IOC Report

loading gif

Files

File Path
Type
Category
Malicious
lzJWJgZhPc.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
malicious
C:\Users\user\AppData\Local\Temp\Form_Sporogeni.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
malicious
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
clean
C:\Users\user\AppData\Roaming\C79A3B\B52B3F.lck
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-3853321935-2125563209-4053062332-1002\414045e2d09286d5db2581e0d955d358_d06ed635-68f6-4e9a-955c-4899f5f57b9a
data
modified
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\lzJWJgZhPc.exe
"C:\Users\user\Desktop\lzJWJgZhPc.exe"
malicious
C:\Users\user\AppData\Local\Temp\Form_Sporogeni.exe
C:\Users\user\AppData\Local\Temp\Form_Sporogeni.exe
malicious
C:\Users\user\AppData\Local\Temp\Form_Sporogeni.exe
C:\Users\user\AppData\Local\Temp\Form_Sporogeni.exe
malicious

URLs

Name
IP
Malicious
http://63.250.34.171/tickets.php?id=277
63.250.34.171
malicious
http://nsis.sf.net/NSIS_ErrorError
unknown
clean
https://doc-00-50-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/bvmn5idf
unknown
clean
https://doc-00-50-docs.googleusercontent.com/
unknown
clean

Domains

Name
IP
Malicious
drive.google.com
142.250.203.110
clean
googlehosted.l.googleusercontent.com
142.250.180.161
clean
doc-00-50-docs.googleusercontent.com
unknown
clean

IPs

IP
Domain
Country
Malicious
63.250.34.171
unknown
United States
malicious
142.250.180.161
googlehosted.l.googleusercontent.com
United States
clean
142.250.203.110
drive.google.com
United States
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
80A0000
unkown
page execute and read and write
malicious
560000
unkown
page execute and read and write
malicious
199DA846000
unkown
page read and write
clean
7FF566417000
unkown image
page readonly
clean
7FF5668AA000
unkown image
page readonly
clean
1B08FD6C000
unkown
page read and write
clean
21F20F00000
unkown image
page readonly
clean
7DF521EB2000
unkown image
page readonly
clean
7FF591629000
unkown image
page readonly
clean
21F2102A000
unkown
page read and write
clean
7FF5B5337000
unkown image
page readonly
clean
9D4FFE000
stack
page read and write
clean
1B08F390000
unkown image
page readonly
clean
321000
unkown
page read and write
clean
8999000
heap private
page read and write
clean
7DF445D00000
unkown image
page readonly
clean
1E6F3000
unkown
page read and write
clean
199DA710000
unkown image
page readonly
clean
7FF53A11B000
unkown image
page readonly
clean
670F000
stack
page read and write
clean
535000
heap default
page read and write
clean
1928A860000
unkown image
page read and write
clean
1BB93A00000
heap private
page read and write
clean
7DF59F720000
unkown image
page readonly
clean
1ABD2A3A000
unkown
page read and write
clean
254B4000000
unkown
page read and write
clean
7FF509393000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7DF517FB2000
unkown image
page readonly
clean
7FF513A7D000
unkown image
page readonly
clean
7FF50A2AE000
unkown image
page readonly
clean
7FF57A84D000
unkown image
page readonly
clean
27A24718000
unkown
page read and write
clean
1928A8A0000
unkown image
page readonly
clean
84B90FF000
stack
page read and write
clean
7DF5885A2000
unkown image
page readonly
clean
24E074CD000
unkown
page read and write
clean
7FF591941000
unkown image
page readonly
clean
7DF521ED0000
unkown image
page readonly
clean
7FF5667D0000
unkown image
page readonly
clean
2AC011B0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF53A1B4000
unkown image
page readonly
clean
2AC01430000
unkown image
page readonly
clean
1ABD2A58000
unkown
page read and write
clean
7FF57A877000
unkown image
page readonly
clean
7DF574520000
unkown image
page readonly
clean
AC55079000
stack
page read and write
clean
7FF591AAA000
unkown image
page readonly
clean
7FF5141AE000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF59199E000
unkown image
page readonly
clean
A2F000
stack
page read and write
clean
7FF53A02B000
unkown image
page readonly
clean
7FF57A14E000
unkown image
page readonly
clean
1B08F4EB000
unkown
page read and write
clean
7FF5B5212000
unkown image
page readonly
clean
24E07230000
heap private
page read and write
clean
7FF53A1D1000
unkown image
page readonly
clean
7DF547E42000
unkown image
page readonly
clean
1ABD2A5F000
unkown
page read and write
clean
7FF566889000
unkown image
page readonly
clean
7FF57A002000
unkown image
page readonly
clean
24E07470000
unkown
page read and write
clean
1B08FD88000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF57A860000
unkown image
page readonly
clean
7FF50F415000
unkown image
page readonly
clean
1B08F3A0000
unkown image
page readonly
clean
27A24658000
unkown
page read and write
clean
7FF5A0742000
unkown image
page readonly
clean
27A2463D000
unkown
page read and write
clean
1DDEE000
stack
page read and write
clean
1B08FD99000
unkown
page read and write
clean
21F20E10000
heap default
page read and write
clean
7DF521EC0000
unkown image
page readonly
clean
1B08FD84000
unkown
page read and write
clean
7FF514159000
unkown image
page readonly
clean
7DF5885A0000
unkown image
page readonly
clean
7FF509398000
unkown image
page readonly
clean
7FF50A15F000
unkown image
page readonly
clean
7FF591A92000
unkown image
page readonly
clean
27A26180000
unkown
page read and write
clean
7DF5AE6E0000
unkown image
page readonly
clean
9C000
unkown
page read and write
clean
1B08F451000
unkown
page read and write
clean
65CF000
stack
page read and write
clean
BB3037B000
stack
page read and write
clean
7FF514222000
unkown image
page readonly
clean
7FF50A2A3000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF591871000
unkown image
page readonly
clean
24E07260000
unkown image
page readonly
clean
7DF574510000
unkown image
page readonly
clean
7FF50A25F000
unkown image
page readonly
clean
7FF5B53D9000
unkown image
page readonly
clean
7DF51D0A0000
unkown image
page readonly
clean
1DC6F000
stack
page read and write
clean
1B08F370000
unkown image
page readonly
clean
7FF513A10000
unkown image
page readonly
clean
7FF5919B7000
unkown image
page readonly
clean
27A24664000
unkown
page read and write
clean
7FF5668A1000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
27A260C0000
unkown
page read and write
clean
1B090200000
unkown
page read and write
clean
1B08FBF0000
unkown image
