IOC Report

loading gif

Files

File Path
Type
Category
Malicious
RPM.xlsx
CDFV2 Encrypted
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\vbc[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
malicious
C:\Users\user\Desktop\~$RPM.xlsx
data
dropped
malicious
C:\Users\Public\vbc.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\19162964.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 333x151, frames 3
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\2561F215.png
PNG image data, 684 x 477, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\5CE7E12F.png
PNG image data, 484 x 544, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\7D72DE31.png
PNG image data, 684 x 477, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\907AA912.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames 3
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\B859C1EB.png
PNG image data, 484 x 544, 8-bit/color RGB, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\D625CE7E.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x263, frames 3
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\E0181866.emf
Windows Enhanced Metafile (EMF) image data version 0x10000
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\FC57AF0.jpeg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 333x151, frames 3
dropped
clean
There are 3 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
malicious
C:\Users\Public\vbc.exe
'C:\Users\Public\vbc.exe'
malicious
C:\Users\Public\vbc.exe
C:\Users\Public\vbc.exe
malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
malicious
C:\Windows\SysWOW64\svchost.exe
C:\Windows\SysWOW64\svchost.exe
malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
clean
C:\Windows\SysWOW64\cmd.exe
/c del 'C:\Users\Public\vbc.exe'
clean

URLs

Name
IP
Malicious
http://www.meta-bot.xyz/scb0/?Fd=BfSM6E5FO5mfZBpeeQrV1vQh+D95EOiFfI1FDjk8ynIPzfiNz31eNoHs9fDCzXb1/NDphw==&w6AxuD=NpI8gJ
203.170.129.2
malicious
www.vetpipes.com/scb0/
malicious
http://23.95.13.176/rpm/vbc.exe
23.95.13.176
malicious
http://www.atelifer.com/scb0/?Fd=mwRuPibKyw2L8cALxBov5M1LiNVIxoe3TesDkz/iiiM8SziCnVEVET/qb0i1hxI+nmTWCA==&w6AxuD=NpI8gJ
204.141.43.204
malicious
http://www.floridawp.com/scb0/?Fd=9/BqtxNO8SZEigUgjw/jJ2i6+zR3ejBZmh2LifaRE3cbasx521HSBMlSKzI9uLCsk85EYQ==&w6AxuD=NpI8gJ
107.187.86.150
malicious
http://www.viscoent.online/scb0/?Fd=L8pgukv0AuVDNAdjNh2AJGutMHnCfg3bCrFlNw+YyifAdhr3mrIeLuq3PR+hiDkJiRhf3g==&w6AxuD=NpI8gJ
209.17.116.163
malicious
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://kr.battle.net/heroes/ko/?https://twitter.com/Dalsae_info9https://twitter.com/hanalen_
unknown
clean
https://api.twitter.com/1.1/friendships/no_retweets/ids.json
unknown
clean
https://pbs.twimg.com/media/
unknown
clean
http://kr.battle.net/heroes/ko/
unknown
clean
http://www.iis.fhg.de/audioPA
unknown
clean
https://api.twitter.com/1.1/friendships/update.json
unknown
clean
https://api.twitter.com/1.1/blocks/create.json
unknown
clean
https://api.twitter.com/1.1/blocks/ids.json
unknown
clean
https://api.twitter.com/1.1/statuses/unretweet/
unknown
clean
http://treyresearch.net
unknown
clean
https://api.twitter.com/1.1/statuses/user_timeline.json
unknown
clean
https://upload.twitter.com/1.1/media/upload.json
unknown
clean
https://api.twitter.com/1.1/statuses/unretweet/whttps://api.twitter.com/1.1/statuses/mentions_timeli
unknown
clean
https://api.twitter.com/1.1/account/verify_credentials.json
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
https://api.twitter.com/oauth/access_token
unknown
clean
http://investor.msn.com/
unknown
clean
https://api.twitter.com/1.1/favorites/destroy.json
unknown
clean
https://api.twitter.com/1.1/statuses/retweet/
unknown
clean
https://api.twitter.com/1.1/statuses/destroy/
unknown
clean
https://api.twitter.com/1.1/statuses/home_timeline.json
unknown
clean
http://computername/printers/printername/.printer
unknown
clean
http://www.%s.comPA
unknown
clean
http://www.autoitscript.com/autoit3
unknown
clean
http://servername/isapibackend.dll
unknown
clean
https://api.twitter.com/1.1/friends/list.json
unknown
clean
http://www.windows.com/pctv.
unknown
clean
https://api.twitter.com/1.1/direct_messages.jsonyhttps://api.twitter.com/1.1/friendships/no_retweets
unknown
clean
http://investor.msn.com
unknown
clean
http://wellformedweb.org/CommentAPI/
unknown
clean
https://twitter.com/hanalen_
unknown
clean
https://api.twitter.com/1.1/statuses/mentions_timeline.json
unknown
clean
https://twitter.com/Dalsae_info
unknown
clean
https://userstream.twitter.com/1.1/user.json
unknown
clean
https://twitter.com/
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
https://api.twitter.com/1.1/statuses/user_timeline.jsonwhttps://api.twitter.com/1.1/account/verify_c
unknown
clean
https://api.twitter.com/1.1/statuses/update.json
unknown
clean
https://api.twitter.com/1.1/users/lookup.json
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://java.sun.com
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
https://api.twitter.com/1.1/statuses/show.json
unknown
clean
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
clean
http://www.piriform.com/ccleaner
unknown
clean
https://api.twitter.com/1.1/favorites/create.json
unknown
clean
https://api.twitter.com/oauth/authorize?oauth_token=
unknown
clean
https://support.mozilla.org
unknown
clean
https://api.twitter.com/1.1/direct_messages.json
unknown
clean
https://api.twitter.com/1.1/friends/ids.json
unknown
clean
https://api.twitter.com/1.1/favorites/list.json
unknown
clean
https://api.twitter.com/1.1/statuses/home_timeline.jsonahttps://upload.twitter.com/1.1/media/upload.
