IOC Report

loading gif

Files

File Path
Type
Category
Malicious
snBYiBAMB2.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\MpCmdRun.log
Little-endian UTF-16 Unicode text, with CRLF, CR line terminators
modified
clean
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\DeliveryOptimization\Logs\dosvc.20211202_054042_931.etl
data
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\snBYiBAMB2.dll"
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\snBYiBAMB2.dll,Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\snBYiBAMB2.dll",#1
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k localservice -p -s CDPSvc
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\snBYiBAMB2.dll,awrrqyparpkpycx
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\snBYiBAMB2.dll,bcnxvrdkfysosxtof
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k networkservice -p -s DoSvc
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k NetworkService -p
malicious
C:\Windows\System32\svchost.exe
c:\windows\system32\svchost.exe -k localservicenetworkrestricted -p -s wscsvc
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\snBYiBAMB2.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Gcdru\wqnupsxlnfqvhei.gop",rRrsbNdtBW
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\snBYiBAMB2.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\snBYiBAMB2.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\snBYiBAMB2.dll",Control_RunDLL
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe -k wsappx -p -s AppXSvc
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Gcdru\wqnupsxlnfqvhei.gop",Control_RunDLL
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\snBYiBAMB2.dll",#1
clean
C:\Windows\System32\SgrmBroker.exe
C:\Windows\system32\SgrmBroker.exe
clean
C:\Program Files\Windows Defender\MpCmdRun.exe
"C:\Program Files\Windows Defender\mpcmdrun.exe" -wdenable
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
There are 13 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://dynamic.t0.tiles.ditu.live.com/comp/gen.ashx
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdv?pv=1&r=
unknown
clean
https://dev.ditu.live.com/REST/v1/Routes/
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Driving
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/comp/gen.ashx
unknown
clean
https://dev.ditu.live.com/REST/v1/Traffic/Incidents/
unknown
clean
https://dev.ditu.live.com/REST/v1/Transit/Stops/
unknown
clean
https://t0.tiles.ditu.live.com/tiles/gen
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/
unknown
clean
https://dev.virtualearth.net/REST/v1/Traffic/Incidents/
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gdi?pv=1&r=
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Walking
unknown
clean
https://dev.virtualearth.net/webservices/v1/LoggingService/LoggingService.svc/Log?
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gd?pv=1&r=
unknown
clean
https://dev.virtualearth.net/mapcontrol/HumanScaleServices/GetBubbles.ashx?n=
unknown
clean
https://%s.xboxlive.com
unknown
clean
https://dev.ditu.live.com/mapcontrol/mapconfiguration.ashx?name=native&v=
unknown
clean
https://ecn.dev.virtualearth.net/mapcontrol/mapconfiguration.ashx?name=native&v=
unknown
clean
https://dev.virtualearth.net/mapcontrol/logging.ashx
unknown
clean
https://dev.ditu.live.com/mapcontrol/logging.ashx
unknown
clean
https://dev.ditu.live.com/REST/v1/Imagery/Copyright/
unknown
clean
https://%s.xboxlive.combled
unknown
clean
https://t0.ssl.ak.dynamic.tiles.virtualearth.net/odvs/gri?pv=1&r=
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gdi?pv=1&r=
unknown
clean
https://dev.virtualearth.net/REST/v1/JsonFilter/VenueMaps/data/
unknown
clean
https://dev.virtualearth.net/REST/v1/Transit/Schedules/
unknown
clean
https://dynamic.t
unknown
clean
https://dev.virtualearth.net/REST/v1/Routes/Transit
unknown
clean
https://t0.ssl.ak.tiles.virtualearth.net/tiles/gen
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gdv?pv=1&r=
unknown
clean
https://activity.windows.com
unknown
clean
http://www.bingmapsportal.com
unknown
clean
https://dev.ditu.live.com/REST/v1/Locations
unknown
clean
https://ecn.dev.virtualearth.net/REST/v1/Imagery/Copyright/
unknown
clean
https://%s.dnet.xboxlive.com
unknown
clean
https://dev.ditu.live.com/REST/v1/JsonFilter/VenueMaps/data/
unknown
clean
https://dynamic.api.tiles.ditu.live.com/odvs/gd?pv=1&r=
unknown
clean
There are 27 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
195.154.133.20
unknown
France
malicious
212.237.17.99
unknown
Italy
malicious
110.232.117.186
unknown
Australia
malicious
104.245.52.73
unknown
United States
malicious
138.185.72.26
unknown
Brazil
malicious
81.0.236.90
unknown
Czech Republic
malicious
45.118.115.99
unknown
Indonesia
malicious
103.75.201.2
unknown
Thailand
malicious
216.158.226.206
unknown
United States
malicious
107.182.225.142
unknown
United States
malicious
45.118.135.203
unknown
Japan
malicious
50.116.54.215
unknown
United States
malicious
51.68.175.8
unknown
France
malicious
103.8.26.102
unknown
Malaysia
malicious
46.55.222.11
unknown
Bulgaria
malicious
41.76.108.46
unknown
South Africa
malicious
103.8.26.103
unknown
Malaysia
malicious
178.79.147.66
unknown
United Kingdom
malicious
212.237.5.209
unknown
Italy
malicious
176.104.106.96
unknown
Serbia
malicious
207.38.84.195
unknown
United States
malicious
212.237.56.116
unknown
Italy
malicious
45.142.114.231
unknown
Germany
malicious
203.114.109.124
unknown
Thailand
malicious
210.57.217.132
unknown
Indonesia
malicious
58.227.42.236
unknown
Korea Republic of
malicious
185.184.25.237
unknown
Turkey
malicious
158.69.222.101
unknown
Canada
malicious
104.251.214.46
unknown
United States
malicious
There are 19 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
cval
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
cval
malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Usage
MonthID
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{C153864A-3717-402D-B4D2-5605ED65D242}
Count
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{C153864A-3717-402D-B4D2-5605ED65D242}
From
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3853321935-2125563209-4053062332-1002\{C153864A-3717-402D-B4D2-5605ED65D242}
Version
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
2DB5000
heap default
page read and write
malicious
E90000
stack
page execute and read and write
malicious
EFC000
heap default
page read and write
malicious
675000
heap default
page read and write
malicious
4700000
unkown
page execute and read and write
malicious
AAA000
heap default
page read and write
malicious
2F10000
stack
page execute and read and write
malicious
2DEA000
heap default
page read and write
malicious
990000
stack
page execute and read and write
malicious
2E36000
heap default
page read and write
malicious
400000
stack
page execute and read and write
malicious
2CB0000
stack
page execute and read and write
malicious
2A36000
unkown image
page readonly
clean
7FB32000
unkown image
page readonly
clean
27CD3AD0000
unkown image
page readonly
clean
970000
unkown
page read and write
clean
1470000
unkown image
page readonly
clean
DDEEAFD000
stack
page read and write
clean
5D0000
unkown image
page readonly
clean
7FF5ADC73000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
7FB80000
unkown image
page readonly
clean
270468C0000
unkown
page read and write
clean
7FF5EDB86000
unkown image
page readonly
clean
7FF5ADC97000
unkown image
page readonly
clean
F308F5B000
unkown
page read and write
clean
2E70000
unkown image
page readonly
clean
7FB32000
unkown image
page readonly
clean
2126D429000
unkown
page read and write
clean
7F910000
unkown image
page readonly
clean
7FAA0000
unkown image
page readonly
clean
EEBAEFB000
stack
page read and write
clean
7FF5E21C7000
unkown image
page readonly
clean
7FF5C795E000
unkown image
page readonly
clean
7FF535273000
unkown image
page readonly
clean
2F8B000
unkown
page read and write
clean
2985000
unkown image
page readonly
clean
2985000
unkown image
page readonly
clean
7DF550180000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
21402851000
unkown
page read and write
clean
7FF5BFF26000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
2A54E300000
unkown image
page read and write
clean
1F0000
unkown image
page readonly
clean
2979000
unkown image
page readonly
clean
880000
unkown image
page readonly
clean
7FF5ADCB3000
unkown image
page readonly
clean
7FF5BFE25000
unkown image
page readonly
clean
2E70000
unkown image
page readonly
clean
3380000
unkown image
page readonly
clean
23472D13000
unkown
page read and write
clean
960000
unkown image
page readonly
clean
7FF5EF15D000
unkown image
page readonly
clean
7DF4FB0F0000
unkown image
page readonly
clean
2875000
unkown image
page readonly
clean
DDEE7FB000
stack
page read and write
clean
21402850000
unkown
page read and write
clean
7FF5C00C0000
unkown image
page readonly
clean
33DD000
unkown
page read and write
clean
29C0000
unkown image
page readonly
clean
7FF57D35A000
unkown image
page readonly
clean
2E1A000
heap default
page read and write
clean
7FF535287000
unkown image
page readonly
clean
9C0000
unkown image
page read and write
clean
381DAFB000
stack
page read and write
clean
7DF542FD0000
unkown image
page readonly
clean
7FB40000
unkown image
page readonly
clean
292B000
unkown image
page readonly
clean
7F772000
unkown image
page readonly
clean
381E0FF000
stack
page read and write
clean
3200000
unkown image
page readonly
clean
2A43000
unkown image
page readonly
clean
7FF5C7901000
unkown image
page readonly
clean
7F450000
unkown image
page readonly
clean
207A9800000
unkown image
page readonly
clean
31F0000
heap default
page read and write
clean
7FF5E22BD000
unkown image
page readonly
clean
950000
unkown image
page readonly
clean
2A54E466000
unkown
page read and write
clean
2824000
unkown image
page readonly
clean
7F092000
unkown image
page readonly
clean
7DF550190000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
234729F0000
unkown image
page readonly
clean
7DF5FBA80000
unkown image
page readonly
clean
29AB000
unkown image
page readonly
clean
7FF5EDCD1000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
7FF53526F000
unkown image
page readonly
clean
33D5000
unkown
page read and write
clean
17F85E40000
unkown image
page read and write
clean
7FF5E23A1000
unkown image
page readonly
clean
29A6000
unkown image
page readonly
clean
2A1B000
unkown image
page readonly
clean
7FF5C7187000
unkown image
page readonly
clean
2A14000
unkown image
page readonly
