdletDefinitionXML.1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.contact\OpenWithProgids
|
contact_wab_auto_file
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.css\OpenWithProgids
|
CSSfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.csv\OpenWithProgids
|
Excel.CSV
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dds\OpenWithProgids
|
ddsfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\OpenWithProgids
|
Paint.Picture
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dll\OpenWithProgids
|
dllfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithProgids
|
Word.Document.8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docm\OpenWithProgids
|
Word.DocumentMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\OpenWithProgids
|
Word.Document.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dot\OpenWithProgids
|
Word.Template.8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotm\OpenWithProgids
|
Word.TemplateMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dotx\OpenWithProgids
|
Word.Template.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\OpenWithProgids
|
emffile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids
|
exefile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac\OpenWithProgids
|
WMP11.AssocFile.FLAC
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fon\OpenWithProgids
|
fonfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\OpenWithProgids
|
giffile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\OpenWithProgids
|
htmlfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithProgids
|
htmlfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\OpenWithProgids
|
icofile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\OpenWithProgids
|
inifile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\OpenWithProgids
|
pjpegfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\OpenWithProgids
|
jpegfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\OpenWithProgids
|
jpegfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithProgids
|
jpegfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jxr\OpenWithProgids
|
wdpfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithProgids
|
lnkfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1v\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2t\OpenWithProgids
|
WMP11.AssocFile.M2TS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2ts\OpenWithProgids
|
WMP11.AssocFile.M2TS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2v\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\OpenWithProgids
|
WMP11.AssocFile.m3u
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\OpenWithProgids
|
WMP11.AssocFile.M4A
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4v\OpenWithProgids
|
WMP11.AssocFile.MP4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\OpenWithProgids
|
mhtmlfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mhtml\OpenWithProgids
|
mhtmlfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\OpenWithProgids
|
WMP11.AssocFile.MIDI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\OpenWithProgids
|
WMP11.AssocFile.MIDI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MK3D\OpenWithProgids
|
WMP11.AssocFile.MK3D
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mka\OpenWithProgids
|
WMP11.AssocFile.MKA
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\OpenWithProgids
|
WMP11.AssocFile.MKV
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mod\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\OpenWithProgids
|
WMP11.AssocFile.MOV
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MP2\OpenWithProgids
|
WMP11.AssocFile.MP3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2v\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\OpenWithProgids
|
WMP11.AssocFile.MP3
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\OpenWithProgids
|
WMP11.AssocFile.MP4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4v\OpenWithProgids
|
WMP11.AssocFile.MP4
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MPE\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpeg\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpg\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv2\OpenWithProgids
|
WMP11.AssocFile.MPEG
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.msg\OpenWithProgids
|
Outlook.File.msg.15
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mts\OpenWithProgids
|
WMP11.AssocFile.M2TS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ocx\OpenWithProgids
|
ocxfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.odp\OpenWithProgids
|
PowerPoint.OpenDocumentPresentation.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ods\OpenWithProgids
|
Excel.OpenDocumentSpreadsheet.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.odt\OpenWithProgids
|
Word.OpenDocumentText.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.otf\OpenWithProgids
|
otffile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithProgids
|
pngfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pot\OpenWithProgids
|
PowerPoint.Template.8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potm\OpenWithProgids
|
PowerPoint.TemplateMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.potx\OpenWithProgids
|
PowerPoint.Template.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppam\OpenWithProgids
|
PowerPoint.Addin.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsm\OpenWithProgids
|
PowerPoint.SlideShowMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppsx\OpenWithProgids
|
PowerPoint.SlideShow.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\OpenWithProgids
|
PowerPoint.Show.8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptm\OpenWithProgids
|
PowerPoint.ShowMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\OpenWithProgids
|
PowerPoint.Show.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ps1xml\OpenWithProgids
|
Microsoft.PowerShellXMLData.1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pssc\OpenWithProgids
|
Microsoft.PowerShellSessionConfiguration.1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\OpenWithProgids
|
rlefile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\OpenWithProgids
|
WMP11.AssocFile.MIDI
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\OpenWithProgids
|
Word.RTF.8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.scf\OpenWithProgids
|
SHCmdFile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.search-ms\OpenWithProgids
|
SearchFolder
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldm\OpenWithProgids
|
PowerPoint.SlideMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sldx\OpenWithProgids
|
PowerPoint.Slide.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\OpenWithProgids
|
WMP11.AssocFile.AU
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sys\OpenWithProgids
|
sysfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\OpenWithProgids
|
TIFImage.Document
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\OpenWithProgids
|
TIFImage.Document
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TS\OpenWithProgids
|
WMP11.AssocFile.TTS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\OpenWithProgids
|
ttcfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\OpenWithProgids
|
ttffile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTS\OpenWithProgids
|
WMP11.AssocFile.TTS
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\OpenWithProgids
|
txtfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vsto\OpenWithProgids
|
bootstrap.vsto.1
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\OpenWithProgids
|
WMP11.AssocFile.WAV
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\OpenWithProgids
|
WMP11.AssocFile.WAX
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wdp\OpenWithProgids
|
wdpfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\OpenWithProgids
|
WMP11.AssocFile.ASF
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\OpenWithProgids
|
WMP11.AssocFile.WMA
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\OpenWithProgids
|
wmffile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmv\OpenWithProgids
|
WMP11.AssocFile.WMV
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\OpenWithProgids
|
WMP11.AssocFile.ASX
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.WPL\OpenWithProgids
|
WMP11.AssocFile.WPL
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\OpenWithProgids
|
WMP11.AssocFile.WVX
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlam\OpenWithProgids
|
Excel.AddInMacroEnabled
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\OpenWithProgids
|
Excel.Sheet.8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsb\OpenWithProgids
|
Excel.SheetBinaryMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsm\OpenWithProgids
|
Excel.SheetMacroEnabled.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\OpenWithProgids
|
Excel.Sheet.12
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlt\OpenWithProgids
|
Excel.Template.8
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xltm\OpenWithProgids
|
Excel.TemplateMacroEnabled
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xltx\OpenWithProgids
|
Excel.Template
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\OpenWithProgids
|
xmlfile
|
||
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xsl\OpenWithProgids
|
xslfile
|
There are 131 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
5A1000
|
unclassified section
|
page read and write
|
||
4A0000
|
direct allocation
|
page read and write
|
||
420000
|
direct allocation
|
page read and write
|
||
5B1000
|
unclassified section
|
page read and write
|
||
D401000
|
unkown
|
page read and write
|
||
8529000
|
unkown
|
page read and write
|
||
ABDF000
|
unkown
|
page read and write
|
||
D08A000
|
unkown
|
page read and write
|
||
7ACA000
|
unkown
|
page read and write
|
||
CFB6000
|
unkown
|
page read and write
|
||
7DF4F7830000
|
unkown
|
page readonly
|
||
D401000
|
unkown
|
page read and write
|
||
4417000
|
stack
|
page read and write
|
||
D554000
|
unkown
|
page read and write
|
||
1644F000
|
unkown
|
page read and write
|
||
16723000
|
unkown
|
page read and write
|
||
1658A000
|
unkown
|
page read and write
|
||
D56D000
|
unkown
|
page read and write
|
||
7DF4F78D1000
|
unkown
|
page execute read
|
||
4610000
|
unkown
|
page read and write
|
||
ABCA000
|
unkown
|
page read and write
|
||
7793000
|
unkown
|
page readonly
|
||
C120000
|
unkown
|
page read and write
|
||
D08A000
|
unkown
|
page read and write
|
||
18E1B800000
|
trusted library allocation
|
page read and write
|
||
D214000
|
unkown
|
page read and write
|
||
D36F000
|
unkown
|
page read and write
|
||
7FF5D20ED000
|
unkown
|
page readonly
|
||
7FF5DBE76000
|
unkown
|
page readonly
|
||
D31C000
|
unkown
|
page read and write
|
||
D3F0000
|
unkown
|
page read and write
|
||
167CE000
|
unkown
|
page read and write
|
||
16455000
|
unkown
|
page read and write
|
||
7FF5DBDB1000
|
unkown
|
page readonly
|
||
D371000
|
unkown
|
page read and write
|
||
7FF5DBB7D000
|
unkown
|
page readonly
|
||
85E000
|
stack
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
4BE0000
|
unkown
|
page read and write
|
||
40DA000
|
unkown
|
page read and write
|
||
D34A000
|
unkown
|
page read and write
|
||
D001000
|
unkown
|
page read and write
|
||
7DF4F7910000
|
unkown
|
page readonly
|
||
7DF4F7850000
|
unkown
|
page readonly
|
||
7DF4F7920000
|
unkown
|
page readonly
|
||
D2FE000
|
unkown
|
page read and write
|
||
163CD000
|
unkown
|
page read and write
|
||
16407000
|
unkown
|
page read and write
|
||
D410000
|
unkown
|
page read and write
|
||
FA45000
|
unkown
|
page read and write
|
||
7FF5DBC3C000
|
unkown
|
page readonly
|
||
AC51000
|
unkown
|
page read and write
|
||
16630000
|
unkown
|
page read and write
|
||
163F0000
|
unkown
|
page read and write
|
||
7DF4F7941000
|
unkown
|
page execute read
|
||
4C63000
|
unkown
|
page read and write
|
||
16433000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
16582000
|
unkown
|
page read and write
|
||
59F0000
|
unkown
|
