IOC Report

loading gif

Files

File Path
Type
Category
Malicious
pYebrdRKvR.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Network\Downloader\edb.chk
data
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\edb.log
MPEG-4 LOAS
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
Extensible storage user DataBase, version 0x620, checksum 0x7ccc75ac, page size 16384, Windows version 10.0
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 61414 bytes, 1 file
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
modified
clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
ASCII text, with no line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\pYebrdRKvR.dll,Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\pYebrdRKvR.dll",#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\pYebrdRKvR.dll,Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\pYebrdRKvR.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Olcnhkjrspgysi\kpevmak.bsr",xeRCFlLGA
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Olcnhkjrspgysi\kpevmak.bsr",Control_RunDLL
malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\pYebrdRKvR.dll"
clean
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\pYebrdRKvR.dll",#1
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
clean
There are 3 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://51.178.61.60/wxXNBTtFVptEPyBMyhxzytUrLNSymmMWHdjZgweBcTxtKLUZGczVLXNxnireROs
51.178.61.60
malicious
https://www.disneyplus.com/legal/your-california-privacy-rights
unknown
clean
https://177.72.80.14/akR=
unknown
clean
https://168.197.250.14:80/qeEsRQYaDgRwXDJjRsnTiXgQ~Y
unknown
clean
https://177.72.80.14:7080/VoY
unknown
clean
https://168.197.250.14:80/qeEsRQYaDgRwXDJjRsnTiXgQlY
unknown
clean
http://crl.ver)
unknown
clean
https://www.tiktok.com/legal/report/feedback
unknown
clean
https://196.44.98.190/
unknown
clean
https://196.44.98.190/)k
unknown
clean
https://177.72.80.14/
unknown
clean
https://196.44.98.190:8080/cRBQvElvVswAKMbGJRCeWFEoAKWVURRoDepPZnuTejOhPOKJ
unknown
clean
https://177.72.80.14:7080/kp
unknown
clean
https://51.178.61.60/wxXNBTtFVptEPyBMyhxzytUrLNSymmMWHdjZgweBcTxtKLUZGczVLXNxnireROs5
unknown
clean
https://177.72.80.14:7080/k
unknown
clean
https://168.197.250.14/lhQ
unknown
clean
https://www.disneyplus.com/legal/privacy-policy
unknown
clean
https://196.44.98.190:8080/
unknown
clean
https://51.178.61.60/
unknown
clean
https://177.72.80.14:7080/
unknown
clean
https://168.197.250.14/khX
unknown
clean
https://45.79.33.48/
unknown
clean
https://51.178.61.60/rLNSymmMWHdjZgweBcTxtKLUZGczVLXNxnireROs
unknown
clean
https://45.79.33.48:8080/GEGDSODavaAMfbQXuktdlcgqQGPldhWooFcQtRsikthZVdhkisiiQD
unknown
clean
https://disneyplus.com/legal.
unknown
clean
https://177.72.80.14:7080/kst
unknown
clean
http://www.microsoft.c
unknown
clean
http://help.disneyplus.com.
unknown
clean
https://168.197.250.14:80/
unknown
clean
There are 19 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
207.148.81.119
unknown
United States
malicious
196.44.98.190
unknown
Ghana
malicious
78.46.73.125
unknown
Germany
malicious
37.59.209.141
unknown
France
malicious
85.214.67.203
unknown
Germany
malicious
191.252.103.16
unknown
Brazil
malicious
45.79.33.48
unknown
United States
malicious
54.37.228.122
unknown
France
malicious
185.148.169.10
unknown
Germany
malicious
142.4.219.173
unknown
Canada
malicious
54.38.242.185
unknown
France
malicious
195.154.146.35
unknown
France
malicious
195.77.239.39
unknown
Spain
malicious
78.47.204.80
unknown
Germany
malicious
168.197.250.14
unknown
Argentina
malicious
51.178.61.60
unknown
France
malicious
177.72.80.14
unknown
Brazil
malicious
66.42.57.149
unknown
United States
malicious
37.44.244.177
unknown
Germany
malicious
51.210.242.234
unknown
France
malicious
127.0.0.1
unknown
unknown
clean
There are 11 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
PerfMMFileName
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\System32\ci.dll,-100
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\System32\ci.dll,-101
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\system32\dnsapi.dll,-103
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\System32\fveui.dll,-843
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\System32\fveui.dll,-844
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\System32\wuaueng.dll,-400
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe,-124
clean
HKEY_USERSS-1-5-19\Software\Classes\Local Settings\MuiCache\f0\52C64B7E
@%SystemRoot%\system32\NgcRecovery.dll,-100
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
A76000
unkown
page read and write
malicious
A46000
unkown
page read and write
malicious
3696000
unkown
page read and write
malicious
D12000
unkown
page read and write
malicious
A3A000
heap default
page read and write
malicious
D12000
unkown
page read and write
malicious
3516000
unkown
page read and write
malicious
A46000
heap default
page read and write
malicious
6F381000
unkown image
page readonly
clean
7FF5C3A3B000
unkown image
page readonly
clean
7FF5C3961000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
18F11B79000
unkown
page read and write
clean
18CB1AD0000
unkown image
page readonly
clean
2EA5000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7FF5C37A7000
unkown image
page readonly
clean
7DF4119B0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
FF0000
unkown image
page readonly
clean
2F4C000
unkown image
page readonly
clean
2F70000
unkown image
page readonly
clean
18CB1E50000
unkown image
page readonly
clean
2E77000
unkown image
page readonly
clean
1FC3D7C0000
unkown
page read and write
clean
4EC8000
unkown
page read and write
clean
18F11B80000
unkown
page read and write
clean
4920000
unkown
page read and write
clean
7FF56BDF0000
unkown image
page readonly
clean
2F54000
unkown image
page readonly
clean
1FC3D690000
unkown image
page readonly
clean
18F11BC0000
unkown
page read and write
clean
4D6C000
stack
page read and write
clean
7DF533572000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7DF4EB780000
unkown image
page readonly
clean
520000
unkown image
page readonly
clean
195A4800000
unkown image
page readonly
clean
8A0000
unkown image
page readonly
clean
7FF5E3ACD000
unkown image
page readonly
clean
7FF509AED000
unkown image
page readonly
clean
7FF561725000
unkown image
page readonly
clean
17CB4C71000
unkown
page read and write
clean
7FF561567000
unkown image
page readonly
clean
18F11BD2000
unkown
page read and write
clean
7DF5CDA92000
unkown image
page readonly
clean
3320000
heap default
page read and write
clean
4EA4000
unkown
page read and write
clean
7F320000
unkown image
page readonly
clean
7FF51FAF9000
unkown image
page readonly
clean
7FF56BF91000
unkown image
page readonly
clean
18F1129E000
unkown
page read and write
clean
1150000
unkown image
page readonly
clean
7FF56BFAB000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7FF509AA4000
unkown image
page readonly
clean
7FF56BF0A000
unkown image
page readonly
clean
7FF51F996000
unkown image
page readonly
clean
1FC3D881000
unkown
page read and write
clean
2F05000
unkown image
page readonly
clean
2F3E000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FF509A80000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FAD0000
unkown image
page readonly
clean
7FF529787000
unkown image
page readonly
clean
DCE000
stack
page read and write
clean
2F78000
unkown image
page readonly
clean
570000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
2EA1000
unkown image
page readonly
clean
805CCFE000
stack
page read and write
clean
2DA5000
unkown image
page readonly
clean
18F1124B000
unkown
page read and write
clean
C70000
unkown image
page readonly
clean
1AB0F2F9000
unkown
page read and write
clean
7FF5099F3000
unkown image
page readonly
clean
2EF1000
unkown image
page readonly
clean
18F11B93000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
1FAE0E8B000
unkown
page read and write
clean
2D4CD1B000
unkown
page read and write
clean
7FF561696000
unkown image
page readonly
clean
18CB1580000
unkown image
page readonly
clean
2F33000
unkown image
page readonly
clean
2EA5000
unkown image
page readonly
clean
18CB17C6000
heap default
page read and write
clean
7DF529952000
unkown image
page readonly
clean
7FF509C6A000
unkown image
page readonly
clean
2E7E000
unkown image
page readonly
clean
18F11B94000
unkown
page read and write
clean
2E5C000
unkown image
page readonly
clean
7FAD2000
unkown image
page readonly
clean
AD4000
unkown
page read and write
clean
110F000
stack
page read and write
clean
7F570000
unkown image
page readonly
clean
18F11B6C000
unkown
page read and write
clean
7FAD2000
unkown image
page readonly
clean
18F11BD2000
unkown
page read and write
clean
7FF509914000
unkown image
page readonly
clean
7FF51FACA000
unkown image
page readonly
clean
7FF51FAC6000
unkown image
page readonly
clean
7FF529717000
unkown image
page readonly
clean
2F5D000
unkown image
page readonly
clean
7F340000
unkown image
page readonly
clean
7FF56BEF3000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
7FF51FBA7000
unkown image
page readonly
clean
636000
unkown
page read and write
clean
7DF575D82000
unkown image
page readonly
clean
18F11B94000
unkown
page read and write
clean
1AB1482D000
unkown
page read and write
clean
1FC3D7A0000
unkown
page read and write
clean
1AB0F180000
unkown image
page readonly
clean
7DF56B650000
unkown image
page readonly
clean
72788FC000
stack
page read and write
clean
72782FC000
stack
page read and write
clean
2D4D5FA000
stack
page read and write
clean
7DF513AF2000
unkown image
page readonly
clean
195A448D000
unkown
page read and write
clean
