IOCReport

loading gif

Files

File Path
Type
Category
Malicious
PiSUfsy.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{435219D0-125B-11EC-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{6953F0C7-125B-11EC-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{435219D2-125B-11EC-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{6953F0C9-125B-11EC-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\AppData\Local\Temp\~DF052200E5A2FBE4F5.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF0F34E919A9CE89F7.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF962424A3C5B5AD0F.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFEEC0DD00867AC61A.TMP
data
dropped
clean
There are 19 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\PiSUfsy.exe
'C:\Users\user\Desktop\PiSUfsy.exe'
malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:3040 CREDAT:17410 /prefetch:2
malicious
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:6724 CREDAT:17410 /prefetch:2
malicious
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean

URLs

Name
IP
Malicious
https://haverit.xyz/index.htm
unknown
malicious
https://haverit.xyz/index.htmdex.htm
unknown
malicious
https://haverit.xyz
unknown
malicious
https://haverit.xyz/index.htmRoot
unknown
malicious
http://www.nytimes.com/
unknown
clean
https://sectigo.com/CPS0
unknown
clean
http://ocsp.sectigo.com0
unknown
clean
http://%s=%s&file://&os=%u.%u_%u_%u_x%uindex.html;
unknown
clean
http://www.youtube.com/
unknown
clean
http://www.wikipedia.com/
unknown
clean
http://www.amazon.com/
unknown
clean
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
unknown
clean
http://www.live.com/
unknown
clean
http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
unknown
clean
http://www.reddit.com/
unknown
clean
http://www.twitter.com/
unknown
clean
http://www.google.com/
unknown
clean
There are 7 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
haverit.xyz
unknown
malicious

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{435219D0-125B-11EC-90E4-ECF4BB862DED}
clean
C:\Program Files\internet explorer\iexplore.exe
AdminActive
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingBitmap
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingRandomizedBitmap
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
{6953F0C7-125B-11EC-90E4-ECF4BB862DED}
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
There are 20 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
35D0000
heap private
page read and write
malicious
9A7D8FB000
unkown
page read and write
clean
21931D40000
unkown image
page readonly
clean
25CEB413000
unkown
page read and write
clean
603000
unkown
page read and write
clean
21936423000
unkown
page read and write
clean
7FF4F6A77000
unkown image
page readonly
clean
219364DC000
unkown
page read and write
clean
247A5A2A000
unkown
page read and write
clean
7FF553B6C000
unkown image
page readonly
clean
2497CC20000
heap private
page read and write
clean
7FF553B7C000
unkown image
page readonly
clean
7FF50306C000
unkown image
page readonly
clean
603000
unkown
page read and write
clean
247059D0000
unkown image
page readonly
clean
7FF510D89000
unkown image
page readonly
clean
7DF585B60000
unkown image
page readonly
clean
2497CBD0000
unkown
page read and write
clean
7DF523982000
unkown image
page readonly
clean
7FF5246C6000
unkown image
page readonly
clean
21930E7A000
unkown
page read and write
clean
24FD8400000
unkown
page read and write
clean
6F6DD7E000
unkown
page read and write
clean
7DF503A62000
unkown image
page readonly
clean
7DF501010000
unkown image
page readonly
clean
7FF573475000
unkown image
page readonly
clean
219364F0000
unkown
page read and write
clean
20C936B000
unkown
page read and write
clean
247A5850000
heap default
page read and write
clean
7FF5737DC000
unkown image
page readonly
clean
21931559000
unkown
page read and write
clean
7DF503A60000
unkown image
page readonly
clean
7FF4F12D2000
unkown image
page readonly
clean
7DF585B70000
unkown image
page readonly
clean
7FF4F175E000
unkown image
page readonly
clean
219364F7000
unkown
page read and write
clean
7FF4F16A5000
unkown image
page readonly
clean
35D3000
heap private
page read and write
clean
21930E7C000
unkown
page read and write
clean
7FF57379F000
unkown image
page readonly
clean
247A5830000
unkown image
page readonly
clean
7DF501022000
unkown image
page readonly
clean
7FF4F6D65000
unkown image
page readonly
clean
490000
unkown
page execute and read and write
clean
7FF52457E000
unkown image
page readonly
clean
7FF5EA1C0000
unkown image
page readonly
clean
192FCF30000
unkown image
page write copy
clean
7FF4F6A63000
unkown image
page readonly
clean
25CEB471000
unkown
page read and write
clean
7FF4F6BF0000
unkown image
page readonly
clean
7FF502EBE000
unkown image
page readonly
clean
7DF585B62000
unkown image
page readonly
clean
25CEB500000
unkown
page read and write
clean
CFE000
unkown
page read and write
clean
7DF523980000
unkown image
page readonly
clean
FEE000
unkown
page read and write
clean
7FF4F6D0C000
unkown image
page readonly
clean
7FF5737CC000
unkown image
page readonly
clean
6C05FFF000
unkown
page read and write
clean
21936461000
unkown
page read and write
clean
7FF4F166D000
unkown image
page readonly
clean
7DF536AB2000
unkown image
page readonly
clean
7DF585B52000
unkown image
page readonly
clean
21C6AC29000
unkown
page read and write
clean
AA8C0FE000
unkown
page read and write
clean
247A5F80000
unkown image
page readonly
clean
219362E0000
unkown
page read and write
clean
21930E58000
unkown
page read and write
clean
21930E72000
unkown
page read and write
clean
7FF4F16B9000
unkown image
page readonly
clean
7DF509122000
unkown image
page readonly
clean
35D3000
heap private
page read and write
clean
7FFD0000
unkown image
page readonly
clean
6C064FF000
unkown
page read and write
clean
7DF503A70000
unkown image
page readonly
clean
192FC8CA000
unkown
page read and write
clean
7FF5EA246000
unkown image
page readonly