unknown
clean
https://api.twitter.com/oauth/request_token
unknown
clean
There are 51 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.floridawp.com
107.187.86.150
malicious
www.viscoent.online
209.17.116.163
malicious
www.meta-bot.xyz
203.170.129.2
malicious
www.dermaqueeniran.com
unknown
malicious
www.atelifer.com
unknown
malicious
zhs.zohosites.com
204.141.43.204
clean

IPs

IP
Domain
Country
Malicious
23.95.13.176
unknown
United States
malicious
203.170.129.2
www.meta-bot.xyz
Thailand
malicious
107.187.86.150
www.floridawp.com
United States
malicious
209.17.116.163
www.viscoent.online
United States
malicious
204.141.43.204
zhs.zohosites.com
United States
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
8))
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2F25A
2F25A
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
:0)
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\33949
33949
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\34402
34402
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 21
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Direct3D\MostRecentApplication
Name
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\33949
33949
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
EquationEditorFilesIntl_1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
clean
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
FontCachePath
clean
There are 33 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
F0000
unkown image
page execute and read and write
malicious
9549000
unkown image
page execute and read and write
malicious
2281000
unkown
page read and write
malicious
80000
unkown image
page execute and read and write
malicious
1C0000
unkown image
page execute and read and write
malicious
3289000
unkown
page read and write
malicious
270000
unkown image
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
3B0000
unkown
page read and write
malicious
9549000
unkown image
page execute and read and write
malicious
7EFC2000
unkown image
page readonly
clean
CF0000
unkown
page execute and read and write
clean
3B0000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7B4B000
unkown
page read and write
clean
5122000
unkown
page read and write
clean
6F07000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
1FD0000
unkown image
page readonly
clean
904000
heap default
page read and write
clean
D0000
unkown image
page readonly
clean
2100000
heap private
page read and write
clean
AF0000
unkown
page read and write
clean
99E3000
unkown
page read and write
clean
6838000
unkown
page read and write
clean
3278000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
71A0000
unkown
page read and write
clean
36B000
unkown
page read and write
clean
8E7000
heap default
page read and write
clean
6480000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
211F000
unkown image
page read and write
clean
2550000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
2A70000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
6A60000
heap private
page read and write
clean
E60000
unkown
page execute and read and write
clean
2170000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
4C7A000
heap private
page read and write
clean
74B4000
heap private
page read and write
clean
2A70000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
92D0000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
6601000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
2D70000
unkown image
page readonly
clean
30E0000
unkown image
page readonly
clean
8320000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
5270000
unkown
page execute read
clean
677E000
unkown
page read and write
clean
220000
unkown
page read and write
clean
71A2000
unkown
page read and write
clean
6424000
unkown
page read and write
clean
71A2000
unkown
page read and write
clean
4270000
heap private
page read and write
clean
840D000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
71A2000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
843A000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
237000
heap default
page read and write
clean
450D000
unkown
page read and write
clean
8E0000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
744D000
unkown
page read and write
clean
45B4000
unkown
page read and write
clean
94C000
heap default
page read and write
clean
36F000
unkown
page read and write
clean
99E3000
unkown
page read and write
clean
99A0000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
728E000
unkown
page read and write
clean
644F000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
5B0000
unkown image
page readonly
clean
6A6E000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
4350000
unkown
page read and write
clean
21D000
unkown
page read and write
clean
71A9000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
C00000
unkown
page execute and read and write
clean
449C000
unkown
page read and write
clean
A80000
unkown
page execute and read and write
clean
32A0000
heap private
page read and write
clean
4E60000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
6B33000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
71A7000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
5AA0000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
9B23000
unkown
page read and write
clean
68C2000
unkown
page read and write
clean
9F0000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
4370000
heap private
page read and write
clean
1E8000
unkown
page read and write
clean
69F4000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
AD0000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
4308000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
2A00000
unkown
page read and write
clean
62A0000
unkown
page read and write
clean
63A9000
unkown
page read and write
clean
5BA1000
unkown
page read and write
clean
243000
heap default
page read and write
clean
457A000
unkown
page read and write
clean
24A000
heap default
page read and write
clean
556F000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
3278000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
4AF0000
unkown image
page readonly
clean
A10000
unkown
page execute and read and write
clean
E4000
heap private
page read and write
clean
8EF000
unkown
page read and write
clean
30000
unkown image
page execute and read and write
clean
655E000
unkown
page read and write
clean
9AA4000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
600000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
26C000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
6AEA000
unkown
page read and write
clean
340000
unkown
page execute and read and write
clean
94E0000
unkown image
page execute and read and write
clean
7B50000
heap private
page read and write
clean
20000
heap private
page read and write
clean
36B000
unkown
page read and write
clean
74D3000
heap private
page read and write
clean
6AE7000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
29E0000
unkown
page read and write
clean
371000
unkown
page read and write
clean
6C49000
unkown
page read and write
clean
42DE000
unkown
page read and write
clean
243000
heap default
page read and write
clean
81AE000
unkown
page read and write
clean
CE0000
unkown
page execute and read and write
clean
7129000
unkown
page read and write
clean
508D000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
5136000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
540000
unkown
page execute and read and write
clean
227E000
unkown
page read and write | page guard
clean
4D30000
unkown image
page readonly
clean
2646000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