page read and write
clean
1BB93C79000
unkown
page read and write
clean
7DF59F732000
unkown image
page readonly
clean
7DF59F722000
unkown image
page readonly
clean
1E1D0000
unkown
page read and write
clean
7FF57A863000
unkown image
page readonly
clean
7DF521ED0000
unkown image
page readonly
clean
31E811B000
unkown
page read and write
clean
1BB93B60000
unkown
page read and write
clean
7FF509441000
unkown image
page readonly
clean
1BB939F0000
unkown image
page read and write
clean
7FF509412000
unkown image
page readonly
clean
31E847E000
stack
page read and write
clean
7FF50A25D000
unkown image
page readonly
clean
7FF5A09C3000
unkown image
page readonly
clean
1B08FD6C000
unkown
page read and write
clean
7DF521EB0000
unkown image
page readonly
clean
7DF5C3060000
unkown image
page readonly
clean
1BB94190000
unkown image
page readonly
clean
7FF5B5186000
unkown image
page readonly
clean
27A24649000
unkown
page read and write
clean
7FF5660B1000
unkown image
page readonly
clean
629A000
unkown image
page readonly
clean
24E07513000
unkown
page read and write
clean
7DF59F732000
unkown image
page readonly
clean
1ABD2A29000
unkown
page read and write
clean
6D9A16B000
unkown
page read and write
clean
7FF591787000
unkown image
page readonly
clean
7FF5A0754000
unkown image
page readonly
clean
24E07800000
unkown image
page readonly
clean
24E07220000
unkown image
page read and write
clean
7FF50F3F2000
unkown image
page readonly
clean
7FF5660BE000
unkown image
page readonly
clean
1E5A7000
unkown
page read and write
clean
199DA6E0000
unkown image
page readonly
clean
7ACD57F000
stack
page read and write
clean
24E07240000
unkown image
page readonly
clean
7FF51424E000
unkown image
page readonly
clean
1B08FD84000
unkown
page read and write
clean
7FF591825000
unkown image
page readonly
clean
7FF50EBE7000
unkown image
page readonly
clean
7FF591875000
unkown image
page readonly
clean
7DF547E30000
unkown image
page readonly
clean
1B08FD95000
unkown
page read and write
clean
1B08F4C5000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
1E6DF000
stack
page read and write
clean
7FF59181F000
unkown image
page readonly
clean
1B08F4D3000
unkown
page read and write
clean
1E30F000
stack
page read and write
clean
7FF5667BF000
unkown image
page readonly
clean
7FF50F40A000
unkown image
page readonly
clean
24E07390000
unkown
page read and write
clean
7FF5666C7000
unkown image
page readonly
clean
7FF5A0737000
unkown image
page readonly
clean
7DF547E32000
unkown image
page readonly
clean
7FF5915A1000
unkown image
page readonly
clean
7FF509367000
unkown image
page readonly
clean
7FF5915A7000
unkown image
page readonly
clean
24E07990000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
27A24659000
unkown
page read and write
clean
2360000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1ABD29B0000
unkown
page read and write
clean
8040000
unkown
page read and write
clean
1ABD2CD0000
unkown image
page readonly
clean
254B3EB0000
unkown image
page readonly
clean
1ABD2A46000
unkown
page read and write
clean
7FF57A8BA000
unkown image
page readonly
clean
1BB93C29000
unkown
page read and write
clean
31E819E000
stack
page read and write
clean
7FF5667D7000
unkown image
page readonly
clean
2AC01630000
unkown image
page readonly
clean
9D4EFB000
stack
page read and write
clean
27A261B0000
unkown image
page write copy
clean
7FF591AC1000
unkown image
page readonly
clean
41D000
unkown image
page readonly
clean
9D000
stack
page read and write
clean
7FF591A3D000
unkown image
page readonly
clean
7FF57A89E000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF5B50E4000
unkown image
page readonly
clean
7FF50936E000
unkown image
page readonly
clean
A8E000
stack
page read and write
clean
7FF591915000
unkown image
page readonly
clean
7FF5A085B000
unkown image
page readonly
clean
7FF591627000
unkown image
page readonly
clean
1928B060000
unkown
page read and write
clean
7FF50938B000
unkown image
page readonly
clean
24E074E2000
unkown
page read and write
clean
7FF50F39A000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
7DF5AE6D2000
unkown image
page readonly
clean
7FF5B4F49000
unkown image
page readonly
clean
7FF514133000
unkown image
page readonly
clean
7DF517FC0000
unkown image
page readonly
clean
1ABD2950000
unkown image
page readonly
clean
7FF591AB1000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
254B403C000
unkown
page read and write
clean
2FA000
unkown
page read and write
clean
7DF5C3062000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF5A0967000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1B08F447000
unkown
page read and write
clean
7FF50F32F000
unkown image
page readonly
clean
7ACD67D000
stack
page read and write
clean
31E8B7E000
stack
page read and write
clean
1ABD2A42000
unkown
page read and write
clean
2AC011D0000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
8C0000
heap default
page read and write
clean
7FF50F336000
unkown image
page readonly
clean
7ACD97C000
stack
page read and write
clean
7FF53A1A9000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
1BB93C3C000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
27A24602000
unkown
page read and write
clean
7FF591846000
unkown image
page readonly
clean
7FF591A99000
unkown image
page readonly
clean
84B8FF7000
stack
page read and write
clean
1F0000
unkown
page read and write
clean
428000
unkown image
page read and write
clean
7DF4723E0000
unkown image
page readonly
clean
7FF51413E000
unkown image
page readonly
clean
27A24659000
unkown
page read and write
clean
7DF574512000
unkown image
page readonly
clean
27A24580000
unkown image
page readonly
clean
254B4580000
unkown image
page readonly
clean
97A000
unkown
page read and write
clean
1B08FD84000
unkown
page read and write
clean
27A24AD0000
unkown image
page readonly
clean
2340000
heap private
page read and write
clean
7FF56662B000
unkown image
page readonly
clean
2AC01320000
unkown
page read and write
clean
1928A8D0000
heap default
page read and write
clean
7FF513DB9000
unkown image
page readonly
clean
7FF56669B000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7FF50A247000
unkown image
page readonly
clean
2AC01190000
unkown image
page read and write
clean
7DF574510000
unkown image
page readonly
clean
27A26100000
unkown
page read and write
clean
7FF50934F000
unkown image
page readonly
clean
