IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Purchase Order PO20211027STK.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
malicious
C:\Users\user\AppData\Local\Temp\SPORENE.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Purchase Order PO20211027STK.exe
"C:\Users\user\Desktop\Purchase Order PO20211027STK.exe"
malicious
C:\Users\user\AppData\Local\Temp\SPORENE.exe
C:\Users\user\AppData\Local\Temp\SPORENE.exe
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
C:\Users\user\AppData\Local\Temp\SPORENE.exe
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
http://nsis.sf.net/NSIS_ErrorError
unknown
clean
https://onedrive.live.com/download?cid=5A15FDA1AE98540B&r
clean

Domains

Name
IP
Malicious
onedrive.live.com
unknown
clean
ervtqq.bl.files.1drv.com
unknown
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
1300000
unkown
page execute and read and write
malicious
1300000
unkown
page execute and read and write
malicious
7FF5CE642000
unkown image
page readonly
clean
1D10000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
1C742600000
unkown
page read and write
clean
16DF3369000
unkown
page read and write
clean
1C484A20000
unkown image
page read and write
clean
1A153800000
unkown image
page readonly
clean
1C468108000
unkown
page read and write
clean
22FF000
stack
page read and write
clean
1C7422E4000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FF539AB7000
unkown image
page readonly
clean
7DF5D84C0000
unkown image
page readonly
clean
1C73D000000
unkown image
page readonly
clean
16DF2C21000
unkown
page read and write
clean
19478665000
unkown
page read and write
clean
16DF3399000
unkown
page read and write
clean
7DF4ABF20000
unkown image
page readonly
clean
1C467E10000
heap default
page read and write
clean
7FF5A4277000
unkown image
page readonly
clean
1C73CE13000
unkown
page read and write
clean
16DF33BB000
unkown
page read and write
clean
7FF5C78A8000
unkown image
page readonly
clean
7FF59D944000
unkown image
page readonly
clean
61A4779000
stack
page read and write
clean
1C742180000
unkown
page read and write
clean
7FF59D861000
unkown image
page readonly
clean
1C73E0F3000
unkown
page read and write
clean
1C484D30000
unkown
page read and write
clean
197E000
stack
page read and write
clean
7FF5903AF000
unkown image
page readonly
clean
7FF590497000
unkown image
page readonly
clean
7FF59CDAD000
unkown image
page readonly
clean
7FF5CE558000
unkown image
page readonly
clean
1C484BD9000
unkown
page read and write
clean
7FF59CE17000
unkown image
page readonly
clean
7FF5CE63A000
unkown image
page readonly
clean
7FF5905D1000
unkown image
page readonly
clean
A6687E000
stack
page read and write
clean
A66D7B000
stack
page read and write
clean
16DF3900000
unkown
page read and write
clean
7F5C0000
unkown image
page readonly
clean
7DF4CF6D0000
unkown image
page readonly
clean
7FF5CE61F000
unkown image
page readonly
clean
12FC000
unkown
page read and write
clean
1EF0000
unkown image
page readonly
clean
1C73E0F0000
unkown
page read and write
clean
1A153A00000
unkown image
page readonly
clean
7FF59CB0D000
unkown image
page readonly
clean
1C485140000
unkown image
page readonly
clean
1C73CD20000
unkown image
page readonly
clean
7FF5CE4D7000
unkown image
page readonly
clean
540E4FF000
stack
page read and write
clean
7C2EC7F000
stack
page read and write
clean
7FF59CDB9000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
F60000
unkown image
page readonly
clean
7FF5905FA000
unkown image
page readonly
clean
16DF29B0000
heap private
page read and write
clean
7FF59DA0A000
unkown image
page readonly
clean
7DF5A77D0000
unkown image
page readonly
clean
7FF59CDB7000
unkown image
page readonly
clean
16DF337A000
unkown
page read and write
clean
1C484BE0000
unkown
page read and write
clean
7C2E6FE000
stack
page read and write
clean
1C73D415000
unkown
page read and write
clean
7FF59D2B1000
unkown image
page readonly
clean
7FF5C7517000
unkown image
page readonly
clean
7FF5A41BF000
unkown image
page readonly
clean
7FF5A4135000
unkown image
page readonly
clean
1C73CE73000
unkown
page read and write
clean
7DF5AE052000
unkown image
page readonly
clean
7FF59047F000
unkown image
page readonly
clean
7F5D2000
unkown image
page readonly
clean
7DF5A6C02000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7C2E97F000
stack
page read and write
clean
16DF2C53000
unkown
page read and write
clean
7FF5CE6D7000
unkown image
page readonly
clean
1A15364B000
unkown
page read and write
clean
7FF5399C3000
unkown image
page readonly
clean
1C484CF0000
unkown
page read and write
clean
16DF2C4C000
unkown
page read and write
clean
16DF31E0000
unkown
page read and write
clean
7F5E0000
unkown image
page readonly
clean
7FF5CE669000
unkown image
page readonly
clean
7FF539AA3000
unkown image
page readonly
clean
7DF5A6C20000
unkown image
page readonly
clean
1A1534F0000
unkown image
page readonly
clean
2FBB7F000
stack
page read and write
clean
16DF29E0000
unkown image
page readonly
clean
7FF5905B4000
unkown image
page readonly
clean
1C484A40000
unkown image
page readonly
clean
16DF2D13000
unkown
page read and write
clean
1C73DD40000
unkown image
page readonly
clean
A667FE000
stack
page read and write
clean
7FF5A3D61000
unkown image
page readonly
clean
1C485980000
unkown
page readonly
clean
1B0000
unkown image
page readonly
clean
A6657B000
stack
page read and write
clean
16DF3802000
unkown
page read and write
clean
A6647E000
stack
page read and write
clean
7FF5CE667000
unkown image
page readonly
clean
7DF5AE050000
unkown image
page readonly
clean
7FF59CB1A000
unkown image
page readonly
clean
194785F0000
heap default
page read and write
clean
F60000
unkown image
page readonly
clean
16DF2D16000
unkown
page read and write
clean
1C7424FE000
unkown
page read and write
clean
7FF59D989000
unkown image
page readonly
clean
7FF59CCD1000
unkown image
page readonly
clean
1C4852C0000
unkown image
page readonly
clean
7FF59CB9E000
unkown image
page readonly
clean
19478686000
unkown
page read and write
clean
16DF3316000
unkown
page read and write
clean