clean
6EA3A000
unkown image
page readonly
clean
B3E000
stack
page read and write
clean
2A1B000
unkown image
page readonly
clean
7F082000
unkown image
page readonly
clean
7FF5EDB5F000
unkown image
page readonly
clean
7FF5ADC57000
unkown image
page readonly
clean
7FA80000
unkown image
page readonly
clean
7FF5C0179000
unkown image
page readonly
clean
2824000
unkown image
page readonly
clean
7FF53534A000
unkown image
page readonly
clean
2A54E445000
unkown
page read and write
clean
293E000
unkown image
page readonly
clean
281A000
unkown image
page readonly
clean
2966000
unkown image
page readonly
clean
7DF5F0012000
unkown image
page readonly
clean
7F0A0000
unkown image
page readonly
clean
7FF542511000
unkown image
page readonly
clean
270468D1000
unkown
page read and write
clean
7FF5EF4CD000
unkown image
page readonly
clean
7FB20000
unkown image
page readonly
clean
21A48FC000
stack
page read and write
clean
34CA000
unkown
page read and write
clean
5DB000
unkown
page read and write
clean
7FF5EF53A000
unkown image
page readonly
clean
E40000
unkown
page read and write
clean
7DF58AFE0000
unkown image
page readonly
clean
2966000
unkown image
page readonly
clean
7FB80000
unkown image
page readonly
clean
A05000
unkown
page read and write
clean
7FF542296000
unkown image
page readonly
clean
21402855000
unkown
page read and write
clean
2A54E462000
unkown
page read and write
clean
7FB92000
unkown image
page readonly
clean
7DF5F0020000
unkown image
page readonly
clean
293E000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
2126D8D0000
unkown image
page readonly
clean
27046670000
unkown image
page readonly
clean
7FF5C793A000
unkown image
page readonly
clean
23472C3C000
unkown
page read and write
clean
3280000
unkown image
page readonly
clean
625B4FF000
stack
page read and write
clean
215A6C13000
unkown
page read and write
clean
8A0000
unkown image
page read and write
clean
2C86000
unkown image
page readonly
clean
2D30000
heap default
page read and write
clean
21403002000
unkown
page read and write
clean
EE0000
heap default
page read and write
clean
7FF5EF4EE000
unkown image
page readonly
clean
2A1B000
unkown image
page readonly
clean
7FF5EF346000
unkown image
page readonly
clean
7FA82000
unkown image
page readonly
clean
2DC0000
heap default
page read and write
clean
8E0000
heap default
page read and write
clean
625ACBB000
unkown
page read and write
clean
2126DB30000
unkown
page read and write
clean
7F3C2000
unkown image
page readonly
clean
6B0000
heap default
page read and write
clean
215A6C8C000
unkown
page read and write
clean
207A9454000
unkown
page read and write
clean
298F000
unkown image
page readonly
clean
21A4B7D000
stack
page read and write
clean
207A945E000
unkown
page read and write
clean
2126DA60000
unkown image
page readonly
clean
7DF5D56B0000
unkown image
page readonly
clean
C30000
unkown image
page readonly
clean
8D0000
unkown image
page readonly
clean
2DE0000
heap default
page read and write
clean
950000
unkown image
page readonly
clean
7FF5C79AD000
unkown image
page readonly
clean
7FB80000
unkown image
page readonly
clean
293E000
unkown image
page readonly
clean
2140284C000
unkown
page read and write
clean
7FF5C7A1A000
unkown image
page readonly
clean
9F0000
unkown image
page readonly
clean
21402C00000
unkown image
page readonly
clean
2817000
unkown image
page readonly
clean
7FBA0000
unkown image
page readonly
clean
7F082000
unkown image
page readonly
clean
7F460000
unkown image
page readonly
clean
7FF542195000
unkown image
page readonly
clean
7FF5EF41B000
unkown image
page readonly
clean
7FF5C7927000
unkown image
page readonly
clean
2979000
unkown image
page readonly
clean
215A6BD0000
heap default
page read and write
clean
2A14000
unkown image
page readonly
clean
27CD3C60000
unkown image
page readonly
clean
2A54E465000
unkown
page read and write
clean
27CD3540000
unkown image
page read and write
clean
2DCE000
stack
page read and write
clean
286C000
unkown image
page readonly
clean
950000
unkown image
page readonly
clean
EEB000
heap default
page read and write
clean
7F2B0000
unkown image
page readonly
clean
17F86200000
unkown
page read and write
clean
7DF5FD240000
unkown image
page readonly
clean
7FB92000
unkown image
page readonly
clean
7FF5C77E3000
unkown image
page readonly
clean
23472C71000
unkown
page read and write
clean
34CD000
unkown
page read and write
clean
DD0000
unkown
page read and write
clean
33D5000
unkown
page read and write
clean
2966000
unkown image
page readonly
clean
170000
unkown image
page readonly
clean
2961000
unkown image
page readonly
clean
2A14000
unkown image
page readonly
clean
9FA000
unkown
page read and write
clean
6EA4F000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
23473202000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
21402630000
unkown image
page readonly
clean
4FA000
heap default
page read and write
clean
3400000
unkown image
page readonly
clean
7FF5EF5C1000
unkown image
page readonly
clean
2FF0000
unkown
page read and write
clean
7FF5E22BF000
unkown image
page readonly
clean
7F350000
unkown image
page readonly
clean
3080000
heap private
page read and write
clean
215A6C00000
unkown
page read and write
clean
990000
unkown
page read and write
clean
7FF535361000
unkown image
page readonly
clean
7FF5ADA56000
unkown image
page readonly
clean
7FF57D07A000
unkown image
page readonly
clean
7FF542487000
unkown image
page readonly
clean
207A9441000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
EEBB1FE000
stack
page read and write
clean
7F090000
unkown image
page readonly
clean
7F760000
unkown image
page readonly
clean
294F000
unkown image
page readonly
clean
2824000
unkown image
page readonly
clean
27CD35D0000
unkown
page read and write
clean
2A54E46F000
unkown
page read and write
clean
2140287E000
unkown
page read and write
clean
7FF57D361000
unkown image
page readonly
clean
7FBB0000
unkown image
page readonly
clean
7FF5422C1000
unkown image
page readonly
clean
17F86D90000
unkown
page read and write
clean
7F910000
unkown image
page readonly
clean
3070000
heap private
page read and write
clean
7DF550170000
unkown image
page readonly
clean
27046902000
unkown
page read and write
clean
980000
heap default
page read and write
clean
2A36000
unkown image
page readonly
clean
7FF5352B3000
unkown image
page readonly
clean
315A000
unkown
page read and write
clean
7FA90000
unkown image
page readonly
clean
7FF5C797B000
unkown image
page readonly
clean
7DF5FBA62000
unkown image
page readonly
clean
7F912000
unkown image
page readonly
clean
27CD3D30000
unkown
page readonly
clean
23472C29000
unkown
page read and write
clean
2126D350000
unkown image
page readonly
clean
7DF5F0022000
unkown image
page readonly
clean
7F450000
unkown image
page readonly
clean
7FF5424E2000
unkown image
page readonly
clean
67B000
unkown
page read and write
clean
2A36000
unkown image
page readonly
clean
68C0000
unkown
page read and write
clean
2C64000
unkown image
page readonly
clean
7FF5EF245000
unkown image
page readonly
clean
298B000
unkown image
page readonly
clean
4BB0000
heap private
page read and write
clean
215A6BE0000
unkown image
page readonly
clean
8B0000
unkown image
page readonly
clean
2E85000
heap default
page read and write
clean
6EA00000
unkown image
page readonly
clean
7F452000
unkown image
page readonly
clean
2A3C000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
9D0000
heap default
page read and write
clean
207A92D0000
unkown image
page readonly
clean
2A54E44C000
unkown
page read and write
clean
298B000
unkown image
page readonly
clean
2979000
unkown image
page readonly
clean
3080000
unkown image
page readonly
clean
2A54E47E000
unkown
page read and write
clean
2A42000
unkown image
page readonly
clean
7DF5D56A2000
unkown image
page readonly
clean
2C98000
unkown image
page readonly
clean
27046790000
unkown
page read and write
clean
21402847000
unkown
page read and write
clean
7DF5D5692000
unkown image
page readonly
clean
7FF535361000
unkown image
page readonly
clean
17F86DA0000
unkown
page readonly
clean
207A9A80000
unkown
page read and write
clean
625B3FF000
stack
page read and write
clean
8B0000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FF57CF5B000
unkown image
page readonly
clean
7F920000
unkown image
page readonly
clean
7FB40000
unkown image
page readonly
clean
5C0000
unkown image
page read and write
clean
7FF5BFD43000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
7F080000
unkown image
page readonly
clean
3687000
heap private
page read and write
clean
2985000
unkown image
page readonly
clean
298F000
unkown image
page readonly
clean
7FF5C0117000
unkown image
page readonly
clean
6EA01000
unkown image
page execute read
clean
7FF5E22C3000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
2A54E320000
unkown image
page readonly
clean
7FF5C78F3000
unkown image
page readonly
clean
293E000
unkown image
page readonly
clean
7FF5ED9C3000
unkown image
page readonly
clean
7FF5EDD4B000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FB40000
unkown image
page readonly
clean
7FF54250A000
unkown image
page readonly
clean
299D000
unkown image
page readonly
clean
2C70000
unkown image
page readonly
clean
7FF5ADB21000
unkown image
page readonly
clean
6120000
unkown
page read and write
clean
17F85E60000
unkown image
page readonly
clean
6573000
heap private
page read and write
clean
2BDB000
unkown image
page readonly
clean
2D50000
unkown
page read and write
clean
2841000
unkown image
page readonly
clean
7FF5E23AA000
unkown image
page readonly
clean
2A36000
unkown image
page readonly
clean
7FD22000
unkown image
page readonly
clean
2126D3B0000
unkown image
page readonly
clean
34C8000
unkown
page read and write
clean
5D0000
heap private
page read and write
clean
7FF5EF441000
unkown image
page readonly
clean
8B0000
unkown image
page readonly
clean
7FF5C7A2A000
unkown image
page readonly
clean
2A3C000
unkown image
page readonly
clean
9F8000
unkown
page read and write
clean
7FF5ADC8E000
unkown image
page readonly
clean
21A467C000
unkown
page read and write
clean
7FA80000
unkown image
page readonly
clean
2A0B000
unkown image
page readonly
clean
9F1000
unkown
page read and write
clean
6936EF9000
stack
page read and write
clean
6EA01000
unkown image
page execute read
clean
4B4E000
stack
page read and write
clean
C40000
unkown
page read and write
clean
17F85FAF000
unkown
page read and write
clean
33E4000
unkown
page read and write
clean
7FB22000
unkown image
page readonly
clean
7DF5BB9E0000
unkown image
page readonly
clean
7FCC0000
unkown image
page readonly
clean