63EA000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
94DE000
unkown
page read and write
clean
92EE000
unkown
page read and write
clean
4AF0000
unkown image
page readonly
clean
7EFDF000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
2100000
unkown image
page readonly
clean
79F0000
heap private
page read and write
clean
3298000
unkown
page read and write
clean
B80000
unkown
page execute and read and write
clean
C74000
unkown
page execute and read and write
clean
2A60000
unkown
page read and write
clean
66E2000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
456F000
unkown
page read and write
clean
4270000
heap private
page read and write
clean
9AA4000
unkown
page read and write
clean
4C38000
unkown
page read and write
clean
8DF000
unkown
page read and write
clean
8C38000
unkown
page read and write
clean
6BDC000
unkown
page read and write
clean
3298000
unkown
page read and write
clean
8E0000
heap default
page read and write
clean
C60000
unkown
page execute and read and write
clean
71A7000
unkown
page read and write
clean
6A84000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
45BF000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
E80000
unkown image
page readonly
clean
4450000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
4200000
unkown image
page readonly
clean
44E7000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
59E000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
5B0000
unkown
page read and write
clean
4310000
unkown image
page readonly
clean
9A60000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
8247000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
614000
heap private
page read and write
clean
6A86000
unkown
page read and write
clean
550000
unkown
page read and write
clean
2D80000
unkown image
page readonly
clean
2110000
unkown image
page read and write
clean
6E50000
heap private
page read and write
clean
5270000
unkown
page execute read
clean
5D0000
heap private
page read and write
clean
447A000
unkown
page read and write
clean
E20000
unkown image
page execute and read and write
clean
65EE000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
635A000
unkown
page read and write
clean
2760000
heap private
page read and write
clean
3D40000
unkown
page read and write
clean
45BF000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
24A000
heap default
page read and write
clean
30000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
50000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
30C0000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
45BF000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
21BF000
unkown
page read and write
clean
1037000
unkown image
page read and write
clean
2A20000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
6825000
unkown
page read and write
clean
64B0000
unkown
page read and write
clean
8720000
unkown
page read and write
clean
1D0000
heap private
page read and write
clean
460B000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
6D40000
unkown
page read and write
clean
92D0000
unkown
page read and write
clean
636E000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
30E0000
unkown image
page readonly
clean
292F000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
4F30000
heap private
page read and write
clean
6455000
unkown
page read and write
clean
6A35000
unkown
page read and write
clean
604000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
33C000
unkown image
page readonly
clean
2560000
unkown
page read and write
clean
4300000
unkown
page read and write
clean
670000
heap default
page read and write
clean
447A000
unkown
page read and write
clean
6650000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
7E1E000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
840D000
unkown
page read and write
clean
371000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
9C0000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
2130000
unkown image
page read and write
clean
90A000
heap default
page read and write
clean
32AE000
heap private
page read and write
clean
DF7000
unkown
page execute and read and write
clean
33C000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
29D0000
unkown
page read and write
clean
1B65000
heap private
page read and write
clean
7EFC0000
unkown image
page readonly
clean
56F000
unkown
page read and write
clean
82C9000
unkown
page read and write
clean
456F000
unkown
page read and write
clean
8442000
unkown
page read and write
clean
5114000
unkown
page read and write
clean
48DE000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
327000
heap default
page read and write
clean
5C0000
unkown image
page readonly
clean
60000
unkown image
page readonly
clean
212F000
unkown image
page read and write
clean
30D0000
unkown image
page readonly
clean
3D90000
unkown
page read and write
clean
E4000
heap private
page read and write
clean
63F1000
unkown
page read and write
clean
96C5000
heap private
page read and write
clean
1050000
heap private
page read and write
clean
29B000
heap default
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
5A0000
unkown
page read and write
clean
74D3000
heap private
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
8415000
unkown
page read and write
clean
550000
unkown
page read and write
clean
7596000
unkown
page read and write
clean
243000
heap default
page read and write
clean
9B60000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
860000
unkown
page read and write
clean
6183000
unkown
page read and write
clean
45D6000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7D20000
heap private
page read and write
clean
2533000
unkown
page read and write
clean
6690000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
1CE000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
4E70000
heap private
page execute and read and write
clean
4E60000
unkown
page read and write
clean
4200000
unkown image
page readonly
clean
30E0000
unkown image
page readonly
clean
4D80000
unkown image
page readonly
clean
5FAE000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
A04000
unkown
page execute and read and write
clean
532E000
unkown
page read and write
clean
83C0000
unkown
page read and write
clean
366000
heap default
page read and write
clean
7EFC0000
unkown image
page readonly
clean
2A30000
unkown
page read and write
clean
B2F000
unkown
page read and write
clean
6427000
unkown
page read and write
clean
4D80000
unkown
page read and write
clean
43C0000
heap private
page read and write
clean
2F20000
unkown
page read and write
clean
2A0000
unkown image
page readonly
clean
90C000
heap default
page read and write
clean
44E7000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
25C3000
unkown
page read and write
clean
8240000
unkown
page read and write
clean
4D70000
unkown image
page readonly
clean
58D000
unkown
page read and write
clean
4380000
unkown
page read and write
clean
5E5F000
unkown
page read and write
clean
2110000
unkown image
page read and write
clean
4B00000
unkown image
page readonly
clean
6A23000
unkown
page read and write
clean
8355000
unkown
page read and write
clean
AAE000
unkown
page read and write
clean
50B4000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
12D0000
unkown image
page readonly
clean
3C90000
unkown image
page read and write
clean
2560000
unkown
page read and write
clean
617E000
unkown
page read and write
clean
B70000
unkown
page execute and read and write
clean
4150000
unkown image
page readonly
clean
6250000
unkown
page read and write
clean
456F000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
1B60000
heap private
page read and write
clean
6A65000
unkown