17CB4D00000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
2F2E000
unkown image
page readonly
clean
3180000
unkown image
page readonly
clean
7FF51FAE6000
unkown image
page readonly
clean
10027000
unkown
page read and write
clean
7FF56BFE2000
unkown image
page readonly
clean
1FC3D867000
heap default
page read and write
clean
7FF509A50000
unkown image
page readonly
clean
18F11B9D000
unkown
page read and write
clean
7F572000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
331F000
unkown
page read and write
clean
2F29000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7DF5ED8C2000
unkown image
page readonly
clean
C20000
heap private
page read and write
clean
2F4F000
unkown image
page readonly
clean
930000
unkown image
page readonly
clean
34F4000
unkown
page read and write
clean
520000
unkown image
page readonly
clean
7FF56187A000
unkown image
page readonly
clean
2E77000
unkown image
page readonly
clean
152CCFE000
stack
page read and write
clean
2F42000
unkown image
page readonly
clean
6F322000
unkown image
page execute read
clean
18F11B75000
unkown
page read and write
clean
2E9D000
unkown image
page readonly
clean
52C000
unkown
page read and write
clean
7FF5E3ADB000
unkown image
page readonly
clean
1AB0F600000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
18F11302000
unkown
page read and write
clean
7FF5C3B6E000
unkown image
page readonly
clean
5C0000
unkown image
page readonly
clean
1FC3DAC5000
heap private
page read and write
clean
1AB0F2AA000
unkown
page read and write
clean
7FF5E3AD4000
unkown image
page readonly
clean
7FF509872000
unkown image
page readonly
clean
368B000
unkown
page read and write
clean
18F11B6F000
unkown
page read and write
clean
1010000
unkown image
page readonly
clean
7FF509A32000
unkown image
page readonly
clean
7DF513B00000
unkown image
page readonly
clean
2E6E000
unkown image
page readonly
clean
6F367000
unkown image
page write copy
clean
7FA52000
unkown image
page readonly
clean
18F118C0000
unkown image
page write copy
clean
7FAE0000
unkown image
page readonly
clean
7FF509AE7000
unkown image
page readonly
clean
195A4470000
unkown
page read and write
clean
7FF5C3CE3000
unkown image
page readonly
clean
6F366000
unkown image
page read and write
clean
50AD000
unkown
page read and write
clean
5D0000
unkown image
page readonly
clean
990000
unkown
page read and write
clean
7DF5CDA90000
unkown image
page readonly
clean
2D95000
unkown image
page readonly
clean
520000
unkown image
page readonly
clean
7FF56BF94000
unkown image
page readonly
clean
1030000
unkown
page read and write
clean
7FAD0000
unkown image
page readonly
clean
501E000
stack
page read and write
clean
E60000
unkown image
page readonly
clean
2F3E000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
18F11B7E000
unkown
page read and write
clean
2F1D000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
BB0000
unkown image
page readonly
clean
F70000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
805CC7E000
stack
page read and write
clean
7FF5C3CA4000
unkown image
page readonly
clean
1FC3D867000
unkown
page read and write
clean
195A447F000
unkown
page read and write
clean
7F570000
unkown image
page readonly
clean
7FAD0000
unkown image
page readonly
clean
7FAB2000
unkown image
page readonly
clean
7FF5C3A54000
unkown image
page readonly
clean
2F08000
unkown image
page readonly
clean
1020000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
18F11B94000
unkown
page read and write
clean
195A41E0000
unkown image
page readonly
clean
1AB148DD000
unkown
page read and write
clean
7FF5C3CE6000
unkown image
page readonly
clean
152CDFF000
stack
page read and write
clean
18CB1580000
unkown image
page readonly
clean
18F1124A000
unkown
page read and write
clean
18F112E6000
unkown
page read and write
clean
1020000
heap private
page read and write
clean
7FF51FB54000
unkown image
page readonly
clean
6F321000
unkown image
page execute and write copy
clean
CF0000
unkown image
page readonly
clean
7FF5C389D000
unkown image
page readonly
clean
7FF5099C9000
unkown image
page readonly
clean
7FF5E32C0000
unkown image
page readonly
clean
D7E000
stack
page read and write
clean
18F11BAE000
unkown
page read and write
clean
4EC4000
unkown
page read and write
clean
7DF575D90000
unkown image
page readonly
clean
2F1D000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
5D0000
unkown
page read and write
clean
7FF56163A000
unkown image
page readonly
clean
7FF5C3BA5000
unkown image
page readonly
clean
6F321000
unkown image
page execute and write copy
clean
7FAE0000
unkown image
page readonly
clean
18F112E5000
unkown
page read and write
clean
1AB0FB59000
unkown
page read and write
clean
18F11A02000
unkown
page read and write
clean
195A4502000
unkown
page read and write
clean
7FF5E3AD7000
unkown image
page readonly
clean
1AB14A40000
unkown
page read and write
clean
1AB0FB00000
unkown
page read and write
clean
7FF51FAD2000
unkown image
page readonly
clean
7FF529777000
unkown image
page readonly
clean
18F11B94000
unkown
page read and write
clean
17CB4D13000
unkown
page read and write
clean
F4E000
stack
page read and write
clean
1AB0F2A4000
unkown
page read and write
clean
2F54000
unkown image
page readonly
clean
6F320000
unkown image
page readonly
clean
7FAE2000
unkown image
page readonly
clean
2E77000
unkown image
page readonly
clean
18F12000000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
2C6E000
unkown image
page readonly
clean
7FAD2000
unkown image
page readonly
clean
18F1124F000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
110D000
stack
page read and write
clean
2E77000
unkown image
page readonly
clean
4ADD000
stack
page read and write
clean
7FF5616B8000
unkown image
page readonly
clean
18CB16E0000
unkown image
page readonly
clean
35D0000
unkown image
page readonly
clean
1AB10010000
unkown
page read and write
clean
2F70000
unkown image
page readonly
clean
2F1D000
unkown image
page readonly
clean
18F11213000
unkown
page read and write
clean
2F42000
unkown image
page readonly
clean
7FF56BF97000
unkown image
page readonly
clean
365A000
heap default
page read and write
clean
7FF51FB64000
unkown image
page readonly
clean
2EF1000
unkown image
page readonly
clean
A24000
unkown
page read and write
clean
D40000
unkown image
page readonly
clean
1AB14721000
unkown
page read and write
clean
10025000
unkown
page read and write
clean
50AE000
unkown
page read and write
clean
2F3E000
unkown image
page readonly
clean
7DF5CDA90000
unkown image
page readonly
clean
7FF561864000
unkown image
page readonly
clean
4EBF000
unkown
page read and write
clean
6F348000
unkown image
page readonly
clean
7FF529706000
unkown image
page readonly
clean
7FF5E3382000
unkown image
page readonly
clean
7F220000
unkown image
page readonly
clean
18F11BAF000
unkown
page read and write
clean
195A41E0000
unkown image
page readonly
clean
10027000
unkown
page read and write
clean
9F6DF7000
stack
page read and write
clean
18F11253000
unkown
page read and write
clean
7FF51F967000
unkown image
page readonly
clean
7FF5096FF000
unkown image
page readonly
clean
18F11298000
unkown
page read and write
clean
7FF5C3BD9000
unkown image
page readonly
clean
2EAB000
unkown image
page readonly
clean
2E81000
unkown image
page readonly
clean
7FF5616B0000
unkown image
page readonly
clean
1AB0F050000
unkown image
page readonly
clean
7FF50998A000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
2E6E000
unkown image
page readonly
clean
7DF5CDA92000
unkown image
page readonly
clean
152C5EE000
stack
page read and write
clean
4B9D000
stack
page read and write
clean
9B0000
unkown image
page readonly
clean
2E6E000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7F0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
195A4429000
unkown
page read and write
clean
7DF533570000
unkown image
page readonly
clean
18F11B7F000
unkown
page read and write
clean
1AB1481F000
unkown
page read and write
clean
47CA77E000
stack
page read and write
clean
7FF561511000
unkown image
page readonly
clean
7FF51F811000
unkown image
page readonly
clean
7DF533560000
unkown image
page readonly
clean
10001000
unkown
page execute and read and write
clean
FA5000
unkown
page read and write
clean
1AB14700000
unkown
page read and write
clean
6B0000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7FF56BF37000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
18F11252000
unkown
page read and write
clean
2F05000
unkown image
page readonly
clean
CE0000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
7DF533580000
unkown image
page readonly
clean
7FF509C08000
unkown image
page readonly
clean
7FF5616E8000
unkown image
page readonly
clean
3380000
unkown image
page readonly
clean
18F11BA5000
unkown
page read and write
clean
57C000
unkown
page read and write
clean
7FF509C86000
unkown image
page readonly
clean
18CB1E60000
unkown image
page readonly
clean
7DF533562000
unkown image
page readonly
clean
2E9D000
unkown image
page readonly
clean
7DF473C50000
unkown image
page readonly
clean
7FF5E3941000
unkown image
page readonly
clean
1AB0FA15000
unkown
page read and write
clean
2D4D879000
stack
page read and write
clean
2EAB000
unkown image
page readonly
clean
7FF50990F000
unkown image
page readonly
clean
CE0000
unkown image
page readonly
clean
18F11B87000
unkown
page read and write
clean
18CB1730000
unkown
page read and write
clean
7F322000
unkown image
page readonly
clean
2EF1000
unkown image
page readonly
clean
805CD7A000
stack
page read and write
clean
3180000
unkown image
page readonly
clean
17CB49C0000
unkown image
page read and write
clean
1AB14B90000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
6F37E000
unkown image
page read and write
clean
18F11BB4000
unkown