790000
unkown image
page readonly
clean
3280000
unkown
page read and write
clean
7FF5ED77C000
unkown image
page readonly
clean
7DF5CDE02000
unkown image
page readonly
clean
6EA4F000
unkown image
page readonly
clean
7FF5EDAE4000
unkown image
page readonly
clean
7FF542365000
unkown image
page readonly
clean
2C71000
unkown image
page readonly
clean
7F780000
unkown image
page readonly
clean
7FF5C793D000
unkown image
page readonly
clean
2A54E43D000
unkown
page read and write
clean
7F3C0000
unkown image
page readonly
clean
2CF0000
unkown image
page readonly
clean
33B0000
unkown image
page readonly
clean
298B000
unkown image
page readonly
clean
7FF5E2394000
unkown image
page readonly
clean
DCC000
unkown
page read and write
clean
7FF5EDD5E000
unkown image
page readonly
clean
7DF5FBA72000
unkown image
page readonly
clean
7FE52000
unkown image
page readonly
clean
2C9D000
unkown
page read and write
clean
27046829000
unkown
page read and write
clean
CA6F8FF000
stack
page read and write
clean
2A36000
unkown image
page readonly
clean
7FF5BFFFB000
unkown image
page readonly
clean
2D90000
heap default
page read and write
clean
77E000
unkown
page read and write
clean
7FF5EDD0D000
unkown image
page readonly
clean
7DF5D56A2000
unkown image
page readonly
clean
7FB32000
unkown image
page readonly
clean
3690000
unkown image
page readonly
clean
2C91000
unkown
page read and write
clean
2A1B000
unkown image
page readonly
clean
7FF534F5C000
unkown image
page readonly
clean
29A6000
unkown image
page readonly
clean
EEBAFF7000
stack
page read and write
clean
29A6000
unkown image
page readonly
clean
7FF5E1C0B000
unkown image
page readonly
clean
17F86219000
heap private
page read and write
clean
7FF542433000
unkown image
page readonly
clean
7FF5C00CE000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
27046D90000
unkown image
page readonly
clean
7FF5C79A7000
unkown image
page readonly
clean
87B000
unkown
page read and write
clean
7DF5CDE12000
unkown image
page readonly
clean
970000
unkown image
page readonly
clean
7FA82000
unkown image
page readonly
clean
7FD20000
unkown image
page readonly
clean
207A9429000
unkown
page read and write
clean
3030000
unkown image
page readonly
clean
7F912000
unkown image
page readonly
clean
215A6C02000
unkown
page read and write
clean
2A54E320000
unkown image
page readonly
clean
7FF5EF38D000
unkown image
page readonly
clean
C40000
heap private
page read and write
clean
2A54E413000
unkown
page read and write
clean
2A54E434000
unkown
page read and write
clean
294F000
unkown image
page readonly
clean
7F080000
unkown image
page readonly
clean
6EA4F000
unkown image
page readonly
clean
7FF5C7985000
unkown image
page readonly
clean
7FB90000
unkown image
page readonly
clean
F30957E000
stack
page read and write
clean
21A497E000
stack
page read and write
clean
7F920000
unkown image
page readonly
clean
5F0000
unkown image
page readonly
clean
7DF5F0012000
unkown image
page readonly
clean
299D000
unkown image
page readonly
clean
668D000
stack
page read and write
clean
7FE60000
unkown image
page readonly
clean
29C0000
unkown image
page readonly
clean
7F762000
unkown image
page readonly
clean
2B8E000
unkown image
page readonly
clean
2BD5000
unkown image
page readonly
clean
207A9C02000
unkown
page read and write
clean
2BB1000
unkown image
page readonly
clean
207A9469000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
7DF5D5692000
unkown image
page readonly
clean
B0E000
unkown
page read and write
clean
2A1B000
unkown image
page readonly
clean
625B1FB000
stack
page read and write
clean
2F60000
unkown image
page readonly
clean
207A9810000
unkown image
page readonly
clean
470000
heap default
page read and write
clean
215A7402000
unkown
page read and write
clean
5FF0000
heap private
page read and write
clean
29A6000
unkown image
page readonly
clean
7FF534F20000
unkown image
page readonly
clean
BF0000
unkown image
page readonly
clean
27CD3590000
unkown image
page readonly
clean
7DF542FE0000
unkown image
page readonly
clean
17F86430000
unkown image
page readonly
clean
C40000
unkown
page read and write
clean
27CD3560000
unkown image
page readonly
clean
27046E60000
unkown image
page write copy
clean
2A0F000
unkown image
page readonly
clean
270468C8000
unkown
page read and write
clean
2A54E429000
unkown
page read and write
clean
4D7F000
stack
page read and write
clean
7FF5EDD37000
unkown image
page readonly
clean
92C000
unkown
page read and write
clean
7FF5C019A000
unkown image
page readonly
clean
7DF5CDE00000
unkown image
page readonly
clean
7FF542391000
unkown image
page readonly
clean
2FA0000
unkown image
page readonly
clean
3090000
unkown image
page readonly
clean
EEBAC7E000
stack
page read and write
clean
7FA20000
unkown image
page readonly
clean
298F000
unkown image
page readonly
clean
7FF5ADABF000
unkown image
page readonly
clean
7FF5C00A9000
unkown image
page readonly
clean
17F85E90000
unkown image
page readonly
clean
27046871000
unkown
page read and write
clean
6936CFF000
stack
page read and write
clean
2126DE00000
unkown
page read and write
clean
7FB40000
unkown image
page readonly
clean
2A3C000
unkown image
page readonly
clean
7FD50000
unkown image
page readonly
clean
7F092000
unkown image
page readonly
clean
E7E2F7E000
stack
page read and write
clean
2979000
unkown image
page readonly
clean
281A000
unkown image
page readonly
clean
C3F000
stack
page read and write
clean
7F910000
unkown image
page readonly
clean
7F080000
unkown image
page readonly
clean
31D0000
unkown image
page readonly
clean
7F772000
unkown image
page readonly
clean
7FF5ADCDD000
unkown image
page readonly
clean
234729D0000
unkown image
page readonly
clean
7FF5E1FA7000
unkown image
page readonly
clean
2C98000
unkown image
page readonly
clean
7FF57D2B3000
unkown image
page readonly
clean
4F0000
heap default
page read and write
clean
17F85EF0000
unkown image
page readonly
clean
7FF534DFB000
unkown image
page readonly
clean
2126D340000
heap private
page read and write
clean
381DFFD000
stack
page read and write
clean
7FF5BFFF5000
unkown image
page readonly
clean
2817000
unkown image
page readonly
clean
EEBADFF000
stack
page read and write
clean
7FF57D2D7000
unkown image
page readonly
clean
7FF5C793F000
unkown image
page readonly
clean
7FF57D28E000
unkown image
page readonly
clean
7FF5E1BC8000
unkown image
page readonly
clean
2B9F000
unkown image
page readonly
clean
17F85E50000
unkown
page read and write
clean
67E000
stack
page read and write
clean
7FF5C7950000
unkown image
page readonly
clean
7DF5F0022000
unkown image
page readonly
clean
6936C7B000
unkown
page read and write
clean
7FB32000
unkown image
page readonly
clean
17F86215000
heap private
page read and write
clean
2979000
unkown image
page readonly
clean
7F092000
unkown image
page readonly
clean
2F40000
stack
page read and write
clean
880000
unkown image
page readonly
clean
292E000
unkown image
page readonly
clean
7F3C0000
unkown image
page readonly
clean
33D0000
unkown image
page readonly
clean
7DF44E040000
unkown image
page readonly
clean
2966000
unkown image
page readonly
clean
2A54E464000
unkown
page read and write
clean
B90000
unkown
page read and write
clean
C3E000
stack
page read and write
clean
2CD5000
stack
page execute and read and write
clean
2824000
unkown image
page readonly
clean
215A7250000
unkown image
page readonly
clean
2BED000
unkown image
page readonly
clean
B9F000
stack
page read and write
clean
2EF0000
unkown image
page readonly
clean
2A36000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
7F772000
unkown image
page readonly
clean
2A14000
unkown image
page readonly
clean
7FF5E232A000
unkown image
page readonly
clean
5F0000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
298B000
unkown image
page readonly
clean
215A7330000
unkown
page read and write
clean
66CE000
stack
page read and write
clean
3156000
unkown
page read and write
clean
9F0000
unkown image
page readonly
clean
7DF488E90000
unkown image
page readonly
clean
7FB90000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
7FF5E23B1000
unkown image
page readonly
clean
2A43000
unkown image
page readonly
clean
7DF542FC0000
unkown image
page readonly
clean
2FA0000
unkown image
page readonly
clean
7FF5ADCDA000
unkown image
page readonly
clean
7FF5EF0A1000
unkown image
page readonly
clean
7EF80000
unkown image
page readonly
clean
6EA4C000
unkown image
page read and write
clean
27047132000
unkown
page read and write
clean
2A54E468000
unkown
page read and write
clean
7DF5BB9D2000
unkown image
page readonly
clean
2D00000
unkown image
page readonly
clean
2CEB000
unkown
page read and write
clean
2A2B000
unkown image
page readonly
clean
2966000
unkown image
page readonly
clean
7DF5FD240000
unkown image
page readonly
clean
2875000
unkown image
page readonly
clean
7DF5BB9C0000
unkown image
page readonly
clean
7FF5C00F3000
unkown image
page readonly
clean
DDEE97F000
stack
page read and write
clean
6570000
heap private
page read and write
clean
7FF5EF513000
unkown image
page readonly
clean
7FF5C00B3000
unkown image
page readonly
clean
17F86DC0000
unkown
page read and write
clean
DDEEC7D000
stack
page read and write
clean
29AB000
unkown image
page readonly
clean
2979000
unkown image
page readonly
clean
298B000
unkown image
page readonly
clean
5DD4000
heap private
page read and write
clean
425000
stack
page execute and read and write
clean
2126D502000
unkown
page read and write
clean
2F90000
unkown image
page readonly
clean
292E000
unkown image
page readonly
clean
2C8C000
unkown image
page readonly
clean
7DF5FBA70000
unkown image
page readonly
clean
C30000
unkown image
page readonly
clean
215A6D08000
unkown
page read and write
clean
7F462000
unkown image
page readonly
clean
2BDF000
unkown image
page readonly
clean
7FB82000
unkown image
page readonly
clean
7DF58AFD0000
unkown image
page readonly
clean
7FF54236B000
unkown image
page readonly
clean
2D00000
unkown image
page readonly
clean
2997000
unkown image
page readonly
clean
281A000
unkown image
page readonly
clean
646E000
stack
page read and write
clean
7FF5ADC83000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FF5E22D3000
unkown image
page readonly
clean
7FF57D26D000
unkown image
page readonly
clean
7FF5C78AB000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
21A4E7D000
stack
page read and write
clean
298F000
unkown image
page readonly
clean
7FF57D2DA000
unkown image
page readonly
clean
2C98000
unkown image
page readonly
clean
2A54E459000
unkown
page read and write
clean
6EA01000
unkown image
page execute read
clean
6EA3A000
unkown image
page readonly
