IOC Report

loading gif

Files

File Path
Type
Category
Malicious
KqxsoH2Rhn.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\LocalLow\1xVPfvJcrg
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\LocalLow\PXExvaj4Ga
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\LocalLow\RYwTiizs2t
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\LocalLow\frAQBc8Wsa
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\LocalLow\i989Y7D2J5D.zip
Zip archive data, at least v2.0 to extract
modified
clean
C:\Users\user\AppData\LocalLow\iE5-lV8m-M6
ASCII text, with CRLF, CR line terminators
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\AccessibleHandler.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\AccessibleMarshal.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\IA2Marshal.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\MapiProxy.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\MapiProxy_InUse.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-file-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-file-l2-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-handle-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-interlocked-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-libraryloader-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-localization-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-memory-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-namedpipe-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-processenvironment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-processthreads-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-processthreads-l1-1-1.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-profile-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-rtlsupport-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-synch-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-synch-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-sysinfo-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-timezone-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-core-util-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-conio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-convert-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-environment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-filesystem-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-locale-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-math-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-multibyte-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-private-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-process-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-runtime-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-stdio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-time-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\api-ms-win-crt-utility-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\breakpadinjector.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\freebl3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\kE9gS2wR6.zip
Zip archive data, at least v2.0 to extract
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\ldap60.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\ldif60.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\lgpllibs.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\libEGL.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\mozMapi32.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\mozMapi32_InUse.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\mozglue.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\msvcp140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\nss3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\nssckbi.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\nssdbm3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\prldap60.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\qipcap.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\softokn3.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\ucrtbase.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\qO7qM6fA3\vcruntime140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\LocalLow\rQF69AzBla
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\AppData\LocalLow\screen.jpeg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1024, frames 3
dropped
clean
C:\Users\user\AppData\LocalLow\sqlite3.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
clean
\Device\Null
ASCII text, with CRLF line terminators, with overstriking
dropped
clean
There are 60 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\KqxsoH2Rhn.exe
"C:\Users\user\Desktop\KqxsoH2Rhn.exe"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C timeout /T 10 /NOBREAK > Nul & Del /f /q "C:\Users\user\Desktop\KqxsoH2Rhn.exe"
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\SysWOW64\timeout.exe
timeout /T 10 /NOBREAK
clean

URLs

Name
IP
Malicious
http://74.119.192.122/rino115sipsip
malicious
http://194.180.174.182/
194.180.174.182
malicious
http://185.163.47.176/rino115sipsip
185.163.47.176
malicious
http://193.38.54.238/rino115sipsip
malicious
http://194.180.174.182//l/f/qaHR_HwB3dP17SpzJnqt/e2fece3ec028ffea81a6e29ab137c790945d5c2c
194.180.174.182
malicious
http://178.23.190.57/rino115sipsip
malicious
http://91.219.236.162/rino115sipsip
malicious
http://91.219.236.240/rino115sipsip
malicious
http://194.180.174.182//l/f/qaHR_HwB3dP17SpzJnqt/553beaf07e7bcfa31cdc14361c20d4ecff5638ed
194.180.174.182
malicious
https://duckduckgo.com/chrome_newtab
unknown
clean
http://crl.netsolssl.com/NetworkSolutionsCertificateAuthority.crl0
unknown
clean
http://fedir.comsign.co.il/crl/ComSignCA.crl0
unknown
clean
https://duckduckgo.com/ac/?q=
unknown
clean
http://crl.chambersign.org/chambersroot.crl0
unknown
clean
https://repository.luxtrust.lu0
unknown
clean
https://support.google.com/chrome/answer/6258784
unknown
clean
http://cps.chambersign.org/cps/chambersroot.html0
unknown
clean
http://www.mozilla.com0
unknown
clean
http://www.chambersign.org1
unknown
clean
https://support.google.com/chrome/?p=plugin_flash
unknown
clean
http://crl.pkioverheid.nl/DomOrganisatieLatestCRL-G2.crl0
unknown
clean
http://www.firmaprofesional.com/cps0
unknown
clean
http://www.diginotar.nl/cps/pkioverheid0
unknown
clean
http://repository.swisssign.com/0
unknown
clean
http://crl.securetrust.com/SGCA.crl0
unknown
clean
http://crl.securetrust.com/STCA.crl0
unknown
clean
http://www.trustcenter.de/crl/v2/tc_class_3_ca_II.crl
unknown
clean
http://194.180.174.182/2
unknown
clean
http://crl.thawte.com/ThawteTimestampingCA.crl0
unknown
clean
http://www.certplus.com/CRL/class2.crl0
unknown
clean
http://www.quovadisglobal.com/cps0
unknown
clean
http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1_der.crl0
unknown
clean
https://ocsp.quovadisoffshore.com0
unknown
clean
http://cps.chambersign.org/cps/chambersignroot.html0
unknown
clean
http://www.sqlite.org/copyright.html.
unknown
clean
http://policy.camerfirma.com0
unknown
clean
http://www.mozilla.com/en-US/blocklist/
unknown
clean
https://www.google.com/images/branding/product/ico/googleg_lodp.ico
unknown
clean
http://www.accv.es/legislacion_c.htm0U
unknown
clean
http://www.certicamara.com/dpc/0Z
unknown
clean
http://ocsp.accv.es0
unknown
clean
http://ocsp.thawte.com0
unknown
clean
http://194.180.174.182/Square150x150.pngY
unknown
clean
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
unknown
clean
https://t.me/rino115sipsip
clean
https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
unknown
clean
https://ac.ecosia.org/autocomplete?q=
unknown
clean
https://www.catcert.net/verarrel
unknown
clean
http://www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0
unknown
clean
http://crl.chambersign.org/chambersignroot.crl0
unknown
clean
http://crl.xrampsecurity.com/XGCA.crl0
unknown
clean
https://www.catcert.net/verarrel05
unknown
clean
http://www.quovadis.bm0
unknown
clean
http://www.accv.es00
unknown
clean
http://www.pkioverheid.nl/policies/root-policy-G20
unknown
clean
http://www.cert.fnmt.es/dpcs/0
unknown
clean
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
unknown
clean
http://194.180.174.182/l
unknown
clean
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
unknown
clean
There are 49 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
91.219.236.162
unknown
Hungary
malicious
185.163.47.176
unknown
Moldova Republic of
malicious
178.23.190.57
unknown
unknown
malicious
194.180.174.182
unknown
unknown
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
47A0000
unkown
page execute and read and write
malicious
400000
unkown image
page execute and read and write
malicious
48B0000
unkown
page read and write
malicious
EAF9D3B000
unkown
page read and write
clean
C90000
heap private
page read and write
clean
7DF46DB00000
unkown image
page readonly
clean
1CBF037D000
unkown
page read and write
clean
2030E1D0000
unkown
page read and write
clean
1EE6000
unkown image
page readonly
clean
1CBEFA58000
unkown
page read and write
clean
D602B3C000
unkown
page read and write
clean
7FF5C06C9000
unkown image
page readonly
clean
2AC982D0000
unkown image
page readonly
clean
7FF5E4371000
unkown image
page readonly
clean
7FF527955000
unkown image
page readonly
clean
33FF7DE000
stack
