IOCReport

loading gif

Files

File Path
Type
Category
Malicious
eZY2eXORIp.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{C85B3E60-1243-11EC-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{EE1A57EA-1243-11EC-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{C85B3E62-1243-11EC-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EE1A57EC-1243-11EC-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\NewErrorPageTemplate[2]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\AppData\Local\Temp\~DF19831833E1675488.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF56A785732A2B1070.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF97D4377F1C48C61D.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFB0F1E322AEAF92F9.TMP
data
dropped
clean
There are 19 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\eZY2eXORIp.exe
'C:\Users\user\Desktop\eZY2eXORIp.exe'
malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6212 CREDAT:17410 /prefetch:2
malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6496 CREDAT:17410 /prefetch:2
malicious
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean

URLs

Name
IP
Malicious
https://haverit.xyz/index.htm
unknown
clean
http://www.nytimes.com/
unknown
clean
https://haverit.xyz/index.htmbY
unknown
clean
https://sectigo.com/CPS0
unknown
clean
http://ocsp.sectigo.com0
unknown
clean
https://haverit.xyz/index.htmdex.htm
unknown
clean
http://%s=%s&file://&os=%u.%u_%u_%u_x%uindex.html;
unknown
clean
https://haverit.xyz/
unknown
clean
http://www.youtube.com/
unknown
clean
http://www.wikipedia.com/
unknown
clean
http://www.amazon.com/
unknown
clean
https://haverit.xyz
unknown
clean
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
unknown
clean
http://www.live.com/
unknown
clean
https://haverit.xyz/index.htm5
unknown
clean
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
unknown
clean
http://www.reddit.com/
unknown
clean
http://www.twitter.com/
unknown
clean
https://haverit.xyz/index.htmRoot
unknown
clean
http://www.google.com/
unknown
clean
There are 10 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
haverit.xyz
unknown
malicious

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{C85B3E60-1243-11EC-90E5-ECF4BB570DC9}
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingBitmap
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingRandomizedBitmap
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
{EE1A57EA-1243-11EC-90E5-ECF4BB570DC9}
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
There are 19 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
36F0000
heap private
page read and write
malicious
7DF541D60000
unkown image
page readonly
clean
2DF6CED0000
unkown image
page readonly
clean
7FF582AF0000
unkown image
page readonly
clean
708000
unkown
page read and write
clean
877907F000
unkown
page read and write
clean
7FF582B1F000
unkown image
page readonly
clean
2DF6D07D000
unkown
page read and write
clean
7FF51DF1B000
unkown image
page readonly
clean
7FF52C46D000
unkown image
page readonly
clean
877927D000
unkown
page read and write
clean
7FF549197000
unkown image
page readonly
clean
7FF582B1F000
unkown image
page readonly
clean
7FF5AE35D000
unkown image
page readonly
clean
759000
unkown
page read and write
clean
7DF533830000
unkown image
page readonly
clean
36F3000
heap private
page read and write
clean
9FF89FE000
unkown
page read and write
clean
6E8000
unkown
page read and write
clean
7FF5E670F000
unkown image
page readonly
clean
7FF5493F5000
unkown image
page readonly
clean
7FF54FABB000
unkown image
page readonly
clean
7FF554D00000
unkown image
page readonly
clean
7DF56A722000
unkown image
page readonly
clean
7FF52C20D000
unkown image
page readonly
clean
5F0000
unkown
page execute and read and write
clean
9FF85FD000
unkown
page read and write
clean
7FF5AE42B000
unkown image
page readonly
clean
223C0DE0000
unkown
page read and write
clean
7DF5FC050000
unkown image
page readonly
clean
6B8000
heap default
page read and write
clean
1571B83D000
unkown
page read and write
clean
5432D7F000
unkown
page read and write
clean
7FF554AD8000
unkown image
page readonly
clean
7DF45CC50000
unkown image
page readonly
clean
16A9A9B0000
unkown image
page readonly
clean
7FF53FF17000
unkown image
page readonly
clean
223C1100000
unkown
page read and write
clean
223C1250000
unkown
page read and write
clean
2DBA0E8D000
unkown
page read and write
clean
7DF598422000
unkown image
page readonly
clean
7DF5F3112000
unkown image
page readonly
clean
1B01282E000
unkown
page read and write
clean
7FF52C193000
unkown image
page readonly
clean
FA801FB000
unkown
page read and write
clean
7DF5653D2000
unkown image
page readonly
clean
7DF5F3102000
unkown image
page readonly
clean
223C0F00000
unkown
page read and write
clean
1571BD80000
unkown image
page readonly
clean
7FF596725000
unkown image
page readonly
clean
7FF5DD7E0000
unkown image
page readonly
clean
680000
heap default
page read and write
clean
7FF54918D000
unkown image
page readonly
clean
6DA000
unkown
page read and write
clean
71F000
unkown
page read and write
clean
16A9AA29000
unkown
page read and write
clean
223C0E22000
unkown
page read and write
clean
7FF53FF3D000
unkown image
page readonly
clean
7FF5968AD000
unkown image
page readonly
clean
1571B650000
unkown image
page readonly
clean
7DF5AC1C0000
unkown image
page readonly
clean
217D9DB0000
heap private
page read and write
clean
1E0213D0000
unkown image
page readonly
clean
1571B800000
unkown
page read and write
clean
590000
heap default
page read and write
clean
7FF5ADAF1000
unkown image
page readonly
clean
7FF554D3D000
unkown image
page readonly
clean
24250750000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
7FF554E2F000
unkown image
page readonly
clean
7DF5F3110000
unkown image
page readonly
clean
7FF53FF62000
unkown image
page readonly
clean
20D1C5A0000
heap default
page read and write
clean
2DBA0BC0000
unkown image
page read and write
clean
5F0AFFE000
unkown
page read and write
clean
7FF5AE327000
unkown image
page readonly
clean
7FF52C3A5000
unkown image
page readonly
clean
217D9BA4000
heap default
page read and write
clean
223BBA8D000
unkown
page read and write
clean
7FF52C46F000
unkown image
page readonly
clean
7DF56A732000
unkown image
page readonly
clean
24250600000
unkown image
page readonly
clean
7FF54FAA0000
unkown image
page readonly
clean
7DF5C3D22000
unkown image
page readonly
clean
16A9A8A0000
unkown image
page readonly
clean
217D9A70000
unkown
page read and write
clean
16A9AA87000
unkown
page read and write
clean
1E021628000
unkown
page read and write
clean
242505E0000
unkown image
page read and write
clean
1571BA00000
unkown image
page readonly
clean
9FF8AFF000
unkown
page read and write
clean
2DF6D113000
unkown
page read and write
clean
7FF54925F000
unkown image
page readonly
clean
36F3000
heap private
page read and write
clean
7FF554E00000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
3B5F000
unkown
page read and write
clean
6CE000
unkown
page read and write
clean
