IOC Report

loading gif

Files

File Path
Type
Category
Malicious
DRAFT BL-DOCS-20211510-VP-KMC022021.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\DRAFT BL-DOCS-20211510-VP-KMC022021.exe.log
ASCII text, with CRLF line terminators
modified
malicious
C:\Users\user\AppData\Local\Temp\tmpE11E.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\run.dat
data
dropped
malicious
C:\Users\user\AppData\Roaming\vlzcRkmDiOmdD.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
clean
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\RegSvcs.exe.log
ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\dhcpmon.exe.log
ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
data
dropped
clean
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_1h0ncl35.cdw.psm1
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_q1houbac.oki.ps1
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\tmp719C.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\tmp767F.tmp
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\task.dat
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Roaming\vlzcRkmDiOmdD.exe:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\Documents\20211023\PowerShell_transcript.932923.eZdTXog+.20211023213159.txt
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
clean
There are 7 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\DRAFT BL-DOCS-20211510-VP-KMC022021.exe
'C:\Users\user\Desktop\DRAFT BL-DOCS-20211510-VP-KMC022021.exe'
malicious
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\Desktop\DRAFT BL-DOCS-20211510-VP-KMC022021.exe'
malicious
C:\Windows\SysWOW64\schtasks.exe
'C:\Windows\System32\schtasks.exe' /Create /TN 'Updates\vlzcRkmDiOmdD' /XML 'C:\Users\user\AppData\Local\Temp\tmpE11E.tmp'
malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
malicious
C:\Windows\SysWOW64\schtasks.exe
'schtasks.exe' /create /f /tn 'DHCP Monitor' /xml 'C:\Users\user\AppData\Local\Temp\tmp719C.tmp'
malicious
C:\Windows\SysWOW64\schtasks.exe
'schtasks.exe' /create /f /tn 'DHCP Monitor Task' /xml 'C:\Users\user\AppData\Local\Temp\tmp767F.tmp'
malicious
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe 0
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe
'C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe' 0
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe
'C:\Program Files (x86)\DHCP Monitor\dhcpmon.exe'
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
There are 6 hidden processes, click here to show them.

URLs

Name
IP
Malicious
malicious
185.140.53.75
malicious
https://github.com/bruhov/WinThumbsPreloader
unknown
clean
https://bruhov.com/WinThumbsPreloader%WinThumbsPreloader
unknown
clean
http://www.collada.org/2005/11/COLLADASchema9Done
unknown
clean
https://bruhov.com/WinThumbsPreloader
unknown
clean

IPs

IP
Domain
Country
Malicious
185.140.53.75
unknown
Sweden
malicious

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run
DHCP Monitor
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
2C31000
unkown
page read and write
malicious
402000
unkown
page execute and read and write
malicious
3C2B000
unkown
page read and write
malicious
43F7000
unkown
page read and write
malicious
3CB2000
unkown
page read and write
malicious
5FB0000
unkown image
page read and write
malicious
2B81000
unkown
page read and write
malicious
7FF5EAACD000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
920C6DA000
unkown
page read and write
clean
7DF528A62000
unkown image
page readonly
clean
7FF5C808F000
unkown image
page readonly
clean
15C4349D000
unkown
page read and write
clean
456A000
unkown
page read and write
clean
1ECD7A36000
unkown
page read and write
clean
18A5B990000
unkown image
page readonly
clean
452000
unkown image
page readonly
clean
7FF5A54F7000
unkown image
page readonly
clean
58BE000
stack
page read and write
clean
142E000
unkown
page read and write
clean
660307E000
stack
page read and write
clean
142E000
unkown
page read and write
clean
6730000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
44CC000
unkown
page read and write
clean
18A5BD18000
unkown
page read and write
clean
26A0000
unkown
page read and write
clean
5340000
unkown
page read and write
clean
15C42F91000
unkown
page read and write
clean
53F0000
unkown
page read and write
clean
110A000
heap default
page read and write
clean
6490000
unkown
page read and write
clean
7FF51ECA3000
unkown image
page readonly
clean
18A60CEF000
unkown
page read and write
clean
44EC000
unkown
page read and write
clean
15C42CE0000
unkown
page read and write
clean
5610000
unkown
page read and write
clean
DC0000
unkown image
page read and write
clean
18A60900000
unkown
page read and write
clean
4710000
unkown
page read and write
clean
1317000
unkown
page execute and read and write
clean
17A7C700000
unkown
page read and write
clean
D30000
unkown image
page readonly
clean
3BC1000
unkown
page read and write
clean
4930E7A000
stack
page read and write
clean
200DC310000
unkown image
page readonly
clean
570000
unkown image
page readonly
clean
18A608DE000
unkown
page read and write
clean
4E90000
unkown
page read and write
clean
5423000
unkown
page read and write
clean
7FEFFF000
stack
page read and write
clean
7DF4CFF30000
unkown image
page readonly
clean
17A7C4B0000
heap private
page read and write
clean
18A60CDA000
unkown
page read and write
clean
13BEFCD0000
heap default
page read and write
clean
1710000
unkown
page read and write
clean
7FF5C8145000
unkown image
page readonly
clean
7FF5C8271000
unkown image
page readonly
clean
6111000
unkown
page read and write
clean
2740000
unkown
page read and write
clean
472D000
unkown
page read and write
clean
7FF5A5454000
unkown image
page readonly
clean
7FF5C828B000
unkown image
page readonly
clean
13EC000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
18A5B4FC000
unkown
page read and write
clean
15C42FBE000
unkown
page read and write
clean
7FF52B091000
unkown image
page readonly
clean
45AD000
unkown
page read and write
clean
7DF5AF4F0000
unkown image
page readonly
clean
7FF42000
unkown image
page readonly
clean
7F8C2000
unkown image
page readonly
clean
13E9000
unkown
page read and write
clean
7FF5A55C1000
unkown image
page readonly
clean
15C42F7C000
unkown
page read and write
clean
15C42FB3000
unkown
page read and write
clean
4DB0000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
493107B000
stack
page read and write
clean
7FF5EAB82000
unkown image
page readonly
clean
7FF50000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
7FF5ADA7F000
unkown image
page readonly
clean
7FF5C82C2000
unkown image
page readonly
clean
4451000
unkown
page read and write
clean
213BD913000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
5EAD000
stack
page read and write
clean
F70000
heap private
page read and write
clean
213BD5F0000
unkown image
page readonly
clean
1ECD7A50000
unkown
page read and write
clean
665B000
unkown
page read and write
clean
297EA7E000
stack
page read and write
clean
15C426C8000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
18A5B4A2000
unkown
page read and write
clean
141D000
unkown
page read and write
clean
970000
unkown image
page readonly
clean
7F222000
unkown image
page readonly
clean
15C42F81000
unkown
page read and write
clean
3030000
unkown
page execute and read and write
clean
45E5000
unkown
page read and write
clean
7FF5A531A000
unkown image
page readonly
clean
1ECD7A4F000
unkown
page read and write
clean
15C42F77000
unkown
page read and write
clean
3472000
unkown
page read and write
clean
493117E000
stack
page read and write
clean
7FF51E921000
unkown image
page readonly
clean
5D27000
unkown
page read and write
clean
200DC360000
heap default
page read and write
clean
6631000
unkown
page read and write
clean
213BD87D000
unkown
page read and write
clean
7F690000
unkown image
page readonly
clean
5CDE000
stack
page read and write
clean
159A000
unkown
page execute and read and write
clean
581E000
stack
page read and write
clean
6631000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF5EA8BE000
unkown image
page readonly
clean
E70000
heap private
page read and write
clean
453A000
unkown
page read and write
clean
138A000
unkown
page execute and read and write
clean
269C000
unkown
page execute and read and write
clean
7FF5AD9C1000
unkown image
page readonly
clean
2FE0000
unkown
page read and write
clean
7FF5C820D000
unkown image
page readonly
clean
4673000
unkown
page read and write
clean
213BD610000
unkown image
page readonly
clean
18A60A10000
unkown
page read and write
clean
46A6000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
7FF5C81F2000
unkown image
page readonly
clean
7FF51EBD6000
unkown image
page readonly
clean
7FF5AD998000
unkown image
page readonly
clean
15C42F86000
unkown
page read and write
clean
213BD83C000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5AD318000
unkown image
page readonly
clean
7F672000
unkown image
page readonly
clean
7FF52B0E7000
unkown image
page readonly
clean
7FF52AFF3000
unkown image
page readonly
clean
54A0000
unkown
page read and write
clean
18A60CA2000
unkown
page read and write
clean
15C42FA7000
unkown
page read and write
clean
57DE000
stack
page read and write
clean
7FF5C7A2D000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C43402000
unkown
page read and write
clean
7FF5EA957000
unkown image
page readonly
clean
4E62000
unkown
page read and write
clean
1710000
unkown
page read and write
clean
4451000
unkown
page read and write
clean
15C425E0000
unkown image
page readonly
clean
7FF536587000
unkown image
page readonly
clean
7FF52A84D000
unkown image
page readonly
clean
4D90000
unkown
page read and write
clean
470C000
unkown
page read and write
clean
4482000
unkown
page read and write
clean
13BEFC20000
unkown
page read and write
clean
7FF5A5707000
unkown image
page readonly
clean
6603277000
stack
page read and write
clean
D20000
unkown image
page read and write
clean
15C42F9E000
unkown
page read and write
clean
7E0000
unkown
page read and write
clean
4481000
unkown
page read and write
clean
12A0000
unkown image
page read and write
clean
7FF51E761000
unkown image
page readonly
clean
7FF51EA77000
unkown image
page readonly
clean
7FF51EBB1000
unkown image
page readonly
clean
15C426C1000
unkown
page read and write
clean
FCF000
unkown
page read and write
clean
5360000
unkown
page execute and read and write
clean
142E000
unkown
page read and write
clean
458000
unkown image
page readonly
clean
5541000
unkown
page read and write
clean
18A5B270000
heap default
page read and write
clean
142E000
unkown
page read and write
clean
7FF5EAAD7000
unkown image
page readonly
clean
7FF5ADB4B000
unkown image
page readonly
clean
15C42460000
heap private
page read and write
