IOCReport

loading gif

Files

File Path
Type
Category
Malicious
gg.gif.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{05FE9151-96AD-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{1C24251B-96AD-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EA9F61FE-96AC-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{05FE9153-96AD-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{05FE9155-96AD-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
modified
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{1C24251D-96AD-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EA9F6200-96AC-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EA9F6202-96AC-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
data
modified
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\6sxhavkE4_SZHA_K4rwWmg67vF0.gz[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\BJp5dDFvoQm12CHBfp4PC6aiyg4.gz[1].css
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\JDHEvZVDnqsG9UcxzgIdtGb6thw.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\NGDGShwgz5vCvyjNFyZiaPlHGCE.gz[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\NnFHhz2jL6yzChtIhaB5IIVKY5k[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\PA3TC2iNXZkiG2C3IJp5VAvC_yY.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\a282eRIAnHsW_URoyogdzsukm_o.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon-2x[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\fdVZU4ttbw8NDRm6H3I5BW3_vCo[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\hceflue5sqxkKta9dP3R-IFtPuY.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\sjm7ZxOOdUKgLq2Lulikx_Lt20I.gz[1].js
exported SGML document, ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\svI82uPNFRD54V4bMLaeahXQXBI.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\th[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\th[2].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\th[3].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\th[4].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\th[5].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\th[6].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\ELqKWpA6KkapLUFbOLS-IQ2zfXc[1].jpg
[TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:08:01 11:43:45], progressive, precision 8, 160x160, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\H_VmuFPRwWZ4UrVl0mPztnf3z5U[1].jpg
[TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:08:01 11:38:22], progressive, precision 8, 160x160, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\HdepnBaFj-yarvouFUIlfV4Q9D8.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\LL4BV3XU.htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\MDr1f9aJs4rBVf1F5DAtlALvweY.gz[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\P3LN8DHh0udC9Pbh8UHnw5FJ8R8.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\RrvsBuqGHDpqG7NAz4Q0BMOqQBg.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\UYtUYDcn1oZlFG-YfBPz59zejYI[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\Xp-HPHGHOZznHBwdn7OWdva404Y.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\b4Jy0kwhnsWcsDQyuzAEsN7RmhQ[1].jpg
[TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:59:08], progressive, precision 8, 160x160, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\kBH4DSEA84cgV7IKw7_Bwvm2NpI[1].jpg
[TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:58:04], progressive, precision 8, 160x160, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\model[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\msnpopularnow[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\sbi[1].htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\test[1].htm
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\th[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\th[2].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\th[3].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\uYzy_SF_Qx-quOm8IecsaqSoOd0[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\5rqGloMo94v3vwNVR5OsxDNd8d0[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\Jl2vUSlEIqWjk-99MuYp4W74zvQ[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\KC_nX2_tPPyFvVw1RK20Yu1FyDk[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\Lq2ZTcK-ZOpjsEJIXReQZG4mDLg.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\MstqcgNaYngCBavkktAoSE0--po.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\N55Tc-oLNOuzZam9OghLsR0GD5U[1].jpg
[TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=GIMP 2.10.18, datetime=2020:04:16 19:04:38], progressive, precision 8, 160x160, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\Passport[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\ULJCe4CXM2DCjZgELMGm2K4PcPo[1].png
PNG image data, 1642 x 116, 8-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\XvRHqJwJt19aXQca73hQTfvNMxk[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bLULVERLX4vU6bjspboNMw9vl_0.gz[1].js
very short file (no magic)
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\gDsOfTXNZVl18jxNDvhXqAdf2tM.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\k5oM71-Oyo7w7ptkcB_2S5dIr7I.gz[1].js
ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\lK_FmcR4naKX9hpIwfe9ify1hf4.gz[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\ozS3T0fsBUPZy4zlY0UX_e0TUwY.gz[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\pXscrbCrewUD-UetJTvW5F7YMxo.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\th[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\th[2].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\th[3].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\th[4].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\th[5].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\th[6].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\4L4QdyjTv0HYE2Ig2ol9eYoqxg8[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\CMm2G4GK3T9XHTMByeN2QI1OVUs[1].jpg
[TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:51:08], progressive, precision 8, 160x158, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\DCD2HH6I.htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\Fsa_OI0AplCnVoXGca8ALOo0S0s[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\GiGr-rA9TBhE2c3LJn7PvDweiOo.gz[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\RXZtj0lYpFm5XDPMpuGSsNG8i9I.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\cs[1].htm
gzip compressed data, max speed, from TOPS/20
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\eRYlUYIMYsB_Pt8B7FTik-pl5cs.gz[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\eaMqCdNxIXjLc0ATep7tsFkfmSA.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\hqx6FcD0hjfzrON5oLgx2RMMD1s.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\n1U5gwBiwMo7s-fWOh2kSe3Kils[1].jpg
[TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:07:31 17:53:43], progressive, precision 8, 160x160, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\n8-O_KIRNSMPFWQWrGjn0BRH6SM.gz[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\n_C4vBfAV3O9RfkGjfduaZoxjAs[1].jpg
[TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2, software=GIMP 2.10.8, datetime=2019:08:01 11:40:12], progressive, precision 8, 160x160, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\sTWC0LplwPyIP_jw8VjHps800ZQ.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\swyt_VnIjJDWZW5KEq7a8l_1AEw.gz[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\th[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 1920x1080, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\th[2].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\th[3].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\th[4].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\th[5].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\th[6].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\th[7].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x150, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\AppData\Local\Temp\~DF0DE5436ABEB52E9E.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF281FFC11E683B243.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF377653D890A5B199.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF8E87A79D6431109E.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFC40048B8CFAB8D37.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFC79BBAED0EA4D59C.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFDF33C94511A2C72E.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFF25467FE1B136D69.TMP
data
dropped
clean
There are 99 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\gg.gif.dll'
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\gg.gif.dll,StartService
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\gg.gif.dll',#1
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\gg.gif.dll',#1
clean
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:7104 CREDAT:17410 /prefetch:2
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:7104 CREDAT:82948 /prefetch:2
clean
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4864 CREDAT:17410 /prefetch:2
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:4864 CREDAT:17414 /prefetch:2
clean
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:1364 CREDAT:17410 /prefetch:2
clean
There are 2 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://www.msn.com/de-ch/nachrichten/politik/l
unknown
clean
https://www.msn.com/de-ch/news/other/das-grosse-impfen-beginnt-geht-es-nun-endlich-vorw
unknown
clean
https://www.msn.com/de-ch/finanzen/top-stories/janet-yellen-us-finanzministerin-fordert-weltweite-mi
unknown
clean
http://under17.com/joomla/b5_2FTUcdYX/sVnNArBfX_2BDo/zZv_2Fbn6M53QxtrfT64W/tg0Mz_2FW77FnY1h/4P95tKyS
unknown
clean
https://www.msn.com/de-ch/nachrichten/international/so-tickt-kosovos-neue-staatspr
unknown
clean
https://www.msn.com/de-ch/nachrichten/international/es-h
unknown
clean
https://www.msn.com/de-ch/news/other/abdullah-sollte-von-erdogan-lernen/ar-BB1fktw7?ocid=BingHPC
unknown
clean
https://www.msn.com/de-ch/nachrichten/vermischtes/die-altersheime-hat-man-vergessen/ar-BB1fkRPW?ocid
unknown
clean
https://www.msn.com/de-ch/nachrichten/politik/das-alles-h
unknown
clean
https://www.msn.com/de-ch/nachrichten/vermischtes/nachtleben-in-israel-eine-nacht-wie-fr
unknown
clean
https://www.msn.com/de-ch/nachrichten/international/alexej-nawalny-klagt-
unknown
clean
https://www.msn.com/de-ch/nachrichten/politik/manfred-weber-nennt-eu-beitritt-der-t
unknown
clean
http://under17.com
unknown
clean
https://www.msn.com/de-ch/nachrichten/politik/coronakrise-laschet-fordert-harten-br
unknown
clean
https://www.msn.com/de-ch/news/other/polizei-sucht-mit-superpuma-nach-vermissten-minderj