clean
24705A20000
heap default
page read and write
clean
203DE7F000
unkown
page read and write
clean
203D87E000
unkown
page read and write
clean
7FF4F6D38000
unkown image
page readonly
clean
7FF4F164C000
unkown image
page readonly
clean
7FF503094000
unkown image
page readonly
clean
8CF651B000
unkown
page read and write
clean
24705C7B000
unkown
page read and write
clean
6DAE97D000
unkown
page read and write
clean
20C9EFF000
unkown
page read and write
clean
6DAE4FF000
unkown
page read and write
clean
7DF5239A0000
unkown image
page readonly
clean
7FF524726000
unkown image
page readonly
clean
7FF511681000
unkown image
page readonly
clean
20C98FE000
unkown
page read and write
clean
7FF4F6B8E000
unkown image
page readonly
clean
7FF5E9FEA000
unkown image
page readonly
clean
25122170000
unkown image
page readonly
clean
25CEB2E0000
heap private
page read and write
clean
7FF4F16D1000
unkown image
page readonly
clean
4A0000
heap private
page read and write
clean
7DF5153F2000
unkown image
page readonly
clean
7FF4F69A0000
unkown image
page readonly
clean
25122070000
unkown image
page readonly
clean
21931380000
unkown image
page readonly
clean
7DF503A80000
unkown image
page readonly
clean
25122246000
unkown
page read and write
clean
7DF5FC5C0000
unkown image
page readonly
clean
7DF536AB2000
unkown image
page readonly
clean
7FF4EEC8C000
unkown image
page readonly
clean
192FC7A0000
unkown
page read and write
clean
7FF502F37000
unkown image
page readonly
clean
6DAE77B000
unkown
page read and write
clean
7DF515400000
unkown image
page readonly
clean
7FF51160C000
unkown image
page readonly
clean
7DF5153F0000
unkown image
page readonly
clean
21C6AB00000
unkown image
page readonly
clean
7FF553BF9000
unkown image
page readonly
clean
AA8BB0B000
unkown
page read and write
clean
7FF4F163A000
unkown image
page readonly
clean
21930C20000
unkown image
page readonly
clean
247A5F90000
unkown image
page readonly
clean
6C0627E000
unkown
page read and write
clean
219362A8000
unkown
page read and write
clean
247A5E00000
unkown image
page readonly
clean
247059C0000
heap private
page read and write
clean
AA8C2FF000
unkown
page read and write
clean
247A6060000
unkown
page read and write
clean
7FF573413000
unkown image
page readonly
clean
7FF553B08000
unkown image
page readonly
clean
24FD82A0000
heap default
page read and write
clean
7FF553B2E000
unkown image
page readonly
clean
6C060FA000
unkown
page read and write
clean
24705C7D000
unkown
page read and write
clean
7DFB4F9AF000
unkown image
page readonly
clean
B30000
unkown image
page readonly
clean
21C6AC3D000
unkown
page read and write
clean
7FF502E7F000
unkown image
page readonly
clean
7FF4F16CD000
unkown image
page readonly
clean
6C058DB000
unkown
page read and write
clean
219362C0000
unkown
page read and write
clean
7FF5EA1EA000
unkown image
page readonly
clean
6DAE877000
unkown
page read and write
clean
7FF4EEC9C000
unkown image
page readonly
clean
7FF4F1704000
unkown image
page readonly
clean
2497CAE0000
unkown image
page readonly
clean
7DF565F10000
unkown image
page readonly
clean
7FF5EA219000
unkown image
page readonly
clean
4BC000
unkown
page read and write
clean
7FF4F6C9C000
unkown image
page readonly
clean
6F6DBFB000
unkown
page read and write
clean
21930E8E000
unkown
page read and write
clean
7FF553B49000
unkown image
page readonly
clean
24705BF0000
unkown
page read and write
clean
219363D0000
unkown
page read and write
clean
510000
unkown
page execute and read and write
clean
247A6202000
unkown
page read and write
clean
7FF55391A000
unkown image
page readonly
clean
620000
unkown
page read and write
clean
61F000
unkown
page read and write
clean
7FF524736000
unkown image
page readonly
clean
21930E29000
unkown
page read and write
clean
4BA000
unkown
page readonly
clean
247A5980000
unkown
page read and write
clean
25122A02000
unkown
page read and write
clean
AA8BB8E000
unkown
page read and write
clean
2497CAC0000
unkown image
page readonly
clean
7FF4F6A68000
unkown image
page readonly
clean
7DF509130000
unkown image
page readonly
clean
7FF5242B0000
unkown image
page readonly
clean
7DF503A72000
unkown image
page readonly
clean
35D3000
heap private
page read and write
clean
1001000
unkown image
page execute read
clean
7FF4F6E29000
unkown image
page readonly
clean
6C067FE000
unkown
page read and write
clean
7DF565EF2000
unkown image
page readonly
clean
7FF511689000
unkown image
page readonly
clean
7FF4F152B000
unkown image
page readonly
clean
20C9CFD000
unkown
page read and write
clean
7FF4F16E6000
unkown image
page readonly
clean
7FF4F1577000
unkown image
page readonly
clean
7FF5EA255000
unkown image
page readonly
clean
7FF573424000
unkown image
page readonly
clean
7FF511606000
unkown image
page readonly
clean
21931D70000
unkown image
page readonly
clean
21930BF0000
unkown image
page readonly
clean
614000
unkown
page read and write
clean
7FF4F6A36000
unkown image
page readonly
clean
AA8BE7E000
unkown
page read and write
clean
7FF5247B9000
unkown image
page readonly
clean
1094000
unkown image
page write copy
clean
2497CBF0000
unkown
page read and write
clean
9A7DB7F000
unkown
page read and write
clean
7FF4F6CE1000
unkown image
page readonly
clean
192FCE50000
unkown image
page readonly
clean
7FF4EED0E000
unkown image
page readonly
clean
7FF503090000
unkown image
page readonly
clean
247A5800000
unkown image
page readonly
clean
7FF553B97000
unkown image
page readonly
clean
5DB000
unkown
page read and write
clean
21C6AC13000
unkown
page read and write
clean
21936110000
unkown
page read and write
clean
7FF5246B2000
unkown image
page readonly
clean
7DF401930000
unkown image
page readonly
clean
CB0000
unkown image
page readonly
clean
7FF4F6CF7000
unkown image
page readonly
clean
2510000
unkown
page read and write
clean
24705C7A000
unkown
page read and write
clean
9C000
unkown
page read and write
clean
7FF4F13B6000
unkown image
page readonly
clean
7FF4F6AD7000
unkown image
page readonly
clean
21930D20000
unkown image
page readonly