page read and write
clean
18F11B97000
unkown
page read and write
clean
1AB14A60000
unkown
page read and write
clean
1AB148F9000
unkown
page read and write
clean
18F11B94000
unkown
page read and write
clean
7FF56BA97000
unkown image
page readonly
clean
7F330000
unkown image
page readonly
clean
4D0000
unkown image
page readonly
clean
7DF575D80000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FF509A39000
unkown image
page readonly
clean
1FC3D888000
unkown
page read and write
clean
1FC3D690000
unkown image
page readonly
clean
6F320000
unkown image
page readonly
clean
1AB0F780000
unkown image
page readonly
clean
2F1B000
unkown image
page readonly
clean
7DF56B652000
unkown image
page readonly
clean
10000000
unkown
page read and write
clean
1FC3DE50000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7FAD2000
unkown image
page readonly
clean
18F11BB0000
unkown
page read and write
clean
2D4D3F7000
stack
page read and write
clean
195A4450000
unkown
page read and write
clean
7FF509C72000
unkown image
page readonly
clean
4EC4000
unkown
page read and write
clean
18CB1759000
heap private
page read and write
clean
47C9DEC000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
7FF5C3C03000
unkown image
page readonly
clean
4E95000
unkown
page read and write
clean
4E9F000
unkown
page read and write
clean
2D46000
unkown image
page readonly
clean
18F11B7F000
unkown
page read and write
clean
6F381000
unkown image
page readonly
clean
7FAD0000
unkown image
page readonly
clean
750000
unkown image
page readonly
clean
2D95000
unkown image
page readonly
clean
1AB0F2A1000
unkown
page read and write
clean
7DF575D80000
unkown image
page readonly
clean
2F3E000
unkown image
page readonly
clean
2F1B000
unkown image
page readonly
clean
F00000
unkown
page read and write
clean
FA1000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
1FAE0C10000
unkown image
page readonly
clean
2F26000
unkown image
page readonly
clean
7FF56BFA4000
unkown image
page readonly
clean
7FF509C66000
unkown image
page readonly
clean
DB5000
unkown
page read and write
clean
7FAE2000
unkown image
page readonly
clean
6F367000
unkown image
page write copy
clean
6F320000
unkown image
page readonly
clean
7DF5ED8C0000
unkown image
page readonly
clean
520000
unkown image
page readonly
clean
2F54000
unkown image
page readonly
clean
7FAD0000
unkown image
page readonly
clean
2D87000
unkown image
page readonly
clean
2EF1000
unkown image
page readonly
clean
7FF5E3AEA000
unkown image
page readonly
clean
7FF5C3CA7000
unkown image
page readonly
clean
4EA4000
unkown
page read and write
clean
4E9F000
unkown
page read and write
clean
2F2E000
unkown image
page readonly
clean
8D5000
heap default
page read and write
clean
1AB14708000
unkown
page read and write
clean
2E7E000
unkown image
page readonly
clean
7DF5CDAA2000
unkown image
page readonly
clean
7FF51F977000
unkown image
page readonly
clean
47CA1FB000
stack
page read and write
clean
4D0000
unkown image
page readonly
clean
3650000
heap default
page read and write
clean
7FF5C3BD4000
unkown image
page readonly
clean
7F590000
unkown image
page readonly
clean
7FF51FAA1000
unkown image
page readonly
clean
7F580000
unkown image
page readonly
clean
BC0000
unkown image
page readonly
clean
4E73000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
2E9A000
unkown image
page readonly
clean
7278BFA000
stack
page read and write
clean
18F11B70000
unkown
page read and write
clean
2D4E000
unkown image
page readonly
clean
2D46000
unkown image
page readonly
clean
6F320000
unkown image
page readonly
clean
2F4C000
unkown image
page readonly
clean
4D0000
unkown image
page readonly
clean
987000
unkown
page read and write
clean
1AB14730000
unkown
page read and write
clean
760000
unkown image
page readonly
clean
7FF509B03000
unkown image
page readonly
clean
9F678E000
stack
page read and write
clean
7DF5CDAA0000
unkown image
page readonly
clean
4EBB000
unkown
page read and write
clean
7FF5E3A67000
unkown image
page readonly
clean
7FF51FAED000
unkown image
page readonly
clean
1FC3D6B0000
unkown image
page readonly
clean
7FAB0000
unkown image
page readonly
clean
10025000
unkown
page read and write
clean
18CB16A0000
unkown
page read and write
clean
7FF5618A7000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
18CB24E0000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
7FAF0000
unkown image
page readonly
clean
1FC3D850000
heap default
page read and write
clean
1AB148A4000
unkown
page read and write
clean
AA7000
heap default
page read and write
clean
1AB147D0000
unkown
page read and write
clean
6F320000
unkown image
page readonly
clean
4CC0000
unkown
page read and write
clean
7DF5ED8B0000
unkown image
page readonly
clean
18F11B8E000
unkown
page read and write
clean
18F11B8A000
unkown
page read and write
clean
1AB0F28A000
unkown
page read and write
clean
2F08000
unkown image
page readonly
clean
7FF509C3F000
unkown image
page readonly
clean
1FAE0E70000
unkown
page read and write
clean
1AB14900000
unkown
page read and write
clean
7FAC0000
unkown image
page readonly
clean
1FAE0F13000
unkown
page read and write
clean
1FAE0E7F000
unkown
page read and write
clean
A5E000
unkown
page read and write
clean
7DF513AE0000
unkown image
page readonly
clean
E70000
unkown image
page readonly
clean
47CA57D000
stack
page read and write
clean
7FF51FB93000
unkown image
page readonly
clean
2F38000
unkown image
page readonly
clean
31DE000
stack
page read and write
clean
7FF51F657000
unkown image
page readonly
clean
4EE5000
unkown
page read and write
clean
1AB0F255000
unkown
page read and write
clean
7FF5C3BA7000
unkown image
page readonly
clean
7FF5E3958000
unkown image
page readonly
clean
2F26000
unkown image
page readonly
clean
18CB1804000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
18F11600000
unkown image
page readonly
clean
DC6000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
2C6E000
unkown image
page readonly
clean
9F6CFE000
stack
page read and write
clean
2D4D67F000
stack
page read and write
clean
2F78000
unkown image
page readonly
clean
A2B000
heap default
page read and write
clean
BA4000
unkown
page read and write
clean
6F381000
unkown image
page readonly
clean
BE5000
unkown
page read and write
clean
7FF5C38A3000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
1AB14A10000
unkown
page read and write
clean
9F6A7E000
stack
page read and write
clean
18F11BB2000
unkown
page read and write
clean
18F11B8C000
unkown
page read and write
clean
7F552000
unkown image
page readonly
clean
7FF5E3B06000
unkown image
page readonly
clean
7FAF0000
unkown image
page readonly
clean
7FAB2000
unkown image
page readonly
clean
5E0000
unkown
page read and write
clean
2F33000
unkown image
page readonly
clean
7FF5C3AA3000
unkown image
page readonly
clean
2D4D778000
stack
page read and write
clean
2F05000
unkown image
page readonly
clean
115E000
stack
page read and write
clean
4921000
unkown
page read and write
clean
D03000
unkown
page read and write
clean
5087000
unkown
page read and write
clean
7FF5C3A8A000
unkown image
page readonly
clean
6B0000
unkown image
page readonly
clean
195A4980000
unkown image
page readonly
clean
1FC3D877000
unkown
page read and write
clean
18CB1570000
unkown
page read and write
clean
7DF575D90000
unkown image
page readonly
clean
18F110B0000
heap private
page read and write
clean
7FAA0000
unkown image
page readonly
clean
3674000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
4E64000
unkown
page read and write
clean
1FAE0E55000
unkown
page read and write
clean
17CB4C56000
unkown
page read and write
clean
646000
unkown
page read and write
clean
7DF533580000
unkown image
page readonly
clean
7FAF0000
unkown image
page readonly
clean
7F332000
unkown image
page readonly
clean
1AB1470E000
unkown
page read and write
clean
4EC8000
unkown
page read and write
clean
64C000
unkown
page read and write
clean
7F570000
unkown image
page readonly
clean
2F2E000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7DF513AF0000
unkown image
page readonly
clean
7FF5C3BEF000
unkown image
page readonly
clean
494E000
stack
page read and write
clean
7FF5098A2000
unkown image
page readonly
clean
7FF5C3B08000
unkown image
page readonly
clean
4D90000
unkown
page read and write
clean
7FF528F88000
unkown image
page readonly
clean
4EC4000
unkown
page read and write
clean
2D4D2FE000
stack
page read and write
clean
2D4D07E000
stack
page read and write
clean
1FAE1200000
unkown image
page readonly
clean
940000
heap default
page read and write
clean
2E9A000
unkown image
page readonly
clean
18F11B83000
unkown
page read and write
clean
7FF5C34B8000
unkown image
page readonly
clean
2F4F000
unkown image
page readonly
clean
6F321000
unkown image
page execute and write copy
clean
7F570000
unkown image
page readonly
clean
7FF561677000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
C1E000
stack
page read and write
clean
1FAE0BE0000
heap private
page read and write
clean
1AB10110000
unkown
page read and write
clean
7FF5C3B38000
unkown image
page readonly
clean
18F11110000
heap default
page read and write
clean
4EE5000
unkown
page read and write
clean
18F11B83000
unkown
page read and write
clean
7F552000
unkown image
page readonly
clean
7FAF0000
unkown image
page readonly
clean
18F11B87000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FF509A4A000
unkown image
page readonly
clean
1FAE0BF0000
unkown image
page readonly
clean
18F112DD000
unkown
page read and write
clean
7FF509C99000
unkown image
page readonly
clean
34D0000
heap default
page read and write
clean
1AB0F275000
unkown
page read and write
clean
7FF5C3CF7000
unkown image
page readonly
clean
7F450000
unkown image
page readonly
clean
7FAA0000
unkown image