clean
1100000
heap default
page read and write
clean
15F3279000
stack
page read and write
clean
44EC000
unkown
page read and write
clean
7FF5C7D77000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
17A7C708000
unkown
page read and write
clean
5D2000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
17A7C5F0000
unkown image
page readonly
clean
F36000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
57C0000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
1ECD7F30000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
15C43500000
unkown
page read and write
clean
15C42FA7000
unkown
page read and write
clean
12E0000
unkown
page read and write
clean
1700000
unkown
page read and write
clean
458F000
unkown
page read and write
clean
4586000
unkown
page read and write
clean
15C4349D000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
BBD1AFB000
stack
page read and write
clean
7DF5D2060000
unkown image
page readonly
clean
7FF0FD000
stack
page read and write
clean
4601000
unkown
page read and write
clean
A8E000
stack
page read and write
clean
7FF5C80B6000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
7FF5A56AE000
unkown image
page readonly
clean
5FD0000
unkown
page read and write
clean
2670000
heap private
page read and write
clean
213BD855000
unkown
page read and write
clean
4C5C000
stack
page read and write
clean
7FF5EAB73000
unkown image
page readonly
clean
543C000
unkown
page read and write
clean
50D1000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF5A5746000
unkown image
page readonly
clean
7DF540332000
unkown image
page readonly
clean
7FF5EA8CB000
unkown image
page readonly
clean
17A7CE02000
unkown
page read and write
clean
7F5F0000
unkown image
page readonly
clean
456C000
unkown
page read and write
clean
4ED0000
unkown
page read and write
clean
15C42FA9000
unkown
page read and write
clean
7DF540340000
unkown image
page readonly
clean
18A608F0000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
45F2000
unkown
page read and write
clean
18A5B600000
unkown image
page readonly
clean
18A60CDE000
unkown
page read and write
clean
3BF7000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
4595000
unkown
page read and write
clean
4480000
unkown
page read and write
clean
7FF5A565F000
unkown image
page readonly
clean
2F4E000
stack
page read and write
clean
3057000
unkown
page read and write
clean
13BEFD1E000
unkown
page read and write
clean
54B0000
unkown
page read and write
clean
46CE000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
5D20000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
5FD8000
unkown
page read and write
clean
BBD1BFB000
stack
page read and write
clean
142E000
unkown
page read and write
clean
7FF5EA91A000
unkown image
page readonly
clean
7FF52AF65000
unkown image
page readonly
clean
15C42F99000
unkown
page read and write
clean
7FEE7F000
stack
page read and write
clean
4620000
unkown
page read and write
clean
46C1000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
451A000
unkown
page read and write
clean
3569000
unkown
page read and write
clean
7FF536573000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
15C42490000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
7F682000
unkown image
page readonly
clean
7FF5ADB87000
unkown image
page readonly
clean
7FF5A5704000
unkown image
page readonly
clean
4691000
unkown
page read and write
clean
7FF5A54FD000
unkown image
page readonly
clean
1ECD7BA0000
heap private
page read and write
clean
18A5B48F000
unkown
page read and write
clean
10F6000
unkown
page read and write
clean
7FF52AFEF000
unkown image
page readonly
clean
7FF5A567A000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
30AE000
stack
page read and write
clean
46A0000
unkown
page read and write
clean
15C42F86000
unkown
page read and write
clean
15C43402000
unkown
page read and write
clean
15C42F85000
unkown
page read and write
clean
7FED7B000
stack
page read and write
clean
18A5B4AE000
unkown
page read and write
clean
920C7DF000
stack
page read and write
clean
E60000
unkown image
page readonly
clean
15C42F9D000
unkown
page read and write
clean
18A5B48B000
unkown
page read and write
clean
18A60C4E000
unkown
page read and write
clean
7FF5C8284000
unkown image
page readonly
clean
7FF5EA990000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
44EF000
unkown
page read and write
clean
53F0000
unkown
page read and write
clean
15F337B000
stack
page read and write
clean
6631000
unkown
page read and write
clean
7FF5C82C7000
unkown image
page readonly
clean
7FF40000
unkown image
page readonly
clean
4650000
unkown
page read and write
clean
3C7E000
unkown
page read and write
clean
200DC45F000
unkown
page read and write
clean
13D6000
unkown
page read and write
clean
7FF536495000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
454A000
unkown
page read and write
clean
5390000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
7DF5F4932000
unkown image
page readonly
clean
15C42F90000
unkown
page read and write
clean
7DF5F4940000
unkown image
page readonly
clean
46E0000
unkown
page read and write
clean
18A5B46D000
unkown
page read and write
clean
26E0000
heap private
page read and write
clean
18A5B43D000
unkown
page read and write
clean
D5E000
stack
page read and write
clean
7FE97E000
stack
page read and write
clean
7DF534E82000
unkown image
page readonly
clean
7FF52AEA7000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
7DF5D2070000
unkown image
page readonly
clean
7FF51EBE2000
unkown image
page readonly
clean
7FF5364D7000
unkown image
page readonly
clean
3056000
unkown
page read and write
clean
15C42F8D000
unkown
page read and write
clean
665B000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
467A000
unkown
page read and write
clean
7FF5AD90C000
unkown image
page readonly
clean
4516000
unkown
page read and write
clean
7DF5D2062000
unkown image
page readonly
clean
18A608D0000
unkown
page read and write
clean
50CD000
stack
page read and write
clean
7FF5C81DD000
unkown image
page readonly
clean
18A5B489000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
157A000
unkown
page execute and read and write
clean
7FF5A4F16000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
46BD000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
12E2000
unkown
page execute and read and write
clean
468D000
unkown
page read and write
clean
7FF5ADAD7000
unkown image
page readonly
clean
463C000
unkown
page read and write
clean
1140000
unkown image
page readonly
clean
15C42FA7000
unkown
page read and write
clean
7DF540330000
unkown image
page readonly
clean
4E40000
unkown image
page readonly
clean
5450000
unkown
page read and write
clean
5830000
heap private
page execute and read and write
clean
920CA79000
stack
page read and write
clean
7DF5B7940000
unkown image
page readonly
clean
15A7000
unkown
page execute and read and write
clean
7FF5EAA69000
unkown image
page readonly
clean
131B000
unkown
page execute and read and write
clean
6631000
unkown
page read and write
clean
2692000
unkown
page execute and read and write
clean
3050000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
17A7C4F0000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
15C42FB3000
unkown
page read and write
clean
45C8000
unkown
page read and write
clean
15C42F90000
unkown
page read and write
clean
2FCE000
stack
page read and write
clean
467E000
unkown
page read and write
clean
213BD900000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
3030000
unkown
page read and write
clean
15C42F8C000
unkown
page read and write
clean
7FF5A55D5000
unkown image
page readonly
clean
5D20000
unkown image
page read and write
clean
7FF5A54B4000
unkown image
page readonly
clean
1ECD7870000
unkown image
page readonly
clean
660347F000
stack
page read and write
clean
7F230000
unkown image
page readonly
clean
15C426E5000
unkown
page read and write
clean
7FF52AEAF000
unkown image
page readonly
clean
7FF52AEB7000
unkown image
page readonly
clean
213BD640000
heap default
page read and write
clean
AFD000
heap default
page read and write
clean
5C9E000
stack
page read and write
clean
15C425C0000
unkown
page read and write
clean
5E6000
unkown
page read and write
clean
1ECD79F0000
unkown image
page read and write
clean
5CBC000
stack
page read and write
clean
4FC0000
heap private
page read and write
clean
103C000
unkown
page read and write
clean
451F000
unkown
page read and write
clean
45BD000
unkown
page read and write
clean
64A0000
unkown image
page read and write
clean
5F8E000
stack
page read and write
clean
FC6000
unkown
page read and write
clean
7FF5EA933000
unkown image
page readonly
clean
140F000
unkown
page read and write
clean
1080000
unkown image
page readonly
clean
3056000
unkown
page read and write
clean
18A5B3E1000
unkown
page read and write
clean
15C42F4D000
unkown
page read and write
clean
462E000
unkown
page read and write
clean
1730000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
1090000
heap default
page read and write
clean
142E000
unkown
page read and write
clean
CF7000
unkown
page read and write
clean
297E31D000
stack
page read and write
clean
4DC0000
unkown
page read and write
clean
7FF5A5109000
unkown image
page readonly
clean
57C2000
unkown
page read and write
clean
7FF2FF000
stack
page read and write
clean
4551000
unkown
page read and write
clean
BE0000
unkown image
page readonly
clean
7FF52B0E7000
unkown image
page readonly
clean
15C42CE0000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF5A569D000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
449E000
unkown
page read and write
clean
44D3000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
490000
unkown image
page readonly
clean
4663000
unkown
page read and write
clean
26CE000
stack
page read and write
clean
15C42F86000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
455E000
unkown
page read and write
clean
15C4264D000
unkown
page read and write
clean
140E000
unkown
page read and write
clean
7FF5A52B2000
unkown image
page readonly
clean
7F8B0000
unkown image
page readonly
clean
13BF0B80000
unkown
page read and write
clean
7DF528A50000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
1ECD7980000
unkown
page read and write
clean
45E6000
unkown
page read and write
clean
1710000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
2BF3000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
213BD908000
unkown
page read and write
clean
5470000
unkown
page read and write
clean
5635000
unkown
page read and write
clean
4676000
unkown
page read and write
clean
D32000
unkown
page execute and read and write
clean
1710000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
5EA000
unkown
page read and write
clean
1ECD7A27000
unkown
page read and write
clean
930000
