Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll
|
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
|
initial sample
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERCF97.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 12:00:21 2021, 0x1205a4 type
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD321.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 12:00:22 2021, 0x1205a4 type
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDA56.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDE10.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDF95.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE0CF.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_100fb986e1756f46c39bcd29fe4136c1b062e4_82810a17_1812e8eb\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_23f57899179e2315822a274bdb180af5dd610e5_82810a17_1436f4b3\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_c06c6d9b89f48a8a0e6e4feba1443adadff228e_82810a17_05e6e1d6\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_c3cbf2193d9fa4edd46cb99d95805ff8d68ee663_82810a17_1a5af733\Report.wer
|
Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERA838.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:20 2021, 0x1205a4 type
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB132.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB170.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:24 2021, 0x1205a4 type
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB3F2.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC140.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC4AA.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:29 2021, 0x1205a4 type
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC71D.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC91E.tmp.dmp
|
Mini DuMP crash report, 14 streams, Thu Oct 28 02:45:30 2021, 0x1205a4 type
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD2B4.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD575.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDCA7.tmp.WERInternalMetadata.xml
|
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
|
dropped
|
||
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE40B.tmp.xml
|
XML 1.0 document, ASCII text, with CRLF line terminators
|
dropped
|
||
C:\Windows\appcompat\Programs\Amcache.hve
|
MS Windows registry file, NT/2000 or above
|
dropped
|
||
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
|
MS Windows registry file, NT/2000 or above
|
dropped
|
There are 15 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll,FFRgpmdlwwWde
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',#1
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',CheckTrust
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',DllCanUnloadNow
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',DllGetClassObject
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',DownloadFile
|
||
C:\Windows\SysWOW64\rundll32.exe
|
rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',GetICifFileFromFile
|
||
C:\Windows\System32\loaddll32.exe
|
loaddll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll'
|
||
C:\Windows\SysWOW64\cmd.exe
|
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Win32.Save.a.28377.dll',#1
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 7144 -s 652
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6296 -s 652
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6360 -s 664
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6368 -s 664
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6360 -s 664
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6396 -s 664
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6368 -s 664
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6396 -s 664
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6372 -s 668
|
||
C:\Windows\SysWOW64\WerFault.exe
|
C:\Windows\SysWOW64\WerFault.exe -u -p 6372 -s 668
|
There are 9 hidden processes, click here to show them.
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
http://www.vomfass.deDVarFileInfo$
|
unknown
|
||
http://upx.sf.net
|
unknown
|
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
66.147.235.11
|
unknown
|
United States
|
||
149.202.179.100
|
unknown
|
France
|
||
81.0.236.89
|
unknown
|
Czech Republic
|
||
192.168.2.1
|
unknown
|
unknown
|
Registry
Path
|
Value
|
Malicious
|
|
---|---|---|---|
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHivePermissionsCorrect
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
|
AmiHiveOwnerCorrect
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProgramId
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
FileId
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LowerCaseLongPath
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LongPathHash
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Name
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Publisher
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Version
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinFileVersion
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinaryType
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductName
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductVersion
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LinkDate
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinProductVersion
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Size
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Language
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsPeFile
|
||
\REGISTRY\A\{e419be6e-638f-98b0-1447-faa9ba358425}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsOsComponent
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
|
ExceptionRecord
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
|
ExceptionRecord
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProgramId
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
FileId
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LowerCaseLongPath
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LongPathHash
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Name
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Publisher
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Version
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinFileVersion
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinaryType
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductName
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
ProductVersion
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
LinkDate
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
BinProductVersion
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Size
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
Language
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsPeFile
|
||
\REGISTRY\A\{98f0e386-68e6-3bf3-70de-f40af499195a}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
|
IsOsComponent
|
||
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
DeviceTicket
|
||
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
DeviceId
|
||
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
|
ApplicationFlags
|
||
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
|
001880059795CE77
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\IdentityCRL\ClockData
|
ClockTimeSeconds
|
||
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\IdentityCRL\ClockData
|
TickCount
|
There are 34 hidden registries, click here to show them.
Memdumps
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
---|---|---|---|---|
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
2D8BDB80000
|
unkown image
|
page readonly
|
||
2D04000
|
unkown image
|
page readonly
|
||
7FF58E2D4000
|
unkown image
|
page readonly
|
||
421F000
|
stack
|
page read and write
|
||
8C34BBF000
|
stack
|
page read and write
|
||
C94E88B000
|
unkown
|
page read and write
|
||
26F3000
|
unkown image
|
page readonly
|
||
88C000
|
unkown
|
page read and write
|
||
7FF58E55E000
|
unkown image
|
page readonly
|
||
7F0B0000
|
unkown image
|
page readonly
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
2BB8000
|
unkown image
|
page readonly
|
||
280F000
|
unkown image
|
page readonly
|
||
7DF484970000
|
unkown image
|
page readonly
|
||
1DFD4C66000
|
unkown
|
page read and write
|
||
4B39B000
|
unkown
|
page read and write
|
||
7FF57314A000
|
unkown image
|
page readonly
|
||
1DFD4C66000
|
unkown
|
page read and write
|
||
3450000
|
unkown image
|
page readonly
|
||
2A70000
|
unkown
|
page read and write
|
||
3380000
|
unkown image
|
page readonly
|
||
7FF52CF05000
|
unkown image
|
page readonly
|
||
7FF57312E000
|
unkown image
|
