IOC Report

loading gif

Files

File Path
Type
Category
Malicious
NGhyIeBff1.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
malicious
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\NGhyIeBff1.exe.log
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\dhcpmon.exe.log
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Local\Temp\tmp3DAC.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\run.dat
Non-ISO extended-ASCII text, with no line terminators
dropped
malicious
C:\Users\user\AppData\Local\Temp\tmp4260.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\task.dat
ASCII text, with no line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\NGhyIeBff1.exe
'C:\Users\user\Desktop\NGhyIeBff1.exe'
malicious
C:\Windows\SysWOW64\schtasks.exe
'schtasks.exe' /create /f /tn 'DHCP Monitor' /xml 'C:\Users\user\AppData\Local\Temp\tmp3DAC.tmp'
malicious
C:\Windows\SysWOW64\schtasks.exe
'schtasks.exe' /create /f /tn 'DHCP Monitor Task' /xml 'C:\Users\user\AppData\Local\Temp\tmp4260.tmp'
malicious
C:\Users\user\Desktop\NGhyIeBff1.exe
C:\Users\user\Desktop\NGhyIeBff1.exe 0
malicious
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe
'C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe' 0
malicious
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe
'C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe'
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
malicious
192.168.2.23
malicious

IPs

IP
Domain
Country
Malicious
192.168.2.23
unknown
unknown
malicious

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
DHCP Monitor
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
BA2000
unkown image
page readonly
malicious
3CE1000
unkown
page read and write
malicious
3161000
unkown
page read and write
malicious
4161000
unkown
page read and write
malicious
A42000
unkown image
page readonly
malicious
22000
unkown image
page readonly
malicious
3717000
unkown
page read and write
malicious
672000
unkown image
page readonly
malicious
22000
unkown image
page readonly
malicious
5450000
unkown image
page read and write
malicious
3381000
unkown
page read and write
malicious
672000
unkown image
page readonly
malicious
BA2000
unkown image
page readonly
malicious
4381000
unkown
page read and write
malicious
2CE1000
unkown
page read and write
malicious
A42000
unkown image
page readonly
malicious
3890000
unkown
page read and write
clean
7DF58E8D2000
unkown image
page readonly
clean
C52000
unkown
page execute and read and write
clean
5821000
unkown
page read and write
clean
3830000
unkown
page read and write
clean
4A30000
unkown
page read and write
clean
7F182000
unkown image
page readonly
clean
1B827FC000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF5E5A1C000
unkown image
page readonly
clean
7F880000
unkown image
page readonly
clean
4A20000
unkown
page read and write
clean
4A8F17C000
unkown
page read and write
clean
7FF56B353000
unkown image
page readonly
clean
7FF4F33D0000
unkown image
page readonly
clean
10B0000
unkown image
page readonly
clean
1860000
unkown image
page readonly
clean
20A10470000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
7FF51D9E0000
unkown image
page readonly
clean
7FF5066AE000
unkown image
page readonly
clean
BAE000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1C818510000
unkown image
page readonly
clean
7FF51DAFB000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
DAED97C000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
9E7000
unkown
page read and write
clean
2990000
heap private
page read and write
clean
3951000
unkown
page read and write
clean
7DF508E00000
unkown image
page readonly
clean
7F3B0000
unkown image
page readonly
clean
5480000
unkown
page read and write
clean
7DF52B200000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
20A15ADB000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
80F000
unkown
page read and write
clean
7FF56B22E000
unkown image
page readonly
clean
4950000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
2E55000
unkown
page read and write
clean
8AE000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
15A0000
heap private
page read and write
clean
5821000
unkown
page read and write
clean
551E000
unkown
page read and write
clean
1C818628000
unkown
page read and write
clean
7FF51590F000
unkown image
page readonly
clean
4A50000
heap private
page execute and read and write
clean
2E40000
unkown
page execute and read and write
clean
5821000
unkown
page read and write
clean
26215ED0000
unkown image
page readonly
clean
7FF4F3453000
unkown image
page readonly
clean
A70000
unkown image
page readonly
clean
DF3000
heap default
page read and write
clean
584C000
unkown
page read and write
clean
ABF7FFB000
unkown
page read and write
clean
38E3000
unkown
page read and write
clean
7FF506890000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7DF580D50000
unkown image
page readonly
clean
2E56000
unkown
page read and write
clean
288ADB13000
unkown
page read and write
clean
2D10000
heap private
page read and write
clean
20A15970000
unkown
page read and write
clean
54D0000
heap private
page read and write
clean
5370000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
20A11270000
unkown
page read and write
clean
19E6C013000
unkown
page read and write
clean
7DF5FB412000
unkown image
page readonly
clean
DDD000
unkown
page read and write
clean
5810000
unkown
page read and write
clean
7FF51DB2D000
unkown image
page readonly
clean
D2B000
unkown
page read and write
clean
501E000
unkown
page read and write
clean
20A1597E000
unkown
page read and write
clean
380E000
unkown
page read and write
clean
26215C13000
unkown
page read and write
clean
5800000
unkown
page read and write
clean
7DF52B220000
unkown image
page readonly
clean
384E000
unkown
page read and write
clean
2980000
unkown image
page readonly
clean
2355000
heap private
page read and write
clean
391F000
unkown
page read and write
clean
7FF574ADC000
unkown image
page readonly
clean
5C5000
heap default
page read and write
clean
288ADA69000
unkown
page read and write
clean
38A1000
unkown
page read and write
clean
20A104BD000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
1C818602000
unkown
page read and write
clean
7F3A0000
unkown image
page readonly
clean
501D000
unkown
page read and write
clean
1B580640000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF4F2CAA000
unkown image
page readonly
clean
7DF533422000
unkown image
page readonly
clean
37BF000
unkown
page read and write
clean
20A11490000
unkown image
page readonly
clean
4950000
unkown
page read and write
clean
1930000
unkown image
page readonly
clean
39FA000
unkown
page read and write
clean
543E000
unkown
page read and write
clean
5380000
unkown
page read and write
clean
2330000
unkown
page read and write
clean
26215C29000
unkown
page read and write
clean
3771000
unkown
page read and write
clean
37E0000
unkown
page read and write
clean
7FF5E5A03000
unkown image
page readonly
clean
950000
unkown
page read and write
clean
1B580684000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
7FF56B38D000
unkown image
page readonly
clean
1B8297E000
unkown
page read and write
clean
7FF574BDE000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
1010000
heap default
page read and write
clean
7FF578FA0000
unkown image
page readonly
clean
5448000
unkown
page read and write
clean
7DF5FB410000
unkown image
page readonly
clean
3030000
heap private
page read and write
clean
F10000
unkown
page read and write
clean
19E6C088000
unkown
page read and write
clean
7FF4F350F000
unkown image
page readonly
clean
392E000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
DCE000
unkown
page read and write
clean
39EF000
unkown
page read and write
clean
1C818700000
unkown
page read and write
clean
80C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1B580674000
unkown
page read and write
clean
18554C77000
unkown
page read and write
clean
3976000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7DF51C1B0000
unkown image
page readonly
clean
5C0000
heap default
page read and write
clean
7DF000
unkown
page read and write
clean
4ED0000
unkown
page execute and read and write
clean
7FF56AAF8000
unkown image
page readonly
clean
1B82B7F000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
1B580800000
unkown image
page readonly
clean
7DF533440000
unkown image
page readonly
clean
18554D13000
unkown
page read and write
clean
26216330000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
4117B7D000
unkown
page read and write
clean
7D0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF574BBB000
unkown image
page readonly
clean
7FF5068AB000
unkown image
page readonly
clean
7F890000
unkown image
page readonly
clean
26215BA0000
heap default
page read and write
clean
1C81863E000
unkown
page read and write
clean
98283FE000
unkown
page read and write
clean
752000
unkown
page read and write
clean
14B7000
unkown
page execute and read and write
clean
7F890000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
3957000
unkown
page read and write
clean
147E000
unkown
page read and write
clean
4A8EDFD000
unkown
page read and write
clean
19E6C660000
unkown image
page readonly
clean
54E0000
unkown
page read and write
clean
ABF7EFC000
unkown
page read and write
clean
80F000
unkown
page read and write
clean
20A15C90000
unkown
page read and write
clean
7FEA0000
unkown image
page readonly
clean
7FF5068A4000
unkown image
page readonly
clean
4EF0000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
19E6C102000
unkown
page read and write
clean
1B58065F000
unkown
page read and write
clean
3A12000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
20A104A7000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF56AF38000
unkown image
page readonly
clean
7DF5FB400000
unkown image
page readonly
clean
7FF5E5A53000
unkown image
page readonly
clean
7FF4F33E8000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
1B580649000
unkown
page read and write
clean
38E1000
unkown
page read and write
clean
7FF57474A000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
26A9D7F000
unkown
page read and write
clean
4ED0000
unkown
page read and write
clean
511E000
unkown
page read and write
clean