heap default
page read and write
clean
18A5BD13000
unkown
page read and write
clean
17A7C666000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7DF5D2072000
unkown image
page readonly
clean
17A7C680000
unkown
page read and write
clean
7FF51EBCD000
unkown image
page readonly
clean
7FF52000
unkown image
page readonly
clean
13BEFC10000
unkown image
page read and write
clean
15C42F7B000
unkown
page read and write
clean
7F682000
unkown image
page readonly
clean
15C42F82000
unkown
page read and write
clean
18A5BC15000
unkown
page read and write
clean
BE0000
unkown image
page readonly
clean
7FF5A5425000
unkown image
page readonly
clean
D70000
heap private
page execute and read and write
clean
142E000
unkown
page read and write
clean
7FF51EB35000
unkown image
page readonly
clean
11B0000
unkown image
page read and write
clean
15C42F8B000
unkown
page read and write
clean
7DF5D2070000
unkown image
page readonly
clean
4481000
unkown
page read and write
clean
5F0000
unkown image
page readonly
clean
15C42FAA000
unkown
page read and write
clean
451C000
unkown
page read and write
clean
44D5000
unkown
page read and write
clean
7FF5A5717000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
17A7C702000
unkown
page read and write
clean
466F000
unkown
page read and write
clean
7FF52AFE1000
unkown image
page readonly
clean
5390000
unkown image
page read and write
clean
15C426ED000
unkown
page read and write
clean
15C424A0000
unkown image
page readonly
clean
365D000
unkown
page read and write
clean
7FF5EA998000
unkown image
page readonly
clean
7FF5A545A000
unkown image
page readonly
clean
7FF5ADB31000
unkown image
page readonly
clean
18A60CE7000
unkown
page read and write
clean
463D000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C42C70000
unkown image
page write copy
clean
63B000
unkown
page read and write
clean
7F600000
unkown image
page readonly
clean
980000
unkown image
page readonly
clean
7FF42000
unkown image
page readonly
clean
7DF534E92000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
15C42F92000
unkown
page read and write
clean
26A2000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
18A60A30000
unkown
page read and write
clean
7FF5EA631000
unkown image
page readonly
clean
7DF540322000
unkown image
page readonly
clean
1530000
unkown image
page readonly
clean
15C42F88000
unkown
page read and write
clean
4451000
unkown
page read and write
clean
572000
unkown image
page readonly
clean
5820000
unkown
page read and write
clean
200DC310000
unkown image
page readonly
clean
6870000
unkown
page read and write
clean
7FF5AD2FC000
unkown image
page readonly
clean
213BD5D0000
unkown image
page read and write
clean
50F3000
unkown
page read and write
clean
15C42F00000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FEB78000
stack
page read and write
clean
141D000
unkown
page read and write
clean
447D000
unkown
page read and write
clean
13F5000
heap default
page read and write
clean
1310000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7F8C0000
unkown image
page readonly
clean
15A0000
unkown
page read and write
clean
15C42F7C000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
4F30000
unkown image
page read and write
clean
26C7000
unkown
page execute and read and write
clean
213BD87F000
unkown
page read and write
clean
3057000
unkown
page read and write
clean
CE7000
unkown
page read and write
clean
18A5B49B000
unkown
page read and write
clean
BD0000
unkown image
page read and write
clean
6631000
unkown
page read and write
clean
7F110000
unkown image
page readonly
clean
466B000
unkown
page read and write
clean
F2B000
unkown
page execute and read and write
clean
7FF60000
unkown image
page readonly
clean
7FF5ADB73000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
4689000
unkown
page read and write
clean
15C42F97000
unkown
page read and write
clean
DA0000
unkown image
page readonly
clean
7FF5A51CA000
unkown image
page readonly
clean
4E80000
unkown
page read and write
clean
297E7FB000
stack
page read and write
clean
142E000
unkown
page read and write
clean
665C000
unkown
page read and write
clean
4482000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
18A60C1F000
unkown
page read and write
clean
7FF51ECA6000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
4E82000
unkown
page read and write
clean
7DF5B7932000
unkown image
page readonly
clean
4640000
unkown
page read and write
clean
15C42F93000
unkown
page read and write
clean
554A000
unkown
page read and write
clean
13BF0920000
unkown
page read and write
clean
18A5BC00000
unkown
page read and write
clean
18A5BC02000
unkown
page read and write
clean
447D000
unkown
page read and write
clean
1ECD7A40000
unkown
page read and write
clean
12B5000
heap private
page read and write
clean
4451000
unkown
page read and write
clean
15C42FB3000
unkown
page read and write
clean
4599000
unkown
page read and write
clean
7DF534E80000
unkown image
page readonly
clean
464C000
unkown
page read and write
clean
15C42FB8000
unkown
page read and write
clean
18A609F0000
unkown
page read and write
clean
141D000
unkown
page read and write
clean
5540000
unkown
page read and write
clean
1110000
unkown image
page readonly
clean
15C42F91000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
452000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
465A000
unkown
page read and write
clean
45A5000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
200DC6D0000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
1560000
heap private
page read and write
clean
1ECD7890000
unkown image
page readonly
clean
15F32FE000
stack
page read and write
clean
142E000
unkown
page read and write
clean
7FF5C8287000
unkown image
page readonly
clean
3064000
heap private
page execute and read and write
clean
4451000
unkown
page read and write
clean
13BEFC80000
unkown
page read and write
clean
5492000
unkown
page read and write
clean
15C42F7B000
unkown
page read and write
clean
7FF5EAB47000
unkown image
page readonly
clean
13BF08B0000
unkown
page read and write
clean
7FF5EAB34000
unkown image
page readonly
clean
18A5B380000
unkown image
page read and write
clean
4930D79000
stack
page read and write
clean
6110000
unkown
page read and write
clean
15C42F6D000
unkown
page read and write
clean
7F570000
unkown image
page readonly
clean
18A60A20000
unkown
page read and write
clean
4518000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
4620000
unkown
page read and write
clean
13BEFD1C000
unkown
page read and write
clean
7DF4AD3C0000
unkown image
page readonly
clean
15C42F87000
unkown
page read and write
clean
2730000
unkown image
page readonly
clean
51D4000
unkown
page read and write
clean
15C42F86000
unkown
page read and write
clean
15C4264E000
unkown
page read and write
clean
18A60A30000
unkown
page read and write
clean
7FF5C7D71000
unkown image
page readonly
clean
5620000
unkown
page read and write
clean
15C4346A000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
16D0000
unkown
page read and write
clean
7FF53653D000
unkown image
page readonly
clean
5410000
unkown
page read and write
clean
13BEFED5000
heap private
page read and write
clean
7FF5A5714000
unkown image
page readonly
clean
44F5000
unkown
page read and write
clean
ABE000
stack
page read and write
clean
7F222000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
618F000
stack
page read and write
clean
2FA0000
heap private
page execute and read and write
clean
46B6000
unkown
page read and write
clean
7FF5A5676000
unkown image
page readonly
clean
7FF52B006000
unkown image
page readonly
clean
7FF5EAA37000
unkown image
page readonly
clean
7FF5EA8C0000
unkown image
page readonly
clean
456F000
unkown
page read and write
clean
15F317E000
stack
page read and write
clean
123E000
stack
page read and write
clean
7FF536587000
unkown image
page readonly
clean
5630000
unkown
page read and write
clean
132A000
heap default
page read and write
clean
15C42F90000
unkown
page read and write
clean
18A5C400000
unkown image
page readonly
clean
7DF4B57F0000
unkown image
page readonly
clean
15C42F7D000
unkown
page read and write
clean
7FF51EAC5000
unkown image
page readonly
clean
200DC45B000
unkown
page read and write
clean
7FF5A5527000
unkown image
page readonly
clean
4638000
unkown
page read and write
clean
50F4000
unkown
page read and write
clean
15C42F94000
unkown
page read and write
clean
1ECD79D0000
unkown image
page readonly
clean
18A5B502000
unkown
page read and write
clean
4709000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
463E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
15C42F7C000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF5A5282000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
7FF536531000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
920000
unkown
page read and write
clean
4451000
unkown
page read and write
clean
4518000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7F210000
unkown image
page readonly
clean
7FF5EA85F000
unkown image
page readonly
clean
7FF5EA3AF000
unkown image
page readonly
clean
7FF535DA6000
unkown image
page readonly
clean
7FE87B000
unkown
page read and write
clean
15C42F77000
unkown
page read and write
clean
570000
unkown image
page readonly
clean
7FF5A54FF000
unkown image
page readonly
clean
7DF5B7920000
unkown image
page readonly
clean
7FF5A5317000
unkown image
page readonly
clean
7FF51EC67000
unkown image
page readonly
clean
200DC460000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
453E000
unkown
page read and write
clean
45EA000
unkown
page read and write
clean
BBD178E000
stack
page read and write
clean
6631000
unkown
page read and write
clean
200DC370000
unkown image
page readonly
clean
15C42450000
unkown image
page read and write
clean
1310000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
140F000
unkown
page read and write
clean
3055000
unkown
page read and write
clean
4930BF7000
stack
page read and write
clean
18A5C440000
unkown image
page readonly
clean
7DF528A62000
unkown image
page readonly
clean
552D000
stack
page read and write
clean
4625000
unkown
page read and write
clean
18A60CF3000
unkown
page read and write
clean
5530000
unkown
page read and write
clean
A30000
unkown image
page readonly
clean
7DF5B7920000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF51EBFD000
unkown image
page readonly
clean
A45000
heap default
page read and write
clean
17A7C613000
unkown
page read and write
clean
7DF5B7922000
unkown image
page readonly
clean
554F000
stack
page read and write
clean
15C42702000
unkown
page read and write
clean
15C42F94000
unkown
page read and write
clean
447F000
unkown
page read and write
clean
7DF534E92000
unkown image
page readonly
clean
1ECD7A1B000
heap default
page read and write
