IOCReport

loading gif

Files

File Path
Type
Category
Malicious
b8fe43e6_by_Libranalysis.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_rundll32.exe_1d91dafffd792f9b512ff42d10d3dd5f24a3f5de_82810a17_14ccacb0\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_rundll32.exe_1d91dafffd792f9b512ff42d10d3dd5f24a3f5de_82810a17_15960134\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_rundll32.exe_70ca6d92bb7cd6d05a398077544511f8e964d76_82810a17_101203e3\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_rundll32.exe_b66299609d435dc6d436af20ef404ad1f7dd29c2_82810a17_13f60d1b\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_rundll32.exe_fd713208f5835c7ef2b9edc915523e535d24f6_82810a17_06420ae8\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_97ddcb6e334012c795b269b0febf6434961ab49_160cf2be_07f693b0\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_a6e5673309e41777fbcceb355472075a2d98e3b_82810a17_16e8b22e\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3A6.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER4AF.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER53D.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D9.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9093.tmp.dmp
Mini DuMP crash report, 15 streams, Wed May 5 04:50:14 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER92B7.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9383.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9475.tmp.dmp
Mini DuMP crash report, 14 streams, Wed May 5 04:48:05 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER99F4.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9B0E.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERAC14.tmp.dmp
Mini DuMP crash report, 15 streams, Wed May 5 04:48:11 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB0C8.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB201.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERDE0C.tmp.dmp
Mini DuMP crash report, 14 streams, Wed May 5 04:49:35 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE918.tmp.dmp
Mini DuMP crash report, 14 streams, Wed May 5 04:49:36 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFA01.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFB98.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFD3D.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFD9A.tmp.dmp
Mini DuMP crash report, 14 streams, Wed May 5 04:49:38 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE07.tmp.dmp
Mini DuMP crash report, 14 streams, Wed May 5 04:49:38 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFE38.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_rundll32.exe_d09d9774ec98621253c28ca1027c73a9bab30_82810a17_1a23c1a4\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_a6e5673309e41777fbcceb355472075a2d98e3b_82810a17_1abfbf81\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER6A0E.tmp.dmp
Mini DuMP crash report, 15 streams, Wed May 5 04:35:33 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERA92F.tmp.dmp
Mini DuMP crash report, 14 streams, Wed May 5 04:34:24 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERA96A.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERADD3.tmp.dmp
Mini DuMP crash report, 15 streams, Wed May 5 04:35:23 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB1FA.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB86F.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB8A2.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC232.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC89B.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
There are 30 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll'
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll,LoxmtYt
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll',#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll',DllCanUnloadNow
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll',DllGetClassObject
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll',WdiAddFileToInstance
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll',WdiAddParameter
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll',WdiCancel
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\b8fe43e6_by_Libranalysis.dll',#1
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4308 -s 760
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 928
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 756
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5984 -s 756
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5408 -s 756
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4868 -s 756
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3440 -s 592
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5544 -s 752
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5512 -s 892
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 5604 -s 608
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6976 -s 756
clean
There are 10 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://crl.micro
unknown
clean
http://crl.micr
unknown
clean

IPs

IP
Domain
Country
Malicious
167.114.113.13
unknown
Canada
malicious
95.138.161.226
unknown
United Kingdom
malicious
193.200.130.181
unknown
unknown
malicious
192.168.2.1
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Windows\SysWOW64\WerFault.exe
AmiHivePermissionsCorrect
clean
C:\Windows\SysWOW64\WerFault.exe
AmiHiveOwnerCorrect
clean
C:\Windows\SysWOW64\WerFault.exe
ProgramId
clean
C:\Windows\SysWOW64\WerFault.exe
FileId
clean
C:\Windows\SysWOW64\WerFault.exe
LowerCaseLongPath
clean
C:\Windows\SysWOW64\WerFault.exe
LongPathHash
clean
C:\Windows\SysWOW64\WerFault.exe
Name
clean
C:\Windows\SysWOW64\WerFault.exe
Publisher
clean
C:\Windows\SysWOW64\WerFault.exe
Version
clean
C:\Windows\SysWOW64\WerFault.exe
BinFileVersion
clean
C:\Windows\SysWOW64\WerFault.exe
BinaryType
clean
C:\Windows\SysWOW64\WerFault.exe
ProductName
clean
C:\Windows\SysWOW64\WerFault.exe
ProductVersion
clean
C:\Windows\SysWOW64\WerFault.exe
LinkDate
clean
C:\Windows\SysWOW64\WerFault.exe
BinProductVersion
clean
C:\Windows\SysWOW64\WerFault.exe
Size
clean
C:\Windows\SysWOW64\WerFault.exe
Language
clean
C:\Windows\SysWOW64\WerFault.exe
IsPeFile
clean
C:\Windows\SysWOW64\WerFault.exe
IsOsComponent
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean
C:\Windows\SysWOW64\WerFault.exe
ExceptionRecord
clean
C:\Windows\SysWOW64\WerFault.exe
ProgramId
clean
C:\Windows\SysWOW64\WerFault.exe
FileId
clean
C:\Windows\SysWOW64\WerFault.exe
LowerCaseLongPath
clean
C:\Windows\SysWOW64\WerFault.exe
LongPathHash
clean
C:\Windows\SysWOW64\WerFault.exe
Name
clean
C:\Windows\SysWOW64\WerFault.exe
Publisher
clean
C:\Windows\SysWOW64\WerFault.exe
Version
clean
C:\Windows\SysWOW64\WerFault.exe
BinFileVersion
clean
C:\Windows\SysWOW64\WerFault.exe
BinaryType
clean
C:\Windows\SysWOW64\WerFault.exe
ProductName
clean
C:\Windows\SysWOW64\WerFault.exe
ProductVersion
clean
C:\Windows\SysWOW64\WerFault.exe
LinkDate
clean
C:\Windows\SysWOW64\WerFault.exe
BinProductVersion
clean
C:\Windows\SysWOW64\WerFault.exe
Size
clean
C:\Windows\SysWOW64\WerFault.exe
Language
clean
C:\Windows\SysWOW64\WerFault.exe
IsPeFile
clean
C:\Windows\SysWOW64\WerFault.exe
IsOsComponent
clean
C:\Windows\SysWOW64\WerFault.exe
DeviceTicket
clean
C:\Windows\SysWOW64\WerFault.exe