page readonly
clean
18F11B6C000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
7FF509A15000
unkown image
page readonly
clean
6F366000
unkown image
page read and write
clean
9F6FFF000
stack
page read and write
clean
18F11B79000
unkown
page read and write
clean
7DF529940000
unkown image
page readonly
clean
2F08000
unkown image
page readonly
clean
1010000
unkown image
page readonly
clean
2F5D000
unkown image
page readonly
clean
18F11B95000
unkown
page read and write
clean
7F330000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
8D0000
heap default
page read and write
clean
7FF5C3C49000
unkown image
page readonly
clean
7FA62000
unkown image
page readonly
clean
7DF529942000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
1AB0F2A6000
unkown
page read and write
clean
4E95000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
7FF5617B3000
unkown image
page readonly
clean
6F322000
unkown image
page execute read
clean
4921000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
17CB49D0000
heap private
page read and write
clean
2F78000
unkown image
page readonly
clean
7FF51FA25000
unkown image
page readonly
clean
D79000
unkown
page read and write
clean
7FF509A7E000
unkown image
page readonly
clean
18CB24B0000
unkown
page read and write
clean
1AB14B50000
unkown
page read and write
clean
3330000
unkown image
page readonly
clean
18F11B85000
unkown
page read and write
clean
7F572000
unkown image
page readonly
clean
7FAB0000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
4EC4000
unkown
page read and write
clean
17CB4C3C000
unkown
page read and write
clean
7F590000
unkown image
page readonly
clean
18F110E0000
unkown image
page readonly
clean
6F320000
unkown image
page readonly
clean
1AB0F302000
unkown
page read and write
clean
D6B000
unkown
page read and write
clean
7DF529952000
unkown image
page readonly
clean
7DF513AE2000
unkown image
page readonly
clean
18CB180C000
unkown
page read and write
clean
7FF5C3BE4000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7C200CB000
unkown
page read and write
clean
570000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
2EA1000
unkown image
page readonly
clean
7FAF0000
unkown image
page readonly
clean
FBF000
stack
page read and write
clean
2F2E000
unkown image
page readonly
clean
7E3000
unkown
page read and write
clean
7FF509AF3000
unkown image
page readonly
clean
7DF5ED8C0000
unkown image
page readonly
clean
18F11B9F000
unkown
page read and write
clean
7FAE2000
unkown image
page readonly
clean
1FC3D892000
unkown
page read and write
clean
17CB4D02000
unkown
page read and write
clean
353B000
unkown
page read and write
clean
1AB0FB18000
unkown
page read and write
clean
1FC3DCD0000
unkown image
page readonly
clean
1AB0F28F000
unkown
page read and write
clean
7FF509911000
unkown image
page readonly
clean
CD0000
heap default
page read and write
clean
10000000
unkown
page read and write
clean
CC0000
heap private
page read and write
clean
505F000
stack
page read and write
clean
17CB4C02000
unkown
page read and write
clean
18F11255000
unkown
page read and write
clean
1FC3D862000
unkown
page read and write
clean
152C56C000
unkown
page read and write
clean
7DF529960000
unkown image
page readonly
clean
1AB14600000
unkown
page read and write
clean
7FF5098C9000
unkown image
page readonly
clean
E8A000
heap default
page read and write
clean
47CA37E000
stack
page read and write
clean
18F11B8E000
unkown
page read and write
clean
7DF533560000
unkown image
page readonly
clean
7C204F9000
stack
page read and write
clean
4EC7000
unkown
page read and write
clean
5F0000
unkown image
page readonly
clean
18F11B4E000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
D6E000
unkown
page read and write
clean
1AB0F1A0000
unkown
page read and write
clean
7FF51F753000
unkown image
page readonly
clean
7FAD0000
unkown image
page readonly
clean
7DF469510000
unkown image
page readonly
clean
7FAB2000
unkown image
page readonly
clean
7FF51FB67000
unkown image
page readonly
clean
2E92000
unkown image
page readonly
clean
7FF509BBE000
unkown image
page readonly
clean
7FF51F74D000
unkown image
page readonly
clean
3280000
heap private
page read and write
clean
BA4000
unkown
page read and write
clean
18F11B52000
unkown
page read and write
clean
7FAB2000
unkown image
page readonly
clean
A00000
heap default
page read and write
clean
490F000
stack
page read and write
clean
4EE5000
unkown
page read and write
clean
4EA5000
unkown
page read and write
clean
18F11B72000
unkown
page read and write
clean
7FAC0000
unkown image
page readonly
clean
7FF5296D5000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FF509D07000
unkown image
page readonly
clean
10001000
unkown
page execute and read and write
clean
4EB6000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
7FF528F84000
unkown image
page readonly
clean
1AB14850000
unkown
page read and write
clean
6F348000
unkown image
page readonly
clean
108E000
stack
page read and write
clean
7FAA2000
unkown image
page readonly
clean
7FAD2000
unkown image
page readonly
clean
7FF5C37A1000
unkown image
page readonly
clean
6B0000
unkown image
page readonly
clean
7DF5CDAA2000
unkown image
page readonly
clean
103F000
stack
page read and write
clean
A30000
heap default
page read and write
clean
7F560000
unkown image
page readonly
clean
7DF5ED8D0000
unkown image
page readonly
clean
7F572000
unkown image
page readonly
clean
18F11B80000
unkown
page read and write
clean
4EC4000
unkown
page read and write
clean
18F112BE000
unkown
page read and write
clean
7DF533570000
unkown image
page readonly
clean
7DF56B660000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
7FF5C3CA1000
unkown image
page readonly
clean
7F572000
unkown image
page readonly
clean
D00000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7F590000
unkown image
page readonly
clean
4EB2000
unkown
page read and write
clean
7DF529940000
unkown image
page readonly
clean
920000
unkown image
page readonly
clean
7FF5C3CB4000
unkown image
page readonly
clean
195A4402000
unkown
page read and write
clean
1AB0F400000
unkown image
page readonly
clean
7FF5C3C1A000
unkown image
page readonly
clean
7FF56BB93000
unkown image
page readonly
clean
1AB0F9F3000
unkown
page read and write
clean
7FF5C3A2E000
unkown image
page readonly
clean
195A4230000
heap default
page read and write
clean
4E40000
unkown
page read and write
clean
760000
unkown image
page readonly
clean
100B000
unkown
page read and write
clean
7FF5E3A56000
unkown image
page readonly
clean
7FAE0000
unkown image
page readonly
clean
7FF56BE28000
unkown image
page readonly
clean
10000000
unkown
page read and write
clean
18F11940000
unkown image
page read and write
clean
7FF509C5D000
unkown image
page readonly
clean
7F560000
unkown image
page readonly
clean
6F37E000
unkown image
page read and write
clean
7FF561851000
unkown image
page readonly
clean
18CB180C000
unkown
page read and write
clean
7FF56BEDF000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7FF52978B000
unkown image
page readonly
clean
7FF5296E6000
unkown image
page readonly
clean
2E6E000
unkown image
page readonly
clean
195A444A000
unkown
page read and write
clean
18CB2530000
unkown
page read and write
clean
7DF5ED8D0000
unkown image
page readonly
clean
4EBB000
unkown
page read and write
clean
4EA5000
unkown
page read and write
clean
7F340000
unkown image
page readonly
clean
7DF5CDAB0000
unkown image
page readonly
clean
9F6EFF000
stack
page read and write
clean
4C0000
unkown image
page read and write
clean
18F12002000
unkown
page read and write
clean
18F111F0000
unkown image
page readonly
clean
7FF56BEEF000
unkown image
page readonly
clean
1AB0F302000
unkown
page read and write
clean
7F9D0000
unkown image
page readonly
clean
7F580000
unkown image
page readonly
clean
7FF5617ED000
unkown image
page readonly
clean
18F11B25000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
2EAB000
unkown image
page readonly
clean
F80000
heap private
page read and write
clean
840000
unkown image
page readonly
clean
2DA5000
unkown image
page readonly
clean
2D4D4FF000
stack
page read and write
clean
7FF5618A7000
unkown image
page readonly
clean
4EA5000
unkown
page read and write
clean
7FF5297C7000
unkown image
page readonly
clean
74B000
unkown
page read and write
clean
1AB148B1000
unkown
page read and write
clean
17CB5000000
unkown image
page readonly
clean
A54000
unkown
page read and write
clean
1FAE1402000
unkown
page read and write
clean
7FAE2000
unkown image
page readonly
clean
2E92000
unkown image
page readonly
clean
9F0000
unkown image
page read and write
clean
BA4000
unkown
page read and write
clean
7FF529719000
unkown image
page readonly
clean
4EBB000
unkown
page read and write
clean
C50000
unkown image
page readonly
clean
7FF51FAB3000
unkown image
page readonly
clean
7FF56BF26000
unkown image
page readonly
clean
18F11930000
unkown
page read and write
clean
7F570000
unkown image
page readonly
clean
2E9D000
unkown image
page readonly
clean
18F11930000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
CDA000
heap default
page read and write
clean
4EB6000
unkown
page read and write
clean
7DF513AF2000
unkown image
page readonly
clean
643000
unkown
page read and write
clean
18F1206A000
unkown
page read and write
clean
7FF5E3AC1000
unkown image
page readonly
clean
3910000
heap private
page read and write
clean
7FF5C3C47000
unkown image
page readonly
clean
18F11B85000
unkown
page read and write
clean
2EA5000
unkown image
page readonly
clean
7F570000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7FF5C3B00000
unkown image
page readonly
clean
2E9D000
unkown image
page readonly
clean
7FF51FABD000
unkown image
page readonly
clean
17CB5202000
unkown
page read and write