7DF5C3D32000
unkown image
page readonly
clean
7FF51DDA4000
unkown image
page readonly
clean
7FF5E674F000
unkown image
page readonly
clean
1E02163C000
unkown
page read and write
clean
759000
unkown
page read and write
clean
1571BE60000
unkown
page read and write
clean
7FF53FF53000
unkown image
page readonly
clean
24250860000
unkown
page read and write
clean
5A0000
unkown image
page readonly
clean
7FF5AE41E000
unkown image
page readonly
clean
7FF596809000
unkown image
page readonly
clean
7DF4F9F10000
unkown image
page readonly
clean
2DBA0F02000
unkown
page read and write
clean
7DF5FC052000
unkown image
page readonly
clean
7FF5828E3000
unkown image
page readonly
clean
24250854000
unkown
page read and write
clean
16A9A9D0000
unkown
page read and write
clean
723000
unkown
page read and write
clean
217D9B00000
unkown
page read and write
clean
7FF5E6693000
unkown image
page readonly
clean
8778DFB000
unkown
page read and write
clean
7FF596835000
unkown image
page readonly
clean
7FF582AE6000
unkown image
page readonly
clean
600000
unkown
page execute and read and write
clean
10EF000
unkown image
page readonly
clean
240C3867000
unkown
page read and write
clean
FAE000
unkown
page read and write
clean
223C0E49000
unkown
page read and write
clean
709000
unkown
page read and write
clean
223C1250000
unkown
page read and write
clean
7DF541D80000
unkown image
page readonly
clean
7FF554D27000
unkown image
page readonly
clean
7FF595F61000
unkown image
page readonly
clean
217DA490000
unkown
page read and write
clean
733000
unkown
page read and write
clean
223C1220000
unkown
page read and write
clean
7FF52C2A7000
unkown image
page readonly
clean
7FF52C43E000
unkown image
page readonly
clean
1E0215F0000
unkown
page read and write
clean
7FF5E66B5000
unkown image
page readonly
clean
223C11C0000
unkown
page read and write
clean
36F3000
heap private
page read and write
clean
5F0AB7E000
unkown
page read and write
clean
1571B640000
heap private
page read and write
clean
7FF5AE1CD000
unkown image
page readonly
clean
7FF51DE48000
unkown image
page readonly
clean
7FF53FD60000
unkown image
page readonly
clean
223BBA13000
unkown
page read and write
clean
7FF582A85000
unkown image
page readonly
clean
7DF541D80000
unkown image
page readonly
clean
7FF51DEE8000
unkown image
page readonly
clean
1E021702000
unkown
page read and write
clean
1571B630000
unkown image
page read and write
clean
7FF54945B000
unkown image
page readonly
clean
24250859000
unkown
page read and write
clean
7DF598420000
unkown image
page readonly
clean
7FF582975000
unkown image
page readonly
clean
7FF51DE37000
unkown image
page readonly
clean
2DF6D590000
unkown image
page readonly
clean
7FF51DEFB000
unkown image
page readonly
clean
9FF84FF000
unkown
page read and write
clean
7FF51DD85000
unkown image
page readonly
clean
7FF52DADF000
unkown image
page readonly
clean
72D000
unkown
page read and write
clean
8778AFA000
unkown
page read and write
clean
7FF54922D000
unkown image
page readonly
clean
7FF5AE312000
unkown image
page readonly
clean
240C3800000
unkown
page read and write
clean
7DF5653C0000
unkown image
page readonly
clean
223BB840000
unkown image
page readonly
clean
217D9BB4000
unkown
page read and write
clean
F07530D000
unkown
page read and write
clean
1B012840000
unkown
page read and write
clean
7DF56A732000
unkown image
page readonly
clean
2DF6D000000
unkown
page read and write
clean
543273E000
unkown
page read and write
clean
223BBA55000
unkown
page read and write
clean
10AB000
unkown image
page read and write
clean
7FF5967C7000
unkown image
page readonly
clean
217D9C61000
unkown
page read and write
clean
7FF5968BE000
unkown image
page readonly
clean
217D9FC0000
unkown image
page readonly
clean
7FF5967C3000
unkown image
page readonly
clean
7FF54F2DE000
unkown image
page readonly
clean
7FF52C23C000
unkown image
page readonly
clean
7FF596583000
unkown image
page readonly
clean
1B012750000
unkown image
page readonly
clean
7DF555920000
unkown image
page readonly
clean
6D1000
unkown
page read and write
clean
1B012800000
unkown
page read and write
clean
7FF5DD7F4000
unkown image
page readonly
clean
7FF5AE3FE000
unkown image
page readonly
clean
7FF52C223000
unkown image
page readonly
clean
20D1CA50000
unkown image
page readonly
clean
7DF598430000
unkown image
page readonly
clean
E4E039E000
unkown
page read and write
clean
54327BE000
unkown
page read and write
clean
6FA000
unkown
page read and write
clean
1E021668000
unkown
page read and write
clean
7FF582B1B000
unkown image
page readonly
clean
7DF533820000
unkown image
page readonly
clean
240C3902000
unkown
page read and write
clean
20D1C500000
unkown image
page readonly
clean
7FF5E6647000
unkown image
page readonly
clean
7FF54F9C7000
unkown image
page readonly
clean
7DF5FC060000
unkown image
page readonly
clean
7DF5C3D40000
unkown image
page readonly
clean
7FF5AE31C000
unkown image
page readonly
clean
7FF52C3B3000
unkown image
page readonly
clean
7DF56A720000
unkown image
page readonly
clean
500627D000
unkown
page read and write
clean
24250858000
unkown
page read and write
clean
2DF6D049000
unkown
page read and write
clean
223C0DF0000
unkown
page read and write
clean
7FF51DE7A000
unkown image
page readonly
clean
1571B813000
unkown
page read and write
clean
1000000
unkown image
page readonly
clean
240C3875000
unkown
page read and write
clean
7FF554E2D000
unkown image
page readonly
clean
711000
unkown
page read and write
clean
7DF4AA090000
unkown image
page readonly
clean
7FF5ADF8A000
unkown image
page readonly
clean
4BBE16B000
unkown
page read and write
clean
7FF52C44D000
unkown image
page readonly
clean
7FF53FE93000
unkown image
page readonly
clean
223BBA29000
unkown
page read and write
clean
16A9AF90000
unkown image
page readonly
clean
7FF54944F000
unkown image
page readonly
clean
7FF53FCCB000
unkown image
page readonly
clean
F075C7F000
unkown
page read and write
clean
2DBA0F13000
unkown
page read and write
clean
223BC401000
unkown
page read and write
clean
24250813000
unkown
page read and write
clean
2DF6D04D000
unkown
page read and write
clean
7FF5E6466000
unkown image
page readonly
clean
7FF53FF5A000
unkown image
page readonly
clean
7DF533830000
unkown image
page readonly
clean
7FF52C3A9000
unkown image
page readonly
clean
7FF554AE6000
unkown image
page readonly
clean
2DBA0E00000
unkown
page read and write
clean
7FF51DF14000
unkown image
page readonly
clean
7FF5DD73D000
unkown image
page readonly
clean
7DF598420000
unkown image
page readonly
clean
1B012780000
heap default
page read and write
clean
FAFFCBB000
unkown
page read and write
clean
20D1C840000
heap private
page read and write
clean
1B012847000
unkown
page read and write
clean
7FF52BFEA000
unkown image
page readonly
clean
7DF533840000
unkown image
page readonly
clean
7DF555900000
unkown image
page readonly
clean
1B012858000
unkown
page read and write
clean
A80000
unkown image
page readonly
clean
9FF87FF000
unkown
page read and write
clean
7FF554E2F000
unkown image
page readonly
clean
7DF5653D2000
unkown image
page readonly