page read and write
|
||
7A9F000
|
unkown
|
page read and write
|
||
7DF4F78B0000
|
unkown
|
page readonly
|
||
22C0000
|
unkown
|
page read and write
|
||
D444000
|
unkown
|
page read and write
|
||
8481000
|
unkown
|
page read and write
|
||
CFB6000
|
unkown
|
page read and write
|
||
166A9000
|
unkown
|
page read and write
|
||
D336000
|
unkown
|
page read and write
|
||
D539000
|
unkown
|
page read and write
|
||
167EA000
|
unkown
|
page read and write
|
||
856B000
|
unkown
|
page read and write
|
||
4630000
|
unkown
|
page read and write
|
||
940000
|
unkown
|
page read and write
|
||
1648B000
|
unkown
|
page read and write
|
||
7A9F000
|
unkown
|
page read and write
|
||
2D00000
|
unkown
|
page readonly
|
||
D148000
|
unkown
|
page read and write
|
||
49E000
|
stack
|
page read and write
|
||
16415000
|
unkown
|
page read and write
|
||
4D5000
|
stack
|
page read and write
|
||
D057000
|
unkown
|
page read and write
|
||
16733000
|
unkown
|
page read and write
|
||
D300000
|
unkown
|
page read and write
|
||
ABCA000
|
unkown
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
166B3000
|
unkown
|
page read and write
|
||
4613000
|
unkown
|
page read and write
|
||
7FF5DC00B000
|
unkown
|
page readonly
|
||
D406000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
4A20000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
167EA000
|
unkown
|
page read and write
|
||
40A0000
|
unkown
|
page read and write
|
||
D04E000
|
unkown
|
page read and write
|
||
7FF5DBD8A000
|
unkown
|
page readonly
|
||
D148000
|
unkown
|
page read and write
|
||
16723000
|
unkown
|
page read and write
|
||
D2F2000
|
unkown
|
page read and write
|
||
7B03000
|
unkown
|
page read and write
|
||
BC69000
|
stack
|
page read and write
|
||
7FF5DBB6E000
|
unkown
|
page readonly
|
||
22C0000
|
unkown
|
page read and write
|
||
F9C6000
|
unkown
|
page read and write
|
||
2C20000
|
unkown
|
page readonly
|
||
AC13000
|
unkown
|
page read and write
|
||
7DF4F7820000
|
unkown
|
page readonly
|
||
CEB4000
|
unkown
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
1669D000
|
unkown
|
page read and write
|
||
8465000
|
unkown
|
page read and write
|
||
AC3E000
|
unkown
|
page read and write
|
||
7FF5DBD9C000
|
unkown
|
page readonly
|
||
ABE5000
|
unkown
|
page read and write
|
||
7DF4F7901000
|
unkown
|
page execute read
|
||
B368000
|
stack
|
page read and write
|
||
D409000
|
unkown
|
page read and write
|
||
4110000
|
unkown
|
page read and write
|
||
2AD1000
|
unkown
|
page read and write
|
||
167C8000
|
unkown
|
page read and write
|
||
4B13000
|
unkown
|
page read and write
|
||
B4EC000
|
stack
|
page read and write
|
||
75D2000
|
unkown
|
page readonly
|
||
858E000
|
unkown
|
page read and write
|
||
8481000
|
unkown
|
page read and write
|
||
D364000
|
unkown
|
page read and write
|
||
1658E000
|
unkown
|
page read and write
|
||
AC58000
|
unkown
|
page read and write
|
||
7FF5DBF15000
|
unkown
|
page readonly
|
||
A2F000
|
stack
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
167D4000
|
unkown
|
page read and write
|
||
AC15000
|
unkown
|
page read and write
|
||
CE5E000
|
unkown
|
page read and write
|
||
ABE5000
|
unkown
|
page read and write
|
||
772C000
|
unkown
|
page readonly
|
||
16484000
|
unkown
|
page read and write
|
||
E9AC000
|
unkown
|
page read and write
|
||
D2F0000
|
unkown
|
page read and write
|
||
705E000
|
unkown
|
page readonly
|
||
479A000
|
stack
|
page read and write
|
||
4CB5000
|
unkown
|
page read and write
|
||
7FF5DBD7D000
|
unkown
|
page readonly
|
||
1644F000
|
unkown
|
page read and write
|
||
2A90000
|
unkown
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
167E0000
|
unkown
|
page read and write
|
||
7DF4F7860000
|
unkown
|
page readonly
|
||
ABCE000
|
unkown
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
167EE000
|
unkown
|
page read and write
|
||
D0E1000
|
unkown
|
page read and write
|
||
D004000
|
unkown
|
page read and write
|
||
D33F000
|
unkown
|
page read and write
|
||
4E90000
|
unkown
|
page read and write
|
||
7DF4F7921000
|
unkown
|
page execute read
|
||
7FF5DB9C3000
|
unkown
|
page readonly
|
||
EAFE000
|
stack
|
page read and write
|
||
7DF4F7910000
|
unkown
|
page readonly
|
||
7AE5000
|
unkown
|
page read and write
|
||
2AE5000
|
unkown
|
page read and write
|
||
8C0000
|
unkown
|
page readonly
|
||
1564B000
|
stack
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
164C3000
|
unkown
|
page read and write
|
||
18E1B830000
|
trusted library allocation
|
page read and write
|
||
D40F000
|
unkown
|
page read and write
|
||
D371000
|
unkown
|
page read and write
|
||
7DF4F7911000
|
unkown
|
page execute read
|
||
D2E0000
|
unkown
|
page read and write
|
||
16445000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
D12D000
|
unkown
|
page read and write
|
||
1673F000
|
unkown
|
page read and write
|
||
D385000
|
unkown
|
page read and write
|
||
7DF4F7910000
|
unkown
|
page readonly
|
||
16723000
|
unkown
|
page read and write
|
||
B6EA000
|
stack
|
page read and write
|
||
16738000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
4650000
|
unkown
|
page read and write
|
||
D2E8000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
D451000
|
unkown
|
page read and write
|
||
4240000
|
unkown
|
page read and write
|
||
AC28000
|
unkown
|
page read and write
|
||
4BD0000
|
unkown
|
page readonly
|
||
150CA000
|
stack
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
8177000
|
stack
|
page read and write
|
||
166A1000
|
unkown
|
page read and write
|
||
2151000
|
heap
|
page read and write
|
||
850C000
|
unkown
|
page read and write
|
||
167CC000
|
unkown
|
page read and write
|
||
5A2E000
|
unkown
|
page read and write
|
||
1689F000
|
unkown
|
page read and write
|
||
7A90000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
4C40000
|
unkown
|
page read and write
|
||
D406000
|
unkown
|
page read and write
|
||
20AF000
|
stack
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
7FF5DBE18000
|
unkown
|
page readonly
|
||
D378000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
166B1000
|
unkown
|
page read and write
|
||
D53E000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
D0E1000
|
unkown
|
page read and write
|
||
16475000
|
unkown
|
page read and write
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
7FF5DC051000
|
unkown
|
page readonly
|
||
16490000
|
unkown
|
page read and write
|
||
7FF5DBB85000
|
unkown
|
page readonly
|
||
7FF5DBEAB000
|
unkown
|
page readonly
|
||
7A9F000
|
unkown
|
page read and write
|
||
167F4000
|
unkown
|
page read and write
|
||
7DF4F78E0000
|
unkown
|
page readonly
|
||
4B05000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
42A000
|
unkown
|
page read and write
|
||
1673F000
|
unkown
|
page read and write
|
||
ABC4000
|
unkown
|
page read and write
|
||
CFBF000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
40EA000
|
unkown
|
page read and write
|
||
5A1C000
|
unkown
|
page read and write
|
||
D2EC000
|
unkown
|
page read and write
|
||
AC28000
|
unkown
|
page read and write
|
||
D214000
|
unkown
|
page read and write
|
||
54E000
|
stack
|
page read and write
|
||
D444000
|
unkown
|
page read and write
|
||
D2E0000
|
unkown
|
page read and write
|
||
D409000
|
unkown
|
page read and write
|
||
D3F6000
|
unkown
|
page read and write
|
||
167BA000
|
unkown
|
page read and write
|
||
D2EC000
|
unkown
|
page read and write
|
||
2520000
|
heap
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
AC10000
|
unkown
|
page read and write
|
||
7FF5DB9D4000
|
unkown
|
page readonly
|
||
40F0000
|
unkown
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
4B00000
|
unkown
|
page read and write
|
||
16475000
|
unkown
|
page read and write
|
||
852C000
|
unkown
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
4230000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
4653000
|
unkown
|
page read and write
|
||
BA69000
|
stack
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
7FF5DBF6F000
|
unkown
|
page readonly
|
||
16485000
|
unkown
|
page read and write
|
||
D302000
|
unkown
|
page read and write
|
||
D270000
|
unkown
|
page read and write
|
||
BCE7000
|
stack
|
page read and write
|
||
858E000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
D30C000
|
unkown
|
page read and write
|
||
852A000
|
unkown
|
page read and write
|
||
16439000
|
unkown
|
page read and write
|
||
D04E000
|
unkown
|
page read and write
|
||
167BA000
|
unkown
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
D239000
|
unkown
|
page read and write
|
||
167B8000
|
unkown
|
page read and write
|
||
2440000
|
heap
|
page read and write
|
||
420000
|
heap
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
1644F000
|
unkown
|
page read and write
|
||
16445000
|
unkown
|
page read and write
|
||
7FF5DC002000
|
unkown
|
page readonly
|
||
1650F000
|
unkown
|
page read and write
|
||
1648B000
|
unkown
|
page read and write
|
||
7FF5DB905000
|
unkown
|
page readonly
|
||
D559000
|
unkown
|
page read and write
|
||
1658A000
|
unkown
|
page read and write
|
||
1FB0000
|
heap
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
167E8000
|
unkown
|
page read and write
|
||
BCF000
|
stack
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
4B10000
|
unkown
|
page read and write
|
||
77BC000
|
unkown
|
page readonly
|
||
D08A000
|
unkown
|
page read and write
|
||
16455000
|
unkown
|
page read and write
|
||
7FF5DBFC9000
|
unkown
|
page readonly
|
||
D04E000
|
unkown
|
page read and write
|
||
7DF4F7920000
|
unkown
|
page readonly
|
||
167CC000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
7FF5DC062000
|
unkown
|
page readonly
|
||
164C4000
|
unkown
|
page read and write
|
||
D371000
|
unkown
|
page read and write
|
||
4B30000
|
unkown
|
page read and write
|
||
16733000
|
unkown
|
page read and write
|
||
E50000
|
unkown
|
page readonly
|
||
D007000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
16836000
|
unkown
|
page read and write
|
||
8504000
|
unkown
|
page read and write
|
||
D336000
|
unkown
|
page read and write
|
||
7FF5DBB66000
|
unkown
|
page readonly
|
||
ABDF000
|
unkown
|
page read and write
|
||
D444000
|
unkown
|
page read and write
|
||
D302000
|
unkown
|
page read and write
|
||
8233000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
D08A000
|
unkown
|
page read and write
|
||
AA6B000
|
stack
|
page read and write
|
||
D001000
|
unkown
|
page read and write
|
||
16733000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
5590000
|
heap
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
D2E8000
|
unkown
|
page read and write
|
||
D44E000
|
unkown
|
page read and write
|
||
D544000
|
unkown
|
page read and write
|
||
D348000
|
unkown
|
page read and write
|
||
D31C000
|
unkown
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
D4C0000
|
unkown
|
page read and write
|
||
7FF5DB9D2000
|
unkown
|
page readonly
|
||
8200000
|
unkown
|
page read and write
|
||
7FF5DBF55000
|
unkown
|
page readonly
|
||
7FF5DB97D000
|
unkown
|
page readonly
|
||
400000
|
unkown
|
page readonly
|
||
4C40000
|
unkown
|
page read and write
|
||
7A99000
|
unkown
|
page read and write
|
||
D2EC000
|
unkown
|
page read and write
|
||
42A000
|
unkown
|
page read and write
|
||
AB91000
|
unkown
|
page read and write
|
||
167E8000
|
unkown
|
page read and write
|
||
EBB0000
|
unkown
|
page read and write
|
||
D302000
|
unkown
|
page read and write
|
||
167EE000
|
unkown
|
page read and write
|
||
7FF5DBCB5000
|
unkown
|
page readonly
|
||
2A70000
|
unkown
|
page readonly
|
||
4676000
|
unkown
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
85BC000
|
unkown
|
page read and write
|
||
8453000
|
unkown
|
page read and write
|
||
8513000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
A6C000
|
heap
|
page read and write
|
||
D30C000
|
unkown
|
page read and write
|
||
167AB000
|
unkown
|
page read and write
|
||
8508000
|
unkown
|
page read and write
|
||
153C8000
|
stack
|
page read and write
|
||
CD6A000
|
stack
|
page read and write
|
||
D53E000
|
unkown
|
page read and write
|
||
AC15000
|
unkown
|
page read and write