clean
192FC868000
unkown
page read and write
clean
21C6AC77000
unkown
page read and write
clean
7DF503A60000
unkown image
page readonly
clean
7FF511350000
unkown image
page readonly
clean
219362D0000
unkown
page read and write
clean
24705C2D000
unkown
page read and write
clean
7FF553BF1000
unkown image
page readonly
clean
7FF4F6AE5000
unkown image
page readonly
clean
644000
unkown
page read and write
clean
7FF4F6D03000
unkown image
page readonly
clean
7DF5FC5D0000
unkown image
page readonly
clean
7DF565EF0000
unkown image
page readonly
clean
21C6AB10000
unkown image
page readonly
clean
24705C65000
unkown
page read and write
clean
7DF585B70000
unkown image
page readonly
clean
7FF553B5D000
unkown image
page readonly
clean
7FF5737E5000
unkown image
page readonly
clean
192FC740000
unkown image
page readonly
clean
7FF50301A000
unkown image
page readonly
clean
7FF5245F7000
unkown image
page readonly
clean
1090000
unkown image
page write copy
clean
2512227D000
unkown
page read and write
clean
7FF4EEC2A000
unkown image
page readonly
clean
7FF5246EE000
unkown image
page readonly
clean
7FF4EEC55000
unkown image
page readonly
clean
25CEB502000
unkown
page read and write
clean
247A57F0000
heap private
page read and write
clean
7FFB0000
unkown image
page readonly
clean
21C6AAE0000
unkown image
page readonly
clean
192FC800000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
24FD8800000
unkown image
page readonly
clean
21936502000
unkown
page read and write
clean
24FD843C000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
603000
unkown
page read and write
clean
21931518000
unkown
page read and write
clean
20CA0FE000
unkown
page read and write
clean
6C065FD000
unkown
page read and write
clean
7FF502FF0000
unkown image
page readonly
clean
7DF5FC5C2000
unkown image
page readonly
clean
7FF4F6D79000
unkown image
page readonly
clean
50D000
unkown
page read and write
clean
7FF503035000
unkown image
page readonly
clean
7FF502C00000
unkown image
page readonly
clean
24706180000
unkown image
page readonly
clean
7FF57378E000
unkown image
page readonly
clean
7FF4F12CE000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF5246F5000
unkown image
page readonly
clean
7FF5246DA000
unkown image
page readonly
clean
7FF524754000
unkown image
page readonly
clean
7FF4F6CD7000
unkown image
page readonly
clean
7FF573750000
unkown image
page readonly
clean
3B3F000
unkown
page read and write
clean
21930D30000
unkown image
page readonly
clean
21C6B402000
unkown
page read and write
clean
530000
unkown
page read and write
clean
7DF565F02000
unkown image
page readonly
clean
247A57E0000
unkown image
page read and write
clean
7FF5245F1000
unkown image
page readonly
clean
25122288000
unkown
page read and write
clean
7DF4132C0000
unkown image
page readonly
clean
480000
unkown image
page readonly
clean
7FF4F16D6000
unkown image
page readonly
clean
7FF5115ED000
unkown image
page readonly
clean
25122090000
heap default
page read and write
clean
24705C45000
unkown
page read and write
clean
219363E0000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF502C95000
unkown image
page readonly
clean
7FF511624000
unkown image
page readonly
clean
7FF4F6DC4000
unkown image
page readonly
clean
5EE000
unkown
page read and write
clean
7FF4F6961000
unkown image
page readonly
clean
7FF503066000
unkown image
page readonly
clean
21936502000
unkown
page read and write
clean
7DF501022000
unkown image
page readonly
clean
7FF524589000
unkown image
page readonly
clean
7FF4EEC69000
unkown image
page readonly
clean
7FF511337000
unkown image
page readonly
clean
7FF4F69B7000
unkown image
page readonly
clean
203D18C000
unkown
page read and write
clean
24705E00000
unkown image
page readonly
clean
10AD000
unkown image
page readonly
clean
192FC902000
unkown
page read and write
clean
21930BF0000
unkown image
page readonly
clean
7FF5115C5000
unkown image
page readonly
clean
7FF5EA205000
unkown image
page readonly
clean
7FF553B94000
unkown image
page readonly
clean
7FF4F6BDC000
unkown image
page readonly
clean
25122030000
heap private
page read and write
clean
7FF4F6BE8000
unkown image
page readonly
clean
219364FD000
unkown
page read and write
clean
5D0000
unkown
page read and write
clean
6C0647E000
unkown
page read and write
clean
7FF4F14EF000
unkown image
page readonly
clean
4C0000
heap default
page read and write
clean
203D9FC000
unkown
page read and write
clean
2193644D000
unkown
page read and write
clean
7FF503008000
unkown image
page readonly
clean
5E9000
unkown
page read and write
clean
7FF57384E000
unkown image
page readonly
clean
7FF511578000
unkown image
page readonly
clean
2497CCC0000
heap default
page read and write
clean
7DF523980000
unkown image
page readonly
clean
6DAEB7E000
unkown
page read and write
clean
7FF4F1496000
unkown image
page readonly
clean
7DF536AC2000
unkown image
page readonly
clean
25122227000
unkown
page read and write
clean
25CEB370000
unkown
page read and write
clean
7FF5EA260000
unkown image
page readonly
clean
7DF5153F0000
unkown image
page readonly
clean
219364EE000
unkown
page read and write
clean
3C3E000
unkown
page read and write
clean
7FF5EA1D8000
unkown image
page readonly
clean
21931D50000
unkown image
page readonly
clean
219362AE000
unkown
page read and write
clean
6C063FF000
unkown
page read and write
clean
8CF687E000
unkown
page read and write
clean
21936440000
unkown
page read and write
clean
24705C49000
unkown
page read and write
clean
106A000
unkown image
page readonly
clean
21930BE0000
heap private
page read and write
clean
5DE000
unkown
page read and write
clean
25122200000
unkown
page read and write
clean
21C6AC02000
unkown
page read and write
clean
247A5A13000
unkown
page read and write
clean
6F6DA7E000
unkown
page read and write
clean
7DF503A70000
unkown image
page readonly
clean
24705C44000
unkown
page read and write
clean
247A5B02000
unkown
page read and write
clean
7DF509132000
unkown image
page readonly
clean
247A5820000
unkown image
page readonly
clean