clean
7FF554CF0000
unkown image
page readonly
clean
7FF549173000
unkown image
page readonly
clean
630000
unkown
page read and write
clean
36F3000
heap private
page read and write
clean
223C1000000
unkown
page read and write
clean
217D9C57000
unkown
page read and write
clean
7DF555910000
unkown image
page readonly
clean
7FF51DE95000
unkown image
page readonly
clean
7FF51DA08000
unkown image
page readonly
clean
7FF596393000
unkown image
page readonly
clean
7FF53FBB4000
unkown image
page readonly
clean
7FF53FFFB000
unkown image
page readonly
clean
7FF52C344000
unkown image
page readonly
clean
1B012868000
unkown
page read and write
clean
223C0EE0000
unkown
page read and write
clean
223C1200000
unkown
page read and write
clean
6CB000
unkown
page read and write
clean
223BBA9F000
unkown
page read and write
clean
7FF549372000
unkown image
page readonly
clean
7FF52C014000
unkown image
page readonly
clean
20D1C550000
unkown
page read and write
clean
7DF5F3110000
unkown image
page readonly
clean
7FF582A13000
unkown image
page readonly
clean
7DF541D70000
unkown image
page readonly
clean
733000
unkown
page read and write
clean
240C3C00000
unkown image
page readonly
clean
4F0000
unkown
page read and write
clean
7FF5828BD000
unkown image
page readonly
clean
8778EFE000
unkown
page read and write
clean
223BC358000
unkown
page read and write
clean
7FF54F9DC000
unkown image
page readonly
clean
1571B824000
unkown
page read and write
clean
7DF4C1BF0000
unkown image
page readonly
clean
1E021510000
unkown image
page readonly
clean
7DF5F3120000
unkown image
page readonly
clean
733000
unkown
page read and write
clean
242505F0000
heap private
page read and write
clean
62D76FB000
unkown
page read and write
clean
7FF5968CB000
unkown image
page readonly
clean
7FF549474000
unkown image
page readonly
clean
7FF5E651E000
unkown image
page readonly
clean
2DF6CEC0000
heap private
page read and write
clean
223C0F02000
unkown
page read and write
clean
7FF54F17E000
unkown image
page readonly
clean
7DF541D62000
unkown image
page readonly
clean
7FF549222000
unkown image
page readonly
clean
7FF5AE395000
unkown image
page readonly
clean
6E8000
unkown
page read and write
clean
1B01285F000
unkown
page read and write
clean
2DBA0E85000
unkown
page read and write
clean
2425088B000
unkown
page read and write
clean
7FF5E6708000
unkown image
page readonly
clean
7FF51DEF6000
unkown image
page readonly
clean
7DF598430000
unkown image
page readonly
clean
7FF52C15C000
unkown image
page readonly
clean
240C3D80000
unkown image
page readonly
clean
7DF541D60000
unkown image
page readonly
clean
7FF582994000
unkown image
page readonly
clean
2DBA0E13000
unkown
page read and write
clean
223BBA94000
unkown
page read and write
clean
7FF5DD7D6000
unkown image
page readonly
clean
707000
unkown
page read and write
clean
223BBA72000
unkown
page read and write
clean
223BBA7C000
unkown
page read and write
clean
7FF52C46F000
unkown image
page readonly
clean
7DF55EDA0000
unkown image
page readonly
clean
4BBE97E000
unkown
page read and write
clean
7FF554BCD000
unkown image
page readonly
clean
16A9A880000
unkown image
page readonly
clean
7FF54947E000
unkown image
page readonly
clean
8778CFA000
unkown
page read and write
clean
62D73FF000
unkown
page read and write
clean
7FF5E665C000
unkown image
page readonly
clean
7FF582A2C000
unkown image
page readonly
clean
7DF5FC042000
unkown image
page readonly
clean
7FF5DD80F000
unkown image
page readonly
clean
24250908000
unkown
page read and write
clean
7DF541D72000
unkown image
page readonly
clean
7FF5966E3000
unkown image
page readonly
clean
62D757C000
unkown
page read and write
clean
50060FD000
unkown
page read and write
clean
2DBA0C00000
unkown image
page readonly
clean
217D9970000
unkown image
page readonly
clean
7FF5E6433000
unkown image
page readonly
clean
7FF5DD7CF000
unkown image
page readonly
clean
7FF5AE373000
unkown image
page readonly
clean
217D9B00000
unkown
page read and write
clean
223BBC00000
unkown image
page readonly
clean
7FF52C45E000
unkown image
page readonly
clean
223C0E17000
unkown
page read and write
clean
223C0E6E000
unkown
page read and write
clean
7FF5493C5000
unkown image
page readonly
clean
1B012829000
unkown
page read and write
clean
1B012842000
unkown
page read and write
clean
7FF54FAB4000
unkown image
page readonly
clean
7FF5DD80F000
unkown image
page readonly
clean
7FF554E14000
unkown image
page readonly
clean
717000
unkown
page read and write
clean
7FF5AE337000
unkown image
page readonly
clean
7FF53FFE0000
unkown image
page readonly
clean
1571B7A0000
unkown
page read and write
clean
223C0EAD000
unkown
page read and write
clean
223BC318000
unkown
page read and write
clean
7FF582A4D000
unkown image
page readonly
clean
7FF554DFB000
unkown image
page readonly
clean
7FF5963A8000
unkown image
page readonly
clean
7DF5AC1E0000
unkown image
page readonly
clean
7FF554E0D000
unkown image
page readonly
clean
223C1230000
unkown
page read and write
clean
F0757FB000
unkown
page read and write
clean
2DBA1000000
unkown image
page readonly
clean
7FF58296F000
unkown image
page readonly
clean
7FF596813000
unkown image
page readonly
clean
7FF53FF1C000
unkown image
page readonly
clean
7FF5960DF000
unkown image
page readonly
clean
1B01287B000
unkown
page read and write
clean
1E021613000
unkown
page read and write
clean
7DF5AC1D0000
unkown image
page readonly
clean
7FF596896000
unkown image
page readonly
clean
1E021500000
unkown image
page readonly
clean
1B01287E000
unkown
page read and write
clean
10AD000
unkown image
page readonly
clean
7FF5825E9000
unkown image
page readonly
clean
240C3670000
heap default
page read and write
clean
223C0EFE000
unkown
page read and write
clean
7FF54000D000
unkown image
page readonly
clean
24250902000
unkown
page read and write
clean
2DF6D400000
unkown image
page readonly
clean
24250730000
unkown image
page readonly
clean
240C3610000
heap private
page read and write
clean
60C000
unkown
page read and write
clean
6F9000
unkown
page read and write
clean
1E021713000
unkown
page read and write
clean
7FF54F9FD000
unkown image
page readonly
clean
223C1250000
unkown
page read and write
clean
7FF5967FD000
unkown image
page readonly
clean
2710000
heap private
page read and write
clean
7FF52C340000
unkown image
page readonly
clean
223C0E30000
unkown
page read and write
clean
7FF52C330000
unkown image
page readonly
clean
217D9C3F000
unkown
page read and write
clean
7FF52C209000
unkown image
page readonly
clean
1E021C02000
unkown
page read and write
clean
1B012802000
unkown
page read and write
clean
72D000
unkown
page read and write
clean
9FF81FC000
unkown
page read and write
clean
1B01286C000
unkown
page read and write
clean
7DF598412000
unkown image
page readonly
clean
7FF5827D3000
unkown image
page readonly
clean
7FF53FFCF000
unkown image
page readonly
clean
24250C00000
unkown image
page readonly
clean
223BC910000
unkown
page read and write
clean
1B01283A000
unkown
page read and write
clean
7FF53FABF000
unkown image
page readonly
clean
7FF549448000
unkown image