17911E50000
unkown
page read and write
clean
7FF59CD92000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
194785A0000
unkown image
page readonly
clean
61A43EF000
stack
page read and write
clean
1A1535F0000
unkown image
page readonly
clean
16DF3399000
unkown
page read and write
clean
7FF5C78DE000
unkown image
page readonly
clean
7FF59D9F4000
unkown image
page readonly
clean
7DF5AE060000
unkown image
page readonly
clean
1C73DD70000
unkown image
page readonly
clean
F4C000
unkown
page read and write
clean
3130000
unkown
page read and write
clean
7FF5903A5000
unkown image
page readonly
clean
7FF59CDA6000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
1941000
heap default
page read and write
clean
7DF5A77D2000
unkown image
page readonly
clean
7FF59CC37000
unkown image
page readonly
clean
1C468100000
unkown
page read and write
clean
16DF31F0000
unkown image
page read and write
clean
7FF59CC07000
unkown image
page readonly
clean
1C46804A000
unkown
page read and write
clean
7DF4D6380000
unkown image
page readonly
clean
1920000
heap default
page read and write
clean
1C74242A000
unkown
page read and write
clean
7FF53928B000
unkown image
page readonly
clean
7FF5A42B7000
unkown image
page readonly
clean
1A153700000
unkown
page read and write
clean
540EB7F000
stack
page read and write
clean
7FF59D9FB000
unkown image
page readonly
clean
7FF5CE636000
unkown image
page readonly
clean
16DF338B000
unkown
page read and write
clean
7FF59CD5F000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
1C73D400000
unkown
page read and write
clean
7FF59CD15000
unkown image
page readonly
clean
2080000
unkown image
page readonly
clean
16DF2CE3000
unkown
page read and write
clean
7FF59CC2E000
unkown image
page readonly
clean
426000
unkown image
page read and write
clean
606A000
unkown
page read and write
clean
7FF5CE1C7000
unkown image
page readonly
clean
1C73CC20000
unkown image
page readonly
clean
1C742506000
unkown
page read and write
clean
192A000
heap default
page read and write
clean
16DF33BD000
unkown
page read and write
clean
1C742502000
unkown
page read and write
clean
16DF33D6000
unkown
page read and write
clean
7DF4A4AD0000
unkown image
page readonly
clean
7FF5A42B7000
unkown image
page readonly
clean
17911DC0000
unkown
page read and write
clean
7DF59A490000
unkown image
page readonly
clean
16DF3314000
unkown
page read and write
clean
7FF5A40C5000
unkown image
page readonly
clean
7FF539A77000
unkown image
page readonly
clean
1C73CE76000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
16DF337F000
unkown
page read and write
clean
6030000
unkown
page read and write
clean
7FF5A4261000
unkown image
page readonly
clean
3F20000
unkown
page read and write
clean
17911DF5000
heap private
page read and write
clean
1C7424AA000
unkown
page read and write
clean
7FF5828DB000
unkown image
page readonly
clean
7DF5D1810000
unkown image
page readonly
clean
3EF8000
heap private
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1C468065000
unkown
page read and write
clean
16DF3740000
unkown image
page write copy
clean
16DF2CE5000
unkown
page read and write
clean
1C742500000
unkown
page read and write
clean
7DF59A470000
unkown image
page readonly
clean
7FF590232000
unkown image
page readonly
clean
7DF59A482000
unkown image
page readonly
clean
17911D60000
unkown image
page read and write
clean
1C468082000
unkown
page read and write
clean
1C467DC0000
unkown image
page readonly
clean
A60000
unkown image
page readonly
clean
7FF5CE6C1000
unkown image
page readonly
clean
16DF3395000
unkown
page read and write
clean
7DF5AE070000
unkown image
page readonly
clean
1C74249D000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5399C5000
unkown image
page readonly
clean
1C73CD30000
unkown image
page readonly
clean
7FF590629000
unkown image
page readonly
clean
1C742412000
unkown
page read and write
clean
7DF543850000
unkown image
page readonly
clean
3630000
unkown
page read and write
clean
61A47FE000
stack
page read and write
clean
4CE000
stack
page read and write
clean
16DF3399000
unkown
page read and write
clean
7FF59CD37000
unkown image
page readonly
clean
16DF33BC000
unkown
page read and write
clean
16DF2C70000
unkown
page read and write
clean
AED4979000
stack
page read and write
clean
7F5D0000
unkown image
page readonly
clean
7FF5CE6CD000
unkown image
page readonly
clean
7DF441720000
unkown image
page readonly
clean
1C7422D0000
unkown
page read and write
clean
1C7422D0000
unkown
page read and write
clean
16DF382A000
unkown
page read and write
clean
7FF59CB13000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
1C742502000
unkown
page read and write
clean
1C742454000
unkown
page read and write
clean
AED4AF9000
stack
page read and write
clean
1A1534E0000
unkown image
page readonly
clean
7DF5A6C10000
unkown image
page readonly
clean
7FF590694000
unkown image
page readonly
clean
A50000
heap private
page read and write
clean
1C467DB0000
heap private
page read and write
clean
1A153613000
unkown
page read and write
clean
16DF334C000
unkown
page read and write
clean
7FF5A41FD000
unkown image
page readonly
clean
7FF59D183000
unkown image
page readonly
clean
1C467DC0000
unkown image
page readonly
clean
7DF5A77F0000
unkown image
page readonly
clean
1C7424ED000
unkown
page read and write
clean
7FF59CE53000
unkown image
page readonly
clean
1C73D3A0000
unkown
page read and write
clean
7FF5CE1C1000
unkown image
page readonly
clean
1C46803C000
unkown
page read and write
clean
7FF5A42A6000
unkown image
page readonly
clean
16DF2CE6000
unkown
page read and write
clean
1C484B80000
unkown image
page readonly
clean
7FF5905C4000
unkown image
page readonly
clean
19478665000
unkown
page read and write
clean
16DF2C00000
unkown
page read and write
clean
7FF5C7A1D000
unkown image
page readonly
clean
7FF5906D7000
unkown image
page readonly
clean
EF0000
unkown image
page readonly
clean
7FF5A4087000
unkown image
page readonly
clean
99E000
stack
page read and write
clean
7FF539A7B000
unkown image
page readonly
clean
1CF0000
unkown image
page readonly
clean
17911DF0000