|
||
28BD000
|
unkown
|
page read and write
|
||
1648F000
|
unkown
|
page read and write
|
||
7DF4F78C1000
|
unkown
|
page execute read
|
||
AC0000
|
unkown
|
page readonly
|
||
910000
|
heap
|
page read and write
|
||
166A4000
|
unkown
|
page read and write
|
||
47D3000
|
unkown
|
page read and write
|
||
84D8000
|
unkown
|
page read and write
|
||
D34F000
|
unkown
|
page read and write
|
||
4640000
|
unkown
|
page read and write
|
||
4B35000
|
unkown
|
page read and write
|
||
D2A3000
|
unkown
|
page read and write
|
||
D304000
|
unkown
|
page read and write
|
||
6B8000
|
heap
|
page execute and read and write
|
||
84D8000
|
unkown
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
4620000
|
unkown
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
D4D0000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
7DF4F78F1000
|
unkown
|
page execute read
|
||
16407000
|
unkown
|
page read and write
|
||
84C4000
|
unkown
|
page read and write
|
||
7FF5DC144000
|
unkown
|
page readonly
|
||
1751C000
|
stack
|
page read and write
|
||
7FF5DBA47000
|
unkown
|
page readonly
|
||
167AB000
|
unkown
|
page read and write
|
||
166A9000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
8394000
|
unkown
|
page read and write
|
||
7A98000
|
unkown
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
D2F4000
|
unkown
|
page read and write
|
||
D300000
|
unkown
|
page read and write
|
||
47D0000
|
unkown
|
page read and write
|
||
D2EA000
|
unkown
|
page read and write
|
||
D54C000
|
unkown
|
page read and write
|
||
D006000
|
unkown
|
page read and write
|
||
7FF883751000
|
unkown
|
page execute read
|
||
7DF4F7831000
|
unkown
|
page execute read
|
||
16455000
|
unkown
|
page read and write
|
||
7DF4F7931000
|
unkown
|
page execute read
|
||
7062000
|
unkown
|
page readonly
|
||
7DF4F78B1000
|
unkown
|
page execute read
|
||
1686A000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
84FD000
|
unkown
|
page read and write
|
||
47B0000
|
unkown
|
page read and write
|
||
2970000
|
unkown
|
page read and write
|
||
4C30000
|
unkown
|
page read and write
|
||
7862000
|
unkown
|
page readonly
|
||
8465000
|
unkown
|
page read and write
|
||
5A2E000
|
unkown
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
7DF4F7851000
|
unkown
|
page execute read
|
||
753F000
|
unkown
|
page readonly
|
||
4A30000
|
unkown
|
page read and write
|
||
D549000
|
unkown
|
page read and write
|
||
D539000
|
unkown
|
page read and write
|
||
7A98000
|
unkown
|
page read and write
|
||
6813000
|
unkown
|
page read and write
|
||
16738000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
1640B000
|
unkown
|
page read and write
|
||
CF27000
|
unkown
|
page read and write
|
||
4E70000
|
unkown
|
page read and write
|
||
166B3000
|
unkown
|
page read and write
|
||
7FF8838EC000
|
unkown
|
page read and write
|
||
7DE000
|
stack
|
page read and write
|
||
D56E000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
164B5000
|
unkown
|
page read and write
|
||
AC51000
|
unkown
|
page read and write
|
||
D2F0000
|
unkown
|
page read and write
|
||
430000
|
unkown
|
page read and write
|
||
7A9B000
|
unkown
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
42A0000
|
unkown
|
page read and write
|
||
ABDF000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
CF86000
|
unkown
|
page read and write
|
||
7A98000
|
unkown
|
page read and write
|
||
2A3C000
|
stack
|
page read and write
|
||
166AF000
|
unkown
|
page read and write
|
||
166A5000
|
unkown
|
page read and write
|
||
670000
|
unkown
|
page readonly
|
||
7FF5DB909000
|
unkown
|
page readonly
|
||
CCF000
|
stack
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
D2FC000
|
unkown
|
page read and write
|
||
167D0000
|
unkown
|
page read and write
|
||
7DF4F7880000
|
unkown
|
page readonly
|
||
4E70000
|
unkown
|
page read and write
|
||
7837000
|
unkown
|
page readonly
|
||
7FF8838EE000
|
unkown
|
page read and write
|
||
F37F000
|
stack
|
page read and write
|
||
E1EA000
|
stack
|
page read and write
|
||
D54E000
|
unkown
|
page read and write
|
||
D216000
|
unkown
|
page read and write
|
||
D2BD000
|
unkown
|
page read and write
|
||
848F000
|
unkown
|
page read and write
|
||
47D0000
|
unkown
|
page read and write
|
||
166AF000
|
unkown
|
page read and write
|
||
4210000
|
unkown
|
page read and write
|
||
D32F000
|
unkown
|
page read and write
|
||
166B1000
|
unkown
|
page read and write
|
||
4623000
|
unkown
|
page read and write
|
||
D2EE000
|
unkown
|
page read and write
|
||
B268000
|
stack
|
page read and write
|
||
7FF5DB95E000
|
unkown
|
page readonly
|
||
7FF5DBDD6000
|
unkown
|
page readonly
|
||
27BE000
|
stack
|
page read and write
|
||
7FF5DB9F8000
|
unkown
|
page readonly
|
||
7A9F000
|
unkown
|
page read and write
|
||
7DF4F7890000
|
unkown
|
page readonly
|
||
4A30000
|
unkown
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
7FF5DBCC1000
|
unkown
|
page readonly
|
||
810000
|
heap
|
page read and write
|
||
D148000
|
unkown
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
D302000
|
unkown
|
page read and write
|
||
F942000
|
unkown
|
page read and write
|
||
47B0000
|
unkown
|
page read and write
|
||
4C83000
|
unkown
|
page read and write
|
||
ABD2000
|
unkown
|
page read and write
|
||
8216000
|
unkown
|
page read and write
|
||
167E8000
|
unkown
|
page read and write
|
||
1650F000
|
unkown
|
page read and write
|
||
D276000
|
unkown
|
page read and write
|
||
5A2E000
|
unkown
|
page read and write
|
||
CFBC000
|
unkown
|
page read and write
|
||
164D5000
|
unkown
|
page read and write
|
||
2B50000
|
unkown
|
page read and write
|
||
7DF4F78C1000
|
unkown
|
page execute read
|
||
8213000
|
unkown
|
page read and write
|
||
8504000
|
unkown
|
page read and write
|
||
167D2000
|
unkown
|
page read and write
|
||
D409000
|
unkown
|
page read and write
|
||
8B0000
|
heap
|
page read and write
|
||
16484000
|
unkown
|
page read and write
|
||
7FF5DB913000
|
unkown
|
page readonly
|
||
CFB1000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
D336000
|
unkown
|
page read and write
|
||
7FF8838E5000
|
unkown
|
page read and write
|
||
D304000
|
unkown
|
page read and write
|
||
D304000
|
unkown
|
page read and write
|
||
D006000
|
unkown
|
page read and write
|
||
1673F000
|
unkown
|
page read and write
|
||
2E18000
|
stack
|
page read and write
|
||
16484000
|
unkown
|
page read and write
|
||
D2E2000
|
unkown
|
page read and write
|
||
7FF5DBCC9000
|
unkown
|
page readonly
|
||
D336000
|
unkown
|
page read and write
|
||
1689F000
|
unkown
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
8465000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
167D4000
|
unkown
|
page read and write
|
||
D2FA000
|
unkown
|
page read and write
|
||
167E6000
|
unkown
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
E9A6000
|
unkown
|
page read and write
|
||
763A000
|
unkown
|
page readonly
|
||
167C4000
|
unkown
|
page read and write
|
||
7FF5DB90E000
|
unkown
|
page readonly
|
||
7FF5DBF0F000
|
unkown
|
page readonly
|
||
D40F000
|
unkown
|
page read and write
|
||
7A95000
|
unkown
|
page read and write
|
||
8296000
|
unkown
|
page read and write
|
||
1682D000
|
unkown
|
page read and write
|
||
D300000
|
unkown
|
page read and write
|
||
75C4000
|
unkown
|
page readonly
|
||
42BA000
|
unkown
|
page read and write
|
||
4D4000
|
heap
|
page read and write
|
||
7FF5DC093000
|
unkown
|
page readonly
|
||
AAD000
|
heap
|
page read and write
|
||
D21E000
|
unkown
|
page read and write
|
||
D3FD000
|
unkown
|
page read and write
|
||
670000
|
unkown
|
page readonly
|
||
D32A000
|
unkown
|
page read and write
|
||
7A9F000
|
unkown
|
page read and write
|
||
D344000
|
unkown
|
page read and write
|
||
900000
|
unkown
|
page readonly
|
||
2A50000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
167D0000
|
unkown
|
page read and write
|
||
1669D000
|
unkown
|
page read and write
|
||
5A2E000
|
unkown
|
page read and write
|
||
16445000
|
unkown
|
page read and write
|
||
849B000
|
unkown
|
page read and write
|
||
844A000
|
unkown
|
page read and write
|
||
8244000
|
unkown
|
page read and write
|
||
7A9F000
|
unkown
|
page read and write
|
||
D504000
|
unkown
|
page read and write
|
||
792B000
|
stack
|
page read and write
|
||
167D0000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
7DF4F7931000
|
unkown
|
page execute read
|
||
6FF000
|
stack
|
page read and write
|
||
848F000
|
unkown
|
page read and write
|
||
AB82000
|
unkown
|
page read and write
|
||
4B10000
|
unkown
|
page read and write
|
||
D3F6000
|
unkown
|
page read and write
|
||
167C4000
|
unkown
|
page read and write
|
||
D554000
|
unkown
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
164C4000
|
unkown
|
page read and write
|
||
7508000
|
unkown
|
page readonly
|
||
7FF8838F3000
|
unkown
|
page readonly
|
||
16738000
|
unkown
|
page read and write
|
||
ABCE000
|
unkown
|
page read and write
|
||
D239000
|
unkown
|
page read and write
|
||
7FF5DBFF7000
|
unkown
|
page readonly
|
||
16471000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
167D0000
|
unkown
|
page read and write
|
||
2373000
|
heap
|
page read and write
|
||
18E1A997000
|
heap
|
page read and write
|
||
2D10000
|
unkown
|
page read and write
|
||
16455000
|
unkown
|
page read and write
|
||
8509000
|
unkown
|
page read and write
|
||
7FF5DC054000
|
unkown
|
page readonly
|
||
AC15000
|
unkown
|
page read and write
|
||
4B20000
|
unkown
|
page read and write
|
||
84CC000
|
unkown
|
page read and write
|
||
676E000
|
stack
|
page read and write
|
||
154CC000
|
stack
|
page read and write
|
||
7AA2000
|
unkown
|
page read and write
|
||
856B000
|
unkown
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
16475000
|
unkown
|
page read and write
|
||
18E1A960000
|
trusted library allocation
|
page read and write
|
||
D31C000
|
unkown
|
page read and write
|
||
D359000
|
unkown
|
page read and write
|
||
7FF5DBEEF000
|
unkown
|
page readonly
|
||
F8C4000
|
unkown
|
page read and write
|
||
167CC000
|
unkown
|
page read and write
|
||
1EA6000
|
heap
|
page read and write
|
||
84CC000
|
unkown
|
page read and write
|
||
AAEA000
|
stack
|
page read and write
|
||
4B20000
|
unkown
|
page read and write
|
||
7A98000
|
unkown
|
page read and write
|
||
7FF5DC134000
|
unkown
|
page readonly
|
||
7DF4F78E1000
|
unkown
|
page execute read
|
||
4B00000
|
unkown
|
page read and write
|
||
1648B000
|
unkown
|
page read and write
|
||
DCA7000
|
stack
|
page read and write
|
||
166B1000
|
unkown
|
page read and write
|
||
7A90000
|
unkown
|
page read and write
|
||
7DF4F7911000
|
unkown
|
page execute read
|
||
D54E000
|
unkown
|
page read and write
|
||
D2D5000
|
unkown
|
page read and write
|
||
1640B000
|
unkown
|
page read and write
|
||
8235000
|
unkown
|
page read and write
|
||
856B000
|
unkown
|
page read and write
|
||
167C6000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
1640B000
|
unkown
|
page read and write
|
||
B1EF000
|
stack
|
page read and write
|
||
7FF5DB9FB000
|
unkown
|
page readonly
|
||
1658F000
|
unkown
|
page read and write
|
||
16455000
|
unkown
|
page read and write
|
||
8519000
|
unkown
|
page read and write
|
||
4B0000
|
unclassified section
|
page read and write
|
||
D3FD000
|
unkown
|
page read and write
|
||
2360000
|
unkown
|
page readonly
|
||
4620000
|
unkown
|
page read and write
|
||
D549000
|
unkown
|
page read and write
|
||
D33C000
|
unkown
|
page read and write
|
||
167D6000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
D148000
|
unkown
|
page read and write
|
||
42A000
|
unkown
|
page write copy
|
||
D3F6000
|
unkown
|
page read and write
|
||
BD67000
|
stack
|
page read and write
|
||
D378000
|
unkown
|
page read and write
|
||
D27A000
|
unkown
|
page read and write
|
||
D348000
|
unkown
|
page read and write
|
||
4E6A000
|
stack
|
page read and write
|
||
4E80000
|
unkown
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
54F0000
|
unkown
|
page readonly
|
||
7A71000
|
unkown
|
page read and write
|
||
18E1A970000
|
trusted library allocation
|
page read and write
|
||
7EFB000
|
stack