clean
15C42FD6000
unkown
page read and write
clean
5836000
heap private
page execute and read and write
clean
17A7CB80000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
460B000
unkown
page read and write
clean
200DC8D0000
unkown image
page readonly
clean
7FF51ECB7000
unkown image
page readonly
clean
F27000
unkown
page execute and read and write
clean
7FF5C829A000
unkown image
page readonly
clean
155A000
unkown
page execute and read and write
clean
2FF0000
unkown
page read and write
clean
4525000
unkown
page read and write
clean
18A5BBE0000
unkown
page read and write
clean
665F000
unkown
page read and write
clean
7FF52000
unkown image
page readonly
clean
45CD000
unkown
page read and write
clean
5660000
stack
page read and write
clean
57B0000
unkown
page read and write
clean
1592000
unkown
page execute and read and write
clean
3050000
unkown
page read and write
clean
200DC424000
unkown
page read and write
clean
7DF540320000
unkown image
page readonly
clean
46BD000
unkown
page read and write
clean
213BD720000
unkown image
page readonly
clean
DF0000
unkown image
page readonly
clean
44F3000
unkown
page read and write
clean
12B0000
heap private
page read and write
clean
10FA000
unkown
page execute and read and write
clean
44CB000
unkown
page read and write
clean
7FF5EA3A6000
unkown image
page readonly
clean
7FF5ADB44000
unkown image
page readonly
clean
18A5BD59000
unkown
page read and write
clean
2FD0000
unkown
page execute and read and write
clean
26C0000
unkown
page read and write
clean
7DF528A52000
unkown image
page readonly
clean
7FF5A5460000
unkown image
page readonly
clean
4470000
unkown
page read and write
clean
7FF5A54EA000
unkown image
page readonly
clean
6496000
unkown
page read and write
clean
7FF5ADB5A000
unkown image
page readonly
clean
7FF51E370000
unkown image
page readonly
clean
5460000
unkown
page execute and read and write
clean
7CA000
unkown
page read and write
clean
15C425A0000
unkown image
page readonly
clean
4E80000
unkown
page read and write
clean
7CE000
unkown
page read and write
clean
44D4000
unkown
page read and write
clean
D4A000
unkown
page execute and read and write
clean
7FF5A52D9000
unkown image
page readonly
clean
7FF51EA87000
unkown image
page readonly
clean
7FF5A572A000
unkown image
page readonly
clean
572000
unkown image
page readonly
clean
3636000
unkown
page read and write
clean
17A7C800000
unkown image
page readonly
clean
7DF5F4920000
unkown image
page readonly
clean
665F000
unkown
page read and write
clean
4643000
unkown
page read and write
clean
969000
unkown
page read and write
clean
213BD5E0000
heap private
page read and write
clean
13BEFC30000
unkown image
page readonly
clean
18A5B4BA000
unkown
page read and write
clean
13BEFCD6000
heap default
page read and write
clean
7FF40000
unkown image
page readonly
clean
5640000
stack
page read and write
clean
1349000
heap default
page read and write
clean
44F2000
unkown
page read and write
clean
297E39E000
stack
page read and write
clean
453A000
unkown
page read and write
clean
15C42708000
unkown
page read and write
clean
7FF5EAAC6000
unkown image
page readonly
clean
7FF5ADACD000
unkown image
page readonly
clean
44CC000
unkown
page read and write
clean
1720000
heap private
page read and write
clean
5FB0000
unkown
page read and write
clean
18A5BD00000
unkown
page read and write
clean
17A7C4A0000
unkown image
page read and write
clean
6602B8C000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
46BC000
unkown
page read and write
clean
468E000
unkown
page read and write
clean
5FE0000
unkown
page read and write
clean
463B000
unkown
page read and write
clean
660337F000
stack
page read and write
clean
3050000
unkown
page read and write
clean
1133000
heap default
page read and write
clean
1AC0000
unkown image
page readonly
clean
5610000
unkown image
page readonly
clean
1710000
unkown
page read and write
clean
12C0000
unkown
page read and write
clean
BBD1E7F000
stack
page read and write
clean
15C42F91000
unkown
page read and write
clean
18A60A30000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
470E000
unkown
page read and write
clean
15C42F90000
unkown
page read and write
clean
46DB000
unkown
page read and write
clean
5640000
unkown
page read and write
clean
634E000
stack
page read and write
clean
18A5B525000
unkown
page read and write
clean
15C42F85000
unkown
page read and write
clean
810000
unkown image
page readonly
clean
F10000
unkown image
page readonly
clean
213BDE02000
unkown
page read and write
clean
17A7C660000
unkown
page read and write
clean
1320000
unkown
page read and write
clean
422000
unkown
page execute and read and write
clean
44F7000
unkown
page read and write
clean
26BA000
unkown
page execute and read and write
clean
213BDDA0000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
464A000
unkown
page read and write
clean
7FF5EAB87000
unkown image
page readonly
clean
15C43402000
unkown
page read and write
clean
45D5000
unkown
page read and write
clean
7F210000
unkown image
page readonly
clean
15C42F8B000
unkown
page read and write
clean
15C42F83000
unkown
page read and write
clean
593F000
stack
page read and write
clean
7FF5ADB37000
unkown image
page readonly
clean
641000
unkown
page read and write
clean
15F30FD000
stack
page read and write
clean
7FF5EA94F000
unkown image
page readonly
clean
D8A000
unkown
page read and write
clean
1372000
heap default
page read and write
clean
D92000
unkown image
page readonly
clean
7FF535DAF000
unkown image
page readonly
clean
45DF000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C42FA8000
unkown
page read and write
clean
213BDD80000
unkown image
page readonly
clean
200DC490000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF52B0AB000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
305C000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF52AFFD000
unkown image
page readonly
clean
7FF5A56A7000
unkown image
page readonly
clean
624D000
stack
page read and write
clean
142E000
unkown
page read and write
clean
4589000
unkown
page read and write
clean
7FF5ADB47000
unkown image
page readonly
clean
5D30000
unkown
page read and write
clean
7FF5A5639000
unkown image
page readonly
clean
4E70000
unkown
page read and write
clean
10C0000
heap private
page read and write
clean
7FF5EAAD9000
unkown image
page readonly
clean
7F212000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
137E000
stack
page read and write
clean
15C42FA5000
unkown
page read and write
clean
46C4000
unkown
page read and write
clean
462B000
unkown
page read and write
clean
613C000
unkown
page read and write
clean
200DC513000
unkown
page read and write
clean
5B7F000
stack
page read and write
clean
7FF5A5513000
unkown image
page readonly
clean
7DF534E82000
unkown image
page readonly
clean
130C000
unkown
page execute and read and write
clean
4E80000
unkown
page read and write
clean
3644000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
13BF0910000
unkown
page read and write
clean
470F000
unkown
page read and write
clean
4651000
unkown
page read and write
clean
13BEFD1C000
unkown
page read and write
clean
5620000
unkown
page read and write
clean
15C42F90000
unkown
page read and write
clean
3056000
unkown
page read and write
clean
7FF51EC07000
unkown image
page readonly
clean
600E000
stack
page read and write
clean
18A5B350000
unkown image
page readonly
clean
46DA000
unkown
page read and write
clean
480000
unkown image
page read and write
clean
142E000
unkown
page read and write
clean
7FF5C81EA000
unkown image
page readonly
clean
46C1000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
45B6000
unkown
page read and write
clean
7FF52B097000
unkown image
page readonly
clean
18A607D0000
unkown
page read and write
clean
5460000
unkown
page read and write
clean
13BF0480000
unkown image
page readonly
clean
44A1000
unkown
page read and write
clean
5490000
unkown
page read and write
clean
64D0000
unkown
page read and write
clean
4930F7F000
stack
page read and write
clean
4D5D000
stack
page read and write
clean
2BC1000
unkown
page read and write
clean
7FE40000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
364E000
unkown
page read and write
clean
45C9000
unkown
page read and write
clean
13BEFEE0000
unkown
page read and write
clean
45D3000
unkown
page read and write
clean
810000
unkown image
page readonly
clean
7FF5C8108000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
1340000
heap default
page read and write
clean
6631000
unkown
page read and write
clean
18A608D8000
unkown
page read and write
clean
18A5C220000
unkown
page read and write
clean
17A7C602000
unkown
page read and write
clean
15C42FA8000
unkown
page read and write
clean
45B6000
unkown
page read and write
clean
7FF52AED6000
unkown image
page readonly
clean
6111000
unkown
page read and write
clean
1AB0000
unkown image
page readonly
clean
7FF5C8206000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
7FF5A5663000
unkown image
page readonly
clean
4595000
unkown
page read and write
clean
7D7000
unkown
page read and write
clean
11A5000
heap default
page read and write
clean
6631000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
13A2000
unkown
page execute and read and write
clean
5BBE000
stack
page read and write
clean
E80000
unkown image
page readonly
clean
57BE000
stack
page read and write
clean
15C42F5B000
unkown
page read and write
clean
13BEFED9000
heap private
page read and write
clean
5FD8000
unkown
page read and write
clean
13BF0BE0000
unkown
page read and write
clean
46C0000
unkown
page read and write
clean
46C4000
unkown
page read and write
clean
1570000
unkown
page read and write
clean
213BD84F000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
13BEFC30000
unkown image
page readonly
clean
AC0000
heap default
page read and write
clean
200DC413000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
46CD000
unkown
page read and write
clean
7FF5ADB3D000
unkown image
page readonly
clean
200DCC02000
unkown
page read and write
clean
7FEF77000
stack
page read and write
clean
7FF5A53FD000
unkown image
page readonly
clean
18A60CAA000
unkown
page read and write
clean
44C3000
unkown
page read and write
clean
1100000
unkown image
page readonly
clean
18A5B477000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
10F2000
unkown
page execute and read and write
clean
12FE000
stack
page read and write
clean
6631000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
542D000
stack
page read and write
clean
4566000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5EAAA6000
unkown image
page readonly
clean
13BEFD1C000
unkown
page read and write
clean
17A7C600000
unkown
page read and write
clean
15C42F97000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C42F88000
unkown