heap private
page read and write
clean
7F5D0000
unkown image
page readonly
clean
1C7422AE000
unkown
page read and write
clean
628000
heap default
page read and write
clean
7FF59CCE5000
unkown image
page readonly
clean
7FF590684000
unkown image
page readonly
clean
7FF59CE1D000
unkown image
page readonly
clean
7FF5C7870000
unkown image
page readonly
clean
7FF5A428A000
unkown image
page readonly
clean
9E0000
heap private
page read and write
clean
3ED0000
unkown
page read and write
clean
16DF3180000
unkown image
page readonly
clean
411000
unkown image
page read and write
clean
30000
unkown image
page read and write
clean
7DF5D1820000
unkown image
page readonly
clean
F60000
unkown image
page readonly
clean
1C7422A0000
unkown
page read and write
clean
7FF59CB70000
unkown image
page readonly
clean
7FF5A3D67000
unkown image
page readonly
clean
1C484BDA000
unkown
page read and write
clean
1C484D10000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5C7511000
unkown image
page readonly
clean
7FF5C796F000
unkown image
page readonly
clean
1D00000
unkown image
page readonly
clean
7FF59027D000
unkown image
page readonly
clean
7DF5A6C02000
unkown image
page readonly
clean
7FF59CD54000
unkown image
page readonly
clean
1947864C000
unkown
page read and write
clean
7FF5CE6C4000
unkown image
page readonly
clean
17911E50000
unkown
page read and write
clean
1C73E100000
unkown
page read and write
clean
3E3000
unkown
page read and write
clean
16DF336D000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
19478C60000
unkown image
page readonly
clean
1C742400000
unkown
page read and write
clean
7FF5C7A53000
unkown image
page readonly
clean
16DF2C3C000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF59CB77000
unkown image
page readonly
clean
16DF339A000
unkown
page read and write
clean
7F5C2000
unkown image
page readonly
clean
7FF5906C3000
unkown image
page readonly
clean
7FF590555000
unkown image
page readonly
clean
3EE0000
unkown image
page readonly
clean
7FF5A40C0000
unkown image
page readonly
clean
1A15363C000
unkown
page read and write
clean
40A000
unkown image
page read and write
clean
16DF3387000
unkown
page read and write
clean
1C484BE0000
unkown
page read and write
clean
7FF5C79B7000
unkown image
page readonly
clean
7FF58FF69000
unkown image
page readonly
clean
1955000
unkown
page read and write
clean
7DF5D84C2000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
15A0000
unkown image
page readonly
clean
16DF2C29000
unkown
page read and write
clean
7FF59CCDE000
unkown image
page readonly
clean
1787000
heap default
page read and write
clean
173E000
stack
page read and write
clean
7FF5906D7000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF590319000
unkown image
page readonly
clean
1C7422A0000
unkown
page read and write
clean
17911E20000
heap default
page read and write
clean
7F5C0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF5CE623000
unkown image
page readonly
clean
7FF59C992000
unkown image
page readonly
clean
7FF5399CE000
unkown image
page readonly
clean
3F00000
unkown
page execute and read and write
clean
7FF5C798A000
unkown image
page readonly
clean
7DF543852000
unkown image
page readonly
clean
7F5C2000
unkown image
page readonly
clean
1C484B60000
unkown
page read and write
clean
7DF59A472000
unkown image
page readonly
clean
7FF539A09000
unkown image
page readonly
clean
44C000
unkown image
page readonly
clean
2FB67B000
unkown
page read and write
clean
1C7424FC000
unkown
page read and write
clean
7FF5CE611000
unkown image
page readonly
clean
3EF0000
heap private
page read and write
clean
1C73D513000
unkown
page read and write
clean
16DF3372000
unkown
page read and write
clean
1A1534C0000
unkown image
page readonly
clean
7FF59CE67000
unkown image
page readonly
clean
16DF3375000
unkown
page read and write
clean
7FF5C77FA000
unkown image
page readonly
clean
7F5D0000
unkown image
page readonly
clean
7DF543870000
unkown image
page readonly
clean
1C7422C1000
unkown
page read and write
clean
16DF338D000
unkown
page read and write
clean
7FF5A41AF000
unkown image
page readonly
clean
EE0000
unkown image
page read and write
clean
19478E02000
unkown
page read and write
clean
7FF539A8A000
unkown image
page readonly
clean
7FF59CD73000
unkown image
page readonly
clean
7DF59A480000
unkown image
page readonly
clean
1C7424F4000
unkown
page read and write
clean
16DF33AB000
unkown
page read and write
clean
7FF5CE65D000
unkown image
page readonly
clean
1C467FE0000
unkown
page read and write
clean
7F5D2000
unkown image
page readonly
clean
1C484B90000
heap default
page read and write
clean
16DF2C4B000
unkown
page read and write
clean
540E47E000
stack
page read and write
clean
549E000
stack
page read and write
clean
16DF3892000
unkown
page read and write
clean
7DF543862000
unkown image
page readonly
clean
16DF2CB0000
unkown
page read and write
clean
7F5E0000
unkown image
page readonly
clean
1C4859F0000
unkown
page read and write
clean
16DF29A0000
unkown image
page read and write
clean
17911E59000
unkown
page read and write
clean
16DF3808000
unkown
page read and write
clean
7FF5A40A6000
unkown image
page readonly
clean
16DF3802000
unkown
page read and write
clean
19478700000
unkown
page read and write
clean
7FF5CE717000
unkown image
page readonly
clean
7FF5903E0000
unkown image
page readonly
clean
1A153653000
unkown
page read and write
clean
16DF338D000
unkown
page read and write
clean
AED4A7E000
stack
page read and write
clean
16DF3371000
unkown
page read and write
clean
17911E2B000
heap default
page read and write
clean
16DF336B000
unkown
page read and write
clean
1C468071000
unkown
page read and write
clean
1C46802A000
unkown
page read and write
clean
7F5D2000
unkown image
page readonly
clean
7FF59CDBE000
unkown image
page readonly
clean
17911E47000
unkown
page read and write
clean
7FF5399FD000
unkown image
page readonly
clean
A65DBE000
stack
page read and write
clean
7FF59C6A1000
unkown image
page readonly
clean
95E000
stack
page read and write
clean
422000
unkown image
page readonly
clean
7FF5A41E2000
unkown image