page readonly
clean
7FF582B0E000
unkown image
page readonly
clean
7FF5E63DA000
unkown image
page readonly
clean
75CFBFB000
unkown
page read and write
clean
217D9C57000
unkown
page read and write
clean
24250913000
unkown
page read and write
clean
1E021602000
unkown
page read and write
clean
7FF53FF49000
unkown image
page readonly
clean
7FF54FA35000
unkown image
page readonly
clean
7FF53FEF2000
unkown image
page readonly
clean
7FF52C352000
unkown image
page readonly
clean
2DF6CEB0000
unkown image
page read and write
clean
223C0EA1000
unkown
page read and write
clean
223BC1E3000
unkown
page read and write
clean
1B01284A000
unkown
page read and write
clean
223C0EF7000
unkown
page read and write
clean
7FF52C436000
unkown image
page readonly
clean
223BC1C1000
unkown
page read and write
clean
1571BC00000
unkown image
page readonly
clean
2DBA0BD0000
heap private
page read and write
clean
1E021600000
unkown
page read and write
clean
20D1C4C0000
unkown image
page read and write
clean
20D1C4E0000
unkown image
page readonly
clean
5432CFF000
unkown
page read and write
clean
7FF5967DC000
unkown image
page readonly
clean
7FF53FEE4000
unkown image
page readonly
clean
7DF56A730000
unkown image
page readonly
clean
240C3640000
unkown image
page readonly
clean
7FF582A38000
unkown image
page readonly
clean
7FF53FEE8000
unkown image
page readonly
clean
7FF54FA96000
unkown image
page readonly
clean
2DF6D680000
unkown
page read and write
clean
62D78FE000
unkown
page read and write
clean
223BC202000
unkown
page read and write
clean
7FF582ADF000
unkown image
page readonly
clean
7FF582A17000
unkown image
page readonly
clean
264E000
unkown
page read and write
clean
7FF5DD7C8000
unkown image
page readonly
clean
223BB890000
heap default
page read and write
clean
FD0000
heap private
page read and write
clean
7FF5E5F94000
unkown image
page readonly
clean
24250A00000
unkown image
page readonly
clean
7DF55ED90000
unkown image
page readonly
clean
877917E000
unkown
page read and write
clean
3D5C000
unkown
page read and write
clean
1571C002000
unkown
page read and write
clean
240C3913000
unkown
page read and write
clean
1B012813000
unkown
page read and write
clean
7FF51DE5D000
unkown image
page readonly
clean
223C0E9D000
unkown
page read and write
clean
24250D80000
unkown image
page readonly
clean
7DF5F3120000
unkown image
page readonly
clean
2DF6D055000
unkown
page read and write
clean
1006000
unkown image
page readonly
clean
1B012E50000
unkown image
page readonly
clean
223BBA77000
unkown
page read and write
clean
7FF5AE33C000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
16A9AACB000
unkown
page read and write
clean
1010000
unkown image
page execute read
clean
7FF54FA05000
unkown image
page readonly
clean
7DF55ED82000
unkown image
page readonly
clean
20D1CBD0000
unkown image
page readonly
clean
6AA000
heap default
page read and write
clean
FA803FF000
unkown
page read and write
clean
7DF4962E0000
unkown image
page readonly
clean
62D7AFE000
unkown
page read and write
clean
7FF52BC12000
unkown image
page readonly
clean
223BB870000
unkown image
page readonly
clean
7FF5DD7FE000
unkown image
page readonly
clean
24250800000
unkown
page read and write
clean
223C0DF0000
unkown
page read and write
clean
2DF6D200000
unkown image
page readonly
clean
7FF52BFFF000
unkown image
page readonly
clean
7FF52C46B000
unkown image
page readonly
clean
7FF52C2E4000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
240C3840000
unkown
page read and write
clean
7FF54930E000
unkown image
page readonly
clean
7FF53FFC8000
unkown image
page readonly
clean
2425085E000
unkown
page read and write
clean
240C3802000
unkown
page read and write
clean
7FF596693000
unkown image
page readonly
clean
6DA000
unkown
page read and write
clean
5432AFB000
unkown
page read and write
clean
1571B780000
unkown image
page readonly
clean
1E0213D0000
unkown image
page readonly
clean
7FF53FDA7000
unkown image
page readonly
clean
7FF5ADF8E000
unkown image
page readonly
clean
7FF596888000
unkown image
page readonly
clean
2DF6D08A000
unkown
page read and write
clean
7DF5FC042000
unkown image
page readonly
clean
240C3D90000
unkown image
page readonly
clean
20D1C580000
heap default
page read and write
clean
7FF53FDA9000
unkown image
page readonly
clean
223C1250000
unkown
page read and write
clean
7FF5968B4000
unkown image
page readonly
clean
72D000
unkown
page read and write
clean
223C1130000
unkown
page read and write
clean
7DF56A740000
unkown image
page readonly
clean
7FF51DE65000
unkown image
page readonly
clean
7FF53FD03000
unkown image
page readonly
clean
7FF51D5C1000
unkown image
page readonly
clean
7DF5FC060000
unkown image
page readonly
clean
7FF582A27000
unkown image
page readonly
clean
223BB840000
unkown image
page readonly
clean
7FF59671F000
unkown image
page readonly
clean
7FF5DD71E000
unkown image
page readonly
clean
7FF51DE23000
unkown image
page readonly
clean
223C1120000
unkown
page read and write
clean
7FF51DCFE000
unkown image
page readonly
clean
4BBE67B000
unkown
page read and write
clean
7FF5828EE000
unkown image
page readonly
clean
7FF51DCF3000
unkown image
page readonly
clean
1005000
unkown image
page read and write
clean
223C1121000
unkown
page read and write
clean
7FF549387000
unkown image
page readonly
clean
223BC830000
unkown image
page read and write
clean
7FF52BB20000
unkown image
page readonly
clean
223BC359000
unkown
page read and write
clean
7FF51DF00000
unkown image
page readonly
clean
FA802F7000
unkown
page read and write
clean
223BC313000
unkown
page read and write
clean
2DF6CED0000
unkown image
page readonly
clean
7FF554D73000
unkown image
page readonly
clean
7FF554B28000
unkown image
page readonly
clean
723000
unkown
page read and write
clean
7FF5967D7000
unkown image
page readonly
clean
6FE000
unkown
page read and write
clean
5432C7D000
unkown
page read and write
clean
7FF53FFDB000
unkown image
page readonly
clean
E00000
unkown image
page readonly
clean
7FF5AE23D000
unkown image
page readonly
clean
20D1C510000
unkown image
page readonly
clean
54326BA000
unkown
page read and write
clean
62D79FD000
unkown
page read and write
clean
7FF5DD773000
unkown image
page readonly
clean
7FF54FACF000
unkown image
page readonly
clean
F075B7C000
unkown
page read and write
clean
24250630000
unkown image
page readonly
clean
2425085C000
unkown
page read and write
clean
223BCA40000
unkown image
page readonly
clean
7DF555902000
unkown image
page readonly
clean
7FF51DD43000
unkown image
page readonly
clean
2DF6D050000
unkown
page read and write
clean
20D1C4D0000
unkown image
page readonly
clean
217D9C66000
unkown
page read and write
clean
2DBA1380000
unkown image
page readonly
clean
1000000
unkown image
page readonly
clean
E4E029C000
unkown
page read and write
clean
4BBE87B000
unkown
page read and write
clean
240C3650000
unkown image
page readonly
clean
7FF582AD8000
unkown image
page readonly
clean
240C3620000
unkown image
page readonly
clean
F075977000
unkown
page read and write
clean
7BD000
unkown
page read and write
clean
20D1C4E0000
