IOC Report

loading gif

Files

File Path
Type
Category
Malicious
malware.ps1
Little-endian UTF-16 Unicode text, with very long lines, with no line terminators
initial sample
malicious
C:\Users\user\AppData\Local\Temp\5z3xaygo\5z3xaygo.0.cs
UTF-8 Unicode (with BOM) text
dropped
malicious
C:\Users\user\AppData\Local\Temp\ad403csv\ad403csv.cmdline
UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
data
dropped
clean
C:\Users\user\AppData\Local\Temp\5z3xaygo\5z3xaygo.cmdline
UTF-8 Unicode (with BOM) text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Temp\5z3xaygo\5z3xaygo.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
clean
C:\Users\user\AppData\Local\Temp\5z3xaygo\5z3xaygo.out
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF, CR line terminators
modified
clean
C:\Users\user\AppData\Local\Temp\5z3xaygo\CSC84083F42CE6043C2AA7FFF454285CD95.TMP
MSVC .res
dropped
clean
C:\Users\user\AppData\Local\Temp\RESD522.tmp
Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x496, 9 symbols
dropped
clean
C:\Users\user\AppData\Local\Temp\RESE4F1.tmp
Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x496, 9 symbols
dropped
clean
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ebtshoty.hoc.psm1
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_kc3e5p1v.f0a.ps1
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\ad403csv\CSCD6795C79BDE3450B9F7CAA8771DF83B.TMP
MSVC .res
dropped
clean
C:\Users\user\AppData\Local\Temp\ad403csv\ad403csv.0.cs
UTF-8 Unicode (with BOM) text
dropped
clean
C:\Users\user\AppData\Local\Temp\ad403csv\ad403csv.dll
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
clean
C:\Users\user\AppData\Local\Temp\ad403csv\ad403csv.out
UTF-8 Unicode (with BOM) text, with very long lines, with CRLF, CR line terminators
modified
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X0LX71ESHNRJY9TJQYH1.temp
data
dropped
clean
C:\Users\user\Documents\20211122\PowerShell_transcript.618321.JkieqDuu.20211122204245.txt
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean
There are 10 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\malware.ps1
malicious
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\ad403csv\ad403csv.cmdline
malicious
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /noconfig /fullpaths @"C:\Users\user\AppData\Local\Temp\5z3xaygo\5z3xaygo.cmdline
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESD522.tmp" "c:\Users\user\AppData\Local\Temp\ad403csv\CSCD6795C79BDE3450B9F7CAA8771DF83B.TMP"
clean
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\user\AppData\Local\Temp\RESE4F1.tmp" "c:\Users\user\AppData\Local\Temp\5z3xaygo\CSC84083F42CE6043C2AA7FFF454285CD95.TMP"
clean

URLs

Name
IP
Malicious
http://nuget.org/NuGet.exe
unknown
clean
http://www.apache.org/licenses/LICENSE-2.0
unknown
clean
http://constitution.org/usdeclar.txt
unknown
clean
http://pesterbdd.com/images/Pester.png
unknown
clean
http://www.apache.org/licenses/LICENSE-2.0.html
unknown
clean
https://contoso.com/
unknown
clean
https://nuget.org/nuget.exe
unknown
clean
http://constitution.org/usdeclar.txtC:
unknown
clean
https://contoso.com/License
unknown
clean
https://contoso.com/Icon
unknown
clean
https://oneget.orgX
unknown
clean
http://https://file://USER.ID%lu.exe/upd
unknown
clean
https://oneget.orgformat.ps1xmlagement.dll2040.missionsand
unknown
clean
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
clean
https://github.com/Pester/Pester
unknown
clean
https://oneget.org
unknown
clean
There are 6 hidden URLs, click here to show them.

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\54E80703-A337-A6B8-CDC8-873A517CAB0E
FileOptions
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
14F2E95C000
heap private
page read and write
malicious
7FF50BF42000
unkown image
page readonly
clean
14F158B1000
unkown
page read and write
clean
2734621E000
unkown
page read and write
clean
7DF54CC60000
unkown image
page readonly
clean
220D1400000
unkown image
page readonly
clean
14F2E240000
unkown
page read and write
clean
684A4F000
stack
page read and write
clean
2262AFCE000
unkown
page read and write
clean
7FF566370000
unkown image
page readonly
clean
14F2E270000
unkown
page read and write
clean
7FF542D08000
unkown image
page readonly
clean
7FF51A69F000
unkown image
page readonly
clean
7DF54CFA0000
unkown image
page readonly
clean
1FA61377000
unkown
page read and write
clean
7DF5B4AC2000
unkown image
page readonly
clean
990D57E000
stack
page read and write
clean
14F2E280000
unkown
page read and write
clean
14F2E3B0000
unkown
page read and write
clean
990D67D000
stack
page read and write
clean
27347DA0000
heap private
page read and write
clean
257141C7000
unkown
page read and write
clean
7FF52C784000
unkown image
page readonly
clean
7DF54CF92000
unkown image
page readonly
clean
7FF51A754000
unkown image
page readonly
clean
220D1030000
unkown image
page readonly
clean
14F1AB5D000
unkown
page read and write
clean
14F2E250000
unkown
page read and write
clean
1E783282000
unkown
page read and write
clean
7FF525AE7000
unkown image
page readonly
clean
7FF57D607000
unkown image
page readonly
clean
98C693E000
stack
page read and write
clean
7FF583055000
unkown image
page readonly
clean
7FF542D88000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7FF57E8CA000
unkown image
page readonly
clean
1E783302000
unkown
page read and write
clean
7FF50BF04000
unkown image
page readonly
clean
1FA60E00000
unkown image
page readonly
clean
257141C9000
unkown
page read and write
clean
14F2E3A1000
unkown
page read and write
clean
211BE200000
unkown
page read and write
clean
7FF5E22BF000
unkown image
page readonly
clean
225146F1000
unkown
page read and write
clean
E1A92FE000
stack
page read and write
clean
2262AF40000
unkown image
page readonly
clean
2250F718000
unkown
page read and write
clean
14F15D60000
unkown
page read and write
clean
7FF5E2748000
unkown image
page readonly
clean
1E78324E000
unkown
page read and write
clean
1E7831D0000
unkown
page read and write
clean
14F2E2A0000
unkown
page read and write
clean
14F1AB90000
unkown
page read and write
clean
7FF51A757000
unkown image
page readonly
clean
14F13C10000
unkown image
page read and write
clean
2601ACE5000
unkown
page read and write
clean
1FA60C59000
unkown
page read and write
clean
7FF50BE28000
unkown image
page readonly
clean
1FA61398000
unkown
page read and write
clean
2262AFA0000
heap default
page read and write
clean
7FF542D94000
unkown image
page readonly
clean
2601C6BF000
unkown
page read and write
clean
9131C7E000
stack
page read and write
clean
7FF542C24000
unkown image
page readonly
clean
273463A7000
unkown
page read and write
clean
25714139000
heap private
page read and write
clean
14F2E270000
unkown
page read and write
clean
2262AFC8000
unkown
page read and write
clean
7FF52C794000
unkown image
page readonly
clean
7DF5873B0000
unkown image
page readonly
clean
2ED81240000
unkown image
page read and write
clean
1FA60C4E000
unkown
page read and write
clean
7DF5B4AC0000
unkown image
page readonly
clean
225142A0000
unkown
page read and write
clean
7FF57E996000
unkown image
page readonly
clean
7FF5E28F6000
unkown image
page readonly
clean
7FF52C781000
unkown image
page readonly
clean
7DF5EC6B2000
unkown image
page readonly
clean
14F2E250000
unkown
page read and write
clean
7FF5E28C7000
unkown image
page readonly
clean
7FF5C77AB000
unkown image
page readonly
clean
7DF54CC62000
unkown image
page readonly
clean
25714D50000
unkown
page read and write
clean
7FF55C7F0000
unkown image
page readonly
clean
27347C90000
unkown
page read and write
clean
2250F600000
unkown
page read and write
clean
7FF542DA9000
unkown image
page readonly
clean
14F2E280000
unkown
page read and write
clean
7FF50BF2D000
unkown image
page readonly
clean
7FF57D4E4000
unkown image
page readonly
clean
14F13C60000
unkown image
page readonly
clean
7FF542E19000
unkown image
page readonly
clean
7FF59A2D3000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
2601C720000
unkown
page read and write
clean
7FF50BAC7000
unkown image
page readonly
clean
7FF59A2BA000
unkown image
page readonly
clean
14F2E3BF000
unkown
page read and write
clean
1FA60C57000
unkown
page read and write
clean
1FA61375000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7DF5A4082000
unkown image
page readonly
clean
E1A917B000
stack
page read and write
clean
257148C0000
unkown image
page readonly
clean
7DF5B4AB2000
unkown image
page readonly
clean
1FA60C4C000
unkown
page read and write
clean
14F2E24A000
unkown
page read and write
clean
273460B0000
unkown image
page readonly
clean
7FF57D607000
unkown image
page readonly
clean
225146A3000
unkown
page read and write
clean
225146DB000
unkown
page read and write
clean
14F15D60000
unkown
page read and write
clean
14F2E2B0000
unkown
page read and write
clean
1E782FB0000
unkown image
page readonly
clean
1E78323C000
unkown
page read and write
clean
7FF59A237000
unkown image
page readonly
clean
1FA6136E000
unkown
page read and write
clean
7FF50C012000
unkown image
page readonly
clean
225145A0000
unkown
page read and write
clean
7FF542BC6000