584D000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7DF508E10000
unkown image
page readonly
clean
37F1000
unkown
page read and write
clean
2E40000
unkown
page read and write
clean
1492000
unkown
page execute and read and write
clean
7DF580D62000
unkown image
page readonly
clean
A6D000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
379C000
unkown
page read and write
clean
EFE000
unkown
page read and write
clean
20A15A55000
unkown
page read and write
clean
7FF5158FB000
unkown image
page readonly
clean
20A112A0000
unkown image
page read and write
clean
584C000
unkown
page read and write
clean
17492400000
unkown
page read and write
clean
4117A7F000
unkown
page read and write
clean
7FF5067ED000
unkown image
page readonly
clean
1749244D000
unkown
page read and write
clean
20A1049F000
unkown
page read and write
clean
1C818C60000
unkown image
page readonly
clean
7DF58A4E0000
unkown image
page readonly
clean
7FF578FCF000
unkown image
page readonly
clean
D87000
unkown
page execute and read and write
clean
7DF406CD0000
unkown image
page readonly
clean
38D1000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
7FF5157E0000
unkown image
page readonly
clean
7FF5748B6000
unkown image
page readonly
clean
BA0000
unkown image
page readonly
clean
7FF5E579A000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
14AC000
unkown
page execute and read and write
clean
4EE0000
unkown
page read and write
clean
2320000
unkown image
page readonly
clean
3921000
unkown
page read and write
clean
7FF4F3260000
unkown image
page readonly
clean
10B0000
unkown
page read and write
clean
A40000
unkown image
page readonly
clean
20A15AEB000
unkown
page read and write
clean
7FF56B42B000
unkown image
page readonly
clean
4954000
unkown
page read and write
clean
4966000
unkown
page read and write
clean
3931000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
DA0000
heap private
page read and write
clean
39A3000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
288ADA8A000
unkown
page read and write
clean
98284FE000
unkown
page read and write
clean
80C000
unkown
page read and write
clean
18554C02000
unkown
page read and write
clean
7FF4F33E0000
unkown image
page readonly
clean
1B580645000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
4EE5000
unkown
page read and write
clean
571E000
unkown
page read and write
clean
137E000
unkown
page read and write
clean
1C8184C0000
unkown image
page read and write
clean
20A15AF7000
unkown
page read and write
clean
7FF4F3417000
unkown image
page readonly
clean
39D1000
unkown
page read and write
clean
7FF51DA1C000
unkown image
page readonly
clean
39A7000
unkown
page read and write
clean
3A64000
unkown
page read and write
clean
ABF82FE000
unkown
page read and write
clean
C40000
unkown
page read and write
clean
5190000
heap private
page execute and read and write
clean
7DF508E10000
unkown image
page readonly
clean
9DB000
unkown
page read and write
clean
7FF574BA8000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF4F3097000
unkown image
page readonly
clean
54E7000
unkown
page read and write
clean
38E5000
unkown
page read and write
clean
38F2000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
37A1000
unkown
page read and write
clean
1C818560000
unkown
page read and write
clean
5510000
heap private
page read and write
clean
E00000
unkown image
page readonly
clean
55DD000
unkown
page read and write
clean
7FF51581D000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
702000
unkown
page execute and read and write
clean
5810000
unkown
page execute and read and write
clean
C75000
heap default
page read and write
clean
584E000
unkown
page read and write
clean
7FF56B3A3000
unkown image
page readonly
clean
387B000
unkown
page read and write
clean
20A10475000
unkown
page read and write
clean
3931000
unkown
page read and write
clean
20A11470000
unkown image
page readonly
clean
20A10D58000
unkown
page read and write
clean
17492450000
unkown
page read and write
clean
26215C5C000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
5BC8000
unkown
page read and write
clean
3883000
unkown
page read and write
clean
7DF58E8C2000
unkown image
page readonly
clean
4A8E9FB000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
4C5E000
unkown
page read and write
clean
ABF7A9C000
unkown
page read and write
clean
380E000
unkown
page read and write
clean
26215B50000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7FE92000
unkown image
page readonly
clean
1590000
unkown image
page readonly
clean
7DF533420000
unkown image
page readonly
clean
5BC0000
unkown
page read and write
clean
1B580661000
unkown
page read and write
clean
26A9E7F000
unkown
page read and write
clean
51FE000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
20A15990000
unkown
page read and write
clean
4966000
unkown
page read and write
clean
DAEE07D000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
39CC000
unkown
page read and write
clean
1B580660000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
DB7000
unkown
page execute and read and write
clean
20A11800000
unkown
page read and write
clean
740000
unkown image
page readonly
clean
7FD80000
unkown image
page readonly
clean
98285FE000
unkown
page read and write
clean
951000
unkown
page read and write
clean
F50000
unkown
page read and write
clean
4EE6000
unkown
page read and write
clean
38D0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF5067B3000
unkown image
page readonly
clean
7FF574B08000
unkown image
page readonly
clean
411797E000
unkown
page read and write
clean
392C000
unkown
page read and write
clean
DA12B7D000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
18555190000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
670000
unkown image
page readonly
clean
1360000
unkown
page read and write
clean
4EF0000
unkown
page read and write
clean
5380000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3837000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
26215B70000
unkown image
page readonly
clean
17492220000
unkown image
page read and write
clean
7FF574B3A000
unkown image
page readonly
clean
1B5803A0000
unkown image
page read and write
clean
38ED000
unkown
page read and write
clean
4870000
unkown image
page readonly
clean
82E000
unkown
page read and write
clean
7FF5E5A5A000
unkown image
page readonly
clean
AB0000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
F70000
unkown
page read and write
clean
7FF5E5A49000
unkown image
page readonly
clean
2967000
unkown
page read and write
clean
7FF51DA95000
unkown image
page readonly
clean
7FF56B444000
unkown image
page readonly
clean
2380000
heap private
page execute and read and write
clean
42000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
5630000
heap private
page execute and read and write
clean
E3A000
heap default
page read and write
clean
ABF80FE000
unkown
page read and write
clean
7F190000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
DCA000
unkown
page read and write
clean
3899000
unkown
page read and write
clean
20A10B80000
unkown image
page read and write
clean
950000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
18554C26000
unkown
page read and write
clean
2320000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
20A15860000
unkown
page read and write
clean
73A000
unkown
page read and write
clean
395D000
unkown
page read and write
clean
396B000
unkown
page read and write
clean
5440000
unkown
page read and write
clean
20A15AC0000
unkown
page read and write
clean
38C1000
unkown
page read and write
clean
19E6C4E0000
unkown image
page readonly
clean
37EA000
unkown
page read and write
clean
288ADA00000
unkown
page read and write
clean
2E56000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5440000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
57EE000
unkown
page read and write
clean
4EE6000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
3A13000
unkown
page read and write
clean
15B0000
unkown image
page readonly
clean
38A1000
unkown
page read and write
clean
18554AC0000
heap default
page read and write
clean
584C000
unkown
page read and write
clean
4EE7000
unkown
page read and write
clean
275F000
unkown
page read and write
clean
7FF5E5B0D000
unkown image
page readonly
clean
5636000
heap private
page execute and read and write
clean
7DF533432000
unkown image
page readonly
clean
4A30000
unkown
page read and write
clean
7FF574BED000
unkown image
page readonly
clean
26215B50000
unkown image
page readonly
clean
7FF56B113000
unkown image
page readonly
clean
7FF51DB2F000
unkown image
page readonly
clean
DA1277B000
unkown
page read and write
clean
930000
unkown image
page readonly
clean
19E6BFA0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
37F2000
unkown
page read and write
clean
7DF58A4E0000
unkown image
page readonly
clean
7FF56B2D4000
unkown image
page readonly
clean
7FF51DAE8000
unkown image
page readonly
clean
3881000
unkown
page read and write
clean
2DF0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7F3B2000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
E31000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
3837000
unkown
page read and write
clean
DE0000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
DAEDDFF000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
39D9000
unkown
page read and write
clean
17492452000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
51C5000
unkown
page read and write
clean
7FF56B44E000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1C818613000
unkown
page read and write
clean
18554AA0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7F070000
unkown image
page readonly
clean
38E6000
unkown
page read and write
clean
7FF574BEF000
unkown image
page readonly
clean
1C818679000
unkown
page read and write
clean
14A2000
unkown
page execute and read and write
clean
7FF51D374000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7FF5E5A28000
unkown image
page readonly
clean
39D0000
unkown
page read and write
clean
1C818677000
unkown
page read and write
clean
75B000
unkown
page execute and read and write
clean
1C818600000
unkown
page read and write
clean
1B58067D000
unkown
page read and write
clean
BC2000
unkown image
page readonly
clean
7FF4F3084000
