Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
0lm81UZm7Y.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\d06ed635-68f6-4e9a-955c-4899f5f57b9a5820605205.zip
|
Zip archive data, at least v2.0 to extract
|
dropped
|
||
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\Cookies\Google Chrome_Default.txt
|
ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\Files\Default.zip
|
Zip archive data (empty)
|
dropped
|
||
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\information.txt
|
ISO-8859 text, with very long lines, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\screenshot.jpg
|
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024,
frames 3
|
dropped
|
||
C:\ProgramData\CP8Z9ZN3KMVU03RJRFJ2Y5TWZ\files\temp
|
SQLite 3.x database, last written using SQLite version 3032001
|
dropped
|
||
C:\ProgramData\freebl3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\mozglue.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\msvcp140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\nss3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\softokn3.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\ProgramData\vcruntime140.dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\msvcp140[1].dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\vcruntime140[1].dll
|
PE32 executable (DLL) (console) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\nss3[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\freebl3[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\mozglue[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
||
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\softokn3[1].dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
dropped
|
There are 9 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Users\user\Desktop\0lm81UZm7Y.exe
|
'C:\Users\user\Desktop\0lm81UZm7Y.exe'
|
||
C:\Windows\SysWOW64\cmd.exe
|
'C:\Windows\System32\cmd.exe' /c taskkill /im 0lm81UZm7Y.exe /f & timeout /t 6 & del /f /q 'C:\Users\user\Desktop\0lm81UZm7Y.exe'
& del C:\ProgramData\*.dll & exit
|
||
C:\Windows\System32\conhost.exe
|
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
|
||
C:\Windows\SysWOW64\taskkill.exe
|
taskkill /im 0lm81UZm7Y.exe /f
|
||
C:\Windows\SysWOW64\timeout.exe
|
timeout /t 6
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://159.69.203.58/mozglue.dll
|
159.69.203.58
|
||
http://159.69.203.58/msvcp140.dll
|
159.69.203.58
|
||
https://duckduckgo.com/chrome_newtab
|
unknown
|
||
http://www.mozilla.com/en-US/blocklist/
|
unknown
|
||
https://duckduckgo.com/ac/?q=
|
unknown
|
||
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
|
unknown
|
||
http://ocsp.thawte.com0
|
unknown
|
||
http://www.mozilla.com0
|
unknown
|
||
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
|
unknown
|
||
https://mas.to
|
unknown
|
||
https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
|
unknown
|
||
https://mas.to/users/killern0
|
unknown
|
||
https://mas.to;
|
unknown
|
||
https://mas.to/.well-known/webfinger?resource=acct%3Akillern0%40mas.to
|
unknown
|
||
https://ac.ecosia.org/autocomplete?q=
|
unknown
|
||
http://159.69.203.58/nss3.dll
|
159.69.203.58
|
||
http://crl.thawte.com/ThawteTimestampingCA.crl0
|
unknown
|
||
http://159.69.203.58/
|
159.69.203.58
|
||
http://159.69.203.58/softokn3.dll
|
159.69.203.58
|
||
https://mas.to/
|
unknown
|
||
https://duckduckgo.com/chrome_newtabSQLite
|
unknown
|
||
http://159.69.203.58/vcruntime140.dll
|
159.69.203.58
|
||
http://159.69.203.58/1008
|
159.69.203.58
|
||
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
|
unknown
|
||
http://159.69.203.58/freebl3.dll
|
159.69.203.58
|
||
https://media.mas.to
|
unknown
|
||
https://mas.to/@killern0
|
88.99.75.82
|
||
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
|
unknown
|
There are 18 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
mas.to
|
88.99.75.82
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
88.99.75.82
|
mas.to
|
Germany
|
||
159.69.203.58
|
unknown
|
Germany
|
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
22C0000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page execute and read and write
|
||
21A0000
|
unkown
|
page execute and read and write
|
||
7FF5A34D3000
|
unkown image
|
page readonly
|
||
7FF4FF979000
|
unkown image
|
page readonly
|
||
7FF595EAC000
|
unkown image
|
page readonly
|
||
7FF51CDDC000
|
unkown image
|
page readonly
|
||
7FF5D25DD000
|
unkown image
|
page readonly
|
||
1451FA4C000
|
unkown
|
page read and write
|
||
155A3CD0000
|
unkown image
|
page readonly
|
||
7FF51CE35000
|
unkown image
|
page readonly
|
||
28F4CC67000
|
unkown
|
page read and write
|
||
7FF595EB1000
|
unkown image
|
page readonly
|
||
7FF595938000
|
unkown image
|
page readonly
|
||
2BBF143F000
|
unkown
|
page read and write
|
||
FE2A77E000
|
unkown
|
page read and write
|
||
7FF539108000
|
unkown image
|
page readonly
|
||
2BBEBC73000
|
unkown
|
page read and write
|
||
F1951FA000
|
unkown
|
page read and write
|
||
21449110000
|
unkown image
|
page readonly
|
||
7FF5A34B0000
|
unkown image
|
page readonly
|
||
2310000
|
heap private
|
page read and write
|
||
648000
|
unkown
|
page execute and read and write
|
||
259C91D0000
|
unkown image
|
page readonly
|
||
43F05DB000
|
unkown
|
page read and write
|
||
2BBEC3F3000
|
unkown
|
page read and write
|
||
2370CB70000
|
unkown image
|
page readonly
|
||
1A0000
|
unkown image
|
page readonly
|
||
60A000
|
unkown
|
page read and write
|
||
7FF539569000
|
unkown image
|
page readonly
|
||
28F4CC7B000
|
unkown
|
page read and write
|
||
23F8E0C0000
|
unkown image
|
page readonly
|
||
155A3A00000
|
unkown
|
page read and write
|
||
7FF51CDFD000
|
unkown image
|
page readonly
|
||
2BBF10A0000
|
unkown
|
page read and write
|
||
7FF59FE5D000
|
unkown image
|
page readonly
|
||
7FF4FFF40000
|
unkown image
|
page readonly
|
||
7FF538CC2000
|
unkown image
|
page readonly
|
||
22B8000
|
heap private
|
page read and write
|
||
259C923E000
|
unkown
|
page read and write
|
||
7FF5C4836000
|
unkown image
|
page readonly
|
||
7FF595FF7000
|
unkown image
|
page readonly
|
||
259C9A02000
|
unkown
|
page read and write
|
||
7DF5327C0000
|
unkown image
|
page readonly
|
||
7FF596077000
|
unkown image
|
page readonly
|
||
1451F910000
|
unkown image
|
page readonly
|
||
21449200000
|
unkown
|
page read and write
|
||
22FE000
|
unkown
|
page read and write
|
||
23F8E224000
|
unkown
|
page read and write
|
||
7FF59FE7B000
|
unkown image
|
page readonly
|
||
610000
|
unkown
|
page read and write
|
||
7FF59FD73000
|
unkown image
|
page readonly
|
||
7FF53962B000
|
unkown image
|
page readonly
|
||
7FF5C4C37000
|
unkown image
|
page readonly
|
||
7FF5D25B0000
|
unkown image
|
page readonly
|
||
7DF5B8F00000
|
unkown image
|
page readonly
|
||
60B000
|
unkown
|
page read and write
|
||
23F8E25C000
|
unkown
|
page read and write
|
||
7DF5B8EE2000
|
unkown image
|
page readonly
|
||