page readonly
clean
7FF5C76D1000
unkown image
page readonly
clean
194788D0000
unkown image
page readonly
clean
7FF590687000
unkown image
page readonly
clean
7DF5D1820000
unkown image
page readonly
clean
4F5000
heap default
page read and write
clean
40000
unkown image
page readonly
clean
40C0000
heap private
page read and write
clean
7FF59D987000
unkown image
page readonly
clean
1C46808C000
unkown
page read and write
clean
7FF5C7986000
unkown image
page readonly
clean
1C467DF0000
unkown image
page readonly
clean
16DF29F0000
unkown image
page readonly
clean
1C467DA0000
unkown image
page read and write
clean
7FF5905CF000
unkown image
page readonly
clean
7FF590153000
unkown image
page readonly
clean
7DF5AE050000
unkown image
page readonly
clean
7DF5A77E0000
unkown image
page readonly
clean
7C2E67E000
stack
page read and write
clean
40A000
unkown image
page write copy
clean
7FF5C7613000
unkown image
page readonly
clean
1C468049000
unkown
page read and write
clean
7FF59C6AB000
unkown image
page readonly
clean
7FF5CE393000
unkown image
page readonly
clean
7FF5CE62D000
unkown image
page readonly
clean
7FF5C7A56000
unkown image
page readonly
clean
16DF3382000
unkown
page read and write
clean
19478702000
unkown
page read and write
clean
DE0000
unkown image
page readonly
clean
16DF2C54000
unkown
page read and write
clean
1A1534A0000
unkown image
page read and write
clean
1C73D701000
unkown
page read and write
clean
16DF31E0000
unkown
page read and write
clean
540EAF7000
stack
page read and write
clean
F60000
unkown image
page readonly
clean
1C73E0D1000
unkown
page read and write
clean
1C468102000
unkown
page read and write
clean
35F0000
heap private
page read and write
clean
408000
unkown image
page readonly
clean
1A153600000
unkown
page read and write
clean
1C742600000
unkown
page read and write
clean
3E30000
unkown
page read and write
clean
1C468046000
unkown
page read and write
clean
16DF2C51000
unkown
page read and write
clean
1C73CEAB000
unkown
page read and write
clean
1870000
unkown
page read and write
clean
16DF3892000
unkown
page read and write
clean
7FF59D976000
unkown image
page readonly
clean
7FF5CE4E7000
unkown image
page readonly
clean
7FF5906D2000
unkown image
page readonly
clean
1D560000
heap private
page read and write
clean
7FF5A427B000
unkown image
page readonly
clean
17911E59000
unkown
page read and write
clean
7DF5D1802000
unkown image
page readonly
clean
61A46FF000
stack
page read and write
clean
8D7A67B000
stack
page read and write
clean
17911D80000
unkown image
page readonly
clean
16DF339A000
unkown
page read and write
clean
48E000
stack
page read and write
clean
7FF5CE528000
unkown image
page readonly
clean
16DF2C8B000
unkown
page read and write
clean
7F5D0000
unkown image
page readonly
clean
7DF5D84D0000
unkown image
page readonly
clean
7FF5CE703000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
1C73D3B0000
unkown image
page read and write
clean
7FF590156000
unkown image
page readonly
clean
7FF590697000
unkown image
page readonly
clean
9C000
unkown
page read and write
clean
16DF339C000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
19478D50000
unkown
page read and write
clean
2070000
unkown image
page readonly
clean
8D7A1AE000
stack
page read and write
clean
16DF33BE000
unkown
page read and write
clean
1C484A40000
unkown image
page readonly
clean
7DF4A56A0000
unkown image
page readonly
clean
1077000
unkown
page read and write
clean
1C7424A7000
unkown
page read and write
clean
AED450B000
unkown
page read and write
clean
1C468400000
unkown image
page readonly
clean
2FBA77000
stack
page read and write
clean
1947864B000
unkown
page read and write
clean
16DF3371000
unkown
page read and write
clean
16DF336F000
unkown
page read and write
clean
1C73CE90000
unkown
page read and write
clean
7FF5828DB000
unkown image
page readonly
clean
1C73CE78000
unkown
page read and write
clean
7FF59D848000
unkown image
page readonly
clean
19A000
unkown
page read and write
clean
7FF5905B9000
unkown image
page readonly
clean
7F5D2000
unkown image
page readonly
clean
16DF3372000
unkown
page read and write
clean
7DF5AE062000
unkown image
page readonly
clean
7FF59CB66000
unkown image
page readonly
clean
1C7422C0000
unkown
page read and write
clean
1C485730000
unkown
page read and write
clean
A66C7E000
stack
page read and write
clean
7FF590434000
unkown image
page readonly
clean
16DF337C000
unkown
page read and write
clean
1860000
unkown image
page readonly
clean
1C4859A0000
unkown
page read and write
clean
7FF59CE62000
unkown image
page readonly
clean
540E9F8000
stack
page read and write
clean
1C73CC10000
unkown image
page readonly
clean
7FF5A41CD000
unkown image
page readonly
clean
99000
unkown
page read and write
clean
F50000
unkown image
page readonly
clean
7C2E8FB000
stack
page read and write
clean
7FF539A64000
unkown image
page readonly
clean
1590000
unkown image
page readonly
clean
7FF5C7875000
unkown image
page readonly
clean
7FF5C797D000
unkown image
page readonly
clean
1A1534C0000
unkown image
page readonly
clean
16DF3381000
unkown
page read and write
clean
179137B0000
unkown image
page read and write
clean
7FF590410000
unkown image
page readonly
clean
7FF5CE6DB000
unkown image
page readonly
clean
7DF5A6C12000
unkown image
page readonly
clean
A6627A000
stack
page read and write
clean
7F5C2000
unkown image
page readonly
clean
F60000
unkown image
page readonly
clean
1C742100000
unkown
page read and write
clean
17911E46000
unkown
page read and write
clean
7FF590585000
unkown image
page readonly
clean
3620000
heap private
page read and write
clean
7FF5A40F8000
unkown image
page readonly
clean
7FF59CC13000
unkown image
page readonly
clean
61A467F000
stack
page read and write
clean
A66A7A000
stack
page read and write
clean
34C0000
heap private
page read and write
clean
422000
unkown image
page readonly
clean
1C73CE29000
unkown
page read and write
clean
1985000
heap default
page read and write
clean
7FF5905E3000
unkown image
page readonly
clean
7FF59D9E4000
unkown image
page readonly
clean
3D70000