page readonly
|
||
7F242000
|
unkown image
|
page readonly
|
||
C5A000
|
unkown image
|
page readonly
|
||
2656000
|
unkown image
|
page readonly
|
||
2611000
|
unkown image
|
page readonly
|
||
2A9A000
|
unkown
|
page read and write
|
||
820000
|
unkown image
|
page read and write
|
||
24D1000
|
unkown image
|
page readonly
|
||
260000
|
unkown image
|
page read and write
|
||
26D1000
|
unkown image
|
page readonly
|
||
2AE9000
|
unkown image
|
page readonly
|
||
26CB000
|
unkown image
|
page readonly
|
||
7FF58E57B000
|
unkown image
|
page readonly
|
||
7FF52CF31000
|
unkown image
|
page readonly
|
||
21D59790000
|
unkown image
|
page readonly
|
||
21D59C80000
|
unkown image
|
page readonly
|
||
305D000
|
unkown
|
page read and write
|
||
2AD6000
|
unkown image
|
page readonly
|
||
5160000
|
heap private
|
page read and write
|
||
7DF59C2A0000
|
unkown image
|
page readonly
|
||
7FF52D061000
|
unkown image
|
page readonly
|
||
7FF58E3E3000
|
unkown image
|
page readonly
|
||
7FF578D8B000
|
unkown image
|
page readonly
|
||
7DF580E30000
|
unkown image
|
page readonly
|
||
28CB000
|
unkown image
|
page readonly
|
||
F9403FF000
|
stack
|
page read and write
|
||
7FF578927000
|
unkown image
|
page readonly
|
||
E0A29F9000
|
stack
|
page read and write
|
||
2E10000
|
unkown image
|
page readonly
|
||
6F0000
|
unkown image
|
page readonly
|
||
47B0000
|
unkown
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
7FF58E631000
|
unkown image
|
page readonly
|
||
29D0000
|
unkown image
|
page readonly
|
||
305D000
|
heap default
|
page read and write
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
7FF572FE7000
|
unkown image
|
page readonly
|
||
8F0000
|
unkown image
|
page readonly
|
||
4713000
|
heap private
|
page read and write
|
||
4930000
|
heap private
|
page read and write
|
||
8F0000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
3064000
|
unkown
|
page read and write
|
||
698000
|
unkown
|
page read and write
|
||
2AFB000
|
unkown image
|
page readonly
|
||
7FF57311B000
|
unkown image
|
page readonly
|
||
7FF578CAC000
|
unkown image
|
page readonly
|
||
7FF58E3AB000
|
unkown image
|
page readonly
|
||
C94E90E000
|
stack
|
page read and write
|
||
2B7B000
|
unkown image
|
page readonly
|
||
2F9A000
|
unkown
|
page read and write
|
||
2AFB000
|
unkown image
|
page readonly
|
||
473B000
|
unkown
|
page read and write
|
||
305D000
|
heap default
|
page read and write
|
||
7FF52C86D000
|
unkown image
|
page readonly
|
||
265B000
|
unkown image
|
page readonly
|
||
7FF578D6E000
|
unkown image
|
page readonly
|
||
7FF10000
|
unkown image
|
page readonly
|
||
348E000
|
stack
|
page read and write
|
||
2E10000
|
unkown image
|
page readonly
|
||
7FF58E614000
|
unkown image
|
page readonly
|
||
7DF580E50000
|
unkown image
|
page readonly
|
||
26F8000
|
unkown image
|
page readonly
|
||
830000
|
unkown image
|
page readonly
|
||
7DF59C2A2000
|
unkown image
|
page readonly
|
||
830000
|
unkown image
|
page readonly
|
||
61C0000
|
unkown image
|
page readonly
|
||
305D000
|
unkown
|
page read and write
|
||
4D7000
|
unkown
|
page read and write
|
||
2DA0000
|
unkown
|
page read and write
|
||
7FF52C812000
|
unkown image
|
page readonly
|
||
2B2C000
|
unkown image
|
page readonly
|
||
3310000
|
heap private
|
page read and write
|
||
7FF58DCDF000
|
unkown image
|
page readonly
|
||
7FF52CF57000
|
unkown image
|
page readonly
|
||
21D59820000
|
unkown
|
page read and write
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
7FA82000
|
unkown image
|
page readonly
|
||
28FC000
|
unkown image
|
page readonly
|
||
3010000
|
unkown
|
page read and write
|
||
21D59790000
|
unkown image
|
page readonly
|
||
261A000
|
unkown image
|
page readonly
|
||
2670000
|
unkown image
|
page readonly
|
||
2525000
|
unkown image
|
page readonly
|
||
7FF578DB7000
|
unkown image
|
page readonly
|
||
2836000
|
unkown image
|
page readonly
|
||
21D597C0000
|
unkown image
|
page readonly
|
||
1DFD4B10000
|
unkown image
|
page readonly
|
||
2E4A000
|
heap default
|
page read and write
|
||
F93FA7B000
|
unkown
|
page read and write
|
||
3020000
|
unkown image
|
page read and write
|
||
2B84000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
3260000
|
heap default
|
page read and write
|
||
34D0000
|
heap default
|
page read and write
|
||
2D8BD470000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
7F0A2000
|
unkown image
|
page readonly
|
||
41DE000
|
stack
|
page read and write
|
||
26EC000
|
unkown image
|
page readonly
|
||
770000
|
unkown image
|
page readonly
|
||
26D6000
|
unkown image
|
page readonly
|
||
2F9E000
|
unkown
|
page read and write
|
||
7FF572936000
|
unkown image
|
page readonly
|
||
32FE000
|
stack
|
page read and write
|
||
4721000
|
unkown
|
page read and write
|
||
29A0000
|
unkown
|
page execute and read and write
|
||
390000
|
unkown image
|
page readonly
|
||
7F6F2000
|
unkown image
|
page readonly
|
||
7DF53ACE0000
|
unkown image
|
page readonly
|
||
2F80000
|
unkown image
|
page read and write
|
||
7FF55F0E1000
|
unkown image
|
page readonly
|
||
2616000
|
unkown image
|
page readonly
|
||
7FF578E41000
|
unkown image
|
page readonly
|
||
7FA80000
|
unkown image
|
page readonly
|
||
557000
|
unkown
|
page read and write
|
||
7FF10000
|
unkown image
|
page readonly
|
||
2908000
|
unkown image
|
page readonly
|
||
2D20000
|
unkown image
|
page readonly
|
||
7FF58E3EC000
|
unkown image
|
page readonly
|
||
31E0000
|
unkown
|
page read and write
|
||
3317000
|
heap private
|
page read and write
|
||
26E6000
|
unkown image
|
page readonly
|
||
3000000
|
unkown image
|
page readonly
|
||
7F0B0000
|
unkown image
|
page readonly
|
||
2CAC000
|
unkown image
|
page readonly
|
||
287C000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
2611000
|
unkown image
|
page readonly
|
||
2836000
|
unkown image
|
page readonly
|
||
7F0B0000
|
unkown image
|
page readonly
|
||
2D8BD5C0000
|
unkown
|
page read and write
|
||
7F0C0000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
7FA90000
|
unkown image
|
page readonly
|
||
2CC000
|
unkown
|
page read and write
|
||
62E4000
|
heap private
|
page read and write
|
||
C5A000
|
unkown image
|
page readonly
|
||
7FF52CF6F000
|
unkown image
|
page readonly
|
||
3620000
|
unkown
|
page read and write
|
||
263B000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
2ADA000
|
unkown image
|
page readonly
|
||
2DCF000
|
stack
|
page read and write
|
||
7F6E0000
|
unkown image
|
page readonly
|
||
7FF52D055000
|
unkown image
|
page readonly
|
||
1DFD4D13000
|
unkown
|
page read and write
|
||
263F000
|
unkown image
|
page readonly
|
||
7DF59C292000
|
unkown image
|
page readonly
|
||
2B1B000
|
unkown image
|
page readonly
|
||
2DD0000
|
heap private
|
page read and write
|
||
2A96000
|
unkown
|
page read and write
|
||
7FF5730D6000
|
unkown image
|
page readonly
|
||
7DF49A160000
|
unkown image
|
page readonly
|
||
263B000
|
unkown image
|
page readonly
|
||
25D5000
|
unkown image
|
page readonly
|
||
2626000
|
unkown image
|
page readonly
|
||
3030000
|
heap default
|
page read and write
|
||
2FEC000
|
unkown
|
page read and write
|
||
26D1000
|
unkown image
|
page readonly
|
||
7F0B2000
|
unkown image
|
page readonly
|
||
21D59785000
|
heap private
|
page read and write
|
||
F93FEFE000
|
stack
|
page read and write
|
||
7FF52CF87000
|
unkown image
|
page readonly
|
||
1DFD4C02000
|
unkown
|
page read and write
|
||
271A000
|
unkown image
|
page readonly
|
||
2706000
|
unkown image
|
page readonly
|
||
7FF58E58E000
|
unkown image
|
page readonly
|
||
4230000
|
heap private
|
page read and write
|
||
21D59789000
|
heap private
|
page read and write
|
||
7FF58E5AA000
|
unkown image
|
page readonly
|
||
3180000
|
unkown image
|
page readonly
|
||
3079000
|
unkown
|
page read and write
|
||
7FF5730DD000
|
unkown image
|
page readonly
|
||
2AFF000
|
unkown image
|
page readonly
|
||
7F250000
|
unkown image
|
page readonly
|
||
C94EDFB000
|
stack
|
page read and write
|
||
7FF58E4AC000
|
unkown image
|
page readonly
|
||
263B000
|
unkown image
|
page readonly
|
||
2908000
|
unkown image
|
page readonly
|
||
3065000
|
unkown
|
page read and write
|
||
270000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
29E0000
|
unkown
|
page read and write
|
||
2839000
|
unkown image
|
page readonly
|
||
2B7F000
|
unkown image
|
page readonly
|
||
3360000
|
unkown
|
page read and write
|
||
2A5F000
|
stack
|
page read and write
|
||
7EFA0000
|
unkown image
|
page readonly
|
||
2D8BD450000
|
unkown image
|
page read and write
|
||
8C34FF9000
|
stack
|
page read and write
|
||
263F000
|
unkown image
|
page readonly
|
||
2735000
|
unkown image
|
page readonly
|
||
21D5A740000
|
unkown
|
page read and write
|
||
2AD1000
|
unkown image