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
D2AA000
|
unkown
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
7FF5DBC7C000
|
unkown
|
page readonly
|
||
1FA0000
|
heap
|
page read and write
|
||
164F3000
|
unkown
|
page read and write
|
||
CFD8000
|
unkown
|
page read and write
|
||
D12D000
|
unkown
|
page read and write
|
||
16415000
|
unkown
|
page read and write
|
||
1682D000
|
unkown
|
page read and write
|
||
167D0000
|
unkown
|
page read and write
|
||
7AE4000
|
unkown
|
page read and write
|
||
AC3E000
|
unkown
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
D148000
|
unkown
|
page read and write
|
||
22CF000
|
stack
|
page read and write
|
||
5C6C000
|
stack
|
page read and write
|
||
751E000
|
unkown
|
page readonly
|
||
9C8000
|
heap
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
1657C000
|
unkown
|
page read and write
|
||
D2E2000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
7A9B000
|
unkown
|
page read and write
|
||
D239000
|
unkown
|
page read and write
|
||
1650D000
|
unkown
|
page read and write
|
||
D3F0000
|
unkown
|
page read and write
|
||
D2E6000
|
unkown
|
page read and write
|
||
1658E000
|
unkown
|
page read and write
|
||
896B000
|
stack
|
page read and write
|
||
D20D000
|
unkown
|
page read and write
|
||
D567000
|
unkown
|
page read and write
|
||
84EA000
|
unkown
|
page read and write
|
||
16455000
|
unkown
|
page read and write
|
||
858E000
|
unkown
|
page read and write
|
||
452C000
|
stack
|
page read and write
|
||
5B0D1FC000
|
stack
|
page read and write
|
||
84D8000
|
unkown
|
page read and write
|
||
4ACB000
|
unkown
|
page read and write
|
||
D214000
|
unkown
|
page read and write
|
||
28DD000
|
unkown
|
page read and write
|
||
47A0000
|
unkown
|
page readonly
|
||
CD70000
|
unkown
|
page read and write
|
||
7FF5DC0C8000
|
unkown
|
page readonly
|
||
7FF5DC005000
|
unkown
|
page readonly
|
||
167B8000
|
unkown
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
F94B000
|
unkown
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
7FF5DBC20000
|
unkown
|
page readonly
|
||
166A1000
|
unkown
|
page read and write
|
||
16481000
|
unkown
|
page read and write
|
||
80FB000
|
stack
|
page read and write
|
||
4EB0000
|
unkown
|
page read and write
|
||
7DF4F78D1000
|
unkown
|
page execute read
|
||
430000
|
heap
|
page read and write
|
||
47B0000
|
unkown
|
page read and write
|
||
4C60000
|
unkown
|
page read and write
|
||
8471000
|
unkown
|
page read and write
|
||
167AB000
|
unkown
|
page read and write
|
||
BDE9000
|
stack
|
page read and write
|
||
D304000
|
unkown
|
page read and write
|
||
8509000
|
unkown
|
page read and write
|
||
4B30000
|
unkown
|
page read and write
|
||
D239000
|
unkown
|
page read and write
|
||
D410000
|
unkown
|
page read and write
|
||
D2E8000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
167CC000
|
unkown
|
page read and write
|
||
844A000
|
unkown
|
page read and write
|
||
1640B000
|
unkown
|
page read and write
|
||
4090000
|
unkown
|
page read and write
|
||
16471000
|
unkown
|
page read and write
|
||
D567000
|
unkown
|
page read and write
|
||
167BA000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
42A000
|
unkown
|
page write copy
|
||
810000
|
unkown
|
page readonly
|
||
28A0000
|
unkown
|
page read and write
|
||
4324000
|
unkown
|
page read and write
|
||
ABF9000
|
unkown
|
page read and write
|
||
7B16000
|
unkown
|
page read and write
|
||
D2F8000
|
unkown
|
page read and write
|
||
D12D000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
7A9F000
|
unkown
|
page read and write
|
||
84D5000
|
unkown
|
page read and write
|
||
D378000
|
unkown
|
page read and write
|
||
820000
|
direct allocation
|
page execute and read and write
|
||
781C000
|
unkown
|
page readonly
|
||
2A50000
|
unkown
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
B2EC000
|
stack
|
page read and write
|
||
167E2000
|
unkown
|
page read and write
|
||
D2FC000
|
unkown
|
page read and write
|
||
CFD7000
|
unkown
|
page read and write
|
||
2949000
|
unkown
|
page read and write
|
||
167C4000
|
unkown
|
page read and write
|
||
D2F8000
|
unkown
|
page read and write
|
||
D2A7000
|
unkown
|
page read and write
|
||
D383000
|
unkown
|
page read and write
|
||
7DF4F7920000
|
unkown
|
page readonly
|
||
4E93000
|
unkown
|
page read and write
|
||
D21E000
|
unkown
|
page read and write
|
||
1647D000
|
unkown
|
page read and write
|
||
CFB1000
|
unkown
|
page read and write
|
||
167B8000
|
unkown
|
page read and write
|
||
167C8000
|
unkown
|
page read and write
|
||
D2FC000
|
unkown
|
page read and write
|
||
46C0000
|
unkown
|
page read and write
|
||
8501000
|
unkown
|
page read and write
|
||
7DF4F7841000
|
unkown
|
page execute read
|
||
47C0000
|
unkown
|
page read and write
|
||
E9B4000
|
unkown
|
page read and write
|
||
850000
|
heap
|
page read and write
|
||
8511000
|
unkown
|
page read and write
|
||
7FF5DBC82000
|
unkown
|
page readonly
|
||
CFB6000
|
unkown
|
page read and write
|
||
4C90000
|
unkown
|
page read and write
|
||
76C5000
|
unkown
|
page readonly
|
||
D2EA000
|
unkown
|
page read and write
|
||
166A4000
|
unkown
|
page read and write
|
||
7FF5DC158000
|
unkown
|
page readonly
|
||
D2D5000
|
unkown
|
page read and write
|
||
167DE000
|
unkown
|
page read and write
|
||
16445000
|
unkown
|
page read and write
|
||
1669A000
|
unkown
|
page read and write
|
||
8471000
|
unkown
|
page read and write
|
||
16738000
|
unkown
|
page read and write
|
||
7FF5DBC96000
|
unkown
|
page readonly
|
||
163D0000
|
unkown
|
page read and write
|
||
7FF5DBF51000
|
unkown
|
page readonly
|
||
16723000
|
unkown
|
page read and write
|
||
858E000
|
unkown
|
page read and write
|
||
856B000
|
unkown
|
page read and write
|
||
1F0000
|
heap
|
page read and write
|
||
16439000
|
unkown
|
page read and write
|
||
CF52000
|
unkown
|
page read and write
|
||
84C4000
|
unkown
|
page read and write
|
||
18E1A770000
|
heap
|
page read and write
|
||
1640B000
|
unkown
|
page read and write
|
||
7FF5DBEBD000
|
unkown
|
page readonly
|
||
7DF4F7911000
|
unkown
|
page execute read
|
||
D56E000
|
unkown
|
page read and write
|
||
5B0CD9B000
|
stack
|
page read and write
|
||
4C90000
|
unkown
|
page read and write
|
||
CF13000
|
unkown
|
page read and write
|
||
AC58000
|
unkown
|
page read and write
|
||
D406000
|
unkown
|
page read and write
|
||
D2FE000
|
unkown
|
page read and write
|
||
16407000
|
unkown
|
page read and write
|
||
7DF4F7931000
|
unkown
|
page execute read
|
||
6858000
|
unkown
|
page read and write
|
||
7FF5DB976000
|
unkown
|
page readonly
|
||
7FF5DB9CE000
|
unkown
|
page readonly
|
||
167B8000
|
unkown
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
D406000
|
unkown
|
page read and write
|
||
84EA000
|
unkown
|
page read and write
|
||
4DEE000
|
stack
|
page read and write
|
||
16445000
|
unkown
|
page read and write
|
||
4070000
|
unkown
|
page readonly
|
||
166B1000
|
unkown
|
page read and write
|
||
CF23000
|
unkown
|
page read and write
|
||
166A1000
|
unkown
|
page read and write
|
||
7FF5DBE7E000
|
unkown
|
page readonly
|
||
822F000
|
unkown
|
page read and write
|
||
4E90000
|
unkown
|
page read and write
|
||
7FF5DC14D000
|
unkown
|
page readonly
|
||
5710000
|
unkown
|
page read and write
|
||
7FF5DBBE3000
|
unkown
|
page readonly
|
||
D33E000
|
unkown
|
page read and write
|
||
AC10000
|
unkown
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
46D0000
|
unkown
|
page write copy
|
||
D11A000
|
unkown
|
page read and write
|
||
D378000
|
unkown
|
page read and write
|
||
D30C000
|
unkown
|
page read and write
|
||
45AC000
|
stack
|
page read and write
|
||
7FF5DBC17000
|
unkown
|
page readonly
|
||
164C4000
|
unkown
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
7FF5DBD20000
|
unkown
|
page readonly
|
||
D2CB000
|
unkown
|
page read and write
|
||
5EB000
|
heap
|
page read and write
|
||
8494000
|
unkown
|
page read and write
|
||
D546000
|
unkown
|
page read and write
|
||
1574F000
|
stack
|
page read and write
|
||
43B000
|
heap
|
page read and write
|
||
16415000
|
unkown
|
page read and write
|
||
852D000
|
unkown
|
page read and write
|
||
8260000
|
unkown
|
page read and write
|
||
8A0000
|
unkown
|
page readonly
|
||
47C0000
|
unkown
|
page read and write
|
||
7A9B000
|
unkown
|
page read and write
|
||
1658E000
|
unkown
|
page read and write
|
||
7FF5DBF27000
|
unkown
|
page readonly
|
||
7F0000
|
direct allocation
|
page execute and read and write
|
||
D544000
|
unkown
|
page read and write
|
||
7FF5DBC34000
|
unkown
|
page readonly
|
||
16439000
|
unkown
|
page read and write
|
||
D2E6000
|
unkown
|
page read and write
|
||
D383000
|
unkown
|
page read and write
|
||
82BF000
|
unkown
|
page read and write
|
||
4630000
|
unkown
|
page read and write
|
||
7DF4F7911000
|
unkown
|
page execute read
|
||
D2F8000
|
unkown
|
page read and write
|
||
167D0000
|
unkown
|
page read and write
|
||
1669A000
|
unkown
|
page read and write
|
||
7FF5DBF8F000
|
unkown
|
page readonly
|
||
16431000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
D2CB000
|
unkown
|
page read and write
|
||
1673F000
|
unkown
|
page read and write
|
||
7FF5DBB7F000
|
unkown
|
page readonly
|
||
D159000
|
unkown
|
page read and write
|
||
5E0000
|
unkown
|
page readonly
|
||
7FF5DC11F000
|
unkown
|
page readonly
|
||
D12D000
|
unkown
|
page read and write
|
||
16488000
|
unkown
|
page read and write
|
||
7AE4000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
2241000
|
heap
|
page read and write
|
||
4B33000
|
unkown
|
page read and write
|
||
D21D000
|
unkown
|
page read and write
|
||
7B16000
|
unkown
|
page read and write
|
||
AC00000
|
unkown
|
page read and write
|
||
16484000
|
unkown
|
page read and write
|
||
2810000
|
unkown
|
page readonly
|
||
2CE0000
|
unkown
|
page readonly
|
||
D2AE000
|
unkown
|
page read and write
|
||
D44E000
|
unkown
|
page read and write
|
||
858E000
|
unkown
|
page read and write
|
||
16490000
|
unkown
|
page read and write
|
||
4C50000
|
unkown
|
page read and write
|
||
167C6000
|
unkown
|
page read and write
|
||
7FF5DB9E6000
|
unkown
|
page readonly
|
||
B167000
|
stack
|
page read and write
|
||
1673F000
|
unkown
|
page read and write
|
||
CFBC000
|
unkown
|
page read and write
|
||
4E90000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
167C6000
|
unkown
|
page read and write
|
||
7FF5DC060000
|
unkown
|
page readonly
|
||
4C90000
|
unkown
|
page read and write
|
||
CDC8000
|
unkown
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
167C6000
|
unkown
|
page read and write
|
||
167C4000
|
unkown
|
page read and write
|
||
705B000
|
unkown
|
page readonly
|
||
D66D000
|
stack
|
page read and write
|
||
7FF5DC128000
|
unkown
|
page readonly
|
||
16475000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
D445000
|
unkown
|
page read and write
|
||
D401000
|
unkown
|
page read and write
|
||
D2F6000
|
unkown
|
page read and write
|
||
CFD7000
|
unkown
|
page read and write
|
||
D2F6000
|
unkown
|
page read and write
|
||
16433000
|
unkown
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
7ADD000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
A9E7000
|
stack
|
page read and write
|
||
2870000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
7FF5DB9E4000
|
unkown
|
page readonly
|
||
D20D000
|
unkown
|
page read and write
|
||
CF2B000
|
unkown
|
page read and write
|
||
7725000
|
unkown
|
page readonly
|
||
7DF4F78F0000
|
unkown
|
page readonly
|
||
167C6000
|
unkown
|
page read and write
|
||
D306000
|
unkown
|
page read and write
|
||
7FF5DBC0C000
|
unkown
|
page readonly
|
||
400000
|
remote allocation
|
page execute and read and write
|
||
4C65000
|
unkown
|
page read and write
|
||
754F000
|
unkown
|
page readonly
|
||
ABE5000
|
unkown
|
page read and write
|
||
7FF5DBDAA000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
16630000
|
unkown
|
page read and write
|
||
42A000
|
unkown
|
page write copy
|
||
7DF4F7821000
|
unkown
|
page execute read
|
||
149CB000
|
stack
|
page read and write
|
||
D006000
|
unkown
|
page read and write
|
||
2BF0000
|
unkown
|