page read and write
clean
7FF5C189D000
unkown image
page readonly
clean
7FF59DCB3000
unkown image
page readonly
clean
7FF5B2B00000
unkown image
page readonly
clean
7FF59E0D7000
unkown image
page readonly
clean
1CBF037D000
unkown
page read and write
clean
1CBF03A5000
unkown
page read and write
clean
7FF5B2D9E000
unkown image
page readonly
clean
21439F90000
unkown image
page write copy
clean
1CBF038C000
unkown
page read and write
clean
7FF5E1934000
unkown image
page readonly
clean
21E9F67A000
unkown
page read and write
clean
7FF5C1042000
unkown image
page readonly
clean
5E468FF000
stack
page read and write
clean
958000
unkown
page read and write
clean
25AA4720000
unkown image
page readonly
clean
2BB8000
unkown image
page readonly
clean
7F4D0000
unkown image
page readonly
clean
7DF5ABDC0000
unkown image
page readonly
clean
22E69CE000
stack
page read and write
clean
1CBF0384000
unkown
page read and write
clean
21439E50000
heap default
page read and write
clean
7DF56FC32000
unkown image
page readonly
clean
7FF5B2AF7000
unkown image
page readonly
clean
7FF561F4A000
unkown image
page readonly
clean
1CBF03BE000
unkown
page read and write
clean
4DCA4000
stack
page read and write
clean
4DC95000
stack
page read and write
clean
34B1D7E000
stack
page read and write
clean
7DF5CE440000
unkown image
page readonly
clean
2400000
unkown image
page readonly
clean
4DCA4000
stack
page read and write
clean
519E000
stack
page read and write
clean
2AC98055000
unkown
page read and write
clean
3000000
unkown image
page readonly
clean
4DDA0000
stack
page read and write
clean
7FF5C1741000
unkown image
page readonly
clean
7FF527437000
unkown image
page readonly
clean
7FC40000
unkown image
page readonly
clean
7F5D0000
unkown image
page readonly
clean
1EA27A4A000
unkown
page read and write
clean
21439E00000
unkown image
page readonly
clean
7FF59DE27000
unkown image
page readonly
clean
7FC42000
unkown image
page readonly
clean
2CF3000
unkown
page read and write
clean
1EA27A87000
unkown
page read and write
clean
7FF572784000
unkown image
page readonly
clean
1E5B000
unkown image
page readonly
clean
7FF5C1811000
unkown image
page readonly
clean
4DC0D000
stack
page read and write
clean
7FF5E1941000
unkown image
page readonly
clean
2FFF000
stack
page read and write
clean
1CBEFA53000
unkown
page read and write
clean
1CBEFA9E000
unkown
page read and write
clean
7FF561F47000
unkown image
page readonly
clean
351A87B000
unkown
page read and write
clean
22E694C000
unkown
page read and write
clean
7FF5E1863000
unkown image
page readonly
clean
2143A0C1000
unkown
page read and write
clean
4DC7C000
stack
page read and write
clean
7FF527637000
unkown image
page readonly
clean
7DF5F9100000
unkown image
page readonly
clean
2C2EAE77000
unkown
page read and write
clean
9408879000
stack
page read and write
clean
7FF5279F7000
unkown image
page readonly
clean
E16000
unkown image
page readonly
clean
1CBF0398000
unkown
page read and write
clean
34B1BFC000
stack
page read and write
clean
274BFD10000
unkown image
page readonly
clean
7FF5E1945000
unkown image
page readonly
clean
1EF96310000
unkown image
page readonly
clean
7DF5EF0E0000
unkown image
page readonly
clean
7FF5C051F000
unkown image
page readonly
clean
7FF572772000
unkown image
page readonly
clean
7DF580402000
unkown image
page readonly
clean
7FF5C063B000
unkown image
page readonly
clean
94084CA000
unkown
page read and write
clean
1CBF08DA000
unkown
page read and write
clean
7FF59E0B2000
unkown image
page readonly
clean
7FF5E43FE000
unkown image
page readonly
clean
7FF5EB3C7000
unkown image
page readonly
clean
2CF7000
unkown
page read and write
clean
7DF5EF5C2000
unkown image
page readonly
clean
274C0380000
unkown image
page readonly
clean
7FF59DABD000
unkown image
page readonly
clean
7DF580412000
unkown image
page readonly
clean
7FF5E1397000
unkown image
page readonly
clean
7FF59E057000
unkown image
page readonly
clean
7FF5C1974000
unkown image
page readonly
clean
7FF5E146E000
unkown image
page readonly
clean
21E9F675000
unkown
page read and write
clean
7FF5C17E5000
unkown image
page readonly
clean
78A1BAE000
stack
page read and write
clean
7FF572425000
unkown image
page readonly
clean
7FF5EB3B3000
unkown image
page readonly
clean
1EA27A29000
unkown
page read and write
clean
4870000
unkown
page read and write
clean
4DB28000
stack
page read and write
clean
7DF580402000
unkown image
page readonly
clean
2CEC000
unkown
page read and write
clean
1CBF0387000
unkown
page read and write
clean
1CBF00F0000
unkown
page read and write
clean
78A207B000
stack
page read and write
clean
7FF5B2D93000
unkown image
page readonly
clean
2AC97F50000
unkown image
page readonly
clean
7DF5EF5B2000
unkown image
page readonly
clean
1CBF0389000
unkown
page read and write
clean
2C2EAD40000
heap private
page read and write
clean
2B68000
unkown image
page readonly
clean
4DB49000
stack
page read and write
clean
7FF527A07000
unkown image
page readonly
clean
1CBF0367000
unkown
page read and write
clean
7DF56FC50000
unkown image
page readonly
clean
7FF5EB481000
unkown image
page readonly
clean
7FF5EB260000
unkown image
page readonly
clean
1CBF0389000
unkown
page read and write
clean
7FF561EF0000
unkown image
page readonly
clean
1CBEF880000
unkown image
page readonly
clean
7DF5C0AA0000
unkown image
page readonly
clean
4DC7C000
stack
page read and write
clean
2C2EAF02000
unkown
page read and write
clean
13BF1F40000
unkown
page read and write
clean
7FF5EAB42000
unkown image
page readonly
clean
351AE7D000
stack
page read and write
clean
7DF5EF0D2000
unkown image
page readonly
clean
7DF535730000
unkown image
page readonly
clean
7DF5ABDC2000
unkown image
page readonly
clean
4D1D000
stack
page read and write
clean
4DDAA000
stack
page read and write
clean
1CBF0080000
unkown image
page write copy
clean
7FF527AA2000
unkown image
page readonly
clean
7FF561F4D000
unkown image
page readonly
clean
7DF5EF0E0000
unkown image
page readonly
clean
13BF2002000
unkown
page read and write
clean
2AC97FA0000
heap default
page read and write
clean
1EF96460000
unkown
page read and write
clean
FFE7E7E000
stack
page read and write
clean
2150000
unkown image
page readonly
clean
7FF5C190D000
unkown image
page readonly
clean
4B10000
heap private
page read and write
clean
2030E1D0000
unkown
page read and write
clean
13BF1760000
unkown image
page readonly
clean
25AA4507000
unkown
page read and write
clean
7FF5C18B7000
unkown image
page readonly
clean
1CBF039A000
unkown
page read and write
clean
1CBF0863000
unkown
page read and write
clean
7FF5272C9000
unkown image
page readonly
clean
2BC0000
heap default
page read and write
clean
1E35000
unkown image
page readonly
clean
1CBF0802000
unkown
page read and write
clean
7FF5E43C0000
unkown image
page readonly
clean
7FF5C06E3000
unkown image
page readonly
clean
2030E300000
unkown
page read and write
clean
2C98000
unkown
page read and write
clean
1CBF034C000
unkown
page read and write
clean
7FF5E1454000
unkown image
page readonly
clean
7FF5C177B000
unkown image
page readonly
clean
274BFC00000
unkown image
page readonly
clean
7FF5BFFF5000
unkown image
page readonly
clean
7DF5EF5B2000
unkown image
page readonly
clean
4DC97000
stack
page read and write
clean
7FF5C070B000
unkown image
page readonly
clean
7DF5ABDE0000
unkown image
page readonly
clean
7FF5E1383000
unkown image
page readonly
clean
940854F000
stack
page read and write
clean
7FF5B2E12000
unkown image
page readonly
clean
274BFE29000
unkown
page read and write
clean
7FF5C0737000
unkown image
page readonly
clean
2C2EAE75000
unkown
page read and write
clean
7FF527A2E000
unkown image
page readonly
clean
21E9F63D000
unkown
page read and write
clean
4DC8D000
stack
page read and write
clean
7DF5CE422000
unkown image
page readonly
clean
33FFD7E000
stack
page read and write
clean
40000
unkown image
page readonly
clean
1CBF038E000
unkown
page read and write
clean
1CBF0377000
unkown
page read and write
clean
6EAF0000
unkown image
page readonly
clean
2143A029000
unkown
page read and write
clean
7DF4EFFD0000
unkown image
page readonly
clean
7FF572526000
unkown image
page readonly
clean
4DB0F000
stack
page read and write
clean
2C2EAD50000
unkown image
page readonly
clean
1CBEF870000
heap private
page read and write
clean
7FF5279DF000
unkown image
page readonly
clean
7DF4CC2F0000
unkown image
page readonly
clean
1CBF037B000
unkown
page read and write
clean
1CBF038C000
unkown
page read and write
clean
1CBF0364000
unkown
page read and write
clean
7FF5EAF71000
unkown image
page readonly
clean
2AC98079000
unkown
page read and write
clean
7FF5C055F000
unkown image
page readonly
clean
7FF5C198A000
unkown image
page readonly
clean
1CBF038D000
unkown
page read and write
clean
2143A023000
unkown
page read and write
clean
4DC8D000
stack
page read and write
clean
7FF5C1716000
unkown image
page readonly
clean
C96000
heap private
page read and write
clean
7FF5C07A4000
unkown image
page readonly
clean
7DF5ABDE0000
unkown image
page readonly
clean
7DF56FC42000
unkown image
page readonly
clean
274BFD20000
unkown image
page readonly
clean
7DF5EF5D0000
unkown image
page readonly
clean
7FF5E1166000
unkown image
page readonly
clean
2030FC02000
unkown
page read and write
clean
7FF527874000
unkown image
page readonly
clean
7FC42000
unkown image
page readonly
clean
1EF8000
unkown image
page readonly
clean
25AA44F1000
unkown