|
page readonly
|
||
2C7F000
|
unkown image
|
page readonly
|
||
7FF52CFDA000
|
unkown image
|
page readonly
|
||
305D000
|
unkown
|
page read and write
|
||
2B30000
|
unkown image
|
page readonly
|
||
2BAC000
|
unkown image
|
page readonly
|
||
26F8000
|
unkown image
|
page readonly
|
||
30B0000
|
unkown image
|
page readonly
|
||
2B0D000
|
unkown image
|
page readonly
|
||
4FB0000
|
unkown image
|
page readonly
|
||
2845000
|
unkown image
|
page readonly
|
||
4530000
|
unkown image
|
page readonly
|
||
2AD6000
|
unkown image
|
page readonly
|
||
2643000
|
unkown image
|
page readonly
|
||
7DF586AC0000
|
unkown image
|
page readonly
|
||
2EA2000
|
heap default
|
page read and write
|
||
7F232000
|
unkown image
|
page readonly
|
||
26DB000
|
unkown image
|
page readonly
|
||
28332930000
|
heap default
|
page read and write
|
||
2B11000
|
unkown image
|
page readonly
|
||
2AB1000
|
unkown image
|
page readonly
|
||
7F560000
|
unkown image
|
page readonly
|
||
4B280000
|
unkown
|
page read and write
|
||
2611000
|
unkown image
|
page readonly
|
||
3AE0000
|
unkown image
|
page readonly
|
||
2629000
|
unkown image
|
page readonly
|
||
7FF52CF8E000
|
unkown image
|
page readonly
|
||
4DB000
|
unkown
|
page read and write
|
||
62F0000
|
unkown
|
page read and write
|
||
2CB0000
|
unkown image
|
page readonly
|
||
3640000
|
heap private
|
page read and write
|
||
26E6000
|
unkown image
|
page readonly
|
||
2990000
|
stack
|
page execute and read and write
|
||
4814000
|
unkown
|
page read and write
|
||
2D11000
|
unkown image
|
page readonly
|
||
2B65000
|
unkown image
|
page readonly
|
||
4D54000
|
unkown
|
page read and write
|
||
2BB8000
|
unkown image
|
page readonly
|
||
7FF578E2A000
|
unkown image
|
page readonly
|
||
7F5E0000
|
unkown image
|
page readonly
|
||
2AE6000
|
unkown image
|
page readonly
|
||
710000
|
unkown image
|
page readonly
|
||
2A78000
|
unkown
|
page read and write
|
||
3010000
|
unkown image
|
page readonly
|
||
21D5A010000
|
unkown image
|
page readonly
|
||
2626000
|
unkown image
|
page readonly
|
||
E0A29FE000
|
stack
|
page read and write
|
||
2BAC000
|
unkown image
|
page readonly
|
||
2F80000
|
unkown image
|
page readonly
|
||
2C9B000
|
unkown image
|
page readonly
|
||
2B90000
|
unkown image
|
page readonly
|
||
2629000
|
unkown image
|
page readonly
|
||
3010000
|
unkown
|
page read and write
|
||
6F0000
|
unkown image
|
page readonly
|
||
260000
|
unkown image
|
page read and write
|
||
2CD0000
|
unkown image
|
page readonly
|
||
26F3000
|
unkown image
|
page readonly
|
||
21D5A6E0000
|
unkown
|
page read and write
|
||
7FF58E553000
|
unkown image
|
page readonly
|
||
3300000
|
unkown image
|
page readonly
|
||
2C75000
|
unkown image
|
page readonly
|
||
26E6000
|
unkown image
|
page readonly
|
||
35D0000
|
unkown image
|
page readonly
|
||
21D59E80000
|
unkown image
|
page readonly
|
||
2D8BD718000
|
unkown
|
page read and write
|
||
7FF572A0D000
|
unkown image
|
page readonly
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
2A14000
|
unkown
|
page read and write
|
||
7FF5731B4000
|
unkown image
|
page readonly
|
||
2626000
|
unkown image
|
page readonly
|
||
2626000
|
unkown image
|
page readonly
|
||
62E4000
|
heap private
|
page read and write
|
||
7FF52D044000
|
unkown image
|
page readonly
|
||
2B30000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
26C4000
|
unkown image
|
page readonly
|
||
2B8B000
|
unkown image
|
page readonly
|
||
370E000
|
stack
|
page read and write
|
||
33A0000
|
stack
|
page execute and read and write
|
||
E0A2CFC000
|
unkown
|
page read and write
|
||
26BF000
|
unkown image
|
page readonly
|
||
21D59770000
|
unkown image
|
page read and write
|
||
25FF000
|
unkown image
|
page readonly
|
||
284B000
|
unkown image
|
page readonly
|
||
2AE6000
|
unkown image
|
page readonly
|
||
271A000
|
unkown image
|
page readonly
|
||
7FF58E527000
|
unkown image
|
page readonly
|
||
2A14000
|
unkown
|
page read and write
|
||
370000
|
unkown
|
page read and write
|
||
7F542000
|
unkown image
|
page readonly
|
||
32B0000
|
unkown image
|
page readonly
|
||
3405000
|
heap default
|
page read and write
|
||
3310000
|
heap private
|
page read and write
|
||
266C000
|
unkown image
|
page readonly
|
||
30AB000
|
unkown
|
page read and write
|
||
2D8BD62A000
|
unkown
|
page read and write
|
||
4930000
|
unkown
|
page read and write
|
||
21D597B0000
|
unkown image
|
page readonly
|
||
7FA90000
|
unkown image
|
page readonly
|
||
672E000
|
stack
|
page read and write
|
||
7FF578DBD000
|
unkown image
|
page readonly
|
||
3420000
|
unkown image
|
page readonly
|
||
263F000
|
unkown image
|
page readonly
|
||
930000
|
heap private
|
page read and write
|
||
7F280000
|
unkown image
|
page readonly
|
||
2629000
|
unkown image
|
page readonly
|
||
34CF000
|
stack
|
page read and write
|
||
3D0000
|
unkown image
|
page read and write
|
||
7FF578CC5000
|
unkown image
|
page readonly
|
||
35D0000
|
unkown image
|
page readonly
|
||
2BB3000
|
unkown image
|
page readonly
|
||
4830000
|
unkown
|
page read and write
|
||
7FF5730F0000
|
unkown image
|
page readonly
|
||
7FF5731C5000
|
unkown image
|
page readonly
|
||
694000
|
unkown
|
page read and write
|
||
2626000
|
unkown image
|
page readonly
|
||
7FF578DBA000
|
unkown image
|
page readonly
|
||
7DF580E40000
|
unkown image
|
page readonly
|
||
2BA6000
|
unkown image
|
page readonly
|
||
3130000
|
unkown image
|
page readonly
|
||
7FF52C856000
|
unkown image
|
page readonly
|
||
8E0000
|
unkown image
|
page readonly
|
||
7FF58E442000
|
unkown image
|
page readonly
|
||
2FE0000
|
unkown image
|
page readonly
|
||
4814000
|
unkown
|
page read and write
|
||
7FF572A5E000
|
unkown image
|
page readonly
|
||
2670000
|
unkown image
|
page readonly
|
||
2D8E000
|
stack
|
page read and write
|
||
2E5F000
|
stack
|
page read and write
|
||
7DF53ACD2000
|
unkown image
|
page readonly
|
||
36C4000
|
unkown
|
page read and write
|
||
7DF53ACE0000
|
unkown image
|
page readonly
|
||
7FF578921000
|
unkown image
|
page readonly
|
||
7F282000
|
unkown image
|
page readonly
|
||
7FF5730DF000
|
unkown image
|
page readonly
|
||
390000
|
unkown image
|
page readonly
|
||
24D1000
|
unkown image
|
page readonly
|
||
7FA82000
|
unkown image
|
page readonly
|
||
7FA72000
|
unkown image
|
page readonly
|
||
32FE000
|
stack
|
page read and write
|
||
323B000
|
unkown
|
page read and write
|
||
264D000
|
unkown image
|
page readonly
|
||
29D0000
|
unkown image
|
page readonly
|
||
2D8BEFF0000
|
unkown
|
page read and write
|
||
2D10000
|
stack
|
page read and write
|
||
2D10000
|
stack
|
page read and write
|
||
3260000
|
heap default
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
270B000
|
unkown image
|
page readonly
|
||
7EFA0000
|
unkown image
|
page readonly
|
||
2E1E000
|
stack
|
page read and write
|
||
2E80000
|
heap default
|
page read and write
|
||
750000
|
unkown image
|
page readonly
|
||
E0A2BFB000
|
stack
|
page read and write
|
||
3270000
|
stack
|
page read and write
|
||
2701000
|
unkown image
|
page readonly
|
||
E0A28FE000
|
stack
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
28332F15000
|
unkown
|
page read and write
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
2C10000
|
unkown image
|
page readonly
|
||
2A96000
|
unkown
|
page read and write
|
||
4C60000
|
unkown
|
page read and write
|
||
C94EEF7000
|
stack
|
page read and write
|
||
7DF59C290000
|
unkown image
|
page readonly
|
||
28332F00000
|
unkown
|
page read and write
|
||
4B39F000
|
unkown
|
page read and write
|
||
2CC000
|
unkown
|
page read and write
|
||
2643000
|
unkown image
|
page readonly
|
||
2C2E000
|
unkown image
|
page readonly
|
||
43B0000
|
stack
|
page read and write
|
||
7F0A0000
|
unkown image
|
page readonly
|
||
28332A02000
|
unkown
|
page read and write
|
||
7FF58DE65000
|
unkown image
|
page readonly
|
||
7FF578D37000
|
unkown image
|
page readonly
|
||
3300000
|
unkown image
|
page readonly
|
||
3300000
|
unkown image
|
page readonly
|
||
2B60000
|
unkown image
|
page readonly
|
||
2AF5000
|
unkown image
|
page readonly
|
||
7FF57292F000
|
unkown image
|
page readonly
|
||
25F1000
|
unkown image
|
page readonly
|
||
1DFD4C7E000
|
unkown
|
page read and write
|
||
28E1000
|
unkown image
|
page readonly
|
||
2635000
|
unkown image
|
page readonly
|
||
3850000
|
unkown image
|
page readonly
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
2F90000
|
unkown image
|
page readonly
|
||
2C69000
|
unkown image
|
page readonly
|
||
264D000
|
unkown image
|
page readonly
|
||
E0A247D000
|
unkown
|
page read and write
|
||
26D1000
|
unkown image
|
page readonly
|
||
2D8BF002000
|
unkown
|
page read and write
|
||
270D000
|
unkown image
|
page readonly
|
||
2643000