1ABD2A3B000
unkown
page read and write
clean
7FF5668B1000
unkown image
page readonly
clean
44C000
unkown image
page readonly
clean
1928A9B0000
unkown image
page readonly
clean
7DF517FC2000
unkown image
page readonly
clean
254B4100000
unkown
page read and write
clean
5B0000
heap default
page read and write
clean
400000
unkown image
page readonly
clean
7FF565F64000
unkown image
page readonly
clean
199DA84C000
unkown
page read and write
clean
1928AA13000
unkown
page read and write
clean
24E0742A000
unkown
page read and write
clean
1ABD2A31000
unkown
page read and write
clean
7FF5B53FA000
unkown image
page readonly
clean
41D000
unkown image
page readonly
clean
1ABD2A62000
unkown
page read and write
clean
254B404D000
unkown
page read and write
clean
7FF5A09A7000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF5A07F6000
unkown image
page readonly
clean
7DF547E42000
unkown image
page readonly
clean
7FF5919E7000
unkown image
page readonly
clean
21F21200000
unkown image
page readonly
clean
1B08F49F000
unkown
page read and write
clean
8890000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF50A341000
unkown image
page readonly
clean
7DF517FC0000
unkown image
page readonly
clean
7FF5B4D7C000
unkown image
page readonly
clean
BB305FF000
stack
page read and write
clean
27A2465F000
unkown
page read and write
clean
7FF539A12000
unkown image
page readonly
clean
7FF5B530F000
unkown image
page readonly
clean
1B08FBE0000
unkown
page read and write
clean
7DF51D080000
unkown image
page readonly
clean
1B08FD80000
unkown
page read and write
clean
7DF547E50000
unkown image
page readonly
clean
1B08F44D000
unkown
page read and write
clean
7FF5093BD000
unkown image
page readonly
clean
92B000
unkown
page read and write
clean
930000
unkown
page read and write
clean
2490000
heap private
page read and write
clean
6D9ACFE000
stack
page read and write
clean
199DA851000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1BB93E00000
unkown image
page readonly
clean
6D9ABFE000
stack
page read and write
clean
2F1000
unkown
page read and write
clean
7FF50A273000
unkown image
page readonly
clean
7FF5668A5000
unkown image
page readonly
clean
9B000
unkown
page read and write
clean
7FF514234000
unkown image
page readonly
clean
1B08F454000
unkown
page read and write
clean
6D9A7FE000
stack
page read and write
clean
7FF591697000
unkown image
page readonly
clean
254B4050000
unkown
page read and write
clean
7FF509302000
unkown image
page readonly
clean
7FF59191B000
unkown image
page readonly
clean
7DF5C3072000
unkown image
page readonly
clean
2AC01420000
unkown image
page readonly
clean
BB30BFF000
stack
page read and write
clean
7DF517FD0000
unkown image
page readonly
clean
520000
unkown
page read and write
clean
7FF591AA4000
unkown image
page readonly
clean
199DA84B000
unkown
page read and write
clean
41B000
unkown image
page read and write
clean
1B08FD84000
unkown
page read and write
clean
7ACD3FE000
stack
page read and write
clean
7FF5B5377000
unkown image
page readonly
clean
254B4400000
unkown image
page readonly
clean
8EF000
stack
page read and write
clean
7E0000
unkown
page read and write
clean
1BB93C6E000
unkown
page read and write
clean
1BB93C55000
unkown
page read and write
clean
7DF5885B2000
unkown image
page readonly
clean
7FF5B50D2000
unkown image
page readonly
clean
293F000
stack
page read and write
clean
2AC017C0000
unkown image
page readonly
clean
1928AA29000
unkown
page read and write
clean
7FF50F404000
unkown image
page readonly
clean
7FF56647C000
unkown image
page readonly
clean
254B4113000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
1E59C000
stack
page read and write
clean
7FF509324000
unkown image
page readonly
clean
7FF539F9D000
unkown image
page readonly
clean
7FF50F41A000
unkown image
page readonly
clean
7FF591804000
unkown image
page readonly
clean
7DF5885B0000
unkown image
page readonly
clean
7FF53A107000
unkown image
page readonly
clean
7FF5B53FE000
unkown image
page readonly
clean
21F21069000
unkown
page read and write
clean
7FF5B500D000
unkown image
page readonly
clean
7FF5B5217000
unkown image
page readonly
clean
199DA86F000
unkown
page read and write
clean
63B1000
heap default
page read and write
clean
199DA913000
unkown
page read and write
clean
1928B060000
unkown
page read and write
clean
7DF5885B0000
unkown image
page readonly
clean
1B08FD99000
unkown
page read and write
clean
7FF5B4BBD000
unkown image
page readonly
clean
1B08FD62000
unkown
page read and write
clean
7FF50F34E000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
7FF514229000
unkown image
page readonly
clean
7FF50934D000
unkown image
page readonly
clean
7FF53A1D1000
unkown image
page readonly
clean
1928AA35000
unkown
page read and write
clean
7FF591A37000
unkown image
page readonly
clean
7DF59F740000
unkown image
page readonly
clean
7DF574530000
unkown image
page readonly
clean
7FF591302000
unkown image
page readonly
clean
2AC011B0000
unkown image
page readonly
clean
7FF5667BD000
unkown image
page readonly
clean
7FF591879000
unkown image
page readonly
clean
254B4053000
unkown
page read and write
clean
6D9A8FE000
stack
page read and write
clean
1B090263000
unkown
page read and write
clean
7FF5666C2000
unkown image
page readonly
clean
1ABD3050000
unkown image
page readonly
clean
7DF5C3062000
unkown image
page readonly
clean
22A0000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5090F7000
unkown image
page readonly
clean
199DACD0000
unkown image
page readonly
clean
7FF591792000
unkown image
page readonly
clean
7FF5A09E7000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF53A0C7000
unkown image
page readonly
clean
1ABD2A6C000
unkown
page read and write
clean
27A24648000
unkown
page read and write
clean
6D9ADFF000
stack
page read and write
clean
7FF509B92000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7FF50F39D000
unkown image
page readonly
clean
1B090204000
unkown
page read and write
clean
1B08FBE0000
unkown
page read and write
clean
2AC01306000
heap default
page read and write
clean
1B08F502000
unkown
page read and write
clean
2AC011A5000
heap private
page read and write
clean
7FF56682A000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
7FF514241000
unkown image
page readonly
clean
F90797C000
stack
page read and write
clean
6BD0000
unkown image
page readonly
clean
1B08FDC1000
unkown