unkown image
page readonly
clean
7FF542C6D000
unkown image
page readonly
clean
27347CA0000
unkown
page read and write
clean
225142B0000
unkown
page read and write
clean
7FF57CE61000
unkown image
page readonly
clean
7FF542EB3000
unkown image
page readonly
clean
7FF57D5DA000
unkown image
page readonly
clean
7FF542E9A000
unkown image
page readonly
clean
2262AFD3000
unkown
page read and write
clean
25714FB0000
unkown
page readonly
clean
2250EE3D000
unkown
page read and write
clean
2262AED0000
unkown image
page readonly
clean
FCF3DFF000
stack
page read and write
clean
2262AFD0000
unkown
page read and write
clean
E285EFE000
stack
page read and write
clean
1FA60CB9000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
2262AF50000
unkown image
page readonly
clean
14F2E20D000
unkown
page read and write
clean
257140E0000
unkown
page read and write
clean
7FF566375000
unkown image
page readonly
clean
7FF51A6F9000
unkown image
page readonly
clean
E1A9278000
stack
page read and write
clean
7DF524542000
unkown image
page readonly
clean
14F2E240000
unkown
page read and write
clean
211BE780000
unkown image
page readonly
clean
25714050000
unkown image
page read and write
clean
27346283000
unkown
page read and write
clean
7FF50BE25000
unkown image
page readonly
clean
273466A0000
unkown image
page readonly
clean
1FA61381000
unkown
page read and write
clean
2601C740000
unkown
page read and write
clean
25714160000
heap default
page read and write
clean
14F13C20000
unkown image
page readonly
clean
14F2E250000
unkown
page read and write
clean
211BE28A000
unkown
page read and write
clean
E2F8C7F000
stack
page read and write
clean
2262B225000
heap private
page read and write
clean
7DF52F8A0000
unkown image
page readonly
clean
7FF51A6AF000
unkown image
page readonly
clean
14F15D70000
unkown
page read and write
clean
14F2E3B7000
unkown
page read and write
clean
7FF51A764000
unkown image
page readonly
clean
7DF5A4092000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7FF55C828000
unkown image
page readonly
clean
2601AD22000
unkown
page read and write
clean
7DF54CC80000
unkown image
page readonly
clean
7FF599F55000
unkown image
page readonly
clean
2250ED80000
heap private
page read and write
clean
7FF542B9F000
unkown image
page readonly
clean
2601DBAF000
unkown
page read and write
clean
25714330000
unkown
page read and write
clean
2262AFD3000
unkown
page read and write
clean
7FF59A2A4000
unkown image
page readonly
clean
7DF5873B2000
unkown image
page readonly
clean
683BF9000
stack
page read and write
clean
7FF583050000
unkown image
page readonly
clean
225145A0000
unkown
page read and write
clean
14F13CE0000
heap default
page read and write
clean
14F2E200000
unkown
page read and write
clean
2601AC00000
unkown image
page readonly
clean
2250F718000
unkown
page read and write
clean
7FF50B7D4000
unkown image
page readonly
clean
7FF50BE58000
unkown image
page readonly
clean
220D122A000
unkown
page read and write
clean
14F169A1000
unkown
page read and write
clean
2601ACE6000
unkown
page read and write
clean
14F15D60000
unkown
page read and write
clean
22514688000
unkown
page read and write
clean
7FF51A75D000
unkown image
page readonly
clean
211BE050000
unkown image
page readonly
clean
7FF51A5E8000
unkown image
page readonly
clean
7FF50BCE5000
unkown image
page readonly
clean
14F193E1000
unkown
page read and write
clean
27346289000
unkown
page read and write
clean
7FF5AAD17000
unkown image
page readonly
clean
7FF50BE06000
unkown image
page readonly
clean
7FF5AACD7000
unkown image
page readonly
clean
14F2E230000
unkown
page read and write
clean
7DF52F892000
unkown image
page readonly
clean
91321FB000
stack
page read and write
clean
E2F84CC000
unkown
page read and write
clean
E2F8A7F000
stack
page read and write
clean
2601ACEA000
unkown
page read and write
clean
273460D0000
unkown image
page readonly
clean
7DF515DC0000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
2262AFB8000
heap default
page read and write
clean
14F2E3B2000
unkown
page read and write
clean
1FA6186A000
unkown
page read and write
clean
2250EDE0000
heap default
page read and write
clean
27346217000
unkown
page read and write
clean
220D1313000
unkown
page read and write
clean
14F2E3B3000
unkown
page read and write
clean
273461E0000
heap default
page read and write
clean
1FA61202000
unkown
page read and write
clean
14F2E260000
unkown
page read and write
clean
7DF5A4082000
unkown image
page readonly
clean
E2F88FB000
stack
page read and write
clean
2601ACB8000
heap default
page read and write
clean
14F2E210000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7FF57D607000
unkown image
page readonly
clean
2262AEF0000
unkown
page read and write
clean
7FF525A94000
unkown image
page readonly
clean
2262AFAB000
heap default
page read and write
clean
14F2E3B1000
unkown
page read and write
clean
1FA61396000
unkown
page read and write
clean
14F19E00000
unkown
page read and write
clean
14F13D53000
heap default
page read and write
clean
7FF542BFE000
unkown image
page readonly
clean
D730FFE000
stack
page read and write
clean
1FA609E0000
heap private
page read and write
clean
7FF57D515000
unkown image
page readonly
clean
14F2E3A4000
unkown
page read and write
clean
2250EF13000
unkown
page read and write
clean
7FF52C729000
unkown image
page readonly
clean
7FF542DBF000
unkown image
page readonly
clean
2601DBC0000
unkown
page read and write
clean
1FA60CE6000
unkown
page read and write
clean
7FF51A77A000
unkown image
page readonly
clean
7FF57D5D3000
unkown image
page readonly
clean
14F2E3B1000
unkown
page read and write
clean
27346290000
unkown
page read and write
clean
7FF542EB6000
unkown image
page readonly
clean
2250F550000
unkown image
page read and write
clean
1FA613BA000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
1FA60A20000
unkown image
page readonly
clean
220D1600000
unkown image
page readonly
clean
1FA60C29000
unkown
page read and write
clean
220D1202000
unkown
page read and write
clean
1FA6137F000
unkown
page read and write
clean
1FA6135D000
unkown
page read and write
clean
7FF542DB4000
unkown image
page readonly
clean
14F2E240000
unkown
page read and write
clean
7FF542C8F000
unkown image
page readonly
clean
25714CE0000
unkown
page read and write
clean
7DF588760000
unkown image
page readonly
clean
7FF51A6E6000
unkown image
page readonly
clean
7FF57E8A1000
unkown image
page readonly
clean
68397E000
stack
page read and write
clean
257140A0000
unkown image
page readonly
clean
7FF51A793000
unkown image
page readonly
clean
7FF5429F2000
unkown image
page readonly
clean
1FA61392000
unkown
page read and write
clean
7FF542C67000
unkown image
page readonly
clean
D730EFC000
unkown
page read and write
clean
E285E7C000
unkown
page read and write
clean
14F15C1D000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
98C70FF000
stack
page read and write
clean
273463BF000
unkown
page read and write
clean
7DF5EC6B0000
unkown image
page readonly
clean
7FF57E611000
unkown image
page readonly
clean
1FA613A5000
unkown
page read and write
clean
14F2E250000
unkown
page read and write
clean
7FF57E8ED000
unkown image
page readonly
clean
14F2E2A0000
unkown
page read and write
clean
14F2E230000
unkown
page read and write
clean
2ED81694000
heap private
page read and write
clean
22514440000
unkown
page read and write
clean
2ED81280000
unkown image
page readonly
clean
211BE020000
heap private
page read and write
clean
7DF5873A2000
unkown image
page readonly
clean
14F13F25000
heap private
page read and write
clean
273463BB000
unkown
page read and write
clean
990D47F000
stack
page read and write
clean
1FA61386000
unkown
page read and write
clean
14F2E2A0000
unkown
page read and write
clean
7FF55C9A7000
unkown image
page readonly
clean
14F13CE8000
heap default
page read and write
clean
1FA60C4F000
unkown
page read and write
clean
7FF5E214C000
unkown image
page readonly
clean
14F15D60000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
2601AD5D000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
7FF59A239000
unkown image
page readonly
clean
1FA60A40000
heap default
page read and write
clean
14F2E3B1000
unkown
page read and write
clean
1FA617A0000
unkown
page read and write
clean
7FF583055000
unkown image
page readonly
clean
14F13CA0000
unkown
page read and write
clean
7FF55C7F5000
unkown image
page readonly
clean
7FF583050000
unkown image
page readonly
clean
7FF5E2826000
unkown image
page readonly
clean
990D14A000
unkown
page read and write
clean
27346217000
unkown
page read and write
clean
1FA60B20000
unkown image
page readonly
clean
E1A907E000
stack
page read and write
clean
1E782FD0000
unkown image
page readonly
clean
2250FDF0000
unkown
page read and write
clean
14F2E270000
unkown
page read and write
clean
1FA60C9E000
unkown
page read and write
clean
22514702000
unkown
page read and write
clean
7FF50BEF9000
unkown image
page readonly
clean
7FF5E2857000
unkown image
page readonly
clean
14F2E260000
unkown
page read and write
clean
14F2E270000
unkown
page read and write
clean
1FA60D13000
unkown
page read and write
clean
7FF542BCA000
unkown image
page readonly
clean
1E783000000