page readonly
|
||
2880000
|
unkown
|
page readonly
|
||
7FF5DBF6A000
|
unkown
|
page readonly
|
||
7FF5DC0CD000
|
unkown
|
page readonly
|
||
4270000
|
unkown
|
page read and write
|
||
166B1000
|
unkown
|
page read and write
|
||
16431000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
7FF5DBEF1000
|
unkown
|
page readonly
|
||
18E1A9E0000
|
heap
|
page read and write
|
||
16433000
|
unkown
|
page read and write
|
||
D2E6000
|
unkown
|
page read and write
|
||
D40F000
|
unkown
|
page read and write
|
||
D2D5000
|
unkown
|
page read and write
|
||
5A1F000
|
unkown
|
page read and write
|
||
4E80000
|
unkown
|
page read and write
|
||
CFB1000
|
unkown
|
page read and write
|
||
D385000
|
unkown
|
page read and write
|
||
D2FE000
|
unkown
|
page read and write
|
||
7845000
|
unkown
|
page readonly
|
||
57A0000
|
unkown
|
page read and write
|
||
1669A000
|
unkown
|
page read and write
|
||
D2B9000
|
unkown
|
page read and write
|
||
16471000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
5B0D3FB000
|
stack
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
167D4000
|
unkown
|
page read and write
|
||
D4D0000
|
unkown
|
page read and write
|
||
7FF5DBB77000
|
unkown
|
page readonly
|
||
7DF4F78C0000
|
unkown
|
page readonly
|
||
16582000
|
unkown
|
page read and write
|
||
739D000
|
unkown
|
page readonly
|
||
7FF5DC082000
|
unkown
|
page readonly
|
||
7DF4F7920000
|
unkown
|
page readonly
|
||
1673F000
|
unkown
|
page read and write
|
||
C7EF000
|
stack
|
page read and write
|
||
D2F2000
|
unkown
|
page read and write
|
||
AC58000
|
unkown
|
page read and write
|
||
18E1A990000
|
heap
|
page read and write
|
||
1648B000
|
unkown
|
page read and write
|
||
7A9F000
|
unkown
|
page read and write
|
||
8494000
|
unkown
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
AC51000
|
unkown
|
page read and write
|
||
2B50000
|
unkown
|
page read and write
|
||
D04E000
|
unkown
|
page read and write
|
||
D56D000
|
unkown
|
page read and write
|
||
16415000
|
unkown
|
page read and write
|
||
1658E000
|
unkown
|
page read and write
|
||
E8D6000
|
unkown
|
page read and write
|
||
7AB1000
|
unkown
|
page read and write
|
||
CFB1000
|
unkown
|
page read and write
|
||
D3FC000
|
unkown
|
page read and write
|
||
D34A000
|
unkown
|
page read and write
|
||
7DF4F7901000
|
unkown
|
page execute read
|
||
7FFB000
|
stack
|
page read and write
|
||
4C60000
|
unkown
|
page read and write
|
||
D2EA000
|
unkown
|
page read and write
|
||
4A30000
|
unkown
|
page read and write
|
||
7B43000
|
unkown
|
page read and write
|
||
4C30000
|
unkown
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
1524C000
|
stack
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
780E000
|
unkown
|
page readonly
|
||
2D98000
|
stack
|
page read and write
|
||
CF25000
|
unkown
|
page read and write
|
||
16455000
|
unkown
|
page read and write
|
||
7FF5DBF45000
|
unkown
|
page readonly
|
||
D0E1000
|
unkown
|
page read and write
|
||
8471000
|
unkown
|
page read and write
|
||
D12D000
|
unkown
|
page read and write
|
||
7FF5DBD37000
|
unkown
|
page readonly
|
||
167B6000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
18E1A9E0000
|
heap
|
page read and write
|
||
F1FE000
|
stack
|
page read and write
|
||
49A0000
|
unkown
|
page readonly
|
||
167EA000
|
unkown
|
page read and write
|
||
18E1A919000
|
heap
|
page read and write
|
||
16725000
|
unkown
|
page read and write
|
||
1669D000
|
unkown
|
page read and write
|
||
7763000
|
unkown
|
page readonly
|
||
4A9F000
|
unkown
|
page read and write
|
||
16511000
|
unkown
|
page read and write
|
||
F17B000
|
stack
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
1650D000
|
unkown
|
page read and write
|
||
7A95000
|
unkown
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
7AE4000
|
unkown
|
page read and write
|
||
7B03000
|
unkown
|
page read and write
|
||
16829000
|
unkown
|
page read and write
|
||
167B8000
|
unkown
|
page read and write
|
||
777E000
|
unkown
|
page readonly
|
||
7DF4F78B0000
|
unkown
|
page readonly
|
||
D559000
|
unkown
|
page read and write
|
||
E985000
|
unkown
|
page read and write
|
||
83B9000
|
unkown
|
page read and write
|
||
821F000
|
unkown
|
page read and write
|
||
47E0000
|
unkown
|
page readonly
|
||
844A000
|
unkown
|
page read and write
|
||
D304000
|
unkown
|
page read and write
|
||
D0E1000
|
unkown
|
page read and write
|
||
7537000
|
unkown
|
page readonly
|
||
D40F000
|
unkown
|
page read and write
|
||
EB90000
|
heap
|
page read and write
|
||
D554000
|
unkown
|
page read and write
|
||
D006000
|
unkown
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
7FF5DC08B000
|
unkown
|
page readonly
|
||
ABE5000
|
unkown
|
page read and write
|
||
D2F4000
|
unkown
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
29A8000
|
unkown
|
page read and write
|
||
D444000
|
unkown
|
page read and write
|
||
8519000
|
unkown
|
page read and write
|
||
7ACA000
|
unkown
|
page read and write
|
||
7FF5DBB96000
|
unkown
|
page readonly
|
||
D2E0000
|
unkown
|
page read and write
|
||
D2E8000
|
unkown
|
page read and write
|
||
28FF000
|
unkown
|
page read and write
|
||
1647D000
|
unkown
|
page read and write
|
||
7DF4F7881000
|
unkown
|
page execute read
|
||
AC3E000
|
unkown
|
page read and write
|
||
7FF5DBF59000
|
unkown
|
page readonly
|
||
7FF88394F000
|
unkown
|
page readonly
|
||
9C000
|
stack
|
page read and write
|
||
D0E1000
|
unkown
|
page read and write
|
||
D54C000
|
unkown
|
page read and write
|
||
D3FC000
|
unkown
|
page read and write
|
||
2790000
|
heap
|
page read and write
|
||
16471000
|
unkown
|
page read and write
|
||
7FF5DBBC9000
|
unkown
|
page readonly
|
||
D08A000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
7A7D000
|
unkown
|
page read and write
|
||
B46D000
|
stack
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
1657C000
|
unkown
|
page read and write
|
||
D2FA000
|
unkown
|
page read and write
|
||
84C4000
|
unkown
|
page read and write
|
||
D54E000
|
unkown
|
page read and write
|
||
D2E0000
|
unkown
|
page read and write
|
||
4B10000
|
unkown
|
page read and write
|
||
16665000
|
unkown
|
page read and write
|
||
CD94000
|
unkown
|
page read and write
|
||
5A6E000
|
unkown
|
page read and write
|
||
D2F6000
|
unkown
|
page read and write
|
||
8471000
|
unkown
|
page read and write
|
||
1669B000
|
unkown
|
page read and write
|
||
D406000
|
unkown
|
page read and write
|
||
D371000
|
unkown
|
page read and write
|
||
7DF4F7910000
|
unkown
|
page readonly
|
||
2AE3000
|
unkown
|
page read and write
|
||
D40F000
|
unkown
|
page read and write
|
||
4B20000
|
unkown
|
page read and write
|
||
7FF5DBE6B000
|
unkown
|
page readonly
|
||
67F0000
|
unkown
|
page read and write
|
||
16836000
|
unkown
|
page read and write
|
||
7FF5DC06A000
|
unkown
|
page readonly
|
||
EB96000
|
heap
|
page read and write
|
||
16831000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
1624C000
|
stack
|
page read and write
|
||
7B1D000
|
unkown
|
page read and write
|
||
D21E000
|
unkown
|
page read and write
|
||
16415000
|
unkown
|
page read and write
|
||
1658A000
|
unkown
|
page read and write
|
||
7FF8838ED000
|
unkown
|
page write copy
|
||
16665000
|
unkown
|
page read and write
|
||
166AF000
|
unkown
|
page read and write
|
||
7FF5DBDFE000
|
unkown
|
page readonly
|
||
D333000
|
unkown
|
page read and write
|
||
167AB000
|
unkown
|
page read and write
|
||
7DF4F7931000
|
unkown
|
page execute read
|
||
D21E000
|
unkown
|
page read and write
|
||
8519000
|
unkown
|
page read and write
|
||
7ADD000
|
unkown
|
page read and write
|
||
7FF5DC020000
|
unkown
|
page readonly
|
||
830B000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
D2E6000
|
unkown
|
page read and write
|
||
2736000
|
stack
|
page read and write
|
||
D2D5000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
D567000
|
unkown
|
page read and write
|
||
81E000
|
stack
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
16485000
|
unkown
|
page read and write
|
||
166A9000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
164F9000
|
unkown
|
page read and write
|
||
7FF5DC0B4000
|
unkown
|
page readonly
|
||
7FF5DBF88000
|
unkown
|
page readonly
|
||
7FF5DBB9C000
|
unkown
|
page readonly
|
||
7B39000
|
unkown
|
page read and write
|
||
D306000
|
unkown
|
page read and write
|
||
E998000
|
unkown
|
page read and write
|
||
7DF4F78E0000
|
unkown
|
page readonly
|
||
7823000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
D2FE000
|
unkown
|
page read and write
|
||
167C6000
|
unkown
|
page read and write
|
||
D344000
|
unkown
|
page read and write
|
||
1673F000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
858E000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
7FF5DBC41000
|
unkown
|
page readonly
|
||
AA0000
|
heap
|
page read and write
|
||
D216000
|
unkown
|
page read and write
|
||
7FF5DBA1D000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
2240000
|
heap
|
page read and write
|
||
D371000
|
unkown
|
page read and write
|
||
D2FA000
|
unkown
|
page read and write
|
||
83C2000
|
unkown
|
page read and write
|
||
D3FC000
|
unkown
|
page read and write
|
||
AC3E000
|
unkown
|
page read and write
|
||
D44E000
|
unkown
|
page read and write
|
||
166A9000
|
unkown
|
page read and write
|
||
D007000
|
unkown
|
page read and write
|
||
E140000
|
unkown
|
page read and write
|
||
D2F2000
|
unkown
|
page read and write
|
||
4B03000
|
unkown
|
page read and write
|
||
AC3E000
|
unkown
|
page read and write
|
||
16510000
|
unkown
|
page read and write
|
||
D554000
|
unkown
|
page read and write
|
||
7525000
|
unkown
|
page readonly
|
||
234F000
|
stack
|
page read and write
|
||
7FF5DBEA1000
|
unkown
|
page readonly
|
||
7FF8838E3000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
167F9000
|
unkown
|
page read and write
|
||
16488000
|
unkown
|
page read and write
|
||
D34A000
|
unkown
|
page read and write
|
||
CFD7000
|
unkown
|
page read and write
|
||
D314000
|
unkown
|
page read and write
|
||
D2CA000
|
unkown
|
page read and write
|
||
164F8000
|
unkown
|
page read and write
|
||
7FF5DBBFC000
|
unkown
|
page readonly
|
||
D333000
|
unkown
|
page read and write
|
||
D546000
|
unkown
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
7FF5DBFDB000
|
unkown
|
page readonly
|
||
D009000
|
unkown
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
D44E000
|
unkown
|
page read and write
|
||
D314000
|
unkown
|
page read and write
|
||
AC51000
|
unkown
|
page read and write
|
||
D216000
|
unkown
|
page read and write
|
||
4B00000
|
unkown
|
page read and write
|
||
D148000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
16828000
|
unkown
|
page read and write
|
||
D33F000
|
unkown
|
page read and write
|
||
8504000
|
unkown
|
page read and write
|
||
7DF4F7911000
|
unkown
|
page execute read
|
||
D567000
|
unkown
|
page read and write
|
||
D2FA000
|
unkown
|
page read and write
|
||
7FF5DC0AF000
|
unkown
|
page readonly
|
||
7FF883839000
|
unkown
|
page readonly
|
||
16408000
|
unkown
|
page read and write
|
||
7859000
|
unkown
|
page readonly
|
||
769C000
|
unkown
|
page readonly
|
||
7A96000
|
unkown
|
page read and write
|
||
7FF5DBC09000
|
unkown
|
page readonly
|
||
4B10000
|
unkown
|
page read and write
|
||
7FF5DBF7D000
|
unkown
|
page readonly
|
||
F27B000
|
stack
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
D0E1000
|
unkown
|
page read and write
|
||
D40F000
|
unkown
|
page read and write
|
||
49B0000
|
unkown
|
page read and write
|
||
D333000
|
unkown
|
page read and write
|
||
ABF9000
|
unkown
|
page read and write
|
||
167B8000
|
unkown
|
page read and write
|
||
449A000
|
stack
|
page read and write
|
||
6A0000
|
heap
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
7FF883957000
|
unkown
|
page readonly
|
||
167DA000
|
unkown
|
page read and write
|
||
1669D000
|
unkown
|
page read and write
|
||
2927000
|
unkown
|
page read and write
|
||
18E1A780000
|
trusted library allocation
|
page read and write
|
||
1644F000
|
unkown
|
page read and write
|
||
77E5000
|
unkown
|
page readonly
|
||
D31C000
|
unkown
|
page read and write