clean
7277D5B000
unkown
page read and write
clean
1020000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
6F322000
unkown image
page execute read
clean
350B000
unkown
page read and write
clean
1FC3D670000
unkown image
page read and write
clean
1FAE0C40000
heap default
page read and write
clean
2EAB000
unkown image
page readonly
clean
1AB0F277000
unkown
page read and write
clean
6F320000
unkown image
page readonly
clean
18F11B8C000
unkown
page read and write
clean
DD0000
unkown image
page readonly
clean
7FF51FB6B000
unkown image
page readonly
clean
7FAD0000
unkown image
page readonly
clean
17CB4C2A000
unkown
page read and write
clean
1AB0FB59000
unkown
page read and write
clean
7FF509581000
unkown image
page readonly
clean
1FAE0E76000
unkown
page read and write
clean
7FF56BF39000
unkown image
page readonly
clean
18CB17C0000
heap default
page read and write
clean
4D0000
unkown image
page readonly
clean
7DF575DA0000
unkown image
page readonly
clean
6F366000
unkown image
page read and write
clean
7FAA0000
unkown image
page readonly
clean
7FF5C3A00000
unkown image
page readonly
clean
7FF5C3A9D000
unkown image
page readonly
clean
195A4A02000
unkown
page read and write
clean
2F38000
unkown image
page readonly
clean
7FF561357000
unkown image
page readonly
clean
18F112A7000
unkown
page read and write
clean
1AB0F307000
unkown
page read and write
clean
D75000
unkown
page read and write
clean
7FF56186B000
unkown image
page readonly
clean
195A4413000
unkown
page read and write
clean
17CB4B10000
unkown image
page readonly
clean
7FF5E3A69000
unkown image
page readonly
clean
7FAB0000
unkown image
page readonly
clean
17CB4C00000
unkown
page read and write
clean
9F6B7C000
stack
page read and write
clean
4E30000
unkown image
page readonly
clean
2F42000
unkown image
page readonly
clean
1AB14849000
unkown
page read and write
clean
1FAE1380000
unkown image
page readonly
clean
18F11B1B000
unkown
page read and write
clean
3920000
unkown image
page readonly
clean
4CAF000
stack
page read and write
clean
7FF5617C6000
unkown image
page readonly
clean
1AB14A60000
unkown
page read and write
clean
2D6C000
unkown image
page readonly
clean
1AB14902000
unkown
page read and write
clean
DE0000
unkown image
page readonly
clean
4EBF000
unkown
page read and write
clean
7FF529784000
unkown image
page readonly
clean
18F110A0000
unkown image
page read and write
clean
18F110C0000
unkown image
page readonly
clean
1AB148B2000
unkown
page read and write
clean
195A4600000
unkown image
page readonly
clean
1FC3DAD0000
unkown image
page readonly
clean
CAD000
unkown
page read and write
clean
18F11B8F000
unkown
page read and write
clean
2F33000
unkown image
page readonly
clean
2F5D000
unkown image
page readonly
clean
2F33000
unkown image
page readonly
clean
1FC3D889000
unkown
page read and write
clean
7FF56BDF8000
unkown image
page readonly
clean
568000
unkown
page read and write
clean
B80000
unkown image
page readonly
clean
2F3E000
unkown image
page readonly
clean
7FF561893000
unkown image
page readonly
clean
7DF56B640000
unkown image
page readonly
clean
7FF509D33000
unkown image
page readonly
clean
18CB1750000
heap private
page read and write
clean
1AB0F070000
unkown image
page readonly
clean
E70000
unkown image
page readonly
clean
CB0000
heap private
page read and write
clean
7FF509D1A000
unkown image
page readonly
clean
7FAD2000
unkown image
page readonly
clean
1010000
unkown image
page readonly
clean
7FF509C41000
unkown image
page readonly
clean
7FF509D36000
unkown image
page readonly
clean
CD0000
unkown image
page read and write
clean
18F11B7F000
unkown
page read and write
clean
18F11B7B000
unkown
page read and write
clean
18F11B8E000
unkown
page read and write
clean
7FF5C3BF1000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
4EC7000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
10025000
unkown
page read and write
clean
7FF56BF12000
unkown image
page readonly
clean
18F11B85000
unkown
page read and write
clean
18F11200000
unkown
page read and write
clean
18F11B9B000
unkown
page read and write
clean
4EBF000
unkown
page read and write
clean
4DCE000
stack
page read and write
clean
2F70000
unkown image
page readonly
clean
18F11B91000
unkown
page read and write
clean
4A5E000
stack
page read and write
clean
31E0000
unkown image
page readonly
clean
5D0000
unkown image
page readonly
clean
18F11B9E000
unkown
page read and write
clean
2F29000
unkown image
page readonly
clean
8B0000
unkown image
page readonly
clean
7278AF9000
stack
page read and write
clean
1AB1488A000
unkown
page read and write
clean
7DF529960000
unkown image
page readonly
clean
7FA60000
unkown image
page readonly
clean
7F950000
unkown image
page readonly
clean
2EAB000
unkown image
page readonly
clean
18F11249000
unkown
page read and write
clean
195A4400000
unkown
page read and write
clean
770000
unkown
page read and write
clean
18F11B8E000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FF5C3C36000
unkown image
page readonly
clean
B60000
unkown
page read and write
clean
18F112A5000
unkown
page read and write
clean
7FAE0000
unkown image
page readonly
clean
1FAE0E2A000
unkown
page read and write
clean
7FF5E3928000
unkown image
page readonly
clean
7FF5616B5000
unkown image
page readonly
clean
7FF56BC51000
unkown image
page readonly
clean
498C000
stack
page read and write
clean
F70000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FF509C20000
unkown image
page readonly
clean
1AB0F213000
unkown
page read and write
clean
7F9D0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
2EAB000
unkown image
page readonly
clean
34B0000
unkown image
page readonly
clean
7FF5C89BB000
unkown image
page readonly
clean
2EA1000
unkown image
page readonly
clean
18F11B83000
unkown
page read and write
clean
18F11B85000
unkown
page read and write
clean
7FF5E3A5D000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
6F320000
unkown image
page readonly
clean
4E65000
unkown
page read and write
clean
18CB15A0000
unkown image
page readonly
clean
1AB0F0A0000
heap default
page read and write
clean
7FF51FBA7000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7FF5C3589000
unkown image
page readonly
clean
7DF56B642000
unkown image
page readonly
clean
1AB10590000
unkown
page read and write
clean
18F1124D000
unkown
page read and write
clean
18F11256000
unkown
page read and write
clean
2F2E000
unkown image
page readonly
clean
7FF56BDB7000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
2F3E000
unkown image
page readonly
clean
4E9F000
unkown
page read and write
clean
2F08000
unkown image
page readonly
clean
17CB4A10000
unkown image
page readonly
clean
7FF5C3CF7000
unkown image
page readonly
clean
7FF561854000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
DB5000
unkown
page read and write
clean
2F08000
unkown image
page readonly
clean
7FF5E389C000
unkown image
page readonly
clean
2E7E000
unkown image
page readonly
clean
4D2E000
stack
page read and write
clean
18CB24D0000
unkown
page read and write
clean
17CB4C89000
unkown
page read and write
clean
4EC4000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
2E58000
unkown image
page readonly
clean
570000
unkown image
page readonly
clean
DE0000
heap default
page read and write
clean
7FAE2000
unkown image
page readonly
clean
4E9A000
unkown
page read and write
clean
1AB145E0000
unkown
page read and write
clean
7FF5617E6000
unkown image
page readonly
clean
7FF56BD7A000
unkown image
page readonly
clean
7FAE0000
unkown image
page readonly
clean
2F70000
unkown image
page readonly
clean
18F11B94000
unkown
page read and write
clean
10FD000
unkown
page read and write
clean
17CB5180000
unkown image
page readonly
clean
7FF5C3CB7000
unkown image
page readonly
clean
18F11BA5000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
805C98A000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
7FF509BF5000
unkown image
page readonly
clean
7FAD2000
unkown image
page readonly
clean
1AB145F0000
unkown
page read and write
clean
1AB0F26D000
unkown
page read and write
clean
2EF1000
unkown image
page readonly
clean
1FC3DAC0000
heap private
page read and write
clean
7FA70000
unkown image
page readonly
clean
50AE000
unkown
page read and write
clean
2EF1000
unkown image
page readonly
clean
17CB4E00000
unkown image
page readonly
clean
D20000
unkown image
page readonly
clean
7F590000
unkown image
page readonly
clean
7FAD0000
unkown image
page readonly
clean
7DF56B642000
unkown image
page readonly
clean
F04000
unkown
page read and write
clean
5086000
unkown
page read and write
clean
10CC000
stack
page read and write
clean
BA4000
unkown
page read and write
clean
7FF56BFD3000
unkown image
page readonly
clean
2E77000
unkown image
page readonly
clean
7FF56144D000
unkown image
page readonly
clean
7FF5297B6000
unkown image
page readonly
clean
10FE000
stack
page read and write
clean
7FF5C3CAD000
unkown image
page readonly
clean
2E7E000
unkown image
page readonly
clean
1AB1485E000
unkown
page read and write
clean
6F320000
unkown image
page readonly
clean
7F582000
unkown image
page readonly
clean
580000
unkown image
page readonly
clean
7FA70000
unkown image
page readonly
clean
2F1D000
unkown image
page readonly
clean
18F11930000
unkown
page read and write
clean
AB5000
unkown
page read and write
clean
18F1125C000
unkown
page read and write
clean
7FAD2000
unkown image
page readonly
clean
195A4990000
unkown
page read and write
clean
7FF51F9B5000
unkown image
page readonly
clean
7FF56BF9D000
unkown image
page readonly
clean
7FA50000
unkown image
page readonly
clean
18F11B92000
unkown
page read and write
clean
91E000
stack
page read and write
clean
1FC3D7F0000
unkown image
page readonly
clean
6F321000
unkown image