page read and write
clean
7FF59DEDB000
unkown image
page readonly
clean
1EF962F0000
unkown image
page readonly
clean
1CBF038C000
unkown
page read and write
clean
1CBF035B000
unkown
page read and write
clean
1EF96A50000
unkown image
page readonly
clean
7FF59D873000
unkown image
page readonly
clean
4DC8D000
stack
page read and write
clean
7FF561E2B000
unkown image
page readonly
clean
7FF5EB3DB000
unkown image
page readonly
clean
7DF5CE432000
unkown image
page readonly
clean
21E9F66B000
unkown
page read and write
clean
78A237C000
stack
page read and write
clean
2143A102000
unkown
page read and write
clean
7FF5EB29F000
unkown image
page readonly
clean
1CBF0802000
unkown
page read and write
clean
7DF5CF5F0000
unkown image
page readonly
clean
2C2EAE75000
unkown
page read and write
clean
1CBEFB08000
unkown
page read and write
clean
7FF5EB474000
unkown image
page readonly
clean
13BF2200000
unkown
page read and write
clean
492E000
stack
page read and write
clean
7FF527A47000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
33FF75E000
stack
page read and write
clean
1CBF038D000
unkown
page read and write
clean
7FF5C197A000
unkown image
page readonly
clean
7FF5C05D7000
unkown image
page readonly
clean
1EA27C00000
unkown image
page readonly
clean
560000
unkown image
page readonly
clean
7FF5726FE000
unkown image
page readonly
clean
7DF5C0AA0000
unkown image
page readonly
clean
7DF580412000
unkown image
page readonly
clean
E16000
unkown image
page readonly
clean
2143A013000
unkown
page read and write
clean
7FF5726F3000
unkown image
page readonly
clean
261E000
stack
page read and write
clean
7FF5EB216000
unkown image
page readonly
clean
1CBF0389000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
4DC95000
stack
page read and write
clean
1EA27A8C000
unkown
page read and write
clean
7DF5F9102000
unkown image
page readonly
clean
7FF5279F3000
unkown image
page readonly
clean
7DF5ABDC0000
unkown image
page readonly
clean
7DF5F9110000
unkown image
page readonly
clean
1EF962D0000
unkown image
page read and write
clean
7FF57271A000
unkown image
page readonly
clean
2C2EAE5C000
unkown
page read and write
clean
1CBF0389000
unkown
page read and write
clean
7FF5C071E000
unkown image
page readonly
clean
4DB48000
stack
page read and write
clean
7FF59E155000
unkown image
page readonly
clean
4DE7E000
stack
page read and write
clean
7FF5B2D37000
unkown image
page readonly
clean
2C2EAE61000
unkown
page read and write
clean
1EF96513000
unkown
page read and write
clean
1EA27A52000
unkown
page read and write
clean
2C2EB602000
unkown
page read and write
clean
25AA4430000
unkown
page read and write
clean
7F5D0000
unkown image
page readonly
clean
7FF5E18CD000
unkown image
page readonly
clean
7FF59E087000
unkown image
page readonly
clean
274C0200000
unkown image
page readonly
clean
21E9F640000
unkown
page read and write
clean
7FF5C18DB000
unkown image
page readonly
clean
2AC98068000
unkown
page read and write
clean
1EA27A55000
unkown
page read and write
clean
1EA27A4D000
unkown
page read and write
clean
7FF561DA0000
unkown image
page readonly
clean
4ADF000
stack
page read and write
clean
1CBEFB02000
unkown
page read and write
clean
7FF5E4184000
unkown image
page readonly
clean
21EC000
unkown
page read and write
clean
351AD7C000
stack
page read and write
clean
2C2EAE66000
unkown
page read and write
clean
1EF96454000
unkown
page read and write
clean
7FF5C18A3000
unkown image
page readonly
clean
4DC0D000
stack
page read and write
clean
1CBF08D4000
unkown
page read and write
clean
7FF527821000
unkown image
page readonly
clean
7FF59DEE6000
unkown image
page readonly
clean
7DF5F90F0000
unkown image
page readonly
clean
EAFA2FE000
stack
page read and write
clean
21AD000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
1CBF00F0000
unkown
page read and write
clean
2AC97F40000
heap private
page read and write
clean
1CBF0398000
unkown
page read and write
clean
9C000
unkown
page read and write
clean
7FF59DF1C000
unkown image
page readonly
clean
2D08000
unkown
page read and write
clean
2D19000
unkown
page read and write
clean
7FF527309000
unkown image
page readonly
clean
7FF5E11EB000
unkown image
page readonly
clean
1EA27B02000
unkown
page read and write
clean
7FF5EB3EE000
unkown image
page readonly
clean
22E6D7B000
stack
page read and write
clean
2C2EADB0000
unkown image
page readonly
clean
7FF52743B000
unkown image
page readonly
clean
6EAF1000
unkown image
page execute read
clean
1CBEFA4A000
unkown
page read and write
clean
7FF5726AD000
unkown image
page readonly
clean
7FF5279F0000
unkown image
page readonly
clean
1CBF0381000
unkown
page read and write
clean
7FF5C0792000
unkown image
page readonly
clean
7FF5E13C8000
unkown image
page readonly
clean
1E3F000
unkown image
page readonly
clean
1EF966D0000
unkown image
page readonly
clean
1EF96502000
unkown
page read and write
clean
21E9F63B000
unkown
page read and write
clean
1CBEFB16000
unkown
page read and write
clean
7FF5275B1000
unkown image
page readonly
clean
7DF580410000
unkown image
page readonly
clean
7FF561AB7000
unkown image
page readonly
clean
7DF5EF0F0000
unkown image
page readonly
clean
7FF5E1951000
unkown image
page readonly
clean
A7034FF000
stack
page read and write
clean
7FF561FBA000
unkown image
page readonly
clean
34B1E7D000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7DF5ABDC2000
unkown image
page readonly
clean
7FF5E11BE000
unkown image
page readonly
clean
1CBEFAD4000
unkown
page read and write
clean
A702DFE000
stack
page read and write
clean
7FC50000
unkown image
page readonly
clean
21E9F661000
unkown
page read and write
clean
7FF5E1379000
unkown image
page readonly
clean
7FF5E441A000
unkown image
page readonly
clean
1EF9645B000
unkown
page read and write
clean
2143A113000
unkown
page read and write
clean
7FF5B2D67000
unkown image
page readonly
clean
21E9F440000
unkown image
page readonly
clean
7FF5E4397000
unkown image
page readonly
clean
2030E010000
unkown image
page read and write
clean
7FF5726C0000
unkown image
page readonly
clean
7FF5278A0000
unkown image
page readonly
clean
7FF59D955000
unkown image
page readonly
clean
7FF59E139000
unkown image
page readonly
clean
4DB21000
stack
page read and write
clean
1EA279F0000
unkown image
page readonly
clean
4DB20000
stack
page read and write
clean
1CBF03A6000
unkown
page read and write
clean
2CD2000
unkown
page read and write
clean
7DF5C0AB2000
unkown image
page readonly
clean
7FF5726AF000
unkown image
page readonly
clean
1CBF0802000
unkown
page read and write
clean
4DC71000
stack
page read and write
clean
7FC52000
unkown image
page readonly
clean
1EF96508000
unkown
page read and write
clean
7F5E2000
unkown image
page readonly
clean
351ACFE000
stack
page read and write
clean
7FF5C18EE000
unkown image
page readonly
clean
2880000
unkown image
page readonly
clean
274BFE02000
unkown
page read and write
clean
274BFBE0000
unkown image
page readonly
clean
7FF5279FE000
unkown image
page readonly
clean
1CBF0380000
unkown
page read and write
clean
7FF5278E7000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
7FF572791000
unkown image
page readonly
clean
7FF59E0DA000
unkown image
page readonly
clean
7FF527AC1000
unkown image
page readonly
clean
2030E1A0000
unkown
page read and write
clean
7FF5B2B5A000
unkown image
page readonly
clean
5E4687F000
stack
page read and write
clean
7DF5CE430000
unkown image
page readonly
clean
7FF59DF77000
unkown image
page readonly
clean
1CBF08DF000
unkown
page read and write
clean
7FF5277DB000
unkown image
page readonly
clean
1EA27A6E000
unkown
page read and write
clean
2590000
heap default
page read and write
clean
A702C7B000
stack
page read and write
clean
FFE7D7E000
stack
page read and write
clean
1EF96400000
unkown
page read and write
clean
21E9F660000
unkown
page read and write
clean
7FF59E144000
unkown image
page readonly
clean
1EF96340000
heap default
page read and write
clean
1CBF037B000
unkown
page read and write
clean
4DCA7000
stack
page read and write
clean
7FF5C0712000
unkown image
page readonly
clean
4DC71000
stack
page read and write
clean
1CBF03CA000
unkown
page read and write
clean
EAFA7FE000
stack
page read and write
clean
2EFF000
stack
page read and write
clean
7FF59E161000
unkown image
page readonly
clean
4DC7B000
stack
page read and write
clean
7FC40000
unkown image
page readonly
clean
7FF5726C7000
unkown image
page readonly
clean
7DF5F2110000
unkown image
page readonly
clean
1EF96462000
unkown
page read and write
clean
EAFA4FE000
stack
page read and write
clean
7FF5E4167000
unkown image
page readonly
clean
7FC60000
unkown image
page readonly
clean
7FF5279E3000
unkown image
page readonly
clean
21E9F800000
unkown image
page readonly
clean
13BF1800000
unkown
page read and write
clean
2780000
heap default
page read and write
clean
550000
unkown image
page readonly
clean
4DC84000
stack
page read and write
clean
7FC42000
unkown image
page readonly
clean
13BF1AD0000
unkown image
page readonly
clean
1CBF0367000
unkown
page read and write
clean
7FF59E073000
unkown image
page readonly
clean
7FF5B2DBA000
unkown image
page readonly
clean
21E9F677000
unkown
page read and write
clean
7FF59E161000
unkown image
page readonly
clean
7FF5E1922000
unkown image
page readonly
clean
7FF5C06CD000
unkown image
page readonly
clean
2030E25F000
unkown
page read and write
clean
7FF5E423F000
unkown image
page readonly
clean