28F4CC3E000
|
unkown
|
page read and write
|
||
23F8E22A000
|
unkown
|
page read and write
|
||
7FF5A3555000
|
unkown image
|
page readonly
|
||
3280000
|
unkown
|
page read and write
|
||
7FF4FFC7E000
|
unkown image
|
page readonly
|
||
7FF59FE7F000
|
unkown image
|
page readonly
|
||
7F600000
|
unkown image
|
page readonly
|
||
2370CD00000
|
unkown
|
page read and write
|
||
28F4CC42000
|
unkown
|
page read and write
|
||
2370CC8A000
|
unkown
|
page read and write
|
||
7FF538DA9000
|
unkown image
|
page readonly
|
||
E26AEFF000
|
unkown
|
page read and write
|
||
7FF4FFDC5000
|
unkown image
|
page readonly
|
||
2BBF11CE000
|
unkown
|
page read and write
|
||
7FF59FCA2000
|
unkown image
|
page readonly
|
||
7FF596125000
|
unkown image
|
page readonly
|
||
7FF59FDB9000
|
unkown image
|
page readonly
|
||
7FF4FFF6B000
|
unkown image
|
page readonly
|
||
2BBF14F7000
|
unkown
|
page read and write
|
||
484000
|
unkown image
|
page readonly
|
||
E26A8DC000
|
unkown
|
page read and write
|
||
28F4CB10000
|
unkown image
|
page readonly
|
||
7FF538CC8000
|
unkown image
|
page readonly
|
||
8FE4C7E000
|
unkown
|
page read and write
|
||
7FF5D2523000
|
unkown image
|
page readonly
|
||
155A3B13000
|
unkown
|
page read and write
|
||
7FF4FF988000
|
unkown image
|
page readonly
|
||
21449202000
|
unkown
|
page read and write
|
||
1451FB13000
|
unkown
|
page read and write
|
||
7FF59606D000
|
unkown image
|
page readonly
|
||
3B18BBC000
|
unkown
|
page read and write
|
||
7FF5395F6000
|
unkown image
|
page readonly
|
||
28F4CC61000
|
unkown
|
page read and write
|
||
7DF515872000
|
unkown image
|
page readonly
|
||
2F10000
|
unkown
|
page read and write
|
||
7FF595CF1000
|
unkown image
|
page readonly
|
||
2FF6000
|
unkown image
|
page readonly
|
||
7FF5961BF000
|
unkown image
|
page readonly
|
||
155A3A5A000
|
unkown
|
page read and write
|
||
7FF4FFEA5000
|
unkown image
|
page readonly
|
||
7FF5D25CB000
|
unkown image
|
page readonly
|
||
7FF4FFDC8000
|
unkown image
|
page readonly
|
||
259C9950000
|
unkown
|
page read and write
|
||
2BBEC400000
|
unkown
|
page read and write
|
||
7FF51CE9B000
|
unkown image
|
page readonly
|
||
259C9224000
|
unkown
|
page read and write
|
||
2B32602A000
|
unkown
|
page read and write
|
||
2BBF14FD000
|
unkown
|
page read and write
|
||
2BBEBCF9000
|
unkown
|
page read and write
|
||
F1958F9000
|
unkown
|
page read and write
|
||
7FF59FD62000
|
unkown image
|
page readonly
|
||
7FF59FC8D000
|
unkown image
|
page readonly
|
||
7FF59FB46000
|
unkown image
|
page readonly
|
||
7FF5C4C73000
|
unkown image
|
page readonly
|
||
7DF413670000
|
unkown image
|
page readonly
|
||
28F4CC4D000
|
unkown
|
page read and write
|
||
21449268000
|
unkown
|
page read and write
|
||
2B326102000
|
unkown
|
page read and write
|
||
7DF5DA640000
|
unkown image
|
page readonly
|
||
3B1987E000
|
unkown
|
page read and write
|
||
31DF000
|
unkown
|
page read and write
|
||
6CC000
|
unkown
|
page read and write
|
||
7FF5960F5000
|
unkown image
|
page readonly
|
||
17758FF000
|
unkown
|
page read and write
|
||
28F4CE00000
|
unkown image
|
page readonly
|
||
7FF5C4BDD000
|
unkown image
|
page readonly
|
||
7FF59FD77000
|
unkown image
|
page readonly
|
||
7FF5D245E000
|
unkown image
|
page readonly
|
||
23F8E790000
|
unkown image
|
page readonly
|
||
2BBF11C8000
|
unkown
|
page read and write
|
||
7FF4FFC73000
|
unkown image
|
page readonly
|
||
59E000
|
unkown
|
page read and write
|
||
7FF59FCFE000
|
unkown image
|
page readonly
|
||
7FF5A353A000
|
unkown image
|
page readonly
|
||
279E000
|
unkown
|
page read and write
|
||
21449266000
|
unkown
|
page read and write
|
||
7DF5ABAB2000
|
unkown image
|
page readonly
|
||
7FF595E4A000
|
unkown image
|
page readonly
|
||
1451FA51000
|
unkown
|
page read and write
|
||
2BBF1504000
|
unkown
|
page read and write
|
||
7FF5D259F000
|
unkown image
|
page readonly
|
||
21449251000
|
unkown
|
page read and write
|
||
7FF539485000
|
unkown image
|
page readonly
|
||
7FF5C4C65000
|
unkown image
|
page readonly
|
||
7FF4FFDF3000
|
unkown image
|
page readonly
|
||
21449279000
|
unkown
|
page read and write
|
||
630000
|
unkown image
|
page readonly
|
||
7DF4A9980000
|
unkown image
|
page readonly
|
||
503000
|
unkown
|
page read and write
|
||
2B5E000
|
unkown
|
page read and write
|
||
314000
|
unkown
|
page read and write
|
||
2BBEBC8D000
|
unkown
|
page read and write
|
||
7FF5A34F7000
|
unkown image
|
page readonly
|
||
28F4CC5B000
|
unkown
|
page read and write
|
||
7FF5960ED000
|
unkown image
|
page readonly
|
||
7F612000
|
unkown image
|
page readonly
|
||
7FF595EB3000
|
unkown image
|
page readonly
|
||
7FF595F10000
|
unkown image
|
page readonly
|
||
7FF5D24D3000
|
unkown image
|
page readonly
|
||
2BBEC3B0000
|
unkown image
|
page readonly
|
||
50E000
|
unkown image
|
page readonly
|
||
7FF4FFE88000
|
unkown image
|
page readonly
|
||
7FF596090000
|
unkown image
|
page readonly
|
||
7FF539595000
|
unkown image
|
page readonly
|
||
7FF59FB58000
|
unkown image
|
page readonly
|
||
A60000
|
unkown image
|
page readonly
|
||
259C9860000
|
unkown image
|
page readonly
|
||
7FF59610A000
|
unkown image
|
page readonly
|
||
7FF5C4C3C000
|
unkown image
|
page readonly
|
||
2BBF1290000
|
unkown
|
page read and write
|
||
7FF4FFF28000
|
unkown image
|
page readonly
|
||
2370D250000
|
unkown image
|
page readonly
|
||
28F4C9C0000
|
unkown image
|
page read and write
|
||
259C922A000
|
unkown
|
page read and write
|
||
7FF595F73000
|
unkown image
|
page readonly
|
||
2BBF1500000
|
unkown
|
page read and write
|
||
2BBEBD13000
|
unkown
|
page read and write
|
||
7FF595E7F000
|
unkown image
|
page readonly
|
||
7FF59FD6C000
|
unkown image
|
page readonly
|
||
630000
|
heap default
|
page read and write
|
||
36F0000
|
unkown
|
page read and write
|
||
43C0000
|
unkown
|
page read and write
|
||
7FF5D24B4000
|
unkown image
|
page readonly
|
||
28F4CC7A000
|
unkown
|
page read and write
|
||
28F4CC75000
|
unkown
|
page read and write
|
||
23F8E0A0000
|
unkown image
|
page readonly
|
||
FE2A6FB000
|
unkown
|
page read and write
|
||
23F8E880000
|
unkown
|
page read and write
|
||
7FF5D25DF000
|
unkown image
|
page readonly
|
||
2370CED0000
|
unkown image
|
page readonly
|
||
7FF5D25C4000
|
unkown image
|
page readonly
|
||
7FF539523000
|
unkown image
|
page readonly
|
||
155A4050000
|
unkown image
|
page readonly
|
||
7FF4FFEAF000
|
unkown image
|
page readonly
|
||
7DF54EF40000
|
unkown image
|
page readonly
|
||
7FF59FE46000
|
unkown image
|
page readonly
|
||
1451F920000
|
unkown image
|
page readonly
|
||
7FF4FF608000
|
unkown image
|
page readonly
|
||
31DA000
|
unkown
|
page read and write
|
||
23F8E880000
|
unkown
|
page read and write
|
||
7DF54EF30000
|
unkown image
|
page readonly
|
||
3B1C000
|
unkown
|
page read and write
|
||
7FF4FFE68000
|
unkown image
|
page readonly
|
||
2370CC52000
|
unkown
|
page read and write
|
||
2370CC8E000
|
unkown
|