|
unkown image
|
page readonly
|
||
7DF53ACD0000
|
unkown image
|
page readonly
|
||
62E0000
|
heap private
|
page read and write
|
||
830000
|
unkown image
|
page readonly
|
||
21D59800000
|
unkown
|
page read and write
|
||
2F30000
|
heap default
|
page read and write
|
||
4D60000
|
unkown image
|
page readonly
|
||
2908000
|
unkown image
|
page readonly
|
||
2BFB000
|
unkown
|
page read and write
|
||
2FF0000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
26F3000
|
unkown image
|
page readonly
|
||
269E000
|
unkown image
|
page readonly
|
||
26CB000
|
unkown image
|
page readonly
|
||
C94EFFF000
|
stack
|
page read and write
|
||
2CD0000
|
unkown image
|
page readonly
|
||
320000
|
unkown image
|
page readonly
|
||
2C00000
|
heap private
|
page read and write
|
||
26C4000
|
unkown image
|
page readonly
|
||
2FC0000
|
stack
|
page read and write
|
||
6D0000
|
stack
|
page read and write
|
||
2B9B000
|
unkown image
|
page readonly
|
||
2D8BD64E000
|
unkown
|
page read and write
|
||
26CB000
|
unkown image
|
page readonly
|
||
8C34EF9000
|
stack
|
page read and write
|
||
2D8BD470000
|
unkown image
|
page readonly
|
||
26C4000
|
unkown image
|
page readonly
|
||
7FF5731C1000
|
unkown image
|
page readonly
|
||
2D8BF5E0000
|
unkown image
|
page write copy
|
||
4E5F000
|
stack
|
page read and write
|
||
21D59880000
|
unkown
|
page read and write
|
||
2C00000
|
unkown image
|
page readonly
|
||
2635000
|
unkown image
|
page readonly
|
||
41DE000
|
stack
|
page read and write
|
||
3F0000
|
heap private
|
page read and write
|
||
3350000
|
heap default
|
page read and write
|
||
7F290000
|
unkown image
|
page readonly
|
||
32FE000
|
stack
|
page read and write
|
||
2525000
|
unkown image
|
page readonly
|
||
3010000
|
unkown image
|
page readonly
|
||
672E000
|
stack
|
page read and write
|
||
7FF12000
|
unkown image
|
page readonly
|
||
7F272000
|
unkown image
|
page readonly
|
||
2ADA000
|
unkown image
|
page readonly
|
||
7DF586AA0000
|
unkown image
|
page readonly
|
||
21D5A6D0000
|
unkown
|
page readonly
|
||
7F440000
|
unkown image
|
page readonly
|
||
24C7000
|
unkown image
|
page readonly
|
||
7FF58E53F000
|
unkown image
|
page readonly
|
||
2626000
|
unkown image
|
page readonly
|
||
7FF578D4D000
|
unkown image
|
page readonly
|
||
2B16000
|
unkown image
|
page readonly
|
||
2E10000
|
unkown image
|
page readonly
|
||
8D0000
|
unkown image
|
page readonly
|
||
32FE000
|
stack
|
page read and write
|
||
2B60000
|
unkown image
|
page readonly
|
||
49D0000
|
heap private
|
page read and write
|
||
7FF578E3A000
|
unkown image
|
page readonly
|
||
88C000
|
unkown
|
page read and write
|
||
7F6F2000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
2670000
|
unkown image
|
page readonly
|
||
2990000
|
unkown image
|
page readonly
|
||
270000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
7FF5731BA000
|
unkown image
|
page readonly
|
||
3055000
|
heap default
|
page read and write
|
||
6730000
|
unkown
|
page read and write
|
||
F93FFFF000
|
stack
|
page read and write
|
||
2D8BD65A000
|
unkown
|
page read and write
|
||
C94F0FF000
|
stack
|
page read and write
|
||
2CB0000
|
unkown image
|
page readonly
|
||
286B000
|
unkown image
|
page readonly
|
||
4600000
|
unkown
|
page read and write
|
||
7DF53ACC0000
|
unkown image
|
page readonly
|
||
7FF58E41B000
|
unkown image
|
page readonly
|
||
7FF578AC5000
|
unkown image
|
page readonly
|
||
7FF578D49000
|
unkown image
|
page readonly
|
||
30D6000
|
unkown
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
26EB000
|
unkown image
|
page readonly
|
||
2D8BD460000
|
heap private
|
page read and write
|
||
7DF53ACC2000
|
unkown image
|
page readonly
|
||
2B50000
|
unkown image
|
page read and write
|
||
3210000
|
unkown image
|
page readonly
|
||
7DF586AB2000
|
unkown image
|
page readonly
|
||
8CB000
|
unkown
|
page read and write
|
||
7FF578D4F000
|
unkown image
|
page readonly
|
||
28DB000
|
unkown image
|
page readonly
|
||
55B000
|
unkown
|
page read and write
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
24C7000
|
unkown image
|
page readonly
|
||
2B7F000
|
unkown image
|
page readonly
|
||
2B50000
|
unkown image
|
page read and write
|
||
24C7000
|
unkown image
|
page readonly
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
2670000
|
unkown image
|
page readonly
|
||
263B000
|
unkown image
|
page readonly
|
||
48F0000
|
unkown
|
page read and write
|
||
7F290000
|
unkown image
|
page readonly
|
||
2D8BD602000
|
unkown
|
page read and write
|
||
26DB000
|
unkown image
|
page readonly
|
||
26BB000
|
unkown image
|
page readonly
|
||
7DF59C2B0000
|
unkown image
|
page readonly
|
||
2635000
|
unkown image
|
page readonly
|
||
2FF0000
|
stack
|
page read and write
|
||
7FF578E12000
|
unkown image
|
page readonly
|
||
4A24000
|
unkown
|
page read and write
|
||
49D0000
|
heap private
|
page read and write
|
||
2B03000
|
unkown image
|
page readonly
|
||
1DFD50D0000
|
unkown image
|
page readonly
|
||
7FA70000
|
unkown image
|
page readonly
|
||
26F8000
|
unkown image
|
page readonly
|
||
7FF52CFDD000
|
unkown image
|
page readonly
|
||
2C9B000
|
unkown
|
page read and write
|
||
7F230000
|
unkown image
|
page readonly
|
||
27FE000
|
unkown image
|
page readonly
|
||
7FF578D77000
|
unkown image
|
page readonly
|
||
2D8BD66A000
|
unkown
|
page read and write
|
||
3200000
|
unkown image
|
page readonly
|
||
7F0B2000
|
unkown image
|
page readonly
|
||
261A000
|
unkown image
|
page readonly
|
||
3065000
|
heap default
|
page read and write
|
||
29F0000
|
unkown image
|
page read and write
|
||
2C8D000
|
unkown image
|
page readonly
|
||
4720000
|
unkown
|
page read and write
|
||
4D54000
|
unkown
|
page read and write
|
||
26C6000
|
unkown image
|
page readonly
|
||
2DCF000
|
stack
|
page read and write
|
||
2CA0000
|
unkown image
|
page readonly
|
||
3320000
|
unkown image
|
page readonly
|
||
2D8BD66A000
|
unkown
|
page read and write
|
||
26C4000
|
unkown image
|
page readonly
|
||
7FF52D061000
|
unkown image
|
page readonly
|
||
7FF58E53D000
|
unkown image
|
page readonly
|
||
276F000
|
unkown image
|
page readonly
|
||
7FF58E3CF000
|
unkown image
|
page readonly
|
||
25EE000
|
unkown image
|
page readonly
|
||
61BE000
|
stack
|
page read and write
|
||
2D26000
|
unkown image
|
page readonly
|
||
7DF580E42000
|
unkown image
|
page readonly
|
||
264D000
|
unkown image
|
page readonly
|
||
7FF578CC1000
|
unkown image
|
page readonly
|
||
7FF58DF8D000
|
unkown image
|
page readonly
|
||
2643000
|
unkown image
|
page readonly
|
||
2AAE000
|
unkown image
|
page readonly
|
||
30C0000
|
unkown image
|
page readonly
|
||
4FA0000
|
heap private
|
page read and write
|
||
8E0000
|
unkown image
|
page readonly
|
||
4B39F000
|
unkown
|
page read and write
|
||
7FA82000
|
unkown image
|
page readonly
|
||
7F270000
|
unkown image
|
page readonly
|
||
4620000
|
heap private
|
page read and write
|
||
2BA6000
|
unkown image
|
page readonly
|
||
1DFD4D08000
|
unkown
|
page read and write
|
||
361E000
|
stack
|
page read and write
|
||
7FF52D04A000
|
unkown image
|
page readonly
|
||
285D000
|
unkown image
|
page readonly
|
||
75E000
|
stack
|
page read and write
|
||
48EF000
|
stack
|
page read and write
|
||
26F8000
|
unkown image
|
page readonly
|
||
3430000
|
stack
|
page readonly
|
||
2BBB000
|
unkown
|
page read and write
|
||
32B0000
|
unkown image
|
page readonly
|
||
7FF58DE27000
|
unkown image
|
page readonly
|
||
6D0000
|
stack
|
page read and write
|
||
26AF000
|
unkown image
|
page readonly
|
||
26F3000
|
unkown image
|
page readonly
|
||
2656000
|
unkown image
|
page readonly
|
||
7F0C0000
|
unkown image
|
page readonly
|
||
7FF578E24000
|
unkown image
|
page readonly
|
||
7F8C0000
|
unkown image
|
page readonly
|
||
26D1000
|
unkown image
|
page readonly
|
||
7FA70000
|
unkown image
|
page readonly
|
||
26DB000
|
unkown image
|
page readonly
|
||
7FF58E61A000
|
unkown image
|
page readonly
|
||
2B84000
|
unkown image
|
page readonly
|
||
7F280000
|
unkown image
|
page readonly
|
||
3290000
|
unkown image
|
page readonly
|
||
30C0000
|
unkown image
|
page readonly
|
||
3065000
|
heap default
|
page read and write
|
||
306C000
|
unkown
|
page read and write
|
||
7FF20000
|
unkown image
|
page readonly
|
||
7F6F2000
|
unkown image
|
page readonly
|
||
7DF586AB0000
|
unkown image
|
page readonly
|
||
2525000
|
unkown image
|
page readonly
|
||
1DFD5402000
|
unkown
|
page read and write
|
||
2987000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
830000
|
unkown image
|
page readonly
|
||
6730000
|
unkown
|
page read and write
|
||
7FF58E302000
|
unkown image
|
page readonly
|
||
7FE10000
|
unkown image
|
page readonly
|
||
26E1000
|
unkown image
|
page readonly
|
||
2616000
|