page read and write
clean
56F000
unkown
page execute and read and write
clean
BB2FF5B000
unkown
page read and write
clean
1B08FD00000
unkown
page read and write
clean
41D000
unkown image
page readonly
clean
254B3E90000
unkown image
page read and write
clean
7FF5A0997000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF509337000
unkown image
page readonly
clean
7FF566554000
unkown image
page readonly
clean
1DDAF000
stack
page read and write
clean
7FF539F56000
unkown image
page readonly
clean
7FF57A853000
unkown image
page readonly
clean
7DF486470000
unkown image
page readonly
clean
1E706000
unkown
page read and write
clean
254B4200000
unkown image
page readonly
clean
40F000
unkown image
page read and write
clean
1B08FB70000
unkown image
page write copy
clean
660E000
stack
page read and write
clean
19E000
stack
page read and write
clean
1B08FDC2000
unkown
page read and write
clean
254B407E000
unkown
page read and write
clean
7FF57A88B000
unkown image
page readonly
clean
7FF514170000
unkown image
page readonly
clean
4CE127E000
stack
page read and write
clean
7FF539E55000
unkown image
page readonly
clean
97A000
unkown
page read and write
clean
AC0000
unkown image
page readonly
clean
6A50000
unkown image
page readonly
clean
1B08FDA5000
unkown
page read and write
clean
31E8C78000
stack
page read and write
clean
1DB6E000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF514245000
unkown image
page readonly
clean
1E756000
unkown
page read and write
clean
27A245E0000
unkown image
page readonly
clean
24EA000
unkown
page read and write
clean
41B000
unkown image
page read and write
clean
7DF517FC2000
unkown image
page readonly
clean
7FF50A2CD000
unkown image
page readonly
clean
7FF5B519F000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF566882000
unkown image
page readonly
clean
21F21013000
unkown
page read and write
clean
7FF57A941000
unkown image
page readonly
clean
7FF5B53F1000
unkown image
page readonly
clean
1B08FD86000
unkown
page read and write
clean
31E89FB000
stack
page read and write
clean
1E49D000
stack
page read and write
clean
7FF5141A2000
unkown image
page readonly
clean
254B4064000
unkown
page read and write
clean
7FF51423A000
unkown image
page readonly
clean
7DF59F722000
unkown image
page readonly
clean
7FF591745000
unkown image
page readonly
clean
530000
heap default
page read and write
clean
1ABD2A3D000
unkown
page read and write
clean
BB309FE000
stack
page read and write
clean
1A0000
unkown image
page readonly
clean
1B08F350000
unkown image
page read and write
clean
7FF5667FB000
unkown image
page readonly
clean
21F2107A000
unkown
page read and write
clean
7DF5C3070000
unkown image
page readonly
clean
7FF56679F000
unkown image
page readonly
clean
7FF50A33A000
unkown image
page readonly
clean
7FF5B4F4D000
unkown image
page readonly
clean
254B4064000
unkown
page read and write
clean
7FF59142B000
unkown image
page readonly
clean
199DA83C000
unkown
page read and write
clean
7FF5B534B000
unkown image
page readonly
clean
325000
unkown
page read and write
clean
7FF53A0D9000
unkown image
page readonly
clean
7AF000
stack
page read and write
clean
7FF509E37000
unkown image
page readonly
clean
7C0000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
815F58F000
stack
page read and write
clean
84B894F000
stack
page read and write
clean
7FF5B537A000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7ACD6FE000
stack
page read and write
clean
40000
unkown image
page readonly
clean
815FD7F000
stack
page read and write
clean
76E000
stack
page read and write
clean
1B08F48A000
unkown
page read and write
clean
7FF53A12E000
unkown image
page readonly
clean
7FF50F411000
unkown image
page readonly
clean
27A24702000
unkown
page read and write
clean
1928AA40000
unkown
page read and write
clean
1B08FD1A000
unkown
page read and write
clean
7FF50939E000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
199DA900000
unkown
page read and write
clean
7FF5B5323000
unkown image
page readonly
clean
254B404C000
unkown
page read and write
clean
7FF50A34A000
unkown image
page readonly
clean
7DF49D5F0000
unkown image
page readonly
clean
7FF5093B7000
unkown image
page readonly
clean
21F21084000
unkown
page read and write
clean
AC54CBA000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1B08FD7D000
unkown
page read and write
clean
7FF56664F000
unkown image
page readonly
clean
639A000
heap default
page read and write
clean
7FF509424000
unkown image
page readonly
clean
7FF56620D000
unkown image
page readonly
clean
7FF50F32D000
unkown image
page readonly
clean
F907A7E000
stack
page read and write
clean
937000
heap default
page read and write
clean
1928B202000
unkown
page read and write
clean
2AC01320000
unkown
page read and write
clean
408000
unkown image
page readonly
clean
1B08FD1C000
unkown
page read and write
clean
7DF5170C0000
unkown image
page readonly
clean
7FF51419B000
unkown image
page readonly
clean
254B4089000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
7FF57A156000
unkown image
page readonly
clean
21F2105B000
unkown
page read and write
clean
7FF566059000
unkown image
page readonly
clean
1B090202000
unkown
page read and write
clean
1B08FD64000
unkown
page read and write
clean
7DF41AF50000
unkown image
page readonly
clean
BC0000
unkown image
page readonly
clean
7FF5919CF000
unkown image
page readonly
clean
1B08F4B0000
unkown
page read and write
clean
8020000
heap private
page read and write
clean
4CE177E000
stack
page read and write
clean
7FF5A0990000
unkown image
page readonly
clean
7FF5A022B000
unkown image
page readonly
clean
199DA700000
unkown image
page readonly
clean
1B0000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
27A24C60000
unkown image
page readonly
clean
2E7000
unkown
page read and write
clean
629A000
unkown image
page readonly
clean
442000
unkown image
page read and write
clean
21F20DE0000
unkown image
page readonly
clean
7DF415E80000
unkown image
page readonly
clean
89A0000
unkown
page read and write
clean
408000
unkown image
page readonly
clean
629A000
unkown image
page readonly
clean
27A24649000
unkown
page read and write
clean
7DF5885B2000
unkown image
page readonly
clean
7FF57A8B7000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
7FF51424A000
unkown image
page readonly
clean
7FF51415F000
unkown image
page readonly
clean
1BB94180000
unkown image