page read and write
|
||
7FFC2000
|
unkown image
|
page readonly
|
||
7DF515862000
|
unkown image
|
page readonly
|
||
724000
|
unkown
|
page read and write
|
||
7DF5327E0000
|
unkown image
|
page readonly
|
||
259C9313000
|
unkown
|
page read and write
|
||
7DF5ABAB2000
|
unkown image
|
page readonly
|
||
2FE5000
|
unkown image
|
page readonly
|
||
7FF5C4C27000
|
unkown image
|
page readonly
|
||
7FF59619D000
|
unkown image
|
page readonly
|
||
43F087D000
|
unkown
|
page read and write
|
||
7DF5DA622000
|
unkown image
|
page readonly
|
||
7FF53947F000
|
unkown image
|
page readonly
|
||
3B1947D000
|
unkown
|
page read and write
|
||
1451FA6D000
|
unkown
|
page read and write
|
||
7FF4FFDB7000
|
unkown image
|
page readonly
|
||
2BBF1320000
|
unkown
|
page read and write
|
||
2370D0D0000
|
unkown image
|
page readonly
|
||
7FF59FE6E000
|
unkown image
|
page readonly
|
||
7DF5ABAC0000
|
unkown image
|
page readonly
|
||
7FF595D40000
|
unkown image
|
page readonly
|
||
2B326080000
|
unkown
|
page read and write
|
||
7DF5B5790000
|
unkown image
|
page readonly
|
||
31DB000
|
unkown
|
page read and write
|
||
E26B3FE000
|
unkown
|
page read and write
|
||
7DF5327D2000
|
unkown image
|
page readonly
|
||
7DF5B8EE0000
|
unkown image
|
page readonly
|
||
7FF5D25DB000
|
unkown image
|
page readonly
|
||
259C92B9000
|
unkown
|
page read and write
|
||
28F4CC41000
|
unkown
|
page read and write
|
||
336000
|
unkown
|
page read and write
|
||
7F612000
|
unkown image
|
page readonly
|
||
28F4CA10000
|
unkown image
|
page readonly
|
||
7DF5ABAC0000
|
unkown image
|
page readonly
|
||
23F8E0D0000
|
unkown image
|
page readonly
|
||
31DF000
|
unkown
|
page read and write
|
||
2370CB90000
|
unkown image
|
page readonly
|
||
7FF59FD54000
|
unkown image
|
page readonly
|
||
7FF59FDC3000
|
unkown image
|
page readonly
|
||
3A1E000
|
unkown
|
page read and write
|
||
2B32607F000
|
unkown
|
page read and write
|
||
7FF595C6F000
|
unkown image
|
page readonly
|
||
E26ACFC000
|
unkown
|
page read and write
|
||
28F4CC44000
|
unkown
|
page read and write
|
||
2BBF1310000
|
unkown
|
page read and write
|
||
7FF5393FE000
|
unkown image
|
page readonly
|
||
2370CB60000
|
heap private
|
page read and write
|
||
7FF4FFE6F000
|
unkown image
|
page readonly
|
||
2BBF1400000
|
unkown
|
page read and write
|
||
327000
|
unkown
|
page read and write
|
||
2BBEC390000
|
unkown image
|
page readonly
|
||
7FF595D4F000
|
unkown image
|
page readonly
|
||
2BBEBCB7000
|
unkown
|
page read and write
|
||
7FF59FDE5000
|
unkown image
|
page readonly
|
||
7FF5960D8000
|
unkown image
|
page readonly
|
||
7DF4E5DA0000
|
unkown image
|
page readonly
|
||
31EA000
|
unkown
|
page read and write
|
||
259C96E0000
|
unkown image
|
page readonly
|
||
28F4CC58000
|
unkown
|
page read and write
|
||
7FF59FC96000
|
unkown image
|
page readonly
|
||
A6187FE000
|
unkown
|
page read and write
|
||
155A3A13000
|
unkown
|
page read and write
|
||
F1954FB000
|
unkown
|
page read and write
|
||
7FF59600F000
|
unkown image
|
page readonly
|
||
259C92CA000
|
unkown
|
page read and write
|
||
2BBEC3F0000
|
unkown
|
page read and write
|
||
2BBF14FB000
|
unkown
|
page read and write
|
||
32A000
|
unkown
|
page read and write
|
||
7FF5A35CD000
|
unkown image
|
page readonly
|
||
7FF53955D000
|
unkown image
|
page readonly
|
||
7FFC2000
|
unkown image
|
page readonly
|
||
2370CC7C000
|
unkown
|
page read and write
|
||
FE2A4FE000
|
unkown
|
page read and write
|
||
7FF5C4D1E000
|
unkown image
|
page readonly
|
||
7DF54EF40000
|
unkown image
|
page readonly
|
||
7DF5B5780000
|
unkown image
|
page readonly
|
||
43F0AFB000
|
unkown
|
page read and write
|
||
28F4CC77000
|
unkown
|
page read and write
|
||
28F4CD02000
|
unkown
|
page read and write
|
||
298D7FB000
|
unkown
|
page read and write
|
||
2BBEC3C0000
|
unkown image
|
page readonly
|
||
7FF5D25A6000
|
unkown image
|
page readonly
|
||
F195078000
|
unkown
|
page read and write
|
||
28F4C9E0000
|
unkown image
|
page readonly
|
||
2B326100000
|
unkown
|
page read and write
|
||
40000
|
unkown image
|
page readonly
|
||
7FFC0000
|
unkown image
|
page readonly
|
||
5A0000
|
unkown image
|
page readonly
|
||
1451F950000
|
unkown image
|
page readonly
|
||
7DF54EF20000
|
unkown image
|
page readonly
|
||
2290000
|
unkown image
|
page readonly
|
||
7FF595CC6000
|
unkown image
|
page readonly
|
||
28F4D190000
|
unkown
|
page read and write
|
||
7FF59F92F000
|
unkown image
|
page readonly
|
||
7DF5E7EE2000
|
unkown image
|
page readonly
|
||
2BBEBAF0000
|
unkown image
|
page read and write
|
||
7FF51CE8F000
|
unkown image
|
page readonly
|
||
7DF5E7EE2000
|
unkown image
|
page readonly
|
||
7F610000
|
unkown image
|
page readonly
|
||
28F4CC3D000
|
unkown
|
page read and write
|
||
23F8E213000
|
unkown
|
page read and write
|
||
7FF596186000
|
unkown image
|
page readonly
|
||
8FE4B7F000
|
unkown
|
page read and write
|
||
7FF596070000
|
unkown image
|
page readonly
|
||
300D000
|
unkown image
|
page readonly
|
||
7FF5A3529000
|
unkown image
|
page readonly
|
||
155A3980000
|
heap default
|
page read and write
|
||
7FF5D2372000
|
unkown image
|
page readonly
|
||
7FF4FF6FB000
|
unkown image
|
page readonly
|
||
7DF5E7ED2000
|
unkown image
|
page readonly
|
||
7FF4FFD3E000
|
unkown image
|
page readonly
|
||
304E000
|
unkown
|
page read and write
|
||
2BBEBC86000
|
unkown
|
page read and write
|
||
2B325E60000
|
unkown image
|
page read and write
|
||
28F4CC2A000
|
unkown
|
page read and write
|
||
259C94D0000
|
unkown image
|
page readonly
|
||
7DF44CDF0000
|
unkown image
|
page readonly
|
||
7FF595EBD000
|
unkown image
|
page readonly
|
||
2370CBF0000
|
unkown
|
page read and write
|
||
214491F0000
|
unkown
|
page read and write
|
||
7FFD0000
|
unkown image
|
page readonly
|
||
2370D402000
|
unkown
|
page read and write
|
||
7FF5C4D2D000
|
unkown image
|
page readonly
|
||
2EDF000
|
unkown
|
page read and write
|
||
6E0000
|
unkown image
|
page readonly
|
||
7F500000
|
unkown image
|
page readonly
|
||
2B325EA0000
|
unkown image
|
page readonly
|
||
7DF5327D0000
|
unkown image
|
page readonly
|
||
3700000
|
unkown
|
page read and write
|
||
7FF5C4A7D000
|
unkown image
|
page readonly
|
||
28F4CC5A000
|
unkown
|
page read and write
|
||
3550000
|
unkown
|
page read and write
|
||
2BBEBBA0000
|
unkown image
|
page read and write
|
||
F1953FE000
|
unkown
|
page read and write
|
||
7DF5327C0000
|
unkown image
|
page readonly
|
||
43F08FE000
|
unkown
|
page read and write
|
||
7FF51CEB4000
|
unkown image
|
page readonly
|
||
2BBF1502000
|
unkown
|
page read and write
|
||
C60000
|
unkown image
|
page readonly
|
||
7FF4FFEAF000
|
unkown image
|
page readonly
|
||
F1959FB000
|
unkown
|
page read and write
|
||
28F4CC6D000
|
unkown
|
page read and write
|
||
7DF5DA630000
|
unkown image
|
page readonly
|
||
7DF5B8F00000
|
unkown image
|
page readonly
|
||
7FF5C4D2F000
|
unkown image
|
page readonly
|
||
259C9180000
|