DeviceId
clean
C:\Windows\SysWOW64\WerFault.exe
ApplicationFlags
clean
C:\Windows\SysWOW64\WerFault.exe
001840043471E22B
clean
There are 37 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
10001000
unkown image
page execute read
malicious
10001000
unkown image
page execute read
malicious
10001000
unkown image
page execute read
malicious
10001000
unkown image
page execute read
malicious
10001000
unkown image
page execute read
malicious
10001000
unkown image
page execute read
malicious
10000000
unkown image
page readonly
clean
7FF526EA9000
unkown
page readonly
clean
7FF5DE0F0000
unkown
page readonly
clean
AF0000
heap default
page read and write
clean
5F0000
unkown
page read and write
clean
7FF5D4639000
unkown
page readonly
clean
2CD1000
unkown
page readonly
clean
2D3A000
unkown
page readonly
clean
2D13000
unkown
page readonly
clean
246CC280000
unkown
page read and write
clean
7FF5BC977000
unkown
page readonly
clean
7FF58005A000
unkown
page readonly
clean
33B0000
heap default
page read and write
clean
10000000
unkown image
page readonly
clean
7FF5D466C000
unkown
page readonly
clean
30F2000
unkown
page read and write
clean
2BFAB076000
unkown
page read and write
clean
7FF569BE9000
unkown
page readonly
clean
7FF5D45F2000
unkown
page readonly
clean
B9B000
unkown
page read and write
clean
2BFAAF10000
unkown
page readonly
clean
4DBE000
unkown
page read and write
clean
7FF5DE062000
unkown
page readonly
clean
33D0000
unkown
page readonly
clean
7FF56F3C1000
unkown
page readonly
clean
2D25000
unkown
page readonly
clean
226260D0000
unkown
page read and write
clean
271CA950000
unkown
page read and write
clean
7FF59D0E0000
unkown
page readonly
clean
1F75E0BC000
unkown
page read and write
clean
7FF586A95000
unkown
page readonly
clean
D90000
heap private
page read and write
clean
10B4000
heap default
page read and write
clean
7FF5BC7A7000
unkown
page readonly
clean
7FF59D07E000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
7FF5BC838000
unkown
page readonly
clean
31FF000
unkown
page read and write
clean
7FF59D038000
unkown
page readonly
clean
C6F000
unkown
page read and write
clean
2CDB000
unkown
page readonly
clean
1F75E087000
unkown
page read and write
clean
2D8B000
unkown
page readonly
clean
32A0000
unkown
page readonly
clean
7FF526F51000
unkown
page readonly
clean
7FF586B8D000
unkown
page readonly
clean
1001D000
unkown image
page read and write
clean
2BFAB07D000
unkown
page read and write
clean
2D86000
unkown
page readonly
clean
2BA2000
unkown
page readonly
clean
D162F7F000
unkown
page read and write
clean
D16317F000
unkown
page read and write
clean
33E0000
unkown
page read and write
clean
2E437D000
unkown
page read and write
clean
2DA0000
unkown
page readonly
clean
7FF569B51000
unkown
page readonly
clean
7FF5DDC93000
unkown
page readonly
clean
22626090000
unkown
page read and write
clean
FDCDFFF000
unkown
page read and write
clean
2B44000
unkown
page readonly
clean
327F000
unkown
page read and write
clean
7FF5BCA3F000
unkown
page readonly
clean
7FF59CF60000
unkown
page readonly
clean
7FF586B38000
unkown
page readonly
clean
7FF59D140000
unkown
page readonly
clean
7FF5DE0F7000
unkown
page readonly
clean
2CDB000
unkown
page readonly
clean
150CA7C0000
unkown
page read and write
clean
2C9E000
unkown
page readonly
clean
7FF56F3BD000
unkown
page readonly
clean
7FF56F31B000
unkown
page readonly
clean
109B000
heap default
page read and write
clean
7FF5BC82C000
unkown
page readonly
clean
7FF56F075000
unkown
page readonly
clean
4DFF000
unkown
page read and write
clean
7FF5DDE0E000
unkown
page readonly
clean
34EA000
heap default
page read and write
clean
27D4CD80000
unkown
page readonly
clean
7FF586BB5000
unkown
page readonly
clean
7FF569BE9000
unkown
page readonly
clean
7FF5BC96C000
unkown
page readonly
clean
2CDB000
unkown
page readonly
clean
150CA990000
unkown
page read and write
clean
2CCA000
unkown
page readonly
clean
7FF5BC9DC000
unkown
page readonly
clean
2BFAB05F000
unkown
page read and write
clean
7FF569ACC000
unkown
page readonly
clean
2CA1000
unkown
page readonly
clean
1F75E0CD000
unkown
page read and write
clean
22620902000
unkown
page read and write
clean
5D67F7E000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
2CD1000
unkown
page readonly
clean
34F0000
heap private
page read and write
clean
7FF5D4687000
unkown
page readonly
clean
7FF5BCA2E000
unkown
page readonly
clean
30E2000
unkown
page read and write
clean
FDCD9CB000
unkown
page read and write
clean
4EF0000
heap private
page read and write
clean
32EA000
heap default
page read and write
clean
7FF5D44B9000
unkown
page readonly
clean
2D00000
unkown
page readonly
clean
2CF2000
unkown
page readonly
clean
33A0000
heap private
page read and write
clean
2D35000
unkown
page readonly
clean
27D4C81B000
heap default
page read and write
clean
7FF59CFBC000
unkown
page readonly
clean
84EF3FC000
unkown
page read and write
clean
2D8B000
unkown
page readonly
clean
1001F000
unkown image
page readonly
clean
2D00000
unkown
page readonly
clean
2D80000
unkown
page readonly
clean
22625D90000
unkown
page read and write
clean
7FF56F368000
unkown
page readonly
clean
1F75E0C6000
unkown
page read and write
clean
1F75DF10000
unkown
page readonly
clean
7FF58007F000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
2CE4000
unkown
page readonly
clean
2CE4000
unkown
page readonly
clean
22625E17000
unkown
page read and write
clean
7FF526E50000
unkown
page readonly
clean
22625C70000
unkown
page read and write
clean
33FF000
unkown
page read and write
clean
7FF5864B1000
unkown
page readonly
clean
51B000
unkown
page read and write
clean
271CA950000
unkown
page read and write
clean
1F75E200000
unkown
page readonly
clean
150CA6B0000
unkown
page read and write
clean
27D4C84D000
heap default
page read and write
clean
7FF5D43B0000
unkown
page readonly
clean
7FF56F38E000
unkown
page readonly
clean
2CCA000
unkown
page readonly
clean
2BD5000
unkown
page readonly
clean
7FF56F459000
unkown
page readonly
clean
ADE000
unkown
page read and write
clean
7FF59D04D000
unkown
page readonly
clean
28D89213000
unkown
page read and write
clean
2CDB000
unkown
page readonly
clean
2CF7000
unkown
page readonly
clean
7FF56F44E000
unkown
page readonly
clean
2CC2000
unkown
page readonly
clean
2E3EFF000
unkown
page read and write
clean
32E0000
heap default
page read and write
clean
246CBC13000
unkown
page read and write
clean
7FF5BCA1A000
unkown
page readonly
clean
2CAF000
unkown
page readonly
clean
A00000
unkown
page readonly
clean
271CA960000
unkown
page readonly
clean
940000
unkown
page readonly
clean
2D94000
unkown
page readonly
clean
2B2C000
unkown
page readonly
clean
2CA1000
unkown
page readonly
clean
1F75E0E1000
unkown
page read and write
clean
1F75E040000
unkown
page read and write
clean
246CBB20000
heap default
page read and write
clean
52B000
unkown
page read and write
clean
7FF5D4221000
unkown
page readonly
clean
7FF5D4684000
unkown
page readonly
clean
1F75DE30000
unkown
page readonly
clean
7FF5BC631000
unkown
page readonly
clean
2CFC000
unkown
page readonly
clean
1F75E113000
unkown
page read and write
clean
271C8F13000
unkown
page read and write
clean
2CC2000
unkown
page readonly
clean
930000
heap default
page read and write
clean
DEA000
heap default
page read and write
clean
2D8B000
unkown
page readonly
clean
F10000
unkown
page readonly
clean
4AEE000
unkown
page read and write