unknown
clean
https://www.msn.com/de-ch/nachrichten/other/karl-lauterbach-der-blitzableiter-der-republik/ar-BB1fiI
unknown
clean
https://www.msn.com/de-ch/finanzen/top-stories/staatliche-regulierung-allianz-gegen-big-tech-druck-a
unknown
clean
https://www.msn.com/de-ch/nachrichten/politik/fdp-nur-keine-option-von-vornherein-ausschlie
unknown
clean
https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e
unknown
clean
https://www.msn.com/de-ch/nachrichten/international/ukrainekonflikt-maas-warnt-russland-und-ukraine-
unknown
clean
https://www.msn.com/de-ch/nachrichten/international/admirale-begehren-auf-gegen-das-verr
unknown
clean
https://www.msn.com/de-ch/news/other/ressourcen-f
unknown
clean
https://www.msn.com/de-ch/finanzen/top-stories/datenleck-bei-facebook-wachstum-z
unknown
clean
https://www.msn.com/de-ch/news/other/pentagon-usa-beobachten-russlands-aktivit
unknown
clean
http://feross.org
unknown
clean
http://under17.com/joomla/qpONlUc_2Fx9bGWS/jLOColZsxiS4Q8t/VbkMaKiMRHZwpzblKX/6AI6KdKhU/1fj0ddZRJ_2F
unknown
clean
There are 16 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
urs-world.com
185.186.244.95
malicious
under17.com
185.243.114.196
malicious
login.microsoftonline.com
unknown
clean

IPs

IP
Domain
Country
Malicious
185.243.114.196
under17.com
Netherlands
malicious
192.168.2.1
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{EA9F61FE-96AC-11EB-90EB-ECF4BBEA1588}
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Window_Placement
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files\internet explorer\iexplore.exe
{05FE9151-96AD-11EB-90EB-ECF4BBEA1588}
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Window_Placement
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
{1C24251B-96AD-11EB-90EB-ECF4BBEA1588}
clean
There are 42 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
507B000
heap private
page read and write
malicious
507B000
heap private
page read and write
malicious
1020000
unkown
page read and write
malicious
4E7F000
heap private
page read and write
malicious
37EB000
heap private
page read and write
malicious
37EB000
heap private
page read and write
malicious
507B000
heap private
page read and write
malicious
37EB000
heap private
page read and write
malicious
507B000
heap private
page read and write
malicious
37EB000
heap private
page read and write
malicious
37EB000
heap private
page read and write
malicious
2C70000
unkown
page read and write
malicious
37EB000
heap private
page read and write
malicious
36ED000
heap private
page read and write
malicious
2FB0000
unkown
page read and write
malicious
4F7D000
heap private
page read and write
malicious
507B000
heap private
page read and write
malicious
507B000
heap private
page read and write
malicious
35EF000
heap private
page read and write
malicious
1A15AFB0000
heap default
page read and write
clean
7FF559ED9000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF59EFDD000
unkown
page readonly
clean
7FF5989C3000
unkown
page readonly
clean
7FF5AF73D000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF542F8D000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE43C4000
unkown
page read and write
clean
7FF54373B000
unkown
page readonly
clean
7FF596A1E000
unkown
page readonly
clean
2CFDE9B0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE438A000
unkown
page read and write
clean
7FF593B11000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF53DDE5000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4354000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
196144C7000
unkown
page read and write
clean
1EBE4356000
unkown
page read and write
clean
CDC855E000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5967DB000
unkown
page readonly
clean
20B15869000
unkown
page read and write
clean
1C63E855000
unkown
page read and write
clean
1EBE433C000
unkown
page read and write
clean
27F2000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF5437A9000
unkown
page readonly
clean
1C640908000
unkown
page read and write
clean
2BA0000
unkown
page readonly
clean
7FF5AFFC4000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
2DFE000
unkown
page read and write
clean
24B8000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C570E3C000
unkown
page read and write
clean
7FF543730000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1C63E8AE000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE434E000
unkown
page read and write
clean
1EBE435F000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
BE9000
unkown
page readonly
clean
7FF5A107F000
unkown
page readonly
clean
40BF000
unkown
page read and write
clean
7FF53DD44000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
2CAA000
heap default
page read and write
clean
10001000
unkown image
page execute and read and write
clean
1040000
unkown
page read and write
clean
1C640A81000
unkown
page read and write
clean
AAEF7E000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE437A000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5A0E6B000
unkown
page readonly
clean
1C641310000
unkown
page read and write
clean
7FF5AFB9C000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
16C84380000
unkown
page readonly
clean
2C06B320000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF543822000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C641010000
unkown
page read and write
clean
27D1000
unkown
page readonly
clean
1EBE435F000
unkown
page read and write
clean
7FF59EE68000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
3EF8877000
unkown
page read and write
clean
1F031D90000
heap private
page read and write
clean
7FF59EFCE000
unkown
page readonly
clean
7FF55A0F9000
unkown
page readonly
clean
7FF53DE59000
unkown
page readonly
clean
7FF598B20000
unkown
page readonly
clean
1EBE43B7000
unkown
page read and write
clean
16C84429000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5D4359000
unkown
page readonly
clean
14F0000
unkown
page readonly
clean
7FF55A043000
unkown
page readonly
clean
7FF5A10DF000
unkown
page readonly
clean
1C640A84000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1B6C679000
unkown
page read and write
clean
7FF598C04000
unkown
page readonly
clean
7FF5986F5000
unkown
page readonly
clean
1C63E882000
unkown
page read and write
clean
7FF559E5F000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
275D000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE3AD4000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54C00B000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
30AF99E000
unkown
page read and write
clean
7FF5D45E4000
unkown
page readonly
clean
7FF5D43E1000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
1F032120000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
2C06B070000
unkown
page read and write
clean
1C63E920000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF55A0B7000
unkown
page readonly
clean
96D3AF8000
unkown
page read and write
clean
7FF59627D000
unkown
page readonly
clean
7FF596A74000
unkown
page readonly
clean
196162B0000
unkown
page read and write
clean
1EBE433C000
unkown
page read and write
clean
7FF543571000
unkown
page readonly
clean
196143C0000
unkown
page readonly
clean
1B3D979000
unkown
page read and write
clean
1F031E02000
unkown
page read and write
clean
16C84E00000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF5D44FA000
unkown
page readonly
clean
2608000
unkown
page readonly
clean
7FF543551000
unkown
page readonly
clean
7FF5A1129000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1A15B002000
unkown
page read and write
clean
1EBE433F000
unkown
page read and write
clean
302F000
unkown
page read and write
clean
7FF593B0D000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
3459000
heap private
page read and write
clean
1C640770000
unkown
page readonly
clean
1C570D90000
unkown
page readonly
clean
7FF559981000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C64099F000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF55A0F1000
unkown
page readonly
clean
11FB000
heap default
page read and write
clean
7FF5AFBB7000
unkown
page readonly
clean
1D6D8A13000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
19616250000
heap private
page read and write
clean
45C0000
unkown
page read and write
clean
1B6C3DE000
unkown
page read and write
clean
1F031DF0000
heap default
page read and write
clean
1EBE4369000
unkown
page read and write
clean
96D3D79000
unkown
page read and write
clean
4558000
unkown
page execute and read and write
clean
7FF5A10B0000
unkown
page readonly
clean
47CC000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF543735000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
196144A4000
unkown
page read and write
clean
180E1256000
unkown
page read and write
clean
7FF59F04A000
unkown
page readonly
clean
7FF5436C2000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE4344000
unkown
page read and write
clean
7FF553174000
unkown
page readonly
clean
1A15B2D0000
unkown
page readonly
clean
16C8443C000
unkown
page read and write
clean
1EBE3AD3000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
2B10000
heap default
page read and write
clean
1C640906000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1C63E9A1000
unkown
page read and write
clean
2C06B002000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1C64095B000
unkown
page read and write
clean
7FF5A0E30000
unkown
page readonly
clean
23FB000
unkown
page readonly
clean
20B15913000
unkown
page read and write
clean
3EF867E000
unkown
page read and write
clean
7FF55A01C000
unkown
page readonly
clean
478FF4B000
unkown
page read and write
clean
7FF596A6A000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF5AFF5D000
unkown
page readonly
clean
7FF5A0EE4000
unkown
page readonly
clean
1C640780000
unkown
page read and write
clean
7FF543638000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
16C8445C000
unkown
page read and write
clean
7FF5AFD01000
unkown
page readonly
clean
1961650A000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF596A88000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
16C846D0000
unkown
page readonly
clean
558F000
unkown
page read and write
clean
1EBE4854000
unkown
page read and write
clean
91A647A000
unkown
page read and write
clean
276A000
unkown
page readonly
clean
7FF59EFB4000
unkown
page readonly
clean
16C84310000
heap private
page read and write
clean
1EBE4349000
unkown
page read and write
clean
7FF55301B000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF53DED2000
unkown
page readonly
clean
7FF59EFBE000
unkown
page readonly
clean
1F0320D0000
unkown
page write copy
clean
1C640915000
unkown
page read and write
clean
1EBE4366000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF55A022000
unkown
page readonly
clean