unkown image
|
page read and write
|
||
1451FCD0000
|
unkown image
|
page readonly
|
||
7FF5C4D14000
|
unkown image
|
page readonly
|
||
7DF5B8EF0000
|
unkown image
|
page readonly
|
||
7FF59FE38000
|
unkown image
|
page readonly
|
||
7FF59FD8C000
|
unkown image
|
page readonly
|
||
298DAFF000
|
unkown
|
page read and write
|
||
F00000
|
heap private
|
page read and write
|
||
7FF539573000
|
unkown image
|
page readonly
|
||
259C9B00000
|
unkown
|
page read and write
|
||
2BBF142D000
|
unkown
|
page read and write
|
||
7FF4FFD24000
|
unkown image
|
page readonly
|
||
7FF4FFF54000
|
unkown image
|
page readonly
|
||
7FF5961A4000
|
unkown image
|
page readonly
|
||
7FF5D2598000
|
unkown image
|
page readonly
|
||
7FF596178000
|
unkown image
|
page readonly
|
||
3281000
|
unkown
|
page read and write
|
||
2B325E70000
|
heap private
|
page read and write
|
||
7FF53962F000
|
unkown image
|
page readonly
|
||
7DF5DA632000
|
unkown image
|
page readonly
|
||
7FF4FFCC3000
|
unkown image
|
page readonly
|
||
1F0000
|
unkown
|
page read and write
|
||
7DF5DA620000
|
unkown image
|
page readonly
|
||
7FF51CB83000
|
unkown image
|
page readonly
|
||
155A3B02000
|
unkown
|
page read and write
|
||
7FF5C4C69000
|
unkown image
|
page readonly
|
||
7FF4FFDBC000
|
unkown image
|
page readonly
|
||
2370CD02000
|
unkown
|
page read and write
|
||
7FF539537000
|
unkown image
|
page readonly
|
||
28F4CC5C000
|
unkown
|
page read and write
|
||
2B326058000
|
unkown
|
page read and write
|
||
21449802000
|
unkown
|
page read and write
|
||
2B326400000
|
unkown image
|
page readonly
|
||
2144923C000
|
unkown
|
page read and write
|
||
7FF5A3298000
|
unkown image
|
page readonly
|
||
7FF595EE1000
|
unkown image
|
page readonly
|
||
2BBEC0D0000
|
unkown image
|
page readonly
|
||
76D000
|
unkown
|
page read and write
|
||
7DF5ABAB0000
|
unkown image
|
page readonly
|
||
1451FA62000
|
unkown
|
page read and write
|
||
2BBF1502000
|
unkown
|
page read and write
|
||
7FF5393F3000
|
unkown image
|
page readonly
|
||
7DF5157B2000
|
unkown image
|
page readonly
|
||
7FF5960B7000
|
unkown image
|
page readonly
|
||
155A3930000
|
unkown image
|
page readonly
|
||
4FF000
|
unkown
|
page read and write
|
||
7FF59FE7D000
|
unkown image
|
page readonly
|
||
2C9D000
|
unkown
|
page read and write
|
||
7FF4FFE9D000
|
unkown image
|
page readonly
|
||
259C9200000
|
unkown
|
page read and write
|
||
2370CC4F000
|
unkown
|
page read and write
|
||
7FF4FFED5000
|
unkown image
|
page readonly
|
||
2B32605B000
|
unkown
|
page read and write
|
||
7FF5D23A6000
|
unkown image
|
page readonly
|
||
F1957FE000
|
unkown
|
page read and write
|
||
7FF53962F000
|
unkown image
|
page readonly
|
||
7DF515860000
|
unkown image
|
page readonly
|
||
21449229000
|
unkown
|
page read and write
|
||
2BBEBD02000
|
unkown
|
page read and write
|
||
7FF51CE96000
|
unkown image
|
page readonly
|
||
7FF4FFF36000
|
unkown image
|
page readonly
|
||
23F8E302000
|
unkown
|
page read and write
|
||
2BBF1204000
|
unkown
|
page read and write
|
||
259C91A0000
|
unkown image
|
page readonly
|
||
7FF59FC1D000
|
unkown image
|
page readonly
|
||
7FF5A35EF000
|
unkown image
|
page readonly
|
||
2B325E80000
|
unkown image
|
page readonly
|
||
7FF595D3A000
|
unkown image
|
page readonly
|
||
7FF5960B3000
|
unkown image
|
page readonly
|
||
7FF5D23AF000
|
unkown image
|
page readonly
|
||
7DF5B5772000
|
unkown image
|
page readonly
|
||
7DF54EF22000
|
unkown image
|
page readonly
|
||
2F10000
|
unkown
|
page read and write
|
||
2BBEBCA8000
|
unkown
|
page read and write
|
||
7FF59FDB5000
|
unkown image
|
page readonly
|
||
2FDB000
|
unkown image
|
page readonly
|
||
7FF51CECF000
|
unkown image
|
page readonly
|
||
23F8E0A0000
|
unkown image
|
page readonly
|
||
7FF4FFE63000
|
unkown image
|
page readonly
|
||
E26B07B000
|
unkown
|
page read and write
|
||
28F4CC62000
|
unkown
|
page read and write
|
||
7FF5C4BE0000
|
unkown image
|
page readonly
|
||
14520050000
|
unkown image
|
page readonly
|
||
7DF5327D2000
|
unkown image
|
page readonly
|
||
7DF5ABAD0000
|
unkown image
|
page readonly
|
||
7FF5D250D000
|
unkown image
|
page readonly
|
||
155A3A66000
|
unkown
|
page read and write
|
||
2F48000
|
unkown
|
page read and write
|
||
2BBF1300000
|
unkown
|
page read and write
|
||
7FF5C4CF6000
|
unkown image
|
page readonly
|
||
F1955FE000
|
unkown
|
page read and write
|
||
609000
|
unkown
|
page read and write
|
||
28F4CC46000
|
unkown
|
page read and write
|
||
1775AFE000
|
unkown
|
page read and write
|
||
7FF4FFE15000
|
unkown image
|
page readonly
|
||
1451FB08000
|
unkown
|
page read and write
|
||
2B326200000
|
unkown image
|
page readonly
|
||
7FF4FFD5E000
|
unkown image
|
page readonly
|
||
1451FA3C000
|
unkown
|
page read and write
|
||
2BBEC502000
|
unkown
|
page read and write
|
||
7DF5B8EE2000
|
unkown image
|
page readonly
|
||
2370CB70000
|
unkown image
|
page readonly
|
||
23F8EA02000
|
unkown
|
page read and write
|
||
2BBEBED0000
|
unkown image
|
page readonly
|
||
2BBF11E0000
|
unkown
|
page read and write
|
||
1451FB00000
|
unkown
|
page read and write
|
||
298D57E000
|
unkown
|
page read and write
|
||
7FF5C4AFE000
|
unkown image
|
page readonly
|
||
2BBEC260000
|
unkown image
|
page readonly
|
||
7FF51CA57000
|
unkown image
|
page readonly
|
||
488000
|
unkown image
|
page write copy
|
||
7FF5C4C95000
|
unkown image
|
page readonly
|
||
2B326000000
|
unkown
|
page read and write
|
||
7FFB0000
|
unkown image
|
page readonly
|
||
7FF5960C7000
|
unkown image
|
page readonly
|
||
2370CBC0000
|
heap default
|
page read and write
|
||
8FE4AFE000
|
unkown
|
page read and write
|
||
401000
|
unkown image
|
page execute read
|
||
3B1927F000
|
unkown
|
page read and write
|
||
7FF5D252A000
|
unkown image
|
page readonly
|
||
155A3ED0000
|
unkown image
|
page readonly
|
||
8FE4FFD000
|
unkown
|
page read and write
|
||
259C9990000
|
unkown image
|
page write copy
|
||
2BBF1020000
|
unkown
|
page read and write
|
||
7FF5A34E7000
|
unkown image
|
page readonly
|
||
C00000
|
unkown image
|
page readonly
|
||
7FF53941E000
|
unkown image
|
page readonly
|
||
259C9287000
|
unkown
|
page read and write
|
||
7DF4B3640000
|
unkown image
|
page readonly
|
||
60A000
|
unkown
|
page read and write
|
||
43D0000
|
unkown
|
page read and write
|
||
1451F8E0000
|
heap private
|
page read and write
|
||
7FF51CE05000
|
unkown image
|
page readonly
|
||
7FEB0000
|
unkown image
|
page readonly
|
||
7FF5395FB000
|
unkown image
|
page readonly
|
||
7FF4FFE9E000
|
unkown image
|
page readonly
|
||
7FF51CE13000
|
unkown image
|
page readonly
|
||
385F000
|
unkown
|
page read and write
|
||
FE2A47E000
|
unkown
|
page read and write
|
||
2BBEBC13000
|
unkown
|
page read and write
|
||
7DF515880000
|
unkown image
|
page readonly
|
||
55E000
|
unkown
|
page read and write
|
||
7DF5157A2000
|
unkown image
|
page readonly
|
||
7FF5D25AB000
|
unkown image
|
page readonly
|
||
28F4CC13000