EAFA8FE000
stack
page read and write
clean
7FF5E1393000
unkown image
page readonly
clean
7DF5C0AB2000
unkown image
page readonly
clean
4F0000
unkown image
page readonly
clean
7FF5C0546000
unkown image
page readonly
clean
7FF5E185F000
unkown image
page readonly
clean
1CBF0389000
unkown
page read and write
clean
4828000
unkown
page execute and read and write
clean
7FF5C1991000
unkown image
page readonly
clean
7FF5E193A000
unkown image
page readonly
clean
351ABFF000
stack
page read and write
clean
7FF5C03CD000
unkown image
page readonly
clean
7FF5E449A000
unkown image
page readonly
clean
7FF561C55000
unkown image
page readonly
clean
7FF561F2E000
unkown image
page readonly
clean
C96000
heap private
page read and write
clean
25AA4510000
unkown
page read and write
clean
7FF59E083000
unkown image
page readonly
clean
21E9F684000
unkown
page read and write
clean
1CBF00F0000
unkown
page read and write
clean
7FF5E1353000
unkown image
page readonly
clean
4DB31000
stack
page read and write
clean
7FF5C06E7000
unkown image
page readonly
clean
7FF5E1367000
unkown image
page readonly
clean
2030E25B000
unkown
page read and write
clean
7FF5EB2EB000
unkown image
page readonly
clean
7FF561EF7000
unkown image
page readonly
clean
7FF59E132000
unkown image
page readonly
clean
2D1A000
unkown
page read and write
clean
1EA278A0000
unkown image
page read and write
clean
2560000
unkown
page read and write
clean
49D7000
heap private
page read and write
clean
7FF5B2DB7000
unkown image
page readonly
clean
1CBF0300000
unkown
page read and write
clean
4DB45000
stack
page read and write
clean
7FF5B2E35000
unkown image
page readonly
clean
7FF5C18C7000
unkown image
page readonly
clean
4DB1F000
stack
page read and write
clean
2C30000
heap default
page read and write
clean
7FF52782F000
unkown image
page readonly
clean
7FF5C06C4000
unkown image
page readonly
clean
2143A000000
unkown
page read and write
clean
7FF5C18B0000
unkown image
page readonly
clean
1CBF08DC000
unkown
page read and write
clean
13BF1F40000
unkown
page read and write
clean
33FFC7E000
stack
page read and write
clean
22E707E000
stack
page read and write
clean
22E6C7F000
stack
page read and write
clean
7FF5E13BB000
unkown image
page readonly
clean
94089FF000
stack
page read and write
clean
2B68000
unkown image
page readonly
clean
7FF5E43D7000
unkown image
page readonly
clean
7FF5EAF77000
unkown image
page readonly
clean
1CBEFA13000
unkown
page read and write
clean
7FF5B2DBD000
unkown image
page readonly
clean
1EF8000
unkown image
page readonly
clean
7FF59DF72000
unkown image
page readonly
clean
7FF59DCC9000
unkown image
page readonly
clean
1EF9643C000
unkown
page read and write
clean
1EA27A4E000
unkown
page read and write
clean
274C0000000
unkown image
page readonly
clean
7FF5EB3B7000
unkown image
page readonly
clean
2DE0000
unkown
page read and write
clean
7DF5CF600000
unkown image
page readonly
clean
7DF5F2100000
unkown image
page readonly
clean
7DF4BE970000
unkown image
page readonly
clean
1EA27A4B000
unkown
page read and write
clean
4DC84000
stack
page read and write
clean
13BF1760000
unkown image
page readonly
clean
1CBF0100000
unkown image
page read and write
clean
2C3A000
heap default
page read and write
clean
1CBF0802000
unkown
page read and write
clean
6EC18000
unkown image
page read and write
clean
2143A087000
unkown
page read and write
clean
7FF5C0309000
unkown image
page readonly
clean
1CBF08D6000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1CBF0803000
unkown
page read and write
clean
2AC97F50000
unkown image
page readonly
clean
34B217D000
stack
page read and write
clean
1CBF0311000
unkown
page read and write
clean
7DF580420000
unkown image
page readonly
clean
2CCF000
unkown
page read and write
clean
1EF962F0000
unkown image
page readonly
clean
7FF5EB3E3000
unkown image
page readonly
clean
274BFE71000
unkown
page read and write
clean
13BF1E50000
unkown image
page readonly
clean
13BF17B0000
heap default
page read and write
clean
4DB31000
stack
page read and write
clean
7DF5ABDD2000
unkown image
page readonly
clean
7DF5C0AA2000
unkown image
page readonly
clean
7FF5279C7000
unkown image
page readonly
clean
1CBEFACA000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
7DF5CF5F0000
unkown image
page readonly
clean
7FF561E25000
unkown image
page readonly
clean
7FC52000
unkown image
page readonly
clean
1CBF0389000
unkown
page read and write
clean
7FF527889000
unkown image
page readonly
clean
1CBEFE00000
unkown image
page readonly
clean
7FF5EB491000
unkown image
page readonly
clean
2143A900000
unkown
page read and write
clean
21E9F410000
heap private
page read and write
clean
1CBF0390000
unkown
page read and write
clean
7FF5279B3000
unkown image
page readonly
clean
7DF5F9102000
unkown image
page readonly
clean
21439F50000
unkown
page read and write
clean
4DC95000
stack
page read and write
clean
7FF59DFDC000
unkown image
page readonly
clean
7DF5F90F0000
unkown image
page readonly
clean
560000
unkown image
page readonly
clean
7FF5C0641000
unkown image
page readonly
clean
25AA44F6000
heap default
page read and write
clean
1EF96350000
unkown image
page readonly
clean
2C2EADA0000
heap default
page read and write
clean
2AC98000000
unkown
page read and write
clean
7FF59DCC7000
unkown image
page readonly
clean
5E462FE000
stack
page read and write
clean
7FF5B2664000
unkown image
page readonly
clean
2D03000
unkown
page read and write
clean
22E717F000
stack
page read and write
clean
274C0402000
unkown
page read and write
clean
7DF5EF5B0000
unkown image
page readonly
clean
25AA4521000
unkown
page read and write
clean
7FF59E14A000
unkown image
page readonly
clean
1ECE000
unkown image
page readonly
clean
21E9F450000
unkown image
page readonly
clean
274C0390000
unkown
page read and write
clean
274BFF13000
unkown
page read and write
clean
25AA4523000
unkown
page read and write
clean
A702FFE000
stack
page read and write
clean
1CBEFA5A000
unkown
page read and write
clean
7FF5C06AE000
unkown image
page readonly
clean
7FF59D958000
unkown image
page readonly
clean
7FF5E18CA000
unkown image
page readonly
clean
2570000
unkown image
page readonly
clean
7FF561682000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7DF5EF0D2000
unkown image
page readonly
clean
7FF5C06B7000
unkown image
page readonly
clean
2030E050000
unkown image
page readonly
clean
7FF5E117B000
unkown image
page readonly
clean
4DC86000
stack
page read and write
clean
1CBF039E000
unkown
page read and write
clean
7FF5E1149000
unkown image
page readonly
clean
1EBF000
unkown image
page readonly
clean
7FC50000
unkown image
page readonly
clean
1CBF037F000
unkown
page read and write
clean
1CBF03B7000
unkown
page read and write
clean
7FF5BFE91000
unkown image
page readonly
clean
5E46677000
stack
page read and write
clean
21E9F629000
unkown
page read and write
clean
1CBF0376000
unkown
page read and write
clean
7FF561DBB000
unkown image
page readonly
clean
1CBF0802000
unkown
page read and write
clean
7DF580400000
unkown image
page readonly
clean
2AC98013000
unkown
page read and write
clean
7FF5C1969000
unkown image
page readonly
clean
1CBF031B000
unkown
page read and write
clean
7FF5E194A000
unkown image
page readonly
clean
7FF59E151000
unkown image
page readonly
clean
1EA27B13000
unkown
page read and write
clean
4DB12000
stack
page read and write
clean
6EC16000
unkown image
page write copy
clean
7FF5E4226000
unkown image
page readonly
clean
2030E213000
unkown
page read and write
clean
1EA28202000
unkown
page read and write
clean
1CBF0396000
unkown
page read and write
clean
2BBE000
stack
page read and write
clean
FFE78FE000
stack
page read and write
clean
1EA278E0000
unkown image
page readonly
clean
2030FBA0000
unkown
page read and write
clean
21E9F67D000
unkown
page read and write
clean
7DF535742000
unkown image
page readonly
clean
7FF5EB469000
unkown image
page readonly
clean
1EA27A53000
unkown
page read and write
clean
2C2EAE29000
unkown
page read and write
clean
6FB09000
unkown image
page readonly
clean
7DF5CF5F2000
unkown image
page readonly
clean
470000
unkown image
page write copy
clean
7FF5C06E0000
unkown image
page readonly
clean
7DF535732000
unkown image
page readonly
clean
7FF527A4A000
unkown image
page readonly
clean
1CBF037B000
unkown
page read and write
clean
274BFBC0000
unkown image
page read and write
clean
7F5D2000
unkown image
page readonly
clean
1CBF0202000
unkown
page read and write
clean
1CBF0361000
unkown
page read and write
clean
4DC16000
stack
page read and write
clean
2BB8000
unkown image
page readonly
clean
2030E200000
unkown
page read and write
clean
2D04000
unkown
page read and write
clean
1CBEFA70000
unkown
page read and write
clean
7FF5E4196000
unkown image
page readonly
clean
1CBF08DD000
unkown
page read and write
clean
7FF527A1B000
unkown image
page readonly
clean
1CBEFC00000
unkown image
page readonly
clean
1F0000
unkown
page read and write
clean
7FF5B2D8B000
unkown image
page readonly
clean
274BFE13000
unkown
page read and write
clean
3B6000
unkown
page read and write
clean
1CBF0376000
unkown
page read and write
clean
1CBF0389000
unkown
page read and write
clean
2030E180000
unkown
page read and write
clean
1EF9645E000
unkown
page read and write
clean
7FF5B2D4F000
unkown image
page readonly
clean
D60337F000
stack
page read and write
clean
1EF96487000
unkown
page read and write
clean
A702A7C000
unkown
page read and write