unkown image
|
page readonly
|
||
7F0A0000
|
unkown image
|
page readonly
|
||
26EC000
|
unkown image
|
page readonly
|
||
7FF58E5AD000
|
unkown image
|
page readonly
|
||
7F8C2000
|
unkown image
|
page readonly
|
||
33F0000
|
unkown
|
page read and write
|
||
4930000
|
unkown
|
page read and write
|
||
29C0000
|
heap default
|
page read and write
|
||
E0A2579000
|
stack
|
page read and write
|
||
7FF578D63000
|
unkown image
|
page readonly
|
||
3317000
|
heap private
|
page read and write
|
||
2FE0000
|
unkown image
|
page readonly
|
||
25F1000
|
unkown image
|
page readonly
|
||
2735000
|
unkown image
|
page readonly
|
||
7F232000
|
unkown image
|
page readonly
|
||
7F8D0000
|
unkown image
|
page readonly
|
||
7F240000
|
unkown image
|
page readonly
|
||
2D8BF200000
|
unkown
|
page read and write
|
||
55B000
|
unkown
|
page read and write
|
||
2D8BD600000
|
unkown
|
page read and write
|
||
2BF0000
|
unkown
|
page readonly
|
||
2D8BDB90000
|
unkown image
|
page readonly
|
||
2C7B000
|
unkown image
|
page readonly
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
28332E02000
|
unkown
|
page read and write
|
||
760000
|
heap default
|
page read and write
|
||
35D0000
|
unkown
|
page read and write
|
||
1DFD4B60000
|
heap default
|
page read and write
|
||
7DF53ACC2000
|
unkown image
|
page readonly
|
||
21D5A480000
|
unkown
|
page read and write
|
||
2656000
|
unkown image
|
page readonly
|
||
26BB000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
4A24000
|
unkown
|
page read and write
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
1DFD5250000
|
unkown image
|
page readonly
|
||
2A90000
|
heap default
|
page read and write
|
||
26CB000
|
unkown image
|
page readonly
|
||
264D000
|
unkown image
|
page readonly
|
||
7DF580E40000
|
unkown image
|
page readonly
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
28D4000
|
unkown image
|
page readonly
|
||
2D10000
|
stack
|
page read and write
|
||
26DB000
|
unkown image
|
page readonly
|
||
1190000
|
unkown image
|
page readonly
|
||
29D0000
|
unkown image
|
page readonly
|
||
4F2F000
|
stack
|
page read and write
|
||
F93FC7C000
|
stack
|
page read and write
|
||
280F000
|
unkown image
|
page readonly
|
||
7F6F0000
|
unkown image
|
page readonly
|
||
5163000
|
heap private
|
page read and write
|
||
2F80000
|
unkown image
|
page readonly
|
||
26F3000
|
unkown image
|
page readonly
|
||
2DA4000
|
unkown
|
page read and write
|
||
3520000
|
unkown image
|
page readonly
|
||
2B1B000
|
unkown image
|
page readonly
|
||
21D598A0000
|
heap default
|
page read and write
|
||
286B000
|
unkown image
|
page readonly
|
||
7DF586AB0000
|
unkown image
|
page readonly
|
||
7FF5731CA000
|
unkown image
|
page readonly
|
||
62F0000
|
unkown
|
page read and write
|
||
7DF586AA2000
|
unkown image
|
page readonly
|
||
7F8D2000
|
unkown image
|
page readonly
|
||
7F6E2000
|
unkown image
|
page readonly
|
||
2D40000
|
unkown image
|
page readonly
|
||
7F6E0000
|
unkown image
|
page readonly
|
||
3059000
|
heap default
|
page read and write
|
||
4A30000
|
unkown
|
page read and write
|
||
2D38000
|
unkown image
|
page readonly
|
||
7FF52CEDC000
|
unkown image
|
page readonly
|
||
263F000
|
unkown image
|
page readonly
|
||
306C000
|
unkown
|
page read and write
|
||
F9400FD000
|
stack
|
page read and write
|
||
2A7C000
|
unkown
|
page read and write
|
||
28332A28000
|
unkown
|
page read and write
|
||
28332B23000
|
heap private
|
page read and write
|
||
3180000
|
unkown image
|
page readonly
|
||
28DB000
|
unkown image
|
page readonly
|
||
7FF5731D1000
|
unkown image
|
page readonly
|
||
26E1000
|
unkown image
|
page readonly
|
||
26C4000
|
unkown image
|
page readonly
|
||
7F8E0000
|
unkown image
|
page readonly
|
||
25EE000
|
unkown image
|
page readonly
|
||
335A000
|
heap default
|
page read and write
|
||
266C000
|
unkown image
|
page readonly
|
||
7FF58E609000
|
unkown image
|
page readonly
|
||
2920000
|
unkown
|
page read and write
|
||
3400000
|
heap default
|
page read and write
|
||
C94E98F000
|
stack
|
page read and write
|
||
8C34ABB000
|
unkown
|
page read and write
|
||
2720000
|
unkown image
|
page readonly
|
||
2FA0000
|
unkown image
|
page readonly
|
||
7F5E0000
|
unkown image
|
page readonly
|
||
28F6000
|
unkown image
|
page readonly
|
||
F93FDFF000
|
stack
|
page read and write
|
||
7FF58E631000
|
unkown image
|
page readonly
|
||
31E0000
|
unkown
|
page read and write
|
||
3740000
|
heap private
|
page read and write
|
||
8C34F7E000
|
stack
|
page read and write
|
||
2F90000
|
unkown image
|
page readonly
|
||
2D8BD5A0000
|
unkown image
|
page readonly
|
||
25EE000
|
unkown image
|
page readonly
|
||
5270000
|
unkown
|
page read and write
|
||
7F552000
|
unkown image
|
page readonly
|
||
2DA4000
|
unkown
|
page read and write
|
||
3240000
|
unkown image
|
page readonly
|
||
2D8BD713000
|
unkown
|
page read and write
|
||
265B000
|
unkown image
|
page readonly
|
||
7FF5731A9000
|
unkown image
|
page readonly
|
||
3310000
|
unkown image
|
page readonly
|
||
33A0000
|
unkown image
|
page readonly
|
||
7F700000
|
unkown image
|
page readonly
|
||
28EB000
|
unkown image
|
page readonly
|
||
1DFD4B10000
|
unkown image
|
page readonly
|
||
1DFD4D00000
|
unkown
|
page read and write
|
||
66EE000
|
stack
|
page read and write
|
||
25FF000
|
unkown image
|
page readonly
|
||
28CB000
|
unkown image
|
page readonly
|
||
2B91000
|
unkown image
|
page readonly
|
||
3E0000
|
unkown image
|
page readonly
|
||
7FF52CF80000
|
unkown image
|
page readonly
|
||
8CB000
|
unkown
|
page read and write
|
||
30DA000
|
unkown
|
page read and write
|
||
4820000
|
unkown image
|
page readonly
|
||
7F0C0000
|
unkown image
|
page readonly
|
||
2DA0000
|
unkown
|
page read and write
|
||
7FF578C95000
|
unkown image
|
page readonly
|
||
4240000
|
unkown image
|
page readonly
|
||
7F6F0000
|
unkown image
|
page readonly
|
||
2F9A000
|
unkown
|
page read and write
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
270000
|
unkown image
|
page readonly
|
||
28332E13000
|
unkown
|
page read and write
|
||
261A000
|
unkown image
|
page readonly
|
||
7F550000
|
unkown image
|
page readonly
|
||
2D00000
|
unkown
|
page read and write
|
||
2D8BD490000
|
unkown image
|
page readonly
|
||
7FF52CDFF000
|
unkown image
|
page readonly
|
||
3520000
|
unkown image
|
page readonly
|
||
2D8BD702000
|
unkown
|
page read and write
|
||
7FF578D67000
|
unkown image
|
page readonly
|
||
21D5A470000
|
unkown
|
page read and write
|
||
21D598E5000
|
unkown
|
page read and write
|
||
7F542000
|
unkown image
|
page readonly
|
||
266C000
|
unkown image
|
page readonly
|
||
7DF586AB2000
|
unkown image
|
page readonly
|
||
264D000
|
unkown image
|
page readonly
|
||
7F250000
|
unkown image
|
page readonly
|
||
2D8BD672000
|
unkown
|
page read and write
|
||
2D8BDA00000
|
unkown image
|
page readonly
|
||
25FF000
|
unkown image
|
page readonly
|
||
7FF58E51F000
|
unkown image
|
page readonly
|
||
7DF53ACD2000
|
unkown image
|
page readonly
|
||
3440000
|
stack
|
page read and write
|
||
2D8E000
|
stack
|
page read and write
|
||
4230000
|
heap private
|
page read and write
|
||
2970000
|
unkown image
|
page readonly
|
||
2A9A000
|
unkown
|
page read and write
|
||
2A9A000
|
unkown
|
page read and write
|
||
1DFD4D02000
|
unkown
|
page read and write
|
||
3079000
|
heap default
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
4820000
|
unkown image
|
page readonly
|
||
25F1000
|
unkown image
|
page readonly
|
||
2FC0000
|
stack
|
page read and write
|
||
4720000
|
unkown
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
283328D0000
|
unkown
|
page read and write
|
||
2D8BD4C0000
|
heap default
|
page read and write
|
||
3010000
|
unkown image
|
page readonly
|
||
2C83000
|
unkown image
|
page readonly
|
||
7FF30000
|
unkown image
|
page readonly
|
||
265B000
|
unkown image
|
page readonly
|
||
2B60000
|
unkown image
|
page readonly
|
||
7FF58E197000
|
unkown image
|
page readonly
|
||
4820000
|
unkown
|
page read and write
|
||
2AC5000
|
heap default
|
page read and write
|
||
2670000
|
unkown image
|
page readonly
|
||
4720000
|
unkown
|
page read and write
|
||
73B000
|
unkown
|
page read and write
|
||
2D8BD648000
|
unkown
|
page read and write
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
7F0A2000
|
unkown image
|
page readonly
|
||
2D8BEFF0000
|
unkown
|
page read and write
|
||
49D0000
|
heap private
|
page read and write
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
7F0B0000
|
unkown image
|
page readonly
|
||
2990000
|
stack
|
page execute and read and write
|
||
7DF580E32000
|
unkown image
|
page readonly
|
||
7A0000
|
unkown
|
page read and write
|
||
2C51000
|
unkown image
|
page readonly
|
||
27A3000
|