page read and write
clean
256000
unkown
page read and write
clean
9B60000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
45CB000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
4B9D000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
3298000
unkown
page read and write
clean
660E000
unkown
page read and write
clean
20B6000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
110000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
63C5000
unkown
page read and write
clean
624E000
unkown
page read and write
clean
29B000
heap default
page read and write
clean
32AE000
heap private
page read and write
clean
2030000
unkown
page read and write
clean
45D6000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
4280000
unkown
page read and write
clean
65F3000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
632000
heap private
page read and write
clean
25C3000
unkown
page read and write
clean
110000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
330000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
29D0000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
9AA4000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
255000
heap default
page read and write
clean
4650000
unkown image
page readonly
clean
5360000
unkown image
page read and write
clean
4D30000
unkown image
page readonly
clean
3C90000
unkown image
page read and write
clean
2750000
unkown
page read and write
clean
4D70000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
71A2000
unkown
page read and write
clean
20B6000
unkown
page read and write
clean
4275000
heap private
page read and write
clean
99A0000
unkown
page read and write
clean
6100000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
43C0000
heap private
page read and write
clean
295000
unkown
page read and write
clean
83C9000
unkown
page read and write
clean
4BE000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
782F000
unkown
page read and write
clean
6636000
unkown
page read and write
clean
36F000
unkown
page read and write
clean
9589000
unkown image
page execute and read and write
clean
10000
unkown image
page read and write
clean
4B9D000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
2A2000
unkown image
page execute read
clean
1B50000
unkown
page read and write
clean
8468000
unkown
page read and write
clean
66C9000
unkown
page read and write
clean
71A0000
unkown
page read and write
clean
79F0000
heap private
page read and write
clean
2954000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
4D30000
unkown image
page readonly
clean
6570000
unkown
page read and write
clean
2A0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
D00000
unkown
page execute and read and write
clean
2A80000
unkown
page read and write
clean
237000
heap default
page read and write
clean
4C38000
unkown
page read and write
clean
460B000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7FFFFFC2000
unkown image
page readonly
clean
1B65000
heap private
page read and write
clean
2060000
heap private
page execute and read and write
clean
74B0000
heap private
page read and write
clean
33F000
unkown
page read and write
clean
630B000
unkown
page read and write
clean
2560000
unkown
page read and write
clean
699000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
63CA000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
3281000
unkown
page read and write
clean
540000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
2040000
unkown
page read and write
clean
449C000
unkown
page read and write
clean
8247000
unkown
page read and write
clean
62E2000
unkown
page read and write
clean
2A0000
unkown image
page readonly
clean
4575000
unkown
page read and write
clean
213F000
unkown image
page read and write
clean
110000
unkown
page read and write
clean
2760000
heap private
page read and write
clean
3E50000
unkown image
page readonly
clean
4AC0000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
29000
heap private
page read and write
clean
1D7000
unkown
page read and write
clean
890000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
30D0000
unkown image
page readonly
clean
83E2000
unkown
page read and write
clean
5F6E000
unkown
page read and write
clean
4D0000
unkown image
page read and write
clean
3D90000
unkown
page read and write
clean
50D8000
unkown
page read and write
clean
6A3000
unkown
page read and write
clean
E20000
unkown image
page execute and read and write
clean
1D7000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
263C000
unkown
page read and write
clean
9A22000
unkown
page read and write
clean
2F10000
unkown image
page readonly
clean
5C0000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
1B65000
heap private
page read and write
clean
3CC0000
unkown image
page readonly
clean
8240000
unkown
page read and write
clean
92EE000
unkown
page read and write
clean
83E2000
unkown
page read and write
clean
663D000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
728E000
unkown
page read and write
clean
71A7000
unkown
page read and write
clean
1B50000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
73BB000
unkown
page read and write
clean
6B29000
unkown
page read and write
clean
230000
heap default
page read and write
clean
75B7000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
2A40000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
780000
unkown
page read and write
clean
6EC4000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
69D000
unkown
page read and write
clean
4200000
unkown image
page readonly
clean
3DF8000
unkown
page read and write
clean
6CA5000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
6647000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
117F000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
4575000
unkown
page read and write
clean
183000
unkown
page read and write
clean
43A0000
unkown image
page readonly
clean
71A7000
unkown
page read and write
clean
61D1000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
4C38000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
6E50000
heap private
page read and write
clean
2500000
unkown image
page readonly
clean
4AF0000
unkown image
page readonly
clean
230000
heap default
page read and write
clean
32AE000
heap private
page read and write
clean
45BF000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
6A78000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
4D20000
unkown
page execute and read and write
clean
2130000
unkown image
page read and write
clean
74B4000
heap private
page read and write
clean
36F000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
4AC0000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
140000
unkown image
page readonly
clean
5136000
unkown
page read and write
clean
71A9000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
66DF000
unkown
page read and write
clean
8720000
unkown
page read and write
clean
5136000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
50000
unkown image
page readonly
clean
45CB000
unkown
page read and write
clean
63EC000
unkown
page read and write
clean
3170000
unkown image
page readonly
clean
2A50000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
6AF5000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
4C38000
unkown
page read and write
clean
20A0000
unkown
page read and write
clean
8442000
unkown
page read and write
clean
24A000
heap default
page read and write
clean
5270000
unkown
page execute read
clean
30A8000
unkown
page read and write
clean
50DC000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
2A0000
unkown image
page readonly
clean
213F000
unkown image
page read and write
clean
7E1E000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