unkown image
page readonly
clean
217D9DC0000
unkown image
page readonly
clean
5005E7E000
unkown
page read and write
clean
1B012861000
unkown
page read and write
clean
7FF51D5BA000
unkown image
page readonly
clean
223C0E3C000
unkown
page read and write
clean
7DF5C3D22000
unkown image
page readonly
clean
223BC9F0000
unkown image
page readonly
clean
217D9950000
unkown image
page readonly
clean
2DBA1200000
unkown image
page readonly
clean
7DF541D70000
unkown image
page readonly
clean
7FF52C153000
unkown image
page readonly
clean
108E000
unkown image
page write copy
clean
1B012863000
unkown
page read and write
clean
7FF53FD01000
unkown image
page readonly
clean
2DF6D410000
unkown image
page readonly
clean
217D9C25000
unkown
page read and write
clean
E4E077E000
unkown
page read and write
clean
2DF6CF00000
unkown image
page readonly
clean
1E0213B0000
unkown image
page read and write
clean
7DF5AC1C2000
unkown image
page readonly
clean
223BBF90000
unkown image
page readonly
clean
6EE000
unkown
page read and write
clean
223C0ED9000
unkown
page read and write
clean
7DF55ED92000
unkown image
page readonly
clean
8778BFF000
unkown
page read and write
clean
71C000
unkown
page read and write
clean
7FF5968A0000
unkown image
page readonly
clean
7FF5AE325000
unkown image
page readonly
clean
217D9C25000
unkown
page read and write
clean
7FF53FE8E000
unkown image
page readonly
clean
24250620000
unkown image
page readonly
clean
16A9A880000
unkown image
page readonly
clean
1E021400000
unkown image
page readonly
clean
7FF51D9F3000
unkown image
page readonly
clean
7FF52C39D000
unkown image
page readonly
clean
7FF54948D000
unkown image
page readonly
clean
1B012760000
unkown image
page readonly
clean
1003000
unkown image
page readonly
clean
7FF54F180000
unkown image
page readonly
clean
7FF54FA1A000
unkown image
page readonly
clean
7FF5967E8000
unkown image
page readonly
clean
1E021420000
heap default
page read and write
clean
3E5F000
unkown
page read and write
clean
50063FE000
unkown
page read and write
clean
223C0EEA000
unkown
page read and write
clean
7FF51DE69000
unkown image
page readonly
clean
7FF53FF45000
unkown image
page readonly
clean
1B0127B0000
unkown
page read and write
clean
217D9C3F000
unkown
page read and write
clean
7FF554DF6000
unkown image
page readonly
clean
1571B828000
unkown
page read and write
clean
9C000
unkown
page read and write
clean
7FF5AE304000
unkown image
page readonly
clean
1B012865000
unkown
page read and write
clean
7FF51DEEF000
unkown image
page readonly
clean
7DF5653C2000
unkown image
page readonly
clean
7FF54000F000
unkown image
page readonly
clean
7FF5E6685000
unkown image
page readonly
clean
2DBA0E60000
unkown
page read and write
clean
7FF582A59000
unkown image
page readonly
clean
20D1C850000
unkown image
page readonly
clean
9FF82FF000
unkown
page read and write
clean
20D1C845000
heap private
page read and write
clean
1000000
unkown image
page readonly
clean
7DF5C3D30000
unkown image
page readonly
clean
F075A7F000
unkown
page read and write
clean
16A9A870000
heap private
page read and write
clean
7FF5E6734000
unkown image
page readonly
clean
7FF554D13000
unkown image
page readonly
clean
7FF52DADF000
unkown image
page readonly
clean
2DF6D108000
unkown
page read and write
clean
1B01284F000
unkown
page read and write
clean
217D9C67000
unkown
page read and write
clean
2670000
heap private
page read and write
clean
2DBA0BE0000
unkown image
page readonly
clean
7FF5AE3E8000
unkown image
page readonly
clean
7FF53F7B2000
unkown image
page readonly
clean
223C0E00000
unkown
page read and write
clean
7FF51DCCD000
unkown image
page readonly
clean
7FF5E64C7000
unkown image
page readonly
clean
7DF4316F0000
unkown image
page readonly
clean
712000
unkown
page read and write
clean
7DF598422000
unkown image
page readonly
clean
7FF549460000
unkown image
page readonly
clean
7FF51DBE3000
unkown image
page readonly
clean
7FF5E669A000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF5825F8000
unkown image
page readonly
clean
6F4000
unkown
page read and write
clean
F0E000
unkown
page read and write
clean
1E021656000
unkown
page read and write
clean
9FF88FF000
unkown
page read and write
clean
7DF541D72000
unkown image
page readonly
clean
5005EFE000
unkown
page read and write
clean
7DF541D62000
unkown image
page readonly
clean
106A000
unkown image
page readonly
clean
FAFFDBD000
unkown
page read and write
clean
7FF54FA8F000
unkown image
page readonly
clean
20D1C5B0000
heap default
page read and write
clean
7FF5493BD000
unkown image
page readonly
clean
7FF5AE40D000
unkown image
page readonly
clean
7DF5FC050000
unkown image
page readonly
clean
7FF5AE252000
unkown image
page readonly
clean
7FF52C2BF000
unkown image
page readonly
clean
2DBA0C30000
heap default
page read and write
clean
16A9AB13000
unkown
page read and write
clean
7DF43FC30000
unkown image
page readonly
clean
6D1000
unkown
page read and write
clean
7FF5E671B000
unkown image
page readonly
clean
7DF5C3D32000
unkown image
page readonly
clean
7FF5493DA000
unkown image
page readonly
clean
1571B7D0000
unkown
page read and write
clean
1E021800000
unkown image
page readonly
clean
16A9AA13000
unkown
page read and write
clean
223BBB02000
unkown
page read and write
clean
7FF554D5D000
unkown image
page readonly
clean
223C0EF1000
unkown
page read and write
clean
75D01F7000
unkown
page read and write
clean
1B012720000
heap private
page read and write
clean
7FF5AE3EF000
unkown image
page readonly
clean
6FC000
unkown
page read and write
clean
7FF5E663C000
unkown image
page readonly
clean
7FF596805000
unkown image
page readonly
clean
223BC318000
unkown
page read and write
clean
7FF582933000
unkown image
page readonly
clean
24250900000
unkown
page read and write
clean
7FF5E6281000
unkown image
page readonly
clean
6FB000
unkown
page read and write
clean
7DF56A730000
unkown image
page readonly
clean
4BBE77E000
unkown
page read and write
clean
1B012877000
unkown
page read and write
clean
8778E7E000
unkown
page read and write
clean
7FF554D65000
unkown image
page readonly
clean
7FF53FFFE000
unkown image
page readonly
clean
217D9BD2000
unkown
page read and write
clean
2DF6D03C000
unkown
page read and write
clean
16A9A8B0000
unkown image
page readonly
clean
1571B6A0000
heap default
page read and write
clean
7DF5C3D40000
unkown image
page readonly
clean
16A9B300000
unkown
page read and write
clean
7FF52C191000
unkown image
page readonly
clean
7FF51DE73000
unkown image
page readonly
clean
7FF582650000
unkown image
page readonly
clean
7DF4F0FD0000
unkown image
page readonly
clean
7FF596399000
unkown image
page readonly
clean
3C5F000
unkown
page read and write
clean
217D9A90000
unkown
page read and write
clean
7FF54911A000
unkown image
page readonly
clean
7DF55ED90000
unkown image
page readonly
clean
7FF52C0FA000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
223BBF80000
unkown image
page readonly
clean
217DA491000
unkown
page read and write
clean
7FF54F783000
unkown image
page readonly
clean
2DF6D070000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