clean
21E9F646000
unkown
page read and write
clean
1EF9645F000
unkown
page read and write
clean
2CFE000
unkown
page read and write
clean
7FF5E43B3000
unkown image
page readonly
clean
7FF52797F000
unkown image
page readonly
clean
1EA27B00000
unkown
page read and write
clean
7FF5B2D0E000
unkown image
page readonly
clean
A7030FD000
stack
page read and write
clean
FFE7C77000
stack
page read and write
clean
7DF56FC42000
unkown image
page readonly
clean
1CBF03BE000
unkown
page read and write
clean
7FF5E4267000
unkown image
page readonly
clean
2AC98064000
unkown
page read and write
clean
7FF561FB4000
unkown image
page readonly
clean
7FF5B2D98000
unkown image
page readonly
clean
1CBF037E000
unkown
page read and write
clean
2C2EAE13000
unkown
page read and write
clean
13BF1835000
unkown
page read and write
clean
7FF59E06D000
unkown image
page readonly
clean
7DF5F2120000
unkown image
page readonly
clean
7F5D2000
unkown image
page readonly
clean
33FF6DB000
unkown
page read and write
clean
7FF5E1189000
unkown image
page readonly
clean
940897F000
stack
page read and write
clean
13BF1750000
heap private
page read and write
clean
7FF5B2E3A000
unkown image
page readonly
clean
7FF5E4472000
unkown image
page readonly
clean
7FF5C0492000
unkown image
page readonly
clean
7FF527AD1000
unkown image
page readonly
clean
2143A043000
unkown
page read and write
clean
3CF000
unkown
page read and write
clean
1EF9647E000
unkown
page read and write
clean
7FF561E3C000
unkown image
page readonly
clean
1CBF0354000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
2030E23D000
unkown
page read and write
clean
7FF5C06D3000
unkown image
page readonly
clean
7DF56FC32000
unkown image
page readonly
clean
7FF5726EB000
unkown image
page readonly
clean
969000
heap default
page read and write
clean
1EA27A58000
unkown
page read and write
clean
7FF5EB315000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF561809000
unkown image
page readonly
clean
7FF527AD0000
unkown image
page readonly
clean
7FF561AB1000
unkown image
page readonly
clean
7FF561ED9000
unkown image
page readonly
clean
49B0000
unkown
page read and write
clean
1EC4000
unkown image
page readonly
clean
7FF5E4479000
unkown image
page readonly
clean
33FFB7E000
stack
page read and write
clean
7FF561EDD000
unkown image
page readonly
clean
1CBF035A000
unkown
page read and write
clean
1CBF0385000
unkown
page read and write
clean
2030E24A000
unkown
page read and write
clean
2C2EADD0000
unkown
page read and write
clean
1CBEF860000
unkown image
page read and write
clean
2CF1000
unkown
page read and write
clean
21E9F470000
heap default
page read and write
clean
40000
unkown image
page readonly
clean
1CBF03AB000
unkown
page read and write
clean
1CBEF9F0000
unkown image
page readonly
clean
2030E259000
unkown
page read and write
clean
7DF535740000
unkown image
page readonly
clean
7FF59DD5C000
unkown image
page readonly
clean
7FF59DE32000
unkown image
page readonly
clean
5E46CFF000
stack
page read and write
clean
7FF561FA9000
unkown image
page readonly
clean
3BA000
unkown
page read and write
clean
7FF5E438E000
unkown image
page readonly
clean
1CBF0383000
unkown
page read and write
clean
1CBEFAE5000
unkown
page read and write
clean
7DF433600000
unkown image
page readonly
clean
7FF59D91E000
unkown image
page readonly
clean
7FF5E146A000
unkown image
page readonly
clean
1CBEFABB000
unkown
page read and write
clean
7FF561FA2000
unkown image
page readonly
clean
7FF59E08E000
unkown image
page readonly
clean
7FF5E43AA000
unkown image
page readonly
clean
7FF5C0495000
unkown image
page readonly
clean
7DF5CF610000
unkown image
page readonly
clean
2030E25A000
unkown
page read and write
clean
7DF5F9100000
unkown image
page readonly
clean
7FF527A23000
unkown image
page readonly
clean
2030E160000
unkown image
page readonly
clean
1CBF08ED000
unkown
page read and write
clean
5E45FEC000
unkown
page read and write
clean
1EF96429000
unkown
page read and write
clean
1EA27A91000
unkown
page read and write
clean
1CBF03AD000
unkown
page read and write
clean
13BF1740000
unkown image
page read and write
clean
13BF1F40000
unkown
page read and write
clean
7FF5EB25D000
unkown image
page readonly
clean
7DF56FC30000
unkown image
page readonly
clean
25AA4508000
unkown
page read and write
clean
1CBF08E1000
unkown
page read and write
clean
25AA4510000
unkown
page read and write
clean
61E00000
unkown image
page readonly
clean
1CBEFA3C000
unkown
page read and write
clean
1EA27A13000
unkown
page read and write
clean
7FF5E185D000
unkown image
page readonly
clean
1CBEFA29000
unkown
page read and write
clean
7FF5E1951000
unkown image
page readonly
clean
7FF5E441D000
unkown image
page readonly
clean
4DB1B000
stack
page read and write
clean
7FF5E4383000
unkown image
page readonly
clean
6FAF1000
unkown image
page execute read
clean
4DC84000
stack
page read and write
clean
683000
unkown
page read and write
clean
7DF5ABDD0000
unkown image
page readonly
clean
7FF5E130E000
unkown image
page readonly
clean
7DF5CE420000
unkown image
page readonly
clean
1EBB000
unkown image
page readonly
clean
4938000
unkown
page read and write
clean
7FF52792B000
unkown image
page readonly
clean
7DFDB8176000
unkown image
page readonly
clean
255E000
stack
page read and write
clean
2C2EAD50000
unkown image
page readonly
clean
1CBF03D1000
unkown
page read and write
clean
7FF5727A1000
unkown image
page readonly
clean
21E9F647000
unkown
page read and write
clean
7FF5E13ED000
unkown image
page readonly
clean
4DB00000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1CBF0356000
unkown
page read and write
clean
7DF535732000
unkown image
page readonly
clean
2CBB000
unkown
page read and write
clean
1EF9645C000
unkown
page read and write
clean
4870000
unkown
page read and write
clean
7DF5F90F2000
unkown image
page readonly
clean
7FF5C18B3000
unkown image
page readonly
clean
7FF5E448A000
unkown image
page readonly
clean
6FB10000
unkown image
page read and write
clean
2030E264000
unkown
page read and write
clean
78A1AAC000
unkown
page read and write
clean
21E9FE02000
unkown
page read and write
clean
EAFA5FC000
stack
page read and write
clean
7FF5B2E19000
unkown image
page readonly
clean
C96000
heap private
page read and write
clean
7FF5C1760000
unkown image
page readonly
clean
2AC98100000
unkown
page read and write
clean
2C49000
unkown
page execute and read and write
clean
1E4F000
unkown image
page readonly
clean
4DC07000
stack
page read and write
clean
5E46BFF000
stack
page read and write
clean
7DF5ABDD0000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FC60000
unkown image
page readonly
clean
1EA27A4F000
unkown
page read and write
clean
7FF5C175D000
unkown image
page readonly
clean
1CBEFAA5000
unkown
page read and write
clean
7DF5EF5C0000
unkown image
page readonly
clean
21E9F420000
unkown image
page readonly
clean
2030E302000
unkown
page read and write
clean
7FF5C18E3000
unkown image
page readonly
clean
7DF56FC30000
unkown image
page readonly
clean
4DFDE000
stack
page read and write
clean
1CBF038E000
unkown
page read and write
clean
2030E22A000
unkown
page read and write
clean
7FF5E189B000
unkown image
page readonly
clean
25AA4480000
unkown image
page readonly
clean
2030E274000
unkown
page read and write
clean
7DF535730000
unkown image
page readonly
clean
7FF5C06F7000
unkown image
page readonly
clean
2AC97FD0000
unkown
page read and write
clean
7FF5EB399000
unkown image
page readonly
clean
351B1FC000
stack
page read and write
clean
7FB40000
unkown image
page readonly
clean
274BFE75000
unkown
page read and write
clean
7FF5C07BA000
unkown image
page readonly
clean
1CBF03A6000
unkown
page read and write
clean
2143A400000
unkown image
page readonly
clean
7FF5C1615000
unkown image
page readonly
clean
7DF5CE430000
unkown image
page readonly
clean
7FF5E41AB000
unkown image
page readonly
clean
7FF5E131F000
unkown image
page readonly
clean
EAFA17E000
stack
page read and write
clean
13BF1813000
unkown
page read and write
clean
7FF5726CE000
unkown image
page readonly
clean
2B1B000
unkown image
page readonly
clean
2030E030000
unkown image
page readonly
clean
7FF561D9D000
unkown image
page readonly
clean
13BF1CD0000
unkown image
page readonly
clean
2D12000
unkown
page read and write
clean
1CBF03B6000
unkown
page read and write
clean
4DC87000
stack
page read and write
clean
1CBF0394000
unkown
page read and write
clean
1CBF0382000
unkown
page read and write
clean
4DB0B000
stack
page read and write
clean
2C2EAE87000
unkown
page read and write
clean
1EF96320000
unkown image
page readonly
clean
2BB8000
unkown image
page readonly
clean
1EA27A57000
unkown
page read and write
clean
2030E080000
heap default
page read and write
clean
7FF5E4172000
unkown image
page readonly
clean
D60307B000
stack
page read and write
clean
21E9F702000
unkown
page read and write
clean
7FF561FD1000
unkown image
page readonly
clean
21439DF0000
heap private
page read and write
clean
7DF5EF5C0000
unkown image
page readonly
clean
7DF47E2D0000
unkown image
page readonly
clean
1CBEFA4E000
unkown
page read and write
clean
7FF59DE04000
unkown image
page readonly
clean
7DF5EF0E2000
unkown image
page readonly
clean
1CBEFA52000
unkown
page read and write
clean
2030E24B000
unkown
page read and write
clean
1EA27A7D000
unkown
page read and write
clean
2C2EB2D0000
unkown image
page readonly
clean
25AA4320000
unkown image
page readonly