255000
heap default
page read and write
clean
556F000
unkown
page read and write
clean
6A60000
heap private
page read and write
clean
7129000
unkown
page read and write
clean
29F0000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
728E000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
629E000
unkown
page read and write
clean
237000
heap default
page read and write
clean
4D70000
unkown image
page readonly
clean
5360000
unkown image
page read and write
clean
1B60000
heap private
page read and write
clean
3D90000
unkown
page read and write
clean
C80000
unkown
page execute and read and write
clean
9B23000
unkown
page read and write
clean
173000
unkown
page execute and read and write
clean
69C000
heap default
page read and write
clean
1B65000
heap private
page read and write
clean
782F000
unkown
page read and write
clean
669C000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
880000
unkown image
page readonly
clean
7D20000
heap private
page read and write
clean
34E000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
3D4B000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
728E000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
6655000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
43B0000
unkown image
page readonly
clean
50F9000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
6AC7000
unkown
page read and write
clean
6A2B000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
5B0000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
6AFD000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
67AC000
unkown
page read and write
clean
C77000
unkown
page execute and read and write
clean
212F000
unkown image
page read and write
clean
7EFE0000
unkown image
page readonly
clean
36B000
unkown
page read and write
clean
4270000
heap private
page read and write
clean
32A5000
heap private
page read and write
clean
371000
unkown
page read and write
clean
687C000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
B87000
unkown
page execute and read and write
clean
B90000
unkown
page execute and read and write
clean
5E5E000
unkown
page read and write | page guard
clean
24F0000
unkown image
page readonly
clean
880000
unkown
page read and write
clean
A7E000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
4300000
unkown
page read and write
clean
8247000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
74D3000
heap private
page read and write
clean
6A42000
unkown
page read and write
clean
96E3000
heap private
page read and write
clean
50000
unkown image
page readonly
clean
1B83000
heap private
page read and write
clean
D0000
unkown image
page readonly
clean
213F000
unkown image
page read and write
clean
4C7A000
heap private
page read and write
clean
664E000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
7B40000
unkown
page read and write
clean
6AF2000
unkown
page read and write
clean
4160000
unkown
page read and write
clean
24F0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
29F0000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
1B50000
unkown
page read and write
clean
21BF000
unkown
page read and write
clean
61EE000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
1B50000
unkown
page read and write
clean
6C49000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
8415000
unkown
page read and write
clean
759B000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2A10000
unkown
page read and write
clean
45D6000
unkown
page read and write
clean
22E2000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
7FFFFFC0000
unkown image
page readonly
clean
4F38000
heap private
page read and write
clean
2A20000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
50D8000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
6F15000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
447A000
unkown
page read and write
clean
5113000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
4308000
unkown
page read and write
clean
729A000
unkown
page read and write
clean
6B46000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
3D50000
unkown
page read and write
clean
2A20000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
92D0000
unkown
page read and write
clean
50F7000
unkown
page read and write
clean
430000
heap default
page read and write
clean
8A0000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
61BE000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
E00000
unkown
page execute and read and write
clean
E4000
heap private
page read and write
clean
631F000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
8E9000
unkown
page read and write
clean
2954000
unkown
page read and write
clean
50F7000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
174000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
750000
unkown image
page readonly
clean
BF0000
unkown
page execute and read and write
clean
1FD0000
unkown image
page readonly
clean
5410000
heap private
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
6A60000
heap private
page read and write
clean
550000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
35D000
heap default
page read and write
clean
2A60000
unkown
page read and write
clean
31FF000
unkown
page read and write
clean
72DE000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
B84000
unkown
page execute and read and write
clean
34E000
unkown
page read and write
clean
66DB000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
220000
unkown image
page readonly
clean
21C000
unkown
page read and write
clean
731E000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
2A80000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
220000
unkown image
page readonly
clean
3D40000
unkown
page read and write
clean
81AE000
unkown
page read and write
clean
449C000
unkown
page read and write
clean
6A6000
heap default
page read and write
clean
4C30000
unkown
page read and write
clean
653F000
unkown
page read and write
clean
4275000
heap private
page read and write
clean
230000
heap default
page read and write
clean
2EC1000
unkown
page read and write
clean
360000
unkown image
page readonly
clean
94E0000
unkown image
page execute and read and write
clean
71A0000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
2130000
unkown image
page read and write
clean
8355000
unkown
page read and write
clean
2050000
unkown
page read and write
clean
73AA000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
890000
unkown
page read and write
clean
4300000
unkown
page read and write
clean
24F0000
unkown image
page readonly
clean
96C5000
heap private
page read and write
clean
213F000
unkown image
page read and write
clean
120000
unkown
page read and write
clean
4160000
unkown
page read and write
clean
6577000
unkown
page read and write
clean
729A000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
2110000
unkown
page read and write
clean
89E000
unkown
page read and write
clean
2F50000
unkown
page read and write
clean
8C0000
heap default
page read and write
clean
729A000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
729A000
unkown
page read and write
clean
67E8000
unkown
page read and write
clean
29B000
heap default
page read and write
clean
32A9000
heap private
page read and write
clean
96C0000
heap private
page read and write
clean
750000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
65F6000
unkown
page read and write
clean
6700000
unkown
page read and write
clean
4200000
unkown image
page readonly
clean
4C7A000
heap private
page read and write
clean
839000
unkown image
page execute and read and write
clean
2A50000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
5B6000
unkown