heap default
page read and write
clean
14F15D60000
unkown
page read and write
clean
7DF524540000
unkown image
page readonly
clean
91323FF000
stack
page read and write
clean
7FF50BED8000
unkown image
page readonly
clean
27346360000
unkown
page read and write
clean
7FF5E2814000
unkown image
page readonly
clean
7FF51A625000
unkown image
page readonly
clean
14F13D9A000
heap default
page read and write
clean
14F2E210000
unkown
page read and write
clean
7FF599F58000
unkown image
page readonly
clean
7DF52F880000
unkown image
page readonly
clean
14F2DF5F000
unkown
page read and write
clean
2734628C000
unkown
page read and write
clean
1FA6139C000
unkown
page read and write
clean
7FF542C97000
unkown image
page readonly
clean
7FF55C9E7000
unkown image
page readonly
clean
7FF50BEC7000
unkown image
page readonly
clean
7FF55C9A4000
unkown image
page readonly
clean
2601ACE6000
unkown
page read and write
clean
2250EDC0000
unkown image
page readonly
clean
7FF51A751000
unkown image
page readonly
clean
7FF55C7A7000
unkown image
page readonly
clean
7FF542E0D000
unkown image
page readonly
clean
273460E0000
unkown image
page readonly
clean
7FF55BE7E000
unkown image
page readonly
clean
2ED81360000
heap default
page read and write
clean
273461FF000
unkown
page read and write
clean
7F6C3FE000
stack
page read and write
clean
7FF525AD6000
unkown image
page readonly
clean
22514330000
unkown
page read and write
clean
7FF542B73000
unkown image
page readonly
clean
27346400000
unkown
page read and write
clean
1FA613A3000
unkown
page read and write
clean
7FF51A7A7000
unkown image
page readonly
clean
14F2E210000
unkown
page read and write
clean
7FF5E28C4000
unkown image
page readonly
clean
14F15D91000
unkown
page read and write
clean
2ED81260000
unkown image
page readonly
clean
7DF5873A2000
unkown image
page readonly
clean
7FF52C78D000
unkown image
page readonly
clean
7FF50BFC4000
unkown image
page readonly
clean
27346230000
unkown
page read and write
clean
7FF57E96B000
unkown image
page readonly
clean
273462E0000
unkown
page read and write
clean
14F2DF88000
unkown
page read and write
clean
E1A8C7E000
stack
page read and write
clean
211BE255000
unkown
page read and write
clean
2ED81690000
heap private
page read and write
clean
22514570000
unkown
page read and write
clean
1E782F90000
unkown image
page read and write
clean
14F158B0000
unkown
page read and write
clean
7FF542E87000
unkown image
page readonly
clean
7FF5C77AB000
unkown image
page readonly
clean
22514700000
unkown
page read and write
clean
225146F7000
unkown
page read and write
clean
14F15795000
unkown
page read and write
clean
1FA60A10000
unkown image
page readonly
clean
22514484000
unkown
page read and write
clean
27347C60000
unkown
page read and write
clean
7DF536590000
unkown image
page readonly
clean
7FF542BB9000
unkown image
page readonly
clean
14F2E220000
unkown
page read and write
clean
683B7F000
stack
page read and write
clean
1FA60C54000
unkown
page read and write
clean
7FF52BF94000
unkown image
page readonly
clean
2250F702000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
98C69BE000
stack
page read and write
clean
7FF51A7A2000
unkown image
page readonly
clean
2250EE8A000
unkown
page read and write
clean
25714130000
heap private
page read and write
clean
2601C6BB000
unkown
page read and write
clean
7FF5AAC11000
unkown image
page readonly
clean
2262AFB3000
unkown
page read and write
clean
27347C92000
unkown
page read and write
clean
7FF50BD5B000
unkown image
page readonly
clean
14F13DD0000
unkown
page read and write
clean
273460B0000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
2734622B000
unkown
page read and write
clean
1FA61396000
unkown
page read and write
clean
27346221000
unkown
page read and write
clean
7DF464650000
unkown image
page readonly
clean
7FF50BDC3000
unkown image
page readonly
clean
14F2E290000
unkown
page read and write
clean
14F1A009000
unkown
page read and write
clean
7FF57D5C4000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7FF51A257000
unkown image
page readonly
clean
7FF57E8C6000
unkown image
page readonly
clean
14F15D70000
unkown
page read and write
clean
14F2E250000
unkown
page read and write
clean
14F2E260000
unkown
page read and write
clean
7FF50BFEA000
unkown image
page readonly
clean
7FF57E8D2000
unkown image
page readonly
clean
7FF50BE95000
unkown image
page readonly
clean
14F2E244000
unkown
page read and write
clean
7FF51A596000
unkown image
page readonly
clean
14F2E270000
unkown
page read and write
clean
27346217000
unkown
page read and write
clean
7DF515DB0000
unkown image
page readonly
clean
AFE61FE000
stack
page read and write
clean
7FF50BCEF000
unkown image
page readonly
clean
220D1302000
unkown
page read and write
clean
2601ACEC000
unkown
page read and write
clean
14F2E85D000
heap private
page read and write
clean
2262AFDD000
unkown
page read and write
clean
14F158B0000
unkown
page read and write
clean
27346273000
unkown
page read and write
clean
14F13DC2000
unkown
page read and write
clean
7DF536582000
unkown image
page readonly
clean
27349140000
unkown
page read and write
clean
14F2E290000
unkown
page read and write
clean
7FF50BD4E000
unkown image
page readonly
clean
7FF57E8F9000
unkown image
page readonly
clean
2734621B000
unkown
page read and write
clean
14F15FA1000
unkown
page read and write
clean
7FF50BDD7000
unkown image
page readonly
clean
7FF5426AB000
unkown image
page readonly
clean
7FF59A23E000
unkown image
page readonly
clean
2262AEB0000
unkown image
page readonly
clean
14F2634E000
unkown
page read and write
clean
2601AD4F000
unkown
page read and write
clean
E2F85CE000
stack
page read and write
clean
14F193A5000
unkown
page read and write
clean
22514470000
unkown
page read and write
clean
22510290000
unkown
page read and write
clean
1FA61180000
unkown image
page readonly
clean
2734626D000
unkown
page read and write
clean
1FA60CF7000
unkown
page read and write
clean
7DF566792000
unkown image
page readonly
clean
7FF59A1F5000
unkown image
page readonly
clean
14F25D91000
unkown
page read and write
clean
2262B230000
unkown image
page readonly
clean
7FF55C9D6000
unkown image
page readonly
clean
7FF51A5B0000
unkown image
page readonly
clean
1FA6136E000
unkown
page read and write
clean
7FF55C92D000
unkown image
page readonly
clean
7FF583055000
unkown image
page readonly
clean
1FA61398000
unkown
page read and write
clean
2250F758000
unkown
page read and write
clean
2601AC00000
unkown image
page readonly
clean
1FA60D02000
unkown
page read and write
clean
2734628C000
unkown
page read and write
clean
AFE63FE000
stack
page read and write
clean
14F158B0000
unkown
page read and write
clean
14F2E3BF000
unkown
page read and write
clean
91329FE000
stack
page read and write
clean
2250FF20000
unkown image
page readonly
clean
1FA613D1000
unkown
page read and write
clean
14F2E270000
unkown
page read and write
clean
7FF57E796000
unkown image
page readonly
clean
7DF5A4080000
unkown image
page readonly
clean
2262AFCE000
unkown
page read and write
clean
1FA60D16000
unkown
page read and write
clean
14F15D60000
unkown image
page read and write
clean
2601AD01000
unkown
page read and write
clean
1FA6135A000
unkown
page read and write
clean
7F6C6FB000
stack
page read and write
clean
7FF50BDE7000
unkown image
page readonly
clean
1E783255000
unkown
page read and write
clean
7FF5AACDB000
unkown image
page readonly
clean
1FA611C0000
unkown image
page readonly
clean
7FF525AAB000
unkown image
page readonly
clean
2262B5B0000
unkown image
page readonly
clean
E1A93F9000
stack
page read and write
clean
14F2E260000
unkown
page read and write
clean
7FF542BC4000
unkown image
page readonly
clean
2734623C000
unkown
page read and write
clean
25714100000
unkown image
page readonly
clean
7DF52F890000
unkown image
page readonly
clean
7DF566792000
unkown image
page readonly
clean
7FF525A26000
unkown image
page readonly
clean
7DF5B4AB0000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
1FA609F0000
unkown image
page readonly
clean
7FF525A37000
unkown image
page readonly
clean
7DF5A4080000
unkown image
page readonly
clean
22514600000
unkown
page read and write
clean
7FF599E91000
unkown image
page readonly
clean
22514448000
unkown
page read and write
clean
25714168000
heap default
page read and write
clean
E2F854E000
stack
page read and write
clean
27346217000
unkown
page read and write
clean
22514460000
unkown
page read and write
clean
7FF5AAD06000
unkown image
page readonly
clean
7FF5E268C000
unkown image
page readonly
clean
2250EE78000
unkown
page read and write
clean
273461E9000
heap default
page read and write
clean
14F193D0000
unkown
page read and write
clean
273464A0000
unkown image
page readonly
clean
7FF52C7C6000
unkown image
page readonly
clean
1E783278000
unkown
page read and write
clean
1FA61300000
unkown
page read and write
clean
7FF50BD20000
unkown image
page readonly
clean
1FA611A0000
unkown
page read and write
clean
211BE24F000
unkown
page read and write
clean
1FA613AB000
unkown
page read and write
clean
7DF5A4090000
unkown image
page readonly
clean
7FF57E7B8000
unkown image
page readonly
clean
1FA61800000