page execute and write copy
clean
7FAE0000
unkown image
page readonly
clean
6F381000
unkown image
page readonly
clean
18F11B90000
unkown
page read and write
clean
D50000
unkown image
page readonly
clean
2F42000
unkown image
page readonly
clean
1AB1485B000
unkown
page read and write
clean
7FF5296D3000
unkown image
page readonly
clean
7C2057E000
stack
page read and write
clean
195A4200000
unkown image
page readonly
clean
F90000
unkown image
page readonly
clean
7DF5ED8B2000
unkown image
page readonly
clean
7DF533572000
unkown image
page readonly
clean
7FF5617D2000
unkown image
page readonly
clean
6F322000
unkown image
page execute read
clean
7FAB2000
unkown image
page readonly
clean
7DF575D92000
unkown image
page readonly
clean
6F366000
unkown image
page read and write
clean
18F11B9D000
unkown
page read and write
clean
7FF561896000
unkown image
page readonly
clean
195A4513000
unkown
page read and write
clean
7FF5099ED000
unkown image
page readonly
clean
7FF5C34B4000
unkown image
page readonly
clean
7FF5C3852000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
10027000
unkown
page read and write
clean
6F321000
unkown image
page execute and write copy
clean
1FAE0BD0000
unkown image
page read and write
clean
BA4000
unkown
page read and write
clean
1AB0FB18000
unkown
page read and write
clean
343F000
stack
page read and write
clean
7DF56B652000
unkown image
page readonly
clean
152CBF7000
stack
page read and write
clean
18F11780000
unkown image
page readonly
clean
D0B000
unkown
page read and write
clean
7FAE0000
unkown image
page readonly
clean
18CB180D000
unkown
page read and write
clean
18CB2270000
unkown
page read and write
clean
1010000
unkown image
page readonly
clean
7FF561351000
unkown image
page readonly
clean
18F11BB0000
unkown
page read and write
clean
7F320000
unkown image
page readonly
clean
4EA4000
unkown
page read and write
clean
7FF5C3AE6000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
2EA5000
unkown image
page readonly
clean
D79000
unkown
page read and write
clean
7FF509C24000
unkown image
page readonly
clean
1FC3D800000
unkown image
page readonly
clean
2F54000
unkown image
page readonly
clean
4EBB000
unkown
page read and write
clean
10001000
unkown
page execute and read and write
clean
18CB180C000
unkown
page read and write
clean
18CB17B0000
unkown
page read and write
clean
7FF5617BD000
unkown image
page readonly
clean
5D0000
unkown image
page readonly
clean
7FF5E32B9000
unkown image
page readonly
clean
1AB0F9F0000
unkown
page read and write
clean
2EA1000
unkown image
page readonly
clean
7FF509A44000
unkown image
page readonly
clean
7FF5C3AC7000
unkown image
page readonly
clean
7F562000
unkown image
page readonly
clean
1FC3D85B000
heap default
page read and write
clean
17CB4C13000
unkown
page read and write
clean
7FF5617AF000
unkown image
page readonly
clean
34DA000
heap default
page read and write
clean
17CB4C7C000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
1AB14740000
unkown
page read and write
clean
7FF5617F7000
unkown image
page readonly
clean
18F11B90000
unkown
page read and write
clean
2F70000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FAF0000
unkown image
page readonly
clean
72784FE000
stack
page read and write
clean
7F470000
unkown image
page readonly
clean
4EC7000
unkown
page read and write
clean
6F367000
unkown image
page write copy
clean
1AB148A8000
unkown
page read and write
clean
CC0000
heap private
page read and write
clean
2D95000
unkown image
page readonly
clean
7FAE2000
unkown image
page readonly
clean
7FF509BC5000
unkown image
page readonly
clean
7F562000
unkown image
page readonly
clean
17CB49E0000
unkown image
page readonly
clean
CF4000
unkown
page read and write
clean
1AB14A60000
unkown
page read and write
clean
10027000
unkown
page read and write
clean
CC7000
heap private
page read and write
clean
18F11BA5000
unkown
page read and write
clean
2DA5000
unkown image
page readonly
clean
1AB1483C000
unkown
page read and write
clean
7F582000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
7FAD0000
unkown image
page readonly
clean
7FF5297B3000
unkown image
page readonly
clean
AB9000
unkown
page read and write
clean
4A9F000
stack
page read and write
clean
7FF56BFBA000
unkown image
page readonly
clean
4EBF000
unkown
page read and write
clean
C40000
unkown image
page read and write
clean
7FF509C34000
unkown image
page readonly
clean
4E9A000
unkown
page read and write
clean
7FF5296DE000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
2F70000
unkown image
page readonly
clean
7FF56BDA7000
unkown image
page readonly
clean
7FF509A57000
unkown image
page readonly
clean
6F37E000
unkown image
page read and write
clean
1AB14A30000
unkown
page read and write
clean
18F11B8C000
unkown
page read and write
clean
6F348000
unkown image
page readonly
clean
7DF56B640000
unkown image
page readonly
clean
4931000
unkown
page read and write
clean
7DF575DA0000
unkown image
page readonly
clean
2DA5000
unkown image
page readonly
clean
D70000
unkown image
page readonly
clean
C60000
heap private
page read and write
clean
1AB0F030000
unkown image
page read and write
clean
1AB0F2F9000
unkown
page read and write
clean
7FAF0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FF509A46000
unkown image
page readonly
clean
1FAE0D20000
unkown image
page readonly
clean
2E5C000
unkown image
page readonly
clean
152CAFE000
stack
page read and write
clean
1AB14700000
unkown
page read and write
clean
1FAE0C20000
unkown image
page readonly
clean
7DF575D92000
unkown image
page readonly
clean
1AB147D0000
unkown
page read and write
clean
18F11400000
unkown image
page readonly
clean
18F11B97000
unkown
page read and write
clean
7FF509CF7000
unkown image
page readonly
clean
7FF5C3B75000
unkown image
page readonly
clean
18F1125B000
unkown
page read and write
clean
2E5B000
unkown image
page readonly
clean
18F11B6F000
unkown
page read and write
clean
4EE5000
unkown
page read and write
clean
2F08000
unkown image
page readonly
clean
2E7E000
unkown image
page readonly
clean
D03000
unkown
page read and write
clean
2F5D000
unkown image
page readonly
clean
4E9F000
unkown
page read and write
clean
1FC3D881000
unkown
page read and write
clean
2D4E000
unkown image
page readonly
clean
18F11B8C000
unkown
page read and write
clean
47CA0FE000
stack
page read and write
clean
BA4000
unkown
page read and write
clean
1AB14815000
unkown
page read and write
clean
7FF5C3776000
unkown image
page readonly
clean
760000
unkown image
page readonly
clean
7FF509C4F000
unkown image
page readonly
clean
7FF51FB7A000
unkown image
page readonly
clean
1AB0F050000
unkown image
page readonly
clean
1FC3D810000
unkown image
page read and write
clean
1AB14730000
unkown
page read and write
clean
7F590000
unkown image
page readonly
clean
72785FB000
stack
page read and write
clean
1250000
heap default
page read and write
clean
6F366000
unkown image
page read and write
clean
4EC7000
unkown
page read and write
clean
6F37E000
unkown image
page read and write
clean
2EA5000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
4B5D000
stack
page read and write
clean
7FF509B81000
unkown image
page readonly
clean
7DF529950000
unkown image
page readonly
clean
7FF509A07000
unkown image
page readonly
clean
195A41D0000
heap private
page read and write
clean
18CB1CD0000
unkown image
page readonly
clean
6F322000
unkown image
page execute read
clean
7FF5E3391000
unkown image
page readonly
clean
1AB0F200000
unkown
page read and write
clean
4C6E000
stack
page read and write
clean
2F1B000
unkown image
page readonly
clean
4E10000
unkown
page read and write
clean
1AB0FB02000
unkown
page read and write
clean
DC4000
unkown
page read and write
clean
7FAC0000
unkown image
page readonly
clean
2D4CD9E000
stack
page read and write
clean
18F11BA5000
unkown
page read and write
clean
18F12002000
unkown
page read and write
clean
7FAF0000
unkown image
page readonly
clean
2D4E000
unkown image
page readonly
clean
6F37E000
unkown image
page read and write
clean
18F11B8C000
unkown
page read and write
clean
7FAE2000
unkown image
page readonly
clean
7FF509D42000
unkown image
page readonly
clean
1AB14800000
unkown
page read and write
clean
5D0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FF56BF2D000
unkown image
page readonly
clean
7FF509CFD000
unkown image
page readonly
clean
1FAE13A0000
unkown
page read and write
clean
7FF56BA91000
unkown image
page readonly
clean
7FF509C29000
unkown image
page readonly
clean
18F11890000
unkown image
page readonly
clean
7FF51F867000
unkown image
page readonly
clean
7FF56BEE1000
unkown image
page readonly
clean
2E9A000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
BA0000
heap default
page read and write
clean
7278177000
stack
page read and write
clean
18CB15B0000
unkown image
page readonly
clean
125B000
heap default
page read and write
clean
BA4000
unkown
page read and write
clean
7FF5C3773000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
2E6E000
unkown image
page readonly
clean
2F1B000
unkown image
page readonly
clean
18F11258000
unkown
page read and write
clean
7DF431430000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7D0000
unkown image
page readonly
clean
7FAC0000
unkown image
page readonly
clean
7FF5C3CCA000
unkown image
page readonly
clean
10000000
unkown
page read and write
clean
6F320000
unkown image
page readonly
clean
7F580000
unkown image
page readonly
clean
2E9A000
unkown image
page readonly
clean
1AB0F288000
unkown
page read and write
clean
1AB0FB13000
unkown
page read and write
clean
FCD000
unkown
page read and write
clean
1AB0FA02000
unkown
page read and write
clean
1FAE0F00000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
2F38000
unkown image