page read and write
clean
6909000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
243000
heap default
page read and write
clean
6C49000
unkown
page read and write
clean
99E3000
unkown
page read and write
clean
30F0000
unkown image
page readonly
clean
79EF000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
8C7000
heap default
page read and write
clean
83E2000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
66D5000
unkown
page read and write
clean
9F0000
unkown
page execute and read and write
clean
6B3B000
unkown
page read and write
clean
6FBF000
unkown
page read and write
clean
6504000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
63F8000
unkown
page read and write
clean
2C7000
heap default
page read and write
clean
32A0000
heap private
page read and write
clean
1D7000
unkown
page read and write
clean
6676000
unkown
page read and write
clean
4D7C000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
2520000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
4E0000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
2A10000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5410000
heap private
page read and write
clean
2A90000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
6697000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
6B2B000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
7EFDF000
unkown
page read and write
clean
50DC000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
6516000
unkown
page read and write
clean
212F000
unkown image
page read and write
clean
2A00000
unkown
page read and write
clean
9BA3000
unkown
page read and write
clean
7839000
unkown
page read and write
clean
AE7000
unkown
page read and write
clean
4308000
unkown
page read and write
clean
66BF000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
32A5000
heap private
page read and write
clean
31D000
heap default
page read and write
clean
68AE000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
2A80000
unkown
page read and write
clean
6739000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
79F0000
heap private
page read and write
clean
4D80000
unkown image
page readonly
clean
50000
unkown image
page readonly
clean
140000
unkown image
page readonly
clean
60000
unkown image
page readonly
clean
2A30000
unkown
page read and write
clean
805F000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
180000
unkown
page execute and read and write
clean
8355000
unkown
page read and write
clean
330000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
81AE000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
63F5000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
6572000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
30F0000
unkown image
page readonly
clean
6D40000
unkown
page read and write
clean
6486000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
7129000
unkown
page read and write
clean
E70000
unkown
page execute and read and write
clean
834B000
unkown
page read and write
clean
890000
unkown image
page read and write
clean
71A0000
unkown
page read and write
clean
30F0000
unkown image
page readonly
clean
2A30000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
8EE000
unkown
page read and write
clean
616F000
unkown
page read and write
clean
610000
heap private
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
96E3000
heap private
page read and write
clean
660B000
unkown
page read and write
clean
16B000
unkown
page read and write
clean
29D0000
unkown
page read and write
clean
58A000
unkown
page read and write
clean
5166000
unkown
page read and write
clean
255000
heap default
page read and write
clean
79EF000
unkown
page read and write
clean
5122000
unkown
page read and write
clean
9BA3000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
60000
unkown image
page readonly
clean
2C7000
heap default
page read and write
clean
36B000
heap default
page read and write
clean
45A1000
unkown
page read and write
clean
29E0000
unkown
page read and write
clean
6695000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
31FF000
unkown
page read and write
clean
8468000
unkown
page read and write
clean
19A000
unkown
page execute and read and write
clean
20DA000
unkown
page read and write
clean
2750000
unkown
page read and write
clean
3A0000
heap private
page read and write
clean
4E60000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
292F000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
750C000
unkown
page read and write
clean
8240000
unkown
page read and write
clean
65EA000
unkown
page read and write
clean
9A60000
unkown
page read and write
clean
8247000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
6CF000
unkown
page read and write
clean
83C0000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
71A9000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
83C0000
unkown
page read and write
clean
7129000
unkown
page read and write
clean
31D000
heap default
page read and write
clean
731E000
unkown
page read and write
clean
197000
unkown
page execute and read and write
clean
4160000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
4EB0000
unkown image
page read and write
clean
4C70000
heap private
page read and write
clean
4D40000
unkown image
page readonly
clean
750000
unkown image
page readonly
clean
5390000
heap private
page read and write
clean
2807000
unkown
page read and write
clean
2110000
unkown
page read and write
clean
2A0000
unkown image
page readonly
clean
6ABB000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
9E0000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
4308000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
680000
heap default
page read and write
clean
79F0000
heap private
page read and write
clean
60000
unkown image
page readonly
clean
6AB3000
unkown
page read and write
clean
24F0000
unkown image
page readonly
clean
7EFDF000
unkown
page read and write
clean
74B0000
heap private
page read and write
clean
212F000
unkown image
page read and write
clean
456F000
unkown
page read and write
clean
53E000
unkown
page read and write
clean
672A000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
6C65000
unkown
page read and write
clean
192000
unkown
page read and write
clean
96C0000
heap private
page read and write
clean
6A70000
unkown
page read and write
clean
A07000
unkown
page execute and read and write
clean
29F0000
unkown
page read and write
clean
21BF000
unkown
page read and write
clean
2030000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
1CE000
unkown
page read and write
clean
36F000
unkown
page read and write
clean
4F0000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
AE1000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
AE4000
unkown
page read and write
clean
6770000
unkown
page read and write
clean
B81000
unkown
page execute and read and write
clean
60AE000
unkown
page read and write
clean
1E0000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
30F0000
unkown image
page readonly
clean
3D4B000
unkown
page read and write
clean
38F000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
6AED000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
83C9000
unkown
page read and write
clean
655C000
unkown
page read and write
clean
5270000
unkown
page execute read
clean
DF1000
unkown
page execute and read and write
clean
744D000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
29A0000
unkown
page read and write
clean
2BED000
unkown
page read and write
clean
900000
heap default
page read and write
clean
50000
unkown image
page readonly
clean
4C7A000
heap private
page read and write
clean
31FF000
unkown
page read and write
clean
96C0000
heap private