|
||
4EA0000
|
unkown
|
page read and write
|
||
4C70000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
7FF5DBB68000
|
unkown
|
page readonly
|
||
D2EC000
|
unkown
|
page read and write
|
||
164C3000
|
unkown
|
page read and write
|
||
D08A000
|
unkown
|
page read and write
|
||
84CB000
|
unkown
|
page read and write
|
||
30000
|
heap
|
page read and write
|
||
852A000
|
unkown
|
page read and write
|
||
7DF4F7871000
|
unkown
|
page execute read
|
||
7FF5DBD46000
|
unkown
|
page readonly
|
||
B0EE000
|
stack
|
page read and write
|
||
167DE000
|
unkown
|
page read and write
|
||
7A99000
|
unkown
|
page read and write
|
||
7DF4F7891000
|
unkown
|
page execute read
|
||
16733000
|
unkown
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
7A9B000
|
unkown
|
page read and write
|
||
D04E000
|
unkown
|
page read and write
|
||
1669A000
|
unkown
|
page read and write
|
||
167CE000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
5A1E000
|
unkown
|
page read and write
|
||
D2EE000
|
unkown
|
page read and write
|
||
D04E000
|
unkown
|
page read and write
|
||
7DE000
|
stack
|
page read and write
|
||
D04E000
|
unkown
|
page read and write
|
||
D278000
|
unkown
|
page read and write
|
||
D34A000
|
unkown
|
page read and write
|
||
1640E000
|
unkown
|
page read and write
|
||
19D000
|
stack
|
page read and write
|
||
167E2000
|
unkown
|
page read and write
|
||
167C8000
|
unkown
|
page read and write
|
||
ABC4000
|
unkown
|
page read and write
|
||
D006000
|
unkown
|
page read and write
|
||
7FF5DBDCB000
|
unkown
|
page readonly
|
||
42A000
|
unkown
|
page write copy
|
||
5A1F000
|
unkown
|
page read and write
|
||
D314000
|
unkown
|
page read and write
|
||
7FF5DBE88000
|
unkown
|
page readonly
|
||
1647D000
|
unkown
|
page read and write
|
||
167D0000
|
unkown
|
page read and write
|
||
4C50000
|
unkown
|
page read and write
|
||
4613000
|
unkown
|
page read and write
|
||
7FF5DBF4D000
|
unkown
|
page readonly
|
||
7DF4F78B1000
|
unkown
|
page execute read
|
||
7FF5DC0C5000
|
unkown
|
page readonly
|
||
4220000
|
unkown
|
page read and write
|
||
2AE0000
|
unkown
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
16471000
|
unkown
|
page read and write
|
||
16475000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
7A9B000
|
unkown
|
page read and write
|
||
4B00000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
7FF5DBD10000
|
unkown
|
page readonly
|
||
7FF5DBBA1000
|
unkown
|
page readonly
|
||
85BC000
|
unkown
|
page read and write
|
||
7FF5DBCB3000
|
unkown
|
page readonly
|
||
D0E1000
|
unkown
|
page read and write
|
||
49D0000
|
unkown
|
page read and write
|
||
7A6F000
|
unkown
|
page read and write
|
||
CFD7000
|
unkown
|
page read and write
|
||
4CA0000
|
unkown
|
page read and write
|
||
CFD7000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
8504000
|
unkown
|
page read and write
|
||
7C7F000
|
stack
|
page read and write
|
||
7FF5DBDE5000
|
unkown
|
page readonly
|
||
299D000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
30000
|
heap
|
page read and write
|
||
D401000
|
unkown
|
page read and write
|
||
8301000
|
unkown
|
page read and write
|
||
4635000
|
unkown
|
page read and write
|
||
167C8000
|
unkown
|
page read and write
|
||
7FF5DBB72000
|
unkown
|
page readonly
|
||
46B0000
|
unkown
|
page read and write
|
||
FA05000
|
unkown
|
page read and write
|
||
4E93000
|
unkown
|
page read and write
|
||
D33D000
|
unkown
|
page read and write
|
||
4A10000
|
unkown
|
page readonly
|
||
852D000
|
unkown
|
page read and write
|
||
7DF4F7841000
|
unkown
|
page execute read
|
||
7B05000
|
unkown
|
page read and write
|
||
47C5000
|
unkown
|
page read and write
|
||
D2FA000
|
unkown
|
page read and write
|
||
16581000
|
unkown
|
page read and write
|
||
681E000
|
unkown
|
page read and write
|
||
85BC000
|
unkown
|
page read and write
|
||
ABAB000
|
unkown
|
page read and write
|
||
823C000
|
unkown
|
page read and write
|
||
7467000
|
unkown
|
page readonly
|
||
5A2E000
|
unkown
|
page read and write
|
||
7FF5DBB87000
|
unkown
|
page readonly
|
||
16439000
|
unkown
|
page read and write
|
||
18E1A9D8000
|
heap
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
7DF4F78F1000
|
unkown
|
page execute read
|
||
D21D000
|
unkown
|
page read and write
|
||
D12D000
|
unkown
|
page read and write
|
||
9D000
|
stack
|
page read and write
|
||
167C4000
|
unkown
|
page read and write
|
||
D314000
|
unkown
|
page read and write
|
||
7A92000
|
unkown
|
page read and write
|
||
166AF000
|
unkown
|
page read and write
|
||
F904000
|
unkown
|
page read and write
|
||
5A25000
|
unkown
|
page read and write
|
||
F983000
|
unkown
|
page read and write
|
||
16433000
|
unkown
|
page read and write
|
||
164C3000
|
unkown
|
page read and write
|
||
ABCE000
|
unkown
|
page read and write
|
||
164F8000
|
unkown
|
page read and write
|
||
D44E000
|
unkown
|
page read and write
|
||
4B20000
|
unkown
|
page read and write
|
||
18E1A910000
|
heap
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
CF21000
|
unkown
|
page read and write
|
||
D383000
|
unkown
|
page read and write
|
||
4615000
|
unkown
|
page read and write
|
||
CE4D000
|
unkown
|
page read and write
|
||
84CC000
|
unkown
|
page read and write
|
||
5A6E000
|
unkown
|
page read and write
|
||
166A5000
|
unkown
|
page read and write
|
||
2370000
|
heap
|
page read and write
|
||
7FF5DBA08000
|
unkown
|
page readonly
|
||
AC51000
|
unkown
|
page read and write
|
||
7FF883750000
|
unkown
|
page readonly
|
||
BB6A000
|
stack
|
page read and write
|
||
84C1000
|
unkown
|
page read and write
|
||
D08A000
|
unkown
|
page read and write
|
||
81FF000
|
stack
|
page read and write
|
||
164F8000
|
unkown
|
page read and write
|
||
D300000
|
unkown
|
page read and write
|
||
D56E000
|
unkown
|
page read and write
|
||
7FF5DBD34000
|
unkown
|
page readonly
|
||
D112000
|
unkown
|
page read and write
|
||
6D65000
|
stack
|
page read and write
|
||
18E1B810000
|
heap
|
page readonly
|
||
D216000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
167CE000
|
unkown
|
page read and write
|
||
167C8000
|
unkown
|
page read and write
|
||
16630000
|
unkown
|
page read and write
|
||
821D000
|
unkown
|
page read and write
|
||
D216000
|
unkown
|
page read and write
|
||
18E1AA90000
|
trusted library allocation
|
page read and write
|
||
167D2000
|
unkown
|
page read and write
|
||
8501000
|
unkown
|
page read and write
|
||
19C000
|
stack
|
page read and write
|
||
850C000
|
unkown
|
page read and write
|
||
7FF5DBE0A000
|
unkown
|
page readonly
|
||
4C53000
|
unkown
|
page read and write
|
||
7FF5DBCBD000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
D56D000
|
unkown
|
page read and write
|
||
16431000
|
unkown
|
page read and write
|
||
1640B000
|
unkown
|
page read and write
|
||
7FF5DBE95000
|
unkown
|
page readonly
|
||
4D0000
|
heap
|
page read and write
|
||
D216000
|
unkown
|
page read and write
|
||
8509000
|
unkown
|
page read and write
|
||
2360000
|
heap
|
page read and write
|
||
7AB4000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
16738000
|
unkown
|
page read and write
|
||
ABB3000
|
unkown
|
page read and write
|
||
167CE000
|
unkown
|
page read and write
|
||
1657C000
|
unkown
|
page read and write
|
||
D559000
|
unkown
|
page read and write
|
||
7FF5DBBD5000
|
unkown
|
page readonly
|
||
47C3000
|
unkown
|
page read and write
|
||
1EA0000
|
heap
|
page read and write
|
||
76EE000
|
unkown
|
page readonly
|
||
4BC0000
|
unkown
|
page readonly
|
||
7FF5DBAD9000
|
unkown
|
page readonly
|
||
D3F0000
|
unkown
|
page read and write
|
||
7FF5DBFE1000
|
unkown
|
page readonly
|
||
D56D000
|
unkown
|
page read and write
|
||
84D8000
|
unkown
|
page read and write
|
||
D26E000
|
unkown
|
page read and write
|
||
D55A000
|
unkown
|
page read and write
|
||
7073000
|
unkown
|
page readonly
|
||
ABE7000
|
unkown
|
page read and write
|
||
856B000
|
unkown
|
page read and write
|
||
67EC000
|
stack
|
page read and write
|
||
18E1A9E0000
|
heap
|
page read and write
|
||
D30C000
|
unkown
|
page read and write
|
||
D409000
|
unkown
|
page read and write
|
||
D544000
|
unkown
|
page read and write
|
||
CFD7000
|
unkown
|
page read and write
|
||
167B6000
|
unkown
|
page read and write
|
||
8227000
|
unkown
|
page read and write
|
||
166B3000
|
unkown
|
page read and write
|
||
ABB1000
|
unkown
|
page read and write
|
||
834F000
|
unkown
|
page read and write
|
||
D383000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
D383000
|
unkown
|
page read and write
|
||
D409000
|
unkown
|
page read and write
|
||
D27C000
|
unkown
|
page read and write
|
||
D3F9000
|
unkown
|
page read and write
|
||
856B000
|
unkown
|
page read and write
|
||
1644F000
|
unkown
|
page read and write
|
||
F959000
|
unkown
|
page read and write
|
||
18E1A8D0000
|
heap
|
page read and write
|
||
7FF8838EA000
|
unkown
|
page read and write
|
||
28C0000
|
unkown
|
page read and write
|
||
84FD000
|
unkown
|
page read and write
|
||
4100000
|
unkown
|
page readonly
|
||
CFB6000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
D549000
|
unkown
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
7DF4F78E1000
|
unkown
|
page execute read
|
||
856B000
|
unkown
|
page read and write
|
||
167C8000
|
unkown
|
page read and write
|
||
16407000
|
unkown
|
page read and write
|
||
684E000
|
unkown
|
page read and write
|
||
D2F4000
|
unkown
|
page read and write
|
||
2A3E000
|
stack
|
page read and write
|
||
16836000
|
unkown
|
page read and write
|
||
7ADD000
|
unkown
|
page read and write
|
||
167B8000
|
unkown
|
page read and write
|
||
D53A000
|
unkown
|
page read and write
|
||
1650F000
|
unkown
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
AC15000
|
unkown
|
page read and write
|
||
16831000
|
unkown
|
page read and write
|
||
28F7000
|
unkown
|
page read and write
|
||
167D6000
|
unkown
|
page read and write
|
||
7F7C000
|
stack
|
page read and write
|
||
8231000
|
unkown
|
page read and write
|
||
2850000
|
unkown
|
page readonly
|
||
CFBC000
|
unkown
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
D546000
|
unkown
|
page read and write
|
||
167BA000
|
unkown
|
page read and write
|
||
167CE000
|
unkown
|
page read and write
|
||
167DA000
|
unkown
|
page read and write
|
||
D21D000
|
unkown
|
page read and write
|
||
DD2C000
|
stack
|
page read and write
|
||
84D8000
|
unkown
|
page read and write
|
||
7FF5DBF68000
|
unkown
|
page readonly
|
||
D239000
|
unkown
|
page read and write
|
||
7DF4F7861000
|
unkown
|
page execute read
|
||
E98E000
|
unkown
|
page read and write
|
||
ABF9000
|
unkown
|
page read and write
|
||
5C70000
|
unkown
|
page read and write
|
||
D54E000
|
unkown
|
page read and write
|
||
CFBC000
|
unkown
|
page read and write
|
||
4671000
|
unkown
|
page read and write
|
||
D3F6000
|
unkown
|
page read and write
|
||
18E1A8B0000
|
heap
|
page read and write
|
||
7DF4F78C0000
|
unkown
|
page readonly
|
||
18E1B820000
|
trusted library allocation
|
page read and write
|
||
7DF4F7921000
|
unkown
|
page execute read
|
||
2BD6000
|
stack
|
page read and write
|
||
7AE4000
|
unkown
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
7FF5DC040000
|
unkown
|
page readonly
|
||
164F9000
|
unkown
|
page read and write
|
||
1640B000
|
unkown
|
page read and write
|
||
1554C000
|
stack
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
D302000
|
unkown
|
page read and write
|
||
18E1B5D0000
|
trusted library allocation
|
page read and write
|
||
AC00000
|
unkown
|
page read and write
|
||
4996000
|
stack
|
page read and write
|
||
7FF5DBDBF000
|
unkown
|
page readonly
|
||
1648B000
|
unkown
|
page read and write
|
||
7FF5DC119000
|
unkown
|
page readonly
|
||
164F8000
|
unkown
|
page read and write
|
||
D44E000
|
unkown
|
page read and write
|
||
16510000
|
unkown
|
page read and write
|
||
7DF4F7931000
|
unkown
|
page execute read
|
||
D306000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
167CE000
|
unkown
|
page read and write
|
||
2150000
|
heap
|
page read and write
|
||
848F000
|
unkown
|
page read and write
|
||
84CC000
|
unkown
|
page read and write