clean
7FF5B2D49000
unkown image
page readonly
clean
6EBE0000
unkown image
page readonly
clean
7DF5F2120000
unkown image
page readonly
clean
1CBF0390000
unkown
page read and write
clean
7FF5C07BE000
unkown image
page readonly
clean
7FF5C05D2000
unkown image
page readonly
clean
7FF527639000
unkown image
page readonly
clean
2BB3000
unkown image
page readonly
clean
7DF5F2102000
unkown image
page readonly
clean
7DF580400000
unkown image
page readonly
clean
7FF5B2E41000
unkown image
page readonly
clean
2140000
unkown image
page read and write
clean
4E21F000
stack
page read and write
clean
7FF5EB39F000
unkown image
page readonly
clean
7FF5C06CF000
unkown image
page readonly
clean
4C1F000
stack
page read and write
clean
25AA4300000
unkown image
page read and write
clean
21439E30000
unkown image
page readonly
clean
1CBF037D000
unkown
page read and write
clean
7FF5C1477000
unkown image
page readonly
clean
2CEF000
unkown
page read and write
clean
1CBF031C000
unkown
page read and write
clean
2C2EAF13000
unkown
page read and write
clean
7FF5B2D24000
unkown image
page readonly
clean
25AA4490000
unkown image
page readonly
clean
2AC98660000
unkown image
page readonly
clean
7FF5C17EB000
unkown image
page readonly
clean
3CC000
unkown
page read and write
clean
7FF527ABA000
unkown image
page readonly
clean
4DC16000
stack
page read and write
clean
2143A802000
unkown
page read and write
clean
7FF59DF4B000
unkown image
page readonly
clean
7FF5E145A000
unkown image
page readonly
clean
7FF527885000
unkown image
page readonly
clean
7FF561D56000
unkown image
page readonly
clean
7FF52793C000
unkown image
page readonly
clean
1EA27E00000
unkown image
page readonly
clean
2030E020000
heap private
page read and write
clean
21E9F674000
unkown
page read and write
clean
7FF5E13E7000
unkown image
page readonly
clean
1EA278C0000
unkown image
page readonly
clean
7FF5EB311000
unkown image
page readonly
clean
21E9F65F000
unkown
page read and write
clean
5E4647E000
stack
page read and write
clean
7FF5EAB3D000
unkown image
page readonly
clean
7DF535742000
unkown image
page readonly
clean
265F000
stack
page read and write
clean
7FC52000
unkown image
page readonly
clean
21E9F658000
unkown
page read and write
clean
7FF5EB3BE000
unkown image
page readonly
clean
21E9FB80000
unkown image
page readonly
clean
7FF5E43AD000
unkown image
page readonly
clean
4DB22000
stack
page read and write
clean
7FF5EB407000
unkown image
page readonly
clean
7FF5C073A000
unkown image
page readonly
clean
1EF9645A000
unkown
page read and write
clean
1CBF0802000
unkown
page read and write
clean
4DC8D000
stack
page read and write
clean
4DB28000
stack
page read and write
clean
7FF5C04A4000
unkown image
page readonly
clean
8FE000
unkown
page read and write
clean
7FF5C1962000
unkown image
page readonly
clean
3200000
unkown image
page readonly
clean
7FF5E43EB000
unkown image
page readonly
clean
7DF5F2102000
unkown image
page readonly
clean
2AC97F80000
unkown image
page readonly
clean
7F5E2000
unkown image
page readonly
clean
2AC97F30000
unkown image
page read and write
clean
7FF527AA9000
unkown image
page readonly
clean
7FF5E43C7000
unkown image
page readonly
clean
7FF561FD1000
unkown image
page readonly
clean
7FF5C0799000
unkown image
page readonly
clean
6EC1B000
unkown image
page readonly
clean
1EA27910000
heap default
page read and write
clean
7FF561D81000
unkown image
page readonly
clean
7DF5F2112000
unkown image
page readonly
clean
7DF5F2112000
unkown image
page readonly
clean
1CBF037B000
unkown
page read and write
clean
7FF5278DF000
unkown image
page readonly
clean
25DE000
stack
page read and write
clean
7FF5E4491000
unkown image
page readonly
clean
6FB12000
unkown image
page readonly
clean
78A1F7E000
stack
page read and write
clean
7DF5EF5D0000
unkown image
page readonly
clean
7DF5EF0F0000
unkown image
page readonly
clean
1CBF0387000
unkown
page read and write
clean
2C0E000
stack
page read and write
clean
7FF5E137D000
unkown image
page readonly
clean
94085CE000
stack
page read and write
clean
4DC00000
stack
page read and write
clean
7FF5B2D6E000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF571E4C000
unkown image
page readonly
clean
7FF5E1471000
unkown image
page readonly
clean
2C00000
unkown image
page readonly
clean
4DB28000
stack
page read and write
clean
21E9F659000
unkown
page read and write
clean
1CBF0389000
unkown
page read and write
clean
3C6000
unkown
page read and write
clean
7FF57278A000
unkown image
page readonly
clean
EAFA6FC000
stack
page read and write
clean
7FF52744C000
unkown image
page readonly
clean
7FC40000
unkown image
page readonly
clean
7FF5E0B44000
unkown image
page readonly
clean
2030E780000
unkown image
page readonly
clean
958000
unkown
page read and write
clean
1CBF0382000
unkown
page read and write
clean
203101C0000
unkown image
page write copy
clean
13BF185C000
unkown
page read and write
clean
7FF5726C3000
unkown image
page readonly
clean
5E4677B000
stack
page read and write
clean
7DF5CE432000
unkown image
page readonly
clean
7FF5C06A3000
unkown image
page readonly
clean
7FF561DDF000
unkown image
page readonly
clean
4DC01000
stack
page read and write
clean
7DF4F6FC0000
unkown image
page readonly
clean
351B0FE000
stack
page read and write
clean
7FF5278BB000
unkown image
page readonly
clean
7FF5E1870000
unkown image
page readonly
clean
4DF7F000
unkown
page read and write
clean
1CBEFAF9000
unkown
page read and write
clean
7FF5E13EA000
unkown image
page readonly
clean
2CFB000
unkown
page read and write
clean
1CBF038C000
unkown
page read and write
clean
7FF5C0691000
unkown image
page readonly
clean
4E0000
unkown image
page read and write
clean
5E4657A000
stack
page read and write
clean
7FF5C1471000
unkown image
page readonly
clean
25AA4340000
unkown image
page readonly
clean
2030E249000
unkown
page read and write
clean
2CF4000
unkown
page read and write
clean
1CBF0367000
unkown
page read and write
clean
2143A580000
unkown image
page readonly
clean
25AA44E0000
heap default
page read and write
clean
E16000
unkown image
page readonly
clean
5E4627F000
stack
page read and write
clean
6FAF0000
unkown image
page readonly
clean
7FF59D80D000
unkown image
page readonly
clean
7FF561EDF000
unkown image
page readonly
clean
7FF5C18BE000
unkown image
page readonly
clean
7FF59D981000
unkown image
page readonly
clean
7FF527992000
unkown image
page readonly
clean
1CBF03AF000
unkown
page read and write
clean
7FF5E431C000
unkown image
page readonly
clean
7FF5C1899000
unkown image
page readonly
clean
4DC87000
stack
page read and write
clean
7FF5C06EE000
unkown image
page readonly
clean
22E6E7B000
stack
page read and write
clean
1CBF037B000
unkown
page read and write
clean
78A2177000
stack
page read and write
clean
21E9F65C000
unkown
page read and write
clean
1CBF03AC000
unkown
page read and write
clean
7DF5C0AB0000
unkown image
page readonly
clean
1CBF039D000
unkown
page read and write
clean
2AF5000
unkown image
page readonly
clean
A60000
heap default
page read and write
clean
7FF527797000
unkown image
page readonly
clean
2030E1D0000
unkown
page read and write
clean
21E9F664000
unkown
page read and write
clean
49D0000
heap private
page read and write
clean
21E9F662000
unkown
page read and write
clean
2C2EAD30000
unkown image
page read and write
clean
7FF5EB462000
unkown image
page readonly
clean
2143A0CB000
unkown
page read and write
clean
7FF5E0FC3000
unkown image
page readonly
clean
1CBEFA59000
unkown
page read and write
clean
7DF5EF0D0000
unkown image
page readonly
clean
7FF59E04F000
unkown image
page readonly
clean
7FF5279DD000
unkown image
page readonly
clean
7FF5E0FD9000
unkown image
page readonly
clean
7FF59D87A000
unkown image
page readonly
clean
A7033FE000
stack
page read and write
clean
4DB11000
stack
page read and write
clean
7FF5EB241000
unkown image
page readonly
clean
4E11E000
stack
page read and write
clean
21439DE0000
unkown image
page read and write
clean
2D19000
unkown
page read and write
clean
13BF17E0000
unkown
page read and write
clean
2BB8000
unkown image
page readonly
clean
7FF59E069000
unkown image
page readonly
clean
7FF59E06F000
unkown image
page readonly
clean
54D000
unkown
page read and write
clean
2690000
heap private
page read and write
clean
1EA28070000
unkown
page read and write
clean
7FF5B2D63000
unkown image
page readonly
clean
2143A590000
unkown image
page readonly
clean
7DF5F9110000
unkown image
page readonly
clean
2AC97FB0000
unkown image
page readonly
clean
1E29000
unkown image
page readonly
clean
94088FA000
stack
page read and write
clean
7FF5E137F000
unkown image
page readonly
clean
2143A0BA000
unkown
page read and write
clean
21E9F400000
unkown image
page read and write
clean
1E56000
unkown image
page readonly
clean
7DF4ED480000
unkown image
page readonly
clean
7FF5278E2000
unkown image
page readonly
clean
FFE75EC000
unkown
page read and write
clean
7FF5E1442000
unkown image
page readonly
clean
7FF5C030D000
unkown image
page readonly
clean
1CBF038D000
unkown
page read and write
clean
4DC01000
stack
page read and write
clean
4DC8D000
stack
page read and write
clean
7FF57279A000
unkown image
page readonly
clean
2030E790000
unkown image
page readonly
clean
2030FE00000
unkown
page read and write
clean
7FF561EFE000
unkown image
page readonly
clean
7FF5E43AF000
unkown image
page readonly
clean
4DB19000
stack
page read and write
clean
7FF5E41FF000