7FF598B7F000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
196162A0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
94F3BFA000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
3DBF000
unkown
page read and write
clean
1EBE43B0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF53DDCA000
unkown
page readonly
clean
7FF55A164000
unkown
page readonly
clean
7FF54371C000
unkown
page readonly
clean
38E9000
heap private
page read and write
clean
1EBE43CB000
unkown
page read and write
clean
1F032000000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE3A3C000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF53DD2D000
unkown
page readonly
clean
7FF5AFC9B000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C641110000
unkown
page read and write
clean
1C641210000
unkown
page read and write
clean
7FF5AFE82000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF597F52000
unkown
page readonly
clean
7FF53DE48000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
96D3777000
unkown
page read and write
clean
7FF596A1A000
unkown
page readonly
clean
1C640A53000
unkown
page read and write
clean
1D6D8A02000
unkown
page read and write
clean
2CE1000
unkown
page execute read
clean
1A15B113000
unkown
page read and write
clean
1EBE4349000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
396A000
heap private
page read and write
clean
7FF5A09D0000
unkown
page readonly
clean
1897A100000
unkown
page read and write
clean
1EBE4802000
unkown
page read and write
clean
1EBE439C000
unkown
page read and write
clean
7FF53DB60000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF5D450B000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2E3E000
unkown
page read and write
clean
3056000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5942E8000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF54C0F1000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF559D57000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE435B000
unkown
page read and write
clean
1A15B02A000
unkown
page read and write
clean
1EBE437A000
unkown
page read and write
clean
47CD000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1D6D8B02000
unkown
page read and write
clean
1EBE43BA000
unkown
page read and write
clean
7FF54BCBC000
unkown
page readonly
clean
7FF598B99000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF53DC31000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
16C84502000
unkown
page read and write
clean
1C64090B000
unkown
page read and write
clean
7FF59EF8C000
unkown
page readonly
clean
20B15841000
unkown
page read and write
clean
180E1300000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5A10AA000
unkown
page readonly
clean
7FF596A37000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C641510000
unkown
page read and write
clean
6560000
unkown
page readonly
clean
7FF5D41BC000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF596841000
unkown
page readonly
clean
1F031F02000
unkown
page read and write
clean
7FF5D42C6000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
180E1202000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
30AFEFA000
unkown
page read and write
clean
7FF5A1118000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
23EC000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
2B70000
unkown
page read and write
clean
1EBE435A000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE435F000
unkown
page read and write
clean
1EBE437B000
unkown
page read and write
clean
7FF54362B000
unkown
page readonly
clean
2740000
unkown
page readonly
clean
7FF5437A1000
unkown
page readonly
clean
2CFDE7A0000
unkown
page readonly
clean
11AD000
unkown
page execute and read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF54BCD7000
unkown
page readonly
clean
7FF598B6A000
unkown
page readonly
clean
1C64091B000
unkown
page read and write
clean
94F3C7F000
unkown
page read and write
clean
7FF55319D000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF55320A000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE4347000
unkown
page read and write
clean
1150000
unkown
page execute and read and write
clean
3980000
unkown
page readonly
clean
4800000
heap private
page read and write
clean
1C63E92D000
unkown
page read and write
clean
4E00000
heap private
page read and write
clean
1EBE437A000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF559F88000
unkown
page readonly
clean
7FF597EB4000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF5A1050000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF5AFD05000
unkown
page readonly
clean
7FF5D41D7000
unkown
page readonly
clean
2CEC000
unkown
page readonly
clean
FC0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
3032000
unkown
page read and write
clean
7FF596A91000
unkown
page readonly
clean
7FF553196000
unkown
page readonly
clean
300A000
heap default
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54C0F2000
unkown
page readonly
clean
2CA0000
heap default
page read and write
clean
7FF5A109C000
unkown
page readonly
clean
2409000
unkown
page readonly
clean
7FF5436F3000
unkown
page readonly
clean
7FF5A111E000
unkown
page readonly
clean
7FF598A73000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF55318E000
unkown
page readonly
clean
3EF847E000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4372000
unkown
page read and write
clean
7FF5967E6000
unkown
page readonly
clean
7FF53DDEB000
unkown
page readonly
clean
30AFD7A000
unkown
page read and write
clean
4790379000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2FAE000
stack
page read and write
clean
7FF54C005000
unkown
page readonly
clean
1C640928000
unkown
page read and write
clean
7FF559BE2000
unkown
page readonly
clean
2CEF000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
2C06B06C000
unkown
page read and write
clean
1272000
unkown
page read and write
clean
16C85140000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
24A4000
unkown
page readonly
clean
2CED000
unkown
page read and write
clean
47BB000
unkown
page read and write
clean
96D3E7E000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
3EF8A7F000
unkown
page read and write
clean
2CE0000
unkown
page read and write
clean
7FF54C06E000
unkown
page readonly
clean
2C06B06C000
unkown
page read and write
clean
48E0000
unkown
page execute and read and write
clean
7FF5D454A000
unkown
page readonly
clean
7FF5AFF51000
unkown
page readonly
clean
7FF5D4403000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
7FF559F83000
unkown
page readonly
clean
7FF5D4517000
unkown
page readonly
clean
7FF5D45F2000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
32C7000
heap private
page read and write
clean
49C0000
unkown
page read and write
clean
7FF552E97000
unkown
page readonly
clean
1080000
unkown
page readonly
clean
123C000
unkown
page read and write
clean
2CFDE99E000
unkown
page read and write
clean
7FF598A8C000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE39B0000
unkown
page readonly
clean
1C63E9B2000
unkown
page read and write
clean
1A15AFC0000
unkown
page readonly
clean
7FF543407000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C641010000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
4A45FEE000
unkown
page read and write
clean
1EBE4360000
unkown
page read and write
clean
7FF5AFEDA000
unkown
page readonly
clean
241D000
unkown
page readonly
clean
7FF5434EB000
unkown
page readonly
clean
1261000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF55311A000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE40F0000
unkown
page readonly
clean
7FF54C079000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1D6D8A3F000
unkown
page read and write
clean
1C570DB0000
unkown
page read and write
clean
1EBE4400000
unkown
page readonly
clean
1EBE3AD3000
unkown
page read and write
clean
7FF543704000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1F031E00000
unkown
page read and write
clean
1EBE40D0000
unkown
page readonly
clean
23AD000
unkown
page readonly
clean
272C000
unkown
page readonly
clean
19616402000
unkown
page read and write
clean
1C63EAD0000
unkown
page write copy
clean
7FF53DE3F000
unkown
page readonly
clean
51FA000
heap private
page read and write
clean
7FF54BFA0000
unkown
page readonly
clean
7FF55A07A000
unkown
page readonly
clean
7FF54350F000
unkown
page readonly
clean
1EBE4861000
unkown
page read and write
clean
1EBE4330000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5A0FAB000
unkown
page readonly
clean
7FF5941B8000
unkown
page readonly
clean
1C63E8BA000
unkown
page read and write
clean
1EBE43AE000
unkown
page read and write
clean
2CDA000
unkown
page read and write
clean
1C640A7B000
unkown
page read and write
clean
2803000
unkown
page readonly
clean
91A65FA000
unkown
page read and write
clean
7FF5A07CB000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5436D2000
unkown
page readonly
clean
7FF59F052000
unkown
page readonly
clean
1EBE3C00000
unkown
page readonly
clean
7FF543566000
unkown
page readonly
clean
270C000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
1F031E42000
unkown
page read and write
clean
2B30000
unkown
page readonly
clean
1C570E13000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF59EFA4000
unkown
page readonly
clean
7FF5A109A000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF5436FF000
unkown
page readonly
clean
7FF5D4325000
unkown
page readonly
clean
7FF5AFDDB000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF59EE41000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF54C017000
unkown
page readonly
clean
8E6CA7C000
unkown
page read and write
clean
7FF598B0A000
unkown
page readonly
clean
20B15800000
unkown
page read and write
clean
242A000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
8E6CCFE000
unkown
page read and write
clean
7FF598A1E000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF543589000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF543784000
unkown
page readonly
clean
7FF559F61000
unkown
page readonly
clean
1C63E8A6000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2725000
unkown
page readonly
clean
7FF5AFEEB000
unkown
page readonly
clean
AAEDF5000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54372E000
unkown
page readonly
clean
7FF5A0B8E000
unkown
page readonly
clean
20B15902000
unkown
page read and write
clean
7FF597F44000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF53DDE0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF53DE17000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C640A12000
unkown
page read and write
clean
7FF5A09B1000
unkown
page readonly
clean
96D37FE000
unkown
page read and write
clean
2C06B06C000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
16C84500000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4390000