clean
34CF000
unkown
page read and write
clean
7FF56F459000
unkown
page readonly
clean
32D0000
unkown
page readonly
clean
20547B13000
unkown
page read and write
clean
30B0000
unkown
page read and write
clean
2D25000
unkown
page readonly
clean
2CCA000
unkown
page readonly
clean
2D02000
unkown
page readonly
clean
7FF5800B6000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
22620A00000
unkown
page readonly
clean
2CCD000
unkown
page readonly
clean
7FF5DDF29000
unkown
page readonly
clean
22621118000
unkown
page read and write
clean
150CAF50000
unkown
page readonly
clean
7FF59CD7E000
unkown
page readonly
clean
2B34000
unkown
page readonly
clean
970000
heap default
page read and write
clean
28D89313000
unkown
page read and write
clean
2B2C000
unkown
page readonly
clean
2B2E000
unkown
page readonly
clean
28D89280000
unkown
page read and write
clean
2D35000
unkown
page readonly
clean
7FF5D43A5000
unkown
page readonly
clean
9A0000
heap private
page read and write
clean
35E0000
unkown
page readonly
clean
22620902000
unkown
page read and write
clean
910000
unkown
page read and write
clean
2CCD000
unkown
page readonly
clean
7FF5BC7B5000
unkown
page readonly
clean
150CB5F0000
unkown
page readonly
clean
2BFAB060000
unkown
page read and write
clean
271CAA02000
unkown
page read and write
clean
B30000
unkown
page execute and read and write
clean
7FF57733C000
unkown
page readonly
clean
150CA7AB000
unkown
page read and write
clean
1F75EB90000
unkown
page readonly
clean
2B44000
unkown
page readonly
clean
28D89300000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
2E427E000
unkown
page read and write
clean
7FF56EC17000
unkown
page readonly
clean
7FF569B1E000
unkown
page readonly
clean
7FF5BCA02000
unkown
page readonly
clean
3400000
unkown
page execute and read and write
clean
2FE0000
unkown
page readonly
clean
30F6000
unkown
page read and write
clean
7FF5DE0C6000
unkown
page readonly
clean
2D8B000
unkown
page readonly
clean
150CA9A0000
heap private
page read and write
clean
7FF526EBD000
unkown
page readonly
clean
246CBC3E000
unkown
page read and write
clean
2CF2000
unkown
page readonly
clean
150CA730000
unkown
page readonly
clean
1001F000
unkown image
page readonly
clean
B00000
unkown
page readonly
clean
150CA748000
heap default
page read and write
clean
6680000
unkown
page read and write
clean
22620879000
unkown
page read and write
clean
32C0000
unkown
page readonly
clean
B24000
heap default
page read and write
clean
150CA710000
unkown
page read and write
clean
B2F000
unkown
page read and write
clean
F80000
unkown
page readonly
clean
FDCE3FE000
unkown
page read and write
clean
2CE0000
unkown
page readonly
clean
B10000
unkown
page read and write
clean
2D86000
unkown
page readonly
clean
271C8E40000
unkown
page read and write
clean
7FF59CD22000
unkown
page readonly
clean
22626080000
unkown
page read and write
clean
7FF5BC9E8000
unkown
page readonly
clean
7FF569AF6000
unkown
page readonly
clean
150CA980000
unkown
page read and write
clean
2C9E000
unkown
page readonly
clean
246CC1A0000
unkown
page readonly
clean
271C8E13000
unkown
page read and write
clean
7FF5BC87F000
unkown
page readonly
clean
34E0000
heap default
page read and write
clean
A9F000
unkown
page read and write
clean
3280000
unkown
page read and write
clean
1001F000
unkown image
page readonly
clean
7FF5BC670000
unkown
page readonly
clean
7FF5BCA08000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
7FF5DD8C9000
unkown
page readonly
clean
3500000
unkown
page read and write
clean
7FF5BCAF9000
unkown
page readonly
clean
9B0000
heap private
page read and write
clean
1F75E5B0000
unkown
page readonly
clean
E4C3DAE000
unkown
page read and write
clean
7FF5D3E68000
unkown
page readonly
clean
4ED0000
heap private
page read and write
clean
2CD6000
unkown
page readonly
clean
271C8E49000
unkown
page read and write
clean
7FF5BC6C8000
unkown
page readonly
clean
2D80000
unkown
page readonly
clean
22625EAD000
unkown
page read and write
clean
33A0000
unkown
page read and write
clean
3450000
heap default
page read and write
clean
226260A0000
unkown
page read and write
clean
20547A69000
unkown
page read and write
clean
F3E000
unkown
page read and write
clean
22625E50000
unkown
page read and write
clean
7FF59CD96000
unkown
page readonly
clean
4F7F000
unkown
page read and write
clean
2CAF000
unkown
page readonly
clean
3420000
unkown
page readonly
clean
20547ED0000
unkown
page readonly
clean
2B2C000
unkown
page readonly
clean
1530000
heap private
page read and write
clean
7FF5DDE15000
unkown
page readonly
clean
2CF7000
unkown
page readonly
clean
2CA8000
unkown
page readonly
clean
84EF87E000
unkown
page read and write
clean
4B2F000
unkown
page read and write
clean
7FF526F02000
unkown
page readonly
clean
7FF5DD8CE000
unkown
page readonly
clean
7FF56F3D6000
unkown
page readonly
clean
150CA78F000
unkown
page read and write
clean
7FF586A37000
unkown
page readonly
clean
ED0000
unkown
page read and write
clean
7FF5BCAEE000
unkown
page readonly
clean
20547A29000
unkown
page read and write
clean
7FF5D461E000
unkown
page readonly
clean
1001F000
unkown image
page readonly
clean
150CA740000
heap default
page read and write
clean
2CCD000
unkown
page readonly
clean
2BFAB602000
unkown
page read and write
clean
7FF59CEAE000
unkown
page readonly
clean
87F000
unkown
page read and write
clean
7FF526F59000
unkown
page readonly
clean
D40000
unkown
page readonly
clean
7FF5DDFE5000
unkown
page readonly
clean
2CCD000
unkown
page readonly
clean
4F00000
unkown
page readonly
clean
22620720000
unkown
page readonly
clean
7FF5BC492000
unkown
page readonly
clean
2D13000
unkown
page readonly
clean
22625ED0000
unkown
page read and write
clean
150CA80D000
unkown
page read and write
clean
7FF5BC965000
unkown
page readonly
clean
2CD1000
unkown
page readonly
clean
246CC2B0000
unkown
page read and write
clean
7FF526E7A000
unkown
page readonly
clean
B5A000
unkown
page read and write
clean
7FF5BCAF0000
unkown
page readonly
clean
30FF000
unkown
page read and write
clean
1001A000
unkown image
page readonly
clean
7FF526E6A000
unkown
page readonly
clean
7FF5800D0000
unkown
page readonly
clean
22625E00000
unkown
page read and write
clean
7FF5BC89E000
unkown
page readonly
clean
271C8E00000
unkown
page read and write
clean
2DA8000
unkown
page readonly
clean
7FF5BCA66000
unkown
page readonly
clean
22625EB8000
unkown
page read and write
clean
1F75DDC0000
heap private
page read and write
clean
1190000
unkown
page readonly
clean
7FF569BDE000
unkown
page readonly
clean
580000
unkown
page read and write
clean
28D89257000
unkown
page read and write
clean
150CA787000
unkown
page read and write
clean
30FF000
unkown
page read and write
clean
2D35000
unkown
page readonly
clean
1F75E013000
unkown
page read and write
clean
27D4E310000
heap private
page read and write
clean
7FF580046000
unkown
page readonly
clean
2E3B7E000
unkown
page read and write
clean
622000
unkown
page read and write
clean
22625D94000
unkown
page read and write
clean
EF0000
unkown
page readonly
clean
A50000
heap private
page read and write
clean
20548140000
unkown
page readonly
clean
3050000
unkown
page read and write
clean
33DF000
unkown
page read and write
clean
20547A3F000
unkown
page read and write
clean
7FF5DE0BD000
unkown
page readonly
clean
7FF586BAC000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
2D02000
unkown
page readonly
clean