page readonly
clean
7FF5A0A42000
unkown image
page readonly
clean
7FF57A837000
unkown image
page readonly
clean
27A26202000
unkown
page read and write
clean
7FF50A351000
unkown image
page readonly
clean
1B08FDA5000
unkown
page read and write
clean
1B08FDC1000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1ABD2A85000
unkown
page read and write
clean
31E88FF000
stack
page read and write
clean
7FF509FD5000
unkown image
page readonly
clean
60000
unkown
page read and write
clean
7FF513F9E000
unkown image
page readonly
clean
7FF591971000
unkown image
page readonly
clean
7FF5A080F000
unkown image
page readonly
clean
8AEA000
unkown
page read and write
clean
4CE12FE000
stack
page read and write
clean
1BB93C00000
unkown
page read and write
clean
199DA87F000
unkown
page read and write
clean
7DF5170B0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
254B4102000
unkown
page read and write
clean
1E18E000
stack
page read and write
clean
7FF50A1A5000
unkown image
page readonly
clean
7FF5A095E000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF566636000
unkown image
page readonly
clean
1BB93D00000
unkown
page read and write
clean
684F000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
DC0000
unkown image
page readonly
clean
7FF5919CD000
unkown image
page readonly
clean
24E07980000
unkown image
page readonly
clean
19A000
unkown
page read and write
clean
7FF514101000
unkown image
page readonly
clean
7FF57A5C5000
unkown image
page readonly
clean
7FF5667B9000
unkown image
page readonly
clean
254B3F00000
heap default
page read and write
clean
1A0000
unkown image
page readonly
clean
1ABD2A57000
unkown
page read and write
clean
7FF57A6C6000
unkown image
page readonly
clean
7FF5A0A71000
unkown image
page readonly
clean
7FF5B52E3000
unkown image
page readonly
clean
7FF50A270000
unkown image
page readonly
clean
7FF51415D000
unkown image
page readonly
clean
4CE0FDB000
unkown
page read and write
clean
1ABD2A59000
unkown
page read and write
clean
1B08FD95000
unkown
page read and write
clean
23BB0000
unkown
page read and write
clean
F90757F000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
1BB93C13000
unkown
page read and write
clean
1E5DE000
stack
page read and write
clean
400000
unkown image
page readonly
clean
6370000
heap default
page read and write
clean
7FFB2000
unkown image
page readonly
clean
8000000
unkown
page execute read
clean
7FF5A0831000
unkown image
page readonly
clean
7FF50F421000
unkown image
page readonly
clean
254B4051000
unkown
page read and write
clean
7FF50A120000
unkown image
page readonly
clean
7FF50F11A000
unkown image
page readonly
clean
7FF53A0DD000
unkown image
page readonly
clean
7FF5918D7000
unkown image
page readonly
clean
7FF59143C000
unkown image
page readonly
clean
7FF5A08EC000
unkown image
page readonly
clean
1DA2E000
stack
page read and write
clean
7DF517FB0000
unkown image
page readonly
clean
9D492B000
unkown
page read and write
clean
7FF539FA0000
unkown image
page readonly
clean
7DF5C3060000
unkown image
page readonly
clean
254B405A000
unkown
page read and write
clean
7FF5B52D1000
unkown image
page readonly
clean
1ABD2A7B000
unkown
page read and write
clean
7FF514251000
unkown image
page readonly
clean
7FF591806000
unkown image
page readonly
clean
7FF50F333000
unkown image
page readonly
clean
1928AE00000
unkown image
page readonly
clean
7FF5B527B000
unkown image
page readonly
clean
7FF5A0226000
unkown image
page readonly
clean
1B08F513000
unkown
page read and write
clean
7FF50F37E000
unkown image
page readonly
clean
7FF5B53E4000
unkown image
page readonly
clean
1E5A0000
unkown
page read and write
clean
938000
unkown
page read and write
clean
1ABD2930000
unkown image
page readonly
clean
1DCAE000
stack
page read and write
clean
7FF539ECB000
unkown image
page readonly
clean
1B08F453000
unkown
page read and write
clean
7FF5A097A000
unkown image
page readonly
clean
1B08F6D0000
unkown image
page readonly
clean
F40000
unkown image
page readonly
clean
7FF5919A3000
unkown image
page readonly
clean
27A24570000
heap private
page read and write
clean
7FF53A1A2000
unkown image
page readonly
clean
1928A870000
heap private
page read and write
clean
23F0000
heap private
page read and write
clean
27A24613000
unkown
page read and write
clean
7FF539FDF000
unkown image
page readonly
clean
7DF5170B0000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
199DA730000
heap default
page read and write
clean
7FF5A097F000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF5A0993000
unkown image
page readonly
clean
7FF50A351000
unkown image
page readonly
clean
7FF50A259000
unkown image
page readonly
clean
440000
unkown image
page read and write
clean
1B08F4A6000
unkown
page read and write
clean
7FF5A09CE000
unkown image
page readonly
clean
7FF5912FC000
unkown image
page readonly
clean
7FF5B5352000
unkown image
page readonly
clean
1BB93A60000
heap default
page read and write
clean
199DA813000
unkown
page read and write
clean
27A24560000
unkown image
page read and write
clean
7FFD0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF5919D3000
unkown image
page readonly
clean
7FF566403000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FF5A07CF000
unkown image
page readonly
clean
24E07413000
unkown
page read and write
clean
1BB94402000
unkown
page read and write
clean
7DF547E40000
unkown image
page readonly
clean
24E07D00000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF53A0F3000
unkown image
page readonly
clean
7DF5AE6D0000
unkown image
page readonly
clean
21F20DC0000
unkown image
page readonly
clean
199DA800000
unkown
page read and write
clean
27A248D0000
unkown image
page readonly
clean
7FF509435000
unkown image
page readonly
clean
199DA847000
unkown
page read and write
clean
199DA6D0000
heap private
page read and write
clean
7DF5885A2000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
BB308FD000
stack
page read and write
clean
1DEF0000
unkown
page read and write
clean
7FF5667DE000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
199DAE50000
unkown image
page readonly
clean
31E86FE000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF5B515F000
unkown image
page readonly
clean
1BB93D13000
unkown
page read and write
clean
27A24600000
unkown
page read and write
clean
7FF509349000
unkown image
page readonly
clean
21F2107B000
unkown
page read and write