|
unkown
|
page read and write
|
||
7FF5D24F8000
|
unkown image
|
page readonly
|
||
1451F940000
|
heap default
|
page read and write
|
||
2B326054000
|
unkown
|
page read and write
|
||
28F4D202000
|
unkown
|
page read and write
|
||
1451FA4F000
|
unkown
|
page read and write
|
||
2BBECBE0000
|
unkown
|
page read and write
|
||
7FF596080000
|
unkown image
|
page readonly
|
||
7FF5961AB000
|
unkown image
|
page readonly
|
||
28F4CC5E000
|
unkown
|
page read and write
|
||
7FF4FFF3B000
|
unkown image
|
page readonly
|
||
7FF595936000
|
unkown image
|
page readonly
|
||
21449400000
|
unkown image
|
page readonly
|
||
7FF4FFE7C000
|
unkown image
|
page readonly
|
||
2B326061000
|
unkown
|
page read and write
|
||
2BBEBB10000
|
unkown image
|
page readonly
|
||
23F8E200000
|
unkown
|
page read and write
|
||
7DF5E7ED2000
|
unkown image
|
page readonly
|
||
306B000
|
unkown image
|
page readonly
|
||
2B32605E000
|
unkown
|
page read and write
|
||
23F8E202000
|
unkown
|
page read and write
|
||
7FF5A3525000
|
unkown image
|
page readonly
|
||
7FF4FFA48000
|
unkown image
|
page readonly
|
||
155A3A02000
|
unkown
|
page read and write
|
||
298D8F7000
|
unkown
|
page read and write
|
||
2B326580000
|
unkown image
|
page readonly
|
||
7FF4FFC23000
|
unkown image
|
page readonly
|
||
2BBEBB10000
|
unkown image
|
page readonly
|
||
2FB8000
|
unkown image
|
page readonly
|
||
23F8E0F0000
|
heap default
|
page read and write
|
||
28F4C9D0000
|
heap private
|
page read and write
|
||
A1E000
|
unkown
|
page read and write
|
||
28F4D180000
|
unkown image
|
page readonly
|
||
2BBEBC88000
|
unkown
|
page read and write
|
||
2BBF11E1000
|
unkown
|
page read and write
|
||
28F4CC6B000
|
unkown
|
page read and write
|
||
7DF515870000
|
unkown image
|
page readonly
|
||
31DF000
|
unkown
|
page read and write
|
||
259C9213000
|
unkown
|
page read and write
|
||
1451FA13000
|
unkown
|
page read and write
|
||
2BBF141F000
|
unkown
|
page read and write
|
||
2B325EB0000
|
unkown image
|
page readonly
|
||
7FF51C65A000
|
unkown image
|
page readonly
|
||
155A3A76000
|
unkown
|
page read and write
|
||
23F8E080000
|
unkown image
|
page read and write
|
||
7FF5A3533000
|
unkown image
|
page readonly
|
||
7F610000
|
unkown image
|
page readonly
|
||
2BBEC559000
|
unkown
|
page read and write
|
||
2370CD13000
|
unkown
|
page read and write
|
||
31F0000
|
unkown
|
page read and write
|
||
7FF59F9DA000
|
unkown image
|
page readonly
|
||
21448FD0000
|
unkown image
|
page readonly
|
||
7FF5A2CA2000
|
unkown image
|
page readonly
|
||
7FF5392E3000
|
unkown image
|
page readonly
|
||
32D000
|
unkown
|
page read and write
|
||
7FF5A35B6000
|
unkown image
|
page readonly
|
||
321000
|
unkown
|
page read and write
|
||
2BBF12F0000
|
unkown
|
page read and write
|
||
2C5C000
|
unkown
|
page read and write
|
||
2BBF144C000
|
unkown
|
page read and write
|
||
2BBEBCB1000
|
unkown
|
page read and write
|
||
7DF5ABAB0000
|
unkown image
|
page readonly
|
||
259C9302000
|
unkown
|
page read and write
|
||
7DF4B6DB0000
|
unkown image
|
page readonly
|
||
7FF59FCF4000
|
unkown image
|
page readonly
|
||
7FF51CEBB000
|
unkown image
|
page readonly
|
||
3491000
|
unkown
|
page read and write
|
||
E26AFFE000
|
unkown
|
page read and write
|
||
E26B17C000
|
unkown
|
page read and write
|
||
7DF430690000
|
unkown image
|
page readonly
|
||
7FF5C4574000
|
unkown image
|
page readonly
|
||
2B326002000
|
unkown
|
page read and write
|
||
36F0000
|
unkown
|
page read and write
|
||
7FF51CE09000
|
unkown image
|
page readonly
|
||
A61847B000
|
unkown
|
page read and write
|
||
7FF5D2515000
|
unkown image
|
page readonly
|
||
2D9A000
|
unkown
|
page read and write
|
||
2BBEBB40000
|
unkown image
|
page readonly
|
||
2BBEC250000
|
unkown image
|
page readonly
|
||
1451F8D0000
|
unkown image
|
page read and write
|
||
2BBF11C0000
|
unkown
|
page read and write
|
||
17759FB000
|
unkown
|
page read and write
|
||
7FF5D25DF000
|
unkown image
|
page readonly
|
||
2BBF1454000
|
unkown
|
page read and write
|
||
FE2A5FB000
|
unkown
|
page read and write
|
||
3750000
|
unkown
|
page read and write
|
||
7DF5157A2000
|
unkown image
|
page readonly
|
||
23F8E23D000
|
unkown
|
page read and write
|
||
7FF5A35DE000
|
unkown image
|
page readonly
|
||
7DF5157C0000
|
unkown image
|
page readonly
|
||
5C0000
|
heap private
|
page read and write
|
||
7FF51C63C000
|
unkown image
|
page readonly
|
||
7FF5D1CA0000
|
unkown image
|
page readonly
|
||
2BBEC500000
|
unkown
|
page read and write
|
||
7DF5157B2000
|
unkown image
|
page readonly
|
||
28F4CC26000
|
unkown
|
page read and write
|
||
2BBF11E4000
|
unkown
|
page read and write
|
||
2BBF1030000
|
unkown
|
page read and write
|
||
2B326108000
|
unkown
|
page read and write
|
||
43F0B7E000
|
unkown
|
page read and write
|
||
7FF596103000
|
unkown image
|
page readonly
|
||
43F0E7E000
|
unkown
|
page read and write
|
||
7FF51CECF000
|
unkown image
|
page readonly
|
||
2BBEBC98000
|
unkown
|
page read and write
|
||
7FF51CC6D000
|
unkown image
|
page readonly
|
||
7FF595D25000
|
unkown image
|
page readonly
|
||
2BBECB00000
|
unkown image
|
page read and write
|
||
2BBEC415000
|
unkown
|
page read and write
|
||
7FF5C49BA000
|
unkown image
|
page readonly
|
||
7FF59FE3F000
|
unkown image
|
page readonly
|
||
2BBEBC71000
|
unkown
|
page read and write
|
||
6FB000
|
unkown
|
page read and write
|
||
7FF59F9DE000
|
unkown image
|
page readonly
|
||
2B1F000
|
unkown
|
page read and write
|
||
3480000
|
unkown
|
page read and write
|
||
7DF5B5772000
|
unkown image
|
page readonly
|
||
2BBF11F0000
|
unkown
|
page read and write
|
||
23F8E600000
|
unkown image
|
page readonly
|
||
8FE4EFD000
|
unkown
|
page read and write
|
||
2F10000
|
unkown
|
page read and write
|
||
7FF595D47000
|
unkown image
|
page readonly
|
||
7FF5C4C5D000
|
unkown image
|
page readonly
|
||
DE0000
|
unkown image
|
page readonly
|
||
2BBEBB70000
|
unkown image
|
page readonly
|
||
3B18FFB000
|
unkown
|
page read and write
|
||
7DF54EF32000
|
unkown image
|
page readonly
|
||
259C92C1000
|
unkown
|
page read and write
|
||
900000
|
heap default
|
page read and write
|
||
21449780000
|
unkown image
|
page readonly
|
||
2FE9000
|
unkown image
|
page readonly
|
||
2C5E000
|
unkown
|
page read and write
|
||
7FF4FFEB3000
|
unkown image
|
page readonly
|
||
7FF5C4D2F000
|
unkown image
|
page readonly
|
||
7DF5327E0000
|
unkown image
|
page readonly
|
||
7FF595D2B000
|
unkown image
|
page readonly
|
||
7DF5ABAC2000
|
unkown image
|
page readonly
|
||
7FF5960F9000
|
unkown image
|
page readonly
|
||
8DE000
|
unkown
|
page read and write
|
||
1451FA82000
|
unkown
|
page read and write
|
||
2BBEC518000
|
unkown
|
page read and write
|
||
7DF5DA630000
|
unkown image
|
page readonly
|
||
2BBF14F6000
|
unkown
|
page read and write
|
||
7FF5960AC000
|
unkown image
|
page readonly
|
||
2BBF14AE000
|
unkown
|
page read and write
|
||
7FF5C4BCD000
|