unkown
page read and write
clean
7FF57D2BA000
unkown image
page readonly
clean
2734628C000
unkown
page read and write
clean
7FF52C79B000
unkown image
page readonly
clean
14F15750000
heap private
page read and write
clean
2734621B000
unkown
page read and write
clean
27346290000
unkown
page read and write
clean
2262AFCE000
unkown
page read and write
clean
7FF50BF23000
unkown image
page readonly
clean
7DF536572000
unkown image
page readonly
clean
7FF542DA0000
unkown image
page readonly
clean
273460A0000
unkown image
page readonly
clean
14F13DC7000
unkown
page read and write
clean
14F2E20B000
unkown
page read and write
clean
22514590000
unkown
page read and write
clean
9131D77000
stack
page read and write
clean
211BE280000
unkown
page read and write
clean
7DF5873A0000
unkown image
page readonly
clean
1FA613CF000
unkown
page read and write
clean
7DF588752000
unkown image
page readonly
clean
14F2E250000
unkown
page read and write
clean
1FA60C8B000
unkown
page read and write
clean
7FF5259C4000
unkown image
page readonly
clean
22514647000
unkown
page read and write
clean
1FA60CE9000
unkown
page read and write
clean
1FA6137D000
unkown
page read and write
clean
27346420000
unkown
page read and write
clean
2601ABF4000
heap private
page read and write
clean
7FF57E97A000
unkown image
page readonly
clean
7FF57E993000
unkown image
page readonly
clean
7FF50C003000
unkown image
page readonly
clean
14F1A053000
unkown
page read and write
clean
1FA609D0000
unkown image
page read and write
clean
7DF536590000
unkown image
page readonly
clean
2250EEB9000
unkown
page read and write
clean
7FF50BE20000
unkown image
page readonly
clean
2250EEFB000
unkown
page read and write
clean
25714060000
unkown
page read and write
clean
220D1140000
unkown image
page readonly
clean
7FF5AAC56000
unkown image
page readonly
clean
1FA60C00000
unkown
page read and write
clean
7FF51A6CA000
unkown image
page readonly
clean
14F2E220000
unkown
page read and write
clean
7FF52C7AA000
unkown image
page readonly
clean
7DF5873B0000
unkown image
page readonly
clean
2601ACD9000
unkown
page read and write
clean
2251465F000
unkown
page read and write
clean
2250ED70000
unkown image
page read and write
clean
2262B430000
unkown image
page readonly
clean
14F2E260000
unkown
page read and write
clean
7FF525A2D000
unkown image
page readonly
clean
7DF52F890000
unkown image
page readonly
clean
2601C7A4000
heap private
page read and write
clean
211BE313000
unkown
page read and write
clean
7DF54CC70000
unkown image
page readonly
clean
22514510000
unkown
page read and write
clean
2601ACDA000
unkown
page read and write
clean
7FF5AABF4000
unkown image
page readonly
clean
D7310FF000
stack
page read and write
clean
7FF50BDBD000
unkown image
page readonly
clean
7DF588750000
unkown image
page readonly
clean
14F2E280000
unkown
page read and write
clean
14F25DF2000
unkown
page read and write
clean
7FF50B8A5000
unkown image
page readonly
clean
7FF57E951000
unkown image
page readonly
clean
7DF54CF90000
unkown image
page readonly
clean
7DF5EC6B0000
unkown image
page readonly
clean
225146FC000
unkown
page read and write
clean
7DF52F882000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
2601AC50000
unkown
page read and write
clean
2601DB80000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
25714FA0000
unkown
page read and write
clean
7FF50C017000
unkown image
page readonly
clean
14F2E210000
unkown
page read and write
clean
2601ABF0000
heap private
page read and write
clean
14F2DF61000
unkown
page read and write
clean
7FF55C9E7000
unkown image
page readonly
clean
211BE080000
heap default
page read and write
clean
14F2E250000
unkown
page read and write
clean
7FF542B82000
unkown image
page readonly
clean
91325FF000
stack
page read and write
clean
7FF542B7A000
unkown image
page readonly
clean
7DF5A4090000
unkown image
page readonly
clean
7F6C37D000
stack
page read and write
clean
2250EDB0000
unkown image
page readonly
clean
7FF59A2A7000
unkown image
page readonly
clean
98C6CFB000
stack
page read and write
clean
91322FF000
stack
page read and write
clean
7DF588742000
unkown image
page readonly
clean
7FF59A2AB000
unkown image
page readonly
clean
7FF55BE84000
unkown image
page readonly
clean
2734624D000
unkown
page read and write
clean
7FF55C90A000
unkown image
page readonly
clean
7FF5AACC7000
unkown image
page readonly
clean
14F2E3B6000
unkown
page read and write
clean
7DF5EC6C0000
unkown image
page readonly
clean
27346290000
unkown
page read and write
clean
1FA61000000
unkown image
page readonly
clean
27346460000
unkown
page read and write
clean
7DF52F892000
unkown image
page readonly
clean
7DF5873A2000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
7DF54CC72000
unkown image
page readonly
clean
7DF5873A0000
unkown image
page readonly
clean
14F13F20000
heap private
page read and write
clean
7DF5A40A0000
unkown image
page readonly
clean
1FA60C5A000
unkown
page read and write
clean
1FA6139C000
unkown
page read and write
clean
1FA617B0000
unkown image
page read and write
clean
1FA61381000
unkown
page read and write
clean
25F39E34000
heap private
page read and write
clean
2601AD0D000
unkown
page read and write
clean
14F1AB36000
unkown
page read and write
clean
1FA60C4A000
unkown
page read and write
clean
1FA60C3C000
unkown
page read and write
clean
14F1AC92000
unkown
page read and write
clean
7FF59A1C4000
unkown image
page readonly
clean
2250EE6E000
unkown
page read and write
clean
7FF525AA7000
unkown image
page readonly
clean
7FF55C906000
unkown image
page readonly
clean
2ED81260000
unkown image
page readonly
clean
7DF4B2980000
unkown image
page readonly
clean
7FF519C3E000
unkown image
page readonly
clean
14F2E3A7000
unkown
page read and write
clean
27346090000
unkown image
page read and write
clean
7FF55C991000
unkown image
page readonly
clean
7FF55C497000
unkown image
page readonly
clean
14F2E260000
unkown
page read and write
clean
2601AD64000
unkown
page read and write
clean
7FF50BB72000
unkown image
page readonly
clean
14F1AC9A000
unkown
page read and write
clean
7FF59A2B3000
unkown image
page readonly
clean
25714070000
unkown image
page readonly
clean
E28607B000
stack
page read and write
clean
7FF50B4AE000
unkown image
page readonly
clean
1FA61394000
unkown
page read and write
clean
7FF50BC81000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
2601DB60000
unkown
page read and write
clean
257141C7000
unkown
page read and write
clean
7DF5873C0000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
1FA61802000
unkown
page read and write
clean
7FF55C994000
unkown image
page readonly
clean
6849CE000
stack
page read and write
clean
2601AC20000
unkown image
page readonly
clean
7FF55C491000
unkown image
page readonly
clean
2601AD64000
unkown
page read and write
clean
7DF5873B2000
unkown image
page readonly
clean
E2864FE000
stack
page read and write
clean
14F193D8000
unkown
page read and write
clean
14F13F30000
unkown image
page readonly
clean
22510271000
unkown
page read and write
clean
1FA613BA000
unkown
page read and write
clean
990D4F9000
stack
page read and write
clean
14F2E210000
unkown
page read and write
clean
7F6C67E000
stack
page read and write
clean
14F2DF85000
unkown
page read and write
clean
1FA61390000
unkown
page read and write
clean
7FF542BB2000
unkown image
page readonly
clean
7DF434440000
unkown image
page readonly
clean
14F187A1000
unkown
page read and write
clean
7DF5EC6A2000
unkown image
page readonly
clean
22514461000
unkown
page read and write
clean
7DF486610000
unkown image
page readonly
clean
7FF5431F7000
unkown image
page readonly
clean
7FF50BFCD000
unkown image
page readonly
clean
7FF566370000
unkown image
page readonly
clean
2262AFD0000
unkown
page read and write
clean
E1A94FD000
stack
page read and write
clean
257140C0000
unkown
page read and write
clean
27346206000
unkown
page read and write
clean
7DF515DB2000
unkown image
page readonly
clean
FCF393C000
unkown
page read and write
clean
2250F540000
unkown
page read and write
clean
211BE400000
unkown image
page readonly
clean
14F2E280000
unkown
page read and write
clean
14F2E3CE000
unkown
page read and write
clean
7FF55C8F3000
unkown image
page readonly
clean
14F2E3AF000
unkown
page read and write
clean
1FA6134C000
unkown
page read and write
clean
2601AC30000
unkown image
page readonly
clean
98C6EF7000
stack
page read and write
clean
14F2E260000
unkown
page read and write
clean
211BE600000
unkown image
page readonly
clean
27347CAF000
unkown
page read and write
clean
7DF54CC60000
unkown image
page readonly
clean
1FA61802000
unkown
page read and write
clean
25715020000
unkown
page read and write
clean
68494E000
stack
page read and write
clean
7DF5A40A0000
unkown image
page readonly
clean
14F18C28000
unkown
page read and write
clean
7FF55C9AB000
unkown image
page readonly
clean
25714171000
heap default
page read and write
clean
9131DFE000
stack
page read and write
clean
7FF542D45000
unkown image
page readonly
clean
7FF542EC2000
unkown image
page readonly
clean
7FF57D5B7000
unkown image
page readonly
clean
14F2E250000
unkown
page read and write
clean
9131FFA000
stack
page read and write