6080FFF000
unkown
page read and write
clean
25122600000
unkown image
page readonly
clean
219362A0000
unkown
page read and write
clean
7FF5EA2BE000
unkown image
page readonly
clean
7FF553A37000
unkown image
page readonly
clean
108E000
unkown image
page write copy
clean
7FF553700000
unkown image
page readonly
clean
24706202000
unkown
page read and write
clean
7FF511580000
unkown image
page readonly
clean
219362C1000
unkown
page read and write
clean
5FF000
unkown
page read and write
clean
7FF4F6D5E000
unkown image
page readonly
clean
24FD8486000
unkown
page read and write
clean
7FF553B90000
unkown image
page readonly
clean
7DF565F00000
unkown image
page readonly
clean
7FF553B66000
unkown image
page readonly
clean
7FF4F1700000
unkown image
page readonly
clean
247A5950000
unkown
page read and write
clean
203D77F000
unkown
page read and write
clean
192FC780000
unkown image
page readonly
clean
24FD8C02000
unkown
page read and write
clean
7FF4F6D22000
unkown image
page readonly
clean
24705C2E000
unkown
page read and write
clean
600000
unkown
page read and write
clean
25CEB482000
unkown
page read and write
clean
7FF4F6AAC000
unkown image
page readonly
clean
4BE000
unkown
page readonly
clean
61F000
unkown
page read and write
clean
7FF4F1660000
unkown image
page readonly
clean
219364AC000
unkown
page read and write
clean
7DF536AB0000
unkown image
page readonly
clean
24705C46000
unkown
page read and write
clean
24705C25000
unkown
page read and write
clean
192FD100000
unkown
page read and write
clean
7FF503076000
unkown image
page readonly
clean
25122020000
unkown image
page read and write
clean
21C6AAC0000
unkown image
page read and write
clean
7FF52473C000
unkown image
page readonly
clean
7FF50305D000
unkown image
page readonly
clean
24705C77000
unkown
page read and write
clean
7FF4F133F000
unkown image
page readonly
clean
219362E4000
unkown
page read and write
clean
7DF515410000
unkown image
page readonly
clean
7FF5EA22D000
unkown image
page readonly
clean
7FF52453F000
unkown image
page readonly
clean
7FF511615000
unkown image
page readonly
clean
644000
unkown
page read and write
clean
25122256000
unkown
page read and write
clean
1098000
unkown image
page read and write
clean
7DF503A72000
unkown image
page readonly
clean
7FF4F69BE000
unkown image
page readonly
clean
7FF4F6ADE000
unkown image
page readonly
clean
25CEB486000
unkown
page read and write
clean
24FD8240000
heap private
page read and write
clean
7DF523992000
unkown image
page readonly
clean
5DC000
unkown
page read and write
clean
219362C4000
unkown
page read and write
clean
25122213000
unkown
page read and write
clean
7DF585B50000
unkown image
page readonly
clean
6F6DE77000
unkown
page read and write
clean
7FF5EA04F000
unkown image
page readonly
clean
24705C6D000
unkown
page read and write
clean
21C6AAD0000
heap private
page read and write
clean
7FF4F669C000
unkown image
page readonly
clean
7FF5539E8000
unkown image
page readonly
clean
192FC8C0000
unkown
page read and write
clean
9A7D39B000
unkown
page read and write
clean
106A000
unkown image
page readonly
clean
7FF4F6D18000
unkown image
page readonly
clean
7FF4F168A000
unkown image
page readonly
clean
25122780000
unkown image
page readonly
clean
7FF5EA236000
unkown image
page readonly
clean
7FF5737D6000
unkown image
page readonly
clean
1099000
unkown image
page execute and read and write
clean
7FF573859000
unkown image
page readonly
clean
7FF502820000
unkown image
page readonly
clean
203DA7B000
unkown
page read and write
clean
2497CAA0000
unkown image
page read and write
clean
192FC720000
unkown image
page readonly
clean
25CEB43C000
unkown
page read and write
clean
7DF3FEEE0000
unkown image
page readonly
clean
35D3000
heap private
page read and write
clean
7FF5539C9000
unkown image
page readonly
clean
21930E90000
unkown
page read and write
clean
7DF503A62000
unkown image
page readonly
clean
7FF4F1342000
unkown image
page readonly
clean
7DF509120000
unkown image
page readonly
clean
21930EA0000
unkown
page read and write
clean
7DF585B52000
unkown image
page readonly
clean
7FF52462C000
unkown image
page readonly
clean
7FF573859000
unkown image
page readonly
clean
7FF573768000
unkown image
page readonly
clean
21930EFF000
unkown
page read and write
clean
7FF4F6965000
unkown image
page readonly
clean
4C5000
heap default
page read and write
clean
7FF573851000
unkown image
page readonly
clean
7DF421850000
unkown image
page readonly
clean
6C05DF9000
unkown
page read and write
clean
6C062FE000
unkown
page read and write
clean
7FF5115BE000
unkown image
page readonly
clean
21930E94000
unkown
page read and write
clean
7FF503006000
unkown image
page readonly
clean
7FF4F6BF9000
unkown image
page readonly
clean
7DF509130000
unkown image
page readonly
clean
24705C13000
unkown
page read and write
clean
7FF553B3F000
unkown image
page readonly
clean
24705B00000
unkown image
page readonly
clean
21930C10000
unkown image
page readonly
clean
24FD8230000
unkown image
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7FF4F1676000
unkown image
page readonly
clean
DA0000
heap private
page read and write
clean
7FF511620000
unkown image
page readonly
clean
21930E77000
unkown
page read and write
clean
7DF509132000
unkown image
page readonly
clean
7FF4F16F5000
unkown image
page readonly
clean
192FD002000
unkown
page read and write
clean
7DF501012000
unkown image
page readonly
clean
930000
unkown image
page readonly
clean
7DF515410000
unkown image
page readonly
clean
7DF5FC5E0000
unkown image
page readonly
clean
7DF509140000
unkown image
page readonly
clean
21931500000
unkown
page read and write
clean
610000
unkown
page read and write
clean
7FF5EA267000
unkown image
page readonly
clean
6F6DAFE000
unkown
page read and write
clean
25122060000
unkown image
page readonly
clean
24705C74000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
7DF565F02000
unkown image
page readonly
clean
7FF4F1672000
unkown image
page readonly
clean
219320F0000
unkown
page read and write
clean