unkown
page read and write
clean
1C63E96E000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE3870000
heap private
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54BF03000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF596928000
unkown
page readonly
clean
1EBE3A59000
unkown
page read and write
clean
1C640C00000
unkown
page read and write
clean
196142E0000
heap default
page read and write
clean
23F3000
unkown
page readonly
clean
1EBE3AD4000
unkown
page read and write
clean
1EBE431B000
unkown
page read and write
clean
7FF596A20000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF593F6C000
unkown
page readonly
clean
1EBE4369000
unkown
page read and write
clean
278B000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE4202000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE4319000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
3000000
heap default
page read and write
clean
189781C0000
unkown
page readonly
clean
19614280000
heap private
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
19614500000
unkown
page read and write
clean
1EBE40E0000
unkown
page readonly
clean
1C63E882000
unkown
page read and write
clean
23B9000
unkown
page readonly
clean
1D6D8970000
unkown
page readonly
clean
1C571602000
unkown
page read and write
clean
7FF5942B5000
unkown
page readonly
clean
18978520000
unkown
page readonly
clean
7FF5A1003000
unkown
page readonly
clean
7FF59EC2A000
unkown
page readonly
clean
30AFDFF000
unkown
page read and write
clean
304E000
unkown
page read and write
clean
7FF54BF08000
unkown
page readonly
clean
2C06B2D0000
unkown
page write copy
clean
49C0000
unkown
page read and write
clean
7FF593F87000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
2DBE000
unkown
page read and write
clean
1C641410000
unkown
page read and write
clean
1EBE433C000
unkown
page read and write
clean
25FC000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF553120000
unkown
page readonly
clean
7FF5AFF18000
unkown
page readonly
clean
7FF59EF5A000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5D4505000
unkown
page readonly
clean
7FF594321000
unkown
page readonly
clean
7FF5A1126000
unkown
page readonly
clean
7FF543292000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1A15B108000
unkown
page read and write
clean
2CFDE986000
heap default
page read and write
clean
1C5710D0000
unkown
page readonly
clean
3290000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1C640988000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
1040000
unkown
page read and write
clean
7FF53DDDA000
unkown
page readonly
clean
1C641610000
unkown
page read and write
clean
34D8000
heap private
page read and write
clean
2CFDE970000
heap default
page read and write
clean
7FF5986E6000
unkown
page readonly
clean
20B15900000
unkown
page read and write
clean
19615DF0000
unkown
page read and write
clean
7FF59EF02000
unkown
page readonly
clean
AAF17F000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF559EC1000
unkown
page readonly
clean
1B6C77F000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2C23000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
180E1200000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
19616523000
unkown
page read and write
clean
AAE9BB000
unkown
page read and write
clean
1EBE4802000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
19614502000
unkown
page read and write
clean
16C84449000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF55A0EE000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54BEE1000
unkown
page readonly
clean
7FF5A10C7000
unkown
page readonly
clean
1EBE4390000
unkown
page read and write
clean
7FF5A0F01000
unkown
page readonly
clean
1C570DA0000
unkown
page readonly
clean
16C84400000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE438A000
unkown
page read and write
clean
7FF55314C000
unkown
page readonly
clean
91A627B000
unkown
page read and write
clean
7FF54375F000
unkown
page readonly
clean
1C641010000
unkown
page read and write
clean
20B15610000
heap private
page read and write
clean
2CFDE99E000
unkown
page read and write
clean
3EF877B000
unkown
page read and write
clean
2D24000
unkown
page read and write
clean
7FF543821000
unkown
page readonly
clean
2E70000
heap private
page read and write
clean
1C64090B000
unkown
page read and write
clean
2ACB000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
2D12000
unkown
page read and write
clean
2C06B06C000
unkown
page read and write
clean
22F4000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
8E6CFFE000
unkown
page read and write
clean
2D14000
unkown
page read and write
clean
7FF597F4A000
unkown
page readonly
clean
1C63EA00000
unkown
page readonly
clean
7FF5A119A000
unkown
page readonly
clean
7FF593F7A000
unkown
page readonly
clean
1C570D80000
heap default
page read and write
clean
1040000
unkown
page read and write
clean
4D4E000
unkown
page read and write
clean
2B40000
unkown
page readonly
clean
7FF552CE0000
unkown
page readonly
clean
1EBE4366000
unkown
page read and write
clean
1EBE3A13000
unkown
page read and write
clean
7FF598897000
unkown
page readonly
clean
51FA000
heap private
page read and write
clean
20B171A0000
unkown
page read and write
clean
1EBE4392000
unkown
page read and write
clean
7FF54BDC6000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2F7E000
unkown
page read and write
clean
2256000
unkown
page readonly
clean
26F9000
unkown
page readonly
clean
27D5000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
16C84370000
heap default
page read and write
clean
1C571B40000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF543611000
unkown
page readonly
clean
2F60000
heap default
page read and write
clean
49C0000
unkown
page read and write
clean
180E2BF0000
unkown
page read and write
clean
1C64094A000
unkown
page read and write
clean
1EBE439B000
unkown
page read and write
clean
7FF5940D5000
unkown
page readonly
clean
196162B0000
unkown
page read and write
clean
479027E000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
96D3675000
unkown
page read and write
clean
7FF59E7C1000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C641013000
unkown
page read and write
clean
32D0000
unkown
page readonly
clean
1C640B00000
unkown
page read and write
clean
7FF594252000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
271D000
unkown
page readonly
clean
1C640D02000
unkown
page read and write
clean
2CFDE8D0000
unkown
page readonly
clean
1EBE38D0000
heap default
page read and write
clean
49C0000
unkown
page read and write
clean
4BF8000
heap private
page read and write
clean
1C640975000
unkown
page read and write
clean
11F0000
heap default
page read and write
clean
1C570E49000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1C64090B000
unkown
page read and write
clean
20B15829000
unkown
page read and write
clean
1EBE4385000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF54C04A000
unkown
page readonly
clean
1C570E6C000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF55316A000
unkown
page readonly
clean
2C06B03F000
unkown
page read and write
clean
2D25000
unkown
page read and write
clean
7FF5969C0000
unkown
page readonly
clean
30AFF7D000
unkown
page read and write
clean
1A15B04F000
unkown
page read and write
clean
7FF54C054000
unkown
page readonly
clean
7FF5D4544000
unkown
page readonly
clean
19616500000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
16C8448D000
unkown
page read and write
clean
7FF552EA0000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1EBE4344000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
7FF5D4321000
unkown
page readonly
clean
1168000
unkown
page execute and read and write
clean
1040000
unkown
page read and write
clean
2D24000
heap default
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF596901000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
30AFCF9000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF53D9B5000
unkown
page readonly
clean
7FF53DCDB000
unkown
page readonly
clean
2C06B119000
unkown
page read and write
clean
2C06AFC0000
heap default
page read and write
clean
1040000
unkown
page read and write
clean
7FF5436FB000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF597ED9000
unkown
page readonly
clean
D61047F000
unkown
page read and write
clean
AAECFE000
unkown
page read and write
clean
1C63E95E000
unkown
page read and write
clean
1961443F000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF553164000
unkown
page readonly
clean
2C06B06C000
unkown
page read and write
clean
2FF0000
heap private
page read and write
clean
1C570F08000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF543676000
unkown
page readonly
clean
6620000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF553125000
unkown
page readonly
clean
7FF53DE34000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
2C06B06C000
unkown
page read and write
clean
1C640A73000
unkown
page read and write
clean
7FF59EC2F000
unkown
page readonly
clean
7FF55A012000
unkown
page readonly
clean
7FF54375C000
unkown
page readonly
clean
1C640974000
unkown
page read and write
clean
7FF596A64000
unkown
page readonly
clean
30AFE7A000
unkown
page read and write
clean
7FF553211000
unkown
page readonly
clean
1EBE3AC6000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF59EF98000
unkown
page readonly
clean
32B0000
unkown
page read and write
clean
2C06CBC0000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF54377A000
unkown
page readonly
clean
7FF55312B000
unkown
page readonly
clean
7FF55A07E000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF596B12000
unkown
page readonly
clean
7FF5D45EA000
unkown
page readonly
clean
D6105FF000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1EBE3AA0000
unkown
page read and write
clean
1B6C7FB000
unkown
page read and write
clean
196142F0000
unkown
page readonly
clean
7FF598A84000
unkown
page readonly
clean
7FF54379E000
unkown
page readonly
clean
2BEE000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
1EBE435F000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1C640AA4000
unkown
page read and write
clean
7FF55A085000
unkown
page readonly
clean
4660000
unkown
page readonly
clean
7FF597EA4000
unkown
page readonly
clean
91A62FF000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1D6D8850000
unkown
page readonly
clean
10005000
unkown image
page execute and read and write
clean
180E1213000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
94F3A7E000
unkown
page read and write
clean
16C843A0000
unkown
page read and write
clean
1272000
unkown
page read and write
clean
19614429000
unkown
page read and write
clean
1A15B802000
unkown
page read and write
clean
7FF59ED81000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE3AEE000
unkown
page read and write
clean
1C641010000