clean
14F1AB54000
unkown
page read and write
clean
2251461E000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
7FF5E28B1000
unkown image
page readonly
clean
7FF566375000
unkown image
page readonly
clean
7DF5A40A0000
unkown image
page readonly
clean
7FF583055000
unkown image
page readonly
clean
14F158C0000
heap private
page read and write
clean
7FF5E2718000
unkown image
page readonly
clean
14F2DF70000
unkown
page read and write
clean
225146F9000
unkown
page read and write
clean
7FF52C797000
unkown image
page readonly
clean
1E783222000
unkown
page read and write
clean
2250F615000
unkown
page read and write
clean
7FF5E284D000
unkown image
page readonly
clean
7FF57E9A7000
unkown image
page readonly
clean
7FF59A206000
unkown image
page readonly
clean
7FF525A97000
unkown image
page readonly
clean
14F15D60000
unkown
page read and write
clean
211BE180000
unkown
page read and write
clean
14F15DFB000
unkown
page read and write
clean
2601C700000
unkown
page read and write
clean
7FF5E22BA000
unkown image
page readonly
clean
14F173A1000
unkown
page read and write
clean
220D1252000
unkown
page read and write
clean
2601C6A7000
unkown
page read and write
clean
225146A6000
unkown
page read and write
clean
1FA60CA5000
unkown
page read and write
clean
7FF57E95D000
unkown image
page readonly
clean
7DF566782000
unkown image
page readonly
clean
14F25DA0000
unkown
page read and write
clean
27346274000
unkown
page read and write
clean
990D5FE000
stack
page read and write
clean
14F2E210000
unkown
page read and write
clean
7FF57D1B1000
unkown image
page readonly
clean
14F2E3CE000
unkown
page read and write
clean
220D1160000
unkown
page read and write
clean
2734624D000
unkown
page read and write
clean
2250F460000
unkown image
page readonly
clean
1E783780000
unkown image
page readonly
clean
14F2E216000
unkown
page read and write
clean
2601ACE6000
unkown
page read and write
clean
257141AF000
unkown
page read and write
clean
225145A0000
unkown
page read and write
clean
2250EE8F000
unkown
page read and write
clean
7DF5873B0000
unkown image
page readonly
clean
7FF57E451000
unkown image
page readonly
clean
7FF55C651000
unkown image
page readonly
clean
E1A894B000
unkown
page read and write
clean
7FF5AACC4000
unkown image
page readonly
clean
1FA6139C000
unkown
page read and write
clean
220D1060000
heap default
page read and write
clean
27347C40000
unkown
page read and write
clean
7DF4EA570000
unkown image
page readonly
clean
273460B0000
unkown image
page readonly
clean
7FF55C7D6000
unkown image
page readonly
clean
14F2DF78000
unkown
page read and write
clean
220D0FF0000
unkown image
page read and write
clean
7FF50BF0F000
unkown image
page readonly
clean
22514612000
unkown
page read and write
clean
14F2E3CE000
unkown
page read and write
clean
2734624D000
unkown
page read and write
clean
7FF5E28BD000
unkown image
page readonly
clean
7FF52C6E3000
unkown image
page readonly
clean
7FF50BFD7000
unkown image
page readonly
clean
7DF588742000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
1FA61316000
unkown
page read and write
clean
14F15798000
unkown
page read and write
clean
2601AC20000
unkown image
page readonly
clean
2601AC40000
unkown
page read and write
clean
7FF50BEF0000
unkown image
page readonly
clean
9132AFC000
stack
page read and write
clean
1FA60C56000
unkown
page read and write
clean
2601ACD0000
unkown
page read and write
clean
7FF57D54D000
unkown image
page readonly
clean
2250F700000
unkown
page read and write
clean
2250FD10000
unkown image
page read and write
clean
7F6C7FE000
stack
page read and write
clean
7FF542E7D000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7FF50BFC7000
unkown image
page readonly
clean
14F15730000
unkown
page read and write
clean
7FF5AA8C1000
unkown image
page readonly
clean
2601ACEF000
unkown
page read and write
clean
7FF5259E1000
unkown image
page readonly
clean
2601AD5B000
unkown
page read and write
clean
7FF57D5C7000
unkown image
page readonly
clean
1E783308000
unkown
page read and write
clean
1FA61391000
unkown
page read and write
clean
1FA61802000
unkown
page read and write
clean
7DF5EC6A2000
unkown image
page readonly
clean
14F15874000
unkown
page read and write
clean
22515000000
unkown
page read and write
clean
220D1010000
unkown image
page readonly
clean
7FF50BF69000
unkown image
page readonly
clean
7FF57D5F6000
unkown image
page readonly
clean
1E783802000
unkown
page read and write
clean
7FF542DEA000
unkown image
page readonly
clean
27347DA4000
heap private
page read and write
clean
14F2E280000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
2601DB90000
unkown
page read and write
clean
7FF57D275000
unkown image
page readonly
clean
7DF5873A0000
unkown image
page readonly
clean
7FF542A49000
unkown image
page readonly
clean
14F2E260000
unkown
page read and write
clean
2250EE25000
unkown
page read and write
clean
14F25DFE000
unkown
page read and write
clean
273460D0000
unkown image
page readonly
clean
2601AD55000
unkown
page read and write
clean
14F2E2B0000
unkown
page read and write
clean
27346204000
unkown
page read and write
clean
22514464000
unkown
page read and write
clean
7FF51A411000
unkown image
page readonly
clean
14F1AB4C000
unkown
page read and write
clean
25F39E30000
heap private
page read and write
clean
2250FED0000
unkown image
page readonly
clean
6838FE000
stack
page read and write
clean
14F1AAE7000
unkown
page read and write
clean
2601C6BD000
unkown
page read and write
clean
7FF51A6F7000
unkown image
page readonly
clean
14F2E3CE000
unkown
page read and write
clean
7DF5B4AD0000
unkown image
page readonly
clean
14F15710000
unkown
page readonly
clean
14F2DF68000
unkown
page read and write
clean
7FF542E84000
unkown image
page readonly
clean
14F13C30000
unkown image
page readonly
clean
1FA6186A000
unkown
page read and write
clean
1FA6137D000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7DF515DD0000
unkown image
page readonly
clean
25714FC0000
unkown
page read and write
clean
7DF5EC6A0000
unkown image
page readonly
clean
14F2E241000
unkown
page read and write
clean
E2861FE000
stack
page read and write
clean
211BE030000
unkown image
page readonly
clean
1FA61902000
unkown
page read and write
clean
25714540000
unkown image
page readonly
clean
7FF5E2181000
unkown image
page readonly
clean
14F2E290000
unkown
page read and write
clean
225145A0000
unkown
page read and write
clean
1FA60CC9000
unkown
page read and write
clean
7FF5E2907000
unkown image
page readonly
clean
7FF51A6C6000
unkown image
page readonly
clean
211BE160000
unkown image
page readonly
clean
7DF515DC0000
unkown image
page readonly
clean
273463A3000
unkown
page read and write
clean
14F2E3AC000
unkown
page read and write
clean
7FF5E22B8000
unkown image
page readonly
clean
6835EF000
stack
page read and write
clean
7FF57E8BD000
unkown image
page readonly
clean
2734620A000
unkown
page read and write
clean
E1A8F77000
stack
page read and write
clean
7DF524552000
unkown image
page readonly
clean
257141CC000
unkown
page read and write
clean
7FF50BF11000
unkown image
page readonly
clean
2262AE90000
unkown image
page read and write
clean
2262AF60000
unkown image
page read and write
clean
2601ACB0000
heap default
page read and write
clean
7FF55C7F8000
unkown image
page readonly
clean
7FF57E7E8000
unkown image
page readonly
clean
22510293000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7FF5E2741000
unkown image
page readonly
clean
14F2E250000
unkown
page read and write
clean
683C77000
stack
page read and write
clean
2262AF10000
unkown
page read and write
clean
7FF519C44000
unkown image
page readonly
clean
DAE09FE000
stack
page read and write
clean
14F2E260000
unkown
page read and write
clean
7FF50BC9B000
unkown image
page readonly
clean
27346204000
heap default
page read and write
clean
2601C6A3000
unkown
page read and write
clean
7FF51A6B3000
unkown image
page readonly
clean
7FF542C0B000
unkown image
page readonly
clean
7FF50BA93000
unkown image
page readonly
clean
2601B080000
unkown image
page readonly
clean
7FF57D5BD000
unkown image
page readonly
clean
7DF485270000
unkown image
page readonly
clean
273463BD000
unkown
page read and write
clean
7FF57D5CB000
unkown image
page readonly
clean
14F15D60000
unkown
page read and write
clean
7FF55C99D000
unkown image
page readonly
clean
1E7830E0000
unkown image
page readonly
clean
14F13D5F000
heap default
page read and write
clean
7DF588760000
unkown image
page readonly
clean
273463E0000
unkown
page read and write
clean
7FF566370000
unkown image
page readonly
clean
683CF8000
stack
page read and write
clean
7FF566375000
unkown image
page readonly
clean
7DF566780000
unkown image
page readonly
clean
7FF542B4C000
unkown image
page readonly
clean
1FA613C9000
unkown
page read and write
clean
273460E0000
unkown image
page readonly
clean
1FA6131D000
unkown
page read and write
clean
7DF588752000
unkown image
page readonly
clean
211BE030000
unkown image
page readonly
clean
27346223000
unkown
page read and write
clean
2601ACD9000
unkown
page read and write
clean
14F2E3B9000
unkown
page read and write
clean
273460B0000
unkown image
page readonly
clean