7FF5968CF000
unkown image
page readonly
clean
7FF52C42F000
unkown image
page readonly
clean
7FF554D95000
unkown image
page readonly
clean
60A000
unkown
page readonly
clean
223BBAFE000
unkown
page read and write
clean
9FF86FE000
unkown
page read and write
clean
E4E087F000
unkown
page read and write
clean
E4E067F000
unkown
page read and write
clean
240C3770000
unkown
page read and write
clean
7FF5AE42F000
unkown image
page readonly
clean
7FF53FF28000
unkown image
page readonly
clean
1B01286D000
unkown
page read and write
clean
19B000
unkown
page read and write
clean
7FF549364000
unkown image
page readonly
clean
F0756FB000
unkown
page read and write
clean
1E021A00000
unkown image
page readonly
clean
75D00FB000
unkown
page read and write
clean
7FF5AE108000
unkown image
page readonly
clean
7FF5E65FD000
unkown image
page readonly
clean
7FF51D9F9000
unkown image
page readonly
clean
7FF52C163000
unkown image
page readonly
clean
217D9BAF000
unkown
page read and write
clean
E4E031E000
unkown
page read and write
clean
6F9000
unkown
page read and write
clean
16A9AABA000
unkown
page read and write
clean
217D9C65000
unkown
page read and write
clean
7DF5653C2000
unkown image
page readonly
clean
7DF4537D0000
unkown image
page readonly
clean
7FF54F25D000
unkown image
page readonly
clean
6E9000
unkown
page read and write
clean
24250650000
heap default
page read and write
clean
223BCD90000
unkown
page read and write
clean
2DF6D100000
unkown
page read and write
clean
5F0AAFE000
unkown
page read and write
clean
1B012902000
unkown
page read and write
clean
F07587E000
unkown
page read and write
clean
108E000
unkown image
page read and write
clean
1571BD90000
unkown image
page readonly
clean
7FF53FEFC000
unkown image
page readonly
clean
1B01285C000
unkown
page read and write
clean
7FF5E6689000
unkown image
page readonly
clean
7FF5E65ED000
unkown image
page readonly
clean
2425083C000
unkown
page read and write
clean
7FF582A55000
unkown image
page readonly
clean
7FF54FA9B000
unkown image
page readonly
clean
223BCA10000
unkown image
page readonly
clean
1B012845000
unkown
page read and write
clean
7FF5AE369000
unkown image
page readonly
clean
7FF5AE2AE000
unkown image
page readonly
clean
7FF54000B000
unkown image
page readonly
clean
7FF5DD753000
unkown image
page readonly
clean
7DF5AC1D2000
unkown image
page readonly
clean
7FF52C16D000
unkown image
page readonly
clean
F07538E000
unkown
page read and write
clean
2DBA0D10000
unkown image
page readonly
clean
1B01285A000
unkown
page read and write
clean
240C3813000
unkown
page read and write
clean
1B01286F000
unkown
page read and write
clean
731000
unkown
page read and write
clean
7FF582AFD000
unkown image
page readonly
clean
2DF6D013000
unkown
page read and write
clean
7FF554D37000
unkown image
page readonly
clean
9FF80FA000
unkown
page read and write
clean
7FF5E6600000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
240C3600000
unkown image
page read and write
clean
7FF59689B000
unkown image
page readonly
clean
2DBA0E66000
unkown
page read and write
clean
217D9BF8000
unkown
page read and write
clean
7FF582A6A000
unkown image
page readonly
clean
7DF56A720000
unkown image
page readonly
clean
6CE000
unkown
page read and write
clean
223BBE00000
unkown image
page readonly
clean
217D9C66000
unkown
page read and write
clean
7FF53FDAD000
unkown image
page readonly
clean
7FF5AE42F000
unkown image
page readonly
clean
240C3620000
unkown image
page readonly
clean
217D9BD2000
unkown
page read and write
clean
16A9AAC2000
unkown
page read and write
clean
2DBA0F08000
unkown
page read and write
clean
7FF54FACB000
unkown image
page readonly
clean
7FF554E1E000
unkown image
page readonly
clean
1571B7D0000
unkown
page read and write
clean
240C385B000
unkown
page read and write
clean
7FF54924C000
unkown image
page readonly
clean
87788F8000
unkown
page read and write
clean
7FF52C454000
unkown image
page readonly
clean
7FF52C15A000
unkown image
page readonly
clean
7FF582A63000
unkown image
page readonly
clean
7FF52BC03000
unkown image
page readonly
clean
7FF53FFED000
unkown image
page readonly
clean
7FF549456000
unkown image
page readonly
clean
223BBA57000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7FF5DD7FB000
unkown image
page readonly
clean
7FF554D69000
unkown image
page readonly
clean
7FF5825E3000
unkown image
page readonly
clean
75CFE7F000
unkown
page read and write
clean
7DF598412000
unkown image
page readonly
clean
7FF5AE3FB000
unkown image
page readonly
clean
6EB000
unkown
page read and write
clean
2DBA0BE0000
unkown image
page readonly
clean
1E02167B000
unkown
page read and write
clean
20D1C5AE000
heap default
page read and write
clean
7FF53FFD6000
unkown image
page readonly
clean
7DF55ED82000
unkown image
page readonly
clean
7FF582B0B000
unkown image
page readonly
clean
1571B680000
unkown image
page readonly
clean
735000
unkown
page read and write
clean
1B012875000
unkown
page read and write
clean
24250829000
unkown
page read and write
clean
223C110E000
unkown
page read and write
clean
7DF5AC1C0000
unkown image
page readonly
clean
707000
unkown
page read and write
clean
223BBA8F000
unkown
page read and write
clean
62D727C000
unkown
page read and write
clean
7FF5DD7ED000
unkown image
page readonly
clean
1E021B80000
unkown image
page readonly
clean
223BBAB0000
unkown
page read and write
clean
16A9AA6E000
unkown
page read and write
clean
7FF5AE246000
unkown image
page readonly
clean
7FF554D7A000
unkown image
page readonly
clean
7FF5E6256000
unkown image
page readonly
clean
87790FE000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7DF533840000
unkown image
page readonly
clean
7FF5E6716000
unkown image
page readonly
clean
7FF53FED0000
unkown image
page readonly
clean
5432BFF000
unkown
page read and write
clean
223C1124000
unkown
page read and write
clean
7FF5ADC74000
unkown image
page readonly
clean
7FF51DF1E000
unkown image
page readonly
clean
7FF52C45B000
unkown image
page readonly
clean
5432A7E000
unkown
page read and write
clean
F07528B000
unkown
page read and write
clean
7FF52C428000
unkown image
page readonly
clean
24250600000
unkown image
page readonly
clean
7FF54FA13000
unkown image
page readonly
clean
223BCA00000
unkown image
page readonly
clean
7FF5ADEDF000
unkown image
page readonly
clean
7FF5493A8000
unkown image
page readonly
clean
1571B670000
unkown image
page readonly
clean
68A000
heap default
page read and write
clean
7FF5AE3F6000
unkown image
page readonly
clean
F20000
heap private
page read and write
clean
7FF55453A000
unkown image
page readonly
clean
7FF5E674D000
unkown image
page readonly
clean
217D9DB5000
heap private
page read and write
clean
7FFB2000
unkown image
page readonly
clean
217D9980000
unkown image
page readonly
clean
16A9AB02000
unkown
page read and write
clean
1B012AD0000
unkown image
page readonly
clean
7FF52C363000
unkown image
page readonly
clean
16A9AAE1000
unkown
page read and write
clean
260F000
unkown
page read and write
clean
7FF54948F000
unkown image
page readonly
clean
FAFFD3E000
unkown