22621680000
unkown
page read and write
clean
150CA80D000
heap default
page read and write
clean
84EF7FF000
unkown
page read and write
clean
2B2E000
unkown
page readonly
clean
30E9000
unkown
page read and write
clean
2DA8000
unkown
page readonly
clean
2D86000
unkown
page readonly
clean
1001F000
unkown image
page readonly
clean
22620813000
unkown
page read and write
clean
271C9460000
unkown
page readonly
clean
2BFAAE40000
unkown
page readonly
clean
A3E000
unkown
page read and write
clean
20547A00000
unkown
page read and write
clean
E6D000
unkown
page read and write
clean
E52F4FB000
unkown
page read and write
clean
2CA8000
unkown
page readonly
clean
2D02000
unkown
page readonly
clean
150CB600000
unkown
page read and write
clean
7FF5BC298000
unkown
page readonly
clean
7FF5D4682000
unkown
page readonly
clean
7FF5D4625000
unkown
page readonly
clean
7FF586B65000
unkown
page readonly
clean
2DA0000
unkown
page readonly
clean
22625DE0000
unkown
page read and write
clean
2C9E000
unkown
page readonly
clean
27D4E280000
unkown
page readonly
clean
7FF56981E000
unkown
page readonly
clean
20547CD0000
unkown
page readonly
clean
1F75DFF0000
unkown
page read and write
clean
7FF5BC8B1000
unkown
page readonly
clean
D2BCEFE000
unkown
page read and write
clean
B00000
heap default
page read and write
clean
F60000
unkown
page readonly
clean
D2BC9AB000
unkown
page read and write
clean
323B000
unkown
page read and write
clean
F00000
heap default
page read and write
clean
2BFAB06A000
unkown
page read and write
clean
F50000
unkown
page read and write
clean
2CF2000
unkown
page readonly
clean
7FF59CD1F000
unkown
page readonly
clean
7FF526B8F000
unkown
page readonly
clean
2DA0000
unkown
page readonly
clean
246CBE00000
unkown
page readonly
clean
2CE0000
unkown
page readonly
clean
271C8F02000
unkown
page read and write
clean
30E4000
unkown
page read and write
clean
2CC2000
unkown
page readonly
clean
84EF77D000
unkown
page read and write
clean
7FF5BCA61000
unkown
page readonly
clean
2BFAB066000
unkown
page read and write
clean
E4C3D2E000
unkown
page read and write
clean
2DA8000
unkown
page readonly
clean
2CA8000
unkown
page readonly
clean
2BFAADD0000
heap private
page read and write
clean
7FF5D3F23000
unkown
page readonly
clean
2BFAB047000
unkown
page read and write
clean
28D89202000
unkown
page read and write
clean
2BFAB03D000
unkown
page read and write
clean
7FF5DDE20000
unkown
page readonly
clean
150CA78F000
unkown
page read and write
clean
465F000
unkown
page read and write
clean
22625E84000
unkown
page read and write
clean
6340000
unkown
page readonly
clean
7FF580089000
unkown
page readonly
clean
7FF56F010000
unkown
page readonly
clean
7FF5DE08E000
unkown
page readonly
clean
28D89302000
unkown
page read and write
clean
5D0000
unkown
page readonly
clean
7FF569910000
unkown
page readonly
clean
7FF5BCA5D000
unkown
page readonly
clean
7FF526BD3000
unkown
page readonly
clean
E52F3FE000
unkown
page read and write
clean
22625DE0000
unkown
page read and write
clean
2CD1000
unkown
page readonly
clean
2C9E000
unkown
page readonly
clean
2CE6000
unkown
page readonly
clean
226260B0000
unkown
page read and write
clean
28D89140000
unkown
page readonly
clean
7FF5D4575000
unkown
page readonly
clean
2D86000
unkown
page readonly
clean
7FF56F395000
unkown
page readonly
clean
27D4E62F000
heap private
page read and write
clean
3270000
unkown
page read and write
clean
7FF59D13E000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
2CD6000
unkown
page readonly
clean
7FF569AA1000
unkown
page readonly
clean
6200000
unkown
page readonly
clean
61E000
unkown
page read and write
clean
327B000
unkown
page read and write
clean
2262088F000
unkown
page read and write
clean
150CA930000
unkown
page readonly
clean
22626120000
unkown
page readonly
clean
22621002000
unkown
page read and write
clean
7FF5D45F8000
unkown
page readonly
clean
7FF59D058000
unkown
page readonly
clean
7FF5D3E5E000
unkown
page readonly
clean
20548070000
unkown
page readonly
clean
2B2C000
unkown
page readonly
clean
7FF5BC633000
unkown
page readonly
clean
7FF5BC68E000
unkown
page readonly
clean
3112000
unkown
page read and write
clean
150CA750000
heap default
page read and write
clean
1F75E602000
unkown
page read and write
clean
28D89150000
unkown
page read and write
clean
2BFAAFF0000
unkown
page readonly
clean
7FF5800C5000
unkown
page readonly
clean
2BFAB590000
unkown
page read and write
clean
330A000
heap private
page read and write
clean
30F6000
unkown
page read and write
clean
2CE4000
unkown
page readonly
clean
7FF586B96000
unkown
page readonly
clean
E4C41FE000
unkown
page read and write
clean
7FF526EF0000
unkown
page readonly
clean
2B2C000
unkown
page readonly
clean
2CCD000
unkown
page readonly
clean
3290000
heap default
page read and write
clean
27D4CB75000
heap private
page read and write
clean
22625DA0000
unkown
page read and write
clean
7FF59D056000
unkown
page readonly
clean
2B2C000
unkown
page readonly
clean
35AA000
heap default
page read and write
clean
5C0000
unkown
page read and write
clean
7FF5BCA85000
unkown
page readonly
clean
7FF5D4488000
unkown
page readonly
clean
7FF5BC9F2000
unkown
page readonly
clean
27D4C7B0000
unkown
page read and write
clean
2E3BFC000
unkown
page read and write
clean
30AC000
unkown
page read and write
clean
22625DB4000
unkown
page read and write
clean
52E47B000
unkown
page read and write
clean
7FF59C8CB000
unkown
page readonly
clean
7FF5BCA76000
unkown
page readonly
clean
7FF5863BC000
unkown
page readonly
clean
36A0000
unkown
page readonly
clean
7FF59D149000
unkown
page readonly
clean
20547A75000
unkown
page read and write
clean
7FF526EC6000
unkown
page readonly
clean
3410000
unkown
page read and write
clean
2D8B000
unkown
page readonly
clean
7FF586B79000
unkown
page readonly
clean
2BFAB013000
unkown
page read and write
clean
7FF5BC310000
unkown
page readonly
clean
5E0000
unkown
page execute and read and write
clean
7FF569721000
unkown
page readonly
clean
7FF59CF6C000
unkown
page readonly
clean
7FF5BC7C0000
unkown
page readonly
clean
2CF2000
unkown
page readonly
clean
22625E86000
unkown
page read and write
clean
226208A0000
unkown
page read and write
clean
D16297F000
unkown
page read and write
clean
7FF56F024000
unkown
page readonly
clean
30EE000
unkown
page read and write
clean
7FF5D46E9000
unkown
page readonly
clean
150CB5E0000
unkown
page read and write
clean
226260D0000
unkown
page readonly
clean
7FF5BC85E000
unkown
page readonly
clean
7FF569950000
unkown
page readonly
clean
22621BF0000
unkown
page read and write
clean
7FF526E95000
unkown
page readonly
clean
B8C000
unkown
page read and write
clean
22620800000
unkown
page read and write
clean
7FF5BC2A2000
unkown
page readonly
clean
28D89400000
unkown
page readonly
clean
D6F000
unkown
page read and write
clean
7FF526DFE000
unkown
page readonly
clean
27D4C790000
unkown
page read and write
clean
271C8E2A000
unkown
page read and write
clean
910000
unkown
page readonly
clean
2CA8000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
22625C50000
unkown
page read and write
clean
2BFAB000000
unkown
page read and write
clean
7FF526EC1000
unkown
page readonly
clean
FDCE0FF000
unkown
page read and write
clean
271C8DB0000
unkown
page readonly
clean
7FF5DE0A9000
unkown
page readonly
clean
205479F0000
heap default
page read and write
clean
2B34000
unkown
page readonly
clean
7FF586BA6000
unkown
page readonly