14F142B0000
unkown image
page readonly
clean
14F15870000
unkown
page read and write
clean
14F158B0000
unkown
page read and write
clean
913257E000
stack
page read and write
clean
22514686000
unkown
page read and write
clean
7FF52C7D7000
unkown image
page readonly
clean
1E783300000
unkown
page read and write
clean
2601AC70000
unkown
page read and write
clean
1FA60C6F000
unkown
page read and write
clean
9131EFB000
stack
page read and write
clean
25714D60000
unkown
page read and write
clean
7FF59A226000
unkown image
page readonly
clean
7FF542E71000
unkown image
page readonly
clean
7FF55C912000
unkown image
page readonly
clean
7DF5A4092000
unkown image
page readonly
clean
1FA6139A000
unkown
page read and write
clean
7FF52C727000
unkown image
page readonly
clean
273460F0000
unkown
page read and write
clean
7DF536572000
unkown image
page readonly
clean
14F2E3B7000
unkown
page read and write
clean
22514652000
unkown
page read and write
clean
7DF5A4082000
unkown image
page readonly
clean
7DF44AB30000
unkown image
page readonly
clean
7DF5A4092000
unkown image
page readonly
clean
7FF57E73A000
unkown image
page readonly
clean
27346440000
unkown
page read and write
clean
2250FEF0000
unkown image
page readonly
clean
25F39A70000
unkown image
page readonly
clean
7DF566790000
unkown image
page readonly
clean
7FF57E8AF000
unkown image
page readonly
clean
E28617B000
stack
page read and write
clean
7FF51A251000
unkown image
page readonly
clean
2734627D000
unkown
page read and write
clean
273460D0000
unkown image
page readonly
clean
7FF566375000
unkown image
page readonly
clean
14F156E0000
unkown
page read and write
clean
7DF5A40A0000
unkown image
page readonly
clean
257141B1000
unkown
page read and write
clean
98C6FFF000
stack
page read and write
clean
14F13C80000
unkown
page read and write
clean
7FF542DE6000
unkown image
page readonly
clean
1E783313000
unkown
page read and write
clean
7FF542A22000
unkown image
page readonly
clean
2ED8136B000
heap default
page read and write
clean
7F6C2FB000
unkown
page read and write
clean
14F2E210000
unkown
page read and write
clean
14F13D5D000
heap default
page read and write
clean
7DF42D750000
unkown image
page readonly
clean
27346283000
unkown
page read and write
clean
7FF51A767000
unkown image
page readonly
clean
68387E000
stack
page read and write
clean
14F2E210000
unkown
page read and write
clean
14F2E220000
unkown
page read and write
clean
2250EEA2000
unkown
page read and write
clean
25F39B90000
unkown
page read and write
clean
2250EF25000
unkown
page read and write
clean
7FF542DCF000
unkown image
page readonly
clean
2601AD22000
unkown
page read and write
clean
2601C660000
unkown
page read and write
clean
14F2E3A6000
unkown
page read and write
clean
14F2E3BB000
unkown
page read and write
clean
211BE270000
unkown
page read and write
clean
2601DB92000
unkown
page read and write
clean
7DF566790000
unkown image
page readonly
clean
7FF59A2E7000
unkown image
page readonly
clean
7FF51A6D2000
unkown image
page readonly
clean
14F1AA53000
unkown
page read and write
clean
7FF52C71D000
unkown image
page readonly
clean
7DF5EC6B2000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
E285F7E000
stack
page read and write
clean
14F158B0000
unkown
page read and write
clean
7FF57D607000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
25714CF0000
unkown
page read and write
clean
2262B220000
heap private
page read and write
clean
7DF524540000
unkown image
page readonly
clean
7FF542D97000
unkown image
page readonly
clean
14F2E201000
unkown
page read and write
clean
E1A8D7C000
stack
page read and write
clean
22514440000
unkown
page read and write
clean
2262AFDB000
unkown
page read and write
clean
1E783200000
unkown
page read and write
clean
14F2E3CE000
unkown
page read and write
clean
1FA61314000
unkown
page read and write
clean
2601ACD6000
unkown
page read and write
clean
1FA60C13000
unkown
page read and write
clean
1FA60C4B000
unkown
page read and write
clean
91319FE000
stack
page read and write
clean
211BE302000
unkown
page read and write
clean
2250EF02000
unkown
page read and write
clean
7FF5E2846000
unkown image
page readonly
clean
7FF57E825000
unkown image
page readonly
clean
2250ED90000
unkown image
page readonly
clean
211BEA02000
unkown
page read and write
clean
683D79000
stack
page read and write
clean
2601ACF3000
unkown
page read and write
clean
14F1A011000
unkown
page read and write
clean
1FA613B1000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7DF536582000
unkown image
page readonly
clean
E2F89FB000
stack
page read and write
clean
7FF50C017000
unkown image
page readonly
clean
7FF51A7A7000
unkown image
page readonly
clean
7FF5AAD17000
unkown image
page readonly
clean
7FF50BF56000
unkown image
page readonly
clean
1FA61802000
unkown
page read and write
clean
7DF515DB0000
unkown image
page readonly
clean
7FF542D31000
unkown image
page readonly
clean
14F2E230000
unkown
page read and write
clean
7FF51A53A000
unkown image
page readonly
clean
27346223000
unkown
page read and write
clean
2250EE29000
unkown
page read and write
clean
14F2E250000
unkown
page read and write
clean
2601ABE0000
unkown image
page read and write
clean
2601ACE8000
unkown
page read and write
clean
7FF542C5A000
unkown image
page readonly
clean
7FF542C73000
unkown image
page readonly
clean
257141AE000
unkown
page read and write
clean
14F2E220000
unkown
page read and write
clean
7FF50BFD4000
unkown image
page readonly
clean
14F158B1000
unkown
page read and write
clean
220D124C000
unkown
page read and write
clean
7F6C87D000
stack
page read and write
clean
211BE213000
unkown
page read and write
clean
1FA6139B000
unkown
page read and write
clean
14F158B0000
unkown
page read and write
clean
7FF542E1E000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
6835AE000
stack
page read and write
clean
1E783250000
unkown
page read and write
clean
14F2E250000
unkown
page read and write
clean
7FF52C716000
unkown image
page readonly
clean
1FA609F0000
unkown image
page readonly
clean
7DF5EC6A0000
unkown image
page readonly
clean
7FF55C997000
unkown image
page readonly
clean
7FF542B6D000
unkown image
page readonly
clean
7FF5AAD03000
unkown image
page readonly
clean
7FF57E767000
unkown image
page readonly
clean
7DF5873C0000
unkown image
page readonly
clean
7DF5667A0000
unkown image
page readonly
clean
7FF55C8E1000
unkown image
page readonly
clean
2601AD22000
unkown
page read and write
clean
7FF55C939000
unkown image
page readonly
clean
7FF52C6E5000
unkown image
page readonly
clean
1FA6139C000
unkown
page read and write
clean
14F15790000
unkown
page read and write
clean
7FF5E28DA000
unkown image
page readonly
clean
25F39C70000
heap default
page read and write
clean
2262AEB0000
unkown image
page readonly
clean
7FF57D557000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
1E783600000
unkown image
page readonly
clean
7FF542DDD000
unkown image
page readonly
clean
7DF515DC2000
unkown image
page readonly
clean
7FF50B8A9000
unkown image
page readonly
clean
7FF566370000
unkown image
page readonly
clean
7FF57E8E6000
unkown image
page readonly
clean
14F2E220000
unkown
page read and write
clean
14F2E243000
unkown
page read and write
clean
7FF51A5B5000
unkown image
page readonly
clean
7FF59A2E2000
unkown image
page readonly
clean
7FF51A796000
unkown image
page readonly
clean
7FF542C6F000
unkown image
page readonly
clean
14F17DA1000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
27346300000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
2ED812B0000
unkown
page read and write
clean
683A7E000
stack
page read and write
clean
22514320000
unkown
page read and write
clean
7DF5B4AD0000
unkown image
page readonly
clean
7FF57D55E000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
2250FF00000
unkown image
page readonly
clean
7FF59A297000
unkown image
page readonly
clean
2601AD08000
unkown
page read and write
clean
257148D0000
unkown image
page readonly
clean
7DF5B4AC0000
unkown image
page readonly
clean
14F1AE32000
unkown
page read and write
clean
6839FE000
stack
page read and write
clean
2250ED90000
unkown image
page readonly
clean
7FF50BF67000
unkown image
page readonly
clean
7FF52C7D7000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
7FF542DC1000
unkown image
page readonly
clean
7FF59A1E1000
unkown image
page readonly
clean
7FF50BEC5000
unkown image
page readonly
clean
14F2E210000
unkown
page read and write
clean
1E783400000
unkown image
page readonly
clean
14F2E3A9000
unkown
page read and write
clean
2601DB40000
unkown
page read and write
clean
14F19396000
unkown
page read and write
clean
14F2E260000
unkown
page read and write
clean
2601C7A0000
heap private
page read and write
clean
7F6C779000
stack
page read and write
clean
7FF55C926000
unkown image
page readonly
clean
2250F602000
unkown
page read and write
clean
25F39AA0000
unkown image
page readonly
clean
1FA60CE8000
unkown
page read and write
clean
25F39A90000
unkown image
page readonly
clean
7FF57E964000
unkown image
page readonly
clean
913197B000
unkown
page read and write
clean
7DF5873C0000
unkown image
page readonly
clean
2601AE80000
unkown image