page read and write
clean
46BE000
unkown
page read and write
clean
451A000
unkown
page read and write
clean
2ECE000
stack
page read and write
clean
142E000
unkown
page read and write
clean
5FAE000
stack
page read and write
clean
CE0000
unkown
page read and write
clean
DF0000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
13B0000
unkown
page read and write
clean
5B9D000
stack
page read and write
clean
45B3000
unkown
page read and write
clean
2760000
unkown
page execute and read and write
clean
15C4343C000
unkown
page read and write
clean
447F000
unkown
page read and write
clean
5650000
stack
page read and write
clean
7DF5D2060000
unkown image
page readonly
clean
15C426A9000
unkown
page read and write
clean
18A5B42A000
unkown
page read and write
clean
7FF5EAA7F000
unkown image
page readonly
clean
200DC340000
unkown image
page readonly
clean
2682000
unkown
page execute and read and write
clean
7FF51EBDA000
unkown image
page readonly
clean
5B3E000
stack
page read and write
clean
B40000
unkown
page read and write
clean
4201000
unkown
page read and write
clean
4451000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF51EC77000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
4E50000
unkown
page execute and read and write
clean
7FF5364CD000
unkown image
page readonly
clean
608C000
stack
page read and write
clean
568E000
stack
page read and write
clean
6631000
unkown
page read and write
clean
7FF50000
unkown image
page readonly
clean
18A5B475000
unkown
page read and write
clean
7FF53655A000
unkown image
page readonly
clean
4627000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF5ADB87000
unkown image
page readonly
clean
5620000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
5640000
heap private
page read and write
clean
15C426B4000
unkown
page read and write
clean
297E29C000
unkown
page read and write
clean
4EC000
unkown
page read and write
clean
7FF52AD51000
unkown image
page readonly
clean
18A60A30000
unkown
page read and write
clean
53F0000
unkown
page read and write
clean
7DF5B7940000
unkown image
page readonly
clean
7FF5EAB87000
unkown image
page readonly
clean
4470000
unkown
page read and write
clean
16F0000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
15F31F9000
stack
page read and write
clean
459D000
unkown
page read and write
clean
15C42658000
unkown
page read and write
clean
5618000
unkown
page read and write
clean
7FF52AB97000
unkown image
page readonly
clean
4931479000
stack
page read and write
clean
7FF5EA92D000
unkown image
page readonly
clean
7DF5AF502000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
4602000
unkown
page read and write
clean
3036000
unkown
page read and write
clean
7FF52B0BA000
unkown image
page readonly
clean
15C42F8C000
unkown
page read and write
clean
7DF5D2080000
unkown image
page readonly
clean
200DC45C000
unkown
page read and write
clean
18A5B240000
unkown image
page readonly
clean
7FF52AE7A000
unkown image
page readonly
clean
4703000
unkown
page read and write
clean
15C4264C000
unkown
page read and write
clean
CEB000
unkown
page read and write
clean
18A60A00000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
44EF000
unkown
page read and write
clean
7FF5A5442000
unkown image
page readonly
clean
13BF0470000
unkown image
page readonly
clean
3659000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
3034000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
3030000
unkown
page read and write
clean
18A60CF8000
unkown
page read and write
clean
7FF51EC8A000
unkown image
page readonly
clean
3056000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
451D000
unkown
page read and write
clean
7FF5A510F000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C424C0000
heap default
page read and write
clean
45EC000
unkown
page read and write
clean
6490000
unkown
page read and write
clean
5530000
unkown
page execute and read and write
clean
45FC000
unkown
page read and write
clean
1352000
heap default
page read and write
clean
7FF5EAB5A000
unkown image
page readonly
clean
D90000
unkown image
page readonly
clean
18A608F4000
unkown
page read and write
clean
200DC330000
unkown image
page readonly
clean
4930AFE000
stack
page read and write
clean
2F0E000
stack
page read and write
clean
BBD1D77000
stack
page read and write
clean
13BF0B60000
unkown
page read and write
clean
5472000
unkown
page read and write
clean
7FF52B0D3000
unkown image
page readonly
clean
D80000
heap private
page read and write
clean
46EB000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF60000
unkown image
page readonly
clean
3055000
unkown
page read and write
clean
15C426DC000
unkown
page read and write
clean
4544000
unkown
page read and write
clean
7FF51EAC0000
unkown image
page readonly
clean
5FC0000
unkown
page read and write
clean
7FF51EC6D000
unkown image
page readonly
clean
7F8D0000
unkown image
page readonly
clean
7FF5A5449000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
7FF5C8274000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
13B7000
unkown
page execute and read and write
clean
18A5B220000
unkown image
page readonly
clean
3000000
unkown
page read and write
clean
15C42470000
unkown image
page readonly
clean
1302000
unkown
page execute and read and write
clean
7F8C0000
unkown image
page readonly
clean
458000
unkown image
page readonly
clean
45FC000
unkown
page read and write
clean
7FF5A5757000
unkown image
page readonly
clean
18A5C310000
unkown
page read and write
clean
140B000
heap default
page read and write
clean
142E000
unkown
page read and write
clean
46BB000
unkown
page read and write
clean
15C42FAA000
unkown
page read and write
clean
451F000
unkown
page read and write
clean
7FF5C7F31000
unkown image
page readonly
clean
17A7CC70000
unkown
page read and write
clean
114D000
heap default
page read and write
clean
7DF43E1F0000
unkown image
page readonly
clean
5820000
unkown
page execute and read and write
clean
7DF534E90000
unkown image
page readonly
clean
7FF5C80D8000
unkown image
page readonly
clean
7F5F2000
unkown image
page readonly
clean
4528000
unkown
page read and write
clean
449F000
unkown
page read and write
clean
5820000
unkown
page read and write
clean
7FF5ADAC6000
unkown image
page readonly
clean
13BEFED0000
heap private
page read and write
clean
15C42FC9000
unkown
page read and write
clean
141D000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
490000
unkown image
page readonly
clean
7DF5B7930000
unkown image
page readonly
clean
7DF5F4930000
unkown image
page readonly
clean
7FF5A5598000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
200DC2F0000
unkown image
page read and write
clean
6631000
unkown
page read and write
clean
15C42800000
unkown image
page readonly
clean
493157F000
stack
page read and write
clean
26B0000
unkown
page read and write
clean
7DF5F4920000
unkown image
page readonly
clean
A9B000
heap default
page read and write
clean
4604000
unkown
page read and write
clean
7DF540340000
unkown image
page readonly
clean
4482000
unkown
page read and write
clean
7FF5A5624000
unkown image
page readonly
clean
18A609E0000
unkown
page read and write
clean
44D0000
unkown
page read and write
clean
7FF5EA8E4000
unkown image
page readonly
clean
7FF5A4F33000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
7FF5A5701000
unkown image
page readonly
clean
447E000
unkown
page read and write
clean
3060000
heap private
page execute and read and write
clean
213BD5F0000
unkown image
page readonly
clean
45EB000
unkown
page read and write
clean
BBD168C000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
4FB0000
unkown
page execute and read and write
clean
3050000
unkown
page read and write
clean
44A2000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
50D0000
unkown
page read and write
clean
4599000
unkown
page read and write
clean
7FF52B0A7000
unkown image
page readonly
clean
6490000
unkown
page read and write
clean
4568000
unkown
page read and write
clean
15C42FA9000
unkown
page read and write
clean
46BC000
unkown
page read and write
clean
AFD000
heap default
page read and write
clean
45B4000
unkown
page read and write
clean
4ECC000
stack
page read and write
clean
3030000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
472F000
unkown
page read and write
clean
17A7C4C0000
unkown image
page readonly
clean
15C42F6B000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
15C42FA7000
unkown
page read and write
clean
44BF000
unkown
page read and write
clean
17A7C629000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
D3A000
unkown
page execute and read and write
clean
15C42F8F000
unkown
page read and write
clean
15AB000
unkown
page execute and read and write
clean
7FF5C8087000
unkown image
page readonly
clean
7FF5EAAB2000
unkown image
page readonly
clean
7DF528A50000
unkown image
page readonly
clean
7DF4F27F0000
unkown image
page readonly
clean
7FF52AB91000
unkown image
page readonly
clean
5A7E000
stack
page read and write
clean
7FF51EBAF000
unkown image
page readonly
clean
4F50000
unkown
page read and write
clean
493127F000
stack
page read and write
clean
4481000
unkown
page read and write
clean
7FF52A853000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
7FF5EA7F1000
unkown image
page readonly
clean
15C42F95000
unkown
page read and write
clean
15C42FB7000
unkown
page read and write
clean
5350000
unkown
page read and write
clean
7F7B0000
unkown image
page readonly
clean
44EB000
unkown
page read and write
clean
468D000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
12DA000
unkown
page execute and read and write
clean
18A60900000
unkown
page read and write
clean
46F7000
unkown
page read and write
clean
E5F000
stack
page read and write
clean
920CB7E000
stack
page read and write
clean
2DB0000
heap private
page execute and read and write
clean
7F5F0000
unkown image
page readonly
clean
15C42FCE000
unkown
page read and write
clean
46C8000
unkown
page read and write
clean
7FF5EA2ED000
unkown image
page readonly
clean
18A5B980000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7F680000
unkown image
page readonly
clean
546F000
unkown
page read and write
clean
7FF51E767000
unkown image
page readonly
clean
213BD889000
unkown
page read and write
clean
141D000
unkown
page read and write
clean
7FF5A5696000
unkown image
page readonly
clean
11C0000
heap default
page read and write
clean
4699000
unkown
page read and write
clean
44CF000
unkown
page read and write
clean
1320000
heap default
page read and write
clean
5FB0000
unkown
page read and write
clean
4621000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
320F000
stack
page read and write
clean
5430000
unkown
page read and write
clean
458D000
unkown
page read and write
clean
D98000
unkown image
page readonly
clean
9E0000