clean
7FF5BC70F000
unkown
page readonly
clean
2C9E000
unkown
page readonly
clean
28D89050000
heap default
page read and write
clean
246CBAC0000
heap private
page read and write
clean
7FF586C21000
unkown
page readonly
clean
D162E7F000
unkown
page read and write
clean
2BFAB040000
unkown
page read and write
clean
7FF5D46E1000
unkown
page readonly
clean
2B2E000
unkown
page readonly
clean
7FF5DE068000
unkown
page readonly
clean
30E5000
unkown
page read and write
clean
226261A0000
unkown
page readonly
clean
2D35000
unkown
page readonly
clean
22625D70000
unkown
page read and write
clean
2D80000
unkown
page readonly
clean
4DB000
unkown
page read and write
clean
7FF56F3A9000
unkown
page readonly
clean
2BFAB002000
unkown
page read and write
clean
2DA8000
unkown
page readonly
clean
6334000
heap private
page read and write
clean
226218B0000
unkown
page readonly
clean
150CA798000
unkown
page read and write
clean
2BFAB049000
unkown
page read and write
clean
7FF526B6C000
unkown
page readonly
clean
2B34000
unkown
page readonly
clean
2D35000
unkown
page readonly
clean
22620873000
unkown
page read and write
clean
75C000
unkown
page read and write
clean
28D89060000
unkown
page readonly
clean
2CF7000
unkown
page readonly
clean
883000
unkown
page read and write
clean
271C8DD0000
unkown
page read and write
clean
2DA0000
unkown
page readonly
clean
E00000
unkown
page readonly
clean
22620891000
unkown
page read and write
clean
5B0000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
357E000
unkown
page read and write
clean
7FF5DDEDF000
unkown
page readonly
clean
2BFAB200000
unkown
page readonly
clean
7FF526ECC000
unkown
page readonly
clean
2BFAB05C000
unkown
page read and write
clean
2D25000
unkown
page readonly
clean
30F6000
unkown
page read and write
clean
2D13000
unkown
page readonly
clean
7FF5699BA000
unkown
page readonly
clean
150CA970000
unkown
page read and write
clean
79B000
unkown
page read and write
clean
7FF580075000
unkown
page readonly
clean
7FF59D085000
unkown
page readonly
clean
7FF5DDF18000
unkown
page readonly
clean
800000
unkown
page readonly
clean
E52EC8B000
unkown
page read and write
clean
22621770000
unkown
page read and write
clean
2BFAB061000
unkown
page read and write
clean
7FF569B75000
unkown
page readonly
clean
7FF5BCAF9000
unkown
page readonly
clean
3304000
heap default
page read and write
clean
7FF526F59000
unkown
page readonly
clean
3080000
unkown
page read and write
clean
2BFAB05A000
unkown
page read and write
clean
7FF57F8A5000
unkown
page readonly
clean
20547A5B000
unkown
page read and write
clean
271C8E5A000
unkown
page read and write
clean
2BFAB02E000
unkown
page read and write
clean
5FF000
unkown
page read and write
clean
7FF586B3A000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
22621000000
unkown
page read and write
clean
3550000
unkown
page read and write
clean
3310000
unkown
page readonly
clean
246CBC00000
unkown
page read and write
clean
7FF569B84000
unkown
page readonly
clean
22625D78000
unkown
page read and write
clean
7FF5D431A000
unkown
page readonly
clean
7FF569AE2000
unkown
page readonly
clean
950000
heap private
page read and write
clean
2DA0000
unkown
page readonly
clean
2D94000
unkown
page readonly
clean
7FF5BCA97000
unkown
page readonly
clean
32B0000
unkown
page readonly
clean
7FF59D040000
unkown
page readonly
clean
30CA000
heap default
page read and write
clean
7FF5DE095000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
7FF526E66000
unkown
page readonly
clean
2C9E000
unkown
page readonly
clean
5DF000
unkown
page read and write
clean
7FF569B4D000
unkown
page readonly
clean
150CA9AA000
heap private
page read and write
clean
271C8E4A000
unkown
page read and write
clean
2CCA000
unkown
page readonly
clean
52E57E000
unkown
page read and write
clean
246CBB30000
unkown
page readonly
clean
590000
unkown
page read and write
clean
2CF7000
unkown
page readonly
clean
4F3E000
unkown
page read and write
clean
271C90D0000
unkown
page readonly
clean
2CD6000
unkown
page readonly
clean
6AE000
unkown
page read and write
clean
2B2E000
unkown
page readonly
clean
7FF5BCA06000
unkown
page readonly
clean
7FF5BCA49000
unkown
page readonly
clean
3520000
unkown
page readonly
clean
33C0000
unkown
page readonly
clean
27D4E390000
heap private
page read and write
clean
30AE000
unkown
page read and write
clean
2E417C000
unkown
page read and write
clean
2CE0000
unkown
page readonly
clean
30E9000
unkown
page read and write
clean
2CA1000
unkown
page readonly
clean
246CC2B0000
unkown
page read and write
clean
7FF59CD31000
unkown
page readonly
clean
2E3DFB000
unkown
page read and write
clean
FDCDEFF000
unkown
page read and write
clean
A3E000
unkown
page read and write
clean
7FF57733C000
unkown
page readonly
clean
2CFC000
unkown
page readonly
clean
2CE6000
unkown
page readonly
clean
7FF569AF8000
unkown
page readonly
clean
5D67C7A000
unkown
page read and write
clean
7FF59D042000
unkown
page readonly
clean
7FF5BC9C7000
unkown
page readonly
clean
7FF56F3F4000
unkown
page readonly
clean
2DA0000
unkown
page readonly
clean
271C8E4A000
unkown
page read and write
clean
7FF5BC8AC000
unkown
page readonly
clean
2E3FFD000
unkown
page read and write
clean
33E0000
unkown
page execute and read and write
clean
10000000
unkown image
page readonly
clean
2D80000
unkown
page readonly
clean
5D67377000
unkown
page read and write
clean
7FF5697B8000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
2CA8000
unkown
page readonly
clean
3112000
unkown
page read and write
clean
7FF5BCA35000
unkown
page readonly
clean
2CAF000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
2D94000
unkown
page readonly
clean
2FEC000
unkown
page read and write
clean
150CB610000
unkown
page read and write
clean
27D4E270000
unkown
page readonly
clean
B90000
unkown
page readonly
clean
2CAF000
unkown
page readonly
clean
2B44000
unkown
page readonly
clean
246CC2C0000
unkown
page read and write
clean
150CA80D000
unkown
page read and write
clean
2CFC000
unkown
page readonly
clean
20547990000
heap private
page read and write
clean
28D89200000
unkown
page read and write
clean
7FF56F3F7000
unkown
page readonly
clean
7FF59D052000
unkown
page readonly
clean
22625DB0000
unkown
page read and write
clean
2D02000
unkown
page readonly
clean
30EE000
unkown
page read and write
clean
226261E0000
unkown
page readonly
clean
2B2E000
unkown
page readonly
clean
7FF5BC9A7000
unkown
page readonly
clean
7FF5800D7000
unkown
page readonly
clean
7FF526F4E000
unkown
page readonly
clean
F40000
unkown
page execute and read and write
clean
FDCE2FC000
unkown
page read and write
clean
22620829000
unkown
page read and write
clean
22621663000
unkown
page read and write
clean
7FF569B87000
unkown
page readonly
clean
D16307F000
unkown
page read and write
clean
7FF5BCA6C000
unkown
page readonly
clean
E52F1FB000
unkown
page read and write
clean
35E0000
unkown
page readonly
clean
2CDB000
unkown
page readonly
clean
2CA8000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
22620840000
unkown
page read and write
clean
E52F2FE000
unkown
page read and write
clean
7FF59D02C000
unkown
page readonly
clean
2CD6000
unkown
page readonly
clean
7FF56F3DC000
unkown
page readonly
clean
B70000
unkown
page read and write
clean
7FF5D44F7000
unkown
page readonly
clean
2BD5000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
226206B0000
heap private
page read and write
clean
7FF526E04000