unkown image
page readonly
clean
20A1042A000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
7FF4F2CB5000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7FF4F34D6000
unkown image
page readonly
clean
4960000
unkown
page read and write
clean
385D000
unkown
page read and write
clean
3A11000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
F62000
unkown
page execute and read and write
clean
393F000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
F90000
unkown image
page readonly
clean
4956000
unkown
page read and write
clean
7FF5E59FC000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
390A000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
3804000
unkown
page read and write
clean
7FF4F350D000
unkown image
page readonly
clean
AA0000
unkown image
page read and write
clean
7DF51C1B2000
unkown image
page readonly
clean
7F892000
unkown image
page readonly
clean
FB7000
unkown
page execute and read and write
clean
7FF506683000
unkown image
page readonly
clean
2E56000
unkown
page read and write
clean
7FF56B430000
unkown image
page readonly
clean
20A10A70000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1B580613000
unkown
page read and write
clean
1590000
unkown
page read and write
clean
7FF574AFC000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
54B0000
unkown
page read and write
clean
18555180000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
288ADA3C000
unkown
page read and write
clean
7DF58A4E2000
unkown image
page readonly
clean
BA0000
unkown image
page readonly
clean
20A10D18000
unkown
page read and write
clean
131D000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
DAEE1FD000
unkown
page read and write
clean
2E70000
heap private
page execute and read and write
clean
4965000
unkown
page read and write
clean
55B1000
unkown
page read and write
clean
20A102C0000
unkown image
page readonly
clean
1C81867D000
unkown
page read and write
clean
5390000
unkown
page execute and read and write
clean
19E6C113000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3771000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
3911000
unkown
page read and write
clean
1B5803E0000
unkown image
page readonly
clean
7FF4F3233000
unkown image
page readonly
clean
4A20000
unkown
page read and write
clean
7FF574BDB000
unkown image
page readonly
clean
D31000
unkown
page read and write
clean
38E2000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7DF580D52000
unkown image
page readonly
clean
288ADA29000
unkown
page read and write
clean
7FF5E51C7000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
1B5804F0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
54B0000
unkown
page execute and read and write
clean
7FF578FCF000
unkown image
page readonly
clean
37EC000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
1B82A77000
unkown
page read and write
clean
37E5000
unkown
page read and write
clean
7F3B2000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
1580000
unkown
page execute and read and write
clean
5821000
unkown
page read and write
clean
529E000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
7FF4F34F4000
unkown image
page readonly
clean
7DF58A4E2000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4A8F07E000
unkown
page read and write
clean
288AD820000
unkown image
page readonly
clean
3A26000
unkown
page read and write
clean
4967000
unkown
page read and write
clean
7DF580D50000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
4A56000
heap private
page execute and read and write
clean
54E0000
unkown
page read and write
clean
7FF5158FE000
unkown image
page readonly
clean
4EC0000
unkown
page execute and read and write
clean
4117D7F000
unkown
page read and write
clean
7FF574BB6000
unkown image
page readonly
clean
567E000
unkown
page read and write
clean
397D000
unkown
page read and write
clean
7DF5FB420000
unkown image
page readonly
clean
4F00000
unkown
page read and write
clean
7FF515875000
unkown image
page readonly
clean
37A0000
unkown
page read and write
clean
7F3A2000
unkown image
page readonly
clean
E15000
heap default
page read and write
clean
6D0000
unkown image
page read and write
clean
3A33000
unkown
page read and write
clean
20A10400000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5385000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
80000
unkown image
page read and write
clean
4EE6000
unkown
page read and write
clean
2FC000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7DF58A500000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
7F780000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
37A1000
unkown
page read and write
clean
1749244B000
unkown
page read and write
clean
5447000
unkown
page read and write
clean
20A15850000
unkown
page read and write
clean
18554D02000
unkown
page read and write
clean
26215BD0000
unkown
page read and write
clean
726000
unkown
page execute and read and write
clean
1B580668000
unkown
page read and write
clean
7DF5FB400000
unkown image
page readonly
clean
4960000
unkown
page read and write
clean
7FF574AF7000
unkown image
page readonly
clean
7FF574AD2000
unkown image
page readonly
clean
18555000000
unkown image
page readonly
clean
20A15CD0000
unkown
page read and write
clean
4E80000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4A8EE7C000
unkown
page read and write
clean
20A15AE0000
unkown
page read and write
clean
20A10513000
unkown
page read and write
clean
2FFE000
unkown
page read and write
clean
20A102E0000
unkown image
page readonly
clean
1C8188D0000
unkown image
page readonly
clean
C5A000
unkown
page execute and read and write
clean
20A15870000
unkown
page read and write
clean
7DF58E8C2000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
7FF4F31FC000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
19E6C670000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF5068BF000
unkown image
page readonly
clean
4ED0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3806000
unkown
page read and write
clean
379D000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5446000
unkown
page read and write
clean
E00000
unkown image
page read and write
clean
10AF000
unkown
page read and write
clean
7F882000
unkown image
page readonly
clean
7FF51DA69000
unkown image
page readonly
clean
294E000
unkown
page read and write
clean
55B1000
unkown
page read and write
clean
7FF506398000
unkown image
page readonly
clean
39ED000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF51DA27000
unkown image
page readonly
clean
7FF4F34DE000
unkown image
page readonly
clean
20A102C0000
unkown image
page readonly
clean
7F170000
unkown image
page readonly
clean
20A15A41000
unkown
page read and write
clean
54E6000
unkown
page read and write
clean
7DF52B220000
unkown image
page readonly
clean
7FF574982000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
1C818702000
unkown
page read and write
clean
7F180000
unkown image
page readonly
clean
7FE82000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7DF58E8C0000
unkown image
page readonly
clean
7DF508E02000
unkown image
page readonly
clean
1360000
unkown
page read and write
clean
7DF58A500000
unkown image
page readonly
clean
19E6BFF0000
heap default
page read and write
clean
584C000
unkown
page read and write
clean
BA0000
unkown image
page readonly
clean
7FF51D8A7000
unkown image
page readonly
clean
7DF508E00000
unkown image
page readonly
clean
7FF50665D000
unkown image
page readonly
clean
1B580C02000
unkown
page read and write
clean
7FF56B3AA000
unkown image
page readonly
clean
391D000
unkown
page read and write
clean
14C0000
heap private
page execute and read and write
clean
37EA000
unkown
page read and write
clean
7DF508E02000
unkown image
page readonly
clean
7AB000
heap default
page read and write
clean
54E0000
unkown
page read and write
clean
940000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
587B000
unkown
page read and write
clean
147F000
unkown
page read and write
clean
5380000
unkown image
page readonly
clean
7FF578FBB000
unkown image
page readonly
clean
7FF56B1FD000
unkown image
page readonly
clean
39ED000
unkown
page read and write
clean
389B000
unkown
page read and write
clean
39C0000
unkown
page read and write
clean
7FF5E59F2000
unkown image
page readonly
clean
D34000
unkown
page read and write
clean
2CF0000
unkown
page read and write
clean
20A11260000
unkown
page read and write
clean
55AF000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
3780000
unkown
page read and write
clean
DA128FF000
unkown
page read and write
clean
6E0000
unkown image
page readonly
clean
770000
heap default
page read and write
clean
5350000
unkown
page read and write
clean
12DE000
unkown
page read and write
clean
7FF574BEB000
unkown image
page readonly
clean
5380000
unkown
page read and write
clean
55B1000
unkown
page read and write
clean
399F000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7DF51C1D0000
unkown image
page readonly
clean
1B58067A000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5820000
unkown
page read and write
clean
54EC000
unkown
page read and write
clean
7FF578EE8000
unkown image
page readonly
clean
5460000
unkown image
page readonly
clean
EF6000
unkown
page read and write
clean
26A975B000
unkown
page read and write
clean
950000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1C818656000
unkown
page read and write
clean
55B0000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF578F8F000
unkown image
page readonly
clean
4A8ECFC000
unkown
page read and write
clean
F8A000
unkown
page execute and read and write
clean
2E44000
unkown
page read and write
clean
2960000
unkown image
page readonly
clean
3809000
unkown
page read and write
clean
4ED0000
unkown
page read and write
clean
7F2A0000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
DA12277000
unkown
page read and write
clean
5380000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF51DA65000
unkown image
page readonly
clean
17492980000
unkown image
page readonly
clean
7FF51D7BA000
unkown image
page readonly
clean
54E0000
unkown
page read and write
clean
DA1267B000
unkown
page read and write
clean
7FF574AE5000
unkown image
page readonly
clean
7FF4F33C7000
unkown image
page readonly
clean
7FF5158CF000
unkown image