unkown image
|
page readonly
|
||
2629000
|
unkown image
|
page readonly
|
||
29B0000
|
unkown
|
page read and write
|
||
760000
|
heap default
|
page read and write
|
||
7FF578E41000
|
unkown image
|
page readonly
|
||
24D1000
|
unkown image
|
page readonly
|
||
279C000
|
unkown image
|
page readonly
|
||
3010000
|
unkown image
|
page readonly
|
||
2629000
|
unkown image
|
page readonly
|
||
21D5A000000
|
unkown image
|
page readonly
|
||
7FF57303C000
|
unkown image
|
page readonly
|
||
7F700000
|
unkown image
|
page readonly
|
||
2E8A000
|
heap default
|
page read and write
|
||
21D598A8000
|
heap default
|
page read and write
|
||
28D4000
|
unkown image
|
page readonly
|
||
7FF58E3B6000
|
unkown image
|
page readonly
|
||
3220000
|
stack
|
page execute and read and write
|
||
4D60000
|
unkown image
|
page readonly
|
||
26CA000
|
unkown image
|
page readonly
|
||
7FF5731A2000
|
unkown image
|
page readonly
|
||
30AB000
|
unkown
|
page read and write
|
||
7FF572F6A000
|
unkown image
|
page readonly
|
||
2D8BD65A000
|
unkown
|
page read and write
|
||
5280000
|
unkown
|
page read and write
|
||
7FF58E1FC000
|
unkown image
|
page readonly
|
||
820000
|
unkown image
|
page read and write
|
||
7FF572A4D000
|
unkown image
|
page readonly
|
||
1DFD4B40000
|
unkown image
|
page readonly
|
||
1DFD4B30000
|
unkown image
|
page readonly
|
||
7F552000
|
unkown image
|
page readonly
|
||
7F540000
|
unkown image
|
page readonly
|
||
21D598E8000
|
heap default
|
page read and write
|
||
2821000
|
unkown image
|
page readonly
|
||
26EC000
|
unkown image
|
page readonly
|
||
28CF000
|
unkown image
|
page readonly
|
||
2F60000
|
unkown image
|
page readonly
|
||
7FF5730E3000
|
unkown image
|
page readonly
|
||
276B000
|
unkown image
|
page readonly
|
||
7FF578E31000
|
unkown image
|
page readonly
|
||
2CD0000
|
unkown image
|
page readonly
|
||
2970000
|
unkown image
|
page readonly
|
||
3200000
|
unkown image
|
page readonly
|
||
7FF58E550000
|
unkown image
|
page readonly
|
||
E0A2AFC000
|
stack
|
page read and write
|
||
2C3F000
|
unkown image
|
page readonly
|
||
7F970000
|
unkown image
|
page readonly
|
||
7DF580E32000
|
unkown image
|
page readonly
|
||
7FF578C2B000
|
unkown image
|
page readonly
|
||
26BB000
|
unkown image
|
page readonly
|
||
30B0000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
7F8C0000
|
unkown image
|
page readonly
|
||
29E5000
|
unkown image
|
page readonly
|
||
25EE000
|
unkown image
|
page readonly
|
||
7F7C0000
|
unkown image
|
page readonly
|
||
2990000
|
stack
|
page execute and read and write
|
||
2D33000
|
unkown image
|
page readonly
|
||
266C000
|
unkown image
|
page readonly
|
||
28EB000
|
unkown image
|
page readonly
|
||
21D59A70000
|
unkown
|
page read and write
|
||
7F170000
|
unkown image
|
page readonly
|
||
26D7000
|
unkown image
|
page readonly
|
||
7FF58E625000
|
unkown image
|
page readonly
|
||
2DA0000
|
unkown
|
page read and write
|
||
7F6E0000
|
unkown image
|
page readonly
|
||
4240000
|
unkown image
|
page readonly
|
||
1DFD4B00000
|
heap private
|
page read and write
|
||
1DFD4C56000
|
unkown
|
page read and write
|
||
4720000
|
unkown
|
page read and write
|
||
2E5F000
|
stack
|
page read and write
|
||
26C1000
|
unkown image
|
page readonly
|
||
2821000
|
unkown image
|
page readonly
|
||
2CFF000
|
unkown image
|
page readonly
|
||
333F000
|
stack
|
page read and write
|
||
26F8000
|
unkown image
|
page readonly
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
7FF58E621000
|
unkown image
|
page readonly
|
||
7F0B2000
|
unkown image
|
page readonly
|
||
261A000
|
unkown image
|
page readonly
|
||
26F8000
|
unkown image
|
page readonly
|
||
2C31000
|
unkown image
|
page readonly
|
||
88C000
|
unkown
|
page read and write
|
||
7F0C0000
|
unkown image
|
page readonly
|
||
2845000
|
unkown image
|
page readonly
|
||
25EE000
|
unkown image
|
page readonly
|
||
2629000
|
unkown image
|
page readonly
|
||
26BF000
|
unkown image
|
page readonly
|
||
265B000
|
unkown image
|
page readonly
|
||
C10000
|
stack
|
page read and write
|
||
3270000
|
stack
|
page read and write
|
||
7FF58E199000
|
unkown image
|
page readonly
|
||
7DF59C292000
|
unkown image
|
page readonly
|
||
7F0A0000
|
unkown image
|
page readonly
|
||
265B000
|
unkown image
|
page readonly
|
||
1DFD4C00000
|
unkown
|
page read and write
|
||
26A1000
|
unkown image
|
page readonly
|
||
331A000
|
heap private
|
page read and write
|
||
75E000
|
stack
|
page read and write
|
||
263B000
|
unkown image
|
page readonly
|
||
2ABF000
|
unkown image
|
page readonly
|
||
7B0000
|
stack
|
page execute and read and write
|
||
E0A267C000
|
stack
|
page read and write
|
||
2991000
|
unkown image
|
page readonly
|
||
33E0000
|
unkown image
|
page readonly
|
||
7F8D0000
|
unkown image
|
page readonly
|
||
2DCF000
|
stack
|
page read and write
|
||
3061000
|
unkown
|
page read and write
|
||
6E8B1000
|
unkown image
|
page execute read
|
||
305A000
|
unkown
|
page read and write
|
||
1DFD4C4B000
|
unkown
|
page read and write
|
||
30B000
|
unkown
|
page read and write
|
||
7FF57314D000
|
unkown image
|
page readonly
|
||
518B000
|
unkown
|
page read and write
|
||
25F1000
|
unkown image
|
page readonly
|
||
8CB000
|
unkown
|
page read and write
|
||
7FA72000
|
unkown image
|
page readonly
|
||
2903000
|
unkown image
|
page readonly
|
||
24D1000
|
unkown image
|
page readonly
|
||
26D9000
|
unkown image
|
page readonly
|
||
5170000
|
unkown
|
page read and write
|
||
263F000
|
unkown image
|
page readonly
|
||
265B000
|
unkown image
|
page readonly
|
||
2781000
|
unkown image
|
page readonly
|
||
2970000
|
unkown image
|
page readonly
|
||
1DFD4C29000
|
unkown
|
page read and write
|
||
7FF58DD08000
|
unkown image
|
page readonly
|
||
2E80000
|
heap default
|
page read and write
|
||
7F0A2000
|
unkown image
|
page readonly
|
||
7F700000
|
unkown image
|
page readonly
|
||
2A9A000
|
heap default
|
page read and write
|
||
3B0000
|
stack
|
page execute and read and write
|
||
7DF59C2B0000
|
unkown image
|
page readonly
|
||
3130000
|
unkown image
|
page readonly
|
||
2F30000
|
heap default
|
page read and write
|
||
840000
|
heap default
|
page read and write
|
||
2656000
|
unkown image
|
page readonly
|
||
3650000
|
unkown image
|
page readonly
|
||
2BB8000
|
unkown image
|
page readonly
|
||
30B000
|
unkown
|
page read and write
|
||
2F90000
|
unkown image
|
page readonly
|
||
7F970000
|
unkown image
|
page readonly
|
||
24C7000
|
unkown image
|
page readonly
|
||
320000
|
unkown image
|
page readonly
|
||
24D1000
|
unkown image
|
page readonly
|
||
26BB000
|
unkown image
|
page readonly
|
||
66EE000
|
stack
|
page read and write
|
||
2950000
|
unkown
|
page read and write
|
||
2D8BD5E0000
|
unkown
|
page read and write
|
||
1DFD4AF0000
|
unkown image
|
page read and write
|
||
7F8D2000
|
unkown image
|
page readonly
|
||
26F3000
|
unkown image
|
page readonly
|
||
2E8A000
|
heap default
|
page read and write
|
||
63C000
|
unkown
|
page read and write
|
||
8E0000
|
unkown image
|
page readonly
|
||
940000
|
heap default
|
page read and write
|
||
284B000
|
unkown image
|
page readonly
|
||
62E0000
|
heap private
|
page read and write
|
||
2C56000
|
unkown image
|
page readonly
|
||
7F550000
|
unkown image
|
page readonly
|
||
2E5F000
|
stack
|
page read and write
|
||
26D1000
|
unkown image
|
page readonly
|
||
2DD0000
|
heap private
|
page read and write
|
||
3065000
|
unkown
|
page read and write
|
||
26E5000
|
unkown image
|
page readonly
|
||
28F6000
|
unkown image
|
page readonly
|
||
7FF578BF1000
|
unkown image
|
page readonly
|
||
2635000
|
unkown image
|
page readonly
|
||
266C000
|
unkown image
|
page readonly
|
||
7DF438B90000
|
unkown image
|
page readonly
|
||
830000
|
unkown image
|
page readonly
|
||
26F8000
|
unkown image
|
page readonly
|
||
2B91000
|
unkown image
|
page readonly
|
||
2B03000
|
unkown image
|
page readonly
|
||
2D8E000
|
stack
|
page read and write
|
||
25FF000
|
unkown image
|
page readonly
|
||
26D1000
|
unkown image
|
page readonly
|
||
2616000
|
unkown image
|
page readonly
|
||
740000
|
unkown image
|
page readonly
|
||
2D60000
|
stack
|
page execute and read and write
|
||
7F270000
|
unkown image
|
page readonly
|
||
7E00FF288000
|
unkown image
|
page readonly
|
||
305E000
|
unkown
|
page read and write
|
||
7FF58E447000
|
unkown image
|
page readonly
|
||
1010000
|
unkown image
|
page readonly
|
||
3850000
|
unkown image
|
page readonly
|
||
2E1E000
|
stack
|
page read and write
|
||
7FF12000
|
unkown image
|
page readonly
|
||
7DF59C290000
|
unkown image
|
page readonly
|
||
4814000
|
unkown
|
page read and write
|
||
261A000
|
unkown image
|
page readonly
|
||
2991000
|
unkown image
|
page readonly
|
||
3710000
|
unkown
|