unkown image
page readonly
clean
7FF561EC7000
unkown image
page readonly
clean
2C2EAE00000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
2C2EAF00000
unkown
page read and write
clean
2143A200000
unkown image
page readonly
clean
7DF5CF600000
unkown image
page readonly
clean
7FF5C1991000
unkown image
page readonly
clean
5F0000
unkown
page read and write
clean
7FF5E3B58000
unkown image
page readonly
clean
4DC7B000
stack
page read and write
clean
21E9F641000
unkown
page read and write
clean
1CBF0360000
unkown
page read and write
clean
2AC98002000
unkown
page read and write
clean
25AA4715000
heap private
page read and write
clean
950000
heap default
page read and write
clean
2D19000
unkown
page read and write
clean
7FF5B2D60000
unkown image
page readonly
clean
2D12000
unkown
page read and write
clean
4DC87000
stack
page read and write
clean
34B172B000
unkown
page read and write
clean
1CBF08D2000
unkown
page read and write
clean
1CBF035B000
unkown
page read and write
clean
1CBF086A000
unkown
page read and write
clean
7FF5EB2E5000
unkown image
page readonly
clean
7FF5E0FD7000
unkown image
page readonly
clean
21E9F64E000
unkown
page read and write
clean
A7031FE000
stack
page read and write
clean
7DF5CF610000
unkown image
page readonly
clean
7FF5E4417000
unkown image
page readonly
clean
7FF527925000
unkown image
page readonly
clean
7FF5EB39D000
unkown image
page readonly
clean
969000
unkown
page read and write
clean
274BFE5B000
unkown
page read and write
clean
78A227F000
stack
page read and write
clean
1EF962E0000
heap private
page read and write
clean
2C10000
unkown image
page readonly
clean
570000
unkown
page read and write
clean
D60317B000
stack
page read and write
clean
2150000
unkown image
page readonly
clean
7FF5C013C000
unkown image
page readonly
clean
7FF5B2E41000
unkown image
page readonly
clean
7DF5ABDD2000
unkown image
page readonly
clean
7FF561F23000
unkown image
page readonly
clean
21E9F420000
unkown image
page readonly
clean
7FF5E4484000
unkown image
page readonly
clean
7FF5C189F000
unkown image
page readonly
clean
1CBEFA8A000
unkown
page read and write
clean
96B000
unkown
page read and write
clean
2030E313000
unkown
page read and write
clean
1CBEF880000
unkown image
page readonly
clean
4DB14000
stack
page read and write
clean
7FF52789D000
unkown image
page readonly
clean
7DF5F2110000
unkown image
page readonly
clean
4F0000
unkown image
page readonly
clean
7FF59E15A000
unkown image
page readonly
clean
274BFF02000
unkown
page read and write
clean
1CBF0381000
unkown
page read and write
clean
7DF56FC40000
unkown image
page readonly
clean
21E9F65A000
unkown
page read and write
clean
196000
unkown
page read and write
clean
2B17000
unkown image
page readonly
clean
7FF5EB47A000
unkown image
page readonly
clean
7FF59DEFF000
unkown image
page readonly
clean
7DF5CF602000
unkown image
page readonly
clean
7FC52000
unkown image
page readonly
clean
1CBEFAED000
unkown
page read and write
clean
2AC98113000
unkown
page read and write
clean
274BFC10000
unkown image
page readonly
clean
7FF5C179F000
unkown image
page readonly
clean
7FF5E1929000
unkown image
page readonly
clean
21E9F645000
unkown
page read and write
clean
7FF59E0DD000
unkown image
page readonly
clean
7FF5E187E000
unkown image
page readonly
clean
13BF1902000
unkown
page read and write
clean
1E1A000
unkown image
page readonly
clean
7DF5C0AB0000
unkown image
page readonly
clean
49AE000
stack
page read and write
clean
7FF5B254A000
unkown image
page readonly
clean
4DC01000
stack
page read and write
clean
687000
unkown
page read and write
clean
1CBF037F000
unkown
page read and write
clean
13BF1802000
unkown
page read and write
clean
7FF5727A1000
unkown image
page readonly
clean
1CBEF8D0000
heap default
page read and write
clean
2B12000
unkown image
page readonly
clean
2AC9803E000
unkown
page read and write
clean
1CBF0355000
unkown
page read and write
clean
2C2EB450000
unkown image
page readonly
clean
1EF96370000
unkown
page read and write
clean
7DF5CF602000
unkown image
page readonly
clean
7FC60000
unkown image
page readonly
clean
7FF561F07000
unkown image
page readonly
clean
7FF5E44A1000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF5276A4000
unkown image
page readonly
clean
7FC42000
unkown image
page readonly
clean
4DC9F000
stack
page read and write
clean
7FF5EB40A000
unkown image
page readonly
clean
7FF5C07AA000
unkown image
page readonly
clean
25AA4AA0000
unkown image
page readonly
clean
4E1E000
stack
page read and write
clean
2C2EAD80000
unkown image
page readonly
clean
21E9F668000
unkown
page read and write
clean
2D12000
unkown
page read and write
clean
7FF527755000
unkown image
page readonly
clean
7FF5726D7000
unkown image
page readonly
clean
4DCA4000
stack
page read and write
clean
4DC7D000
stack
page read and write
clean
7FF5E1866000
unkown image
page readonly
clean
33FFE7F000
stack
page read and write
clean
7FF527ACA000
unkown image
page readonly
clean
7FF561E51000
unkown image
page readonly
clean
A7035FF000
stack
page read and write
clean
7FF5B2BC6000
unkown image
page readonly
clean
7FF572553000
unkown image
page readonly
clean
550000
unkown image
page readonly
clean
1EA27A3C000
unkown
page read and write
clean
7DF5EF5B0000
unkown image
page readonly
clean
2030E400000
unkown image
page readonly
clean
7FF572717000
unkown image
page readonly
clean
7FF5BFFED000
unkown image
page readonly
clean
2C2EB0D0000
unkown image
page readonly
clean
1CBF038C000
unkown
page read and write
clean
21E9F644000
unkown
page read and write
clean
34B1EFF000
stack
page read and write
clean
2C2EAE5F000
unkown
page read and write
clean
7FF5E139E000
unkown image
page readonly
clean
1CBF038A000
unkown
page read and write
clean
1EF3000
unkown image
page readonly
clean
2AC984D0000
unkown image
page readonly
clean
78A1B2E000
stack
page read and write
clean
7FF527856000
unkown image
page readonly
clean
21E9FA00000
unkown image
page readonly
clean
7FF561E55000
unkown image
page readonly
clean
7FC50000
unkown image
page readonly
clean
1EA278F0000
unkown image
page readonly
clean
7FF5C1815000
unkown image
page readonly
clean
1EA278B0000
heap private
page read and write
clean
1CBF0800000
unkown
page read and write
clean
7FF5B2D02000
unkown image
page readonly
clean
EAFA3FF000
stack
page read and write
clean
7FF5EB48A000
unkown image
page readonly
clean
7FF527881000
unkown image
page readonly
clean
1CBF0362000
unkown
page read and write
clean
2C2EAF08000
unkown
page read and write
clean
7DF5C0AA2000
unkown image
page readonly
clean
1CBF03B0000
unkown
page read and write
clean
7DF56FC40000
unkown image
page readonly
clean
7DF56FC50000
unkown image
page readonly
clean
21E9F570000
unkown
page read and write
clean
1EF96413000
unkown
page read and write
clean
7FF5E1461000
unkown image
page readonly
clean
5E469FD000
stack
page read and write
clean
7FF5E0C9D000
unkown image
page readonly
clean
7DF5CE420000
unkown image
page readonly
clean
7FF5C11C9000
unkown image
page readonly
clean
4DB16000
stack
page read and write
clean
1CBEFA00000
unkown
page read and write
clean
7DF535740000
unkown image
page readonly
clean
1CBF039D000
unkown
page read and write
clean
13BF1790000
unkown image
page readonly
clean
351AEFB000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
6EAF0000
unkown image
page readonly
clean
7FF5E135E000
unkown image
page readonly
clean
7FF5E44A0000
unkown image
page readonly
clean
7FF561F1B000
unkown image
page readonly
clean
2C2EAE54000
unkown
page read and write
clean
7FF527981000
unkown image
page readonly
clean
7FF5279BE000
unkown image
page readonly
clean
2143A0E1000
unkown
page read and write
clean
7FF561FC1000
unkown image
page readonly
clean
FFE787E000
stack
page read and write
clean
496D000
stack
page read and write
clean
22E6F77000
stack
page read and write
clean
2D19000
unkown
page read and write
clean
4DC11000
stack
page read and write
clean
7FF5E1449000
unkown image
page readonly
clean
7FF5EB387000
unkown image
page readonly
clean
25AA4710000
heap private
page read and write
clean
550000
unkown image
page readonly
clean
2AC98028000
unkown
page read and write
clean
4DB33000
stack
page read and write
clean
3C9000
unkown
page read and write
clean
529E000
stack
page read and write
clean
7FF5279AE000
unkown image
page readonly
clean
2788000
heap default
page read and write
clean
1CBF038C000
unkown
page read and write
clean
7FF572697000
unkown image
page readonly
clean
4DB26000
stack
page read and write
clean
48A0000
heap private
page read and write
clean
1CBF037D000
unkown
page read and write
clean
4830000
unkown
page read and write
clean
4E230000
unkown
page read and write
clean
7FF5277A2000
unkown image
page readonly
clean
1CBF08D5000
unkown
page read and write
clean
7FF59DF13000
unkown image
page readonly
clean
7FF5C1887000
unkown image
page readonly
clean
1CBEFA55000
unkown
page read and write
clean
7FF59E0AB000
unkown image
page readonly
clean
2305000
unkown
page read and write
clean
7FF527816000
unkown image
page readonly
clean
1EA27A50000
unkown
page read and write
clean
969000
unkown
page read and write
clean
4DB1F000
stack
page read and write
clean
7FF5E13CE000
unkown image
page readonly
clean
7FF5B2D4D000
unkown image
page readonly
clean
1CBEF9D0000
unkown
page read and write
clean
1CBF037B000
unkown
page read and write
clean
351B2FF000
stack
page read and write