unkown
page read and write
clean
7FF55A06C000
unkown
page readonly
clean
2C06AF60000
heap private
page read and write
clean
7FF55A04F000
unkown
page readonly
clean
7FF53DE0C000
unkown
page readonly
clean
23E5000
unkown
page readonly
clean
7FF559D4A000
unkown
page readonly
clean
1EBE3A54000
unkown
page read and write
clean
1EBE433E000
unkown
page read and write
clean
94F3B7A000
unkown
page read and write
clean
2D5E000
unkown
page read and write
clean
7FF597EAA000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF543555000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF597EC8000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C63E841000
unkown
page read and write
clean
1C63E881000
unkown
page read and write
clean
7FF5AFFCA000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF59EF8F000
unkown
page readonly
clean
1EBE3A00000
unkown
page read and write
clean
91A637E000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1C640C42000
unkown
page read and write
clean
2755000
unkown
page readonly
clean
4A46279000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF598A6D000
unkown
page readonly
clean
278C000
unkown
page read and write
clean
7FF55A0CA000
unkown
page readonly
clean
1C570E55000
unkown
page read and write
clean
7FF55A171000
unkown
page readonly
clean
1A15B102000
unkown
page read and write
clean
1EBE38E0000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1C63E7B0000
heap default
page read and write
clean
3EBF000
unkown
page read and write
clean
2757000
unkown
page readonly
clean
1B6C35E000
unkown
page read and write
clean
1C63E8D1000
unkown
page read and write
clean
1272000
heap default
page read and write
clean
1040000
unkown
page read and write
clean
1EBE4385000
unkown
page read and write
clean
2D14000
unkown
page read and write
clean
2C27000
unkown
page read and write
clean
1EBE438A000
unkown
page read and write
clean
7FF5D4568000
unkown
page readonly
clean
299C000
unkown
page read and write
clean
7FF59EFD9000
unkown
page readonly
clean
7FF596A99000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
19616240000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
30B03FA000
unkown
page read and write
clean
7FF54BE25000
unkown
page readonly
clean
7FF5988A0000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF54BCCA000
unkown
page readonly
clean
7FF594304000
unkown
page readonly
clean
7FF596879000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
3968000
heap private
page read and write
clean
45C0000
unkown
page read and write
clean
1C63E913000
unkown
page read and write
clean
7FF594273000
unkown
page readonly
clean
29A0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1263000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF59EF5E000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF543767000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF55317F000
unkown
page readonly
clean
2749000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
94F3AFE000
unkown
page read and write
clean
19615EF0000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
10001000
unkown image
page execute and read and write
clean
1C63E8C9000
unkown
page read and write
clean
2703000
unkown
page readonly
clean
2DA0000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
1EBE439B000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5942FA000
unkown
page readonly
clean
30B06FA000
unkown
page read and write
clean
7FF55A16A000
unkown
page readonly
clean
1C640B83000
unkown
page read and write
clean
47C1000
unkown
page execute read
clean
49C0000
unkown
page read and write
clean
7FF53DE5D000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1EBE4802000
unkown
page read and write
clean
1C640B43000
unkown
page read and write
clean
7FF5D4500000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF598B96000
unkown
page readonly
clean
7FF5598DD000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5A11A2000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
18978200000
unkown
page read and write
clean
91A63FB000
unkown
page read and write
clean
1EBE3A4E000
unkown
page read and write
clean
1D6D8A54000
unkown
page read and write
clean
7FF5436CC000
unkown
page readonly
clean
7FF54C076000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
2CFDE870000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54B85D000
unkown
page readonly
clean
7FF552FC3000
unkown
page readonly
clean
7FF598B9D000
unkown
page readonly
clean
20B15855000
unkown
page read and write
clean
1C640A00000
unkown
page read and write
clean
7FF5A0E27000
unkown
page readonly
clean
24B2000
unkown
page readonly
clean
1A15B013000
unkown
page read and write
clean
7FF5A10DC000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5AFEE0000
unkown
page readonly
clean
7FF593F7F000
unkown
page readonly
clean
1EBE3AD1000
unkown
page read and write
clean
7FF559E46000
unkown
page readonly
clean
7FF594326000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5A0EE6000
unkown
page readonly
clean
7FF552CF5000
unkown
page readonly
clean
7FF553073000
unkown
page readonly
clean
1C6409E1000
unkown
page read and write
clean
18978202000
unkown
page read and write
clean
4A45F6E000
unkown
page read and write
clean
7FF594318000
unkown
page readonly
clean
1C640908000
unkown
page read and write
clean
30AB000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
45D0000
heap private
page read and write
clean
7FF598B2B000
unkown
page readonly
clean
1C641410000
unkown
page read and write
clean
7FF5D45F1000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
1A15BA00000
unkown
page readonly
clean
D61018A000
unkown
page read and write
clean
7FF5AFDC1000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF59EC1C000
unkown
page readonly
clean
7FF5942DC000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF55A06A000
unkown
page readonly
clean
7FF5AFF56000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
479047F000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
20B15869000
unkown
page read and write
clean
1C63EB20000
unkown
page readonly
clean
2B15000
heap default
page read and write
clean
1F031E13000
unkown
page read and write
clean
7FF5D456E000
unkown
page readonly
clean
1EBE435B000
unkown
page read and write
clean
7FF596923000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54BE21000
unkown
page readonly
clean
242F000
unkown
page readonly
clean
7FF596A8E000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C641210000
unkown
page read and write
clean
7FF596A9D000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF55A0AF000
unkown
page readonly
clean
7FF5A0EB0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
16C84C02000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF5AFCA6000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1EBE40F0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
7FF5A0A03000
unkown
page readonly
clean
7FF5D3D5D000
unkown
page readonly
clean
7FF5977B7000
unkown
page readonly
clean
3570000
heap private
page read and write
clean
1EBE4A00000
unkown
page readonly
clean
1EBE439B000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2491000
unkown
page readonly
clean
7FF59406B000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
1C640720000
heap private
page read and write
clean
3EF81DB000
unkown
page read and write
clean
1EBE4300000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
2C06B013000
unkown
page read and write
clean
2CFDE955000
heap private
page read and write
clean
18978256000
unkown
page read and write
clean
7FF54C068000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF596A96000
unkown
page readonly
clean
1C641000000
unkown
page read and write
clean
4D8F000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5434F6000
unkown
page readonly
clean
302A000
unkown
page read and write
clean
F70000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF59EF6B000
unkown
page readonly
clean
2417000
unkown
page readonly
clean
AAF077000
unkown
page read and write
clean
20B15680000
unkown
page readonly
clean
1EBE4342000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
1C641110000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
91A64FF000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
2D12000
unkown
page read and write
clean
180E3040000
unkown
page read and write
clean
1C64091F000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF598B8E000
unkown
page readonly
clean
7FF5977B3000
unkown
page readonly
clean
7FF53DE4E000
unkown
page readonly
clean
7FF5AF741000
unkown
page readonly
clean
180E1313000
unkown
page read and write
clean
10005000
unkown image
page execute and read and write
clean
7FF59691B000
unkown
page readonly
clean
7FF5AFF34000
unkown
page readonly
clean
8E6CDFB000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF597EBE000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5A10AE000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5A1194000
unkown
page readonly
clean
7FF5D452F000
unkown
page readonly
clean
96D34FE000
unkown
page read and write
clean
7FF5A0FFD000
unkown
page readonly
clean
7FF5A0FAE000
unkown
page readonly
clean
18978229000
unkown
page read and write
clean
30B017B000
unkown
page read and write
clean
D6104FF000
unkown
page read and write
clean
1B3D9FF000
unkown
page read and write
clean
1C641510000
unkown
page read and write
clean
7FF54C0E4000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5966EA000
unkown
page readonly
clean
1C640A81000
unkown
page read and write
clean
CDC897E000
unkown
page read and write
clean
7FF543814000
unkown
page readonly
clean
1C640E00000
unkown
page readonly
clean
7FF55A0AC000
unkown
page readonly
clean
22DC000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
3033000
unkown
page read and write
clean
2CFDE9AF000
unkown
page read and write
clean
1EBE3B02000
unkown
page read and write
clean
1EBE434C000
unkown
page read and write
clean
7FF5D4408000
unkown
page readonly
clean
96D347C000
unkown
page read and write
clean
20B15869000
unkown
page read and write
clean
1EBE3AAF000
unkown
page read and write
clean
7FF5A0E76000
unkown
page readonly
clean
7FF55314F000
unkown
page readonly
clean
30B00F9000
unkown
page read and write
clean
47CF000
unkown
page readonly
clean
7FF5A0F5A000
unkown
page readonly
clean
1EBE435B000
unkown
page read and write
clean
FD0000
heap default
page read and write
clean
1C641210000
unkown
page read and write
clean
7FF594191000
unkown
page readonly
clean
7FF59EFD1000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C570D20000
heap private
page read and write
clean
1EBE435F000
unkown
page read and write
clean
7FF5966EF000
unkown
page readonly
clean
1C63E95F000
unkown
page read and write
clean
1EBE433C000
unkown
page read and write
clean
7FF596A25000
unkown
page readonly
clean