unkown image
page readonly
clean
5F0000
unkown
page read and write
clean
34C8000
heap private
page read and write
clean
7FF59CE3A000
unkown image
page readonly
clean
1C73D200000
unkown image
page readonly
clean
7FF59D7BC000
unkown image
page readonly
clean
7FF5C7973000
unkown image
page readonly
clean
16DF3902000
unkown
page read and write
clean
7FF59C9C2000
unkown image
page readonly
clean
7FF5A3E5D000
unkown image
page readonly
clean
1073000
unkown
page read and write
clean
7FF5CE4AA000
unkown image
page readonly
clean
1A153680000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF59CD6F000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
540E7F7000
stack
page read and write
clean
7FF539A67000
unkown image
page readonly
clean
1C73CEFC000
unkown
page read and write
clean
7DF5A77F0000
unkown image
page readonly
clean
7FF5CE6C7000
unkown image
page readonly
clean
7FF5CE506000
unkown image
page readonly
clean
16DF3000000
unkown image
page readonly
clean
17911E50000
unkown
page read and write
clean
34B000
unkown
page read and write
clean
7FF59CD40000
unkown image
page readonly
clean
1947864D000
unkown
page read and write
clean
16DF3372000
unkown
page read and write
clean
7FF5A42B2000
unkown image
page readonly
clean
421000
unkown image
page read and write
clean
16DF2E00000
unkown image
page readonly
clean
16F0000
heap private
page read and write
clean
7FF590616000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1C73D402000
unkown
page read and write
clean
540ECFD000
stack
page read and write
clean
7FF5C7A11000
unkown image
page readonly
clean
7F5D0000
unkown image
page readonly
clean
7F5D0000
unkown image
page readonly
clean
16DF3806000
unkown
page read and write
clean
7DF543860000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
7FF5C79A6000
unkown image
page readonly
clean
7FF59CE14000
unkown image
page readonly
clean
16DF339B000
unkown
page read and write
clean
7FF539AB7000
unkown image
page readonly
clean
7FF59CE11000
unkown image
page readonly
clean
19478600000
unkown
page read and write
clean
16DF2BE0000
unkown
page read and write
clean
1C73CE6E000
unkown
page read and write
clean
16DF33AC000
unkown
page read and write
clean
7FF59CCA8000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
7FF59061D000
unkown image
page readonly
clean
7F5D0000
unkown image
page readonly
clean
EF0000
unkown image
page readonly
clean
EF0000
unkown image
page readonly
clean
1C73CF13000
unkown
page read and write
clean
7FF59D9F7000
unkown image
page readonly
clean
1B80000
unkown image
page readonly
clean
16DF2CC3000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF539AA6000
unkown image
page readonly
clean
16DF3399000
unkown
page read and write
clean
4E0000
unkown image
page readonly
clean
408000
unkown image
page readonly
clean
7FF5A3F21000
unkown image
page readonly
clean
7FF5904E5000
unkown image
page readonly
clean
1C484B98000
heap default
page read and write
clean
7FF59C9E9000
unkown image
page readonly
clean
7FF59DA37000
unkown image
page readonly
clean
91F000
stack
page read and write
clean
1A15363A000
unkown
page read and write
clean
19478629000
unkown
page read and write
clean
7FF590483000
unkown image
page readonly
clean
7FF59D9ED000
unkown image
page readonly
clean
1C73D518000
unkown
page read and write
clean
1C73DD50000
unkown image
page readonly
clean
7DF5AE070000
unkown image
page readonly
clean
7FF5C7A17000
unkown image
page readonly
clean
1C73CBE0000
heap private
page read and write
clean
1C73CC40000
heap default
page read and write
clean
7FF59C81A000
unkown image
page readonly
clean
7FF5A41F6000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
16DF388B000
unkown
page read and write
clean
7FF59DA37000
unkown image
page readonly
clean
7F5C2000
unkown image
page readonly
clean
7DF5D1812000
unkown image
page readonly
clean
540EEFB000
stack
page read and write
clean
7FF59040E000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
16DF2CA6000
unkown
page read and write
clean
7FF5C7992000
unkown image
page readonly
clean
35E0000
unkown
page read and write
clean
7FF59D878000
unkown image
page readonly
clean
7DF5A6C00000
unkown image
page readonly
clean
7DF5A77E0000
unkown image
page readonly
clean
7FF59CBAB000
unkown image
page readonly
clean
7FF5CE6D4000
unkown image
page readonly
clean
7DF5AE060000
unkown image
page readonly
clean
7FF59CAA9000
unkown image
page readonly
clean
1C74243C000
unkown
page read and write
clean
1C468580000
unkown image
page readonly
clean
16DF33D4000
unkown
page read and write
clean
7FF590602000
unkown image
page readonly
clean
7DF5D84B2000
unkown image
page readonly
clean
7FF59C9DC000
unkown image
page readonly
clean
16DF3202000
unkown
page read and write
clean
1A15364D000
unkown
page read and write
clean
EF0000
unkown image
page readonly
clean
7DF5AE062000
unkown image
page readonly
clean
16DF2CA6000
unkown
page read and write
clean
FFE000
stack
page read and write
clean
8D7A97F000
stack
page read and write
clean
1C7423C0000
unkown
page read and write
clean
2350000
heap private
page read and write
clean
1947867A000
unkown
page read and write
clean
1C73CBF0000
unkown image
page readonly
clean
F50000
unkown image
page readonly
clean
1C73D518000
unkown
page read and write
clean
7F5C2000
unkown image
page readonly
clean
7FF59CB52000
unkown image
page readonly
clean
7FF5906AA000
unkown image
page readonly
clean
1C468002000
unkown
page read and write
clean
7FF5CE60F000
unkown image
page readonly
clean
7FF5CE717000
unkown image
page readonly
clean
16CF000
stack
page read and write
clean
7FF590341000
unkown image
page readonly
clean
7FF59CC0D000
unkown image
page readonly
clean
8D7A47F000
stack
page read and write
clean
7DF5D84D0000
unkown image
page readonly
clean
19478713000
unkown
page read and write
clean
1C73D380000
unkown image
page readonly
clean
16DF3387000
unkown
page read and write
clean
540EBFE000
stack
page read and write
clean
7FF5A40C8000
unkown image
page readonly
clean
7DF59A490000
unkown image
page readonly
clean
F70000
unkown
page read and write
clean