7FF5030F9000
unkown image
page readonly
clean
61F000
unkown
page read and write
clean
5EE000
unkown
page read and write
clean
7DF501012000
unkown image
page readonly
clean
7FF4F1678000
unkown image
page readonly
clean
4B0000
unkown
page execute and read and write
clean
25CEB350000
unkown image
page readonly
clean
247A5A02000
unkown
page read and write
clean
7FF4EE938000
unkown image
page readonly
clean
7FF4F169E000
unkown image
page readonly
clean
24705C30000
unkown
page read and write
clean
7FF511345000
unkown image
page readonly
clean
24FD8600000
unkown image
page readonly
clean
25122040000
unkown image
page readonly
clean
21930E13000
unkown
page read and write
clean
219313A0000
unkown
page read and write
clean
7DF503A80000
unkown image
page readonly
clean
7FF553BF9000
unkown image
page readonly
clean
7FF5E9AFF000
unkown image
page readonly
clean
24705C47000
unkown
page read and write
clean
7FF4F6DA6000
unkown image
page readonly
clean
7FF4EEC7E000
unkown image
page readonly
clean
7FF523EE0000
unkown image
page readonly
clean
219320F3000
unkown
page read and write
clean
21931200000
unkown image
page readonly
clean
7FF5EA1FE000
unkown image
page readonly
clean
25122302000
unkown
page read and write
clean
7FF55397F000
unkown image
page readonly
clean
7FF511448000
unkown image
page readonly
clean
2497CAC0000
unkown image
page readonly
clean
21C6AAE0000
unkown image
page readonly
clean
24FD8429000
unkown
page read and write
clean
21C6AC70000
unkown
page read and write
clean
7FF4F6BCE000
unkown image
page readonly
clean
21936504000
unkown
page read and write
clean
25CEB456000
unkown
page read and write
clean
620000
unkown
page read and write
clean
7DF565F00000
unkown image
page readonly
clean
21C6AD13000
unkown
page read and write
clean
7FF573410000
unkown image
page readonly
clean
7FF553A6C000
unkown image
page readonly
clean
25F0000
heap private
page read and write
clean
7FF4EED19000
unkown image
page readonly
clean
1010000
unkown image
page execute read
clean
6DAEA7F000
unkown
page read and write
clean
24FD8270000
unkown image
page readonly
clean
24705C3D000
unkown
page read and write
clean
7FF5247B1000
unkown image
page readonly
clean
6F6D7CB000
unkown
page read and write
clean
7FF4F6D32000
unkown image
page readonly
clean
7FF5246C8000
unkown image
page readonly
clean
24705C84000
unkown
page read and write
clean
7FF5245CD000
unkown image
page readonly
clean
20C9AFE000
unkown
page read and write
clean
25CEB402000
unkown
page read and write
clean
6080D7E000
unkown
page read and write
clean
7DF523990000
unkown image
page readonly
clean
7FF4F6BE1000
unkown image
page readonly
clean
7FF511515000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
25CEB320000
unkown image
page readonly
clean
1005000
unkown image
page read and write
clean
24FD8380000
unkown image
page readonly
clean
24705C68000
unkown
page read and write
clean
620000
unkown
page read and write
clean
7FF4F15E7000
unkown image
page readonly
clean
5F2000
unkown
page read and write
clean
7FF4F6B4B000
unkown image
page readonly
clean
25122308000
unkown
page read and write
clean
7FF524745000
unkown image
page readonly
clean
7FF5737C6000
unkown image
page readonly
clean
247A5980000
unkown
page read and write
clean
21931C50000
unkown
page read and write
clean
25122400000
unkown image
page readonly
clean
24FD8980000
unkown image
page readonly
clean
7FF5115D9000
unkown image
page readonly
clean
7FF502BEA000
unkown image
page readonly
clean
7DF509140000
unkown image
page readonly
clean
7DF4FA490000
unkown image
page readonly
clean
2512224E000
unkown
page read and write
clean
24705C61000
unkown
page read and write
clean
7FF4F6D36000
unkown image
page readonly
clean
21930F13000
unkown
page read and write
clean
7DF536AD0000
unkown image
page readonly
clean
7FF50302E000
unkown image
page readonly
clean
7FF52472C000
unkown image
page readonly
clean
7FF502FF2000
unkown image
page readonly
clean
25CEB6D0000
unkown image
page readonly
clean
24FD844B000
unkown
page read and write
clean
7FF4F139E000
unkown image
page readonly
clean
25CEB310000
unkown image
page readonly
clean
35D3000
heap private
page read and write
clean
25122040000
unkown image
page readonly
clean
4B0000
unkown
page read and write
clean
7DF5239A0000
unkown image
page readonly
clean
5ED000
unkown
page read and write
clean
219362A0000
unkown
page read and write
clean
192FC888000
unkown
page read and write
clean
7DF585B62000
unkown image
page readonly
clean
7FF4F6A2D000
unkown image
page readonly
clean
7FF51155A000
unkown image
page readonly
clean
24705C67000
unkown
page read and write
clean
24705C41000
unkown
page read and write
clean
25CEB400000
unkown
page read and write
clean
7FF4F6E29000
unkown image
page readonly
clean
21931D80000
unkown image
page readonly
clean
24705C00000
unkown
page read and write
clean
7DF5153F2000
unkown image
page readonly
clean
5FE000
unkown
page read and write
clean
608117E000
unkown
page read and write
clean
7DF523982000
unkown image
page readonly
clean
7DF515400000
unkown image
page readonly
clean
7DF565EF0000
unkown image
page readonly
clean
219364FB000
unkown
page read and write
clean
21930E40000
unkown
page read and write
clean
247A5A24000
unkown
page read and write
clean
7FF4F1508000
unkown image
page readonly
clean
24705C48000
unkown
page read and write
clean
21936190000
unkown
page read and write
clean
7DF536AD0000
unkown image
page readonly
clean
20C99FC000
unkown
page read and write
clean
7FF502BF0000
unkown image
page readonly
clean
8CF68FE000
unkown
page read and write
clean
7FF4F14CE000
unkown image
page readonly
clean
7FF553A03000
unkown image
page readonly
clean
24705C4E000
unkown
page read and write
clean
24705C62000
unkown
page read and write
clean
2512226F000
unkown
page read and write
clean
24FD8413000
unkown
page read and write
clean
7FF553AF2000
unkown image
page readonly
clean
614000
unkown
page read and write
clean
7DF565EF2000
unkown image
page readonly
clean
7FF502F31000
unkown image