unkown
page read and write
clean
7FF5EAB37000
unkown image
page readonly
clean
7F672000
unkown image
page readonly
clean
46A0000
unkown
page read and write
clean
FD5000
unkown
page read and write
clean
18A607C0000
unkown
page read and write
clean
7DF5F4932000
unkown image
page readonly
clean
18A5B250000
unkown image
page readonly
clean
15C42F86000
unkown
page read and write
clean
15E0000
heap private
page read and write
clean
7FF5AD316000
unkown image
page readonly
clean
7FF5EAAAA000
unkown image
page readonly
clean
5550000
unkown image
page readonly
clean
7FF51EAF8000
unkown image
page readonly
clean
15C42FAA000
unkown
page read and write
clean
13D0000
unkown
page read and write
clean
7DF426920000
unkown image
page readonly
clean
7DF534EA0000
unkown image
page readonly
clean
7FF5C8219000
unkown image
page readonly
clean
4547000
unkown
page read and write
clean
F50000
unkown image
page readonly
clean
5FE0000
unkown
page read and write
clean
2F80000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
16F0000
unkown image
page readonly
clean
7DF5F4940000
unkown image
page readonly
clean
464E000
unkown
page read and write
clean
3040000
unkown
page execute and read and write
clean
15C42F8D000
unkown
page read and write
clean
15C42F99000
unkown
page read and write
clean
15C42F86000
unkown
page read and write
clean
3404000
unkown
page read and write
clean
5FD0000
unkown
page read and write
clean
7F8D0000
unkown image
page readonly
clean
1ECD7A40000
unkown
page read and write
clean
1ECD7A30000
unkown
page read and write
clean
45DD000
unkown
page read and write
clean
449F000
unkown
page read and write
clean
D62000
unkown
page execute and read and write
clean
6631000
unkown
page read and write
clean
15C42F6F000
unkown
page read and write
clean
64D0000
unkown image
page read and write
clean
18A5C230000
unkown image
page read and write
clean
7FF52B026000
unkown image
page readonly
clean
15C42F8D000
unkown
page read and write
clean
1ECD7A2F000
unkown
page read and write
clean
50F4000
unkown
page read and write
clean
5790000
unkown
page execute and read and write
clean
142E000
unkown
page read and write
clean
13AA000
unkown
page execute and read and write
clean
6631000
unkown
page read and write
clean
17A7CA00000
unkown image
page readonly
clean
44D3000
unkown
page read and write
clean
15C42FDD000
unkown
page read and write
clean
1ECD7A40000
unkown
page read and write
clean
59FE000
stack
page read and write
clean
7FF5EAA9D000
unkown image
page readonly
clean
15C4265A000
unkown
page read and write
clean
7DF432D50000
unkown image
page readonly
clean
57D0000
unkown
page read and write
clean
7FF5A4F20000
unkown image
page readonly
clean
15C42E02000
unkown
page read and write
clean
523E000
stack
page read and write
clean
7FF5C805A000
unkown image
page readonly
clean
7FF5C82B6000
unkown image
page readonly
clean
15C42F88000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
18A5B220000
unkown image
page readonly
clean
468F000
unkown
page read and write
clean
4524000
unkown
page read and write
clean
46DE000
unkown
page read and write
clean
7F230000
unkown image
page readonly
clean
7FF536537000
unkown image
page readonly
clean
18A60910000
unkown
page read and write
clean
1ECD7A4F000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5EA5FA000
unkown image
page readonly
clean
7F220000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF5C7A33000
unkown image
page readonly
clean
45BB000
unkown
page read and write
clean
7FF5EA976000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
15C42629000
unkown
page read and write
clean
141D000
unkown
page read and write
clean
26B2000
unkown
page execute and read and write
clean
18A5BBC3000
unkown
page read and write
clean
18A5B200000
unkown image
page read and write
clean
A2E000
stack
page read and write
clean
4518000
unkown
page read and write
clean
7DF528A70000
unkown image
page readonly
clean
56CE000
stack
page read and write
clean
54A0000
unkown
page read and write
clean
15C42FB8000
unkown
page read and write
clean
15C43402000
unkown
page read and write
clean
6630000
unkown
page read and write
clean
4568000
unkown
page read and write
clean
7FF5A564F000
unkown image
page readonly
clean
200DC390000
unkown
page read and write
clean
5FD0000
unkown
page read and write
clean
457B000
unkown
page read and write
clean
26C2000
unkown
page read and write
clean
7FF5AD9B1000
unkown image
page readonly
clean
D92000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
46E1000
unkown
page read and write
clean
4538000
unkown
page read and write
clean
200DC45E000
unkown
page read and write
clean
7DF528A60000
unkown image
page readonly
clean
5490000
unkown
page read and write
clean
53B8000
unkown
page read and write
clean
7DD000
unkown
page read and write
clean
CBF000
stack
page read and write
clean
13BF08A0000
unkown
page read and write
clean
5490000
unkown
page read and write
clean
57A2000
unkown
page read and write
clean
7FF5A5490000
unkown image
page readonly
clean
15C43502000
unkown
page read and write
clean
3B81000
unkown
page read and write
clean
7FF5ADB34000
unkown image
page readonly
clean
213BD902000
unkown
page read and write
clean
7FF536547000
unkown image
page readonly
clean
4696000
unkown
page read and write
clean
7FF5ADB76000
unkown image
page readonly
clean
4930A7E000
stack
page read and write
clean
5610000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
7FF5C81CF000
unkown image
page readonly
clean
15C42FA7000
unkown
page read and write
clean
12BE000
stack
page read and write
clean
15C42F98000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
152E000
stack
page read and write
clean
17A7C63C000
unkown
page read and write
clean
7DF5AF510000
unkown image
page readonly
clean
4586000
unkown
page read and write
clean
7FF5A540A000
unkown image
page readonly
clean
45D9000
unkown
page read and write
clean
7FF5AD38D000
unkown image
page readonly
clean
4484000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5A5743000
unkown image
page readonly
clean
13BEFD15000
unkown
page read and write
clean
1300000
unkown image
page readonly
clean
7FF5C81D3000
unkown image
page readonly
clean
7FF52AFDF000
unkown image
page readonly
clean
7DF5AF4F2000
unkown image
page readonly
clean
15C42F6F000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
5FB0000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C42650000
unkown
page read and write
clean
15C42FA1000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
46E8000
unkown
page read and write
clean
1710000
unkown
page read and write
clean
13BEFC50000
unkown image
page readonly
clean
7FF5EAA60000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
E3D000
unkown
page read and write
clean
3201000
unkown
page read and write
clean
461A000
unkown
page read and write
clean
F3A000
unkown
page read and write
clean
D98000
unkown image
page readonly
clean
4709000
unkown
page read and write
clean
3646000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
18A60C12000
unkown
page read and write
clean
7FF5EAA05000
unkown image
page readonly
clean
56A0000
unkown
page execute and read and write
clean
12F0000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
13BF00F0000
unkown image
page readonly
clean
7FF5A5456000
unkown image
page readonly
clean
213BD86F000
unkown
page read and write
clean
2CD0000
unkown
page read and write
clean
45EB000
unkown
page read and write
clean
7FF5EA9C8000
unkown image
page readonly
clean
15C42F6B000
unkown
page read and write
clean
7FF5ADAD9000
unkown image
page readonly
clean
213BD800000
unkown
page read and write
clean
7FF5A5651000
unkown image
page readonly
clean
10A0000
unkown image
page readonly
clean
15C42F7B000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF536534000
unkown image
page readonly
clean
7DF5D2080000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
15C42613000
unkown
page read and write
clean
5FD0000
unkown
page read and write
clean
18A5C790000
unkown
page read and write
clean
56EE000
stack
page read and write
clean
200DC300000
heap private
page read and write
clean
141D000
unkown
page read and write
clean
447D000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
7FF5A56A9000
unkown image
page readonly
clean
D30000
unkown image
page readonly
clean
4451000
unkown
page read and write
clean
271E000
stack
page read and write
clean
7DF5F4922000
unkown image
page readonly
clean
450000
unkown image
page readonly
clean
13BF0B90000
unkown
page read and write
clean
1710000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
6490000
unkown
page read and write
clean
3056000
unkown
page read and write
clean
44CB000
unkown
page read and write
clean
462E000
unkown
page read and write
clean
5FD5000
unkown
page read and write
clean
1715000
unkown
page read and write
clean
628F000
stack
page read and write
clean
7FF5AD36A000
unkown image
page readonly
clean
447E000
unkown
page read and write
clean
15C4268D000
unkown
page read and write
clean
13BF02F0000
unkown image
page readonly
clean
7FF592A2B000
unkown image
page readonly
clean
7FF52B094000
unkown image
page readonly
clean
7FEA7B000
stack
page read and write
clean
44CB000
unkown
page read and write
clean
7DF5B7932000
unkown image
page readonly
clean
7FF5EAA8F000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
7FF5C8217000
unkown image
page readonly
clean
466C000
unkown
page read and write
clean
7F4E0000
unkown image
page readonly
clean
470A000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
4636000
unkown
page read and write
clean
13BEFCA0000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
638D000
stack
page read and write
clean
2660000
unkown
page read and write
clean
F80000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
18A5B800000
unkown image
page readonly
clean
7FF5EA603000
unkown image
page readonly
clean
1120000
heap private
page read and write
clean
116E000
stack
page read and write
clean
15C43402000
unkown
page read and write
clean
15C42600000
unkown
page read and write
clean
15C43402000
unkown
page read and write
clean
11A0000
heap default
page read and write
clean
142E000
unkown
page read and write
clean
7FF5EA637000
unkown image
page readonly
clean
7FF5EA419000
unkown image
page readonly
clean
4576000
unkown
page read and write
clean
7DA000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
12F2000
unkown
page read and write
clean
7FF52AF28000
unkown image
page readonly
clean
800000
unkown image
page read and write
clean
4EE0000
unkown
page read and write
clean
AC8000
heap default
page read and write
clean
7FF51EA4A000
unkown image
page readonly
clean
11C5000
heap default
page read and write
clean
15F307B000
unkown
page read and write
clean
1A70000
unkown image
page readonly