clean
5FF4000
heap private
page read and write
clean
7FF5BFC87000
unkown image
page readonly
clean
7F980000
unkown image
page readonly
clean
9D0000
unkown image
page readonly
clean
7FCB0000
unkown image
page readonly
clean
2D9A000
heap default
page read and write
clean
7DF5FD232000
unkown image
page readonly
clean
7F0A0000
unkown image
page readonly
clean
2CB4000
unkown
page read and write
clean
2CF0000
unkown
page read and write
clean
2966000
unkown image
page readonly
clean
7FBA0000
unkown image
page readonly
clean
7DF5D5690000
unkown image
page readonly
clean
7FF5EF390000
unkown image
page readonly
clean
7FD20000
unkown image
page readonly
clean
21A4A7E000
stack
page read and write
clean
2841000
unkown image
page readonly
clean
F30967E000
stack
page read and write
clean
5D0000
unkown image
page readonly
clean
7DF550190000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7F762000
unkown image
page readonly
clean
21402913000
unkown
page read and write
clean
2A54E467000
unkown
page read and write
clean
7F930000
unkown image
page readonly
clean
21402760000
unkown
page read and write
clean
21402660000
heap default
page read and write
clean
21402848000
unkown
page read and write
clean
7FE52000
unkown image
page readonly
clean
23472C4E000
unkown
page read and write
clean
7F930000
unkown image
page readonly
clean
2D70000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
2140286B000
unkown
page read and write
clean
2A36000
unkown image
page readonly
clean
C20000
unkown image
page readonly
clean
33DD000
unkown
page read and write
clean
29A6000
unkown image
page readonly
clean
29AB000
unkown image
page readonly
clean
7FF5C7953000
unkown image
page readonly
clean
2A54E475000
unkown
page read and write
clean
7FF57D287000
unkown image
page readonly
clean
2126D413000
unkown
page read and write
clean
43C000
unkown
page read and write
clean
2BF6000
unkown image
page readonly
clean
17F85EB0000
unkown
page read and write
clean
7F922000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
35A0000
unkown image
page readonly
clean
7FF5EDCF7000
unkown image
page readonly
clean
7FCD0000
unkown image
page readonly
clean
2A54E45F000
unkown
page read and write
clean
7FF5C00D7000
unkown image
page readonly
clean
AD0000
unkown image
page readonly
clean
31E0000
unkown
page read and write
clean
9D0000
unkown
page read and write
clean
7FF5ADC6D000
unkown image
page readonly
clean
2E10000
heap default
page read and write
clean
2865000
unkown image
page readonly
clean
7FF5EF415000
unkown image
page readonly
clean
3160000
unkown image
page readonly
clean
2A54E46A000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
7F770000
unkown image
page readonly
clean
23472D00000
unkown
page read and write
clean
7FF57D26F000
unkown image
page readonly
clean
2A54E370000
heap default
page read and write
clean
2A43000
unkown image
page readonly
clean
3020000
heap private
page read and write
clean
298B000
unkown image
page readonly
clean
2F4B000
unkown
page read and write
clean
215A6C3C000
unkown
page read and write
clean
2A54E46B000
unkown
page read and write
clean
7FF5C0021000
unkown image
page readonly
clean
7FF5AD525000
unkown image
page readonly
clean
7FF5422DD000
unkown image
page readonly
clean
625AD3E000
stack
page read and write
clean
7FF5ADD51000
unkown image
page readonly
clean
2A3C000
unkown image
page readonly
clean
2875000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
7FF5E2382000
unkown image
page readonly
clean
21402888000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
7FF5EDB9F000
unkown image
page readonly
clean
2CA4000
unkown
page read and write
clean
215A6BB0000
unkown image
page readonly
clean
27046813000
unkown
page read and write
clean
2941000
unkown image
page readonly
clean
7FF5EDD52000
unkown image
page readonly
clean
7FF5E22B6000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
7FF5E21C2000
unkown image
page readonly
clean
7F450000
unkown image
page readonly
clean
7FF57D257000
unkown image
page readonly
clean
E7E30FF000
stack
page read and write
clean
293E000
unkown image
page readonly
clean
7FF54248D000
unkown image
page readonly
clean
2C95000
unkown
page read and write
clean
2A74000
unkown image
page readonly
clean
7FF57D344000
unkown image
page readonly
clean
2CAA000
unkown
page read and write
clean
7DF5FBA60000
unkown image
page readonly
clean
17F85E60000
unkown image
page readonly
clean
2DD0000
unkown image
page readonly
clean
2F90000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
EB5000
stack
page execute and read and write
clean
7F460000
unkown image
page readonly
clean
2FA0000
unkown image
page readonly
clean
17F85FAF000
unkown
page read and write
clean
34A0000
heap default
page read and write
clean
6EA3A000
unkown image
page readonly
clean
6400000
unkown
page read and write
clean
207A9320000
heap default
page read and write
clean
27046913000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
4BC0000
unkown image
page readonly
clean
950000
unkown image
page readonly
clean
96B000
unkown
page read and write
clean
2941000
unkown image
page readonly
clean
21402829000
unkown
page read and write
clean
6936DFE000
stack
page read and write
clean
1C0000
unkown image
page readonly
clean
2A54E463000
unkown
page read and write
clean
7DF58AFC0000
unkown image
page readonly
clean
29AB000
unkown image
page readonly
clean
7FF5EDD7A000
unkown image
page readonly
clean
7FF542437000
unkown image
page readonly
clean
B0A000
unkown
page read and write
clean
2979000
unkown image
page readonly
clean
CA6F9FE000
stack
page read and write
clean
7F760000
unkown image
page readonly
clean
2A14000
unkown image
page readonly
clean
2941000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
7FB92000
unkown image
page readonly
clean
7F912000
unkown image
page readonly
clean
2A14000
unkown image
page readonly
clean
2A0F000
unkown image
page readonly
clean
7FF5ADC80000
unkown image
page readonly
clean
2979000
unkown image
page readonly
clean
2A0B000
unkown image
page readonly
clean
6936FF9000
stack
page read and write
clean
7FF5EF599000
unkown image
page readonly
clean
2A54E45D000
unkown
page read and write
clean
292E000
unkown image
page readonly
clean
2A1B000
unkown image
page readonly
clean
7FF57D22E000
unkown image
page readonly
clean
7FF5C77D8000
unkown image
page readonly
clean
2C9D000
unkown
page read and write
clean
7FF5E1C39000
unkown image
page readonly
clean
285C000
unkown image
page readonly
clean
307E000
stack
page read and write
clean
3110000
unkown image
page readonly
clean
17F86B50000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
960000
unkown image
page readonly
clean
2875000
unkown image
page readonly
clean
7DF5CDE20000
unkown image
page readonly
clean
7DF542FE0000
unkown image
page readonly
clean
33DE000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
27CD3C50000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
17F85F68000
heap default
page read and write
clean
2A54E478000
unkown
page read and write
clean
7FF5EF4CF000
unkown image
page readonly
clean
2A0B000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
625B2F7000
stack
page read and write
clean
5F0000
unkown image
page readonly
clean
23472C48000
unkown
page read and write
clean
33DD000
unkown
page read and write
clean
2A54E424000
unkown
page read and write
clean
2875000
unkown image
page readonly
clean
215A6BA0000
unkown image
page readonly
clean
7FF5420AD000
unkown image
page readonly
clean
7FF5ADD4A000
unkown image
page readonly
clean
6EA01000
unkown image
page execute read
clean
1270000
unkown image
page readonly
clean
7F3D0000
unkown image
page readonly
clean
E7E32F7000
stack
page read and write
clean
33D1000
unkown
page read and write
clean
8D0000
unkown
page read and write
clean
2C98000
unkown
page read and write
clean
7F922000
unkown image
page readonly
clean
6EA4C000
unkown image
page read and write
clean
2A54EA50000
unkown image
page readonly
clean
970000
unkown image
page readonly
clean
7DF5FD230000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
27CD35A0000
heap default
page read and write
clean
2C9E000
unkown
page read and write
clean
1C0000
unkown
page read and write
clean
7FF5352D7000
unkown image
page readonly
clean
5FE0000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
2A1B000
unkown image
page readonly
clean
21402610000
unkown image
page readonly
clean
215A70D0000
unkown image
page readonly
clean
2C6B000
unkown image
page readonly
clean
23472C00000
unkown
page read and write
clean
3490000
unkown image
page readonly
clean
2A1B000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
4B8F000
stack
page read and write
clean
292E000
unkown image
page readonly
clean
29A6000
unkown image
page readonly
clean
29C0000
unkown image
page readonly
clean
7FF5C018A000
unkown image
page readonly
clean
23472C7E000
unkown
page read and write
clean
970000
unkown image
page readonly
clean
E7E35FF000
stack
page read and write
clean
F30927F000
stack
page read and write
clean
381E3FF000
stack
page read and write
clean
7FF534B1C000
unkown image
page readonly
clean
7FF5ADAE6000
unkown image
page readonly
clean
7FF5422E0000
unkown image
page readonly
clean
2CF0000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FC20000
unkown image
page readonly
clean
7FF535332000
unkown image
page readonly
clean
23473000000
unkown image
page readonly
clean
7F470000
unkown image
page readonly
clean
7FF57D2DD000
unkown image
page readonly
clean
7FF5ADD61000
unkown image
page readonly
clean
3270000
unkown image
page readonly
clean
7FF5E22D0000
unkown image
page readonly
clean
7FF535283000
unkown image
page readonly
clean
7FF5352BE000
unkown image
page readonly
clean
7FBA0000
unkown image
page readonly
clean
7FF5E221C000
unkown image
page readonly
clean
23472C4C000
unkown
page read and write
clean
2B7E000
unkown image
page readonly
clean
7FF5E22FB000
unkown image
page readonly
clean
35A0000
unkown
page read and write
clean
7FF5C77E5000
unkown image
page readonly
clean
5D0000
unkown image
page readonly
clean
2C70000
unkown image
page readonly
clean
CA6F4CC000
unkown
page read and write
clean
7FF5ADAFF000
unkown image
page readonly
clean
7FF5C7194000
unkown image
page readonly
clean
7FB80000
unkown image
page readonly
clean
DDEEF7F000
stack
page read and write
clean
2F60000
unkown image
page readonly
clean
17F85F60000
heap default
page read and write
clean
21402600000
heap private
page read and write
clean
7DF5FD220000
unkown image
page readonly
clean
8C0000
unkown image
page read and write
clean
6EA01000
unkown image
page execute read