unkown image
|
page readonly
|
||
2370CC50000
|
unkown
|
page read and write
|
||
7FF4FF602000
|
unkown image
|
page readonly
|
||
2BBEC558000
|
unkown
|
page read and write
|
||
FE2A97F000
|
unkown
|
page read and write
|
||
7FF4FFE7B000
|
unkown image
|
page readonly
|
||
1451F8F0000
|
unkown image
|
page readonly
|
||
1451FA2A000
|
unkown
|
page read and write
|
||
2370CC49000
|
unkown
|
page read and write
|
||
7FF596094000
|
unkown image
|
page readonly
|
||
28F4CC7E000
|
unkown
|
page read and write
|
||
7FF5D2545000
|
unkown image
|
page readonly
|
||
3B1917B000
|
unkown
|
page read and write
|
||
FE2A877000
|
unkown
|
page read and write
|
||
3491000
|
unkown
|
page read and write
|
||
2BBEBB90000
|
unkown
|
page read and write
|
||
7FF5D24EC000
|
unkown image
|
page readonly
|
||
7DF5B5770000
|
unkown image
|
page readonly
|
||
28F4CC74000
|
unkown
|
page read and write
|
||
7FF5A35DB000
|
unkown image
|
page readonly
|
||
38A0000
|
heap private
|
page read and write
|
||
2BBEBB30000
|
unkown image
|
page readonly
|
||
7FF59FE7F000
|
unkown image
|
page readonly
|
||
7DF5E7EE0000
|
unkown image
|
page readonly
|
||
23F8E1D0000
|
unkown image
|
page readonly
|
||
70F000
|
unkown
|
page read and write
|
||
259C91A0000
|
unkown image
|
page readonly
|
||
7FF5395E8000
|
unkown image
|
page readonly
|
||
2B325FD0000
|
unkown
|
page read and write
|
||
7DF515872000
|
unkown image
|
page readonly
|
||
7FF595D34000
|
unkown image
|
page readonly
|
||
72B000
|
unkown
|
page read and write
|
||
7DF5DA622000
|
unkown image
|
page readonly
|
||
7FFB2000
|
unkown image
|
page readonly
|
||
2370CC4A000
|
unkown
|
page read and write
|
||
7FF4FFDE9000
|
unkown image
|
page readonly
|
||
7FF59617F000
|
unkown image
|
page readonly
|
||
603000
|
unkown
|
page read and write
|
||
2370CBA0000
|
unkown image
|
page readonly
|
||
155A4060000
|
unkown image
|
page readonly
|
||
7FF59F6C4000
|
unkown image
|
page readonly
|
||
8FE4DFF000
|
unkown
|
page read and write
|
||
7FF4FFDA3000
|
unkown image
|
page readonly
|
||
FE2AA7F000
|
unkown
|
page read and write
|
||
7FF4FFC9E000
|
unkown image
|
page readonly
|
||
9FF000
|
unkown
|
page read and write
|
||
2370CC4B000
|
unkown
|
page read and write
|
||
7FF5C4CFB000
|
unkown image
|
page readonly
|
||
2BBEBC3F000
|
unkown
|
page read and write
|
||
2BBF12D0000
|
unkown
|
page read and write
|
||
7FF4FFE94000
|
unkown image
|
page readonly
|
||
7DF5DA620000
|
unkown image
|
page readonly
|
||
7FF4FFA39000
|
unkown image
|
page readonly
|
||
21449213000
|
unkown
|
page read and write
|
||
7DF5DA640000
|
unkown image
|
page readonly
|
||
3B1937F000
|
unkown
|
page read and write
|
||
7DF5DA632000
|
unkown image
|
page readonly
|
||
7FF539600000
|
unkown image
|
page readonly
|
||
2370CC3C000
|
unkown
|
page read and write
|
||
2FB4000
|
unkown image
|
page readonly
|
||
7FF5390F9000
|
unkown image
|
page readonly
|
||
289F000
|
unkown
|
page read and write
|
||
298D6FE000
|
unkown
|
page read and write
|
||
3B1977F000
|
unkown
|
page read and write
|
||
7FF5D237D000
|
unkown image
|
page readonly
|
||
31DE000
|
unkown
|
page read and write
|
||
3087000
|
unkown image
|
page readonly
|
||
E26B1FB000
|
unkown
|
page read and write
|
||
7DF4D84F0000
|
unkown image
|
page readonly
|
||
43C1000
|
unkown
|
page read and write
|
||
2370CC70000
|
unkown
|
page read and write
|
||
7FF51C63A000
|
unkown image
|
page readonly
|
||
7FF5960CC000
|
unkown image
|
page readonly
|
||
14520202000
|
unkown
|
page read and write
|
||
F19577F000
|
unkown
|
page read and write
|
||
7FF5394A4000
|
unkown image
|
page readonly
|
||
609000
|
unkown
|
page read and write
|
||
7FF5A35EF000
|
unkown image
|
page readonly
|
||
7DF5B8EE0000
|
unkown image
|
page readonly
|
||
7FF59618B000
|
unkown image
|
page readonly
|
||
7FF51CDE8000
|
unkown image
|
page readonly
|
||
2BBEC3A0000
|
unkown image
|
page readonly
|
||
7FF5393CD000
|
unkown image
|
page readonly
|
||
28F4CC57000
|
unkown
|
page read and write
|
||
7DF54EF20000
|
unkown image
|
page readonly
|
||
259C91C0000
|
unkown image
|
page readonly
|
||
7FF539565000
|
unkown image
|
page readonly
|
||
21448FD0000
|
unkown image
|
page readonly
|
||
7FF4FFEAB000
|
unkown image
|
page readonly
|
||
21448FF0000
|
unkown image
|
page readonly
|
||
28DE000
|
unkown
|
page read and write
|
||
7F602000
|
unkown image
|
page readonly
|
||
7FF5961AE000
|
unkown image
|
page readonly
|
||
D80000
|
unkown image
|
page readonly
|
||
3B1997F000
|
unkown
|
page read and write
|
||
31EF000
|
unkown
|
page read and write
|
||
7FF4FFE8D000
|
unkown image
|
page readonly
|
||
6C4000
|
unkown
|
page read and write
|
||
2BBF149D000
|
unkown
|
page read and write
|
||
7FF4FFDDD000
|
unkown image
|
page readonly
|
||
28F4CC6A000
|
unkown
|
page read and write
|
||
2BBED020000
|
unkown
|
page read and write
|
||
3590000
|
unkown
|
page read and write
|
||
7FF595D64000
|
unkown image
|
page readonly
|
||
400000
|
unkown image
|
page readonly
|
||
1451FA00000
|
unkown
|
page read and write
|
||
21449313000
|
unkown
|
page read and write
|
||
7FF4FFC4D000
|
unkown image
|
page readonly
|
||
7FF5A35ED000
|
unkown image
|
page readonly
|
||
7FF5A35C0000
|
unkown image
|
page readonly
|
||
7FF5C4D0D000
|
unkown image
|
page readonly
|
||
7FF5D25CE000
|
unkown image
|
page readonly
|
||
2B32603C000
|
unkown
|
page read and write
|
||
7FF4FFEBA000
|
unkown image
|
page readonly
|
||
1451F8F0000
|
unkown image
|
page readonly
|
||
3087000
|
unkown image
|
page readonly
|
||
7FF59FD87000
|
unkown image
|
page readonly
|
||
8FE487B000
|
unkown
|
page read and write
|
||
28F4CC00000
|
unkown
|
page read and write
|
||
7FF4FFD33000
|
unkown image
|
page readonly
|
||
2BBEC518000
|
unkown
|
page read and write
|
||
1451FA56000
|
unkown
|
page read and write
|
||
318000
|
unkown
|
page read and write
|
||
5E7000
|
unkown
|
page read and write
|
||
2BBEC513000
|
unkown
|
page read and write
|
||
7FF595F8C000
|
unkown image
|
page readonly
|
||
609000
|
heap private
|
page read and write
|
||
23F8E780000
|
unkown image
|
page readonly
|
||
23F8E090000
|
heap private
|
page read and write
|
||
7FF5D22E7000
|
unkown image
|
page readonly
|
||
F1956FE000
|
unkown
|
page read and write
|
||
7F620000
|
unkown image
|
page readonly
|
||
7FF596098000
|
unkown image
|
page readonly
|
||
7FF4FFEA9000
|
unkown image
|
page readonly
|
||
7FF4FFE80000
|
unkown image
|
page readonly
|
||
7FF4FFA33000
|
unkown image
|
page readonly
|
||
2BBEC3D0000
|
unkown image
|
page readonly
|
||
324000
|
unkown
|
page read and write
|
||
7DF54EF30000
|
unkown image
|
page readonly
|
||
7DF5157B0000
|
unkown image
|
page readonly
|
||
7FF5D226A000
|
unkown image
|
page readonly
|
||
7DF5157A0000
|
unkown image
|
page readonly
|
||
43F0C77000
|
unkown
|
page read and write
|
||
7FF4FFE76000
|
unkown image
|
page readonly
|
||
7DF5B8EF0000
|
unkown image
|
page readonly
|
||
7FF5961BD000
|