clean
7FF5C82B3000
unkown image
page readonly
clean
ED2000
unkown
page read and write
clean
3030000
unkown
page read and write
clean
2750000
unkown
page read and write
clean
7FF51EBBF000
unkown image
page readonly
clean
200DC483000
unkown
page read and write
clean
7DF540322000
unkown image
page readonly
clean
6111000
unkown
page read and write
clean
4709000
unkown
page read and write
clean
12D2000
unkown
page execute and read and write
clean
2620000
unkown
page read and write
clean
533E000
stack
page read and write
clean
3630000
unkown
page read and write
clean
5A3E000
stack
page read and write
clean
6631000
unkown
page read and write
clean
18A5B513000
unkown
page read and write
clean
15C42FB5000
unkown
page read and write
clean
141D000
unkown
page read and write
clean
200DC43C000
unkown
page read and write
clean
15C0000
unkown
page read and write
clean
7FF5364D9000
unkown image
page readonly
clean
7FF5AD303000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
7FF592A2B000
unkown image
page readonly
clean
13BEFCC0000
unkown image
page readonly
clean
7FF5EA6E2000
unkown image
page readonly
clean
7FF5EA890000
unkown image
page readonly
clean
200DC508000
unkown
page read and write
clean
18A5B413000
unkown
page read and write
clean
297E977000
stack
page read and write
clean
966000
unkown
page read and write
clean
6497000
unkown
page read and write
clean
15C42F74000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
46CF000
unkown
page read and write
clean
7FF536493000
unkown image
page readonly
clean
2DA0000
unkown image
page readonly
clean
17A7C4C0000
unkown image
page readonly
clean
3470000
unkown
page read and write
clean
7FF5EAB31000
unkown image
page readonly
clean
1552000
unkown
page execute and read and write
clean
15C42A00000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
B24000
heap default
page read and write
clean
3050000
unkown
page read and write
clean
44A3000
unkown
page read and write
clean
450000
unkown image
page readonly
clean
450000
unkown image
page readonly
clean
3E61000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
15C42FB2000
unkown
page read and write
clean
283E000
stack
page read and write
clean
18A60C00000
unkown
page read and write
clean
15C42F14000
unkown
page read and write
clean
58FE000
stack
page read and write
clean
15C42713000
unkown
page read and write
clean
920CBFC000
stack
page read and write
clean
15C4343C000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
1ECD7870000
unkown image
page readonly
clean
D20000
unkown
page read and write
clean
7FF51EC09000
unkown image
page readonly
clean
4DA0000
unkown
page execute and read and write
clean
7F8B0000
unkown image
page readonly
clean
4450000
unkown
page read and write
clean
1ECD7850000
unkown image
page read and write
clean
141E000
stack
page read and write
clean
18A5C420000
unkown image
page readonly
clean
18A60C2D000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
5780000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
CC0000
unkown image
page readonly
clean
7F680000
unkown image
page readonly
clean
57A0000
unkown
page read and write
clean
ED6000
unkown
page read and write
clean
1ECD7DB0000
unkown image
page readonly
clean
5280000
unkown image
page readonly
clean
7FF5C8277000
unkown image
page readonly
clean
7FF5A549B000
unkown image
page readonly
clean
1070000
unkown
page read and write
clean
D6A000
unkown
page execute and read and write
clean
15C42F7F000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
18A608D0000
unkown
page read and write
clean
6495000
unkown
page read and write
clean
44CE000
unkown
page read and write
clean
7FF5EAA81000
unkown image
page readonly
clean
133F000
stack
page read and write
clean
142E000
unkown
page read and write
clean
7F5E0000
unkown image
page readonly
clean
7FF5A5634000
unkown image
page readonly
clean
7DF5B7922000
unkown image
page readonly
clean
FC2000
unkown
page read and write
clean
7FF51EBC3000
unkown image
page readonly
clean
1420000
heap private
page read and write
clean
7FF5EA947000
unkown image
page readonly
clean
7FF5C80D0000
unkown image
page readonly
clean
7DF534E90000
unkown image
page readonly
clean
7FF5EAB3D000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
268A000
unkown
page execute and read and write
clean
15C426F7000
unkown
page read and write
clean
15C42FBA000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
3551000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
3566000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
26AA000
unkown
page execute and read and write
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
49307DC000
unkown
page read and write
clean
5D2000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
7FF5EA92F000
unkown image
page readonly
clean
1ECD79A0000
unkown
page read and write
clean
7FF52AEF5000
unkown image
page readonly
clean
D42000
unkown
page execute and read and write
clean
15C42FA8000
unkown
page read and write
clean
4603000
unkown
page read and write
clean
15C42F93000
unkown
page read and write
clean
15C43403000
unkown
page read and write
clean
200DC402000
unkown
page read and write
clean
13D0000
heap private
page read and write
clean
5644000
heap private
page read and write
clean
7FF5A548E000
unkown image
page readonly
clean
26A7000
unkown
page execute and read and write
clean
200DCA50000
unkown image
page readonly
clean
15C42FB5000
unkown
page read and write
clean
470D000
unkown
page read and write
clean
4672000
unkown
page read and write
clean
2F70000
unkown
page read and write
clean
7FF5EA855000
unkown image
page readonly
clean
15C42651000
unkown
page read and write
clean
BBD1C7E000
stack
page read and write
clean
6631000
unkown
page read and write
clean
4451000
unkown
page read and write
clean
7DF5AF500000
unkown image
page readonly
clean
7FF5A5503000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
7FE8FE000
stack
page read and write
clean
7FF5ADA94000
unkown image
page readonly
clean
449E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5C80D5000
unkown image
page readonly
clean
469F000
unkown
page read and write
clean
13BB000
unkown
page execute and read and write
clean
6631000
unkown
page read and write
clean
17A7C510000
heap default
page read and write
clean
49311FF000
stack
page read and write
clean
1312000
unkown
page read and write
clean
15C42671000
unkown
page read and write
clean
453F000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
43B1000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF5EA606000
unkown image
page readonly
clean
4652000
unkown
page read and write
clean
7DF528A52000
unkown image
page readonly
clean
7DF534E80000
unkown image
page readonly
clean
7FF51EC74000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
5E6F000
stack
page read and write
clean
142E000
unkown
page read and write
clean
6960000
unkown
page read and write
clean
665C000
unkown
page read and write
clean
F40000
unkown image
page readonly
clean
13BEFC60000
unkown image
page readonly
clean
4B88000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5A570D000
unkown image
page readonly
clean
7FF51ECB7000
unkown image
page readonly
clean
7DF5AF500000
unkown image
page readonly
clean
2FE0000
unkown image
page readonly
clean
4930C7E000
stack
page read and write
clean
7FF5EAA74000
unkown image
page readonly
clean
7FF51EC64000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
7FF5EAB44000
unkown image
page readonly
clean
1300000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
46EE000
unkown
page read and write
clean
7F5F2000
unkown image
page readonly
clean
7FF5A5591000
unkown image
page readonly
clean
1ECD7A22000
unkown
page read and write
clean
7FF536544000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
64B1000
unkown
page read and write
clean
3100000
heap private
page read and write
clean
16EF000
stack
page read and write
clean
ACB000
heap default
page read and write
clean
7FF52B02D000
unkown image
page readonly
clean
7FF5C81E6000
unkown image
page readonly
clean
7DF540330000
unkown image
page readonly
clean
7FF52B012000
unkown image
page readonly
clean
297E87E000
stack
page read and write
clean
449E000
unkown
page read and write
clean
7F0B0000
unkown
page execute and read and write
clean
7FF5EAA64000
unkown image
page readonly
clean
570000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
18A5C3F0000
unkown image
page readonly
clean
5030000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
13BF0B70000
unkown
page readonly
clean
7FF5C82C7000
unkown image
page readonly
clean
7FF5EAA48000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
CD0000
unkown image
page readonly
clean
49312FE000
stack
page read and write
clean
15C42F83000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7DF5F4922000
unkown image
page readonly
clean
17A7C68B000
unkown
page read and write
clean
200DC400000
unkown
page read and write
clean
15C42F92000
unkown
page read and write
clean
7DF5AF502000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
5D6E000
stack
page read and write
clean
15C43400000
unkown
page read and write
clean
7FF5AD401000
unkown image
page readonly
clean
213BD829000
unkown
page read and write
clean
15C4265B000
unkown
page read and write
clean
151E000
stack
page read and write
clean
49310FF000
stack
page read and write
clean
7FF51EAC8000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
7FF52B0A4000
unkown image
page readonly
clean
7FF5A4EFA000
unkown image
page readonly
clean
7FF5A542F000
unkown image
page readonly
clean
15C42716000
unkown
page read and write
clean
6602E7E000
stack
page read and write
clean
7F5E2000
unkown image
page readonly
clean
15C43402000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
2BF1000
unkown
page read and write
clean
268E000
stack
page read and write
clean
7FF5EA415000
unkown image
page readonly
clean
7FF5A5627000
unkown image
page readonly
clean
45DE000
unkown
page read and write
clean
15C43402000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF52B0E2000
unkown image
page readonly
clean
15C42656000
unkown
page read and write
clean
4566000
unkown
page read and write
clean
7FF5A5682000
unkown image
page readonly
clean
4D70000
unkown image
page readonly
clean
213BDC00000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
660317B000
stack
page read and write
clean
15C42470000
unkown image
page readonly
clean
7DF5AF4F2000
unkown image
page readonly
clean
7FF52AEF8000
unkown image
page readonly
clean
5FD0000
unkown
page read and write
clean
64C0000
unkown
page execute and read and write
clean
33B1000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C42F90000
unkown
page read and write
clean
18A5B210000
heap private
page read and write
clean
4587000
unkown
page read and write