page readonly
clean
203D5FB000
unkown
page read and write
clean
7FF503049000
unkown image
page readonly
clean
7FF5536EA000
unkown image
page readonly
clean
10EF000
unkown image
page readonly
clean
21936600000
unkown
page read and write
clean
24FD8280000
unkown image
page readonly
clean
192FC700000
unkown image
page read and write
clean
25CEB508000
unkown
page read and write
clean
10EF000
unkown image
page readonly
clean
7DF536AB0000
unkown image
page readonly
clean
7FF4F16AF000
unkown image
page readonly
clean
7FF4F6A60000
unkown image
page readonly
clean
7FF4F6E20000
unkown image
page readonly
clean
192FC82A000
unkown
page read and write
clean
21936100000
unkown
page read and write
clean
EAC000
unkown
page read and write
clean
21931415000
unkown
page read and write
clean
61F000
unkown
page read and write
clean
5CE000
unkown
page read and write
clean
9A7DC7E000
unkown
page read and write
clean
7FF502F0D000
unkown image
page readonly
clean
21C6B260000
unkown image
page readonly
clean
192FCE60000
unkown image
page readonly
clean
7FF573417000
unkown image
page readonly
clean
7FF5245A8000
unkown image
page readonly
clean
7DF523992000
unkown image
page readonly
clean
24705C40000
unkown
page read and write
clean
21936400000
unkown
page read and write
clean
7FF553B76000
unkown image
page readonly
clean
20C9DFE000
unkown
page read and write
clean
7DF483A20000
unkown image
page readonly
clean
7FF5244DA000
unkown image
page readonly
clean
25122229000
unkown
page read and write
clean
247A5800000
unkown image
page readonly
clean
7FF4F6DC0000
unkown image
page readonly
clean
7FF524709000
unkown image
page readonly
clean
192FC866000
unkown
page read and write
clean
1000000
unkown image
page readonly
clean
5B7000
unkown
page read and write
clean
7FF50303F000
unkown image
page readonly
clean
7FF553A31000
unkown image
page readonly
clean
7FF4F6DC7000
unkown image
page readonly
clean
21936180000
unkown
page read and write
clean
247A5930000
unkown image
page readonly
clean
192FC8B9000
unkown
page read and write
clean
21C6AC63000
unkown
page read and write
clean
7FF503085000
unkown image
page readonly
clean
7FF573752000
unkown image
page readonly
clean
2512223C000
unkown
page read and write
clean
7FF51133E000
unkown image
page readonly
clean
5F4000
unkown
page read and write
clean
24705C64000
unkown
page read and write
clean
21C6AD02000
unkown
page read and write
clean
7FF553BEE000
unkown image
page readonly
clean
7FF503097000
unkown image
page readonly
clean
614000
unkown
page read and write
clean
24706000000
unkown image
page readonly
clean
7DF585B50000
unkown image
page readonly
clean
6080EFE000
unkown
page read and write
clean
7FF4F6B68000
unkown image
page readonly
clean
7FF553AF0000
unkown image
page readonly
clean
7FF51167E000
unkown image
page readonly
clean
7FF4F66A6000
unkown image
page readonly
clean
7FF5536F0000
unkown image
page readonly
clean
24705C4F000
unkown
page read and write
clean
7FF5EA1D6000
unkown image
page readonly
clean
7DF565F10000
unkown image
page readonly
clean
21930E00000
unkown
page read and write
clean
7FF502EC9000
unkown image
page readonly
clean
7DF501020000
unkown image
page readonly
clean
AA8C1FE000
unkown
page read and write
clean
219363B0000
unkown
page read and write
clean
7FF553B35000
unkown image
page readonly
clean
7FF4EEC96000
unkown image
page readonly
clean
24FD8447000
unkown
page read and write
clean
24705C3A000
unkown
page read and write
clean
9A7D97F000
unkown
page read and write
clean
7FF5737BD000
unkown image
page readonly
clean
5E9000
unkown
page read and write
clean
35D3000
heap private
page read and write
clean
604000
unkown
page read and write
clean
6DAE57E000
unkown
page read and write
clean
7DF523990000
unkown image
page readonly
clean
7FF5245C3000
unkown image
page readonly
clean
7FF553B06000
unkown image
page readonly
clean
7FF4EED11000
unkown image
page readonly
clean
21C6AC7E000
unkown
page read and write
clean
24705C50000
unkown
page read and write
clean
1006000
unkown image
page readonly
clean
7FF5EA23C000
unkown image
page readonly
clean
24FD844C000
unkown
page read and write
clean
273000
unkown
page read and write
clean
2497CCED000
heap default
page read and write
clean
21936415000
unkown
page read and write
clean
7DF509122000
unkown image
page readonly
clean
24705D02000
unkown
page read and write
clean
20C977B000
unkown
page read and write
clean
219364A2000
unkown
page read and write
clean
2497CCCE000
heap default
page read and write
clean
7FF5247B9000
unkown image
page readonly
clean
7FF4F1760000
unkown image
page readonly
clean
247059F0000
unkown image
page readonly
clean
7FF572F50000
unkown image
page readonly
clean
7FF5242AA000
unkown image
page readonly
clean
25CEB340000
heap default
page read and write
clean
7FF4F1658000
unkown image
page readonly
clean
603000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
192FCCD0000
unkown image
page readonly
clean
7FF5113EE000
unkown image
page readonly
clean
219364F3000
unkown
page read and write
clean
203DB7C000
unkown
page read and write
clean
109D000
unkown image
page read and write
clean
7FF553B02000
unkown image
page readonly
clean
7FF5030F1000
unkown image
page readonly
clean
7FF502F6C000
unkown image
page readonly
clean
7FF51140F000
unkown image
page readonly
clean
21936370000
unkown
page read and write
clean
21930BD0000
unkown image
page read and write
clean
7DF434980000
unkown image
page readonly
clean
7FF4EED19000
unkown image
page readonly
clean
61F000
unkown
page read and write
clean
7FF511627000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF4F1662000
unkown image
page readonly
clean
5EC000
unkown
page read and write
clean
25CEBA50000
unkown image
page readonly
clean
247A5A3D000
unkown
page read and write
clean
25CEB2D0000
unkown image
page read and write
clean
7FF4F1769000
unkown image
page readonly
clean
24705C75000
unkown
page read and write
clean
21930C40000
heap default
page read and write
clean
1093000
unkown image