page readonly
clean
3855000
unkown
page read and write
clean
37E0000
unkown
page read and write
clean
7FF5E58CC000
unkown image
page readonly
clean
BC2000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
7FF506886000
unkown image
page readonly
clean
A40000
unkown image
page readonly
clean
19E6C2D0000
unkown image
page readonly
clean
53A0000
unkown
page read and write
clean
C62000
unkown
page execute and read and write
clean
584C000
unkown
page read and write
clean
7F190000
unkown image
page readonly
clean
17492453000
unkown
page read and write
clean
7FEA0000
unkown image
page readonly
clean
7FF578F05000
unkown image
page readonly
clean
19E6C802000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
1749243C000
unkown
page read and write
clean
7DF51C1B2000
unkown image
page readonly
clean
26215C20000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
90000
unkown image
page readonly
clean
7FF56B36C000
unkown image
page readonly
clean
2E40000
unkown
page read and write
clean
18554BC0000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
54B0000
unkown
page read and write
clean
7F8A0000
unkown image
page readonly
clean
288ADA4C000
unkown
page read and write
clean
4966000
unkown
page read and write
clean
20A15B02000
unkown
page read and write
clean
7FF5E5A18000
unkown image
page readonly
clean
7DF51C1D0000
unkown image
page readonly
clean
7F010000
unkown
page execute and read and write
clean
584C000
unkown
page read and write
clean
39B6000
unkown
page read and write
clean
26215C00000
unkown
page read and write
clean
7F240000
unkown
page execute and read and write
clean
2384000
heap private
page execute and read and write
clean
584E000
unkown
page read and write
clean
7DF4290D0000
unkown image
page readonly
clean
20A102F0000
unkown image
page readonly
clean
6E0000
unkown image
page read and write
clean
4960000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
3A37000
unkown
page read and write
clean
7DF580D70000
unkown image
page readonly
clean
7DF58A4F2000
unkown image
page readonly
clean
394E000
unkown
page read and write
clean
20A15CB0000
unkown
page read and write
clean
20A15AA0000
unkown
page read and write
clean
7DF533432000
unkown image
page readonly
clean
20A10413000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
20A10BE1000
unkown
page read and write
clean
14E0000
unkown image
page readonly
clean
2960000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7F3A0000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF515849000
unkown image
page readonly
clean
1370000
heap private
page read and write
clean
37E0000
unkown
page read and write
clean
7FF5E5A75000
unkown image
page readonly
clean
17492413000
unkown
page read and write
clean
1360000
unkown
page read and write
clean
950000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
4ED0000
unkown
page read and write
clean
39B2000
unkown
page read and write
clean
5470000
unkown
page read and write
clean
D1E000
unkown
page read and write
clean
104E000
unkown
page read and write
clean
7FF574A12000
unkown image
page readonly
clean
C6C000
unkown
page execute and read and write
clean
20A15A31000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF4F33F2000
unkown image
page readonly
clean
3835000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
730000
heap private
page read and write
clean
52FE000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
FA0000
heap default
page read and write
clean
90000
unkown image
page readonly
clean
3830000
unkown
page read and write
clean
1E6000
unkown
page read and write
clean
17492800000
unkown image
page readonly
clean
4F14000
heap private
page read and write
clean
5A0000
unkown image
page readonly
clean
7FF5E59E4000
unkown image
page readonly
clean
ABF7B9E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
384F000
unkown
page read and write
clean
7FF4F3347000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
54F0000
unkown
page read and write
clean
1220000
unkown
page read and write
clean
17492370000
unkown image
page readonly
clean
DA1257E000
unkown
page read and write
clean
49D0000
unkown
page read and write
clean
2960000
unkown
page read and write
clean
3843000
unkown
page read and write
clean
5380000
unkown image
page readonly
clean
55B0000
unkown
page read and write
clean
D37000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
3898000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF5067F5000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
E10000
unkown image
page readonly
clean
5440000
unkown
page read and write
clean
1005000
heap default
page read and write
clean
4960000
unkown
page read and write
clean
1B580658000
unkown
page read and write
clean
2CDE000
unkown
page read and write
clean
D7E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
3A29000
unkown
page read and write
clean
2960000
unkown
page read and write
clean
7FF578F35000
unkown image
page readonly
clean
20A11460000
unkown image
page readonly
clean
4EF8000
unkown
page read and write
clean
7DF533420000
unkown image
page readonly
clean
7FF4F3445000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
26216402000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5500000
unkown
page read and write
clean
74C000
unkown
page execute and read and write
clean
3970000
unkown
page read and write
clean
7F3C0000
unkown image
page readonly
clean
54E6000
unkown
page read and write
clean
20A10478000
unkown
page read and write
clean
722000
unkown
page read and write
clean
4C9E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
54F8000
unkown
page read and write
clean
A40000
unkown image
page readonly
clean
3026000
heap private
page execute and read and write
clean
1B580644000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
39D8000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
20A10600000
unkown image
page readonly
clean
7FF51DA73000
unkown image
page readonly
clean
54E0000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
DC0000
heap default
page read and write
clean
7FF4F31FA000
unkown image
page readonly
clean
ABF7B1E000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
577E000
unkown
page read and write
clean
6E0000
unkown image
page readonly
clean
B10000
unkown image
page readonly
clean
17492C02000
unkown
page read and write
clean
4A8EB7F000
unkown
page read and write
clean
7FD20000
unkown
page execute and read and write
clean
18554C65000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
1B58066D000
unkown
page read and write
clean
38C5000
unkown
page read and write
clean
7FF5060D0000
unkown image
page readonly
clean
7DF52B210000
unkown image
page readonly
clean
3899000
unkown
page read and write
clean
7FF5E58D6000
unkown image
page readonly
clean
26215D02000
unkown
page read and write
clean
7FF4F33E4000
unkown image
page readonly
clean
7FF4F3403000
unkown image
page readonly
clean
17492390000
unkown
page read and write
clean
72A000
unkown
page execute and read and write
clean
46D8000
unkown
page read and write
clean
7FF50668E000
unkown image
page readonly
clean
7FF57877D000
unkown image
page readonly
clean
18554A50000
unkown image
page read and write
clean
5821000
unkown
page read and write
clean
7FF50688B000
unkown image
page readonly
clean
2F7E000
unkown
page read and write
clean
20A15B00000
unkown
page read and write
clean
107E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
77A000
heap default
page read and write
clean
38DF000
unkown
page read and write
clean
20A15AF1000
unkown
page read and write
clean
7FF4F2CC8000
unkown image
page readonly
clean
54C0000
unkown
page execute and read and write
clean
3771000
unkown
page read and write
clean
7DF51C1C0000
unkown image
page readonly
clean
392C000
unkown
page read and write
clean
2E40000
unkown
page read and write
clean
20A15A89000
unkown
page read and write
clean
19E6C790000
unkown image
page write copy
clean
2970000
unkown
page execute and read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
2F80000
unkown
page read and write
clean
18554C00000
unkown
page read and write
clean
3A13000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
17492230000
heap private
page read and write
clean
379B000
unkown
page read and write
clean
7FF5067F9000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
379E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
38E4000
unkown
page read and write
clean
7FF5155C6000
unkown image
page readonly
clean
7FF574BBE000
unkown image
page readonly
clean
7F170000
unkown image
page readonly
clean
4EE5000
unkown
page read and write
clean
4A30000
unkown image
page read and write
clean
391F000
unkown
page read and write
clean
7FF51DB1B000
unkown image
page readonly
clean
411807F000
unkown
page read and write
clean
7F180000
unkown image
page readonly
clean
70A000
unkown
page execute and read and write
clean
7DF58E8D0000
unkown image
page readonly
clean
806000
unkown
page read and write
clean
39E9000
unkown
page read and write
clean
1C818AD0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
505E000
unkown
page read and write
clean
20A159B0000
unkown
page read and write
clean
7FF56B399000
unkown image
page readonly
clean
4960000
unkown
page read and write
clean
392E000
unkown
page read and write
clean
230F000
unkown
page read and write
clean
39E2000
unkown
page read and write
clean
DA12379000
unkown
page read and write
clean
7DF533430000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7FF4F341C000
unkown image
page readonly
clean
4117E7E000
unkown
page read and write
clean
BF0000
unkown image
page readonly
clean
F80000
unkown
page read and write
clean
1749244E000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
39F1000
unkown
page read and write
clean
7FF4F34ED000
unkown image
page readonly
clean
17B0000
unkown image
page readonly
clean
3901000
unkown
page read and write
clean
7FF578F09000
unkown image
page readonly
clean
20A11380000
unkown
page read and write
clean
5440000
unkown
page read and write
clean
20A15AD0000
unkown
page read and write
clean
7FF51DB14000
unkown image
page readonly
clean
7FF515817000
unkown image
page readonly
clean
20A104FF000
unkown
page read and write
clean
7DF58E8E0000
unkown image
page readonly
clean
DBB000
unkown
page execute and read and write