clean
7F922000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
880000
unkown image
page readonly
clean
7FF5420B3000
unkown image
page readonly
clean
2C70000
unkown image
page readonly
clean
3DA000
unkown
page read and write
clean
2A54E310000
heap private
page read and write
clean
5EE0000
unkown image
page readonly
clean
5D0000
unkown image
page readonly
clean
7FF5EF4B7000
unkown image
page readonly
clean
33BA000
heap default
page read and write
clean
7F3B0000
unkown image
page readonly
clean
B80000
unkown image
page readonly
clean
7FF5ADA27000
unkown image
page readonly
clean
980000
unkown image
page readonly
clean
2F90000
unkown image
page readonly
clean
2A0B000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
17F85E80000
unkown image
page readonly
clean
32A7000
heap private
page read and write
clean
7DF4F9930000
unkown image
page readonly
clean
EEBA96B000
unkown
page read and write
clean
7F0A0000
unkown image
page readonly
clean
33DD000
unkown
page read and write
clean
2A9D000
unkown image
page readonly
clean
7FB22000
unkown image
page readonly
clean
6AC0000
unkown
page read and write
clean
6936F7E000
stack
page read and write
clean
27CD3602000
unkown
page read and write
clean
2126D330000
unkown image
page read and write
clean
2D00000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
C3C000
unkown
page read and write
clean
7F450000
unkown image
page readonly
clean
C30000
unkown image
page readonly
clean
7FD30000
unkown image
page readonly
clean
207A9476000
unkown
page read and write
clean
2A54E6D0000
unkown image
page readonly
clean
7FF57D273000
unkown image
page readonly
clean
7F0A0000
unkown image
page readonly
clean
7F460000
unkown image
page readonly
clean
2A14000
unkown image
page readonly
clean
2DAE000
stack
page read and write
clean
7FF5EF5A4000
unkown image
page readonly
clean
17F86DB0000
unkown
page read and write
clean
7FF5C000C000
unkown image
page readonly
clean
7FF5EDDEA000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
8B0000
unkown image
page readonly
clean
7FF5EDCEE000
unkown image
page readonly
clean
29A6000
unkown image
page readonly
clean
980000
unkown image
page readonly
clean
BFE000
stack
page read and write
clean
2F35000
stack
page execute and read and write
clean
2961000
unkown image
page readonly
clean
7FF5C00AD000
unkown image
page readonly
clean
7FA92000
unkown image
page readonly
clean
215A6C7E000
unkown
page read and write
clean
27CD3550000
heap private
page read and write
clean
2A0B000
unkown image
page readonly
clean
2C70000
unkown
page read and write
clean
27046660000
unkown image
page readonly
clean
7F770000
unkown image
page readonly
clean
7FA90000
unkown image
page readonly
clean
298F000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
7FF5C77E9000
unkown image
page readonly
clean
2824000
unkown image
page readonly
clean
7FB90000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FF5EDDFE000
unkown image
page readonly
clean
7FB40000
unkown image
page readonly
clean
5D0000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
6580000
unkown
page read and write
clean
7FF5C0184000
unkown image
page readonly
clean
7FF5ADCBE000
unkown image
page readonly
clean
2A0F000
unkown image
page readonly
clean
7FF5E1C09000
unkown image
page readonly
clean
7FF535257000
unkown image
page readonly
clean
6EA4F000
unkown image
page readonly
clean
2A54E8D0000
unkown image
page readonly
clean
7F452000
unkown image
page readonly
clean
2D10000
unkown
page read and write
clean
2EF0000
unkown image
page readonly
clean
7FF5CE2C1000
unkown image
page readonly
clean
7FD40000
unkown image
page readonly
clean
207A9600000
unkown image
page readonly
clean
27CD3702000
unkown
page read and write
clean
293E000
unkown image
page readonly
clean
34CE000
unkown
page read and write
clean
7F3B0000
unkown image
page readonly
clean
AE0000
heap private
page read and write
clean
381DEFE000
stack
page read and write
clean
2F90000
unkown image
page readonly
clean
7DF5BB9C2000
unkown image
page readonly
clean
7DF4CBCD0000
unkown image
page readonly
clean
960000
unkown image
page readonly
clean
7FF535297000
unkown image
page readonly
clean
9FD000
unkown
page read and write
clean
2966000
unkown image
page readonly
clean
7FF5C011D000
unkown image
page readonly
clean
7FF5EF3AB000
unkown image
page readonly
clean
440000
unkown image
page readonly
clean
7FF5ADBDC000
unkown image
page readonly
clean
7FF5E1F4C000
unkown image
page readonly
clean
2A0F000
unkown image
page readonly
clean
207A9402000
unkown
page read and write
clean
2140283C000
unkown
page read and write
clean
27046640000
unkown image
page readonly
clean
9F0000
unkown image
page readonly
clean
7F772000
unkown image
page readonly
clean
294F000
unkown image
page readonly
clean
9F5000
unkown
page read and write
clean
33DA000
unkown
page read and write
clean
2A14000
unkown image
page readonly
clean
7FF5BFF51000
unkown image
page readonly
clean
1260000
heap private
page read and write
clean
2A0F000
unkown image
page readonly
clean
DDEEB7B000
stack
page read and write
clean
7FF535351000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
7DF5D56A0000
unkown image
page readonly
clean
298B000
unkown image
page readonly
clean
7F090000
unkown image
page readonly
clean
7DF4D3560000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
2126DB30000
unkown
page read and write
clean
2875000
unkown image
page readonly
clean
7FE62000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
7FB90000
unkown image
page readonly
clean
AC3000
unkown
page read and write
clean
281A000
unkown image
page readonly
clean
6EC90000
unkown image
page readonly
clean
340000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
270468DE000
unkown
page read and write
clean
7FF54246E000
unkown image
page readonly
clean
7FF5C7A21000
unkown image
page readonly
clean
DA3000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
2A14000
unkown image
page readonly
clean
7DF550180000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
310E000
stack
page read and write
clean
284D000
unkown image
page readonly
clean
3030000
unkown image
page readonly
clean
7F780000
unkown image
page readonly
clean
2961000
unkown image
page readonly
clean
7FF5EDE01000
unkown image
page readonly
clean
7FB90000
unkown image
page readonly
clean
207A92D0000
unkown image
page readonly
clean
2126DC02000
unkown
page read and write
clean
7FF5EF5C1000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
292E000
unkown image
page readonly
clean
3230000
unkown image
page readonly
clean
7FF542407000
unkown image
page readonly
clean
9F5000
unkown
page read and write
clean
7F460000
unkown image
page readonly
clean
21402D80000
unkown image
page readonly
clean
7DF5CDE00000
unkown image
page readonly
clean
6EA3A000
unkown image
page readonly
clean
7FF57D2B8000
unkown image
page readonly
clean
5F0000
unkown image
page readonly
clean
7FF5EF2F8000
unkown image
page readonly
clean
7FF57D222000
unkown image
page readonly
clean
3210000
unkown image
page readonly
clean
2A6A000
unkown image
page readonly
clean
7DF5BB9E0000
unkown image
page readonly
clean
23472A00000
unkown image
page readonly
clean
7FF5C79AA000
unkown image
page readonly
clean
2E9A000
unkown
page read and write
clean
2A54E47B000
unkown
page read and write
clean
3680000
heap private
page read and write
clean
17F85FCB000
unkown
page read and write
clean
5F0000
unkown image
page readonly
clean
7F930000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
6000000
unkown
page read and write
clean
B5E000
stack
page read and write
clean
2961000
unkown image
page readonly
clean
2CA7000
unkown
page read and write
clean
2985000
unkown image
page readonly
clean
6EA4F000
unkown image
page readonly
clean
7FF5C0025000
unkown image
page readonly
clean
27CD3560000
unkown image
page readonly
clean
9D0000
unkown image
page readonly
clean
6EA4F000
unkown image
page readonly
clean
67F000
unkown
page read and write
clean
950000
unkown image
page readonly
clean
940000
unkown image
page read and write
clean
7F920000
unkown image
page readonly
clean
2824000
unkown image
page readonly
clean
32AA000
heap private
page read and write
clean
B06000
unkown
page read and write
clean
7FB22000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FF5BFFAF000
unkown image
page readonly
clean
7DF5F0020000
unkown image
page readonly
clean
7FF542511000
unkown image
page readonly
clean
29C0000
unkown image
page readonly
clean
15F0000
unkown image
page readonly
clean
7FF5CE2C1000
unkown image
page readonly
clean
CA6FAFE000
stack
page read and write
clean
1F0000
unkown image
page readonly
clean
7FB82000
unkown image
page readonly
clean
AEA000
heap private
page read and write
clean
207A9513000
unkown
page read and write
clean
2EB4000
unkown
page read and write
clean
215A6C52000
unkown
page read and write
clean
215A6C29000
unkown
page read and write
clean
CA6FBFF000
stack
page read and write
clean
2A0F000
unkown image
page readonly
clean
7FF5C7A02000
unkown image
page readonly
clean
308A000
heap private
page read and write
clean
34D1000
unkown
page read and write
clean
9D0000
unkown image
page readonly
clean
34D4000
unkown
page read and write
clean
625ADBE000
stack
page read and write
clean
34D4000
unkown
page read and write
clean
6EA4C000
unkown image
page read and write
clean
F30947F000
stack
page read and write
clean
292E000
unkown image
page readonly
clean
27CD3E02000
unkown
page read and write
clean
21402640000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
2C10000
unkown image
page readonly
clean
23472C50000
unkown
page read and write
clean
9F0000
unkown image
page readonly
clean
AEC000
unkown
page read and write
clean
E80000
heap default
page read and write
clean
970000
unkown image
page readonly
clean
4EBE000
stack
page read and write
clean
21402610000
unkown image
page readonly
clean
27047002000
unkown
page read and write
clean
7FF5EDD77000
unkown image
page readonly
clean
27CD35F0000
unkown
page read and write
clean
7FF5EF592000
unkown image
page readonly
clean
2824000
unkown image
page readonly
clean
7F910000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
2817000
unkown image
page readonly
clean
2126D400000
unkown
page read and write
clean
7FF5E22C6000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
7F922000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
298F000
unkown image
page readonly
clean
7FF5ED62D000
unkown image
page readonly
clean
1B0000
unkown image
page read and write
clean
27CD35B0000
unkown image
page readonly
clean
281A000
unkown image
page readonly