page read and write
clean
7FF5EA24C000
unkown image
page readonly
clean
7FF573727000
unkown image
page readonly
clean
21936600000
unkown
page read and write
clean
24FD8513000
unkown
page read and write
clean
192FC770000
heap default
page read and write
clean
24705C60000
unkown
page read and write
clean
21C6AC5A000
unkown
page read and write
clean
8CF659E000
unkown
page read and write
clean
7FF511582000
unkown image
page readonly
clean
7FF553B1A000
unkown image
page readonly
clean
6F6DCFB000
unkown
page read and write
clean
7FF5115CF000
unkown image
page readonly
clean
1000000
unkown image
page readonly
clean
21936600000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
21930EA4000
unkown
page read and write
clean
247A5C00000
unkown image
page readonly
clean
2497CCC7000
heap default
page read and write
clean
24705A00000
unkown image
page readonly
clean
7FF4F6A3D000
unkown image
page readonly
clean
603000
unkown
page read and write
clean
7FF5737A9000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
247A5980000
unkown
page read and write
clean
7FF5E99C7000
unkown image
page readonly
clean
24705C6B000
unkown
page read and write
clean
7FF52471D000
unkown image
page readonly
clean
D6E000
unkown
page read and write
clean
1100000
unkown image
page readonly
clean
21931000000
unkown image
page readonly
clean
7DF501020000
unkown image
page readonly
clean
6C0637F000
unkown
page read and write
clean
25CEB450000
unkown
page read and write
clean
7FF5246C2000
unkown image
page readonly
clean
25CEB2F0000
unkown image
page readonly
clean
7FF524750000
unkown image
page readonly
clean
9A7D7FB000
unkown
page read and write
clean
6DAE47B000
unkown
page read and write
clean
7FF511596000
unkown image
page readonly
clean
24FD83A0000
unkown
page read and write
clean
21C6B250000
unkown image
page readonly
clean
D10000
unkown
page read and write
clean
7FF524355000
unkown image
page readonly
clean
7FF5030EE000
unkown image
page readonly
clean
192FC710000
heap private
page read and write
clean
7FF4F6CEB000
unkown image
page readonly
clean
7FF502E1A000
unkown image
page readonly
clean
21936430000
unkown
page read and write
clean
5A3000
heap default
page read and write
clean
219313B0000
unkown image
page read and write
clean
614000
unkown
page read and write
clean
7DF5FC5D2000
unkown image
page readonly
clean
219363F0000
unkown
page read and write
clean
7FF4F65DF000
unkown image
page readonly
clean
21931D30000
unkown image
page readonly
clean
560000
heap default
page read and write
clean
7FF4F1351000
unkown image
page readonly
clean
20CA1FE000
unkown
page read and write
clean
5F7000
unkown
page read and write
clean
25CEB42A000
unkown
page read and write
clean
21936400000
unkown
page read and write
clean
219364A4000
unkown
page read and write
clean
7FF4F69F8000
unkown image
page readonly
clean
25122300000
unkown
page read and write
clean
21930F02000
unkown
page read and write
clean
D20000
heap private
page read and write
clean
203D8FC000
unkown
page read and write
clean
7DF5FC5C2000
unkown image
page readonly
clean
7FF4F1769000
unkown image
page readonly
clean
25CEB2F0000
unkown image
page readonly
clean
21931B70000
unkown image
page read and write
clean
7FF5115F6000
unkown image
page readonly
clean
21C6AB30000
heap default
page read and write
clean
25122313000
unkown
page read and write
clean
24FD8448000
unkown
page read and write
clean
7FF4F15F5000
unkown image
page readonly
clean
7FF5EA2C9000
unkown image
page readonly
clean
58A000
heap default
page read and write
clean
7FF4F6D07000
unkown image
page readonly
clean
24705C4B000
unkown
page read and write
clean
7FF4F6D4A000
unkown image
page readonly
clean
7FF4F16EC000
unkown image
page readonly
clean
10AD000
unkown image
page readonly
clean
7FF511258000
unkown image
page readonly
clean
24FD8470000
unkown
page read and write
clean
21931513000
unkown
page read and write
clean
7FF4F6A3F000
unkown image
page readonly
clean
7FF4F15DC000
unkown image
page readonly
clean
7FF4F6D96000
unkown image
page readonly
clean
2512224A000
unkown
page read and write
clean
25122190000
unkown
page read and write
clean
3A3F000
unkown
page read and write
clean
9A7DA77000
unkown
page read and write
clean
7FF5E9AB7000
unkown image
page readonly
clean
2497CC25000
heap private
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF5E9E99000
unkown image
page readonly
clean
7DF515402000
unkown image
page readonly
clean
25CEBC02000
unkown
page read and write
clean
24FD8508000
unkown
page read and write
clean
192FC913000
unkown
page read and write
clean
5D5000
unkown
page read and write
clean
5DC000
unkown
page read and write
clean
24FD8250000
unkown image
page readonly
clean
5F2000
unkown
page read and write
clean
604000
unkown
page read and write
clean
21936500000
unkown
page read and write
clean
614000
unkown
page read and write
clean
203DD7C000
unkown
page read and write
clean
5DB000
unkown
page read and write
clean
7FF573762000
unkown image
page readonly
clean
7DF536AC0000
unkown image
page readonly
clean
7FF4F6DAC000
unkown image
page readonly
clean
7FF573795000
unkown image
page readonly
clean
7DF5FC5E0000
unkown image
page readonly
clean
219361A0000
unkown
page read and write
clean
4B1000
unkown
page execute read
clean
7FF502EE8000
unkown image
page readonly
clean
7FF511428000
unkown image
page readonly
clean
6080E7E000
unkown
page read and write
clean
24705C39000
unkown
page read and write
clean
192FC851000
unkown
page read and write
clean
219363C0000
unkown
page read and write
clean
D10000
unkown
page read and write
clean
608098C000
unkown
page read and write
clean
8CF69FE000
unkown
page read and write
clean
7FF553A0D000
unkown image
page readonly
clean
7DF501030000
unkown image
page readonly
clean
6C05EFA000
unkown
page read and write
clean
219362D0000
unkown
page read and write
clean
7FF4F6D20000
unkown image
page readonly
clean
192FC750000
unkown image
page readonly
clean
7FF4F6D9C000
unkown image
page readonly
clean
7FF5030F9000
unkown image