|
||
167BA000
|
unkown
|
page read and write
|
||
D214000
|
unkown
|
page read and write
|
||
8DA000
|
heap
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
163FA000
|
unkown
|
page read and write
|
||
F47A000
|
stack
|
page read and write
|
||
915000
|
heap
|
page read and write
|
||
D262000
|
unkown
|
page read and write
|
||
D549000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
6510000
|
unkown
|
page read and write
|
||
5A25000
|
unkown
|
page read and write
|
||
1641C000
|
unkown
|
page read and write
|
||
1534B000
|
stack
|
page read and write
|
||
D378000
|
unkown
|
page read and write
|
||
CFD7000
|
unkown
|
page read and write
|
||
D544000
|
unkown
|
page read and write
|
||
960000
|
unkown
|
page readonly
|
||
7FF5DBAD4000
|
unkown
|
page readonly
|
||
4630000
|
unkown
|
page read and write
|
||
16475000
|
unkown
|
page read and write
|
||
7FF5DB9F3000
|
unkown
|
page readonly
|
||
1648F000
|
unkown
|
page read and write
|
||
CFBE000
|
unkown
|
page read and write
|
||
7DF4F7871000
|
unkown
|
page execute read
|
||
D12D000
|
unkown
|
page read and write
|
||
D4C4000
|
unkown
|
page read and write
|
||
7FF5DC027000
|
unkown
|
page readonly
|
||
155CE000
|
stack
|
page read and write
|
||
CFBC000
|
unkown
|
page read and write
|
||
EBAE000
|
unkown
|
page read and write
|
||
22D0000
|
unkown
|
page readonly
|
||
D306000
|
unkown
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
670000
|
unkown
|
page readonly
|
||
AC10000
|
unkown
|
page read and write
|
||
47D5000
|
unkown
|
page read and write
|
||
18E1A950000
|
trusted library allocation
|
page read and write
|
||
4EA0000
|
unkown
|
page read and write
|
||
D12D000
|
unkown
|
page read and write
|
||
1544A000
|
stack
|
page read and write
|
||
D159000
|
unkown
|
page read and write
|
||
8494000
|
unkown
|
page read and write
|
||
D2EA000
|
unkown
|
page read and write
|
||
EA79000
|
stack
|
page read and write
|
||
7AE4000
|
unkown
|
page read and write
|
||
167BA000
|
unkown
|
page read and write
|
||
5E0000
|
heap
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
7B14000
|
unkown
|
page read and write
|
||
7FF5DBDB3000
|
unkown
|
page readonly
|
||
7FF5DBDDF000
|
unkown
|
page readonly
|
||
D2F2000
|
unkown
|
page read and write
|
||
CF19000
|
unkown
|
page read and write
|
||
4B10000
|
unkown
|
page read and write
|
||
D239000
|
unkown
|
page read and write
|
||
167E2000
|
unkown
|
page read and write
|
||
D383000
|
unkown
|
page read and write
|
||
8FF000
|
heap
|
page read and write
|
||
7FF5DBDC2000
|
unkown
|
page readonly
|
||
77D2000
|
unkown
|
page readonly
|
||
167BA000
|
unkown
|
page read and write
|
||
D2E2000
|
unkown
|
page read and write
|
||
D216000
|
unkown
|
page read and write
|
||
67FD000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
1644F000
|
unkown
|
page read and write
|
||
4F62000
|
stack
|
page read and write
|
||
D3F6000
|
unkown
|
page read and write
|
||
2990000
|
unkown
|
page read and write
|
||
18E1B880000
|
trusted library allocation
|
page read and write
|
||
D2E8000
|
unkown
|
page read and write
|
||
4FF0000
|
unkown
|
page read and write
|
||
858E000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
D4C3000
|
unkown
|
page read and write
|
||
D34F000
|
unkown
|
page read and write
|
||
7FF5DBFD4000
|
unkown
|
page readonly
|
||
16488000
|
unkown
|
page read and write
|
||
D546000
|
unkown
|
page read and write
|
||
7FF5DBC0F000
|
unkown
|
page readonly
|
||
5F4000
|
heap
|
page read and write
|
||
7FF5DBFDF000
|
unkown
|
page readonly
|
||
7FF5DBFF2000
|
unkown
|
page readonly
|
||
5A1F000
|
unkown
|
page read and write
|
||
CF86000
|
unkown
|
page read and write
|
||
AC58000
|
unkown
|
page read and write
|
||
D314000
|
unkown
|
page read and write
|
||
D2E6000
|
unkown
|
page read and write
|
||
16484000
|
unkown
|
page read and write
|
||
167C6000
|
unkown
|
page read and write
|
||
4B00000
|
unkown
|
page read and write
|
||
164F3000
|
unkown
|
page read and write
|
||
D2F8000
|
unkown
|
page read and write
|
||
9D000
|
stack
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
AC58000
|
unkown
|
page read and write
|
||
7B14000
|
unkown
|
page read and write
|
||
D239000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
7703000
|
unkown
|
page readonly
|
||
166B3000
|
unkown
|
page read and write
|
||
CFBC000
|
unkown
|
page read and write
|
||
7950000
|
unkown
|
page read and write
|
||
AC58000
|
unkown
|
page read and write
|
||
1648B000
|
unkown
|
page read and write
|
||
167C4000
|
unkown
|
page read and write
|
||
7ACA000
|
unkown
|
page read and write
|
||
5A25000
|
unkown
|
page read and write
|
||
8453000
|
unkown
|
page read and write
|
||
7FF5DBBC5000
|
unkown
|
page readonly
|
||
D567000
|
unkown
|
page read and write
|
||
AC3E000
|
unkown
|
page read and write
|
||
D56D000
|
unkown
|
page read and write
|
||
8E9000
|
heap
|
page execute and read and write
|
||
16727000
|
unkown
|
page read and write
|
||
167AB000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
D214000
|
unkown
|
page read and write
|
||
7FF5DC13C000
|
unkown
|
page readonly
|
||
1648B000
|
unkown
|
page read and write
|
||
D446000
|
unkown
|
page read and write
|
||
D401000
|
unkown
|
page read and write
|
||
7FF5DB9A8000
|
unkown
|
page readonly
|
||
7ADD000
|
unkown
|
page read and write
|
||
D2E0000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
1650E000
|
unkown
|
page read and write
|
||
167EE000
|
unkown
|
page read and write
|
||
7FF5DC09B000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
25A0000
|
heap
|
page read and write
|
||
559A000
|
heap
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
AC15000
|
unkown
|
page read and write
|
||
7FF5DBCA6000
|
unkown
|
page readonly
|
||
8514000
|
unkown
|
page read and write
|
||
F9CB000
|
unkown
|
page read and write
|
||
D009000
|
unkown
|
page read and write
|
||
7FF5DBA06000
|
unkown
|
page readonly
|
||
7FF5DC008000
|
unkown
|
page readonly
|
||
6520000
|
unkown
|
page readonly
|
||
CFB1000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
D08A000
|
unkown
|
page read and write
|
||
167BA000
|
unkown
|
page read and write
|
||
852C000
|
unkown
|
page read and write
|
||
6500000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
852C000
|
unkown
|
page read and write
|
||
16740000
|
unkown
|
page read and write
|
||
401000
|
unkown
|
page execute read
|
||
7755000
|
unkown
|
page readonly
|
||
D274000
|
unkown
|
page read and write
|
||
5F0000
|
heap
|
page read and write
|
||
D2EE000
|
unkown
|
page read and write
|
||
7FF5DBDBB000
|
unkown
|
page readonly
|
||
7ADD000
|
unkown
|
page read and write
|
||
D385000
|
unkown
|
page read and write
|
||
1657F000
|
unkown
|
page read and write
|
||
D4C0000
|
unkown
|
page read and write
|
||
D2EC000
|
unkown
|
page read and write
|
||
7FF5DBFB2000
|
unkown
|
page readonly
|
||
D53A000
|
unkown
|
page read and write
|
||
7DF4F7921000
|
unkown
|
page execute read
|
||
D567000
|
unkown
|
page read and write
|
||
848F000
|
unkown
|
page read and write
|
||
D2E2000
|
unkown
|
page read and write
|
||
64E7000
|
stack
|
page read and write
|
||
167E0000
|
unkown
|
page read and write
|
||
166A9000
|
unkown
|
page read and write
|
||
7FF5DB9DD000
|
unkown
|
page readonly
|
||
7FF5DBEB1000
|
unkown
|
page readonly
|
||
164C3000
|
unkown
|
page read and write
|
||
2951000
|
unkown
|
page read and write
|
||
D54E000
|
unkown
|
page read and write
|
||
84D8000
|
unkown
|
page read and write
|
||
7FF5DC124000
|
unkown
|
page readonly
|
||
1F0000
|
heap
|
page read and write
|
||
D401000
|
unkown
|
page read and write
|
||
7FF5DB9CB000
|
unkown
|
page readonly
|
||
401000
|
unkown
|
page execute read
|
||
18E1A915000
|
heap
|
page read and write
|
||
56FB000
|
unkown
|
page read and write
|
||
7DF4F78F0000
|
unkown
|
page readonly
|
||
AC3E000
|
unkown
|
page read and write
|
||
4620000
|
unkown
|
page read and write
|
||
D3F6000
|
unkown
|
page read and write
|
||
469E000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
4C05000
|
unkown
|
page read and write
|
||
CF83000
|
unkown
|
page read and write
|
||
D559000
|
unkown
|
page read and write
|
||
7FF5DBE11000
|
unkown
|
page readonly
|
||
4080000
|
unkown
|
page read and write
|
||
7A98000
|
unkown
|
page read and write
|
||
2CF0000
|
unkown
|
page read and write
|
||
D112000
|
unkown
|
page read and write
|
||
B86E000
|
stack
|
page read and write
|
||
1658E000
|
unkown
|
page read and write
|
||
D239000
|
unkown
|
page read and write
|
||
85BC000
|
unkown
|
page read and write
|
||
D554000
|
unkown
|
page read and write
|
||
7FF5DBE67000
|
unkown
|
page readonly
|
||
6AA000
|
heap
|
page read and write
|
||
166A1000
|
unkown
|
page read and write
|
||
4650000
|
unkown
|
page read and write
|
||
D006000
|
unkown
|
page read and write
|
||
8390000
|
unkown
|
page read and write
|
||
16831000
|
unkown
|
page read and write
|
||
1658E000
|
unkown
|
page read and write
|
||
7B16000
|
unkown
|
page read and write
|
||
5610000
|
unkown
|
page readonly
|
||
7A8F000
|
unkown
|
page read and write
|
||
4A33000
|
unkown
|
page read and write
|
||
AC28000
|
unkown
|
page read and write
|
||
4D5E000
|
stack
|
page read and write
|
||
807C000
|
stack
|
page read and write
|
||
D542000
|
unkown
|
page read and write
|
||
1658A000
|
unkown
|
page read and write
|
||
7030000
|
unkown
|
page readonly
|
||
852C000
|
unkown
|
page read and write
|
||
CE96000
|
unkown
|
page read and write
|
||
4633000
|
unkown
|
page read and write
|
||
D2F0000
|
unkown
|
page read and write
|
||
ABCB000
|
unkown
|
page read and write
|
||
D280000
|
unkown
|
page read and write
|
||
568A000
|
unkown
|
page read and write
|
||
D2FE000
|
unkown
|
page read and write
|
||
7FF5DBFEF000
|
unkown
|
page readonly
|
||
ABE5000
|
unkown
|
page read and write
|
||
4C03000
|
unkown
|
page read and write
|
||
8481000
|
unkown
|
page read and write
|
||
5B0D179000
|
stack
|
page read and write
|
||
9C000
|
stack
|
page read and write
|
||
D371000
|
unkown
|
page read and write
|
||
83E9000
|
unkown
|
page read and write
|
||
167C8000
|
unkown
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
1648F000
|
unkown
|
page read and write
|
||
7FF5DBF43000
|
unkown
|
page readonly
|
||
1658F000
|
unkown
|
page read and write
|
||
D006000
|
unkown
|
page read and write
|
||
D542000
|
unkown
|
page read and write
|
||
16475000
|
unkown
|
page read and write
|
||
CF1B000
|
unkown
|
page read and write
|
||
D504000
|
unkown
|
page read and write
|
||
4E70000
|
unkown
|
page read and write
|
||
CFBC000
|
unkown
|
page read and write
|
||
167CC000
|
unkown
|
page read and write
|
||
D08A000
|
unkown
|
page read and write
|
||
163F7000
|
unkown
|
page read and write
|
||
7FF5DBE83000
|
unkown
|
page readonly
|
||
7DF4F7921000
|
unkown
|
page execute read
|
||
9C0000
|
heap
|
page read and write
|
||
5592000
|
heap
|
page read and write
|
||
4B03000
|
unkown
|
page read and write
|
||
7830000
|
unkown
|
page readonly
|
||
D333000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
4E95000
|
unkown
|
page read and write
|
||
D406000
|
unkown
|
page read and write
|
||
58E000
|
stack
|
page read and write
|
||
4A30000
|
unkown
|
page read and write
|
||
4385000
|
unkown
|
page read and write
|
||
7ACA000
|
unkown
|
page read and write
|
||
D331000
|
unkown
|
page read and write
|
||
7A90000
|
unkown
|
page read and write
|
||
D35D000
|
unkown
|
page read and write
|
||
82BD000
|
unkown
|
page read and write
|
||
16445000
|
unkown
|
page read and write
|
||
D057000
|
unkown
|
page read and write
|
||
4C10000
|
unkown
|
page read and write
|
||
D409000
|
unkown
|
page read and write
|
||
7A5A000
|
unkown
|
page read and write
|
||
167CC000
|
unkown
|
page read and write
|
||
1682E000
|
unkown
|
page read and write
|
||
5A1E000
|
unkown
|
page read and write
|
||
D300000
|
unkown
|
page read and write
|
||
7FF5DBE23000
|
unkown
|
page readonly
|
||
7FF5DB915000
|
unkown
|
page readonly
|
||
1658F000
|
unkown
|
page read and write
|
||
4CB3000
|
unkown
|
page read and write
|
||
D2F4000
|
unkown
|
page read and write