clean
1928A880000
unkown image
page readonly
clean
815FB7F000
stack
page read and write
clean
7DF5170A2000
unkown image
page readonly
clean
8050000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
1ABD2A13000
unkown
page read and write
clean
1B08F450000
unkown
page read and write
clean
1B08FD68000
unkown
page read and write
clean
7FF56606B000
unkown image
page readonly
clean
31E87F7000
stack
page read and write
clean
1B08FD99000
unkown
page read and write
clean
1B08F429000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
1D6AF000
stack
page read and write
clean
7FF50A1D5000
unkown image
page readonly
clean
6D9A57B000
stack
page read and write
clean
7FF509363000
unkown image
page readonly
clean
7FF5919F7000
unkown image
page readonly
clean
7FF591694000
unkown image
page readonly
clean
2AC01318000
unkown
page read and write
clean
7FF56679B000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
7FF50A13B000
unkown image
page readonly
clean
2EB000
unkown
page read and write
clean
930000
unkown
page read and write
clean
7DF5AE6F0000
unkown image
page readonly
clean
7FF5B52EE000
unkown image
page readonly
clean
7FF513FCB000
unkown image
page readonly
clean
254B3ED0000
unkown image
page readonly
clean
1B08FD92000
unkown
page read and write
clean
7FF513F46000
unkown image
page readonly
clean
7FF5140FF000
unkown image
page readonly
clean
1B08F44F000
unkown
page read and write
clean
7FF56672C000
unkown image
page readonly
clean
254B4029000
unkown
page read and write
clean
6D9AFFF000
stack
page read and write
clean
199DA84E000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
21F20EF0000
unkown image
page readonly
clean
1B08F4EA000
unkown
page read and write
clean
7FF509441000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
1B08FD84000
unkown
page read and write
clean
7FF509360000
unkown image
page readonly
clean
2AC01640000
unkown image
page readonly
clean
8990000
heap private
page read and write
clean
7FF5667A7000
unkown image
page readonly
clean
254B4058000
unkown
page read and write
clean
1928A9D0000
unkown
page read and write
clean
7FF5141CA000
unkown image
page readonly
clean
1928AA02000
unkown
page read and write
clean
7DF4AC5A0000
unkown image
page readonly
clean
7FF566582000
unkown image
page readonly
clean
7FF53A055000
unkown image
page readonly
clean
815FA77000
stack
page read and write
clean
41F000
unkown image
page read and write
clean
254B4048000
unkown
page read and write
clean
199DA829000
unkown
page read and write
clean
1B08F44B000
unkown
page read and write
clean
7FF566802000
unkown image
page readonly
clean
7DF5170C0000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
7FF57A93A000
unkown image
page readonly
clean
7FF53A14D000
unkown image
page readonly
clean
7DF521EC2000
unkown image
page readonly
clean
7FF5B530D000
unkown image
page readonly
clean
7FF5B5304000
unkown image
page readonly
clean
21F20DF0000
unkown image
page readonly
clean
21F21580000
unkown image
page readonly
clean
7FF509431000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
1E45E000
stack
page read and write
clean
1BB93A30000
unkown image
page readonly
clean
7FF56682D000
unkown image
page readonly
clean
7FF514177000
unkown image
page readonly
clean
7FF5918AB000
unkown image
page readonly
clean
7FF5141A8000
unkown image
page readonly
clean
24E074BC000
unkown
page read and write
clean
1B08F370000
unkown image
page readonly
clean
7FF591811000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
AC551FF000
stack
page read and write
clean
7DF59F740000
unkown image
page readonly
clean
7FF50A27E000
unkown image
page readonly
clean
7FF5A0792000
unkown image
page readonly
clean
1E1D0000
unkown
page read and write
clean
1B08F4E0000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
199DA802000
unkown
page read and write
clean
7FF566419000
unkown image
page readonly
clean
40A000
unkown image
page read and write
clean
7FF508AF0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
1928AA00000
unkown
page read and write
clean
41D000
unkown image
page readonly
clean
7FF591A1E000
unkown image
page readonly
clean
5B7000
heap default
page read and write
clean
7DF5170B2000
unkown image
page readonly
clean
7DF59F730000
unkown image
page readonly
clean
8150000
unkown
page read and write
clean
7FF5B5309000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF50A2CA000
unkown image
page readonly
clean
1B08FD6F000
unkown
page read and write
clean
229E000
stack
page read and write
clean
7FF591A3A000
unkown image
page readonly
clean
7ACD8FD000
stack
page read and write
clean
31E8677000
stack
page read and write
clean
7FF50943A000
unkown image
page readonly
clean
7FF5A0837000
unkown image
page readonly
clean
7DF521EC2000
unkown image
page readonly
clean
1ABD2A33000
unkown
page read and write
clean
7FF5667D3000
unkown image
page readonly
clean
7FF59192C000
unkown image
page readonly
clean
7FF53A1BA000
unkown image
page readonly
clean
1B08F3F0000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
92E000
stack
page read and write
clean
21F21041000
unkown
page read and write
clean
7FF5091C6000
unkown image
page readonly
clean
7DF574530000
unkown image
page readonly
clean
9D4D7E000
stack
page read and write
clean
7FF50930E000
unkown image
page readonly
clean
1928A880000
unkown image
page readonly
clean
199DA6C0000
unkown image
page read and write
clean
21F21079000
unkown
page read and write
clean
F90787C000
stack
page read and write
clean
7FF51417E000
unkown image
page readonly
clean
1BB93A10000
unkown image
page readonly
clean
44C000
unkown image
page readonly
clean
7DF4C0F30000
unkown image
page readonly
clean
8C7000
heap default
page read and write
clean
7FF566663000
unkown image
page readonly
clean
7FF50A334000
unkown image
page readonly
clean
1B08FD24000
unkown
page read and write
clean
7FF59188D000
unkown image
page readonly
clean
7DF51D080000
unkown image
page readonly
clean
254B3FE0000
unkown image
page readonly
clean
254B4802000
unkown
page read and write
clean
21F21400000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
199DA902000
unkown
page read and write
clean
9D50FF000
stack
page read and write
clean
7FF5B52F7000
unkown image
page readonly
clean
1B08F46F000
unkown
page read and write
clean
1B08FD86000
unkown
page read and write
clean
1B08F4BE000
unkown
page read and write
clean