clean
7FF53649E000
unkown image
page readonly
clean
7DF5B7930000
unkown image
page readonly
clean
7DF5D2062000
unkown image
page readonly
clean
7DF528A70000
unkown image
page readonly
clean
18A5BD59000
unkown
page read and write
clean
15C42F88000
unkown
page read and write
clean
7FF53654B000
unkown image
page readonly
clean
4527000
unkown
page read and write
clean
15C42FAB000
unkown
page read and write
clean
A7E000
stack
page read and write
clean
15C426AA000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF51E84B000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
86B000
unkown
page read and write
clean
287F000
stack
page read and write
clean
7F212000
unkown image
page readonly
clean
7FF5A52CC000
unkown image
page readonly
clean
46EE000
unkown
page read and write
clean
15C42CF0000
unkown image
page read and write
clean
BBD1F7C000
stack
page read and write
clean
7F8C2000
unkown image
page readonly
clean
5610000
unkown
page read and write
clean
15C42FDD000
unkown
page read and write
clean
15C42CE0000
unkown
page read and write
clean
7FF51EBF6000
unkown image
page readonly
clean
15C42F7B000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5EA995000
unkown image
page readonly
clean
2F90000
unkown
page execute and read and write
clean
6631000
unkown
page read and write
clean
493177E000
stack
page read and write
clean
13A9000
unkown
page read and write
clean
632000
unkown
page read and write
clean
7DF540332000
unkown image
page readonly
clean
7FF52AEF0000
unkown image
page readonly
clean
467E000
unkown
page read and write
clean
5480000
unkown
page read and write
clean
7DF540320000
unkown image
page readonly
clean
1730000
unkown image
page readonly
clean
3056000
unkown
page read and write
clean
1ECD79E0000
unkown image
page readonly
clean
648D000
stack
page read and write
clean
1136000
unkown
page read and write
clean
7FF5A5618000
unkown image
page readonly
clean
1095000
heap default
page read and write
clean
12FA000
unkown
page execute and read and write
clean
97E000
stack
page read and write
clean
18A5C430000
unkown image
page readonly
clean
7FF5C81BF000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
18A5B370000
unkown
page read and write
clean
DD0000
unkown image
page readonly
clean
7FEC77000
stack
page read and write
clean
DD0000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
7F600000
unkown image
page readonly
clean
17A7C713000
unkown
page read and write
clean
15C42F7D000
unkown
page read and write
clean
4606000
unkown
page read and write
clean
7DF5AF510000
unkown image
page readonly
clean
26F0000
heap private
page execute and read and write
clean
15C42F7C000
unkown
page read and write
clean
7FF5EAB76000
unkown image
page readonly
clean
7FF5C81C1000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
2EBF000
stack
page read and write
clean
7FF5A551F000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
15C42F7C000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
213BD813000
unkown
page read and write
clean
15C42FA5000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
15C42680000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
44CD000
unkown
page read and write
clean
15C42F7C000
unkown
page read and write
clean
5DDE000
stack
page read and write
clean
1190000
unkown
page read and write
clean
18A5BD02000
unkown
page read and write
clean
9D0000
heap private
page read and write
clean
7FF52B037000
unkown image
page readonly
clean
7FF5A5403000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
1ECD7BA5000
heap private
page read and write
clean
45D7000
unkown
page read and write
clean
1572000
unkown
page execute and read and write
clean
4524000
unkown
page read and write
clean
5470000
unkown
page read and write
clean
5440000
unkown
page read and write
clean
456A000
unkown
page read and write
clean
15C43414000
unkown
page read and write
clean
1ECD7A35000
unkown
page read and write
clean
15C42F86000
unkown
page read and write
clean
18A5BBC0000
unkown
page read and write
clean
7FF5364C6000
unkown image
page readonly
clean
7FF5A566D000
unkown image
page readonly
clean
7FF5A5752000
unkown image
page readonly
clean
493187B000
stack
page read and write
clean
142E000
unkown
page read and write
clean
46AA000
unkown
page read and write
clean
18A608F1000
unkown
page read and write
clean
7FF5AD9C8000
unkown image
page readonly
clean
7DF534EA0000
unkown image
page readonly
clean
18A60C63000
unkown
page read and write
clean
7FF52B039000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF52B0D6000
unkown image
page readonly
clean
45F0000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5A5605000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
1380000
unkown
page read and write
clean
15C4263C000
unkown
page read and write
clean
130A000
unkown
page execute and read and write
clean
6631000
unkown
page read and write
clean
15C42F8D000
unkown
page read and write
clean
18A609A0000
unkown
page read and write
clean
447D000
unkown
page read and write
clean
15C42F7B000
unkown
page read and write
clean
7F690000
unkown image
page readonly
clean
7FF52B09D000
unkown image
page readonly
clean
7FF51EAA6000
unkown image
page readonly
clean
543E000
unkown
page read and write
clean
62E000
unkown
page read and write
clean
213BDA00000
unkown image
page readonly
clean
4D80000
unkown
page read and write
clean
1080000
unkown image
page readonly
clean
4544000
unkown
page read and write
clean
7FF5AD31D000
unkown image
page readonly
clean
7FF52B00A000
unkown image
page readonly
clean
213BD620000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
7FF5EAA93000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
200DC47F000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
1930000
unkown image
page readonly
clean
7FF51ECB2000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
2690000
unkown
page read and write
clean
7FF5C827D000
unkown image
page readonly
clean
D40000
unkown
page read and write
clean
7F220000
unkown image
page readonly
clean
1ECD7BB0000
unkown image
page readonly
clean
200DC500000
unkown
page read and write
clean
935000
heap default
page read and write
clean
7FF5C8097000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
10E0000
unkown
page read and write
clean
7FF1FD000
stack
page read and write
clean
15C42F88000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
15C42F60000
unkown
page read and write
clean
4619000
unkown
page read and write
clean
4538000
unkown
page read and write
clean
46BF000
unkown
page read and write
clean
17A7C4E0000
unkown image
page readonly
clean
466E000
unkown
page read and write
clean
7FF5A5644000
unkown image
page readonly
clean
12F6000
unkown
page execute and read and write
clean
18A60C41000
unkown
page read and write
clean
5480000
unkown
page read and write
clean
7FF5EAA35000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
46E9000
unkown
page read and write
clean
7FF51EC7B000
unkown image
page readonly
clean
456E000
unkown
page read and write
clean
610E000
stack
page read and write
clean
18F0000
unkown image
page readonly
clean
3050000
unkown
page read and write
clean
4D5F000
stack
page read and write
clean
A40000
heap default
page read and write
clean
297EB7F000
stack
page read and write
clean
7DF528A60000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
45D4000
unkown
page read and write
clean
7FF536576000
unkown image
page readonly
clean
D90000
unkown image
page readonly
clean
18A60914000
unkown
page read and write
clean
7F5E2000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
200DC485000
unkown
page read and write
clean
F6E000
stack
page read and write
clean
15C42F83000
unkown
page read and write
clean
5A3E000
stack
page read and write
clean
2F60000
unkown image
page readonly
clean
920CAFA000
stack
page read and write
clean
6631000
unkown
page read and write
clean
450F000
unkown
page read and write
clean
A90000
heap default
page read and write
clean
18A5BD18000
unkown
page read and write
clean
447E000
unkown
page read and write
clean
4610000
unkown
page read and write
clean
15C42F6B000
unkown
page read and write
clean
15C42F7E000
unkown
page read and write
clean
26CB000
unkown
page execute and read and write
clean
2770000
heap private
page read and write
clean
469B000
unkown
page read and write
clean
3050000
unkown
page read and write
clean
167E000
stack
page read and write
clean
7FF5364A6000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
64C0000
unkown
page read and write
clean
1382000
unkown
page execute and read and write
clean
153D000
stack
page read and write
clean
200DC502000
unkown
page read and write
clean
7DF5D2072000
unkown image
page readonly
clean
17A7C655000
unkown
page read and write
clean
15C42F0E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
44D3000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
7FF5A5418000
unkown image
page readonly
clean
1ECD7A10000
heap default
page read and write
clean
493137F000
stack
page read and write
clean
6602EFE000
stack
page read and write
clean
920C75F000
stack
page read and write
clean
273E000
stack
page read and write
clean
18A5B400000
unkown
page read and write
clean
18A5BBD0000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
CF4000
unkown
page read and write
clean
7FF5ADAA6000
unkown image
page readonly
clean
142E000
unkown
page read and write
clean
7DF5AF4F0000
unkown image
page readonly
clean
18A5B458000
unkown
page read and write
clean
18B0000
unkown image
page readonly
clean
18A60CF8000
unkown
page read and write
clean
1540000
unkown
page read and write
clean
5400000
unkown
page read and write
clean
13D8000
unkown
page read and write
clean
7FF5A5630000
unkown image
page readonly
clean
15C42B80000
unkown image
page readonly
clean
6631000
unkown
page read and write
clean
5820000
unkown
page read and write
clean
113A000
unkown
page read and write
clean
44CA000
unkown
page read and write
clean
15C42FD6000
unkown
page read and write
clean
142E000
unkown
page read and write
clean
7FF51EC61000
unkown image
page readonly
clean
BBD170E000
stack
page read and write
clean
5290000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
13D8000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
18A5B472000
unkown
page read and write
clean
53F0000
unkown
page read and write
clean
6631000
unkown
page read and write
clean
18A60C9E000
unkown
page read and write
clean
7DF5F4930000
unkown image
page readonly
clean
16CE000
stack
page read and write
clean
13C3000
heap default
page read and write
clean
800000
unkown image
page readonly
clean
1ECD7A27000
heap default
page read and write
clean
4577000
unkown
page read and write
clean
18A5C410000
unkown image
page readonly
clean
There are 2024 hidden memdumps, click here to show them.