unkown image
|
page readonly
|
||
2BBF1320000
|
unkown
|
page read and write
|
||
7FF539614000
|
unkown image
|
page readonly
|
||
314F000
|
unkown
|
page read and write
|
||
7FF539443000
|
unkown image
|
page readonly
|
||
7FF5D24C2000
|
unkown image
|
page readonly
|
||
7DF5E7ED0000
|
unkown image
|
page readonly
|
||
7FF5D24D7000
|
unkown image
|
page readonly
|
||
F195BFE000
|
unkown
|
page read and write
|
||
600000
|
heap private
|
page read and write
|
||
3B1967E000
|
unkown
|
page read and write
|
||
7FF595EE3000
|
unkown image
|
page readonly
|
||
7FF4FFDA7000
|
unkown image
|
page readonly
|
||
2B32607F000
|
unkown
|
page read and write
|
||
28F4CC45000
|
unkown
|
page read and write
|
||
21449020000
|
heap default
|
page read and write
|
||
7FF4FFF4D000
|
unkown image
|
page readonly
|
||
31DF000
|
unkown
|
page read and write
|
||
7FF59FDCA000
|
unkown image
|
page readonly
|
||
7DF5327C2000
|
unkown image
|
page readonly
|
||
155A3920000
|
heap private
|
page read and write
|
||
7DF5B5782000
|
unkown image
|
page readonly
|
||
2BBF12E0000
|
unkown
|
page read and write
|
||
8FE4D7D000
|
unkown
|
page read and write
|
||
7FF5C4C12000
|
unkown image
|
page readonly
|
||
155A3950000
|
unkown image
|
page readonly
|
||
A6189FF000
|
unkown
|
page read and write
|
||
2BBEBB60000
|
heap default
|
page read and write
|
||
7FF5A32A6000
|
unkown image
|
page readonly
|
||
7FF5D25BD000
|
unkown image
|
page readonly
|
||
7FF5A351D000
|
unkown image
|
page readonly
|
||
155A3A60000
|
unkown
|
page read and write
|
||
7FF59FE64000
|
unkown image
|
page readonly
|
||
7FF59FE6B000
|
unkown image
|
page readonly
|
||
7FF4FFE9B000
|
unkown image
|
page readonly
|
||
7FF4FFE67000
|
unkown image
|
page readonly
|
||
7DF5157C0000
|
unkown image
|
page readonly
|
||
31F2000
|
unkown
|
page read and write
|
||
7DF5ABAD0000
|
unkown image
|
page readonly
|
||
298D9FF000
|
unkown
|
page read and write
|
||
7DF413730000
|
unkown image
|
page readonly
|
||
F1952FB000
|
unkown
|
page read and write
|
||
28F4CC5F000
|
unkown
|
page read and write
|
||
7DF5B5782000
|
unkown image
|
page readonly
|
||
7DF515862000
|
unkown image
|
page readonly
|
||
7DF5E7EF0000
|
unkown image
|
page readonly
|
||
2BBF11F0000
|
unkown
|
page read and write
|
||
A61857E000
|
unkown
|
page read and write
|
||
155A3960000
|
unkown image
|
page readonly
|
||
7FFB2000
|
unkown image
|
page readonly
|
||
7FF539548000
|
unkown image
|
page readonly
|
||
7FF51CE1A000
|
unkown image
|
page readonly
|
||
7FF5395EF000
|
unkown image
|
page readonly
|
||
7F620000
|
unkown image
|
page readonly
|
||
7FF59FE4B000
|
unkown image
|
page readonly
|
||
A6186FE000
|
unkown
|
page read and write
|
||
8FF000
|
unkown
|
page read and write
|
||
155A3A40000
|
unkown
|
page read and write
|
||
60B000
|
unkown
|
page read and write
|
||
2FB0000
|
unkown image
|
page readonly
|
||
23F8E880000
|
unkown
|
page read and write
|
||
7FF595F5D000
|
unkown image
|
page readonly
|
||
7FF4FFF6F000
|
unkown image
|
page readonly
|
||
7FF51CE88000
|
unkown image
|
page readonly
|
||
2BBF1320000
|
unkown
|
page read and write
|
||
7FF59FD98000
|
unkown image
|
page readonly
|
||
2F10000
|
unkown
|
page read and write
|
||
28F4CC84000
|
unkown
|
page read and write
|
||
7FF4FFF5E000
|
unkown image
|
page readonly
|
||
7FF5A338D000
|
unkown image
|
page readonly
|
||
155A3A29000
|
unkown
|
page read and write
|
||
5E0000
|
heap default
|
page read and write
|
||
60A000
|
unkown
|
page read and write
|
||
7FF5A34C0000
|
unkown image
|
page readonly
|
||
2BBEC402000
|
unkown
|
page read and write
|
||
7FF595EC7000
|
unkown image
|
page readonly
|
||
7A0000
|
heap default
|
page read and write
|
||
2B326802000
|
unkown
|
page read and write
|
||
7FF4FFCFF000
|
unkown image
|
page readonly
|
||
30000
|
unkown image
|
page read and write
|
||
7FF4FFF6F000
|
unkown image
|
page readonly
|
||
605000
|
unkown
|
page read and write
|
||
23F8E1F0000
|
unkown
|
page read and write
|
||
9C000
|
unkown
|
page read and write
|
||
3002000
|
unkown
|
page read and write
|
||
21449600000
|
unkown image
|
page readonly
|
||
7DF5B8EF2000
|
unkown image
|
page readonly
|
||
7FF4FF973000
|
unkown image
|
page readonly
|
||
7DF5B5780000
|
unkown image
|
page readonly
|
||
7DF5327C2000
|
unkown image
|
page readonly
|
||
7DF5157A0000
|
unkown image
|
page readonly
|
||
63A000
|
heap default
|
page read and write
|
||
21449100000
|
unkown image
|
page readonly
|
||
A5F000
|
unkown
|
page read and write
|
||
2BBF149F000
|
unkown
|
page read and write
|
||
7FF53961B000
|
unkown image
|
page readonly
|
||
1451FB02000
|
unkown
|
page read and write
|
||
2370CB50000
|
unkown image
|
page read and write
|
||
7FF4FFF2F000
|
unkown image
|
page readonly
|
||
7FF59FC12000
|
unkown image
|
page readonly
|
||
3B20000
|
unkown
|
page read and write
|
||
7F602000
|
unkown image
|
page readonly
|
||
155A4202000
|
unkown
|
page read and write
|
||
28F4CA00000
|
unkown image
|
page readonly
|
||
FE2A18B000
|
unkown
|
page read and write
|
||
7DF5B8EF2000
|
unkown image
|
page readonly
|
||
603000
|
unkown
|
page read and write
|
||
780000
|
unkown image
|
page readonly
|
||
2BBEBB00000
|
heap private
|
page read and write
|
||
7FF539527000
|
unkown image
|
page readonly
|
||
7FF5960A2000
|
unkown image
|
page readonly
|
||
3071000
|
unkown image
|
page readonly
|
||
7FF5961BB000
|
unkown image
|
page readonly
|
||
7DF5157B0000
|
unkown image
|
page readonly
|
||
259C91F0000
|
heap default
|
page read and write
|
||
28F4CC31000
|
unkown
|
page read and write
|
||
155A39B0000
|
unkown
|
page read and write
|
||
7DF515870000
|
unkown image
|
page readonly
|
||
3490000
|
unkown
|
page read and write
|
||
7FF4FFD83000
|
unkown image
|
page readonly
|
||
7DF5E7EF0000
|
unkown image
|
page readonly
|
||
275F000
|
unkown
|
page read and write
|
||
2B326013000
|
unkown
|
page read and write
|
||
259C9190000
|
heap private
|
page read and write
|
||
F19567F000
|
unkown
|
page read and write
|
||
7FF59594F000
|
unkown image
|
page readonly
|
||
2370CC4D000
|
unkown
|
page read and write
|
||
E26B2FC000
|
unkown
|
page read and write
|
||
2B326066000
|
unkown
|
page read and write
|
||
2A1E000
|
unkown
|
page read and write
|
||
181000
|
unkown
|
page read and write
|
||
7FF595EAA000
|
unkown image
|
page readonly
|
||
2370CBD0000
|
unkown image
|
page readonly
|
||
7FF5A35D4000
|
unkown image
|
page readonly
|
||
7FF595F54000
|
unkown image
|
page readonly
|
||
7FF4FFF5B000
|
unkown image
|
page readonly
|
||
7DF5B5790000
|
unkown image
|
page readonly
|
||
7FF4FFA37000
|
unkown image
|
page readonly
|
||
21449302000
|
unkown
|
page read and write
|
||
7FF5D24CC000
|
unkown image
|
page readonly
|
||
68C000
|
unkown
|
page read and write
|
||
2BBF1200000
|
unkown
|
page read and write
|
||
2F14000
|
unkown
|
page read and write
|
||
2BBEC3E0000
|
unkown image
|
page readonly
|
||
7FF51CECB000
|
unkown image
|