7FF559D4F000
unkown
page readonly
clean
7FF559ED1000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
4A4637F000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF53DE2A000
unkown
page readonly
clean
7FF598B4F000
unkown
page readonly
clean
91A6579000
unkown
page read and write
clean
19614600000
unkown
page write copy
clean
1040000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF553199000
unkown
page readonly
clean
7FF598B25000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF5AFDE8000
unkown
page readonly
clean
91A667F000
unkown
page read and write
clean
189784D0000
unkown
page write copy
clean
7FF598C11000
unkown
page readonly
clean
7FF53DE0F000
unkown
page readonly
clean
1C640780000
unkown
page read and write
clean
7FF5941AB000
unkown
page readonly
clean
20B1586D000
unkown
page read and write
clean
7FF559EA5000
unkown
page readonly
clean
2CFDE981000
unkown
page read and write
clean
7FF55A172000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
91A66FD000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1C6409B7000
unkown
page read and write
clean
1C63E872000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5A10E7000
unkown
page readonly
clean
16C84461000
unkown
page read and write
clean
7FF54BFFE000
unkown
page readonly
clean
20B157A0000
unkown
page readonly
clean
7FF59EFD6000
unkown
page readonly
clean
20B15750000
unkown
page write copy
clean
1C570E50000
unkown
page read and write
clean
1C570F13000
unkown
page read and write
clean
7FF5A0C12000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1A15B070000
unkown
page read and write
clean
1EBE4355000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
19616564000
unkown
page read and write
clean
2D24000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF54C02F000
unkown
page readonly
clean
2B00000
unkown
page read and write
clean
1B6C87F000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
32C0000
heap private
page read and write
clean
23CC000
unkown
page readonly
clean
7FF597E6B000
unkown
page readonly
clean
94F37EB000
unkown
page read and write
clean
7FF53DCDE000
unkown
page readonly
clean
1EBE3AD4000
unkown
page read and write
clean
7FF59EF23000
unkown
page readonly
clean
1A15B056000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
18978150000
heap private
page read and write
clean
18978400000
unkown
page readonly
clean
196162B0000
unkown
page read and write
clean
7FF5942BB000
unkown
page readonly
clean
7FF55A080000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
23C3000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
20B15A00000
unkown
page readonly
clean
7FF5942B0000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
180E2CF0000
unkown
page readonly
clean
20B15869000
unkown
page read and write
clean
7FF54BFC3000
unkown
page readonly
clean
7FF54C044000
unkown
page readonly
clean
8E6CEF7000
unkown
page read and write
clean
7FF54BFFA000
unkown
page readonly
clean
1C570E00000
unkown
page read and write
clean
7FF55A020000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1A15AFE0000
unkown
page read and write
clean
19614488000
unkown
page read and write
clean
1A15B03C000
unkown
page read and write
clean
1C640906000
unkown
page read and write
clean
276F000
unkown
page readonly
clean
1C6409E2000
unkown
page read and write
clean
2C06B100000
unkown
page read and write
clean
1EBE40F0000
unkown
page read and write
clean
2FA0000
heap private
page read and write
clean
7FF54BEFB000
unkown
page readonly
clean
7FF5D44A2000
unkown
page readonly
clean
1C640B43000
unkown
page read and write
clean
1C640936000
unkown
page read and write
clean
7FF5A0F53000
unkown
page readonly
clean
1EBE437B000
unkown
page read and write
clean
7FF5AFF0F000
unkown
page readonly
clean
2415000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1C640988000
unkown
page read and write
clean
2446000
unkown
page readonly
clean
2F50000
unkown
page read and write
clean
1C641310000
unkown
page read and write
clean
7FF55A0DE000
unkown
page readonly
clean
1C640710000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
2BA0000
heap private
page read and write
clean
7FF594109000
unkown
page readonly
clean
1C641110000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5942DF000
unkown
page readonly
clean
F3A000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
16C84466000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
2C06B102000
unkown
page read and write
clean
2FE0000
unkown
page readonly
clean
7FF5AFF24000
unkown
page readonly
clean
7FF54C02C000
unkown
page readonly
clean
2BB0000
unkown
page read and write
clean
19614400000
unkown
page read and write
clean
1EBE433F000
unkown
page read and write
clean
2B70000
unkown
page read and write
clean
19614514000
unkown
page read and write
clean
2423000
unkown
page readonly
clean
7FF53DCC1000
unkown
page readonly
clean
1C640A32000
unkown
page read and write
clean
7FF594329000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE439B000
unkown
page read and write
clean
7FF5969C2000
unkown
page readonly
clean
7FF55308C000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54C07D000
unkown
page readonly
clean
3130000
unkown
page readonly
clean
1C641210000
unkown
page read and write
clean
1EBE434B000
unkown
page read and write
clean
7FF53D9A6000
unkown
page readonly
clean
1D6D8920000
unkown
page write copy
clean
1040000
unkown
page read and write
clean
7FF596845000
unkown
page readonly
clean
2495000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1EBE40F0000
unkown
page read and write
clean
7FF55283B000
unkown
page readonly
clean
96D39FF000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2C06B200000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
8E6CC75000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
CDC89FF000
unkown
page read and write
clean
2E00000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
16C8448A000
unkown
page read and write
clean
1A15AF50000
heap private
page read and write
clean
1F033D40000
unkown
page read and write
clean
1EBE439B000
unkown
page read and write
clean
7FF596A4C000
unkown
page readonly
clean
20B15869000
unkown
page read and write
clean
7FF559C59000
unkown
page readonly
clean
7FF53DD4C000
unkown
page readonly
clean
24C3000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
493D000
unkown
page execute and read and write
clean
1EBE437A000
unkown
page read and write
clean
1C571800000
unkown
page readonly
clean
7FF54381A000
unkown
page readonly
clean
7FF59EE63000
unkown
page readonly
clean
7FF5AFEF7000
unkown
page readonly
clean
19616600000
unkown
page readonly
clean
7FF54372A000
unkown
page readonly
clean
1D6DA4A0000
unkown
page readonly
clean
7FF5AFF59000
unkown
page readonly
clean
7FF597F51000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5A0A07000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
8E6D0FF000
unkown
page read and write
clean
180E1450000
unkown
page readonly
clean
19616230000
unkown
page read and write
clean
2771000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF552F71000
unkown
page readonly
clean
1C570E87000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE437A000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE43B0000
unkown
page read and write
clean
7FF5969E3000
unkown
page readonly
clean
7FF53DDDE000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF59439A000
unkown
page readonly
clean
11ED000
unkown
page read and write
clean
19614516000
unkown
page read and write
clean
7FF55A097000
unkown
page readonly
clean
7FF559F7B000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
1C63E92D000
unkown
page read and write
clean
7FF5AFF4E000
unkown
page readonly
clean
2F4E000
unkown
page read and write
clean
1C63E8D6000
unkown
page read and write
clean
7FF5A0C85000
unkown
page readonly
clean
7FF597E65000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
196162E0000
unkown
page readonly
clean
7FF5433EC000
unkown
page readonly
clean
7FF5AFD39000
unkown
page readonly
clean
30AF91B000
unkown
page read and write
clean
20B15869000
unkown
page read and write
clean
7FF5A0C76000
unkown
page readonly
clean
7FF596A7E000
unkown
page readonly
clean
1C6409B1000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1C63E813000
unkown
page read and write
clean
30E0000
heap private
page read and write
clean
1EBE3AE6000
unkown
page read and write
clean
7FF5AFEE5000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5942AE000
unkown
page readonly
clean
2CFDE996000
unkown
page read and write
clean
2C06B04A000
unkown
page read and write
clean
1C6403C0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5AFBAA000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
2C06CAC0000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
2782000
unkown
page readonly
clean
3EF897E000
unkown
page read and write
clean
1EBE437A000
unkown
page read and write
clean
19616533000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF553001000
unkown
page readonly
clean
1C640986000
unkown
page read and write
clean
2CCC000
unkown
page read and write
clean
7FF55301E000
unkown
page readonly
clean
AAF27F000
unkown
page read and write
clean
7FF559EB4000
unkown
page readonly
clean
2B90000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF53DECA000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
180E10F0000
heap default
page read and write
clean
7FF543633000
unkown
page readonly
clean
4CCE000
unkown
page read and write
clean
7FF5A0CC5000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
1EBE3AA5000
unkown
page read and write
clean
7FF5941B3000
unkown
page readonly
clean
189781B0000
heap default
page read and write
clean
45C0000
unkown
page read and write
clean
7FF53DED1000
unkown
page readonly
clean
1EBE4350000
unkown
page read and write
clean
2C06B06C000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
5210000
unkown
page readonly
clean
1EBE4800000
unkown
page read and write
clean
3968000
heap private
page read and write
clean
AAEC7D000
unkown
page read and write
clean
23A3000
unkown
page readonly
clean
1C640780000
unkown
page read and write
clean
1880000
unkown
page readonly
clean
1C64090B000
unkown
page read and write
clean
1C63E7C0000
unkown
page readonly
clean
2C06AFD0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF59EC37000
unkown
page readonly
clean
7FF53DDF7000
unkown
page readonly
clean
2C06B113000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
6A20000
unkown
page read and write
clean
1C641110000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF55A0E8000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF53DE24000
unkown
page readonly
clean
1EBE4100000
unkown
page read and write
clean
1EBE3B13000
unkown
page read and write
clean
16C84402000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