page read and write
clean
7FF51DF2F000
unkown image
page readonly
clean
7FF52C320000
unkown image
page readonly
clean
7FF5493D3000
unkown image
page readonly
clean
601000
unkown
page execute read
clean
50059FB000
unkown
page read and write
clean
FA804FF000
unkown
page read and write
clean
16A9AA3E000
unkown
page read and write
clean
217D9950000
unkown image
page readonly
clean
223C0EFB000
unkown
page read and write
clean
7FF53FDDD000
unkown image
page readonly
clean
1B012831000
unkown
page read and write
clean
7DF56A722000
unkown image
page readonly
clean
7DF5AC1D2000
unkown image
page readonly
clean
1100000
unkown image
page readonly
clean
7DF5F3100000
unkown image
page readonly
clean
240C4002000
unkown
page read and write
clean
724000
unkown
page read and write
clean
7FF5DD745000
unkown image
page readonly
clean
223C1120000
unkown
page read and write
clean
7DF5F3102000
unkown image
page readonly
clean
7FF54FABE000
unkown image
page readonly
clean
16A9B070000
unkown image
page write copy
clean
7FF5AE37A000
unkown image
page readonly
clean
7FF53FF7D000
unkown image
page readonly
clean
7FF5AE1C2000
unkown image
page readonly
clean
2DBA1390000
unkown
page read and write
clean
7FF51DF2F000
unkown image
page readonly
clean
735000
unkown
page read and write
clean
34C000
unkown
page read and write
clean
1B01282D000
unkown
page read and write
clean
1B012730000
unkown image
page readonly
clean
7FF5AE323000
unkown image
page readonly
clean
87789FA000
unkown
page read and write
clean
16A9AA23000
unkown
page read and write
clean
2DBA0E2D000
unkown
page read and write
clean
1B012710000
unkown image
page read and write
clean
5F0ACFE000
unkown
page read and write
clean
240C3A00000
unkown image
page readonly
clean
7FF52C388000
unkown image
page readonly
clean
7FF53FFF4000
unkown image
page readonly
clean
24251002000
unkown
page read and write
clean
7DF4685F0000
unkown image
page readonly
clean
7FF52C161000
unkown image
page readonly
clean
7FF51DE3C000
unkown image
page readonly
clean
7DF533832000
unkown image
page readonly
clean
7FF52C228000
unkown image
page readonly
clean
7FF5AE348000
unkown image
page readonly
clean
2DF6D02A000
unkown
page read and write
clean
223BBB13000
unkown
page read and write
clean
1001000
unkown image
page execute read
clean
7FF52C35C000
unkown image
page readonly
clean
1098000
unkown image
page read and write
clean
7DF5653D0000
unkown image
page readonly
clean
712000
unkown
page read and write
clean
1099000
unkown image
page execute and read and write
clean
2425087E000
unkown
page read and write
clean
7DF555900000
unkown image
page readonly
clean
7FF582B04000
unkown image
page readonly
clean
7FF5E673B000
unkown image
page readonly
clean
217D9930000
unkown image
page read and write
clean
7FF52C3D5000
unkown image
page readonly
clean
109D000
unkown image
page read and write
clean
7FF53FBDB000
unkown image
page readonly
clean
106A000
unkown image
page readonly
clean
7FF53FD33000
unkown image
page readonly
clean
1E0213C0000
heap private
page read and write
clean
7DF5F3100000
unkown image
page readonly
clean
7FF53FE91000
unkown image
page readonly
clean
7FF5AE41B000
unkown image
page readonly
clean
87784FC000
unkown
page read and write
clean
F6E000
unkown
page read and write
clean
7DF55EDA0000
unkown image
page readonly
clean
6EA000
unkown
page read and write
clean
223C1100000
unkown
page read and write
clean
7FF52BFE4000
unkown image
page readonly
clean
36F3000
heap private
page read and write
clean
7FF52BFF0000
unkown image
page readonly
clean
223C1134000
unkown
page read and write
clean
6DB000
unkown
page read and write
clean
7DF55ED80000
unkown image
page readonly
clean
1B012860000
unkown
page read and write
clean
7FF548B4B000
unkown image
page readonly
clean
16A9B202000
unkown
page read and write
clean
10EF000
unkown image
page readonly
clean
62D77FD000
unkown
page read and write
clean
223BB820000
unkown image
page read and write
clean
1571B902000
unkown
page read and write
clean
75CFEFF000
unkown
page read and write
clean
223C1210000
unkown
page read and write
clean
7FF53FF75000
unkown image
page readonly
clean
7FF54946D000
unkown image
page readonly
clean
223BC1E0000
unkown
page read and write
clean
7DF5653C0000
unkown image
page readonly
clean
7DF555912000
unkown image
page readonly
clean
7DF5C3D30000
unkown image
page readonly
clean
7FF52C3BA000
unkown image
page readonly
clean
36F3000
heap private
page read and write
clean
7FF5544DB000
unkown image
page readonly
clean
7FF52C37C000
unkown image
page readonly
clean
7FF54948B000
unkown image
page readonly
clean
7FF54FACF000
unkown image
page readonly
clean
7FF549383000
unkown image
page readonly
clean
7DF5FC052000
unkown image
page readonly
clean
16A9AE00000
unkown image
page readonly
clean
5F0AEFF000
unkown
page read and write
clean
223BCA30000
unkown image
page readonly
clean
1E021663000
unkown
page read and write
clean
223BC302000
unkown
page read and write
clean
600000
unkown
page read and write
clean
500637D000
unkown
page read and write
clean
7DF5AC1E0000
unkown image
page readonly
clean
2DF6D802000
unkown
page read and write
clean
5F0AA7B000
unkown
page read and write
clean
712000
unkown
page read and write
clean
5F0ADFE000
unkown
page read and write
clean
7FF5E5EE1000
unkown image
page readonly
clean
7FF52C367000
unkown image
page readonly
clean
60E000
unkown
page readonly
clean
1571B802000
unkown
page read and write
clean
217D9C65000
unkown
page read and write
clean
7DF598410000
unkown image
page readonly
clean
1B012730000
unkown image
page readonly
clean
5005FFE000
unkown
page read and write
clean
7DF5653D0000
unkown image
page readonly
clean
223C1108000
unkown
page read and write
clean
1094000
unkown image
page write copy
clean
2DF6D102000
unkown
page read and write
clean
223BBAA1000
unkown
page read and write
clean
7FF59688F000
unkown image
page readonly
clean
7FF51DF0D000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
24250848000
unkown
page read and write
clean
223BB9A0000
unkown image
page read and write
clean
7FF51DD7F000
unkown image
page readonly
clean
217D9940000
unkown image
page readonly
clean
7FF53FD31000
unkown image
page readonly
clean
7FF54F9E8000
unkown image
page readonly
clean
1093000
unkown image
page read and write
clean
223BB970000
unkown image
page readonly
clean
223BB830000
heap private
page read and write
clean
7DF463290000
unkown image
page readonly
clean
7FF51DE27000
unkown image
page readonly
clean
7DF598410000
unkown image
page readonly
clean
7DF5C3D20000
unkown image
page readonly
clean
7FF59681A000
unkown image
page readonly
clean
1B012790000
unkown image
page readonly
clean
7FF5AE42D000
unkown image
page readonly
clean
7FF52BFF7000
unkown image
page readonly
clean
7FF52BC05000
unkown image
page readonly
clean
62D767D000
unkown
page read and write
clean
7DF533832000
unkown image
page readonly
clean
223BC300000
unkown
page read and write
clean
7FF51DD1E000
unkown image
page readonly
clean
5EE000
unkown
page read and write
clean
7FF549256000
unkown image