clean
207A92F0000
unkown image
page readonly
clean
21402900000
unkown
page read and write
clean
2875000
unkown image
page readonly
clean
2966000
unkown image
page readonly
clean
7FF5C798E000
unkown image
page readonly
clean
7FF5C7943000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
7FF5EDAD5000
unkown image
page readonly
clean
7FF53528E000
unkown image
page readonly
clean
7FF5C78D5000
unkown image
page readonly
clean
7FF5C7A14000
unkown image
page readonly
clean
7F080000
unkown image
page readonly
clean
2140282D000
unkown
page read and write
clean
23472C4A000
unkown
page read and write
clean
299D000
unkown image
page readonly
clean
2A54E380000
unkown image
page readonly
clean
540000
unkown image
page readonly
clean
7DF58AFD2000
unkown image
page readonly
clean
A43000
unkown
page read and write
clean
2A54E47F000
unkown
page read and write
clean
33B0000
heap default
page read and write
clean
9FD000
unkown
page read and write
clean
29AB000
unkown image
page readonly
clean
17F86E10000
unkown
page read and write
clean
2966000
unkown image
page readonly
clean
23472C89000
unkown
page read and write
clean
7FF5C7765000
unkown image
page readonly
clean
7FF57D020000
unkown image
page readonly
clean
7FF54243E000
unkown image
page readonly
clean
7FF57D332000
unkown image
page readonly
clean
2C95000
unkown
page read and write
clean
27046620000
unkown image
page read and write
clean
2A54E473000
unkown
page read and write
clean
7FF542248000
unkown image
page readonly
clean
7FF5C76BA000
unkown image
page readonly
clean
33E4000
unkown
page read and write
clean
2CA4000
unkown
page read and write
clean
2CF0000
unkown image
page readonly
clean
7FF5E1FA9000
unkown image
page readonly
clean
59C000
unkown
page read and write
clean
7FA80000
unkown image
page readonly
clean
3D6000
unkown
page read and write
clean
2126D370000
unkown image
page readonly
clean
7FCC2000
unkown image
page readonly
clean
7FCB2000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
7FF5EF4C9000
unkown image
page readonly
clean
2979000
unkown image
page readonly
clean
2126D6D0000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
7FF541FF1000
unkown image
page readonly
clean
7FF53535A000
unkown image
page readonly
clean
27046770000
unkown image
page readonly
clean
7FF54241D000
unkown image
page readonly
clean
6EA4C000
unkown image
page read and write
clean
7FF5EDC17000
unkown image
page readonly
clean
7FBA0000
unkown image
page readonly
clean
4CFD000
stack
page read and write
clean
17F86130000
unkown image
page readonly
clean
4D3E000
stack
page read and write
clean
7FF5EF445000
unkown image
page readonly
clean
2C93000
unkown image
page readonly
clean
7F090000
unkown image
page readonly
clean
293E000
unkown image
page readonly
clean
7F762000
unkown image
page readonly
clean
A00000
heap private
page read and write
clean
27047100000
unkown
page read and write
clean
C20000
unkown image
page read and write
clean
4E3E000
stack
page read and write
clean
7DF5FBA80000
unkown image
page readonly
clean
2126DA50000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FF5EF537000
unkown image
page readonly
clean
7DF58AFC0000
unkown image
page readonly
clean
2EE0000
unkown image
page read and write
clean
294F000
unkown image
page readonly
clean
2126D3A0000
heap default
page read and write
clean
6EA00000
unkown image
page readonly
clean
7FF5EDDD9000
unkown image
page readonly
clean
7FF5EDDE4000
unkown image
page readonly
clean
7FF57D058000
unkown image
page readonly
clean
4DBE000
stack
page read and write
clean
34CD000
unkown
page read and write
clean
3020000
unkown image
page readonly
clean
29AB000
unkown image
page readonly
clean
33F4000
unkown
page read and write
clean
2A0B000
unkown image
page readonly
clean
2EF0000
unkown image
page readonly
clean
C30000
unkown image
page readonly
clean
7FF535344000
unkown image
page readonly
clean
299D000
unkown image
page readonly
clean
7FF5ADC6A000
unkown image
page readonly
clean
17F86220000
unkown
page read and write
clean
2A91000
unkown image
page readonly
clean
2A54E350000
unkown image
page readonly
clean
A14000
unkown
page read and write
clean
7FF57D244000
unkown image
page readonly
clean
AD0000
unkown image
page readonly
clean
7FF5EF4D3000
unkown image
page readonly
clean
7DF550170000
unkown image
page readonly
clean
7FF5E2389000
unkown image
page readonly
clean
7F082000
unkown image
page readonly
clean
7FB30000
unkown image
page readonly
clean
C0000
unkown image
page readonly
clean
4EFC000
stack
page read and write
clean
7FF5ADB27000
unkown image
page readonly
clean
5E0000
unkown image
page readonly
clean
970000
unkown image
page readonly
clean
7FE70000
unkown image
page readonly
clean
7DF5CDE10000
unkown image
page readonly
clean
7FE60000
unkown image
page readonly
clean
7DF440E90000
unkown image
page readonly
clean
7DF5F0030000
unkown image
page readonly
clean
215A6C70000
unkown
page read and write
clean
7FF5C0172000
unkown image
page readonly
clean
7FF5C00AF000
unkown image
page readonly
clean
B0000
unkown image
page read and write
clean
7F3C2000
unkown image
page readonly
clean
950000
unkown image
page readonly
clean
2A0F000
unkown image
page readonly
clean
7FF5ADA32000
unkown image
page readonly
clean
7F082000
unkown image
page readonly
clean
21402800000
unkown
page read and write
clean
33D8000
unkown
page read and write
clean
7FF542430000
unkown image
page readonly
clean
215A6B80000
unkown image
page readonly
clean
7FF57D351000
unkown image
page readonly
clean
7DF4EDEE0000
unkown image
page readonly
clean
9DA000
heap default
page read and write
clean
7FF5ADB4B000
unkown image
page readonly
clean
2A54E47C000
unkown
page read and write
clean
7FF5EDC81000
unkown image
page readonly
clean
7FF5EDD04000
unkown image
page readonly
clean
7FF5E23A5000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
7FB22000
unkown image
page readonly
clean
2DE0000
unkown
page read and write
clean
21A4BFE000
stack
page read and write
clean
1F0000
unkown image
page readonly
clean
B10000
unkown image
page readonly
clean
BEB000
unkown
page read and write
clean
29C0000
unkown image
page readonly
clean
960000
unkown image
page readonly
clean
7F772000
unkown image
page readonly
clean
7FAA0000
unkown image
page readonly
clean
23473180000
unkown image
page readonly
clean
7DF5FD222000
unkown image
page readonly
clean
7FF5C7A31000
unkown image
page readonly
clean
2A54E3A0000
unkown
page read and write
clean
7FF5EDD27000
unkown image
page readonly
clean
7FB22000
unkown image
page readonly
clean
34C5000
unkown
page read and write
clean
7FF5ADC4E000
unkown image
page readonly
clean
34E2000
unkown
page read and write
clean
7FF542395000
unkown image
page readonly
clean
CA6F5CE000
stack
page read and write
clean
7FF5EF5B1000
unkown image
page readonly
clean
7DF5CDE12000
unkown image
page readonly
clean
7DF5D5690000
unkown image
page readonly
clean
207A9990000
unkown image
page readonly
clean
EEBA9EE000
stack
page read and write
clean
5C50000
unkown image
page readonly
clean
2CA8000
unkown
page read and write
clean
2C0C000
unkown image
page readonly
clean
32E0000
unkown image
page readonly
clean
6EA01000
unkown image
page execute read
clean
7FCB0000
unkown image
page readonly
clean
B7E000
stack
page read and write
clean
2C98000
unkown image
page readonly
clean
7FF57D34A000
unkown image
page readonly
clean
7F912000
unkown image
page readonly
clean
7DF4B9890000
unkown image
page readonly
clean
292E000
unkown image
page readonly
clean
2A0F000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7F780000
unkown image
page readonly
clean
7DF5FD230000
unkown image
page readonly
clean
7F452000
unkown image
page readonly
clean
215A6B70000
heap private
page read and write
clean
930000
unkown image
page readonly
clean
7FF54245B000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
2A36000
unkown image
page readonly
clean
293E000
unkown image
page readonly
clean
2875000
unkown image
page readonly
clean
4725000
unkown
page execute and read and write
clean
17F85FC6000
heap default
page read and write
clean
7F762000
unkown image
page readonly
clean
27CD3613000
unkown
page read and write
clean
7FB92000
unkown image
page readonly
clean
94B000
unkown
page read and write
clean
299D000
unkown image
page readonly
clean
E7E2E7C000
unkown
page read and write
clean
2A54E476000
unkown
page read and write
clean
7FBA0000
unkown image
page readonly
clean
7FF5C78FA000
unkown image
page readonly
clean
7DF550182000
unkown image
page readonly
clean
890000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
2A3C000
unkown image
page readonly
clean
90A000
unkown
page read and write
clean
34C5000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
299D000
unkown image
page readonly
clean
7DF550172000
unkown image
page readonly
clean
33E7000
unkown
page read and write
clean
326E000
stack
page read and write
clean
7F462000
unkown image
page readonly
clean
34AA000
heap default
page read and write
clean
7F0A0000
unkown image
page readonly
clean
2FA0000
stack
page read and write
clean
7DF5CDE10000
unkown image
page readonly
clean
7F092000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
292E000
unkown image
page readonly
clean
8D0000
unkown image
page readonly
clean
2A0B000
unkown image
page readonly
clean
7F3B2000
unkown image
page readonly
clean
2A54E47A000
unkown
page read and write
clean
7F470000
unkown image
page readonly
clean
9B0000
unkown
page read and write
clean
2C7B000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
D85000
unkown image
page readonly
clean
4500000
unkown
page read and write
clean
7FF5E232D000
unkown image
page readonly
clean
2A54E440000
unkown
page read and write
clean
2126D402000
unkown
page read and write
clean
2A3C000
unkown image
page readonly
clean
7FF54248A000
unkown image
page readonly
clean
299D000
unkown image
page readonly
clean
2A36000
unkown image
page readonly
clean
7FF5C01A1000
unkown image
page readonly
clean
7FB30000
unkown image
page readonly
clean
160000
unkown image
page readonly
clean
E01000
unkown image
page readonly
clean
7FF5424FA000
unkown image
page readonly
clean
540000
unkown image
page readonly
clean
C0000
unkown image
page readonly
clean
8D0000
unkown image
page readonly
clean
299D000
unkown image
page readonly
clean
6EA01000
unkown image
page execute read
clean
7F3B2000
unkown image
page readonly
clean
7FD30000
unkown image
page readonly
clean
207A92C0000
heap private
page read and write
clean
7F920000
unkown image
page readonly
clean
7F092000
unkown image
page readonly
clean
7FF5EDD0F000
unkown image
page readonly