page readonly
clean
14F15D70000
unkown image
page read and write
clean
7FF50BDAA000
unkown image
page readonly
clean
7FF52C6F6000
unkown image
page readonly
clean
7DF524552000
unkown image
page readonly
clean
7FF57D559000
unkown image
page readonly
clean
7FF51A36F000
unkown image
page readonly
clean
7DF566780000
unkown image
page readonly
clean
25F39C87000
heap default
page read and write
clean
7FF57D546000
unkown image
page readonly
clean
2250EE56000
unkown
page read and write
clean
7FF525AD3000
unkown image
page readonly
clean
7DF515DD0000
unkown image
page readonly
clean
7FF542E77000
unkown image
page readonly
clean
14F13C30000
unkown image
page readonly
clean
7DF54CC62000
unkown image
page readonly
clean
14F25DBA000
unkown
page read and write
clean
7FF57E954000
unkown image
page readonly
clean
1FA6139C000
unkown
page read and write
clean
7FF5E28B7000
unkown image
page readonly
clean
7FF542D01000
unkown image
page readonly
clean
27346219000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
257141B1000
unkown
page read and write
clean
14F15800000
heap private
page execute and read and write
clean
7DF588740000
unkown image
page readonly
clean
AFE5FF7000
unkown
page read and write
clean
7DF5873B2000
unkown image
page readonly
clean
257141B2000
unkown
page read and write
clean
7FF5AAC67000
unkown image
page readonly
clean
211BE010000
unkown image
page read and write
clean
14F1AB13000
unkown
page read and write
clean
14F158B0000
unkown
page read and write
clean
7FF5E2907000
unkown image
page readonly
clean
7DF54CFA2000
unkown image
page readonly
clean
14F1ACAC000
unkown
page read and write
clean
14F158B0000
unkown
page read and write
clean
91324FC000
stack
page read and write
clean
2601AC90000
unkown image
page readonly
clean
2601AD64000
unkown
page read and write
clean
1FA6136E000
unkown
page read and write
clean
14F1A01A000
unkown
page read and write
clean
7FF5E2144000
unkown image
page readonly
clean
7FF50BD74000
unkown image
page readonly
clean
14F19400000
unkown
page read and write
clean
7FF50BDBF000
unkown image
page readonly
clean
14F15D70000
unkown
page read and write
clean
14F2E3C9000
unkown
page read and write
clean
7FF542DA4000
unkown image
page readonly
clean
14F2E3BB000
unkown
page read and write
clean
7FF5E27FF000
unkown image
page readonly
clean
7FF50BA96000
unkown image
page readonly
clean
7FF52C7C3000
unkown image
page readonly
clean
7DF536580000
unkown image
page readonly
clean
7FF52C787000
unkown image
page readonly
clean
7DF5A4082000
unkown image
page readonly
clean
1FA60C51000
unkown
page read and write
clean
2250EDF0000
unkown image
page readonly
clean
7FF542DD3000
unkown image
page readonly
clean
27346216000
unkown
page read and write
clean
91327FA000
stack
page read and write
clean
14F158B0000
unkown
page read and write
clean
683F7B000
stack
page read and write
clean
7FF57E957000
unkown image
page readonly
clean
7FF50BF3A000
unkown image
page readonly
clean
7FF5E2731000
unkown image
page readonly
clean
2601ACC6000
heap default
page read and write
clean
1FA60C53000
unkown
page read and write
clean
7FF55C9E2000
unkown image
page readonly
clean
7FF57E9A7000
unkown image
page readonly
clean
7FF57E7B5000
unkown image
page readonly
clean
7FF583050000
unkown image
page readonly
clean
98C68BC000
unkown
page read and write
clean
27347CAF000
unkown
page read and write
clean
27346490000
heap private
page read and write
clean
7DF524550000
unkown image
page readonly
clean
7FF55C9BA000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
25714135000
heap private
page read and write
clean
1FA61902000
unkown
page read and write
clean
7FF5E28B4000
unkown image
page readonly
clean
2250EE13000
unkown
page read and write
clean
14F13D43000
heap default
page read and write
clean
14F13D9F000
heap default
page read and write
clean
2734621B000
unkown
page read and write
clean
2262AFC8000
unkown
page read and write
clean
7FF5E24AE000
unkown image
page readonly
clean
14F2E240000
unkown
page read and write
clean
22514480000
unkown
page read and write
clean
7FF51A76B000
unkown image
page readonly
clean
683E7E000
stack
page read and write
clean
27346494000
heap private
page read and write
clean
2601ACFC000
unkown
page read and write
clean
7FF59A2E7000
unkown image
page readonly
clean
14F2E260000
unkown
page read and write
clean
14F2E3B9000
unkown
page read and write
clean
7DF536570000
unkown image
page readonly
clean
7DF52F882000
unkown image
page readonly
clean
7FF599F9A000
unkown image
page readonly
clean
683525000
unkown
page read and write
clean
7FF542C83000
unkown image
page readonly
clean
14F15D70000
unkown
page read and write
clean
7DF588750000
unkown image
page readonly
clean
7FF525AE7000
unkown image
page readonly
clean
7FF542B88000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
25F39A70000
unkown image
page readonly
clean
2ED81290000
unkown image
page readonly
clean
2601AD46000
unkown
page read and write
clean
25714090000
unkown image
page readonly
clean
AFE65FF000
stack
page read and write
clean
2601C760000
unkown
page read and write
clean
7FF55C8EF000
unkown image
page readonly
clean
25714740000
unkown image
page readonly
clean
220D1200000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7FF59A2D6000
unkown image
page readonly
clean
683DFF000
stack
page read and write
clean
7DF5667A0000
unkown image
page readonly
clean
7FF5E28CB000
unkown image
page readonly
clean
220D1010000
unkown image
page readonly
clean
14F2E260000
unkown
page read and write
clean
7FF525691000
unkown image
page readonly
clean
14F13D73000
heap default
page read and write
clean
14F158B0000
unkown
page read and write
clean
220D124F000
unkown
page read and write
clean
22514340000
unkown
page read and write
clean
273463C0000
unkown
page read and write
clean
14F13CF9000
unkown
page read and write
clean
220D1040000
unkown image
page readonly
clean
7FF51A5B8000
unkown image
page readonly
clean
22514580000
unkown
page read and write
clean
E1A89CE000
stack
page read and write
clean
1E78324A000
unkown
page read and write
clean
7DF54CFB0000
unkown image
page readonly
clean
7FF5E28F3000
unkown image
page readonly
clean
220D1000000
heap private
page read and write
clean
211BE308000
unkown
page read and write
clean
7FF55C9D3000
unkown image
page readonly
clean
7FF542B95000
unkown image
page readonly
clean
7FF50BD50000
unkown image
page readonly
clean
E2F8D7F000
stack
page read and write
clean
1FA613CC000
unkown
page read and write
clean
7DF536570000
unkown image
page readonly
clean
2250F2D0000
unkown image
page readonly
clean
1FA6139C000
unkown
page read and write
clean
220D1780000
unkown image
page readonly
clean
7FF599AB8000
unkown image
page readonly
clean
7DF5B4AB2000
unkown image
page readonly
clean
211BE27E000
unkown
page read and write
clean
1FA613D1000
unkown
page read and write
clean
2251444E000
unkown
page read and write
clean
7DF5A4080000
unkown image
page readonly
clean
7FF57E777000
unkown image
page readonly
clean
14F2E250000
unkown
page read and write
clean
2601DBAF000
unkown
page read and write
clean
14F158B0000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
7FF51A567000
unkown image
page readonly
clean
7FF51A6ED000
unkown image
page readonly
clean
220D123C000
unkown
page read and write
clean
27346262000
unkown
page read and write
clean
7FF5E2189000
unkown image
page readonly
clean
225102A0000
unkown
page read and write
clean
2601ACEF000
unkown
page read and write
clean
2251462C000
unkown
page read and write
clean
14F1A04A000
unkown
page read and write
clean
7FF542E06000
unkown image
page readonly
clean
7DF54CC70000
unkown image
page readonly
clean
14F158B0000
unkown image
page read and write
clean
7FF583050000
unkown image
page readonly
clean
14F2E3AB000
unkown
page read and write
clean
7FF59A22D000
unkown image
page readonly
clean
DAE05F7000
unkown
page read and write
clean
27347C80000
unkown
page read and write
clean
7FF542E74000
unkown image
page readonly
clean
14F2E220000
unkown
page read and write
clean
7FF59A294000
unkown image
page readonly
clean
7DF524542000
unkown image
page readonly
clean
7DF515DB2000
unkown image
page readonly
clean
7FF55C937000
unkown image
page readonly
clean
7DF5B4AC2000
unkown image
page readonly
clean
7FF599B31000
unkown image
page readonly
clean
7FF52C448000
unkown image
page readonly
clean
683AFD000
stack
page read and write
clean
14F158B0000
unkown
page read and write
clean
14F2E3A1000
unkown
page read and write
clean
1FA60CC1000
unkown
page read and write
clean
7DF422410000
unkown image
page readonly
clean
2250FF10000
unkown image
page readonly
clean
2601C6E0000
unkown
page read and write
clean
2601AC20000
unkown image
page readonly
clean
2601C6A0000
unkown
page read and write
clean
913237F000
stack
page read and write
clean
7DF5A4090000
unkown image
page readonly
clean
14F1ACA3000
unkown
page read and write
clean
7DF566782000
unkown image
page readonly
clean
1FA617A0000
unkown
page read and write
clean
2601AC30000
unkown image
page readonly
clean
7FF50B4B4000
unkown image
page readonly
clean
7FF50C006000
unkown image
page readonly
clean
2251463A000
unkown