page readonly
clean
7DF533822000
unkown image
page readonly
clean
223BC215000
unkown
page read and write
clean
7FF54947B000
unkown image
page readonly
clean
7FF52C204000
unkown image
page readonly
clean
7FF554E1B000
unkown image
page readonly
clean
7DF533822000
unkown image
page readonly
clean
7FF52C348000
unkown image
page readonly
clean
7FF596744000
unkown image
page readonly
clean
7DF5AC1D0000
unkown image
page readonly
clean
7FF5DD775000
unkown image
page readonly
clean
2DBA0E29000
unkown
page read and write
clean
7DF55ED80000
unkown image
page readonly
clean
1571B82A000
unkown
page read and write
clean
1571B7D0000
unkown
page read and write
clean
2DBA0E52000
unkown
page read and write
clean
1B012846000
unkown
page read and write
clean
7FF54948F000
unkown image
page readonly
clean
7DF5653E0000
unkown image
page readonly
clean
7FF5E673E000
unkown image
page readonly
clean
4F0000
unkown
page read and write
clean
7FF5DD749000
unkown image
page readonly
clean
7FF5966BE000
unkown image
page readonly
clean
7FF5E674F000
unkown image
page readonly
clean
223BBA00000
unkown
page read and write
clean
877947E000
unkown
page read and write
clean
723000
unkown
page read and write
clean
1E0213F0000
unkown image
page readonly
clean
217DA491000
unkown
page read and write
clean
7FF5E6607000
unkown image
page readonly
clean
7FF59669E000
unkown image
page readonly
clean
1E021700000
unkown
page read and write
clean
7FF5E671E000
unkown image
page readonly
clean
223BC1F0000
unkown
page read and write
clean
6F2000
unkown
page read and write
clean
217D9BB0000
unkown
page read and write
clean
7FF52C12F000
unkown image
page readonly
clean
7DF5AC1C2000
unkown image
page readonly
clean
217D9B70000
heap default
page read and write
clean
7FF52BFA1000
unkown image
page readonly
clean
7FF554DE8000
unkown image
page readonly
clean
7FF5E6657000
unkown image
page readonly
clean
6B3000
heap default
page read and write
clean
7FF52BF76000
unkown image
page readonly
clean
7FF595F5B000
unkown image
page readonly
clean
FA800FC000
unkown
page read and write
clean
1B012CD0000
unkown image
page readonly
clean
10AD000
unkown image
page readonly
clean
217D9B00000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
715000
unkown
page read and write
clean
223BBA3C000
unkown
page read and write
clean
2DF6CF20000
heap default
page read and write
clean
7FF58290E000
unkown image
page readonly
clean
7FF5AE2A4000
unkown image
page readonly
clean
610000
unkown
page execute and read and write
clean
7DF56A740000
unkown image
page readonly
clean
2DBA1402000
unkown
page read and write
clean
7FF54000F000
unkown image
page readonly
clean
240C3750000
unkown image
page readonly
clean
1B012883000
unkown
page read and write
clean
2DBA0C10000
unkown image
page readonly
clean
1B01283D000
unkown
page read and write
clean
217DA140000
unkown image
page readonly
clean
2DF6CEF0000
unkown image
page readonly
clean
217D9BF8000
unkown
page read and write
clean
7FF549398000
unkown image
page readonly
clean
7FF53FF07000
unkown image
page readonly
clean
7DF5FC040000
unkown image
page readonly
clean
75D03FE000
unkown
page read and write
clean
7FF53FF03000
unkown image
page readonly
clean
7FF5AE365000
unkown image
page readonly
clean
715000
unkown
page read and write
clean
7DF5FC040000
unkown image
page readonly
clean
1B013002000
unkown
page read and write
clean
7FF582AEB000
unkown image
page readonly
clean
7DF555912000
unkown image
page readonly
clean
7FF54937C000
unkown image
page readonly
clean
75D02FE000
unkown
page read and write
clean
16A9AF80000
unkown image
page readonly
clean
223BC200000
unkown
page read and write
clean
7FF5E6632000
unkown image
page readonly
clean
E4E07FE000
unkown
page read and write
clean
500617F000
unkown
page read and write
clean
7FF54FA88000
unkown image
page readonly
clean
7FF59666D000
unkown image
page readonly
clean
7DF5653E0000
unkown image
page readonly
clean
71F000
unkown
page read and write
clean
7FF5AE0F6000
unkown image
page readonly
clean
7FF54FA09000
unkown image
page readonly
clean
240C3829000
unkown
page read and write
clean
223BC800000
unkown
page read and write
clean
16A9A860000
unkown image
page read and write
clean
707000
unkown
page read and write
clean
7FF5968CF000
unkown image
page readonly
clean
5432B7C000
unkown
page read and write
clean
7FF5ADC40000
unkown image
page readonly
clean
7FF52C377000
unkown image
page readonly
clean
223BB860000
unkown image
page readonly
clean
20D1C530000
unkown
page read and write
clean
7DF5F3112000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
8778F7F000
unkown
page read and write
clean
7FF53FDA2000
unkown image
page readonly
clean
223C0DD0000
unkown
page read and write
clean
7FF52C1C0000
unkown image
page readonly
clean
7FE000
unkown
page read and write
clean
4F0000
unkown
page read and write
clean
6B7000
unkown
page read and write
clean
C80000
unkown image
page readonly
clean
2DBA0E02000
unkown
page read and write
clean
7FF5968BB000
unkown image
page readonly
clean
7DF533820000
unkown image
page readonly
clean
1571B650000
unkown image
page readonly
clean
7DF555902000
unkown image
page readonly
clean
2DBA0F00000
unkown
page read and write
clean
7FF5E667D000
unkown image
page readonly
clean
7FF54F86D000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF54939C000
unkown image
page readonly
clean
2DBA0E3C000
unkown
page read and write
clean
7DF555920000
unkown image
page readonly
clean
7DF555910000
unkown image
page readonly
clean
7FF52C327000
unkown image
page readonly
clean
16A9A8D0000
heap default
page read and write
clean
9FF83FE000
unkown
page read and write
clean
707000
unkown
page read and write
clean
1571B85C000
unkown
page read and write
clean
223BCA20000
unkown image
page readonly
clean
7FF554DEF000
unkown image
page readonly
clean
595000
heap default
page read and write
clean
735000
unkown
page read and write
clean
16A9AA00000
unkown
page read and write
clean
7FF51DF2B000
unkown image
page readonly
clean
7FF52C177000
unkown image
page readonly
clean
7FF5AE414000
unkown image
page readonly
clean
16A9AC00000
unkown image
page readonly
clean
7DF5C3D20000
unkown image
page readonly
clean
1090000
unkown image
page write copy
clean
9FF7CDC000
unkown
page read and write
clean
7FF52C31D000
unkown image
page readonly
clean
7FF5493C9000
unkown image
page readonly
clean
348000
unkown
page read and write
clean
62D707C000
unkown
page read and write
clean
2680000
unkown
page read and write
clean
1001000
unkown image
page execute read
clean
223BB990000
unkown
page read and write
clean
62D74FF000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
217D9BB4000
unkown
page read and write
clean
7FF5E672D000
unkown image
page readonly
clean
7FF52C43B000
unkown image
page readonly
clean
24250802000
unkown
page read and write
clean
715000
unkown
page read and write
clean
7FF52BF1F000
unkown image
page readonly
clean
2425085D000
unkown
page read and write
clean
7DF55ED92000
unkown image
page readonly
clean
There are 1210 hidden memdumps, click here to show them.