page readonly
clean
760000
unkown image
page readonly
clean
1FAE0E7A000
unkown
page read and write
clean
7FF5617CA000
unkown image
page readonly
clean
7FF56BCA7000
unkown image
page readonly
clean
7FF5617F9000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
6A0000
unkown image
page read and write
clean
7FAB0000
unkown image
page readonly
clean
6F367000
unkown image
page write copy
clean
2E81000
unkown image
page readonly
clean
1AB0F22A000
unkown
page read and write
clean
7FF51F9B0000
unkown image
page readonly
clean
34F0000
heap default
page read and write
clean
3323000
unkown
page read and write
clean
8C0000
unkown
page read and write
clean
2F29000
unkown image
page readonly
clean
10BE000
stack
page read and write
clean
BA4000
unkown
page read and write
clean
1AB148F3000
unkown
page read and write
clean
10001000
unkown
page execute and read and write
clean
B00000
unkown image
page readonly
clean
195A443C000
unkown
page read and write
clean
7FF509ADA000
unkown image
page readonly
clean
18F11308000
unkown
page read and write
clean
4EBB000
unkown
page read and write
clean
CB0000
unkown image
page readonly
clean
2D4E000
unkown image
page readonly
clean
7FF51FB96000
unkown image
page readonly
clean
7F570000
unkown image
page readonly
clean
7FF509AEF000
unkown image
page readonly
clean
DA0000
unkown
page read and write
clean
2D40000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
6F381000
unkown image
page readonly
clean
2E77000
unkown image
page readonly
clean
DC4000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
47CA477000
stack
page read and write
clean
7FF529774000
unkown image
page readonly
clean
18F11B93000
unkown
page read and write
clean
4D90000
unkown
page read and write
clean
7FF5E3A0F000
unkown image
page readonly
clean
7DF5CDAB0000
unkown image
page readonly
clean
7DF000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FAA2000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
17CB5190000
unkown
page read and write
clean
805CDF9000
stack
page read and write
clean
3500000
unkown image
page readonly
clean
7FF509BB1000
unkown image
page readonly
clean
7F580000
unkown image
page readonly
clean
18F11B56000
unkown
page read and write
clean
7FF56BDF5000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
2D4E000
unkown image
page readonly
clean
7FF509C53000
unkown image
page readonly
clean
7FF52977D000
unkown image
page readonly
clean
7FF51FB5D000
unkown image
page readonly
clean
10000000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FF5E3A24000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
BA5000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
2F1B000
unkown image
page readonly
clean
9F6C7B000
stack
page read and write
clean
2F54000
unkown image
page readonly
clean
7278DFF000
stack
page read and write
clean
510000
unkown image
page read and write
clean
152C87E000
stack
page read and write
clean
4EB6000
unkown
page read and write
clean
7FF50952F000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
4D90000
unkown
page read and write
clean
7FAE2000
unkown image
page readonly
clean
18CB18C0000
unkown
page read and write
clean
4E9A000
unkown
page read and write
clean
18F11B94000
unkown
page read and write
clean
1FC3D889000
unkown
page read and write
clean
7DF5ED8B0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
195A4210000
unkown image
page readonly
clean
17CB4A30000
heap default
page read and write
clean
7F582000
unkown image
page readonly
clean
18F11B9F000
unkown
page read and write
clean
7FF561453000
unkown image
page readonly
clean
7FF51F93A000
unkown image
page readonly
clean
DB5000
unkown
page read and write
clean
C50000
unkown image
page readonly
clean
4E9F000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
47CA67F000
stack
page read and write
clean
4EE5000
unkown
page read and write
clean
2F1D000
unkown image
page readonly
clean
2DA5000
unkown image
page readonly
clean
820000
unkown
page read and write
clean
7FAA0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7DF513AE2000
unkown image
page readonly
clean
DC1000
unkown
page read and write
clean
1AB148DC000
unkown
page read and write
clean
18F12002000
unkown
page read and write
clean
7FF509CF1000
unkown image
page readonly
clean
4E41000
unkown
page read and write
clean
107E000
stack
page read and write
clean
D3D000
unkown
page read and write
clean
18F12002000
unkown
page read and write
clean
18F11B19000
unkown
page read and write
clean
2F2E000
unkown image
page readonly
clean
7FF5E3B03000
unkown image
page readonly
clean
18F11BB6000
unkown
page read and write
clean
2F42000
unkown image
page readonly
clean
18F11B95000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
3180000
unkown image
page readonly
clean
9F670B000
unkown
page read and write
clean
1020000
unkown image
page readonly
clean
1FC3D893000
unkown
page read and write
clean
17CB49E0000
unkown image
page readonly
clean
7C205FB000
stack
page read and write
clean
7FF56BDD6000
unkown image
page readonly
clean
70C000
unkown
page read and write
clean
18F11316000
unkown
page read and write
clean
38D0000
unkown image
page readonly
clean
6F320000
unkown image
page readonly
clean
7FAA0000
unkown image
page readonly
clean
98B000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
7FF5E3B17000
unkown image
page readonly
clean
4D0000
unkown image
page readonly
clean
2F29000
unkown image
page readonly
clean
7FF509C9E000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
1AB14A20000
unkown
page read and write
clean
18F11B71000
unkown
page read and write
clean
2E9A000
unkown image
page readonly
clean
5086000
unkown
page read and write
clean
195A41C0000
unkown image
page read and write
clean
1AB147F0000
unkown
page read and write
clean
5BA000
unkown
page read and write
clean
18F1124E000
unkown
page read and write
clean
18F11B78000
unkown
page read and write
clean
1AB148E2000
unkown
page read and write
clean
7FF5E3AC7000
unkown image
page readonly
clean
7FF509C17000
unkown image
page readonly
clean
580000
unkown image
page readonly
clean
CB0000
unkown image
page readonly
clean
2E9A000
unkown image
page readonly
clean
7F582000
unkown image
page readonly
clean
7FAD2000
unkown image
page readonly
clean
17CB4D08000
unkown
page read and write
clean
7FF5C3C16000
unkown image
page readonly
clean
7FF51F651000
unkown image
page readonly
clean
18F11B8C000
unkown
page read and write
clean
BE9000
unkown
page read and write
clean
195A444D000
unkown
page read and write
clean
7FF56BF06000
unkown image
page readonly
clean
72783FB000
stack
page read and write
clean
195A4508000
unkown
page read and write
clean
7FF5C3CF2000
unkown image
page readonly
clean
18F11B83000
unkown
page read and write
clean
7FAD2000
unkown image
page readonly
clean
7FF51FA9F000
unkown image
page readonly
clean
7DF5ED8B2000
unkown image
page readonly
clean
17CB4C50000
unkown
page read and write
clean
1AB0F040000
heap private
page read and write
clean
6F367000
unkown image
page write copy
clean
7FAB0000
unkown image
page readonly
clean
18CB1804000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
1FAE0E13000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7C20479000
stack
page read and write
clean
7FAE0000
unkown image
page readonly
clean
4E9F000
unkown
page read and write
clean
F60000
unkown image
page read and write
clean
BA4000
unkown
page read and write
clean
7DF5CDAA0000
unkown image
page readonly
clean
7FF56BFA7000
unkown image
page readonly
clean
7FF5C39CF000
unkown image
page readonly
clean
7F332000
unkown image
page readonly
clean
18F1122A000
unkown
page read and write
clean
18F12002000
unkown
page read and write
clean
7FF561867000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FF56BFE7000
unkown image
page readonly
clean
31F0000
unkown image
page readonly
clean
7DF513B00000
unkown image
page readonly
clean
B50000
unkown image
page readonly
clean
2F05000
unkown image
page readonly
clean
4E9B000
unkown
page read and write
clean
18F11B97000
unkown
page read and write
clean
7FF51FAF7000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
CD0000
unkown image
page readonly
clean
7FF509C14000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
7FAE0000
unkown image
page readonly
clean
1AB0F23D000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FAE0000
unkown image
page readonly
clean
1FAE0F08000
unkown
page read and write
clean
7FF56BEFD000
unkown image
page readonly
clean
7FF51FAAF000
unkown image
page readonly
clean
7FF5E34C8000
unkown image
page readonly
clean
7B0000
unkown
page read and write
clean
7FF5E3A36000
unkown image
page readonly
clean
10001000
unkown
page execute and read and write
clean
1020000
unkown image
page readonly
clean
7F572000
unkown image
page readonly
clean
10025000
unkown
page read and write
clean
7DF4CB960000
unkown image
page readonly
clean
195A448A000
unkown
page read and write
clean
7FA60000
unkown image
page readonly
clean
1FC3D881000
unkown
page read and write
clean
4B1A000
stack
page read and write
clean
2EA1000
unkown image
page readonly
clean
1AB147D0000
unkown
page read and write
clean
18CB1560000
unkown image
page read and write
clean
7FF5E3951000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7FF5C3B05000
unkown image
page readonly
clean
6F366000
unkown image
page read and write
clean
BA4000
unkown
page read and write
clean
A6C000
unkown
page read and write
clean
7FF5C3A9F000
unkown image
page readonly
clean
1AB14744000
unkown
page read and write
clean
7FF509B88000
unkown image
page readonly
clean
2E9D000
unkown image
page readonly
clean
1FAE1000000
unkown image
page readonly
clean
7F9A0000
unkown image
page readonly
clean
D80000
heap default
page read and write
clean
A6B000
unkown