page read and write
clean
4450000
unkown
page read and write
clean
6868000
unkown
page read and write
clean
1000000
unkown image
page readonly
clean
460B000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
74D3000
heap private
page read and write
clean
6A2E000
unkown
page read and write
clean
5152000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
877000
unkown
page read and write
clean
66C2000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
651C000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
230000
heap default
page read and write
clean
96C5000
heap private
page read and write
clean
DE0000
unkown
page execute and read and write
clean
4AC0000
unkown
page read and write
clean
6681000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
6F00000
unkown
page read and write
clean
5ABD000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
53E000
unkown
page read and write
clean
E4000
heap private
page read and write
clean
532E000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
447A000
unkown
page read and write
clean
4280000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
73B9000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
9B60000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
540000
unkown
page read and write
clean
694000
heap default
page read and write
clean
2760000
heap private
page read and write
clean
350000
unkown
page read and write
clean
8415000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
4AF0000
unkown image
page readonly
clean
2110000
unkown image
page read and write
clean
4D70000
unkown image
page readonly
clean
2CC7000
unkown image
page readonly
clean
4B0000
unkown
page read and write
clean
9589000
unkown image
page execute and read and write
clean
840D000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
83D000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
7B4B000
unkown
page read and write
clean
2A2000
unkown image
page execute read
clean
5C0000
heap private
page execute and read and write
clean
1CE000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
2F50000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
6B31000
unkown
page read and write
clean
871000
unkown
page read and write
clean
3AC000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
550000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
2A2000
unkown image
page execute read
clean
24A000
heap default
page read and write
clean
4D20000
unkown
page execute and read and write
clean
4D50000
unkown image
page readonly
clean
29B000
heap default
page read and write
clean
8B0000
unkown
page read and write
clean
204E000
unkown
page read and write
clean
4160000
unkown
page read and write
clean
69A000
unkown
page read and write
clean
6453000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
506E000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
5D3E000
unkown
page read and write
clean
6AA8000
unkown
page read and write
clean
4F34000
heap private
page read and write
clean
20B6000
unkown
page read and write
clean
641A000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
17C000
unkown
page read and write
clean
2954000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
B70000
unkown
page execute and read and write
clean
8720000
unkown
page read and write
clean
5113000
unkown
page read and write
clean
64B4000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
32A9000
heap private
page read and write
clean
29E0000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
27E0000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
227F000
unkown
page read and write
clean
12CF000
unkown
page read and write
clean
2A0000
unkown image
page readonly
clean
30C0000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
4290000
unkown
page read and write
clean
DF4000
unkown
page execute and read and write
clean
36B000
unkown
page read and write
clean
5152000
unkown
page read and write
clean
611B000
unkown
page read and write
clean
790000
unkown image
page execute and read and write
clean
2550000
unkown
page read and write
clean
770000
unkown
page read and write
clean
8442000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
81AE000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
330000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
96E3000
heap private
page read and write
clean
457A000
unkown
page read and write
clean
4C30000
unkown
page read and write
clean
31FF000
unkown
page read and write
clean
843A000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
120000
unkown
page read and write
clean
9A22000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
540000
unkown
page read and write
clean
6C29000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
6300000
unkown
page read and write
clean
540000
unkown
page execute and read and write
clean
74B0000
heap private
page read and write
clean
D0000
unkown image
page readonly
clean
4C30000
unkown
page read and write
clean
99A0000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
3C90000
unkown image
page read and write
clean
7EFD0000
unkown image
page readonly
clean
45CB000
unkown
page read and write
clean
67BB000
unkown
page read and write
clean
110000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
45D6000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
6607000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
A70000
unkown
page execute and read and write
clean
45CB000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
4DD0000
heap private
page read and write
clean
7B4B000
unkown
page read and write
clean
2EF000
unkown
page read and write
clean
8A6000
unkown
page read and write
clean
668E000
unkown
page read and write
clean
82C9000
unkown
page read and write
clean
17D000
unkown
page execute and read and write
clean
5152000
unkown
page read and write
clean
320000
heap default
page read and write
clean
31D000
heap default
page read and write
clean
45A1000
unkown
page read and write
clean
292F000
unkown
page read and write
clean
330000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
9A60000
unkown
page read and write
clean
180000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
29D0000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
900000
unkown
page execute and read and write
clean
5B0000
unkown image
page readonly
clean
7B50000
heap private
page read and write
clean
7EFD0000
unkown image
page readonly
clean
20000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
2040000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
2BF0000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
82BF000
unkown
page read and write
clean
33C000
unkown image
page readonly
clean
11B2000
unkown image
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7CFE000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
E3A000
unkown image
page read and write
clean
3278000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
75A1000
unkown
page read and write
clean
5D4000
heap private
page read and write
clean
2500000
unkown image
page readonly
clean
4450000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
2160000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
6BBE000
unkown
page read and write
clean
6CCA000
unkown
page read and write
clean
1F50000
unkown image
page readonly
clean
663A000
unkown
page read and write
clean
290000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
6E16000
unkown
page read and write
clean
7B4B000
unkown
page read and write
clean
1AB000
unkown
page execute and read and write
clean
5360000
unkown image
page read and write
clean
A90000
unkown
page execute and read and write
clean
9AF000
heap default
page read and write
clean
4450000