3EF84FE000
unkown
page read and write
clean
2C06B06E000
unkown
page read and write
clean
2803000
unkown
page readonly
clean
1C570F02000
unkown
page read and write
clean
20B15802000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
2CFDEA70000
unkown
page readonly
clean
7FF5D43FB000
unkown
page readonly
clean
7FF5D41CA000
unkown
page readonly
clean
1C63E8F6000
unkown
page read and write
clean
47C0000
unkown
page read and write
clean
1EBE3AA4000
unkown
page read and write
clean
7FF53DB57000
unkown
page readonly
clean
5179000
heap private
page read and write
clean
32B0000
unkown
page read and write
clean
2B0A000
stack
page read and write
clean
C40000
unkown
page read and write
clean
1C6409AF000
unkown
page read and write
clean
1EBE437A000
unkown
page read and write
clean
1A15B088000
unkown
page read and write
clean
20B15670000
heap default
page read and write
clean
2786000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
196162B0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
CDC85DE000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
16C84513000
unkown
page read and write
clean
3032000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
94F3CFF000
unkown
page read and write
clean
7FF559D3C000
unkown
page readonly
clean
2CFDE950000
heap private
page read and write
clean
49C0000
unkown
page read and write
clean
7FF59ED26000
unkown
page readonly
clean
275F000
unkown
page readonly
clean
1C640802000
unkown
page read and write
clean
7FF5D42BB000
unkown
page readonly
clean
7FF559E3B000
unkown
page readonly
clean
D6106FA000
unkown
page read and write
clean
459D000
unkown
page execute and read and write
clean
7FF5D4538000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
D610579000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF542F91000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5A0C1E000
unkown
page readonly
clean
20B172A0000
unkown
page readonly
clean
7FF5433FF000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1262000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
91A6779000
unkown
page read and write
clean
3032000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1C641210000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4802000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5A0FB3000
unkown
page readonly
clean
1F0339E0000
unkown
page readonly
clean
1EBE4369000
unkown
page read and write
clean
7FF5940D1000
unkown
page readonly
clean
19614413000
unkown
page read and write
clean
180E1229000
unkown
page read and write
clean
96D38F7000
unkown
page read and write
clean
1C63E800000
unkown
page read and write
clean
7FF598B0C000
unkown
page readonly
clean
18978302000
unkown
page read and write
clean
16C84452000
unkown
page read and write
clean
1C640928000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45B0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF552CE6000
unkown
page readonly
clean
7FF543564000
unkown
page readonly
clean
1C641210000
unkown
page read and write
clean
2CFDE890000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF597E8C000
unkown
page readonly
clean
7FF5AFFD1000
unkown
page readonly
clean
7FF5A1084000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF5A0FB8000
unkown
page readonly
clean
244B000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5D4571000
unkown
page readonly
clean
477C000
unkown
page read and write
clean
1C640C82000
unkown
page read and write
clean
1EBE4385000
unkown
page read and write
clean
7FF594394000
unkown
page readonly
clean
1A15B047000
unkown
page read and write
clean
1F031E29000
unkown
page read and write
clean
1EBE3AD4000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2A30000
unkown
page readonly
clean
30AFFFB000
unkown
page read and write
clean
7FF543581000
unkown
page readonly
clean
1EBE3ABF000
unkown
page read and write
clean
30AFC7E000
unkown
page read and write
clean
1EBE435C000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4388000
unkown
page read and write
clean
7FF553204000
unkown
page readonly
clean
16C84413000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4355000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
96D357D000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1C63E750000
heap private
page read and write
clean
7FF553137000
unkown
page readonly
clean
1EBE39D0000
unkown
page read and write
clean
7FF59ED85000
unkown
page readonly
clean
7FF598B1A000
unkown
page readonly
clean
7FF5436D0000
unkown
page readonly
clean
1EBE3AD3000
unkown
page read and write
clean
4A45EEB000
unkown
page read and write
clean
1B3D5FE000
unkown
page read and write
clean
49BF000
stack
page read and write
clean
7FF543508000
unkown
page readonly
clean
27CA000
unkown
page read and write
clean
27F8000
unkown
page readonly
clean
7FF59F051000
unkown
page readonly
clean
1C640C02000
unkown
page read and write
clean
1C641410000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF543798000
unkown
page readonly
clean
1B3D8FA000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
66A0000
unkown
page readonly
clean
7FF55A054000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF5D44A0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF553157000
unkown
page readonly
clean
2C06B029000
unkown
page read and write
clean
7FF5AFF48000
unkown
page readonly
clean
2400000
unkown
page readonly
clean
1EBE4352000
unkown
page read and write
clean
19616502000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
CDC88F9000
unkown
page read and write
clean
180E11D0000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF55306D000
unkown
page readonly
clean
7FF5AFF0C000
unkown
page readonly
clean
1C6409D8000
unkown
page read and write
clean
7FF5D4554000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
8E6CB7E000
unkown
page read and write
clean
7FF596B0A000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF596281000
unkown
page readonly
clean
1C6409E1000
unkown
page read and write
clean
16C8445E000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
47902F9000
unkown
page read and write
clean
7FF5AFFD2000
unkown
page readonly
clean
302E000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4389000
unkown
page read and write
clean
7FF5986E0000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1C640780000
unkown
page readonly
clean
7FF598B74000
unkown
page readonly
clean
96D3B7E000
unkown
page read and write
clean
7FF597ECE000
unkown
page readonly
clean
1C640D00000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
19617010000
unkown
page read and write
clean
7FF5A1104000
unkown
page readonly
clean
1C570F00000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1C640928000
unkown
page read and write
clean
CDC84DB000
unkown
page read and write
clean
241F000
unkown
page readonly
clean
2C06B06C000
unkown
page read and write
clean
1C640A25000
unkown
page read and write
clean
1C63E93E000
unkown
page read and write
clean
7FF598B37000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
16C84600000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
30B02FB000
unkown
page read and write
clean
1EBE3A57000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF54BDBB000
unkown
page readonly
clean
196162C0000
unkown
page readonly
clean
7FF5A10FA000
unkown
page readonly
clean
1961651D000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1EBE434D000
unkown
page read and write
clean
7FF598B57000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
196144E5000
unkown
page read and write
clean
1EBE3AD4000
unkown
page read and write
clean
7FF59EDB9000
unkown
page readonly
clean
1C63E893000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
3EF85F5000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
20B15813000
unkown
page read and write
clean
7FF559EA1000
unkown
page readonly
clean
2FF4000
heap private
page read and write
clean
45C0000
unkown
page read and write
clean
7FF59EF77000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
497E000
unkown
page read and write
clean
7FF5433FA000
unkown
page readonly
clean
1C640700000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF5D41CF000
unkown
page readonly
clean
4B79000
heap private
page read and write
clean
45C0000
unkown
page read and write
clean
18978213000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
273C000
unkown
page readonly
clean
24C3000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
2431000
unkown
page readonly
clean
1EBE4388000
unkown
page read and write
clean
1272000
unkown
page read and write
clean
4540000
unkown
page execute and read and write
clean
7FF59EE5B000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1D6D87E0000
heap private
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5D4579000
unkown
page readonly
clean
7FF59EFC8000
unkown
page readonly
clean
2200000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE439B000
unkown
page read and write
clean
2D70000
heap private
page read and write
clean
1A15B000000
unkown
page read and write
clean
1262000
unkown
page read and write
clean
7FF59EF00000
unkown
page readonly
clean
7FF59EF65000
unkown
page readonly
clean
7FF543309000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1C63E99F000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF594250000
unkown
page readonly
clean
1EBE435F000
unkown
page read and write
clean
7FF5A0F91000
unkown
page readonly
clean
7FF53D4FB000
unkown
page readonly
clean
1C570E4B000
unkown
page read and write
clean
7FF5943A1000
unkown
page readonly
clean
1F031E57000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
30B05FB000
unkown
page read and write
clean
1C640A77000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4366000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54C05E000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
180E1400000
unkown
page write copy
clean
1EBE3A70000
unkown
page read and write
clean
7FF5AFF2A000
unkown
page readonly
clean
7FF553212000
unkown
page readonly
clean
7FF5A1052000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
30B057B000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF54C071000
unkown
page readonly
clean
1EBE4392000
unkown
page read and write
clean
2C06B000000
unkown
page read and write
clean
1C640B43000
unkown
page read and write
clean
7FF598971000
unkown
page readonly
clean
7FF54378E000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF59E7BD000
unkown
page readonly
clean
7FF55311E000
unkown
page readonly
clean
18979CC0000
unkown
page read and write
clean
20B15869000
unkown
page read and write
clean
4A463FF000
unkown
page read and write
clean
7FF5AFDE3000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF59ED1B000
unkown
page readonly
clean
2733000
unkown
page readonly
clean
1EBE3A88000
unkown
page read and write
clean
7FF5A0EF1000
unkown