unkown
page readonly
clean
2CD1000
unkown
page readonly
clean
7FF5D45F6000
unkown
page readonly
clean
2CF7000
unkown
page readonly
clean
7FF5D4675000
unkown
page readonly
clean
7FF569B5C000
unkown
page readonly
clean
F3F000
unkown
page read and write
clean
7FF56F013000
unkown
page readonly
clean
22625E33000
unkown
page read and write
clean
2D8B000
unkown
page readonly
clean
8D0000
unkown
page execute and read and write
clean
27D4E380000
heap private
page read and write
clean
30F7000
unkown
page read and write
clean
28D89C00000
unkown
page readonly
clean
7FF526E52000
unkown
page readonly
clean
2D00000
unkown
page readonly
clean
22621104000
unkown
page read and write
clean
22621660000
unkown
page read and write
clean
2D35000
unkown
page readonly
clean
6AA000
unkown
page read and write
clean
7FF5DE02A000
unkown
page readonly
clean
2DA0000
unkown
page readonly
clean
2BD5000
unkown
page readonly
clean
D50000
unkown
page read and write
clean
271C8E59000
unkown
page read and write
clean
AFA000
heap default
page read and write
clean
C00000
unkown
page readonly
clean
1F75DFE0000
unkown
page readonly
clean
7FF5DE0D6000
unkown
page readonly
clean
2D3A000
unkown
page readonly
clean
1001D000
unkown image
page read and write
clean
7FF5D4666000
unkown
page readonly
clean
1F75DF00000
unkown
page readonly
clean
7FF5D4450000
unkown
page readonly
clean
22621118000
unkown
page read and write
clean
7FF586A9C000
unkown
page readonly
clean
3390000
unkown
page readonly
clean
2BFAB046000
unkown
page read and write
clean
22620916000
unkown
page read and write
clean
5C0000
unkown
page readonly
clean
2CD1000
unkown
page readonly
clean
7FF5D4656000
unkown
page readonly
clean
2B44000
unkown
page readonly
clean
3350000
unkown
page read and write
clean
20547B02000
unkown
page read and write
clean
7FF5BC77C000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
3370000
unkown
page readonly
clean
2D86000
unkown
page readonly
clean
20548170000
unkown
page readonly
clean
7FF5863B1000
unkown
page readonly
clean
271CA980000
unkown
page write copy
clean
7FF580048000
unkown
page readonly
clean
22620895000
unkown
page read and write
clean
7FF5DE14E000
unkown
page readonly
clean
7FF569A87000
unkown
page readonly
clean
2D94000
unkown
page readonly
clean
4610000
heap private
page read and write
clean
5D66F1C000
unkown
page read and write
clean
7FF5BC70C000
unkown
page readonly
clean
150CA840000
unkown
page readonly
clean
2B34000
unkown
page readonly
clean
2CF7000
unkown
page readonly
clean
3300000
heap private
page read and write
clean
7FF586B36000
unkown
page readonly
clean
35D0000
heap private
page read and write
clean
22626110000
unkown
page readonly
clean
2B34000
unkown
page readonly
clean
DC0000
heap default
page read and write
clean
150CA78F000
unkown
page read and write
clean
7FF59D08F000
unkown
page readonly
clean
B0A000
heap default
page read and write
clean
7FF5800A6000
unkown
page readonly
clean
7FF5DE03C000
unkown
page readonly
clean
7FF5D465C000
unkown
page readonly
clean
2D02000
unkown
page readonly
clean
7FF5DE07A000
unkown
page readonly
clean
1001A000
unkown image
page readonly
clean
28D8923D000
unkown
page read and write
clean
3503000
heap default
page read and write
clean
7FF569A97000
unkown
page readonly
clean
2CE6000
unkown
page readonly
clean
BA0000
unkown
page readonly
clean
7FF59D06A000
unkown
page readonly
clean
2CA1000
unkown
page readonly
clean
2E447E000
unkown
page read and write
clean
271CA8D0000
unkown
page read and write
clean
2D86000
unkown
page readonly
clean
20547A67000
unkown
page read and write
clean
7FF5D446F000
unkown
page readonly
clean
2E37AB000
unkown
page read and write
clean
22625D70000
unkown
page read and write
clean
30B1000
unkown
page read and write
clean
20548400000
unkown
page readonly
clean
7FF5BC81B000
unkown
page readonly
clean
1001D000
unkown image
page read and write
clean
7FF5BC30E000
unkown
page readonly
clean
7FF59D099000
unkown
page readonly
clean
43C0000
unkown
page readonly
clean
2CAF000
unkown
page readonly
clean
7FF59D0B1000
unkown
page readonly
clean
2D02000
unkown
page readonly
clean
226260D0000
unkown
page read and write
clean
5D6747D000
unkown
page read and write
clean
20547A77000
unkown
page read and write
clean
7FF56F3E5000
unkown
page readonly
clean
7FF526EE5000
unkown
page readonly
clean
2BFAB031000
unkown
page read and write
clean
7FF5BC991000
unkown
page readonly
clean
22621670000
unkown
page read and write
clean
D16287B000
unkown
page read and write
clean
2CC2000
unkown
page readonly
clean
2CD1000
unkown
page readonly
clean
1F75E000000
unkown
page read and write
clean
7FF5D45D8000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
1F75E102000
unkown
page read and write
clean
28D88FF0000
heap private
page read and write
clean
20548150000
unkown
page read and write
clean
E4C3CAC000
unkown
page read and write
clean
2C9E000
unkown
page readonly
clean
2CD6000
unkown
page readonly
clean
2CCD000
unkown
page readonly
clean
323C000
unkown
page read and write
clean
35C4000
heap default
page read and write
clean
AD0000
unkown
page read and write
clean
1F75E712000
unkown
page read and write
clean
7FF580139000
unkown
page readonly
clean
28D89269000
unkown
page read and write
clean
2CC2000
unkown
page readonly
clean
2D80000
unkown
page readonly
clean
7FF5BC9D7000
unkown
page readonly
clean
2BFAB05D000
unkown
page read and write
clean
2D35000
unkown
page readonly
clean
D2BD37D000
unkown
page read and write
clean
2CCD000
unkown
page readonly
clean
2CF2000
unkown
page readonly
clean
5D6787B000
unkown
page read and write
clean
150CA9B0000
unkown
page read and write
clean
7FF5DE151000
unkown
page readonly
clean
7FF526EDC000
unkown
page readonly
clean
2D25000
unkown
page readonly
clean
7FF56F362000
unkown
page readonly
clean
7FF59D0E4000
unkown
page readonly
clean
271C8DA0000
heap default
page read and write
clean
2BD5000
unkown
page readonly
clean
22625E27000
unkown
page read and write
clean
28D89228000
unkown
page read and write
clean
2BD5000
unkown
page readonly
clean
7FF59CFD5000
unkown
page readonly
clean
2B2E000
unkown
page readonly
clean
7FF59CCB2000
unkown
page readonly
clean
22620E60000
unkown
page readonly
clean
7FF580030000
unkown
page readonly
clean
AFF000
unkown
page read and write
clean
7FF5BC6FD000
unkown
page readonly
clean
7FF5DE0DC000
unkown
page readonly
clean
4E00000
unkown
page readonly
clean
F7F000
unkown
page read and write
clean
7FF569AF2000
unkown
page readonly
clean
150CABC0000
unkown
page readonly
clean
7FF59CF57000
unkown
page readonly
clean
150CA7EB000
unkown
page read and write
clean
7FF59D0AD000
unkown
page readonly
clean
7FF586C29000
unkown
page readonly
clean
2262087C000
unkown
page read and write
clean
22625D91000
unkown
page read and write
clean
246CC402000
unkown
page read and write
clean
7FF56F017000
unkown
page readonly
clean
226260D0000
unkown
page read and write
clean
27D4C7D0000
unkown
page readonly
clean
D2BD3FE000
unkown
page read and write
clean
2B2E000
unkown
page readonly
clean
7FF59CEE8000
unkown
page readonly
clean
34B0000
unkown
page read and write
clean
2DA8000
unkown
page readonly
clean
52E5FB000
unkown
page read and write
clean
2CE4000
unkown
page readonly
clean
7FF5DE052000
unkown
page readonly
clean
7FF59CECF000
unkown
page readonly
clean
7FF56F352000
unkown
page readonly
clean
3440000
unkown
page readonly
clean
5E0000