clean
17F86210000
heap private
page read and write
clean
7F080000
unkown image
page readonly
clean
234729B0000
unkown image
page read and write
clean
2C90000
unkown image
page readonly
clean
29C0000
unkown image
page readonly
clean
7DF542FC2000
unkown image
page readonly
clean
23472D08000
unkown
page read and write
clean
2C98000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
F30937C000
stack
page read and write
clean
281A000
unkown image
page readonly
clean
7DF5FBA60000
unkown image
page readonly
clean
2A43000
unkown image
page readonly
clean
27CD363D000
unkown
page read and write
clean
3087000
heap private
page read and write
clean
2BFB000
unkown image
page readonly
clean
7F930000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
33E1000
unkown
page read and write
clean
7F920000
unkown image
page readonly
clean
281A000
unkown image
page readonly
clean
21A4CFD000
stack
page read and write
clean
7FF5EF42C000
unkown image
page readonly
clean
23472B00000
unkown image
page readonly
clean
298B000
unkown image
page readonly
clean
6A0000
heap private
page read and write
clean
7DF542FD0000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
9FD000
unkown
page read and write
clean
7FF5EF51E000
unkown image
page readonly
clean
2A3C000
unkown image
page readonly
clean
960000
unkown image
page readonly
clean
4CBC000
stack
page read and write
clean
296A000
unkown image
page readonly
clean
2985000
unkown image
page readonly
clean
7FF5EDD20000
unkown image
page readonly
clean
480000
unkown
page read and write
clean
7DF58AFD0000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
7FF57D280000
unkown image
page readonly
clean
2AAC000
unkown image
page readonly
clean
DDEE87E000
stack
page read and write
clean
7F462000
unkown image
page readonly
clean
530000
unkown image
page read and write
clean
7FF534FE5000
unkown image
page readonly
clean
450000
unkown image
page readonly
clean
7F3D0000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
215A6C4C000
unkown
page read and write
clean
7FF53526D000
unkown image
page readonly
clean
29C0000
unkown image
page readonly
clean
27046D80000
unkown image
page readonly
clean
293E000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
2CF0000
heap default
page read and write
clean
2BB6000
unkown image
page readonly
clean
940000
unkown image
page read and write
clean
27046C00000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
7FB32000
unkown image
page readonly
clean
7FE62000
unkown image
page readonly
clean
29BC000
unkown image
page readonly
clean
17F85ED0000
unkown
page read and write
clean
2C9D000
unkown
page read and write
clean
23472A20000
heap default
page read and write
clean
17F86630000
unkown image
page readonly
clean
215A6B60000
unkown image
page read and write
clean
950000
unkown image
page readonly
clean
7F452000
unkown image
page readonly
clean
9EB000
unkown
page read and write
clean
C30000
unkown image
page readonly
clean
4E0000
unkown image
page readonly
clean
7DF5F0010000
unkown image
page readonly
clean
7FF5352DD000
unkown image
page readonly
clean
7FF5EF53D000
unkown image
page readonly
clean
7FF5ADD60000
unkown image
page readonly
clean
980000
unkown image
page readonly
clean
E7E34FE000
stack
page read and write
clean
9B5000
stack
page execute and read and write
clean
950000
unkown image
page readonly
clean
2817000
unkown image
page readonly
clean
7FF5C0097000
unkown image
page readonly
clean
2985000
unkown image
page readonly
clean
8D0000
unkown image
page readonly
clean
7FB30000
unkown image
page readonly
clean
207A9300000
unkown image
page readonly
clean
2C7A000
heap default
page read and write
clean
7FF5E23B1000
unkown image
page readonly
clean
27046690000
heap default
page read and write
clean
7DF5BB9D0000
unkown image
page readonly
clean
77A000
unkown
page read and write
clean
7FF5C011A000
unkown image
page readonly
clean
7FF57D339000
unkown image
page readonly
clean
7FF5EDC7B000
unkown image
page readonly
clean
17F85F40000
unkown
page read and write
clean
27CD3E00000
unkown
page read and write
clean
344000
unkown
page read and write
clean
298F000
unkown image
page readonly
clean
7FF5EDCE3000
unkown image
page readonly
clean
2A54E340000
unkown image
page readonly
clean
7F770000
unkown image
page readonly
clean
215A6D02000
unkown
page read and write
clean
7FF5424E9000
unkown image
page readonly
clean
2941000
unkown image
page readonly
clean
234729C0000
heap private
page read and write
clean
7F462000
unkown image
page readonly
clean
234729D0000
unkown image
page readonly
clean
6EA3A000
unkown image
page readonly
clean
2985000
unkown image
page readonly
clean
7DF58AFD2000
unkown image
page readonly
clean
27CD3600000
unkown
page read and write
clean
2D10000
unkown image
page readonly
clean
7FF5E230E000
unkown image
page readonly
clean
7FF5352DA000
unkown image
page readonly
clean
17F85F50000
unkown
page read and write
clean
214025F0000
unkown image
page read and write
clean
2F90000
unkown image
page readonly
clean
7F470000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
7FCD0000
unkown image
page readonly
clean
7FF5C7A25000
unkown image
page readonly
clean
207A9474000
unkown
page read and write
clean
2824000
unkown image
page readonly
clean
7F090000
unkown image
page readonly
clean
7FF5ADCAB000
unkown image
page readonly
clean
2A43000
unkown image
page readonly
clean
7FF5424F4000
unkown image
page readonly
clean
7FF5C00FE000
unkown image
page readonly
clean
2A21000
unkown image
page readonly
clean
2985000
unkown image
page readonly
clean
2D35000
heap default
page read and write
clean
6EA3A000
unkown image
page readonly
clean
3010000
unkown image
page readonly
clean
7F760000
unkown image
page readonly
clean
7FB30000
unkown image
page readonly
clean
2817000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
8D0000
unkown image
page readonly
clean
7FB82000
unkown image
page readonly
clean
2A54EC02000
unkown
page read and write
clean
381DCFD000
stack
page read and write
clean
32B0000
heap default
page read and write
clean
7DF550172000
unkown image
page readonly
clean
B0A000
unkown
page read and write
clean
980000
unkown image
page readonly
clean
6EA4C000
unkown image
page read and write
clean
27CD38D0000
unkown image
page readonly
clean
296A000
unkown image
page readonly
clean
2824000
unkown image
page readonly
clean
7FF5BFF6D000
unkown image
page readonly
clean
2EF0000
unkown image
page readonly
clean
8B0000
unkown image
page readonly
clean
7FD32000
unkown image
page readonly
clean
7FB20000
unkown image
page readonly
clean
7FF57D355000
unkown image
page readonly
clean
7FF5BFC81000
unkown image
page readonly
clean
7FF542463000
unkown image
page readonly
clean
7FF5AD95D000
unkown image
page readonly
clean
E50000
unkown image
page readonly
clean
298F000
unkown image
page readonly
clean
7FB30000
unkown image
page readonly
clean
7FF5ED94D000
unkown image
page readonly
clean
285C000
unkown image
page readonly
clean
7F810000
unkown image
page readonly
clean
7F780000
unkown image
page readonly
clean
910000
unkown
page read and write
clean
2954000
unkown image
page readonly
clean
3920000
unkown image
page readonly
clean
7FD22000
unkown image
page readonly
clean
7F450000
unkown image
page readonly
clean
2A43000
unkown image
page readonly
clean
215A6C4F000
unkown
page read and write
clean
2A48000
unkown image
page readonly
clean
7FB92000
unkown image
page readonly
clean
7FF5C7957000
unkown image
page readonly
clean
27046A00000
unkown image
page readonly
clean
299D000
unkown image
page readonly
clean
7FF5EDBB3000
unkown image
page readonly
clean
2A0B000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
7FF54241F000
unkown image
page readonly
clean
2FA0000
unkown image
page readonly
clean
7FF542419000
unkown image
page readonly
clean
F308FDF000
stack
page read and write
clean
1F0000
unkown image
page readonly
clean
27046800000
unkown
page read and write
clean
2FB0000
unkown
page read and write
clean
7FF534EF7000
unkown image
page readonly
clean
37A0000
unkown image
page readonly
clean
2126D380000
unkown image
page readonly
clean
7FF5EF0A7000
unkown image
page readonly
clean
642D000
stack
page read and write
clean
47B000
unkown
page read and write
clean
83A000
unkown
page read and write
clean
2A54E48C000
unkown
page read and write
clean
2A0F000
unkown image
page readonly
clean
6773000
heap private
page read and write
clean
2A3C000
unkown image
page readonly
clean
7DF5BB9C0000
unkown image
page readonly
clean
7FF57D0E6000
unkown image
page readonly
clean
7FF5E214A000
unkown image
page readonly
clean
E7E33FF000
stack
page read and write
clean
6EA4C000
unkown image
page read and write
clean
2C9A000
unkown
page read and write
clean
2EA0000
unkown image
page readonly
clean
292E000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
EEBB0FE000
stack
page read and write
clean
2A43000
unkown image
page readonly
clean
7FCC2000
unkown image
page readonly
clean
27046630000
heap private
page read and write
clean
7FF5EDC12000
unkown image
page readonly
clean
7FF542501000
unkown image
page readonly
clean
215A6B80000
unkown image
page readonly
clean
7FF5C7A31000
unkown image
page readonly
clean
7FF5E2302000
unkown image
page readonly
clean
4E30000
unkown
page read and write
clean
AE7000
heap private
page read and write
clean
650000
heap default
page read and write
clean
7F910000
unkown image
page readonly
clean
7FB80000
unkown image
page readonly
clean
C10000
unkown image
page readonly
clean
2CF0000
unkown image
page readonly
clean
34D7000
unkown
page read and write
clean
7FB82000
unkown image
page readonly
clean
17F867B0000
unkown image
page readonly
clean
A3F000
unkown
page read and write
clean
7F462000
unkown image
page readonly
clean
298F000
unkown image
page readonly
clean
5FDF000
stack
page read and write
clean
E7E2EFF000
stack
page read and write
clean
7FF5ADCD7000
unkown image
page readonly
clean
381E4FF000
stack
page read and write
clean
7FB20000
unkown image
page readonly
clean
7FF57D017000
unkown image
page readonly
clean
7F082000
unkown image
page readonly
clean
7FB82000
unkown image
page readonly
clean
7DF5FD222000
unkown image
page readonly
clean
7FF5ADD32000
unkown image
page readonly
clean
7FF5ADD5A000
unkown image
page readonly
clean
2126D43D000
unkown
page read and write
clean
7FF5EDA0D000
unkown image
page readonly
clean
2EF3000
unkown
page read and write
clean
2976000
unkown image
page readonly
clean
7F460000
unkown image
page readonly
clean
34CD000
unkown
page read and write
clean
4C0000
unkown
page read and write
clean
27CD3E15000
unkown