page read and write
clean
14F15720000
heap private
page read and write
clean
220D127E000
unkown
page read and write
clean
1FA60D08000
unkown
page read and write
clean
7FF54272E000
unkown image
page readonly
clean
7FF542EC7000
unkown image
page readonly
clean
14F15810000
unkown image
page write copy
clean
2250F713000
unkown
page read and write
clean
14F2DF73000
unkown
page read and write
clean
7DF413C80000
unkown image
page readonly
clean
2262AFD3000
unkown
page read and write
clean
7FF55C8DF000
unkown image
page readonly
clean
98C6DFB000
stack
page read and write
clean
7FF57E457000
unkown image
page readonly
clean
2601AD5D000
unkown
page read and write
clean
14F2E2C0000
unkown
page read and write
clean
14F15D20000
unkown
page execute and read and write
clean
14F158C5000
heap private
page read and write
clean
7DF588740000
unkown image
page readonly
clean
1FA617A0000
unkown
page read and write
clean
7FF55C865000
unkown image
page readonly
clean
7FF57E8F7000
unkown image
page readonly
clean
211BE22A000
unkown
page read and write
clean
7FF57E89F000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7FF5AAC5D000
unkown image
page readonly
clean
2601AD37000
unkown
page read and write
clean
1FA61900000
unkown
page read and write
clean
683EFE000
stack
page read and write
clean
1FA61963000
unkown
page read and write
clean
2601B200000
unkown image
page readonly
clean
990D1CF000
stack
page read and write
clean
7DF5873A0000
unkown image
page readonly
clean
22514470000
unkown
page read and write
clean
2601AD42000
unkown
page read and write
clean
1FA613CF000
unkown
page read and write
clean
7FF50BAC1000
unkown image
page readonly
clean
257141AA000
unkown
page read and write
clean
25F39BB0000
unkown
page read and write
clean
E2862F7000
stack
page read and write
clean
22514560000
unkown
page read and write
clean
2ED812D0000
unkown
page read and write
clean
2601AD08000
unkown
page read and write
clean
1FA60CD2000
unkown
page read and write
clean
14F2E260000
unkown
page read and write
clean
220D128A000
unkown
page read and write
clean
225146EB000
unkown
page read and write
clean
14F158B0000
unkown
page read and write
clean
7FF55C7B7000
unkown image
page readonly
clean
14F2E230000
unkown
page read and write
clean
7FF57D602000
unkown image
page readonly
clean
7DF52F880000
unkown image
page readonly
clean
FCF3CFF000
stack
page read and write
clean
14F1AB66000
unkown
page read and write
clean
1FA613A5000
unkown
page read and write
clean
7FF59A2E7000
unkown image
page readonly
clean
7FF52C6EE000
unkown image
page readonly
clean
913227F000
stack
page read and write
clean
273460E0000
unkown image
page readonly
clean
2250FEE0000
unkown image
page readonly
clean
22514550000
unkown
page read and write
clean
7DF5873B0000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7FF542C00000
unkown image
page readonly
clean
2250EE73000
unkown
page read and write
clean
14F13EB0000
unkown
page read and write
clean
2601DBA0000
unkown
page read and write
clean
220D1270000
unkown
page read and write
clean
7FF57D5F3000
unkown image
page readonly
clean
7FF50BF5D000
unkown image
page readonly
clean
7FF51A6A1000
unkown image
page readonly
clean
1FA61358000
unkown
page read and write
clean
14F2E270000
unkown
page read and write
clean
1FA61397000
unkown
page read and write
clean
DAE07FE000
stack
page read and write
clean
7FF51A577000
unkown image
page readonly
clean
7DF5873A2000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7DF5B4AB0000
unkown image
page readonly
clean
14F2E251000
unkown
page read and write
clean
7DF5A4080000
unkown image
page readonly
clean
220D1308000
unkown
page read and write
clean
1FA61740000
unkown image
page write copy
clean
14F2E250000
unkown
page read and write
clean
1FA61375000
unkown
page read and write
clean
14F15806000
heap private
page execute and read and write
clean
7FF542A3C000
unkown image
page readonly
clean
7FF55C8FD000
unkown image
page readonly
clean
7FF51A6BD000
unkown image
page readonly
clean
14F15880000
unkown
page read and write
clean
7FF542B36000
unkown image
page readonly
clean
91320FE000
stack
page read and write
clean
7DF5A4092000
unkown image
page readonly
clean
7FF57E7B0000
unkown image
page readonly
clean
7FF57E967000
unkown image
page readonly
clean
2601ACE6000
unkown
page read and write
clean
7FF57CE51000
unkown image
page readonly
clean
14F2E220000
unkown
page read and write
clean
7FF50BEF4000
unkown image
page readonly
clean
7FF55C789000
unkown image
page readonly
clean
14F15D80000
heap private
page execute and read and write
clean
2601ACF5000
unkown
page read and write
clean
25F39C77000
heap default
page read and write
clean
2250F0D0000
unkown image
page readonly
clean
27346290000
unkown
page read and write
clean
273463A0000
unkown
page read and write
clean
1E783213000
unkown
page read and write
clean
14F2E200000
unkown
page read and write
clean
E1A8E7B000
stack
page read and write
clean
7FF57D526000
unkown image
page readonly
clean
7FF542D75000
unkown image
page readonly
clean
7FF57E9A2000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7DF54CC72000
unkown image
page readonly
clean
14F2E209000
unkown
page read and write
clean
1E78322A000
unkown
page read and write
clean
7FF59A2E7000
unkown image
page readonly
clean
2601C6C0000
unkown
page read and write
clean
2601AC30000
unkown image
page readonly
clean
2250F450000
unkown image
page readonly
clean
2262AFD0000
unkown
page read and write
clean
7DF5A4090000
unkown image
page readonly
clean
7FF57D5B4000
unkown image
page readonly
clean
7DF5873C0000
unkown image
page readonly
clean
91326FD000
stack
page read and write
clean
7DF515DC2000
unkown image
page readonly
clean
25714FD0000
unkown
page read and write
clean
2601AC00000
unkown image
page readonly
clean
211BE23C000
unkown
page read and write
clean
7FF50BFC1000
unkown image
page readonly
clean
225146E0000
unkown
page read and write
clean
7DF524550000
unkown image
page readonly
clean
14F15700000
unkown
page read and write
clean
220D1213000
unkown
page read and write
clean
14F2E250000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
7DF54CC80000
unkown image
page readonly
clean
1FA613B7000
unkown
page read and write
clean
1E782FE0000
unkown image
page readonly
clean
211BE060000
unkown image
page readonly
clean
E2F8B77000
stack
page read and write
clean
14F2E200000
unkown
page read and write
clean
7DF536580000
unkown image
page readonly
clean
1E782FA0000
heap private
page read and write
clean
25F39A50000
unkown image
page read and write
clean
14F15D70000
unkown
page read and write
clean
7FF542DF2000
unkown image
page readonly
clean
27346243000
unkown
page read and write
clean
2601AD14000
unkown
page read and write
clean
14F2E240000
unkown
page read and write
clean
2250EE75000
unkown
page read and write
clean
1FA60CE3000
unkown
page read and write
clean
25714070000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
7DF5EC6C0000
unkown image
page readonly
clean
27346820000
unkown image
page readonly
clean
E2863FF000
stack
page read and write
clean
7FF50BF36000
unkown image
page readonly
clean
7DF52F8A0000
unkown image
page readonly
clean
7FF599B41000
unkown image
page readonly
clean
27346289000
unkown
page read and write
clean
7FF57D278000
unkown image
page readonly
clean
1FA6139C000
unkown
page read and write
clean
7FF59A29D000
unkown image
page readonly
clean
14F2E3AA000
unkown
page read and write
clean
14F2E210000
unkown
page read and write
clean
7DF524560000
unkown image
page readonly
clean
14F13C50000
unkown image
page readonly
clean
7DF524560000
unkown image
page readonly
clean
14F2E200000
unkown
page read and write
clean
220D1300000
unkown
page read and write
clean
211BE300000
unkown
page read and write
clean
14F14130000
unkown image
page readonly
clean
7FF599A79000
unkown image
page readonly
clean
14F2E3CE000
unkown
page read and write
clean
7FF50BC88000
unkown image
page readonly
clean
7FF50BF1F000
unkown image
page readonly
clean
7FF57E8B3000
unkown image
page readonly
clean
7DF4A1F50000
unkown image
page readonly
clean
14F2E3B3000
unkown
page read and write
clean
14F2E290000
unkown
page read and write
clean
14F15D60000
unkown
page read and write
clean
14F2E220000
unkown
page read and write
clean
2250EE00000
unkown
page read and write
clean
2601AC00000
unkown image
page readonly
clean
1E78326F000
unkown
page read and write
clean
7FF55C77A000
unkown image
page readonly
clean
7FF5E2859000
unkown image
page readonly
clean
7FF57CDD8000
unkown image
page readonly
clean
2262AFCA000
unkown
page read and write
clean
1FA613B8000
unkown
page read and write
clean
7FF542E17000
unkown image
page readonly
clean
1E782FB0000
unkown image
page readonly
clean
7FF57D501000
unkown image
page readonly
clean
220D1A02000
unkown
page read and write
clean
1FA6136B000
unkown
page read and write
clean
14F18C24000
unkown
page read and write
clean
7FF542BD0000
unkown image
page readonly
clean
14F158B0000
unkown
page read and write
clean
7DF5873B2000
unkown image
page readonly
clean
2250EE9B000
unkown
page read and write
clean
There are 1525 hidden memdumps, click here to show them.