199DA873000
unkown
page read and write
clean
1BB93A10000
unkown image
page readonly
clean
7FF50A329000
unkown image
page readonly
clean
7DF51D090000
unkown image
page readonly
clean
7FF591AC0000
unkown image
page readonly
clean
7FF5668B1000
unkown image
page readonly
clean
629A000
unkown image
page readonly
clean
1928AA5C000
unkown
page read and write
clean
1B09026A000
unkown
page read and write
clean
7FF5B5320000
unkown image
page readonly
clean
21F21002000
unkown
page read and write
clean
21F21073000
unkown
page read and write
clean
1DEEF000
stack
page read and write
clean
7DF59F730000
unkown image
page readonly
clean
2AC013F0000
unkown
page read and write
clean
21F21602000
unkown
page read and write
clean
7FF50A101000
unkown image
page readonly
clean
254B3EA0000
heap private
page read and write
clean
7FF539FBB000
unkown image
page readonly
clean
6390000
heap default
page read and write
clean
BB304FF000
stack
page read and write
clean
7FF5A0A5A000
unkown image
page readonly
clean
7FF5A09BB000
unkown image
page readonly
clean
7FF5A0766000
unkown image
page readonly
clean
89E000
stack
page read and write
clean
1928AF80000
unkown image
page readonly
clean
7FF5A099E000
unkown image
page readonly
clean
7FF50A2C7000
unkown image
page readonly
clean
254B4055000
unkown
page read and write
clean
1ABD2ED0000
unkown image
page readonly
clean
7DFF5CEC2000
unkown image
page readonly
clean
7FF53A123000
unkown image
page readonly
clean
7AE000
stack
page read and write
clean
31E8AFA000
stack
page read and write
clean
7FF509419000
unkown image
page readonly
clean
7DF574522000
unkown image
page readonly
clean
27A26090000
unkown
page read and write
clean
27A26070000
unkown
page read and write
clean
7FF539CB1000
unkown image
page readonly
clean
7FF57A92A000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
7DF521EB0000
unkown image
page readonly
clean
7FF591A13000
unkown image
page readonly
clean
7DF51D0A0000
unkown image
page readonly
clean
7FF5A0953000
unkown image
page readonly
clean
2AC01301000
unkown
page read and write
clean
7DF517FB2000
unkown image
page readonly
clean
7FF5B50D5000
unkown image
page readonly
clean
1B08FD84000
unkown
page read and write
clean
7FF5141C7000
unkown image
page readonly
clean
7DF5AE6E0000
unkown image
page readonly
clean
7FF57A867000
unkown image
page readonly
clean
629A000
unkown image
page readonly
clean
27A245B0000
unkown image
page readonly
clean
1B08FDD6000
unkown
page read and write
clean
7DF5AE6F0000
unkown image
page readonly
clean
27A24580000
unkown image
page readonly
clean
1B08FD79000
unkown
page read and write
clean
2AC01320000
unkown
page read and write
clean
7FF509353000
unkown image
page readonly
clean
1B08FD8B000
unkown
page read and write
clean
7FEB0000
unkown image
page readonly
clean
64CE000
stack
page read and write
clean
1ABD2A00000
unkown
page read and write
clean
7DF574512000
unkown image
page readonly
clean
1DF4D000
stack
page read and write
clean
815F50C000
unkown
page read and write
clean
57E000
stack
page read and write
clean
1B08F4E7000
unkown
page read and write
clean
1B08FD79000
unkown
page read and write
clean
7FF5B532E000
unkown image
page readonly
clean
254B4049000
unkown
page read and write
clean
1B08FDC2000
unkown
page read and write
clean
1ABD2A41000
unkown
page read and write
clean
7FF513F72000
unkown image
page readonly
clean
7FF539A0C000
unkown image
page readonly
clean
7FF566827000
unkown image
page readonly
clean
7DF547E32000
unkown image
page readonly
clean
7FF513DA3000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1B090202000
unkown
page read and write
clean
7DF517FB0000
unkown image
page readonly
clean
7DF517FD0000
unkown image
page readonly
clean
7DF51D082000
unkown image
page readonly
clean
24E07370000
unkown image
page readonly
clean
24E07C02000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FF5918D2000
unkown image
page readonly
clean
24E07600000
unkown image
page readonly
clean
7FF57A931000
unkown image
page readonly
clean
1B08FD84000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
7FF5918CF000
unkown image
page readonly
clean
938000
unkown
page read and write
clean
7FF5A0A61000
unkown image
page readonly
clean
BBF000
stack
page read and write
clean
7FF514147000
unkown image
page readonly
clean
199DA84F000
unkown
page read and write
clean
41D000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
1B08FD99000
unkown
page read and write
clean
7ACCF5B000
unkown
page read and write
clean
974000
unkown
page read and write
clean
815F87F000
stack
page read and write
clean
F90777F000
stack
page read and write
clean
199DA908000
unkown
page read and write
clean
7FF5B53D2000
unkown image
page readonly
clean
2AC012F0000
heap default
page read and write
clean
7FF5A0A54000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7FF53A0DF000
unkown image
page readonly
clean
7FF50A04B000
unkown image
page readonly
clean
7FF5A09ED000
unkown image
page readonly
clean
7FF57A912000
unkown image
page readonly
clean
27A26180000
unkown
page read and write
clean
7DF5885C0000
unkown image
page readonly
clean
815FC7C000
stack
page read and write
clean
254B4108000
unkown
page read and write
clean
1B08F448000
unkown
page read and write
clean
7DF5885A0000
unkown image
page readonly
clean
7FF50A0D6000
unkown image
page readonly
clean
7FF50F3F9000
unkown image
page readonly
clean
1B08F413000
unkown
page read and write
clean
7DF5C3080000
unkown image
page readonly
clean
1BB94000000
unkown image
page readonly
clean
7DF51D090000
unkown image
page readonly
clean
1B08FB40000
unkown image
page readonly
clean
1B08F44C000
unkown
page read and write
clean
1B08FBE0000
unkown
page read and write
clean
F90767F000
stack
page read and write
clean
7DF5AE6D0000
unkown image
page readonly
clean
979000
unkown
page read and write
clean
815FE7E000
stack
page read and write
clean
1B08FDAB000
unkown
page read and write
clean
7FF591982000
unkown image
page readonly
clean
1B08F516000
unkown
page read and write
clean
1B08F43C000
unkown
page read and write
clean
AC5517E000
stack
page read and write
clean
7FF5660C6000
unkown image
page readonly
clean
7FF53A0F7000
unkown image
page readonly
clean
1B08F3D0000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
7DF5C3080000
unkown image
page readonly
clean
199DA88C000
unkown
page read and write
clean
1ABD2A5A000