unkown
page read and write
clean
1001D000
unkown image
page read and write
clean
2CCA000
unkown
page readonly
clean
1001D000
unkown image
page read and write
clean
1090000
heap default
page read and write
clean
D80000
unkown
page execute and read and write
clean
2D13000
unkown
page readonly
clean
7FF5DE09F000
unkown
page readonly
clean
7FF5D4225000
unkown
page readonly
clean
475E000
unkown
page read and write
clean
7FF526ED6000
unkown
page readonly
clean
22625E21000
unkown
page read and write
clean
30F6000
unkown
page read and write
clean
2BFAB048000
unkown
page read and write
clean
27D4E190000
unkown
page readonly
clean
5D67579000
unkown
page read and write
clean
2D00000
unkown
page readonly
clean
2BFAB069000
unkown
page read and write
clean
271CA890000
unkown
page read and write
clean
1001A000
unkown image
page readonly
clean
2D8B000
unkown
page readonly
clean
226261B0000
unkown
page read and write
clean
2D3A000
unkown
page readonly
clean
D70000
heap default
page read and write
clean
2CE6000
unkown
page readonly
clean
2D00000
unkown
page readonly
clean
33E0000
unkown
page readonly
clean
7FF569B56000
unkown
page readonly
clean
5D6767E000
unkown
page read and write
clean
2CE6000
unkown
page readonly
clean
271C8F18000
unkown
page read and write
clean
150CA7ED000
unkown
page read and write
clean
7FF569A9A000
unkown
page readonly
clean
271C8DF0000
unkown
page read and write
clean
7FF5D46DE000
unkown
page readonly
clean
7FF57FEBF000
unkown
page readonly
clean
4EC000
unkown
page read and write
clean
271CA950000
unkown
page read and write
clean
2CDB000
unkown
page readonly
clean
246CC000000
unkown
page readonly
clean
2D13000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
271CAC00000
unkown
page readonly
clean
22625EC0000
unkown
page read and write
clean
20547A02000
unkown
page read and write
clean
22620857000
unkown
page read and write
clean
20547A6F000
unkown
page read and write
clean
22625E64000
unkown
page read and write
clean
D2BD27D000
unkown
page read and write
clean
27D4E260000
unkown
page readonly
clean
7FF569B2F000
unkown
page readonly
clean
2CA1000
unkown
page readonly
clean
7FF5D46E9000
unkown
page readonly
clean
7FF526EF4000
unkown
page readonly
clean
1F75E800000
unkown
page readonly
clean
2D94000
unkown
page readonly
clean
3084000
unkown
page read and write
clean
7FF569723000
unkown
page readonly
clean
22625DA0000
unkown
page read and write
clean
28D8927A000
unkown
page read and write
clean
BF0000
heap default
page read and write
clean
7FF59D0B6000
unkown
page readonly
clean
2FF0000
unkown
page read and write
clean
2D3A000
unkown
page readonly
clean
2D94000
unkown
page readonly
clean
2CF2000
unkown
page readonly
clean
5B0000
unkown
page readonly
clean
7FF59D0D5000
unkown
page readonly
clean
2D25000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
22626060000
unkown
page read and write
clean
7FF5DE0CC000
unkown
page readonly
clean
7FF5BC687000
unkown
page readonly
clean
7FF586A53000
unkown
page readonly
clean
E4C42FE000
unkown
page read and write
clean
7FF5DE0F4000
unkown
page readonly
clean
800000
unkown
page readonly
clean
22625C60000
unkown
page read and write
clean
150CA910000
unkown
page read and write
clean
2CAF000
unkown
page readonly
clean
271C8F00000
unkown
page read and write
clean
2BFAAE30000
heap default
page read and write
clean
22625E43000
unkown
page read and write
clean
7FF5BC8C0000
unkown
page readonly
clean
7FF58006E000
unkown
page readonly
clean
1001A000
unkown image
page readonly
clean
27D4C730000
unkown
page readonly
clean
7FF5BCA94000
unkown
page readonly
clean
22621102000
unkown
page read and write
clean
7FF5BC9B1000
unkown
page readonly
clean
7FF580131000
unkown
page readonly
clean
30C0000
heap default
page read and write
clean
7FF569AD8000
unkown
page readonly
clean
2B44000
unkown
page readonly
clean
2BBC000
unkown
page readonly
clean
22620907000
unkown
page read and write
clean
2CFC000
unkown
page readonly
clean
2CA1000
unkown
page readonly
clean
7FF526EF7000
unkown
page readonly
clean
7FF59D149000
unkown
page readonly
clean
2262088C000
unkown
page read and write
clean
27D4C910000
unkown
page readonly
clean
7FF59D0BC000
unkown
page readonly
clean
33C0000
unkown
page read and write
clean
7FF56F3CC000
unkown
page readonly
clean
2BFAB102000
unkown
page read and write
clean
2BD5000
unkown
page readonly
clean
2D80000
unkown
page readonly
clean
28D89A02000
unkown
page read and write
clean
226208FF000
unkown
page read and write
clean
7FF59D0CC000
unkown
page readonly
clean
2D00000
unkown
page readonly
clean
27D4E530000
heap private
page read and write
clean
7FF5DE066000
unkown
page readonly
clean
84EF6FE000
unkown
page read and write
clean
2CD6000
unkown
page readonly
clean
2DA8000
unkown
page readonly
clean
7FF526EFD000
unkown
page readonly
clean
226208B1000
unkown
page read and write
clean
7FF5800AC000
unkown
page readonly
clean
1F75E700000
unkown
page read and write
clean
7FF586B5E000
unkown
page readonly
clean
4DBE000
unkown
page read and write
clean
20548202000
unkown
page read and write
clean
44BF000
unkown
page read and write
clean
D2BCE7C000
unkown
page read and write
clean
1F75DE20000
heap default
page read and write
clean
7FF5DDEF8000
unkown
page readonly
clean
22621159000
unkown
page read and write
clean
7FF569B25000
unkown
page readonly
clean
7FF586C1E000
unkown
page readonly
clean
1001A000
unkown image
page readonly
clean
7FF569725000
unkown
page readonly
clean
7FF5D464D000
unkown
page readonly
clean
20547C00000
unkown
page readonly
clean
7FF5800D4000
unkown
page readonly
clean
22620FE1000
unkown
page read and write
clean
2FB0000
unkown
page readonly
clean
479F000
unkown
page read and write
clean
27D4C810000
heap default
page read and write
clean
BF0000
unkown
page readonly
clean
7FF569BE0000
unkown
page readonly
clean
ABE000
unkown
page read and write
clean
2BFAB042000
unkown
page read and write
clean
B14000
heap default
page read and write
clean
271C8E73000
unkown
page read and write
clean
246CBC02000
unkown
page read and write
clean
2CFC000
unkown
page readonly
clean
27D4C7E0000
unkown
page readonly
clean
22625DE0000
unkown
page read and write
clean
2CE4000
unkown
page readonly
clean
7FF5D434D000
unkown
page readonly
clean
2B34000
unkown
page readonly
clean
246CC2B0000
unkown
page read and write
clean
7FF58012E000
unkown
page readonly
clean
4DFF000
unkown
page read and write
clean
2CE0000
unkown
page readonly
clean
22620710000
heap default
page read and write
clean
7FF5869C3000
unkown
page readonly
clean
2CE4000
unkown
page readonly
clean
7FF5DE159000
unkown
page readonly
clean
6330000
heap private
page read and write
clean
150CB3B0000
unkown
page read and write
clean
7FF5DDD28000
unkown
page readonly
clean
7FF569B39000
unkown
page readonly
clean
AF0000
unkown
page readonly
clean
2BFAB044000
unkown
page read and write
clean
271C8E5A000
unkown
page read and write
clean
30F3000
unkown
page read and write
clean
2CFC000
unkown
page readonly
clean
4E7F000
unkown
page read and write
clean
246CC270000
unkown
page readonly
clean
FDCE4FC000
unkown
page read and write
clean
150CA7D5000
unkown
page read and write
clean
1540000
unkown
page readonly
clean
226261F0000
unkown
page read and write
clean
7FF56F451000
unkown
page readonly
clean
2BFAB03A000
unkown
page read and write
clean
3380000
unkown
page readonly
clean
28D89790000
unkown
page readonly
clean