page read and write
|
||
7F6F0000
|
unkown image
|
page readonly
|
||
7F7C0000
|
unkown image
|
page readonly
|
||
7FF52CFB5000
|
unkown image
|
page readonly
|
||
2611000
|
unkown image
|
page readonly
|
||
284F000
|
unkown image
|
page readonly
|
||
7F0B2000
|
unkown image
|
page readonly
|
||
2635000
|
unkown image
|
page readonly
|
||
28FC000
|
unkown image
|
page readonly
|
||
2C66000
|
unkown image
|
page readonly
|
||
7FF52C876000
|
unkown image
|
page readonly
|
||
21D598EC000
|
unkown
|
page read and write
|
||
2AD1000
|
unkown image
|
page readonly
|
||
3180000
|
unkown image
|
page readonly
|
||
2B7B000
|
unkown image
|
page readonly
|
||
2616000
|
unkown image
|
page readonly
|
||
4E5F000
|
stack
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
3000000
|
unkown image
|
page read and write
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
21D598B0000
|
heap default
|
page read and write
|
||
2E40000
|
heap default
|
page read and write
|
||
7F0A0000
|
unkown image
|
page readonly
|
||
7FF578E19000
|
unkown image
|
page readonly
|
||
3059000
|
unkown
|
page read and write
|
||
7DF59C2A2000
|
unkown image
|
page readonly
|
||
7FF52D05A000
|
unkown image
|
page readonly
|
||
7FF58E539000
|
unkown image
|
page readonly
|
||
7F8C2000
|
unkown image
|
page readonly
|
||
2F40000
|
unkown
|
page read and write
|
||
F9401FB000
|
stack
|
page read and write
|
||
7F8D0000
|
unkown image
|
page readonly
|
||
26E6000
|
unkown image
|
page readonly
|
||
28332F02000
|
unkown
|
page read and write
|
||
2656000
|
unkown image
|
page readonly
|
||
28332A0D000
|
unkown
|
page read and write
|
||
2D0B000
|
unkown image
|
page readonly
|
||
7F0A2000
|
unkown image
|
page readonly
|
||
4F40000
|
heap private
|
page read and write
|
||
7FF52CF73000
|
unkown image
|
page readonly
|
||
2C5A000
|
unkown image
|
page readonly
|
||
2950000
|
unkown
|
page read and write
|
||
2F80000
|
stack
|
page execute and read and write
|
||
3310000
|
unkown image
|
page readonly
|
||
3055000
|
unkown
|
page read and write
|
||
4820000
|
unkown image
|
page readonly
|
||
2D8BD659000
|
unkown
|
page read and write
|
||
2643000
|
unkown image
|
page readonly
|
||
7FF5730E6000
|
unkown image
|
page readonly
|
||
26BB000
|
unkown image
|
page readonly
|
||
2D38000
|
unkown image
|
page readonly
|
||
2E00000
|
unkown image
|
page readonly
|
||
21D5A6C0000
|
unkown
|
page read and write
|
||
2616000
|
unkown image
|
page readonly
|
||
7FF5731D1000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
2BFB000
|
unkown
|
page read and write
|
||
2D8BEFF0000
|
unkown
|
page read and write
|
||
7FF58E582000
|
unkown image
|
page readonly
|
||
27A8000
|
unkown image
|
page readonly
|
||
263B000
|
unkown image
|
page readonly
|
||
32B0000
|
unkown image
|
page readonly
|
||
26EF000
|
unkown image
|
page readonly
|
||
2D8BD4A0000
|
unkown image
|
page readonly
|
||
3E0000
|
unkown image
|
page readonly
|
||
7FF52D039000
|
unkown image
|
page readonly
|
||
7F272000
|
unkown image
|
page readonly
|
||
7FF578C9B000
|
unkown image
|
page readonly
|
||
2796000
|
unkown image
|
page readonly
|
||
7FF5730F3000
|
unkown image
|
page readonly
|
||
26CB000
|
unkown image
|
page readonly
|
||
7FF578C0D000
|
unkown image
|
page readonly
|
||
7FF52CFD7000
|
unkown image
|
page readonly
|
||
2CFB000
|
unkown image
|
page readonly
|
||
26BF000
|
unkown image
|
page readonly
|
||
11A0000
|
unkown image
|
page readonly
|
||
7FF58E62A000
|
unkown image
|
page readonly
|
||
7FF58E51B000
|
unkown image
|
page readonly
|
||
7FF55F0E1000
|
unkown image
|
page readonly
|
||
27A8000
|
unkown image
|
page readonly
|
||
26D7000
|
unkown image
|
page readonly
|
||
4940000
|
unkown image
|
page readonly
|
||
2EA2000
|
heap default
|
page read and write
|
||
2D8BD669000
|
unkown
|
page read and write
|
||
7F8C0000
|
unkown image
|
page readonly
|
||
7F8C2000
|
unkown image
|
page readonly
|
||
2903000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
2D8BD613000
|
unkown
|
page read and write
|
||
28332A00000
|
unkown
|
page read and write
|
||
7FF578D93000
|
unkown image
|
page readonly
|
||
3066000
|
unkown
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
2525000
|
unkown image
|
page readonly
|
||
4710000
|
heap private
|
page read and write
|
||
820000
|
unkown image
|
page read and write
|
||
7F6E2000
|
unkown image
|
page readonly
|
||
2C5C000
|
unkown
|
page read and write
|
||
D04000
|
stack
|
page read and write
|
||
26DB000
|
unkown image
|
page readonly
|
||
7F560000
|
unkown image
|
page readonly
|
||
7F282000
|
unkown image
|
page readonly
|
||
2826000
|
unkown image
|
page readonly
|
||
8D0000
|
unkown image
|
page readonly
|
||
3750000
|
unkown image
|
page readonly
|
||
26BF000
|
unkown image
|
page readonly
|
||
21D59830000
|
unkown image
|
page readonly
|
||
2880000
|
unkown image
|
page readonly
|
||
2616000
|
unkown image
|
page readonly
|
||
285D000
|
unkown image
|
page readonly
|
||
1DFD4ED0000
|
unkown image
|
page readonly
|
||
282A000
|
unkown image
|
page readonly
|
||
287C000
|
unkown image
|
page readonly
|
||
2E00000
|
unkown image
|
page readonly
|
||
24D1000
|
unkown image
|
page readonly
|
||
2AF5000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
2D8BD71C000
|
unkown
|
page read and write
|
||
2B07000
|
unkown image
|
page readonly
|
||
8D0000
|
unkown image
|
page readonly
|
||
7FF52D051000
|
unkown image
|
page readonly
|
||
21D597E0000
|
unkown
|
page read and write
|
||
277B000
|
unkown image
|
page readonly
|
||
2D90000
|
unkown image
|
page readonly
|
||
3450000
|
unkown image
|
page readonly
|
||
7FA72000
|
unkown image
|
page readonly
|
||
7FA70000
|
unkown image
|
page readonly
|
||
7FF58E2F7000
|
unkown image
|
page readonly
|
||
2E1E000
|
stack
|
page read and write
|
||
29CA000
|
heap default
|
page read and write
|
||
7DF59C2A0000
|
unkown image
|
page readonly
|
||
2E80000
|
heap default
|
page read and write
|
||
7F8E0000
|
unkown image
|
page readonly
|
||
264D000
|
unkown image
|
page readonly
|
||
2D8BD63D000
|
unkown
|
page read and write
|
||
282A000
|
unkown image
|
page readonly
|
||
2701000
|
unkown image
|
page readonly
|
||
25F1000
|
unkown image
|
page readonly
|
||
1DFD4C50000
|
unkown
|
page read and write
|
||
E10000
|
unkown image
|
page readonly
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
2F40000
|
unkown
|
page read and write
|
||
28332B02000
|
unkown
|
page read and write
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
3350000
|
heap default
|
page read and write
|
||
E0A2D7F000
|
unkown
|
page read and write
|
||
2D8BD800000
|
unkown image
|
page readonly
|
||
7FF52CF6D000
|
unkown image
|
page readonly
|
||
26CB000
|
unkown image
|
page readonly
|
||
310000
|
unkown image
|
page readonly
|
||
7FA80000
|
unkown image
|
page readonly
|
||
7FF578BC6000
|
unkown image
|
page readonly
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
2866000
|
unkown image
|
page readonly
|
||
E0A26FF000
|
stack
|
page read and write
|
||
263F000
|
unkown image
|
page readonly
|
||
3000000
|
unkown image
|
page readonly
|
||
2D8BEFB0000
|
unkown
|
page read and write
|
||
7DF580E50000
|
unkown image
|
page readonly
|
||
26EC000
|
unkown image
|
page readonly
|
||
2AFF000
|
unkown image
|
page readonly
|
||
2B0D000
|
unkown image
|
page readonly
|
||
3640000
|
heap private
|
page read and write
|
||
2577000
|
unkown image
|
page readonly
|
||
7FF58E5A7000
|
unkown image
|
page readonly
|
||
25FF000
|
unkown image
|
page readonly
|
||
7F240000
|
unkown image
|
page readonly
|
||
48A4000
|
unkown
|
page read and write
|
||
2AAE000
|
unkown image
|
page readonly
|
||
6E8CA000
|
unkown image
|
page readonly
|
||
28332A13000
|
unkown
|
page read and write
|
||
29E5000
|
unkown image
|
page readonly
|
||
2987000
|
unkown image
|
page readonly
|
||
2643000
|
unkown image
|
page readonly
|
||
2D1B000
|
unkown image
|
page readonly
|
||
3650000
|
unkown image
|
page readonly
|
||
820000
|
unkown image
|
page read and write
|
||
421F000
|
stack
|
page read and write
|
||
7FF572FE2000
|
unkown image
|
page readonly
|
||
2D8BD700000
|
unkown
|
page read and write
|
||
26C4000
|
unkown image
|
page readonly
|
||
2950000
|
unkown
|
page read and write
|
||
2F60000
|
unkown image
|
page readonly
|
||
2525000
|
unkown image
|
page readonly
|
||
557000
|
unkown
|
page read and write
|
||
2B90000
|
unkown image
|
page readonly
|
||
3030000
|
heap default
|
page read and write
|
||
34DA000
|
heap default
|
page read and write
|
||
4B39B000
|
unkown
|
page read and write
|
||
7FF58E183000
|
unkown image
|
page readonly
|
||
2E8A000
|
heap default
|
page read and write
|
||
2DD0000
|
unkown image
|
page readonly
|
||
6E8CF000
|
unkown image
|
page readonly
|