page read and write
clean
18F112B0000
unkown
page read and write
clean
6F348000
unkown image
page readonly
clean
DC1000
unkown
page read and write
clean
2F1B000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
4F0D000
unkown
page read and write
clean
4EA4000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FF5E3399000
unkown image
page readonly
clean
1FAE0E4F000
unkown
page read and write
clean
18F11B8E000
unkown
page read and write
clean
7DF529950000
unkown image
page readonly
clean
B30000
unkown image
page readonly
clean
D50000
unkown
page read and write
clean
7FAF0000
unkown image
page readonly
clean
1AB148FC000
unkown
page read and write
clean
7FF5C3C0D000
unkown image
page readonly
clean
4EA4000
unkown
page read and write
clean
C9B000
unkown
page read and write
clean
7DF529942000
unkown image
page readonly
clean
805CE7E000
stack
page read and write
clean
6F348000
unkown image
page readonly
clean
1AB0F314000
unkown
page read and write
clean
7FAF0000
unkown image
page readonly
clean
1AB0FB04000
unkown
page read and write
clean
9EE000
stack
page read and write
clean
18F12063000
unkown
page read and write
clean
C5D000
unkown
page read and write
clean
113E000
stack
page read and write
clean
7DF56B650000
unkown image
page readonly
clean
7FAA2000
unkown image
page readonly
clean
570000
unkown image
page readonly
clean
2D4D277000
stack
page read and write
clean
7FF5C39C5000
unkown image
page readonly
clean
7FF5C3BFF000
unkown image
page readonly
clean
D6B000
unkown
page read and write
clean
7FF5C3A30000
unkown image
page readonly
clean
580000
unkown image
page readonly
clean
18F110F0000
unkown image
page readonly
clean
2DA5000
unkown image
page readonly
clean
18CB16C0000
unkown
page read and write
clean
18F11B8F000
unkown
page read and write
clean
7F580000
unkown image
page readonly
clean
6B0000
unkown image
page readonly
clean
7FF509B17000
unkown image
page readonly
clean
6F37E000
unkown image
page read and write
clean
7FF509D04000
unkown image
page readonly
clean
7FF56185D000
unkown image
page readonly
clean
7FAE2000
unkown image
page readonly
clean
63A000
unkown
page read and write
clean
18F12002000
unkown
page read and write
clean
7DF513AE0000
unkown image
page readonly
clean
7DF533562000
unkown image
page readonly
clean
18F11B94000
unkown
page read and write
clean
7FF51FB57000
unkown image
page readonly
clean
D00000
unkown
page read and write
clean
7FF5297C7000
unkown image
page readonly
clean
7FF5617A1000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
6F367000
unkown image
page write copy
clean
2E81000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
6F381000
unkown image
page readonly
clean
4EB6000
unkown
page read and write
clean
18F11BA6000
unkown
page read and write
clean
7FF5618A2000
unkown image
page readonly
clean
7FF52970D000
unkown image
page readonly
clean
2F5D000
unkown image
page readonly
clean
18F11B00000
unkown
page read and write
clean
1AB14720000
unkown
page read and write
clean
4EBB000
unkown
page read and write
clean
520000
unkown image
page readonly
clean
1FC3D878000
unkown
page read and write
clean
7FF56BFE7000
unkown image
page readonly
clean
F70000
unkown image
page readonly
clean
18CB1740000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
7FF50952C000
unkown image
page readonly
clean
4921000
unkown
page read and write
clean
7FF5C3585000
unkown image
page readonly
clean
4E0F000
stack
page read and write
clean
F0F000
stack
page read and write
clean
2F78000
unkown image
page readonly
clean
7FF56179F000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7DF575D82000
unkown image
page readonly
clean
1AB0F2AA000
unkown
page read and write
clean
D75000
unkown
page read and write
clean
1140000
unkown
page read and write
clean
7FF5C89BB000
unkown image
page readonly
clean
2F4C000
unkown image
page readonly
clean
2EA1000
unkown image
page readonly
clean
2D4E000
unkown image
page readonly
clean
2E61000
unkown image
page readonly
clean
18F11270000
unkown
page read and write
clean
7FF56BFD6000
unkown image
page readonly
clean
2F78000
unkown image
page readonly
clean
195A4455000
unkown
page read and write
clean
152CA7B000
stack
page read and write
clean
C30000
unkown
page read and write
clean
18F11B71000
unkown
page read and write
clean
7FA52000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
5061000
unkown
page read and write
clean
7FAE2000
unkown image
page readonly
clean
2F4F000
unkown image
page readonly
clean
18F11870000
unkown
page read and write
clean
2E7E000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
18CB24C0000
unkown
page readonly
clean
6F320000
unkown image
page readonly
clean
7FF5E3B17000
unkown image
page readonly
clean
7FF52979A000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
CEB000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
BA4000
unkown
page read and write
clean
3750000
unkown image
page readonly
clean
7FF509C8D000
unkown image
page readonly
clean
6B0000
unkown image
page readonly
clean
18F11BB4000
unkown
page read and write
clean
7FF5C3BD0000
unkown image
page readonly
clean
2F05000
unkown image
page readonly
clean
18F112E3000
unkown
page read and write
clean
7FF509C97000
unkown image
page readonly
clean
2F33000
unkown image
page readonly
clean
A3B000
unkown
page read and write
clean
7FF56BE65000
unkown image
page readonly
clean
9FE000
stack
page read and write
clean
2E92000
unkown image
page readonly
clean
DD0000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
7FAA2000
unkown image
page readonly
clean
1AB0FA00000
unkown
page read and write
clean
7DF56B660000
unkown image
page readonly
clean
18CB1755000
heap private
page read and write
clean
47CA2FB000
stack
page read and write
clean
7FA50000
unkown image
page readonly
clean
7FF561857000
unkown image
page readonly
clean
195A4310000
unkown image
page readonly
clean
1FAE0F02000
unkown
page read and write
clean
195A4500000
unkown
page read and write
clean
7FA62000
unkown image
page readonly
clean
7FF51F9B8000
unkown image
page readonly
clean
18F11B8C000
unkown
page read and write
clean
4921000
unkown
page read and write
clean
1AB148FB000
unkown
page read and write
clean
580000
unkown image
page readonly
clean
2F1D000
unkown image
page readonly
clean
7F322000
unkown image
page readonly
clean
1AB0F29A000
unkown
page read and write
clean
2F78000
unkown image
page readonly
clean
7FF51FB51000
unkown image
page readonly
clean
7FF509A1F000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
2F05000
unkown image
page readonly
clean
18F112C7000
unkown
page read and write
clean
7FF529771000
unkown image
page readonly
clean
6F321000
unkown image
page execute and write copy
clean
18F11B85000
unkown
page read and write
clean
1FAE0BF0000
unkown image
page readonly
clean
4A20000
unkown
page read and write
clean
4EBF000
unkown
page read and write
clean
2EA5000
unkown image
page readonly
clean
7FF5C3AB7000
unkown image
page readonly
clean
7FF51FBA2000
unkown image
page readonly
clean
7FAD0000
unkown image
page readonly
clean
7FF5C3C3D000
unkown image
page readonly
clean
E80000
heap default
page read and write
clean
4921000
unkown
page read and write
clean
18F11250000
unkown
page read and write
clean
2E6E000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
1FAE0E00000
unkown
page read and write
clean
DC5000
unkown
page read and write
clean
2F54000
unkown image
page readonly
clean
1AB14724000
unkown
page read and write
clean
18F11313000
unkown
page read and write
clean
590000
unkown
page read and write
clean
1AB14860000
unkown
page read and write
clean
4E9F000
unkown
page read and write
clean
98F000
stack
page read and write
clean
2F33000
unkown image
page readonly
clean
DA3000
unkown
page read and write
clean
6F322000
unkown image
page execute read
clean
7FAC0000
unkown image
page readonly
clean
7FF5C3C22000
unkown image
page readonly
clean
2F5D000
unkown image
page readonly
clean
7F582000
unkown image
page readonly
clean
6F348000
unkown image
page readonly
clean
4EBF000
unkown
page read and write
clean
18F112F4000
unkown
page read and write
clean
7DF513AF0000
unkown image
page readonly
clean
7FF509D47000
unkown image
page readonly
clean
18F11BAF000
unkown
page read and write
clean
7FF5E3AC4000
unkown image
page readonly
clean
2F42000
unkown image
page readonly
clean
4EB6000
unkown
page read and write
clean
18F1123C000
unkown
page read and write
clean
4EC7000
unkown
page read and write
clean
7DF5ED8C2000
unkown image
page readonly
clean
17CB4A00000
unkown image
page readonly
clean
18F11B79000
unkown
page read and write
clean
7FF5C3BB8000
unkown image
page readonly
clean
7FF51F9E8000
unkown image
page readonly
clean
10025000
unkown
page read and write
clean
89E000
stack
page read and write
clean
4921000
unkown
page read and write
clean
18F110C0000
unkown image
page readonly
clean
BA4000
unkown
page read and write
clean
7FAA2000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
4EC7000
unkown
page read and write
clean
7FF509CF4000
unkown image
page readonly
clean
A0A000
heap default
page read and write
clean
1AB0F257000
unkown
page read and write
clean
7FF509A8B000
unkown image
page readonly
clean
10027000
unkown
page read and write
clean
7FF5098BC000
unkown image
page readonly
clean
1AB10000000
unkown
page read and write
clean
7DF427810000
unkown image
page readonly
clean
1AB0F272000
unkown
page read and write
clean
1FAE0E3C000
unkown
page read and write
clean
7FF561667000
unkown image
page readonly
clean
1AB0F080000
unkown image
page readonly
clean
2C6E000
unkown image
page readonly
clean
47CA07E000
stack
page read and write
clean
CA0000
unkown image
page readonly
clean
There are 1728 hidden memdumps, click here to show them.