page readonly
clean
614000
unkown
page read and write
clean
5CE000
unkown
page read and write
clean
7FF5E99EE000
unkown image
page readonly
clean
7FF511592000
unkown image
page readonly
clean
7DF509120000
unkown image
page readonly
clean
192FC824000
unkown
page read and write
clean
24705C29000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
6F6E07E000
unkown
page read and write
clean
FAF000
unkown
page read and write
clean
21C6AED0000
unkown image
page readonly
clean
21932100000
unkown
page read and write
clean
7DF5FC5D0000
unkown image
page readonly
clean
247059B0000
unkown image
page read and write
clean
7FF4F6BAF000
unkown image
page readonly
clean
7FF5539BE000
unkown image
page readonly
clean
7FF503002000
unkown image
page readonly
clean
247A5A35000
unkown
page read and write
clean
203DC7E000
unkown
page read and write
clean
7FF5737F4000
unkown image
page readonly
clean
219364F9000
unkown
page read and write
clean
7FF5247AE000
unkown image
page readonly
clean
192FC86F000
unkown
page read and write
clean
108E000
unkown image
page read and write
clean
247A5A00000
unkown
page read and write
clean
56A000
heap default
page read and write
clean
7FF4F6C95000
unkown image
page readonly
clean
7FF511459000
unkown image
page readonly
clean
24705C42000
unkown
page read and write
clean
AA8BFFE000
unkown
page read and write
clean
7DF5FC5C0000
unkown image
page readonly
clean
7FF50307C000
unkown image
page readonly
clean
7FF5115AA000
unkown image
page readonly
clean
7FF5242C0000
unkown image
page readonly
clean
21C6AC6E000
unkown
page read and write
clean
7FF4F158C000
unkown image
page readonly
clean
1003000
unkown image
page readonly
clean
7FF5246B0000
unkown image
page readonly
clean
7FF4F1707000
unkown image
page readonly
clean
8CF697E000
unkown
page read and write
clean
7DF515402000
unkown image
page readonly
clean
21931D60000
unkown image
page readonly
clean
25CEB8D0000
unkown image
page readonly
clean
25CEB513000
unkown
page read and write
clean
21C6AC00000
unkown
page read and write
clean
24FD8502000
unkown
page read and write
clean
7FF5735DF000
unkown image
page readonly
clean
21931502000
unkown
page read and write
clean
7FF5737C1000
unkown image
page readonly
clean
7FF57371B000
unkown image
page readonly
clean
7FF553B85000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
6C061FB000
unkown
page read and write
clean
7FF524757000
unkown image
page readonly
clean
7DF536AC0000
unkown image
page readonly
clean
7FF5115FC000
unkown image
page readonly
clean
25122250000
unkown
page read and write
clean
5B5000
unkown
page read and write
clean
608127D000
unkown
page read and write
clean
7FF5EA2C9000
unkown image
page readonly
clean
7FF4F6AF0000
unkown image
page readonly
clean
7FF5EA2C1000
unkown image
page readonly
clean
7DF501010000
unkown image
page readonly
clean
7FF4F6D91000
unkown image
page readonly
clean
7FF51156C000
unkown image
page readonly
clean
61F000
unkown
page read and write
clean
D10000
unkown
page read and write
clean
7FF511598000
unkown image
page readonly
clean
5EB000
unkown
page read and write
clean
219364E2000
unkown
page read and write
clean
24FD8250000
unkown image
page readonly
clean
21931400000
unkown
page read and write
clean
21931402000
unkown
page read and write
clean
21C6AB40000
unkown image
page readonly
clean
277000
unkown
page read and write
clean
247059D0000
unkown image
page readonly
clean
7FF5EA20F000
unkown image
page readonly
clean
7DF501030000
unkown image
page readonly
clean
7FF4F6CA7000
unkown image
page readonly
clean
5DE000
unkown
page read and write
clean
7DF463DC0000
unkown image
page readonly
clean
6C05CF8000
unkown
page read and write
clean
7FF4EECA5000
unkown image
page readonly
clean
24705C56000
unkown
page read and write
clean
7FF4F1580000
unkown image
page readonly
clean
9A7D6FE000
unkown
page read and write
clean
603000
unkown
page read and write
clean
7FF4F6D8D000
unkown image
page readonly
clean
24705C6A000
unkown
page read and write
clean
7FF4EEBA5000
unkown image
page readonly
clean
24FD844D000
unkown
page read and write
clean
219320D1000
unkown
page read and write
clean
24FD844F000
unkown
page read and write
clean
20C9FFF000
unkown
page read and write
clean
19B000
unkown
page read and write
clean
7FF4F16DC000
unkown image
page readonly
clean
7FF5737F7000
unkown image
page readonly
clean
20C9BFE000
unkown
page read and write
clean
7DF536AC2000
unkown image
page readonly
clean
9A7D67E000
unkown
page read and write
clean
7FF502F03000
unkown image
page readonly
clean
7FF511689000
unkown image
page readonly
clean
10AB000
unkown image
page read and write
clean
7FF4F6DB5000
unkown image
page readonly
clean
7FF4F6D6F000
unkown image
page readonly
clean
21931558000
unkown
page read and write
clean
21930EBD000
unkown
page read and write
clean
608137D000
unkown
page read and write
clean
7FF4EEC28000
unkown image
page readonly
clean
21C6AB60000
unkown
page read and write
clean
247A5A59000
unkown
page read and write
clean
1000000
unkown image
page readonly
clean
593000
heap default
page read and write
clean
24705C63000
unkown
page read and write
clean
7FF4F6B5C000
unkown image
page readonly
clean
7FF5EA264000
unkown image
page readonly
clean
192FC720000
unkown image
page readonly
clean
7FF5246FF000
unkown image
page readonly
clean
7FF4F6E1E000
unkown image
page readonly
clean
6F6DF7F000
unkown
page read and write
clean
21C6B0D0000
unkown image
page readonly
clean
25CE000
unkown
page read and write
clean
1001000
unkown image
page execute read
clean
192FC813000
unkown
page read and write
clean
7DF406FF0000
unkown image
page readonly
clean
7DF585B60000
unkown image
page readonly
clean
24FD8500000
unkown
page read and write
clean
21931518000
unkown
page read and write
clean
7DF5FC5D2000
unkown image
page readonly
clean
60810FD000
unkown
page read and write
clean
7FF510D8E000
unkown image
page readonly
clean
192FCAD0000
unkown image
page readonly
clean
There are 1029 hidden memdumps, click here to show them.