clean
2E50000
unkown
page read and write
clean
7FF50670F000
unkown image
page readonly
clean
1340000
unkown image
page readonly
clean
54F0000
unkown
page read and write
clean
7FF4F308A000
unkown image
page readonly
clean
7FF5E5B0F000
unkown image
page readonly
clean
7DF508E20000
unkown image
page readonly
clean
19E6BFA0000
unkown image
page readonly
clean
55B1000
unkown
page read and write
clean
7FF4F3407000
unkown image
page readonly
clean
7FF4F343D000
unkown image
page readonly
clean
54E0000
unkown
page read and write
clean
4966000
unkown
page read and write
clean
7FF5E5A3D000
unkown image
page readonly
clean
3A21000
unkown
page read and write
clean
288AD810000
heap private
page read and write
clean
584C000
unkown
page read and write
clean
98280FE000
unkown
page read and write
clean
5440000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
7FF5E5AF4000
unkown image
page readonly
clean
20A103F0000
unkown image
page readonly
clean
5BC0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
157E000
unkown
page read and write
clean
1C818500000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
DA12C7A000
unkown
page read and write
clean
288ADA80000
unkown
page read and write
clean
26215C02000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
37E4000
unkown
page read and write
clean
4ED4000
unkown
page read and write
clean
3A1F000
unkown
page read and write
clean
2E40000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
393A000
unkown
page read and write
clean
7FF4F3449000
unkown image
page readonly
clean
F00000
unkown image
page readonly
clean
394E000
unkown
page read and write
clean
7E0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
3A33000
unkown
page read and write
clean
7FF5067CC000
unkown image
page readonly
clean
2E56000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
54E5000
unkown
page read and write
clean
26216600000
unkown
page read and write
clean
20A10980000
unkown image
page readonly
clean
37BA000
unkown
page read and write
clean
3971000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3771000
unkown
page read and write
clean
7FF5E5A07000
unkown image
page readonly
clean
18554C6F000
unkown
page read and write
clean
DAEE0FF000
unkown
page read and write
clean
2E55000
unkown
page read and write
clean
20A10C15000
unkown
page read and write
clean
19E6C0BA000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4F1D000
unkown
page read and write
clean
3880000
unkown
page read and write
clean
2E30000
unkown
page execute and read and write
clean
288ADA8E000
unkown
page read and write
clean
7FF4F32AD000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1B5805E0000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
90E000
unkown
page read and write
clean
7DF4883B0000
unkown image
page readonly
clean
20A1048D000
unkown
page read and write
clean
7DF58E8D2000
unkown image
page readonly
clean
F6C000
unkown
page read and write
clean
7FF574434000
unkown image
page readonly
clean
17492424000
unkown
page read and write
clean
39C4000
unkown
page read and write
clean
18554BA0000
unkown image
page readonly
clean
7FF57498D000
unkown image
page readonly
clean
5440000
unkown
page read and write
clean
2950000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
18554A70000
unkown image
page readonly
clean
36D1000
unkown
page read and write
clean
1C818540000
unkown image
page readonly
clean
4EE6000
unkown
page read and write
clean
757000
unkown
page execute and read and write
clean
3780000
unkown
page read and write
clean
5514000
heap private
page read and write
clean
1B580A00000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
1B580600000
unkown
page read and write
clean
7FF57474E000
unkown image
page readonly
clean
1000000
heap default
page read and write
clean
54E6000
unkown
page read and write
clean
3935000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
387F000
unkown
page read and write
clean
3A1F000
unkown
page read and write
clean
7FF574B55000
unkown image
page readonly
clean
3986000
unkown
page read and write
clean
379F000
unkown
page read and write
clean
1B5803C0000
unkown image
page readonly
clean
17492600000
unkown image
page readonly
clean
584D000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
742000
unkown
page execute and read and write
clean
20A159A0000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF56B418000
unkown image
page readonly
clean
5500000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
288AD800000
unkown image
page read and write
clean
4EE0000
unkown
page read and write
clean
1B8267E000
unkown
page read and write
clean
DA1247B000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
37BA000
unkown
page read and write
clean
960000
heap private
page read and write
clean
584C000
unkown
page read and write
clean
7FF5158F4000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
19E6BF80000
unkown image
page read and write
clean
2340000
unkown
page read and write
clean
54B6000
unkown
page read and write
clean
3893000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
382F000
unkown
page read and write
clean
4A8EF7D000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
20A10D59000
unkown
page read and write
clean
7FF578F13000
unkown image
page readonly
clean
20A15978000
unkown
page read and write
clean
7FF5158D6000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
54AE000
unkown
page read and write
clean
A62000
unkown image
page readonly
clean
38FB000
unkown
page read and write
clean
7FF5787DE000
unkown image
page readonly
clean
51C0000
unkown
page read and write
clean
41176FA000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
394B000
unkown
page read and write
clean
10BA000
heap default
page read and write
clean
20A11263000
unkown
page read and write
clean
7DF5FB410000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
20A15A23000
unkown
page read and write
clean
14A0000
unkown
page read and write
clean
7FF51DAFE000
unkown image
page readonly
clean
1C8184E0000
unkown image
page readonly
clean
4F20000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7FF574A6E000
unkown image
page readonly
clean
71C000
unkown
page execute and read and write
clean
3A0B000
unkown
page read and write
clean
19E6C06F000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
1B5803F0000
unkown image
page readonly
clean
7FF56B395000
unkown image
page readonly
clean
7FF51DA12000
unkown image
page readonly
clean
17492496000
unkown
page read and write
clean
288ADB08000
unkown
page read and write
clean
7FF578672000
unkown image
page readonly
clean
4F10000
heap private
page read and write
clean
584C000
unkown
page read and write
clean
26215B30000
unkown image
page read and write
clean
7DF533430000
unkown image
page readonly
clean
26215B80000
unkown image
page readonly
clean
DF0000
unkown image
page readonly
clean
7FF4F33C0000
unkown image
page readonly
clean
4A8E5FC000
unkown
page read and write
clean
39D2000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
39AC000
unkown
page read and write
clean
7FF51DA3C000
unkown image
page readonly
clean
7FF5E5B0B000
unkown image
page readonly
clean
3919000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1C8184E0000
unkown image
page readonly
clean
383A000
unkown
page read and write
clean
387F000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7DF5FB402000
unkown image
page readonly
clean
710000
unkown
page read and write
clean
149A000
unkown
page execute and read and write
clean
20A159E0000
unkown
page read and write
clean
7FF4F33BD000
unkown image
page readonly
clean
4960000
unkown
page read and write
clean
291B000
unkown
page read and write
clean
7FF574B25000
unkown image
page readonly
clean
38CF000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
18554C3D000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
3850000
unkown
page read and write
clean
7DF41A080000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
7FF50687F000
unkown image
page readonly
clean
288AD970000
unkown
page read and write
clean
2E60000
unkown
page read and write
clean
7F8A0000
unkown image
page readonly
clean
7FF4F32C8000
unkown image
page readonly
clean
19E6C0E4000
unkown
page read and write
clean
38AC000
unkown
page read and write
clean
7FE92000
unkown image
page readonly
clean
7FF574BEF000
unkown image
page readonly
clean
7FF4F33FC000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
38B1000
unkown
page read and write
clean
1480000
unkown
page read and write
clean
BEE000
unkown
page read and write
clean
FBB000
unkown
page execute and read and write
clean
5380000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
81E000
unkown
page read and write
clean
19E6C750000
unkown
page read and write
clean
3891000
unkown
page read and write
clean
EA000
unkown
page read and write
clean
20A10D13000
unkown
page read and write
clean
26D1000
unkown
page read and write
clean
1350000
unkown
page read and write
clean
D8A000
unkown
page execute and read and write
clean
5821000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
1C818664000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3987000
unkown
page read and write
clean
1B580662000
unkown
page read and write
clean
533E000
unkown
page read and write
clean
20A114A0000
unkown image
page readonly
clean
7FF4F319A000
unkown image
page readonly
clean
7DF52B212000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
E6A000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
806000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
7FF5066D3000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
4966000
unkown
page read and write
clean
5440000
unkown image
page read and write
clean
584C000
unkown
page read and write
clean
7DF52B200000
unkown image
page readonly
clean
26A9F7E000
unkown
page read and write
clean
39FE000
unkown
page read and write
clean
7FF56AF29000
unkown image
page readonly
clean
3A3B000
unkown
page read and write
clean
1B580642000
unkown
page read and write
clean
5BD0000
unkown
page read and write
clean
920000
unkown
page read and write
clean
379A000
unkown
page read and write
clean
20A15A19000
unkown
page read and write
clean
288ADA54000
unkown
page read and write
clean
1240000
unkown image
page readonly