|
||
D2F0000
|
unkown
|
page read and write
|
||
7ACA000
|
unkown
|
page read and write
|
||
16582000
|
unkown
|
page read and write
|
||
7ACA000
|
unkown
|
page read and write
|
||
1673F000
|
unkown
|
page read and write
|
||
167AB000
|
unkown
|
page read and write
|
||
1648B000
|
unkown
|
page read and write
|
||
8453000
|
unkown
|
page read and write
|
||
167B8000
|
unkown
|
page read and write
|
||
7AC3000
|
unkown
|
page read and write
|
||
AC58000
|
unkown
|
page read and write
|
||
7FF5DBCC5000
|
unkown
|
page readonly
|
||
D3FC000
|
unkown
|
page read and write
|
||
5620000
|
unkown
|
page read and write
|
||
167CC000
|
unkown
|
page read and write
|
||
16407000
|
unkown
|
page read and write
|
||
16510000
|
unkown
|
page read and write
|
||
7FF5DBBD1000
|
unkown
|
page readonly
|
||
D329000
|
unkown
|
page read and write
|
||
4290000
|
unkown
|
page read and write
|
||
6836000
|
unkown
|
page read and write
|
||
16723000
|
unkown
|
page read and write
|
||
47D0000
|
unkown
|
page read and write
|
||
164B5000
|
unkown
|
page read and write
|
||
167F9000
|
unkown
|
page read and write
|
||
D33F000
|
unkown
|
page read and write
|
||
D378000
|
unkown
|
page read and write
|
||
1648E000
|
unkown
|
page read and write
|
||
7FF5DBEFB000
|
unkown
|
page readonly
|
||
4CB0000
|
unkown
|
page read and write
|
||
D266000
|
unkown
|
page read and write
|
||
4C40000
|
unkown
|
page read and write
|
||
670000
|
unkown
|
page readonly
|
||
AC28000
|
unkown
|
page read and write
|
||
8453000
|
unkown
|
page read and write
|
||
6832000
|
unkown
|
page read and write
|
||
84D8000
|
unkown
|
page read and write
|
||
D306000
|
unkown
|
page read and write
|
||
D3F6000
|
unkown
|
page read and write
|
||
D2EA000
|
unkown
|
page read and write
|
||
16471000
|
unkown
|
page read and write
|
||
5B0D37B000
|
stack
|
page read and write
|
||
44E000
|
stack
|
page read and write
|
||
16431000
|
unkown
|
page read and write
|
||
CF83000
|
unkown
|
page read and write
|
||
7A6D000
|
unkown
|
page read and write
|
||
8509000
|
unkown
|
page read and write
|
||
30000
|
heap
|
page read and write
|
||
4A00000
|
unkown
|
page readonly
|
||
7FF5DBAE1000
|
unkown
|
page readonly
|
||
AC58000
|
unkown
|
page read and write
|
||
D11C000
|
unkown
|
page read and write
|
||
235A000
|
stack
|
page read and write
|
||
7DF4F7920000
|
unkown
|
page readonly
|
||
30000
|
heap
|
page read and write
|
||
7FF5DBE80000
|
unkown
|
page readonly
|
||
8519000
|
unkown
|
page read and write
|
||
7FF5DBA01000
|
unkown
|
page readonly
|
||
40B0000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
85BC000
|
unkown
|
page read and write
|
||
D148000
|
unkown
|
page read and write
|
||
7FF5DB969000
|
unkown
|
page readonly
|
||
7FF5DBED7000
|
unkown
|
page readonly
|
||
7AB4000
|
unkown
|
page read and write
|
||
682E000
|
unkown
|
page read and write
|
||
1658A000
|
unkown
|
page read and write
|
||
167B4000
|
unkown
|
page read and write
|
||
7FF5DC02E000
|
unkown
|
page readonly
|
||
167C4000
|
unkown
|
page read and write
|
||
8229000
|
unkown
|
page read and write
|
||
8494000
|
unkown
|
page read and write
|
||
CF86000
|
unkown
|
page read and write
|
||
8514000
|
unkown
|
page read and write
|
||
7FF5DBE62000
|
unkown
|
page readonly
|
||
D10E000
|
unkown
|
page read and write
|
||
C763000
|
stack
|
page read and write
|
||
6530000
|
unkown
|
page readonly
|
||
670000
|
unkown
|
page readonly
|
||
22C0000
|
unkown
|
page read and write
|
||
D2F6000
|
unkown
|
page read and write
|
||
1658C000
|
unkown
|
page read and write
|
||
D336000
|
unkown
|
page read and write
|
||
167BE000
|
unkown
|
page read and write
|
||
7FF5DBA28000
|
unkown
|
page readonly
|
||
7FF5DBFA5000
|
unkown
|
page readonly
|
||
4620000
|
unkown
|
page read and write
|
||
167C4000
|
unkown
|
page read and write
|
||
2A50000
|
unkown
|
page read and write
|
||
856B000
|
unkown
|
page read and write
|
||
D2F4000
|
unkown
|
page read and write
|
||
AB69000
|
stack
|
page read and write
|
||
7D7F000
|
stack
|
page read and write
|
||
D2CB000
|
unkown
|
page read and write
|
||
EBA0000
|
unkown
|
page read and write
|
||
7FF5DBC1A000
|
unkown
|
page readonly
|
||
6EF000
|
stack
|
page read and write
|
||
D2FC000
|
unkown
|
page read and write
|
||
7FF5DBF01000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
1641C000
|
unkown
|
page read and write
|
||
1686A000
|
unkown
|
page read and write
|
||
16471000
|
unkown
|
page read and write
|
||
8D0000
|
heap
|
page read and write
|
||
1682E000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
1648F000
|
unkown
|
page read and write
|
||
6960000
|
heap
|
page read and write
|
||
7FF5DBD8D000
|
unkown
|
page readonly
|
||
D2CB000
|
unkown
|
page read and write
|
||
AC28000
|
unkown
|
page read and write
|
||
ABF9000
|
unkown
|
page read and write
|
||
7FF5DBA0E000
|
unkown
|
page readonly
|
||
7FF5DBC7F000
|
unkown
|
page readonly
|
||
156CF000
|
stack
|
page read and write
|
||
B3EE000
|
stack
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
2AE0000
|
unkown
|
page read and write
|
||
167E6000
|
unkown
|
page read and write
|
||
2936000
|
unkown
|
page read and write
|
||
7FF88390A000
|
unkown
|
page readonly
|
||
ACF000
|
stack
|
page read and write
|
||
40CA000
|
unkown
|
page read and write
|
||
1658A000
|
unkown
|
page read and write
|
||
42A8000
|
unkown
|
page read and write
|
||
7DF4F7921000
|
unkown
|
page execute read
|
||
7FF5DB9D9000
|
unkown
|
page readonly
|
||
7FF5DBBA9000
|
unkown
|
page readonly
|
||
4EA0000
|
unkown
|
page read and write
|
||
7AB0000
|
unkown
|
page read and write
|
||
7FF5DBDD4000
|
unkown
|
page readonly
|
||
2AE0000
|
unkown
|
page read and write
|
||
5640000
|
unkown
|
page read and write
|
||
D120000
|
unkown
|
page read and write
|
||
16665000
|
unkown
|
page read and write
|
||
167E6000
|
unkown
|
page read and write
|
||
49F0000
|
unkown
|
page readonly
|
||
7FF5DBBF6000
|
unkown
|
page readonly
|
||
D344000
|
unkown
|
page read and write
|
||
AC51000
|
unkown
|
page read and write
|
||
166B3000
|
unkown
|
page read and write
|
||
8218000
|
unkown
|
page read and write
|
||
AB70000
|
unkown
|
page read and write
|
||
4640000
|
unkown
|
page read and write
|
||
7FF5DBD28000
|
unkown
|
page readonly
|
||
84FC000
|
unkown
|
page read and write
|
||
590000
|
unclassified section
|
page read and write
|
||
4C80000
|
unkown
|
page read and write
|
||
B669000
|
stack
|
page read and write
|
||
D359000
|
unkown
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
7FF5DBF05000
|
unkown
|
page readonly
|
||
4610000
|
unkown
|
page read and write
|
||
CF5C000
|
unkown
|
page read and write
|
||
AC51000
|
unkown
|
page read and write
|
||
D272000
|
unkown
|
page read and write
|
||
6848000
|
unkown
|
page read and write
|
||
D31C000
|
unkown
|
page read and write
|
||
4CA0000
|
unkown
|
page read and write
|
||
D12D000
|
unkown
|
page read and write
|
||
D0E1000
|
unkown
|
page read and write
|
||
164D5000
|
unkown
|
page read and write
|
||
4650000
|
unkown
|
page read and write
|
||
7B15000
|
unkown
|
page read and write
|
||
8504000
|
unkown
|
page read and write
|
||
4B13000
|
unkown
|
page read and write
|
||
7FF5DBFD0000
|
unkown
|
page readonly
|
||
167C8000
|
unkown
|
page read and write
|
||
296A000
|
unkown
|
page read and write
|
||
5F0000
|
unkown
|
page read and write
|
||
4C00000
|
unkown
|
page read and write
|
||
167D2000
|
unkown
|
page read and write
|
||
400000
|
unkown
|
page readonly
|
||
5A25000
|
unkown
|
page read and write
|
||
47B0000
|
unkown
|
page read and write
|
||
D05E000
|
unkown
|
page read and write
|
||
166A4000
|
unkown
|
page read and write
|
||
167DA000
|
unkown
|
page read and write
|
||
7FF5DBFFD000
|
unkown
|
page readonly
|
||
B568000
|
stack
|
page read and write
|
||
D04E000
|
unkown
|
page read and write
|
||
7FF5DBC30000
|
unkown
|
page readonly
|
||
164FA000
|
unkown
|
page read and write
|
||
CF1D000
|
unkown
|
page read and write
|
||
1494E000
|
stack
|
page read and write
|
||
4BE0000
|
unkown
|
page read and write
|
||
784C000
|
unkown
|
page readonly
|
||
D2EE000
|
unkown
|
page read and write
|
||
7DF4F78A1000
|
unkown
|
page execute read
|
||
D4C6000
|
unkown
|
page read and write
|
||
D148000
|
unkown
|
page read and write
|
||
1E90000
|
heap
|
page read and write
|
||
4610000
|
unkown
|
page read and write
|
||
852D000
|
unkown
|
page read and write
|
||
D34A000
|
unkown
|
page read and write
|
||
4E93000
|
unkown
|
page read and write
|
||
D2F8000
|
unkown
|
page read and write
|
||
22C0000
|
unkown
|
page read and write
|
||
5A25000
|
unkown
|
page read and write
|
||
167CE000
|
unkown
|
page read and write
|
||
D446000
|
unkown
|
page read and write
|
||
7FF5DBE35000
|
unkown
|
page readonly
|
||
7FF5DC079000
|
unkown
|
page readonly
|
||
29AB000
|
unkown
|
page read and write
|
||
4650000
|
unkown
|
page read and write
|
||
B9EE000
|
stack
|
page read and write
|
||
8514000
|
unkown
|
page read and write
|
||
D11A000
|
unkown
|
page read and write
|
||
6CE000
|
heap
|
page read and write
|
||
1648B000
|
unkown
|
page read and write
|
||
4A30000
|
unkown
|
page read and write
|
||
7B20000
|
unkown
|
page read and write
|
||
167DE000
|
unkown
|
page read and write
|
||
7AE4000
|
unkown
|
page read and write
|
||
D21E000
|
unkown
|
page read and write
|
||
1644F000
|
unkown
|
page read and write
|
||
7A74000
|
unkown
|
page read and write
|
||
16733000
|
unkown
|
page read and write
|
||
BAE8000
|
stack
|
page read and write
|
||
167C6000
|
unkown
|
page read and write
|
||
670000
|
unkown
|
page readonly
|
||
7A99000
|
unkown
|
page read and write
|
||
7FF5DC015000
|
unkown
|
page readonly
|
||
D2F6000
|
unkown
|
page read and write
|
||
D0E1000
|
unkown
|
page read and write
|
||
D378000
|
unkown
|
page read and write
|
||
16723000
|
unkown
|
page read and write
|
||
7839000
|
unkown
|
page readonly
|
||
2A50000
|
unkown
|
page read and write
|
||
84C4000
|
unkown
|
page read and write
|
||
CFB6000
|
unkown
|
page read and write
|
||
1650F000
|
unkown
|
page read and write
|
||
D30C000
|
unkown
|
page read and write
|
||
CFBF000
|
unkown
|
page read and write
|
||
7FF5DBC8C000
|
unkown
|
page readonly
|
||
D378000
|
unkown
|
page read and write
|
||
D331000
|
unkown
|
page read and write
|
||
E9AF000
|
unkown
|
page read and write
|
||
D167000
|
unkown
|
page read and write
|
||
4699000
|
unkown
|
page read and write
|
||
16415000
|
unkown
|
page read and write
|
||
7DF4F7910000
|
unkown
|
page readonly
|
||
167D6000
|
unkown
|
page read and write
|
||
8481000
|
unkown
|
page read and write
|
||
844C000
|
unkown
|
page read and write
|
||
8465000
|
unkown
|
page read and write
|
||
ABA4000
|
unkown
|
page read and write
|
||
79E000
|
stack
|
page read and write
|
||
D15B000
|
unkown
|
page read and write
|
||
870000
|
unkown
|
page readonly
|
||
16481000
|
unkown
|
page read and write
|
||
852D000
|
unkown
|
page read and write
|
||
47D0000
|
unkown
|
page read and write
|
||
7A9F000
|
unkown
|
page read and write
|
||
1741C000
|
stack
|
page read and write
|
||
4BE0000
|
unkown
|
page read and write
|
||
D2EE000
|
unkown
|
page read and write
|
||
7A98000
|
unkown
|
page read and write
|
||
6827000
|
unkown
|
page read and write
|
||
D4C6000
|
unkown
|
page read and write
|
||
7ADD000
|
unkown
|
page read and write
|
||
74E1000
|
unkown
|
page readonly
|
||
D04E000
|
unkown
|
page read and write
|
||
D559000
|
unkown
|
page read and write
|
||
161CC000
|
stack
|
page read and write
|
||
16836000
|
unkown
|
page read and write
|
||
D10E000
|
unkown
|
page read and write
|
||
D2FC000
|
unkown
|
page read and write
|
||
16445000
|
unkown
|
page read and write
|
||
47C0000
|
unkown
|
page read and write
|
||
5B0D27E000
|
stack
|
page read and write
|
||
D148000
|
unkown
|
page read and write
|
||
4B10000
|
unkown
|
page read and write
|
||
167E0000
|
unkown
|
page read and write
|
||
7FF5DBDC7000
|
unkown
|
page readonly
|
||
D120000
|
unkown
|
page read and write
|
||
164F8000
|
unkown
|
page read and write
|
There are 2064 hidden memdumps, click here to show them.