page readonly
|
||
21449300000
|
unkown
|
page read and write
|
||
21448FC0000
|
heap private
|
page read and write
|
||
155A3A70000
|
unkown
|
page read and write
|
||
6D0000
|
unkown image
|
page readonly
|
||
2B32608B000
|
unkown
|
page read and write
|
||
7FF59FBC8000
|
unkown image
|
page readonly
|
||
40000
|
unkown image
|
page readonly
|
||
F194E7B000
|
unkown
|
page read and write
|
||
8FE507F000
|
unkown
|
page read and write
|
||
2370CC29000
|
unkown
|
page read and write
|
||
7FFB0000
|
unkown image
|
page readonly
|
||
7FF5A35AF000
|
unkown image
|
page readonly
|
||
7FF59FE4E000
|
unkown image
|
page readonly
|
||
374E000
|
unkown
|
page read and write
|
||
7FF4FFDE4000
|
unkown image
|
page readonly
|
||
7FF53960D000
|
unkown image
|
page readonly
|
||
2BBED001000
|
unkown
|
page read and write
|
||
400000
|
unkown image
|
page readonly
|
||
7DF54EF32000
|
unkown image
|
page readonly
|
||
28F4D000000
|
unkown image
|
page readonly
|
||
155A3990000
|
unkown image
|
page readonly
|
||
7DF5B5770000
|
unkown image
|
page readonly
|
||
31DF000
|
unkown
|
page read and write
|
||
36F0000
|
unkown
|
page read and write
|
||
3B1957F000
|
unkown
|
page read and write
|
||
2BBEBC00000
|
unkown
|
page read and write
|
||
7FF53953C000
|
unkown image
|
page readonly
|
||
259C96D0000
|
unkown image
|
page readonly
|
||
2BBF1415000
|
unkown
|
page read and write
|
||
2FA9000
|
unkown image
|
page readonly
|
||
21449000000
|
unkown image
|
page readonly
|
||
2FEC000
|
unkown image
|
page readonly
|
||
3075000
|
unkown image
|
page readonly
|
||
7FF4FFDFA000
|
unkown image
|
page readonly
|
||
7FF53961E000
|
unkown image
|
page readonly
|
||
7FF595F57000
|
unkown image
|
page readonly
|
||
7FF5C4D1B000
|
unkown image
|
page readonly
|
||
7FF5C4CFE000
|
unkown image
|
page readonly
|
||
2B325ED0000
|
heap default
|
page read and write
|
||
2BBF10C0000
|
unkown
|
page read and write
|
||
7FF5A34FD000
|
unkown image
|
page readonly
|
||
2BBEBC6C000
|
unkown
|
page read and write
|
||
37D0000
|
heap private
|
page read and write
|
||
7FF4FFB63000
|
unkown image
|
page readonly
|
||
2BBF11C0000
|
unkown
|
page read and write
|
||
2BBEBC57000
|
unkown
|
page read and write
|
||
17754BB000
|
unkown
|
page read and write
|
||
333000
|
unkown
|
page read and write
|
||
7FF51CEA0000
|
unkown image
|
page readonly
|
||
2BBF1461000
|
unkown
|
page read and write
|
||
2BBF1320000
|
unkown
|
page read and write
|
||
259C9870000
|
unkown image
|
page readonly
|
||
29DF000
|
unkown
|
page read and write
|
||
7DF5E7EE0000
|
unkown image
|
page readonly
|
||
2370CC13000
|
unkown
|
page read and write
|
||
7FF5D2519000
|
unkown image
|
page readonly
|
||
2370CD08000
|
unkown
|
page read and write
|
||
28F4CC3A000
|
unkown
|
page read and write
|
||
23F8E890000
|
unkown
|
page read and write
|
||
7FF596034000
|
unkown image
|
page readonly
|
||
7DF5ABAC2000
|
unkown image
|
page readonly
|
||
2B325E80000
|
unkown image
|
page readonly
|
||
2BBF14ED000
|
unkown
|
page read and write
|
||
7FF5961BF000
|
unkown image
|
page readonly
|
||
7FF5D239C000
|
unkown image
|
page readonly
|
||
2BBF14F1000
|
unkown
|
page read and write
|
||
7FF51CEBE000
|
unkown image
|
page readonly
|
||
28F4CA30000
|
heap default
|
page read and write
|
||
7FF595F78000
|
unkown image
|
page readonly
|
||
7FF5C4C7A000
|
unkown image
|
page readonly
|
||
7FF4FFDBF000
|
unkown image
|
page readonly
|
||
7FF5A32E8000
|
unkown image
|
page readonly
|
||
2BBEBC2A000
|
unkown
|
page read and write
|
||
2B326113000
|
unkown
|
page read and write
|
||
1775C7E000
|
unkown
|
page read and write
|
||
7FF5D24E8000
|
unkown image
|
page readonly
|
||
2B325FB0000
|
unkown image
|
page readonly
|
||
60A000
|
unkown
|
page read and write
|
||
7FF59FDAD000
|
unkown image
|
page readonly
|
||
1451F970000
|
unkown
|
page read and write
|
||
2BBF14F9000
|
unkown
|
page read and write
|
||
2BBF10B0000
|
unkown
|
page read and write
|
||
28F4C9E0000
|
unkown image
|
page readonly
|
||
A6184FE000
|
unkown
|
page read and write
|
||
7FF5A35A8000
|
unkown image
|
page readonly
|
||
7DF515880000
|
unkown image
|
page readonly
|
||
28F4CC47000
|
unkown
|
page read and write
|
||
50E000
|
unkown image
|
page readonly
|
||
7FF59FB3C000
|
unkown image
|
page readonly
|
||
298D47C000
|
unkown
|
page read and write
|
||
7FF4FFD05000
|
unkown image
|
page readonly
|
||
7FF59592C000
|
unkown image
|
page readonly
|
||
A6188FE000
|
unkown
|
page read and write
|
||
7A7000
|
heap default
|
page read and write
|
||
1451FED0000
|
unkown image
|
page readonly
|
||
23F8E400000
|
unkown image
|
page readonly
|
||
5E7000
|
unkown
|
page read and write
|
||
2DDE000
|
unkown
|
page read and write
|
||
7FFD0000
|
unkown image
|
page readonly
|
||
7DF5E7ED0000
|
unkown image
|
page readonly
|
||
7F600000
|
unkown image
|
page readonly
|
||
7FF5C4C1C000
|
unkown image
|
page readonly
|
||
155A3910000
|
unkown image
|
page read and write
|
||
7FF59618E000
|
unkown image
|
page readonly
|
||
7FF5C4A46000
|
unkown image
|
page readonly
|
||
5E5000
|
heap default
|
page read and write
|
||
7FF4FFE77000
|
unkown image
|
page readonly
|
||
7FF5D22DD000
|
unkown image
|
page readonly
|
||
7FFC0000
|
unkown image
|
page readonly
|
||
620000
|
unkown image
|
page read and write
|
||
7FF53957A000
|
unkown image
|
page readonly
|
||
330000
|
unkown
|
page read and write
|
||
7FF5C4CE8000
|
unkown image
|
page readonly
|
||
7DF5327D0000
|
unkown image
|
page readonly
|
||
7FF4FFDE5000
|
unkown image
|
page readonly
|
||
43F0D7F000
|
unkown
|
page read and write
|
||
7FF5A35BB000
|
unkown image
|
page readonly
|
||
7FF5390F3000
|
unkown image
|
page readonly
|
||
770000
|
unkown
|
page read and write
|
||
630000
|
unkown image
|
page readonly
|
||
E26B4FE000
|
unkown
|
page read and write
|
||
22B0000
|
heap private
|
page read and write
|
||
7FF5C4BE7000
|
unkown image
|
page readonly
|
||
7FF51CDC7000
|
unkown image
|
page readonly
|
||
A00000
|
unkown image
|
page readonly
|
||
7FF4FFD0D000
|
unkown image
|
page readonly
|
||
7FF5C4AA7000
|
unkown image
|
page readonly
|
||
7FF59FD75000
|
unkown image
|
page readonly
|
||
2BBEBC76000
|
unkown
|
page read and write
|
||
7DF515860000
|
unkown image
|
page readonly
|
||
F19557F000
|
unkown
|
page read and write
|
||
259C926D000
|
unkown
|
page read and write
|
||
298D4FE000
|
unkown
|
page read and write
|
||
1451FA80000
|
unkown
|
page read and write
|
||
7DF54EF22000
|
unkown image
|
page readonly
|
||
2BBEC701000
|
unkown
|
page read and write
|
||
21448FB0000
|
unkown image
|
page read and write
|
||
2370CC00000
|
unkown
|
page read and write
|
||
37DA000
|
heap private
|
page read and write
|
||
28F4CC60000
|
unkown
|
page read and write
|
||
155A3930000
|
unkown image
|
page readonly
|
||
7FF5C4CEF000
|
unkown image
|
page readonly
|
||
7FF5C4861000
|
unkown image
|
page readonly
|
There are 1059 hidden memdumps, click here to show them.