clean
3A05000
unkown
page read and write
clean
57BE000
unkown
page read and write
clean
3A0F000
unkown
page read and write
clean
7FF4F3203000
unkown image
page readonly
clean
26215BB0000
unkown image
page readonly
clean
4967000
unkown
page read and write
clean
F10000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
7FF56B357000
unkown image
page readonly
clean
54E6000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
288AD820000
unkown image
page readonly
clean
3986000
unkown
page read and write
clean
20A104A1000
unkown
page read and write
clean
2E56000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4E90000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
1C8184D0000
heap private
page read and write
clean
2725000
unkown
page read and write
clean
7FF51DAF6000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
39C0000
unkown
page read and write
clean
7FF51583D000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
39C0000
unkown
page read and write
clean
6CF000
unkown
page read and write
clean
4EE6000
unkown
page read and write
clean
7FF5068BF000
unkown image
page readonly
clean
4960000
unkown
page read and write
clean
7FF578EDC000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF578F88000
unkown image
page readonly
clean
7FF4F350F000
unkown image
page readonly
clean
1B58066F000
unkown
page read and write
clean
F87000
unkown
page execute and read and write
clean
7DF508E12000
unkown image
page readonly
clean
7FF5E5AFE000
unkown image
page readonly
clean
7DF4312F0000
unkown image
page readonly
clean
26216330000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
3898000
unkown
page read and write
clean
7FF51DAEF000
unkown image
page readonly
clean
7FF5E5A45000
unkown image
page readonly
clean
2C97000
unkown
page execute and read and write
clean
17492483000
unkown
page read and write
clean
7FF5E58AD000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
7FF56B45F000
unkown image
page readonly
clean
7FE90000
unkown image
page readonly
clean
486F000
unkown
page read and write
clean
1749248C000
unkown
page read and write
clean
39A3000
unkown
page read and write
clean
DA1207B000
unkown
page read and write
clean
950000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FA000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
1360000
unkown
page read and write
clean
17492240000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
955000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
2960000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
510000
unkown
page read and write
clean
7F172000
unkown image
page readonly
clean
26A9C7B000
unkown
page read and write
clean
14D0000
heap private
page read and write
clean
7FF505F58000
unkown image
page readonly
clean
5380000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
391F000
unkown
page read and write
clean
1B58065C000
unkown
page read and write
clean
DA1297F000
unkown
page read and write
clean
20A10990000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
38C0000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7DF58E8C0000
unkown image
page readonly
clean
982817E000
unkown
page read and write
clean
7FF574A06000
unkown image
page readonly
clean
1B5803C0000
unkown image
page readonly
clean
7FF5748C8000
unkown image
page readonly
clean
7DF580D60000
unkown image
page readonly
clean
38D0000
unkown
page read and write
clean
20A15994000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
54E5000
unkown
page read and write
clean
DD7000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1B580702000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
51C0000
unkown
page read and write
clean
1B58063D000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
A62000
unkown image
page readonly
clean
7FF50689D000
unkown image
page readonly
clean
7F3B0000
unkown image
page readonly
clean
4960000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF56B45B000
unkown image
page readonly
clean
1B580657000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
7FF4F3201000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
37BB000
unkown
page read and write
clean
1018000
heap default
page read and write
clean
7DF580D60000
unkown image
page readonly
clean
7FF56B378000
unkown image
page readonly
clean
7FF574B1D000
unkown image
page readonly
clean
692000
unkown image
page readonly
clean
C70000
heap default
page read and write
clean
D2E000
unkown
page read and write
clean
7FF51D661000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
39D3000
unkown
page read and write
clean
2917000
unkown
page read and write
clean
19E6C932000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
10BE000
heap default
page read and write
clean
1430000
unkown image
page readonly
clean
1B580641000
unkown
page read and write
clean
4EF0000
unkown
page read and write
clean
7FF4F32A4000
unkown image
page readonly
clean
F70000
unkown image
page readonly
clean
382F000
unkown
page read and write
clean
7FF5E5AFB000
unkown image
page readonly
clean
670000
unkown image
page readonly
clean
396A000
unkown
page read and write
clean
1B826FE000
unkown
page read and write
clean
1360000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
397C000
unkown
page read and write
clean
4117F7F000
unkown
page read and write
clean
4E7E000
unkown
page read and write
clean
54E7000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF56B2B5000
unkown image
page readonly
clean
37DF000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
7FF4F32C3000
unkown image
page readonly
clean
5440000
unkown
page read and write
clean
54E6000
unkown
page read and write
clean
1B580663000
unkown
page read and write
clean
1B580675000
unkown
page read and write
clean
3887000
unkown
page read and write
clean
FA5000
heap default
page read and write
clean
57F1000
unkown
page read and write
clean
4A2B000
unkown
page read and write
clean
7FF574AC4000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
DA12E7F000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
7DF52B202000
unkown image
page readonly
clean
37E8000
unkown
page read and write
clean
DA129FF000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
7FF5E5B0F000
unkown image
page readonly
clean
39A1000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
740000
unkown
page read and write
clean
7FF506803000
unkown image
page readonly
clean
288ADA69000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
20A114B0000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
38CF000
unkown
page read and write
clean
3A2C000
unkown
page read and write
clean
1749244A000
unkown
page read and write
clean
17492270000
unkown image
page readonly
clean
7FF51DA5D000
unkown image
page readonly
clean
7FF4F3231000
unkown image
page readonly
clean
56ED000
unkown
page read and write
clean
7FF515853000
unkown image
page readonly
clean
7FF4F2CCB000
unkown image
page readonly
clean
5440000
unkown
page read and write
clean
7FF4F34CF000
unkown image
page readonly
clean
20A10456000
unkown
page read and write
clean
3998000
unkown
page read and write
clean
7DF580D52000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
4EE7000
unkown
page read and write
clean
7FF56B45F000
unkown image
page readonly
clean
54E0000
unkown
page read and write
clean
3921000
unkown
page read and write
clean
288ADA4F000
unkown
page read and write
clean
7FF56AF23000
unkown image
page readonly
clean
5440000
unkown
page read and write
clean
3936000
unkown
page read and write
clean
20A10C02000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
7FF5157F3000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF5068BB000
unkown image
page readonly
clean
7DF508E20000
unkown image
page readonly
clean
DAEE2FD000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FE90000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7DF533422000
unkown image
page readonly
clean
561E000
unkown
page read and write
clean
2965000
unkown
page read and write
clean
2E57000
unkown
page read and write
clean
F66000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
2FBE000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF578EC7000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
18554C13000
unkown
page read and write
clean
2E1E000
unkown
page read and write
clean
7FF5E58A2000
unkown image
page readonly
clean
288ADB02000
unkown
page read and write
clean
14B0000
unkown
page read and write
clean
7DF51C1B0000
unkown image
page readonly
clean
7FF506715000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
18554C5A000
unkown
page read and write
clean
5470000
unkown
page read and write
clean
7FF515845000
unkown image
page readonly
clean
54E0000
unkown
page read and write
clean
3923000
unkown
page read and write
clean
FA0000
heap private
page read and write
clean
1B58067E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF000
unkown
page read and write
clean
7FF578FB4000
unkown image
page readonly
clean
4EEC000
unkown
page read and write
clean
7FF56B2AF000
unkown image
page readonly
clean
7FF4F320D000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
7FF51D87D000
unkown image
page readonly
clean
5800000
unkown
page read and write
clean
7FF515608000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
38CD000
unkown
page read and write
clean
7FE80000
unkown image
page readonly
clean
1C818530000
heap default
page read and write
clean
4D9E000
unkown
page read and write
clean
7F720000
unkown
page execute and read and write
clean
7FF4F3016000
unkown image
page readonly
clean
4A8EC7F000
unkown
page read and write
clean
20A10502000
unkown
page read and write
clean
1330000
unkown
page read and write
clean
7FF57469F000
unkown image
page readonly
clean
54E0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
7FF578FBE000
unkown image
page readonly
clean
3837000
unkown
page read and write
clean
C20000
heap private
page execute and read and write
clean
7DF58E8D0000
unkown image
page readonly
clean
7FE80000
unkown image
page readonly
clean
59E000
unkown
page read and write
clean
7FF578FCB000
unkown image
page readonly
clean
20A10310000
heap default
page read and write
clean
FFE000
unkown
page read and write
clean
3771000
unkown
page read and write
clean
396F000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