16DF337F000
unkown
page read and write
clean
17911DA0000
unkown image
page readonly
clean
17912000000
unkown image
page readonly
clean
1C7422E0000
unkown
page read and write
clean
7FF5A404A000
unkown image
page readonly
clean
1A153C70000
unkown
page read and write
clean
16DF2A10000
heap default
page read and write
clean
40000
unkown image
page readonly
clean
7DF543870000
unkown image
page readonly
clean
16DF3800000
unkown
page read and write
clean
7FF59CCA1000
unkown image
page readonly
clean
7FF5C7A67000
unkown image
page readonly
clean
7FF5C7A27000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7FF5A4077000
unkown image
page readonly
clean
7FF5904A7000
unkown image
page readonly
clean
81F000
stack
page read and write
clean
1A15364F000
unkown
page read and write
clean
1A15364C000
unkown
page read and write
clean
1947867C000
unkown
page read and write
clean
A660F7000
stack
page read and write
clean
1C742400000
unkown
page read and write
clean
7FF59046A000
unkown image
page readonly
clean
16DF2C47000
unkown
page read and write
clean
1C484D00000
unkown
page read and write
clean
19478708000
unkown
page read and write
clean
16DF337E000
unkown
page read and write
clean
7FF5A41DA000
unkown image
page readonly
clean
1C73CE3D000
unkown
page read and write
clean
1C468013000
unkown
page read and write
clean
7DF59A482000
unkown image
page readonly
clean
1C484D20000
heap private
page read and write
clean
7FF5CE381000
unkown image
page readonly
clean
1A1534B0000
heap private
page read and write
clean
16DF3373000
unkown
page read and write
clean
15C0000
heap default
page read and write
clean
440000
unkown image
page read and write
clean
7FF59CBFA000
unkown image
page readonly
clean
545F000
stack
page read and write
clean
7DF5D1800000
unkown image
page readonly
clean
7FF5A42A3000
unkown image
page readonly
clean
16DF2C48000
unkown
page read and write
clean
16DF337E000
unkown
page read and write
clean
7FF590181000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1C73CE00000
unkown
page read and write
clean
34B0000
unkown
page read and write
clean
1C73CBD0000
unkown image
page read and write
clean
1C73D559000
unkown
page read and write
clean
7F5D2000
unkown image
page readonly
clean
1D41F000
stack
page read and write
clean
16DF3389000
unkown
page read and write
clean
AED458F000
stack
page read and write
clean
1A153708000
unkown
page read and write
clean
7FF59CE56000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
1C742449000
unkown
page read and write
clean
16DF337A000
unkown
page read and write
clean
1C484F40000
unkown image
page readonly
clean
16DF3385000
unkown
page read and write
clean
7FF59CB35000
unkown image
page readonly
clean
16DF2CBC000
unkown
page read and write
clean
7FF5C7856000
unkown image
page readonly
clean
A6677F000
stack
page read and write
clean
8D7A77E000
stack
page read and write
clean
1C73CF02000
unkown
page read and write
clean
7FF5A41B1000
unkown image
page readonly
clean
7FF5A4207000
unkown image
page readonly
clean
7FF5C7A2B000
unkown image
page readonly
clean
7DF543852000
unkown image
page readonly
clean
3E7000
unkown
page read and write
clean
7FF59068D000
unkown image
page readonly
clean
7FF59DA23000
unkown image
page readonly
clean
19478654000
unkown
page read and write
clean
9B0000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
1A153702000
unkown
page read and write
clean
194785A0000
unkown image
page readonly
clean
7FF5CE595000
unkown image
page readonly
clean
7FF59CE27000
unkown image
page readonly
clean
1C484D25000
heap private
page read and write
clean
1853000
unkown image
page readonly
clean
7FF590681000
unkown image
page readonly
clean
16DF3399000
unkown
page read and write
clean
7FF5A4209000
unkown image
page readonly
clean
1980000
unkown image
page readonly
clean
19478580000
unkown image
page read and write
clean
16DF331D000
unkown
page read and write
clean
7DF5A6C00000
unkown image
page readonly
clean
7FF5CE706000
unkown image
page readonly
clean
17912390000
unkown image
page readonly
clean
7FF59CB6A000
unkown image
page readonly
clean
7DF5A6C12000
unkown image
page readonly
clean
16DF2AF0000
unkown image
page readonly
clean
1C742417000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
A6667E000
stack
page read and write
clean
7FF590283000
unkown image
page readonly
clean
7DF5D84C2000
unkown image
page readonly
clean
61A436A000
unkown
page read and write
clean
7DF543850000
unkown image
page readonly
clean
1C742370000
unkown
page read and write
clean
1C73CBF0000
unkown image
page readonly
clean
1C484BE1000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5905B0000
unkown image
page readonly
clean
559F000
stack
page read and write
clean
7FF5399F6000
unkown image
page readonly
clean
1C485990000
unkown
page read and write
clean
16DF3370000
unkown
page read and write
clean
1C485970000
unkown
page read and write
clean
1A153510000
heap default
page read and write
clean
8D7A12C000
unkown
page read and write
clean
34D0000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
16DF337D000
unkown
page read and write
clean
1C468602000
unkown
page read and write
clean
19478671000
unkown
page read and write
clean
16DF3395000
unkown
page read and write
clean
16DF33DC000
unkown
page read and write
clean
16DF2C49000
unkown
page read and write
clean
7DF5A77E2000
unkown image
page readonly
clean
A65CBC000
unkown
page read and write
clean
1C73DD30000
unkown image
page readonly
clean
14D0000
unkown
page read and write
clean
7FF590598000
unkown image
page readonly
clean
7FF590518000
unkown image
page readonly
clean
1853000
unkown image
page readonly
clean
7F5C2000
unkown image
page readonly
clean
1C468000000
unkown
page read and write
clean
35B000
unkown
page read and write
clean
1C7423B0000
unkown
page read and write
clean
1880000
unkown
page execute read
clean
1F0000
unkown
page read and write
clean
16DF337E000
unkown
page read and write
clean
1C73DD60000
unkown image
page readonly
clean
7FF59D97D000
unkown image
page readonly
clean
194785D0000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