unkown
page read and write
clean
2954000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
4D60000
unkown image
page readonly
clean
75B3000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
8B0000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
C70000
unkown
page execute and read and write
clean
1B83000
heap private
page read and write
clean
21BF000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
4D20000
unkown
page execute and read and write
clean
8E4000
heap default
page read and write
clean
7BD0000
heap private
page read and write
clean
371000
unkown
page read and write
clean
43B0000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
2130000
unkown image
page read and write
clean
6941000
unkown
page read and write
clean
6262000
unkown
page read and write
clean
6569000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
43C0000
heap private
page read and write
clean
4D50000
unkown image
page readonly
clean
2C7000
heap default
page read and write
clean
1BE0000
unkown image
page readonly
clean
6401000
unkown
page read and write
clean
5166000
unkown
page read and write
clean
4C30000
unkown
page read and write
clean
20B6000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
6EEA000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
2120000
unkown image
page read and write
clean
843A000
unkown
page read and write
clean
94DE000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
32A9000
heap private
page read and write
clean
910000
unkown
page execute and read and write
clean
2A2000
unkown image
page execute read
clean
2A40000
unkown
page read and write
clean
4B8000
unkown
page read and write
clean
6609000
unkown
page read and write
clean
62B2000
unkown
page read and write
clean
33C000
unkown image
page readonly
clean
3B0000
unkown
page read and write
clean
50DD000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
710000
heap default
page read and write
clean
874000
unkown
page read and write
clean
3170000
unkown image
page readonly
clean
4275000
heap private
page read and write
clean
550000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
2F20000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
67F7000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
2CC7000
unkown image
page readonly
clean
255000
heap default
page read and write
clean
744D000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
2A40000
unkown
page read and write
clean
292F000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
22E000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
5070000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
3278000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
5166000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
220000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
29E0000
unkown
page read and write
clean
82C9000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
744D000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
3170000
unkown image
page readonly
clean
5A0000
unkown
page read and write
clean
5122000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
8C38000
unkown
page read and write
clean
460B000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
74B0000
heap private
page read and write
clean
120000
unkown
page execute and read and write
clean
2740000
unkown image
page readonly
clean
4270000
heap private
page read and write
clean
677000
heap default
page read and write
clean
3CC0000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
8240000
unkown
page read and write
clean
4D0000
unkown
page read and write
clean
18D000
unkown
page execute and read and write
clean
550000
unkown
page read and write
clean
6F40000
unkown
page read and write
clean
5A0000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
31D000
heap default
page read and write
clean
457A000
unkown
page read and write
clean
6157000
unkown
page read and write
clean
2120000
heap private
page read and write
clean
5B0000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
5BA0000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
2110000
unkown image
page read and write
clean
30A8000
unkown
page read and write
clean
648A000
unkown
page read and write
clean
8C38000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
83C9000
unkown
page read and write
clean
2050000
unkown
page read and write
clean
667E000
unkown
page read and write
clean
6A60000
heap private
page read and write
clean
66C7000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
2A40000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
2750000
unkown
page read and write
clean
5D0000
unkown
page execute and read and write
clean
7CFE000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
782F000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
667C000
unkown
page read and write
clean
20000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
3170000
unkown image
page readonly
clean
92EE000
unkown
page read and write
clean
95B000
unkown
page read and write
clean
650F000
unkown
page read and write
clean
2A30000
unkown
page read and write
clean
6A44000
unkown
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
1D0000
unkown image
page read and write
clean
4D40000
unkown image
page readonly
clean
B50000
unkown
page read and write
clean
2750000
unkown
page read and write
clean
4275000
heap private
page read and write
clean
94DE000
unkown
page read and write
clean
2170000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
71A9000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
49F000
unkown
page read and write
clean
2160000
unkown
page read and write
clean
644D000
unkown
page read and write
clean
43B0000
unkown image
page readonly
clean
43C0000
heap private
page read and write
clean
3CA0000
unkown
page read and write
clean
699B000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
1A7000
unkown
page execute and read and write
clean
27E0000
unkown
page read and write
clean
6B08000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
449C000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
3C90000
unkown image
page read and write
clean
4A0F000
unkown
page read and write
clean
29F0000
unkown
page read and write
clean
6420000
unkown
page read and write
clean
43B0000
unkown image
page readonly
clean
3E50000
unkown image
page readonly
clean
5BB000
unkown
page read and write
clean
210C000
heap private
page read and write
clean
237000
heap default
page read and write
clean
2C7000
heap default
page read and write
clean
6631000
unkown
page read and write
clean
731E000
unkown
page read and write
clean
9B23000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
4300000
unkown
page read and write
clean
9A22000
unkown
page read and write
clean
2A20000
unkown
page read and write
clean
3298000
unkown
page read and write
clean
2760000
heap private
page read and write
clean
750000
unkown image
page readonly
clean
6678000
unkown
page read and write
clean
A00000
unkown
page execute and read and write
clean
6684000
unkown
page read and write
clean
648D000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
9BA3000
unkown
page read and write
clean
550000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
8468000
unkown
page read and write
clean
6F51000
unkown
page read and write
clean
6C49000
unkown
page read and write
clean
79EF000
unkown
page read and write
clean
5EFE000
unkown
page read and write
clean
2A80000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
6101000
unkown
page read and write
clean
45B4000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
909000
heap default
page read and write
clean
There are 1434 hidden memdumps, click here to show them.