38C6000
unkown
page read and write
clean
F72000
unkown
page execute and read and write
clean
670000
unkown image
page readonly
clean
7FF51D9E7000
unkown image
page readonly
clean
7FF5E5817000
unkown image
page readonly
clean
20A10D02000
unkown
page read and write
clean
1B5803B0000
heap private
page read and write
clean
7FF514FAF000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
C0E000
unkown
page read and write
clean
1B823DB000
unkown
page read and write
clean
515E000
unkown
page read and write
clean
41172DB000
unkown
page read and write
clean
3966000
unkown
page read and write
clean
39B8000
unkown
page read and write
clean
20A1043D000
unkown
page read and write
clean
7FF574AE7000
unkown image
page readonly
clean
39F1000
unkown
page read and write
clean
B0A000
unkown
page read and write
clean
2960000
unkown
page read and write
clean
C70000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
561F000
unkown
page read and write
clean
1B828FB000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
AB0000
unkown image
page readonly
clean
496C000
unkown
page read and write
clean
3986000
unkown
page read and write
clean
7FF5E580D000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
17492240000
unkown image
page readonly
clean
533D000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4A8F27F000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
3976000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3A1B000
unkown
page read and write
clean
3841000
unkown
page read and write
clean
7FF51590D000
unkown image
page readonly
clean
18554A90000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF51DB0D000
unkown image
page readonly
clean
4978000
unkown
page read and write
clean
7FF51DA37000
unkown image
page readonly
clean
7DF51C1C0000
unkown image
page readonly
clean
DDA000
unkown
page read and write
clean
19E6C0C1000
unkown
page read and write
clean
584D000
unkown
page read and write
clean
584D000
unkown
page read and write
clean
55D7000
unkown
page read and write
clean
4966000
unkown
page read and write
clean
5445000
unkown
page read and write
clean
7FF4F3041000
unkown image
page readonly
clean
39D7000
unkown
page read and write
clean
7FF56B24E000
unkown image
page readonly
clean
7DF580D70000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
1B58067B000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
411787C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
2C90000
unkown
page read and write
clean
20A10D18000
unkown
page read and write
clean
288AD840000
unkown image
page readonly
clean
5440000
unkown
page read and write
clean
DA1287F000
unkown
page read and write
clean
49C0000
unkown image
page readonly
clean
7FF51D8FE000
unkown image
page readonly
clean
7FF578C83000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF5E5AED000
unkown image
page readonly
clean
288ADB00000
unkown
page read and write
clean
1749244F000
unkown
page read and write
clean
19E6BF90000
heap private
page read and write
clean
7FF506383000
unkown image
page readonly
clean
7F3C0000
unkown image
page readonly
clean
1B58063A000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
4F00000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
7DF58A4F0000
unkown image
page readonly
clean
7FF5156AD000
unkown image
page readonly
clean
20A15991000
unkown
page read and write
clean
4980000
unkown
page read and write
clean
39C8000
unkown
page read and write
clean
7F882000
unkown image
page readonly
clean
7DF52B212000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
6F0000
unkown
page read and write
clean
1B58066B000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
20A10800000
unkown image
page readonly
clean
7FF4F345A000
unkown image
page readonly
clean
7DF52B210000
unkown image
page readonly
clean
20A11280000
unkown
page read and write
clean
54D4000
heap private
page read and write
clean
26216250000
unkown image
page readonly
clean
7FF574B29000
unkown image
page readonly
clean
17492508000
unkown
page read and write
clean
DA12A7F000
unkown
page read and write
clean
7FF5E598E000
unkown image
page readonly
clean
4A1E000
unkown
page read and write
clean
2E00000
unkown
page read and write
clean
5360000
unkown image
page readonly
clean
54E6000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
74A000
unkown
page execute and read and write
clean
7DF58A4F2000
unkown image
page readonly
clean
1B580631000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
37BF000
unkown
page read and write
clean
7FF4F3475000
unkown image
page readonly
clean
4960000
unkown
page read and write
clean
3843000
unkown
page read and write
clean
7FF578F96000
unkown image
page readonly
clean
7DF51C1C2000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
DAEDE7E000
unkown
page read and write
clean
7F182000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
7FF4F34C8000
unkown image
page readonly
clean
7FF4F309F000
unkown image
page readonly
clean
4A37000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
7FF578D6D000
unkown image
page readonly
clean
712000
unkown
page execute and read and write
clean
B60000
unkown
page read and write
clean
7FF5E5ADB000
unkown image
page readonly
clean
8B0000
unkown
page read and write
clean
7FF5E5AD6000
unkown image
page readonly
clean
4980000
unkown
page read and write
clean
37F2000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
2310000
unkown
page execute and read and write
clean
7FF574BCD000
unkown image
page readonly
clean
81B000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
1B58064E000
unkown
page read and write
clean
1C818713000
unkown
page read and write
clean
20A15A00000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF506878000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
3852000
unkown
page read and write
clean
7FF51585A000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
3808000
unkown
page read and write
clean
7FF4F34FB000
unkown image
page readonly
clean
3981000
unkown
page read and write
clean
DCA000
heap default
page read and write
clean
7FF578F1A000
unkown image
page readonly
clean
288AD870000
heap default
page read and write
clean
2E50000
unkown
page read and write
clean
7FF51D9DD000
unkown image
page readonly
clean
19E6C03E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
19E6BFC0000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
7FF56B367000
unkown image
page readonly
clean
7FF4F350B000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
399D000
unkown
page read and write
clean
1B58066A000
unkown
page read and write
clean
12B0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
291D000
unkown
page read and write
clean
4ED6000
unkown
page read and write
clean
4950000
unkown
page read and write
clean
7DF5FB420000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
1270000
heap private
page read and write
clean
20A102B0000
heap private
page read and write
clean
54E0000
unkown
page read and write
clean
39C2000
unkown
page read and write
clean
7FF4F3090000
unkown image
page readonly
clean
3954000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3998000
unkown
page read and write
clean
20A1047A000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
288ADE00000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
20A11480000
unkown image
page readonly
clean
4950000
unkown
page read and write
clean
7FF5068AE000
unkown image
page readonly
clean
1365000
unkown
page read and write
clean
7FF56B273000
unkown image
page readonly
clean
F6A000
unkown
page execute and read and write
clean
7FF5067B7000
unkown image
page readonly
clean
20A15970000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
38ED000
unkown
page read and write
clean
7FF4F335F000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
20A15AA3000
unkown
page read and write
clean
7FF4F32DC000
unkown image
page readonly
clean
7FF574B33000
unkown image
page readonly
clean
17492513000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
3804000
unkown
page read and write
clean
39C2000
unkown
page read and write
clean
20A102A0000
unkown image
page read and write
clean
7FF4F3384000
unkown image
page readonly
clean
300000
unkown
page read and write
clean
DAEDF7E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7F172000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
1360000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7F3A2000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
7FF574A64000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
1B58062D000
unkown
page read and write
clean
9EA000
unkown
page read and write
clean
7FF5749FD000
unkown image
page readonly
clean
7FF5E5ACF000
unkown image
page readonly
clean
1360000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
39BF000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
4A60000
unkown
page execute and read and write
clean
288AE202000
unkown
page read and write
clean
3771000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
17492502000
unkown
page read and write
clean
16E0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
3807000
unkown
page read and write
clean
18554E00000
unkown image
page readonly
clean
19E6C029000
unkown
page read and write
clean
7FF56B223000
unkown image
page readonly
clean
3855000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
1B580410000
heap default
page read and write
clean
7FF5158C8000
unkown image
page readonly
clean
7DF58A4F0000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
1082000
heap default
page read and write
clean
F7C000
unkown
page execute and read and write
clean
2C9B000
unkown
page execute and read and write
clean
3A34000
unkown
page read and write
clean
81F000
unkown
page read and write
clean
7FF574938000
unkown image
page readonly
clean
288ADA13000
unkown
page read and write
clean
20A159A0000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
395F000
unkown
page read and write
clean
38E2000
unkown
page read and write
clean
7DF4F92D0000
unkown image
page readonly
clean
20A15CA0000
unkown
page read and write
clean
17492455000
unkown
page read and write
clean
1B580664000
unkown
page read and write
clean
82E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
39F1000
unkown
page read and write