page read and write
clean
2929000
unkown image
page readonly
clean
7FF5EF4E0000
unkown image
page readonly
clean
7FA92000
unkown image
page readonly
clean
381D6EB000
unkown
page read and write
clean
29A6000
unkown image
page readonly
clean
7FF5EDD7D000
unkown image
page readonly
clean
7FF5EDDFA000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
1E0000
unkown image
page readonly
clean
2857000
unkown image
page readonly
clean
2985000
unkown image
page readonly
clean
7F760000
unkown image
page readonly
clean
27046841000
unkown
page read and write
clean
21402740000
unkown image
page readonly
clean
2704688A000
unkown
page read and write
clean
7FF5BFE29000
unkown image
page readonly
clean
6590000
unkown
page read and write
clean
2A2B000
unkown image
page readonly
clean
29C0000
unkown image
page readonly
clean
E60000
unkown image
page readonly
clean
7FF5EF4F7000
unkown image
page readonly
clean
7FF5E1C3E000
unkown image
page readonly
clean
29AB000
unkown image
page readonly
clean
7FF5C00C7000
unkown image
page readonly
clean
7FF5C7A09000
unkown image
page readonly
clean
5DD0000
heap private
page read and write
clean
15B000
unkown
page read and write
clean
207A9502000
unkown
page read and write
clean
29C0000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
6936D7F000
stack
page read and write
clean
AC7000
unkown
page read and write
clean
284D000
unkown image
page readonly
clean
6EA3A000
unkown image
page readonly
clean
DDEED7F000
stack
page read and write
clean
7FF5C00C3000
unkown image
page readonly
clean
7FF54231F000
unkown image
page readonly
clean
9FE000
unkown
page read and write
clean
7DF5FD220000
unkown image
page readonly
clean
7DF542FD2000
unkown image
page readonly
clean
990000
unkown image
page readonly
clean
215A6ED0000
unkown image
page readonly
clean
7DF542FC0000
unkown image
page readonly
clean
7DF550182000
unkown image
page readonly
clean
7FF542423000
unkown image
page readonly
clean
2A48000
unkown image
page readonly
clean
29A6000
unkown image
page readonly
clean
2A0B000
unkown image
page readonly
clean
7FF5ADC43000
unkown image
page readonly
clean
7FB20000
unkown image
page readonly
clean
7FF5C0191000
unkown image
page readonly
clean
7DF5D56B0000
unkown image
page readonly
clean
BB0000
unkown image
page readonly
clean
2C70000
heap default
page read and write
clean
7FF57D2BE000
unkown image
page readonly
clean
65A000
heap default
page read and write
clean
E7E31FB000
stack
page read and write
clean
7FD32000
unkown image
page readonly
clean
2A54E400000
unkown
page read and write
clean
9AC000
unkown
page read and write
clean
2A3C000
unkown image
page readonly
clean
5D10000
unkown
page read and write
clean
2A2B000
unkown image
page readonly
clean
7FF5EF5BA000
unkown image
page readonly
clean
7FF57D2AB000
unkown image
page readonly
clean
7F470000
unkown image
page readonly
clean
215A6D13000
unkown
page read and write
clean
2817000
unkown image
page readonly
clean
11D000
unkown
page read and write
clean
7FF5ADD39000
unkown image
page readonly
clean
7FF57D269000
unkown image
page readonly
clean
950000
unkown image
page readonly
clean
7DF5FD232000
unkown image
page readonly
clean
7FF5EF4E3000
unkown image
page readonly
clean
7DF5BB9D2000
unkown image
page readonly
clean
7F760000
unkown image
page readonly
clean
207A99A0000
unkown image
page readonly
clean
7F770000
unkown image
page readonly
clean
4DFF000
stack
page read and write
clean
23472D02000
unkown
page read and write
clean
7FF5E239A000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
29AB000
unkown image
page readonly
clean
7FF5EF50B000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
7FF5C01A1000
unkown image
page readonly
clean
7FF5EF163000
unkown image
page readonly
clean
7FE70000
unkown image
page readonly
clean
7FF5C7934000
unkown image
page readonly
clean
294F000
unkown image
page readonly
clean
21402908000
unkown
page read and write
clean
7FF5ED949000
unkown image
page readonly
clean
2A54E502000
unkown
page read and write
clean
2FF0000
unkown image
page readonly
clean
7FF5E1C10000
unkown image
page readonly
clean
DDEEE7D000
stack
page read and write
clean
A07000
unkown
page read and write
clean
381E2FF000
stack
page read and write
clean
368A000
heap private
page read and write
clean
7FF54237C000
unkown image
page readonly
clean
7F762000
unkown image
page readonly
clean
6EA4F000
unkown image
page readonly
clean
7F912000
unkown image
page readonly
clean
7DF58AFC2000
unkown image
page readonly
clean
7F780000
unkown image
page readonly
clean
7FF5BFF70000
unkown image
page readonly
clean
7FCC0000
unkown image
page readonly
clean
2D00000
unkown image
page readonly
clean
2EF0000
unkown image
page readonly
clean
7FF5EF4E7000
unkown image
page readonly
clean
33CE000
stack
page read and write
clean
2A54E460000
unkown
page read and write
clean
7FF5ADC31000
unkown image
page readonly
clean
2126D458000
unkown
page read and write
clean
7F090000
unkown image
page readonly
clean
690000
unkown image
page readonly
clean
DDEE1FB000
unkown
page read and write
clean
6770000
heap private
page read and write
clean
950000
unkown image
page readonly
clean
2D20000
heap default
page read and write
clean
2976000
unkown image
page readonly
clean
7FF5C7761000
unkown image
page readonly
clean
281A000
unkown image
page readonly
clean
3390000
unkown
page read and write
clean
2A43000
unkown image
page readonly
clean
2841000
unkown image
page readonly
clean
7DF5FBA70000
unkown image
page readonly
clean
294F000
unkown image
page readonly
clean
2D00000
unkown image
page readonly
clean
6936E79000
stack
page read and write
clean
7FF5EDD09000
unkown image
page readonly
clean
284D000
unkown image
page readonly
clean
7FF57D361000
unkown image
page readonly
clean
7DF5FBA72000
unkown image
page readonly
clean
7FF541FF7000
unkown image
page readonly
clean
7FF5422FB000
unkown image
page readonly
clean
AA0000
heap default
page read and write
clean
7DF58AFC2000
unkown image
page readonly
clean
2A54E48D000
unkown
page read and write
clean
294F000
unkown image
page readonly
clean
294F000
unkown image
page readonly
clean
207A9413000
unkown
page read and write
clean
2126D425000
unkown
page read and write
clean
7FF5EDD2E000
unkown image
page readonly
clean
2126D3D0000
unkown
page read and write
clean
7FF5ADC6F000
unkown image
page readonly
clean
7FF5EDC85000
unkown image
page readonly
clean
7FF5EDDF1000
unkown image
page readonly
clean
21402A00000
unkown image
page readonly
clean
6EA4C000
unkown image
page read and write
clean
7FB20000
unkown image
page readonly
clean
7DF5BB9C2000
unkown image
page readonly
clean
6EA00000
unkown image
page readonly
clean
2875000
unkown image
page readonly
clean
7DF58AFE0000
unkown image
page readonly
clean
7FF5EF371000
unkown image
page readonly
clean
2AC5000
unkown image
page readonly
clean
381DBFF000
stack
page read and write
clean
7FF5ADD44000
unkown image
page readonly
clean
298B000
unkown image
page readonly
clean
680000
unkown image
page readonly
clean
27CD3580000
unkown image
page readonly
clean
2126D350000
unkown image
page readonly
clean
7FF542447000
unkown image
page readonly
clean
294F000
unkown image
page readonly
clean
207A92B0000
unkown image
page read and write
clean
6EA00000
unkown image
page readonly
clean
7DF5BB9D0000
unkown image
page readonly
clean
7FF57D283000
unkown image
page readonly
clean
17F85FA7000
unkown
page read and write
clean
7FF5350E6000
unkown image
page readonly
clean
2A1B000
unkown image
page readonly
clean
DDEE9FE000
stack
page read and write
clean
7DF542FD2000
unkown image
page readonly
clean
7DF5F0010000
unkown image
page readonly
clean
7DF5FBA62000
unkown image
page readonly
clean
29AB000
unkown image
page readonly
clean
27046640000
unkown image
page readonly
clean
281A000
unkown image
page readonly
clean
21402813000
unkown
page read and write
clean
7DF5CDE02000
unkown image
page readonly
clean
7F922000
unkown image
page readonly
clean
381E1FF000
stack
page read and write
clean
7FF5EDAD2000
unkown image
page readonly
clean
2C5F000
unkown image
page readonly
clean
34CD000
unkown
page read and write
clean
17F85FAF000
unkown
page read and write
clean
7FF5EF3CF000
unkown image
page readonly
clean
2BC9000
unkown image
page readonly
clean
7F930000
unkown image
page readonly
clean
2EEF000
unkown
page read and write
clean
7FF5C00EB000
unkown image
page readonly
clean
7FF5EF5AA000
unkown image
page readonly
clean
7FCB2000
unkown image
page readonly
clean
2FF0000
unkown image
page readonly
clean
2A54E484000
unkown
page read and write
clean
6EA00000
unkown image
page readonly
clean
2941000
unkown image
page readonly
clean
2A54E455000
unkown
page read and write
clean
7FF535280000
unkown image
page readonly
clean
2CF0000
unkown image
page readonly
clean
23472E00000
unkown image
page readonly
clean
7DF5D56A0000
unkown image
page readonly
clean
4E7F000
stack
page read and write
clean
7FF5352AB000
unkown image
page readonly
clean
7FF5EDD23000
unkown image
page readonly
clean
7FF5EDD13000
unkown image
page readonly
clean
207A9400000
unkown
page read and write
clean
2BC6000
unkown image
page readonly
clean
7F470000
unkown image
page readonly
clean
7F770000
unkown image
page readonly
clean
7DF5F0030000
unkown image
page readonly
clean
2C9D000
unkown
page read and write
clean
CA6F54E000
stack
page read and write
clean
23472C13000
unkown
page read and write
clean
2BBA000
unkown image
page readonly
clean
23472BF0000
unkown
page read and write
clean
285C000
unkown image
page readonly
clean
7DF542FC2000
unkown image
page readonly
clean
6410000
unkown
page read and write
clean
7F452000
unkown image
page readonly
clean
7DF5CDE20000
unkown image
page readonly
clean
7FF5ADC87000
unkown image
page readonly
clean
27CD3629000
unkown
page read and write
clean
34C1000
unkown
page read and write
clean
273E000
unkown image
page readonly
clean
C40000
unkown image
page readonly
clean
880000
unkown image
page readonly
clean
2126DB30000
unkown
page read and write
clean
63E000
stack
page read and write
clean
2C5B000
unkown image
page readonly
clean
2CA1000
unkown
page read and write
clean
7FF5EDDD2000
unkown image
page readonly
clean
21402902000
unkown
page read and write
clean
7FD40000
unkown image
page readonly
clean
7FF5BFF8B000
unkown image
page readonly
clean
7FF5C718B000
unkown image
page readonly
clean
7FF5ADA44000
unkown image
page readonly
clean
215A6D00000
unkown
page read and write
clean
A05000
unkown
page read and write
clean
9FD000
unkown
page read and write
clean
There are 1826 hidden memdumps, click here to show them.