16DF3389000
unkown
page read and write
clean
16DF382A000
unkown
page read and write
clean
F50000
unkown image
page readonly
clean
F60000
unkown image
page readonly
clean
7FF5C7837000
unkown image
page readonly
clean
7FF59CD34000
unkown image
page readonly
clean
16DF3399000
unkown
page read and write
clean
1A153602000
unkown
page read and write
clean
16DF338F000
unkown
page read and write
clean
7FF59CB59000
unkown image
page readonly
clean
16DF33AB000
unkown
page read and write
clean
C60000
unkown image
page readonly
clean
3600000
unkown
page read and write
clean
1890000
heap default
page read and write
clean
2FB97B000
stack
page read and write
clean
7FF5C7A3A000
unkown image
page readonly
clean
7C2EA77000
stack
page read and write
clean
19478590000
heap private
page read and write
clean
A6617F000
stack
page read and write
clean
7FF5C7878000
unkown image
page readonly
clean
4D0000
unkown
page read and write
clean
1A153673000
unkown
page read and write
clean
7DF5A77E2000
unkown image
page readonly
clean
1A153629000
unkown
page read and write
clean
44C000
unkown image
page readonly
clean
1C742506000
unkown
page read and write
clean
16DF2CCE000
unkown
page read and write
clean
17911FF0000
unkown image
page readonly
clean
16DF3829000
unkown
page read and write
clean
1C7423E0000
unkown
page read and write
clean
7FF5C79AD000
unkown image
page readonly
clean
19478613000
unkown
page read and write
clean
19C000
unkown
page read and write
clean
7FF590627000
unkown image
page readonly
clean
16DF2D08000
unkown
page read and write
clean
34F000
unkown
page read and write
clean
EF0000
unkown image
page readonly
clean
540E6F9000
stack
page read and write
clean
16DF33BB000
unkown
page read and write
clean
7DF5D1802000
unkown image
page readonly
clean
16DF29C0000
unkown image
page readonly
clean
7F5D2000
unkown image
page readonly
clean
16DF2C56000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF59CD7D000
unkown image
page readonly
clean
A666FF000
stack
page read and write
clean
1A153E02000
unkown
page read and write
clean
7FF5A4274000
unkown image
page readonly
clean
FB0000
unkown
page read and write
clean
1C74249F000
unkown
page read and write
clean
1C467EF0000
unkown image
page readonly
clean
16DF337F000
unkown
page read and write
clean
1C742190000
unkown
page read and write
clean
7FF59D2A2000
unkown image
page readonly
clean
7DF59A470000
unkown image
page readonly
clean
7DF543860000
unkown image
page readonly
clean
7DF5D1812000
unkown image
page readonly
clean
7FF5C7A67000
unkown image
page readonly
clean
7FF59DA26000
unkown image
page readonly
clean
620000
heap default
page read and write
clean
1C73DB70000
unkown image
page read and write
clean
7FF539A07000
unkown image
page readonly
clean
17912200000
unkown image
page readonly
clean
7DF5D84B2000
unkown image
page readonly
clean
1A15368E000
unkown
page read and write
clean
7FF59D92F000
unkown image
page readonly
clean
1780000
heap default
page read and write
clean
16DF29C0000
unkown image
page readonly
clean
F50000
unkown image
page readonly
clean
7FF539684000
unkown image
page readonly
clean
7FF5A41D6000
unkown image
page readonly
clean
7FF58FEAB000
unkown image
page readonly
clean
A665FF000
stack
page read and write
clean
7FF59D956000
unkown image
page readonly
clean
1C7422A8000
unkown
page read and write
clean
1C467DE0000
unkown image
page readonly
clean
7FF5A41C3000
unkown image
page readonly
clean
540E19B000
unkown
page read and write
clean
A6637B000
stack
page read and write
clean
1A153713000
unkown
page read and write
clean
16DF2C13000
unkown
page read and write
clean
7FF59CD44000
unkown image
page readonly
clean
1A153B80000
unkown image
page readonly
clean
1C73CE58000
unkown
page read and write
clean
7FF5C7A62000
unkown image
page readonly
clean
7FF59D871000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
7DF5D1810000
unkown image
page readonly
clean
7FF5906C6000
unkown image
page readonly
clean
1C484A30000
unkown
page read and write
clean
7DF498340000
unkown image
page readonly
clean
7FF5A3F33000
unkown image
page readonly
clean
196F000
heap default
page read and write
clean
1C742461000
unkown
page read and write
clean
7FF59CD28000
unkown image
page readonly
clean
7FF59D9E7000
unkown image
page readonly
clean
7C2EB7F000
stack
page read and write
clean
1C742110000
unkown
page read and write
clean
7F4C0000
unkown image
page readonly
clean
7DF543862000
unkown image
page readonly
clean
7C2E3EC000
unkown
page read and write
clean
40D000
unkown image
page read and write
clean
16DF336F000
unkown
page read and write
clean
16DF2D02000
unkown
page read and write
clean
3FA0000
unkown
page read and write
clean
2FB77F000
stack
page read and write
clean
540EDF8000
stack
page read and write
clean
16DF33AA000
unkown
page read and write
clean
279F000
stack
page read and write
clean
7DF59A472000
unkown image
page readonly
clean
61A487C000
stack
page read and write
clean
535E000
stack
page read and write
clean
1C73D559000
unkown
page read and write
clean
7FF590587000
unkown image
page readonly
clean
7DF5AE052000
unkown image
page readonly
clean
7FF5CE712000
unkown image
page readonly
clean
16DF33BD000
unkown
page read and write
clean
1C73D500000
unkown
page read and write
clean
16DF31A0000
unkown image
page readonly
clean
1C74241C000
unkown
page read and write
clean
16DF2C4D000
unkown
page read and write
clean
7FF5904C6000
unkown image
page readonly
clean
EF0000
unkown image
page readonly
clean
7F5D2000
unkown image
page readonly
clean
35D0000
unkown image
page readonly
clean
7FF59D26C000
unkown image
page readonly
clean
1C73CE9C000
unkown
page read and write
clean
7F5C0000
unkown image
page readonly
clean
16DF3395000
unkown
page read and write
clean
7FF59CBC4000
unkown image
page readonly
clean
7FF5CE6EA000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
F50000
unkown image
page readonly
clean
AED487F000
stack
page read and write
clean
7FF590187000
unkown image
page readonly
clean
7FF5C7A24000
unkown image
page readonly
clean
1C484A60000
unkown image