clean
692000
unkown image
page readonly
clean
1B580629000
unkown
page read and write
clean
262160D0000
unkown image
page readonly
clean
390B000
unkown
page read and write
clean
54B0000
unkown
page read and write
clean
39E2000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
39BC000
unkown
page read and write
clean
5920000
unkown image
page read and write
clean
288ADA52000
unkown
page read and write
clean
19E6C000000
unkown
page read and write
clean
17492290000
heap default
page read and write
clean
1050000
heap default
page read and write
clean
4965000
unkown
page read and write
clean
3805000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1B82C7E000
unkown
page read and write
clean
7F892000
unkown image
page readonly
clean
7FF4F2FBF000
unkown image
page readonly
clean
20A10C00000
unkown
page read and write
clean
3970000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF51DB2F000
unkown image
page readonly
clean
379D000
unkown
page read and write
clean
2980000
unkown
page read and write
clean
DA127FF000
unkown
page read and write
clean
950000
unkown
page read and write
clean
104C000
heap default
page read and write
clean
4960000
unkown
page read and write
clean
7FF4F3217000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7DF580D62000
unkown image
page readonly
clean
1B580659000
unkown
page read and write
clean
26216260000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
7FF515807000
unkown image
page readonly
clean
17492500000
unkown
page read and write
clean
4950000
unkown
page execute and read and write
clean
982807B000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
288ADF80000
unkown image
page readonly
clean
3A37000
unkown
page read and write
clean
E10000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
515C000
unkown
page read and write
clean
1B58062E000
unkown
page read and write
clean
18554C54000
unkown
page read and write
clean
7F0000
unkown image
page readonly
clean
7FF4F30B4000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
4940000
heap private
page read and write
clean
584C000
unkown
page read and write
clean
7F880000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
4930000
unkown
page execute and read and write
clean
3A1F000
unkown
page read and write
clean
2F80000
unkown
page read and write
clean
4117C7F000
unkown
page read and write
clean
7FE82000
unkown image
page readonly
clean
1B580679000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7DF52B202000
unkown image
page readonly
clean
26215C40000
unkown
page read and write
clean
7FF5067C7000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
18554A60000
heap private
page read and write
clean
7FF56B43D000
unkown image
page readonly
clean
7FF5158DB000
unkown image
page readonly
clean
18554C75000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
5440000
unkown
page read and write
clean
9E4000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
19E6C900000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
2E46000
unkown
page read and write
clean
288AD950000
unkown image
page readonly
clean
DAEE37E000
unkown
page read and write
clean
6D0000
unkown image
page read and write
clean
38A5000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
1B580665000
unkown
page read and write
clean
42000
unkown image
page readonly
clean
7FF51D636000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
2960000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
382E000
unkown
page read and write
clean
38D0000
unkown
page read and write
clean
58BE000
unkown
page read and write
clean
7FF5158ED000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
2E68000
unkown
page read and write
clean
19E6C4D0000
unkown image
page readonly
clean
7FF51590F000
unkown image
page readonly
clean
3020000
heap private
page execute and read and write
clean
7FF574388000
unkown image
page readonly
clean
FFE000
unkown
page read and write
clean
7FF5E58DF000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
D22000
unkown
page read and write
clean
18554C29000
unkown
page read and write
clean
7FF4F34DB000
unkown image
page readonly
clean
AF6000
unkown
page read and write
clean
1C818C50000
unkown image
page readonly
clean
19E6C0CB000
unkown
page read and write
clean
2E5C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF5E5AC8000
unkown image
page readonly
clean
7FF506573000
unkown image
page readonly
clean
3A0D000
unkown
page read and write
clean
7FF56B3C5000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
7DF533440000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
7FF4F31C9000
unkown image
page readonly
clean
398C000
unkown
page read and write
clean
2E56000
unkown
page read and write
clean
7FF4F3428000
unkown image
page readonly
clean
384E000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
54F0000
unkown
page read and write
clean
5196000
heap private
page execute and read and write
clean
2E57000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF50680A000
unkown image
page readonly
clean
53A0000
unkown image
page readonly
clean
1B580B80000
unkown image
page readonly
clean
288ADA57000
unkown
page read and write
clean
7FF51DA7A000
unkown image
page readonly
clean
382F000
unkown
page read and write
clean
379C000
unkown
page read and write
clean
288ADC00000
unkown image
page readonly
clean
26216330000
unkown
page read and write
clean
17492470000
unkown
page read and write
clean
7FF51D846000
unkown image
page readonly
clean
20A15CD0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF5158E0000
unkown image
page readonly
clean
17492260000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
806000
unkown
page read and write
clean
ABF81F7000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
20A15A62000
unkown
page read and write
clean
3A63000
unkown
page read and write
clean
4944000
heap private
page read and write
clean
37BA000
unkown
page read and write
clean
4EE6000
unkown
page read and write
clean
2E60000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
3884000
unkown
page read and write
clean
7FF4F31CE000
unkown image
page readonly
clean
1230000
unkown image
page readonly
clean
7FF506825000
unkown image
page readonly
clean
38D5000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7CE000
unkown
page read and write
clean
54B0000
unkown
page read and write
clean
19E6BFD0000
unkown image
page readonly
clean
20A15C80000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
38E4000
unkown
page read and write
clean
7DF5FB412000
unkown image
page readonly
clean
4A20000
unkown
page execute and read and write
clean
379D000
unkown
page read and write
clean
288ADA70000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
26215B40000
heap private
page read and write
clean
3771000
unkown
page read and write
clean
385D000
unkown
page read and write
clean
5BC0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
98282FE000
unkown
page read and write
clean
5448000
unkown
page read and write
clean
7FF51D9CD000
unkown image
page readonly
clean
4EE0000
unkown
page read and write
clean
18555402000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
1B580646000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
9D7000
unkown
page read and write
clean
20A159B4000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7FF5067D8000
unkown image
page readonly
clean
5821000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
523C000
unkown
page read and write
clean
20A10494000
unkown
page read and write
clean
288AD850000
unkown image
page readonly
clean
7FF506734000
unkown image
page readonly
clean
55E000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
7DF58E8E0000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
2350000
heap private
page read and write
clean
54B4000
unkown
page read and write
clean
7DF47EC20000
unkown image
page readonly
clean
18554D00000
unkown
page read and write
clean
7FF5E51C2000
unkown image
page readonly
clean
7FF56B426000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
3971000
unkown
page read and write
clean
7FF5157D0000
unkown image
page readonly
clean
7DF5FB402000
unkown image
page readonly
clean
3912000
unkown
page read and write
clean
7FF4F34FE000
unkown image
page readonly
clean
3A20000
unkown
page read and write
clean
5821000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
7FF574BAF000
unkown image
page readonly
clean
7DF51C1C2000
unkown image
page readonly
clean
7FF56B44B000
unkown image
page readonly
clean
7FF51DB1E000
unkown image
page readonly
clean
584E000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF56B41F000
unkown image
page readonly
clean
20A15CD0000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
54E0000
unkown
page read and write
clean
3894000
unkown
page read and write
clean
7FF506389000
unkown image
page readonly
clean
2E60000
unkown
page read and write
clean
9ED000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
20A10D00000
unkown
page read and write
clean
37EA000
unkown
page read and write
clean
7FF574BD4000
unkown image
page readonly
clean
18554A70000
unkown image
page readonly
clean
7DF48C790000
unkown image
page readonly
clean
7FF5E5AE0000
unkown image
page readonly
clean
3A02000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
105A000
heap default
page read and write
clean
4EE0000
unkown
page read and write
clean
1B58065A000
unkown
page read and write
clean
7FF578F9B000
unkown image
page readonly
clean
20A15A4E000
unkown
page read and write
clean
7FF5155B8000
unkown image
page readonly
clean
393A000
unkown
page read and write
clean
7FF578EFD000
unkown image
page readonly
clean
2E50000
unkown
page read and write
clean
808000
unkown
page read and write
clean
3880000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7DF508E12000
unkown image
page readonly
clean
5B0000
unkown image
page readonly
clean
584C000
unkown
page read and write
clean
14BA000
unkown
page execute and read and write
clean
584C000
unkown
page read and write
clean
584E000
unkown
page read and write
clean
1C818E02000
unkown
page read and write
clean
5450000
unkown
page read and write
clean
584C000
unkown
page read and write
clean
7FF574AE3000
unkown image
page readonly
clean
There are 2098 hidden memdumps, click here to show them.