clean
274BFC30000
heap default
page read and write
clean
1CBF0318000
unkown
page read and write
clean
7FF5EB3A3000
unkown image
page readonly
clean
7FF5E13C2000
unkown image
page readonly
clean
7FF5EB491000
unkown image
page readonly
clean
21E9F632000
unkown
page read and write
clean
1CBF0390000
unkown
page read and write
clean
7FF561EE3000
unkown image
page readonly
clean
1CBEFA56000
unkown
page read and write
clean
4DB1E000
stack
page read and write
clean
78A1EFB000
stack
page read and write
clean
1CBEFA4B000
unkown
page read and write
clean
1CBF0390000
unkown
page read and write
clean
274BFE00000
unkown
page read and write
clean
34B1FFD000
stack
page read and write
clean
7FF5C0645000
unkown image
page readonly
clean
7FF59E080000
unkown image
page readonly
clean
1CBEF8A0000
unkown image
page readonly
clean
3380000
unkown image
page readonly
clean
1CBF0380000
unkown
page read and write
clean
2AC98650000
unkown image
page readonly
clean
7DF535750000
unkown image
page readonly
clean
4870000
unkown
page read and write
clean
2CEF000
unkown
page read and write
clean
48EE000
stack
page read and write
clean
7FC50000
unkown image
page readonly
clean
21E9F600000
unkown
page read and write
clean
7FF5C190A000
unkown image
page readonly
clean
7FC60000
unkown image
page readonly
clean
7DF5CE440000
unkown image
page readonly
clean
1CBF037F000
unkown
page read and write
clean
4E0DF000
stack
page read and write
clean
7DF580420000
unkown image
page readonly
clean
2D12000
unkown
page read and write
clean
7FF59E0BE000
unkown image
page readonly
clean
7FF5C07C1000
unkown image
page readonly
clean
969000
unkown
page read and write
clean
7FF59D97F000
unkown image
page readonly
clean
13BF1E60000
unkown image
page readonly
clean
21439F30000
unkown image
page readonly
clean
13BF1780000
unkown image
page readonly
clean
7FF527182000
unkown image
page readonly
clean
25AA4510000
unkown
page read and write
clean
2030E600000
unkown image
page readonly
clean
7FF527A4D000
unkown image
page readonly
clean
7FF5B2D53000
unkown image
page readonly
clean
25AA4450000
unkown
page read and write
clean
4DC01000
stack
page read and write
clean
2AC97F70000
unkown image
page readonly
clean
21E9F613000
unkown
page read and write
clean
7F5E0000
unkown image
page readonly
clean
25AA4920000
unkown image
page readonly
clean
1CBF08EA000
unkown
page read and write
clean
1EF968D0000
unkown image
page readonly
clean
21E9F550000
unkown image
page readonly
clean
7FF5B2E31000
unkown image
page readonly
clean
4AF0000
unkown
page read and write
clean
1CBF039A000
unkown
page read and write
clean
7FF5E18A3000
unkown image
page readonly
clean
7FF5E1873000
unkown image
page readonly
clean
1CBF03A5000
unkown
page read and write
clean
2030E202000
unkown
page read and write
clean
1EA27A49000
unkown
page read and write
clean
560000
unkown image
page readonly
clean
1E3B000
unkown image
page readonly
clean
7FF5C17FC000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
7FF5B2E24000
unkown image
page readonly
clean
7DF4CD4C0000
unkown image
page readonly
clean
7FF5C073D000
unkown image
page readonly
clean
21F0000
unkown image
page readonly
clean
3C3000
unkown
page read and write
clean
7DF5CF5F2000
unkown image
page readonly
clean
21E9F67B000
unkown
page read and write
clean
7FF5B2E2A000
unkown image
page readonly
clean
FFE7AFB000
stack
page read and write
clean
2AC98102000
unkown
page read and write
clean
7DF5C0AC0000
unkown image
page readonly
clean
5E46AFE000
stack
page read and write
clean
7FF5E1390000
unkown image
page readonly
clean
21E9F642000
unkown
page read and write
clean
1CBF0820000
unkown
page read and write
clean
7FF5C07B1000
unkown image
page readonly
clean
7FF5E1465000
unkown image
page readonly
clean
7DF4ECFA0000
unkown image
page readonly
clean
1CBF038D000
unkown
page read and write
clean
96A000
unkown
page read and write
clean
4DC07000
stack
page read and write
clean
7FF527814000
unkown image
page readonly
clean
4DB0F000
stack
page read and write
clean
1CBF08D5000
unkown
page read and write
clean
7FF59E04B000
unkown image
page readonly
clean
1CBF0863000
unkown
page read and write
clean
21E9F663000
unkown
page read and write
clean
1EA278C0000
unkown image
page readonly
clean
1CBEFF80000
unkown image
page readonly
clean
1CBEF8B0000
unkown image
page readonly
clean
7FF59D921000
unkown image
page readonly
clean
1EA27B08000
unkown
page read and write
clean
13BF1840000
unkown
page read and write
clean
13BF1829000
unkown
page read and write
clean
7FF5EB2FC000
unkown image
page readonly
clean
7DF580410000
unkown image
page readonly
clean
1E6C000
unkown image
page readonly
clean
1EA27A46000
unkown
page read and write
clean
21E9F66D000
unkown
page read and write
clean
4DC11000
stack
page read and write
clean
7FF5E1321000
unkown image
page readonly
clean
4DB28000
stack
page read and write
clean
7FF527AB4000
unkown image
page readonly
clean
1CBF0802000
unkown
page read and write
clean
7DF5EF0E2000
unkown image
page readonly
clean
2D19000
unkown
page read and write
clean
958000
unkown
page read and write
clean
4DC1A000
stack
page read and write
clean
7FF59DD2C000
unkown image
page readonly
clean
2BC5000
heap default
page read and write
clean
2CD6000
unkown
page read and write
clean
7FF5E1877000
unkown image
page readonly
clean
7FF561FCA000
unkown image
page readonly
clean
21E9F665000
unkown
page read and write
clean
7FF561EF3000
unkown image
page readonly
clean
1CBEFA4D000
unkown
page read and write
clean
4DB28000
stack
page read and write
clean
7FF5E4261000
unkown image
page readonly
clean
2030E318000
unkown
page read and write
clean
7DF5EF0D0000
unkown image
page readonly
clean
274BFE41000
unkown
page read and write
clean
2A80000
unkown image
page readonly
clean
1EF96500000
unkown
page read and write
clean
550000
unkown image
page readonly
clean
2AC98802000
unkown
page read and write
clean
7F5F0000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF5E43CE000
unkown image
page readonly
clean
7FF59D871000
unkown image
page readonly
clean
21E9F66A000
unkown
page read and write
clean
7FF5EB27B000
unkown image
page readonly
clean
1CBEFB13000
unkown
page read and write
clean
7DF5CE422000
unkown image
page readonly
clean
7FF5276A7000
unkown image
page readonly
clean
2030E030000
unkown image
page readonly
clean
1EF96C02000
unkown
page read and write
clean
7DF5F2100000
unkown image
page readonly
clean
2CFE000
unkown
page read and write
clean
7FF5E43C3000
unkown image
page readonly
clean
2DF1000
unkown
page read and write
clean
7FF5E43F3000
unkown image
page readonly
clean
2143A06E000
unkown
page read and write
clean
13BF17C0000
unkown image
page readonly
clean
E16000
unkown image
page readonly
clean
351AFFC000
stack
page read and write
clean
274BFBE0000
unkown image
page readonly
clean
D60327F000
stack
page read and write
clean
21439E00000
unkown image
page readonly
clean
7DF535750000
unkown image
page readonly
clean
A7032FE000
stack
page read and write
clean
1EA27F80000
unkown image
page readonly
clean
FFE7B7F000
stack
page read and write
clean
6FAF0000
unkown image
page readonly
clean
351AA7C000
stack
page read and write
clean
25AA4320000
unkown image
page readonly
clean
274BFBD0000
heap private
page read and write
clean
21E9F657000
unkown
page read and write
clean
7FF5E428B000
unkown image
page readonly
clean
2309000
unkown
page read and write
clean
2C2EAE3C000
unkown
page read and write
clean
7FF5EB3B0000
unkown image
page readonly
clean
7FF5EB40D000
unkown image
page readonly
clean
7FF5EB115000
unkown image
page readonly
clean
2C2EAD70000
unkown image
page readonly
clean
2030E060000
unkown image
page readonly
clean
4860000
heap private
page read and write
clean
7FF5726B3000
unkown image
page readonly
clean
7DF4A9C90000
unkown image
page readonly
clean
34B207F000
stack
page read and write
clean
C3F000
stack
page read and write
clean
7FF5275B7000
unkown image
page readonly
clean
34B1C7E000
stack
page read and write
clean
7DF5C0AC0000
unkown image
page readonly
clean
7FF57271D000
unkown image
page readonly
clean
1CBEFAD9000
unkown
page read and write
clean
7FF5279AA000
unkown image
page readonly
clean
2C2EAE81000
unkown
page read and write
clean
4DC6A000
stack
page read and write
clean
7FF527835000
unkown image
page readonly
clean
7FF5E18AE000
unkown image
page readonly
clean
1CBEFAC3000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
7FF5C1981000
unkown image
page readonly
clean
1CBF08DC000
unkown
page read and write
clean
21439E20000
unkown image
page readonly
clean
1CBF037D000
unkown
page read and write
clean
7FF5279D9000
unkown image
page readonly
clean
4DB1E000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1EA27A00000
unkown
page read and write
clean
7DF5F90F2000
unkown image
page readonly
clean
7FF5E123D000
unkown image
page readonly
clean
1CBF0390000
unkown
page read and write
clean
7FC40000
unkown image
page readonly
clean
7F5F0000
unkown image
page readonly
clean
7DF5EF5C2000
unkown image
page readonly
clean
1CBEF9B0000
unkown image
page readonly
clean
7FF5C1907000
unkown image
page readonly
clean
1CBF0361000
unkown
page read and write
clean
A702EFC000
stack
page read and write
clean
560000
unkown image
page readonly
clean
7FF527951000
unkown image
page readonly
clean
5EE000
stack
page read and write
clean
There are 1471 hidden memdumps, click here to show them.