page readonly
clean
7FF55310A000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1C63E829000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
18978240000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE3A4C000
unkown
page read and write
clean
49F0000
heap private
page read and write
clean
7FF5D3D61000
unkown
page readonly
clean
7FF559FC6000
unkown
page readonly
clean
23BD000
unkown
page readonly
clean
2CFDE995000
unkown
page read and write
clean
2C90000
unkown
page read and write
clean
7FF5AFF3E000
unkown
page readonly
clean
30B077C000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1A15AFD0000
unkown
page readonly
clean
1C64098D000
unkown
page read and write
clean
1EBE437B000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF5D4576000
unkown
page readonly
clean
7FF559E58000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
3FBF000
unkown
page read and write
clean
4D0F000
unkown
page read and write
clean
2C06B056000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF55A0D4000
unkown
page readonly
clean
1D6D8840000
heap default
page read and write
clean
1A15BD40000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5437A6000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF55A08B000
unkown
page readonly
clean
32A0000
unkown
page read and write
clean
7FF543747000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1D6D8A34000
unkown
page read and write
clean
7FF598B64000
unkown
page readonly
clean
7FF59432D000
unkown
page readonly
clean
91A67FF000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF543774000
unkown
page readonly
clean
30B027B000
unkown
page read and write
clean
2CFDE99E000
unkown
page read and write
clean
303B000
unkown
page read and write
clean
7FF54BFA2000
unkown
page readonly
clean
7FF596B04000
unkown
page readonly
clean
7FF59F044000
unkown
page readonly
clean
7FF54C038000
unkown
page readonly
clean
7FF54B861000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1EBE4345000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5D457D000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
2CFDE8C0000
unkown
page readonly
clean
302A000
unkown
page read and write
clean
19614456000
unkown
page read and write
clean
30B067D000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5A11A1000
unkown
page readonly
clean
1EBE3A29000
unkown
page read and write
clean
30B007B000
unkown
page read and write
clean
4DCE000
unkown
page read and write
clean
1B6C6FA000
unkown
page read and write
clean
180E123F000
unkown
page read and write
clean
C44000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF53D9A0000
unkown
page readonly
clean
16C84390000
unkown
page readonly
clean
1EBE4336000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
1EBE4389000
unkown
page read and write
clean
1EBE3A51000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF596A4F000
unkown
page readonly
clean
4730000
heap private
page read and write
clean
180E1302000
unkown
page read and write
clean
23DD000
unkown
page readonly
clean
7FF59430E000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF5D44C3000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
465E000
unkown
page read and write
clean
16C84508000
unkown
page read and write
clean
196144BF000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
2593000
unkown
page readonly
clean
1EBE4080000
unkown
page write copy
clean
1C570E4D000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
2C06B06A000
unkown
page read and write
clean
7FF54C000000
unkown
page readonly
clean
30B047B000
unkown
page read and write
clean
7FF5D452C000
unkown
page readonly
clean
7FF598A1B000
unkown
page readonly
clean
2B90000
unkown
page readonly
clean
7FF5942C7000
unkown
page readonly
clean
19614479000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF597E8F000
unkown
page readonly
clean
1B6C2DB000
unkown
page read and write
clean
1C641110000
unkown
page read and write
clean
180E1090000
heap private
page read and write
clean
19614650000
unkown
page readonly
clean
7FF5A107B000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
32CA000
heap private
page read and write
clean
2763000
unkown
page readonly
clean
22EB000
unkown
page readonly
clean
1C641610000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF5A1014000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF54C0EA000
unkown
page readonly
clean
1EBE4369000
unkown
page read and write
clean
7FF5A108F000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF54367D000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
180E1100000
unkown
page readonly
clean
7FF596A2B000
unkown
page readonly
clean
1D6D8C00000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF59EFAA000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
2442000
unkown
page readonly
clean
1EBE439B000
unkown
page read and write
clean
27E4000
unkown
page readonly
clean
E3C000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF53DDCC000
unkown
page readonly
clean
30B037F000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1EBE4358000
unkown
page read and write
clean
7FF54370F000
unkown
page readonly
clean
1EBE4385000
unkown
page read and write
clean
7FF55310C000
unkown
page readonly
clean
7FF543031000
unkown
page readonly
clean
7FF559EB6000
unkown
page readonly
clean
1C640A36000
unkown
page read and write
clean
7FF596B11000
unkown
page readonly
clean
7FF5942F4000
unkown
page readonly
clean
1EBE43B7000
unkown
page read and write
clean
4A462FA000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF5A0C70000
unkown
page readonly
clean
7FF5AFEDE000
unkown
page readonly
clean
396A000
heap private
page read and write
clean
1C640900000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF55A0C4000
unkown
page readonly
clean
AAEEFB000
unkown
page read and write
clean
7FF597EDD000
unkown
page readonly
clean
2D27000
heap default
page read and write
clean
7FF53DE56000
unkown
page readonly
clean
7FF5AFEA3000
unkown
page readonly
clean
D61067E000
unkown
page read and write
clean
7FF5AFBAF000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF59EF60000
unkown
page readonly
clean
1EBE4357000
unkown
page read and write
clean
1EBE3B08000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF54BE59000
unkown
page readonly
clean
7FF55A04B000
unkown
page readonly
clean
7FF598C0A000
unkown
page readonly
clean
7FF597E60000
unkown
page readonly
clean
7FF53DD33000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5A0CC7000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF598B88000
unkown
page readonly
clean
7FF598C12000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1B3D87E000
unkown
page read and write
clean
7FF5AFE80000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
7FF5A10BB000
unkown
page readonly
clean
7FF596A58000
unkown
page readonly
clean
7FF553188000
unkown
page readonly
clean
51F8000
heap private
page read and write
clean
1EBE4110000
unkown
page readonly
clean
7FF5A110F000
unkown
page readonly
clean
7FF5A0C22000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF5943A2000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
461D000
unkown
page read and write
clean
51F8000
heap private
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE439B000
unkown
page read and write
clean
16C8445A000
unkown
page read and write
clean
7FF594076000
unkown
page readonly
clean
7FF5D44FE000
unkown
page readonly
clean
1C640986000
unkown
page read and write
clean
20B15869000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1C63E8C5000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
7FF553084000
unkown
page readonly
clean
1EBE4358000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE4369000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
8E6CAFE000
unkown
page read and write
clean
1EBE4366000
unkown
page read and write
clean
7FF55A05F000
unkown
page readonly
clean
1B3D57B000
unkown
page read and write
clean
1EBE39F0000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
2BF0000
unkown
page readonly
clean
4A00000
heap private
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF5966F7000
unkown
page readonly
clean
7FF54BCCF000
unkown
page readonly
clean
30B04FC000
unkown
page read and write
clean
1C570E24000
unkown
page read and write
clean
30B01FB000
unkown
page read and write
clean
7FF5942AA000
unkown
page readonly
clean
7FF598A01000
unkown
page readonly
clean
48F8000
unkown
page execute and read and write
clean
7FF54371A000
unkown
page readonly
clean
7FF598B1E000
unkown
page readonly
clean
47903FE000
unkown
page read and write
clean
7FF559FCD000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF5598E1000
unkown
page readonly
clean
2CEE000
unkown
page read and write
clean
3032000
unkown
page read and write
clean
7FF597E98000
unkown
page readonly
clean
7FF5D455E000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
1F0338E0000
unkown
page read and write
clean
262B000
unkown
page readonly
clean
96D3C7A000
unkown
page read and write
clean
1D6D8A00000
unkown
page read and write
clean
1EBE3A56000
unkown
page read and write
clean
7FF5A10F4000
unkown
page readonly
clean
1C571000000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
1EBE39C0000
unkown
page readonly
clean
7FF597780000
unkown
page readonly
clean
1C63E91D000
unkown
page read and write
clean
2F0F000
stack
page read and write
clean
1EBE4379000
unkown
page read and write
clean
1C640926000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
18979DC0000
unkown
page readonly
clean
1040000
unkown
page read and write
clean
7FF5A10B5000
unkown
page readonly
clean
CDC887A000
unkown
page read and write
clean
7FF5966DC000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1EBE3A4F000
unkown
page read and write
clean
7FF53DEC4000
unkown
page readonly
clean
45C0000
unkown
page read and write
clean
7FF5A101C000
unkown
page readonly
clean
2D24000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
1EBE3AFD000
unkown
page read and write
clean
1D6DA3A0000
unkown
page read and write
clean
1D6D8A29000
unkown
page read and write
clean
1A15B200000
unkown
page readonly
clean
478FFCE000
unkown
page read and write
clean
1F032320000
unkown
page readonly
clean
1EBE439C000
unkown
page read and write
clean
49C0000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
7FF55A0F6000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
7FF598B4C000
unkown
page readonly
clean
1C63E8BC000
unkown
page read and write
clean
1B3DA7E000
unkown
page read and write
clean
1C6402C0000
unkown
page read and write
clean
7FF59431E000
unkown
page readonly
clean
7FF53DC83000
unkown
page readonly
clean
49C0000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
45C0000
unkown
page read and write
clean
1C6407A0000
unkown
page readonly
clean
There are 2057 hidden memdumps, click here to show them.