||
7FF52CF83000
|
unkown image
|
page readonly
|
||
2866000
|
unkown image
|
page readonly
|
||
1DFD4B70000
|
unkown image
|
page readonly
|
||
28E1000
|
unkown image
|
page readonly
|
||
26BF000
|
unkown image
|
page readonly
|
||
2A90000
|
heap default
|
page read and write
|
||
26EC000
|
unkown image
|
page readonly
|
||
3055000
|
unkown
|
page read and write
|
||
2A5F000
|
stack
|
page read and write
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
2B8B000
|
unkown image
|
page readonly
|
||
2C96000
|
unkown image
|
page readonly
|
||
2656000
|
unkown image
|
page readonly
|
||
710000
|
unkown image
|
page readonly
|
||
7FA80000
|
unkown image
|
page readonly
|
||
2BBB000
|
unkown
|
page read and write
|
||
7DF53ACD0000
|
unkown image
|
page readonly
|
||
28CF000
|
unkown image
|
page readonly
|
||
26EC000
|
unkown image
|
page readonly
|
||
7FF30000
|
unkown image
|
page readonly
|
||
830000
|
unkown image
|
page readonly
|
||
8C34E7A000
|
stack
|
page read and write
|
||
4C60000
|
unkown
|
page read and write
|
||
770000
|
unkown image
|
page readonly
|
||
25F1000
|
unkown image
|
page readonly
|
||
7FF58DCD5000
|
unkown image
|
page readonly
|
||
1DFD4C13000
|
unkown
|
page read and write
|
||
24C7000
|
unkown image
|
page readonly
|
||
310000
|
unkown image
|
page readonly
|
||
7F230000
|
unkown image
|
page readonly
|
||
27FE000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
28332B15000
|
unkown
|
page read and write
|
||
3390000
|
unkown image
|
page readonly
|
||
7EFA0000
|
unkown image
|
page readonly
|
||
7FF22000
|
unkown image
|
page readonly
|
||
C94ECFB000
|
stack
|
page read and write
|
||
2AB1000
|
unkown image
|
page readonly
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
830000
|
unkown image
|
page readonly
|
||
7F130000
|
unkown image
|
page readonly
|
||
2BB3000
|
unkown image
|
page readonly
|
||
7DF586AC0000
|
unkown image
|
page readonly
|
||
2BE0000
|
unkown image
|
page readonly
|
||
2970000
|
unkown image
|
page readonly
|
||
3059000
|
unkown
|
page read and write
|
||
28332A66000
|
unkown
|
page read and write
|
||
2A9A000
|
heap default
|
page read and write
|
||
94B000
|
heap default
|
page read and write
|
||
2D50000
|
heap private
|
page read and write
|
||
284F000
|
unkown image
|
page readonly
|
||
271C000
|
unkown image
|
page readonly
|
||
4B280000
|
unkown
|
page read and write
|
||
7FF578C4F000
|
unkown image
|
page readonly
|
||
2A96000
|
unkown
|
page read and write
|
||
2D00000
|
heap default
|
page read and write
|
||
2880000
|
unkown image
|
page readonly
|
||
2950000
|
unkown
|
page read and write
|
||
2D8BD69B000
|
unkown
|
page read and write
|
||
7FF52C819000
|
unkown image
|
page readonly
|
||
2DB0000
|
heap default
|
page read and write
|
||
3320000
|
unkown image
|
page readonly
|
||
2AE9000
|
unkown image
|
page readonly
|
||
21D598ED000
|
unkown
|
page read and write
|
||
25EE000
|
unkown image
|
page readonly
|
||
45F0000
|
unkown
|
page read and write
|
||
333F000
|
stack
|
page read and write
|
||
7FF58E557000
|
unkown image
|
page readonly
|
||
E0A27FF000
|
stack
|
page read and write
|
||
3020000
|
unkown image
|
page read and write
|
||
21D598EC000
|
unkown
|
page read and write
|
||
25FF000
|
unkown image
|
page readonly
|
||
7DF47ED00000
|
unkown image
|
page readonly
|
||
8D0000
|
unkown image
|
page readonly
|
||
2FF0000
|
stack
|
page read and write
|
||
28332910000
|
unkown image
|
page readonly
|
||
7DF580E42000
|
unkown image
|
page readonly
|
||
3310000
|
unkown image
|
page readonly
|
||
2D00000
|
heap default
|
page read and write
|
||
26F3000
|
unkown image
|
page readonly
|
||
7F8E0000
|
unkown image
|
page readonly
|
||
2E3E000
|
stack
|
page read and write
|
||
4A30000
|
unkown
|
page read and write
|
||
2920000
|
unkown
|
page read and write
|
||
2B16000
|
unkown image
|
page readonly
|
||
7FF5729E8000
|
unkown image
|
page readonly
|
||
7FF5729EA000
|
unkown image
|
page readonly
|
||
7FF22000
|
unkown image
|
page readonly
|
||
7DF586AA0000
|
unkown image
|
page readonly
|
||
2ABF000
|
unkown image
|
page readonly
|
||
7DF586AA2000
|
unkown image
|
page readonly
|
||
2611000
|
unkown image
|
page readonly
|
||
303A000
|
heap default
|
page read and write
|
||
6E8B0000
|
unkown image
|
page readonly
|
||
26DB000
|
unkown image
|
page readonly
|
||
283328C0000
|
unkown image
|
page read and write
|
||
8E0000
|
unkown image
|
page readonly
|
||
21D59890000
|
unkown
|
page read and write
|
||
7F242000
|
unkown image
|
page readonly
|
||
7DF580E30000
|
unkown image
|
page readonly
|
||
2839000
|
unkown image
|
page readonly
|
||
8CB000
|
unkown
|
page read and write
|
||
26F8000
|
unkown image
|
page readonly
|
||
7F6E2000
|
unkown image
|
page readonly
|
||
26BF000
|
unkown image
|
page readonly
|
||
3000000
|
unkown image
|
page read and write
|
||
21D59780000
|
heap private
|
page read and write
|
||
2F9E000
|
unkown
|
page read and write
|
||
303A000
|
heap default
|
page read and write
|
||
2B9B000
|
unkown image
|
page readonly
|
||
7FF58DCE2000
|
unkown image
|
page readonly
|
||
21D5A6F0000
|
unkown
|
page read and write
|
||
3950000
|
unkown image
|
page readonly
|
||
24C7000
|
unkown image
|
page readonly
|
||
1DFD4B90000
|
unkown
|
page read and write
|
||
7DF53ACC0000
|
unkown image
|
page readonly
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
7FF573122000
|
unkown image
|
page readonly
|
||
7FF578D9E000
|
unkown image
|
page readonly
|
||
283328E0000
|
unkown image
|
page readonly
|
||
3B0000
|
stack
|
page execute and read and write
|
||
270D000
|
unkown image
|
page readonly
|
||
7FF578D53000
|
unkown image
|
page readonly
|
||
2B2C000
|
unkown image
|
page readonly
|
||
26BB000
|
unkown image
|
page readonly
|
||
88C000
|
unkown
|
page read and write
|
||
7FF58DCDB000
|
unkown image
|
page readonly
|
||
278B000
|
unkown image
|
page readonly
|
||
2670000
|
unkown image
|
page readonly
|
||
3079000
|
heap default
|
page read and write
|
||
7F540000
|
unkown image
|
page readonly
|
||
283328E0000
|
unkown image
|
page readonly
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
2D00000
|
heap default
|
page read and write
|
||
7FF572A59000
|
unkown image
|
page readonly
|
||
335A000
|
heap default
|
page read and write
|
||
2774000
|
unkown image
|
page readonly
|
||
2C00000
|
unkown image
|
page readonly
|
||
7F8D2000
|
unkown image
|
page readonly
|
||
7FF578C10000
|
unkown image
|
page readonly
|
||
28332900000
|
unkown image
|
page readonly
|
||
26F8000
|
unkown image
|
page readonly
|
||
61BE000
|
stack
|
page read and write
|
||
2525000
|
unkown image
|
page readonly
|
||
3AD0000
|
unkown image
|
page readonly
|
||
1DFD4C70000
|
unkown
|
page read and write
|
||
61C0000
|
unkown image
|
page readonly
|
||
3F0000
|
heap private
|
page read and write
|
||
21D5A486000
|
unkown
|
page read and write
|
||
29E0000
|
unkown
|
page read and write
|
||
7FF58E543000
|
unkown image
|
page readonly
|
||
2DD0000
|
heap private
|
page read and write
|
||
7FF52CF69000
|
unkown image
|
page readonly
|
||
28332B00000
|
unkown
|
page read and write
|
||
7FA90000
|
unkown image
|
page readonly
|
||
266C000
|
unkown image
|
page readonly
|
||
3074000
|
unkown
|
page read and write
|
||
5171000
|
unkown
|
page read and write
|
||
26E6000
|
unkown image
|
page readonly
|
||
2635000
|
unkown image
|
page readonly
|
||
3290000
|
unkown image
|
page readonly
|
||
3055000
|
heap default
|
page read and write
|
||
8C34B3F000
|
stack
|
page read and write
|
||
261A000
|
unkown image
|
page readonly
|
||
2611000
|
unkown image
|
page readonly
|
||
3059000
|
heap default
|
page read and write
|
||
7FF58E602000
|
unkown image
|
page readonly
|
||
3220000
|
stack
|
page execute and read and write
|
||
4F40000
|
heap private
|
page read and write
|
||
2826000
|
unkown image
|
page readonly
|
||
361E000
|
stack
|
page read and write
|
||
1DFD4C88000
|
unkown
|
page read and write
|
||
26E6000
|
unkown image
|
page readonly
|
||
2F80000
|
stack
|
page execute and read and write
|
||
7FF20000
|
unkown image
|
page readonly
|
||
370000
|
unkown
|
page read and write
|
||
2AC0000
|
heap default
|
page read and write
|
||
26FD000
|
unkown image
|
page readonly
|
||
1DFD4C3C000
|
unkown
|
page read and write
|
||
2F80000
|
unkown image
|
page readonly
|
||
29E0000
|
unkown
|
page read and write
|
||
2D2C000
|
unkown image
|
page readonly
|
||
32B0000
|
unkown image
|
page readonly
|
||
331A000
|
heap private
|
page read and write
|
||
6E8CD000
|
unkown image
|
page read and write
|
||
7FF578D60000
|
unkown image
|
page readonly
|
||
2581000
|
unkown image
|
page readonly
|
||
44A4000
|
stack
|
page read and write
|
There are 1367 hidden memdumps, click here to show them.