D162C7D000
unkown
page read and write
clean
C6B000
unkown
page read and write
clean
7FF5BC72A000
unkown
page readonly
clean
2CF7000
unkown
page readonly
clean
7FF59D01A000
unkown
page readonly
clean
1001D000
unkown image
page read and write
clean
2B44000
unkown
page readonly
clean
2BFAB03B000
unkown
page read and write
clean
2CE6000
unkown
page readonly
clean
323E000
unkown
page read and write
clean
2B44000
unkown
page readonly
clean
2CDB000
unkown
page readonly
clean
3420000
unkown
page read and write
clean
7FF5BC635000
unkown
page readonly
clean
C8C000
unkown
page read and write
clean
2CE0000
unkown
page readonly
clean
28D89130000
unkown
page readonly
clean
2BFAB079000
unkown
page read and write
clean
150CA9A5000
heap private
page read and write
clean
3307000
heap private
page read and write
clean
7FF580139000
unkown
page readonly
clean
22625EBA000
unkown
page read and write
clean
84EF8FC000
unkown
page read and write
clean
7FF526BDC000
unkown
page readonly
clean
52E67B000
unkown
page read and write
clean
D2BD0FE000
unkown
page read and write
clean
2BD5000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
7FF56F1DF000
unkown
page readonly
clean
D16267B000
unkown
page read and write
clean
7FF5BC333000
unkown
page readonly
clean
5D67D7B000
unkown
page read and write
clean
2CAF000
unkown
page readonly
clean
43C0000
unkown
page readonly
clean
2BFAB02D000
unkown
page read and write
clean
52E4F9000
unkown
page read and write
clean
2BFAB06C000
unkown
page read and write
clean
2B34000
unkown
page readonly
clean
22625EB5000
unkown
page read and write
clean
271C8E02000
unkown
page read and write
clean
7FF526E8E000
unkown
page readonly
clean
2D3A000
unkown
page readonly
clean
1001A000
unkown image
page readonly
clean
7FF5864B6000
unkown
page readonly
clean
246CBC29000
unkown
page read and write
clean
2D13000
unkown
page readonly
clean
5D6777A000
unkown
page read and write
clean
7FF5BC7AE000
unkown
page readonly
clean
7FF5BC8B8000
unkown
page readonly
clean
27D4CB70000
heap private
page read and write
clean
10000000
unkown image
page readonly
clean
30B5000
unkown
page read and write
clean
7FF5D3EFB000
unkown
page readonly
clean
2CF2000
unkown
page readonly
clean
150CA7FC000
unkown
page read and write
clean
7FF5D428D000
unkown
page readonly
clean
22625D7E000
unkown
page read and write
clean
2BAD000
unkown
page readonly
clean
1F75E06E000
unkown
page read and write
clean
7FF56F39F000
unkown
page readonly
clean
35A0000
heap default
page read and write
clean
10000000
unkown image
page readonly
clean
DCA000
heap default
page read and write
clean
2E407B000
unkown
page read and write
clean
22621100000
unkown
page read and write
clean
2CE0000
unkown
page readonly
clean
2CD6000
unkown
page readonly
clean
4E00000
unkown
page readonly
clean
7FF5D45E0000
unkown
page readonly
clean
7FF57FE5A000
unkown
page readonly
clean
271C8DC0000
unkown
page readonly
clean
271C8D40000
heap private
page read and write
clean
246CBD02000
unkown
page read and write
clean
CF0000
unkown
page read and write
clean
920000
unkown
page readonly
clean
7FF56F3C6000
unkown
page readonly
clean
7FF59D0C6000
unkown
page readonly
clean
2B2C000
unkown
page readonly
clean
7FF5DDEBE000
unkown
page readonly
clean
2D80000
unkown
page readonly
clean
2CC2000
unkown
page readonly
clean
3440000
unkown
page readonly
clean
5050000
heap private
page read and write
clean
3280000
unkown
page readonly
clean
2CCA000
unkown
page readonly
clean
7FF58009D000
unkown
page readonly
clean
D2BCFFE000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
2BFAB041000
unkown
page read and write
clean
2D25000
unkown
page readonly
clean
D162A7C000
unkown
page read and write
clean
2CE4000
unkown
page readonly
clean
22621113000
unkown
page read and write
clean
84EF67E000
unkown
page read and write
clean
45FE000
unkown
page read and write
clean
226261C0000
unkown
page readonly
clean
2FEC000
unkown
page read and write
clean
1001F000
unkown image
page readonly
clean
2D3A000
unkown
page readonly
clean
2D94000
unkown
page readonly
clean
2BFAB07A000
unkown
page read and write
clean
7FF5DE159000
unkown
page readonly
clean
FDCE1FD000
unkown
page read and write
clean
7FF5BC9D3000
unkown
page readonly
clean
2CE0000
unkown
page readonly
clean
2D25000
unkown
page readonly
clean
150CB020000
unkown
page readonly
clean
1F75E029000
unkown
page read and write
clean
7FF5BC8C9000
unkown
page readonly
clean
2CC2000
unkown
page readonly
clean
2CCA000
unkown
page readonly
clean
7FF5BC706000
unkown
page readonly
clean
150CA797000
unkown
page read and write
clean
7FF5D45E2000
unkown
page readonly
clean
7FF5BCA90000
unkown
page readonly
clean
1F75EB40000
unkown
page write copy
clean
7FF59CCAE000
unkown
page readonly
clean
20547A13000
unkown
page read and write
clean
7FF59D0E7000
unkown
page readonly
clean
2CFC000
unkown
page readonly
clean
7FF526DFA000
unkown
page readonly
clean
2D3A000
unkown
page readonly
clean
4EF0000
heap private
page read and write
clean
7FF5DDE07000
unkown
page readonly
clean
7FF59CFC7000
unkown
page readonly
clean
E71000
unkown
page read and write
clean
2CA8000
unkown
page readonly
clean
323B000
unkown
page read and write
clean
F20000
unkown
page read and write
clean
A7F000
unkown
page read and write
clean
7FF5BCA7C000
unkown
page readonly
clean
28D89265000
unkown
page read and write
clean
3100000
unkown
page read and write
clean
22621158000
unkown
page read and write
clean
7FF5D45D4000
unkown
page readonly
clean
7FF5DE048000
unkown
page readonly
clean
226208FF000
unkown
page read and write
clean
7FF569B66000
unkown
page readonly
clean
7FF569B6C000
unkown
page readonly
clean
2BFAB083000
unkown
page read and write
clean
226208BD000
unkown
page read and write
clean
2D00000
unkown
page readonly
clean
7FF5D3ECE000
unkown
page readonly
clean
271C8E67000
unkown
page read and write
clean
7FF56F327000
unkown
page readonly
clean
22620E70000
unkown
page read and write
clean
2BFAB029000
unkown
page read and write
clean
226207F0000
unkown
page readonly
clean
150CB660000
unkown
page read and write
clean
7FF586C29000
unkown
page readonly
clean
7FF5BC9BB000
unkown
page readonly
clean
7FF5D462F000
unkown
page readonly
clean
10000000
unkown image
page readonly
clean
2CE6000
unkown
page readonly
clean
27D4CB80000
unkown
page readonly
clean
32D0000
unkown
page execute and read and write
clean
246CBC58000
unkown
page read and write
clean
D162D7E000
unkown
page read and write
clean
271CA970000
unkown
page readonly
clean
7FF5800BC000
unkown
page readonly
clean
7FF56F350000
unkown
page readonly
clean
4660000
unkown
page readonly
clean
2D86000
unkown
page readonly
clean
D2BD17E000
unkown
page read and write
clean
7FF5BC9F0000
unkown
page readonly
clean
7FF5DE050000
unkown
page readonly
clean
22621015000
unkown
page read and write
clean
271C9000000
unkown
page readonly
clean
52E09B000
unkown
page read and write
clean
2D02000
unkown
page readonly
clean
E4C43FF000
unkown
page read and write
clean
7FF586B9C000
unkown
page readonly
clean
2D20000
unkown
page readonly
clean
2D13000
unkown
page readonly
clean
5A0000
unkown
page readonly
clean
7FF526E68000
unkown
page readonly
clean
7FF569AE0000
unkown
page readonly
clean
DE3000
heap default
page read and write
clean
2BFAB045000
unkown
page read and write
clean
7FF5DE0E5000
unkown
page readonly
clean
There are 1252 hidden memdumps, click here to show them.