page readonly
clean
1C468056000
unkown
page read and write
clean
7FF58FF65000
unkown image
page readonly
clean
19478657000
unkown
page read and write
clean
7DF5D84C0000
unkown image
page readonly
clean
4F0000
heap default
page read and write
clean
7DF59A480000
unkown image
page readonly
clean
7DF5A6C20000
unkown image
page readonly
clean
7FF59CB28000
unkown image
page readonly
clean
7FF5C7827000
unkown image
page readonly
clean
16DF3802000
unkown
page read and write
clean
7FF5C795F000
unkown image
page readonly
clean
7FF5C79B9000
unkown image
page readonly
clean
7FF59CD86000
unkown image
page readonly
clean
7DF5A6C10000
unkown image
page readonly
clean
7FF59CC0F000
unkown image
page readonly
clean
7FF59CC0A000
unkown image
page readonly
clean
7FF5A3E63000
unkown image
page readonly
clean
16DF3300000
unkown
page read and write
clean
1C73D502000
unkown
page read and write
clean
17912210000
unkown image
page readonly
clean
431000
unkown image
page read and write
clean
7FF5A426D000
unkown image
page readonly
clean
7FF5C78E5000
unkown image
page readonly
clean
158E000
stack
page read and write
clean
7FF5399D6000
unkown image
page readonly
clean
16DF3379000
unkown
page read and write
clean
35F4000
heap private
page read and write
clean
7FF5C7961000
unkown image
page readonly
clean
7FF5904E8000
unkown image
page readonly
clean
F50000
unkown image
page readonly
clean
A65D3E000
stack
page read and write
clean
1C73DC50000
unkown
page read and write
clean
7FF59041B000
unkown image
page readonly
clean
7FF539A6D000
unkown image
page readonly
clean
7FF59C62F000
unkown image
page readonly
clean
1C7421A0000
unkown
page read and write
clean
34C5000
heap private
page read and write
clean
7FF59CB64000
unkown image
page readonly
clean
7FF5C760D000
unkown image
page readonly
clean
7FF5902A4000
unkown image
page readonly
clean
7DF5D84B0000
unkown image
page readonly
clean
1C7423D0000
unkown
page read and write
clean
7FF5905ED000
unkown image
page readonly
clean
16DF31E0000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
AED49FD000
stack
page read and write
clean
7FF59C633000
unkown image
page readonly
clean
1C468200000
unkown image
page readonly
clean
19478AE0000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7FF59CD61000
unkown image
page readonly
clean
16DF2CF4000
unkown
page read and write
clean
7FF5C7A14000
unkown image
page readonly
clean
16DF3370000
unkown
page read and write
clean
7FF59CBA0000
unkown image
page readonly
clean
16DF337E000
unkown
page read and write
clean
16DF33CD000
unkown
page read and write
clean
7F5C2000
unkown image
page readonly
clean
16DF339B000
unkown
page read and write
clean
16DF3395000
unkown
page read and write
clean
7FF5904E0000
unkown image
page readonly
clean
7FF59CA34000
unkown image
page readonly
clean
7DF5D1800000
unkown image
page readonly
clean
5820000
unkown
page read and write
clean
194785C0000
unkown image
page readonly
clean
7DF5A77D0000
unkown image
page readonly
clean
1C7422C4000
unkown
page read and write
clean
EF0000
unkown image
page readonly
clean
17911E37000
heap default
page read and write
clean
1C73CE8A000
unkown
page read and write
clean
A6697A000
stack
page read and write
clean
8D7A877000
stack
page read and write
clean
16DF339B000
unkown
page read and write
clean
1C4852D0000
unkown image
page readonly
clean
2FBC7F000
stack
page read and write
clean
400000
unkown image
page readonly
clean
540E8FF000
stack
page read and write
clean
16DF339B000
unkown
page read and write
clean
7FF5CE525000
unkown image
page readonly
clean
7FF59047D000
unkown image
page readonly
clean
7FF59C81F000
unkown image
page readonly
clean
7DF5A77D2000
unkown image
page readonly
clean
1C742600000
unkown
page read and write
clean
17911E00000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF539A61000
unkown image
page readonly
clean
7FF5A4264000
unkown image
page readonly
clean
16DF3373000
unkown
page read and write
clean
7FF5905DF000
unkown image
page readonly
clean
16DF3379000
unkown
page read and write
clean
7FF59D2B8000
unkown image
page readonly
clean
7FF5CE656000
unkown image
page readonly
clean
7FF5A4267000
unkown image
page readonly
clean
16DF337A000
unkown
page read and write
clean
16DF339B000
unkown
page read and write
clean
1C484C90000
unkown
page read and write
clean
1947863C000
unkown
page read and write
clean
16DF2CDE000
unkown
page read and write
clean
16DF337F000
unkown
page read and write
clean
1C7423F0000
unkown
page read and write
clean
1947864F000
unkown
page read and write
clean
2FB6FF000
stack
page read and write
clean
1A153651000
unkown
page read and write
clean
7FF5905F6000
unkown image
page readonly
clean
316A000
unkown
page read and write
clean
7DF5D84B0000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
7FF5CE520000
unkown image
page readonly
clean
1C468050000
unkown
page read and write
clean
16DF3370000
unkown
page read and write
clean
16DF3385000
unkown
page read and write
clean
41B000
unkown image
page read and write
clean
7FF59CD8A000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
17911E32000
unkown
page read and write
clean
7FF59D9E1000
unkown image
page readonly
clean
16DF338B000
unkown
page read and write
clean
1C484D29000
heap private
page read and write
clean
7FF59CC23000
unkown image
page readonly
clean
7FF59CB3F000
unkown image
page readonly
clean
7FF539A74000
unkown image
page readonly
clean
17911D80000
unkown image
page readonly
clean
1C484A70000
unkown image
page readonly
clean
19478AD0000
unkown image
page readonly
clean
AED4B7E000
stack
page read and write
clean
16DF337E000
unkown
page read and write
clean
7FF59CE24000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
1C73DD80000
unkown image
page readonly
clean
17911E59000
unkown
page read and write
clean
1C468113000
unkown
page read and write
clean
7FF59CD49000
unkown image
page readonly
clean
16DF382A000
unkown
page read and write
clean
16DF33BD000
unkown
page read and write
clean
1D220000
unkown
page read and write
clean
There are 1068 hidden memdumps, click here to show them.