unkown
page read and write
clean
7FF5917BA000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7FF53A1CA000
unkown image
page readonly
clean
8090000
heap private
page read and write
clean
ABF000
stack
page read and write
clean
80C0000
unkown
page read and write
clean
84B89CF000
stack
page read and write
clean
6380000
unkown image
page readonly
clean
1ABD2A6A000
unkown
page read and write
clean
7FF57A03D000
unkown image
page readonly
clean
24E074C4000
unkown
page read and write
clean
1928B070000
unkown
page read and write
clean
199DAAD0000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF5A0A49000
unkown image
page readonly
clean
7DF41FD80000
unkown image
page readonly
clean
254B4660000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
21F20DC0000
unkown image
page readonly
clean
1ABD2A6E000
unkown
page read and write
clean
1B08FD5D000
unkown
page read and write
clean
254B4059000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
1ABD2980000
heap default
page read and write
clean
7ACD47E000
stack
page read and write
clean
7FF539CB7000
unkown image
page readonly
clean
7ACD7FD000
stack
page read and write
clean
1928AB02000
unkown
page read and write
clean
7DF414F70000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7FF53A03C000
unkown image
page readonly
clean
1ABD2920000
heap private
page read and write
clean
40D000
unkown image
page read and write
clean
401000
unkown image
page execute read
clean
7FF50A277000
unkown image
page readonly
clean
1ABD2A45000
unkown
page read and write
clean
19C000
unkown
page read and write
clean
F907B7C000
stack
page read and write
clean
7FF53A0F0000
unkown image
page readonly
clean
1ABD2A44000
unkown
page read and write
clean
24E07445000
unkown
page read and write
clean
84B88CB000
unkown
page read and write
clean
7DF5170A0000
unkown image
page readonly
clean
1DB2F000
stack
page read and write
clean
41D000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1928AC00000
unkown image
page readonly
clean
1E20E000
stack
page read and write
clean
27A26180000
unkown
page read and write
clean
7DF5C3070000
unkown image
page readonly
clean
7FF50A322000
unkown image
page readonly
clean
7FF53A14A000
unkown image
page readonly
clean
7FF5919E3000
unkown image
page readonly
clean
7FF5B537D000
unkown image
page readonly
clean
199DA760000
unkown
page read and write
clean
7FF5A09EA000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
1B08FD5C000
unkown
page read and write
clean
254B3EE0000
unkown image
page readonly
clean
1ABD2990000
unkown image
page readonly
clean
1B08F449000
unkown
page read and write
clean
1ABD2960000
unkown image
page readonly
clean
1B08F360000
heap private
page read and write
clean
7FF53A0E3000
unkown image
page readonly
clean
24E07400000
unkown
page read and write
clean
7FF0000
unkown
page read and write
clean
84B8EFF000
stack
page read and write
clean
1ABD2A7F000
unkown
page read and write
clean
1BB93C02000
unkown
page read and write
clean
7FF50942A000
unkown image
page readonly
clean
21F21000000
unkown
page read and write
clean
7DF547E40000
unkown image
page readonly
clean
1E08E000
stack
page read and write
clean
2AC0132E000
unkown
page read and write
clean
7FF57A924000
unkown image
page readonly
clean
7DF5C3072000
unkown image
page readonly
clean
7FF59196F000
unkown image
page readonly
clean
580000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7FF5A0A70000
unkown image
page readonly
clean
1E35E000
stack
page read and write
clean
21F20FE0000
unkown
page read and write
clean
1B08FD7C000
unkown
page read and write
clean
1ABD2A7C000
unkown
page read and write
clean
7DF51D082000
unkown image
page readonly
clean
1B090202000
unkown
page read and write
clean
199DA84A000
unkown
page read and write
clean
1B08F400000
unkown
page read and write
clean
1ABD2A78000
unkown
page read and write
clean
7FF53A147000
unkown image
page readonly
clean
7DF5AE6E2000
unkown image
page readonly
clean
6D9A9FD000
stack
page read and write
clean
7FF5919EE000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
199DA6E0000
unkown image
page readonly
clean
1B08F4FA000
unkown
page read and write
clean
4CE147E000
stack
page read and write
clean
1ABD3202000
unkown
page read and write
clean
7FF565FD7000
unkown image
page readonly
clean
24E07502000
unkown
page read and write
clean
6850000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
27A245A0000
unkown image
page readonly
clean
1B08F3C0000
heap default
page read and write
clean
1B08FDB6000
unkown
page read and write
clean
1928B060000
unkown
page read and write
clean
7EE000
stack
page read and write
clean
972000
unkown
page read and write
clean
254B3EB0000
unkown image
page readonly
clean
7FF5919C9000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
7DF574520000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
7DF51D092000
unkown image
page readonly
clean
1ABD2A40000
unkown
page read and write
clean
629A000
unkown image
page readonly
clean
7DF521EB2000
unkown image
page readonly
clean
1B08FD88000
unkown
page read and write
clean
1E04A000
stack
page read and write
clean
1ABD2930000
unkown image
page readonly
clean
21F21113000
unkown
page read and write
clean
27A24C50000
unkown image
page readonly
clean
6D9AAFD000
stack
page read and write
clean
24E07A60000
unkown image
page write copy
clean
1B08FD8B000
unkown
page read and write
clean
BB30AFC000
stack
page read and write
clean
8950000
unkown image
page readonly
clean
7FF50A11D000
unkown image
page readonly
clean
1E719000
unkown
page read and write
clean
7FF57A84F000
unkown image
page readonly
clean
7FF591427000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7DF5170B2000
unkown image
page readonly
clean
7FF5B53EA000
unkown image
page readonly
clean
27A2468A000
unkown
page read and write
clean
7FF50F36B000
unkown image
page readonly
clean
7FF5917CB000
unkown image
page readonly
clean
1B08FD8A000
unkown
page read and write
clean
7FF5667C3000
unkown image
page readonly
clean
6D9AEFE000
stack
page read and write
clean
24E07290000
heap default
page read and write
clean
7FF513DB7000
unkown image
page readonly
clean
7FF50F340000
unkown image
page readonly
clean
1B08FD80000
unkown
page read and write
clean
21F21102000
unkown
page read and write
clean
1B08FD4E000
unkown
page read and write
clean
BB3067C000
stack
page read and write
clean
1B08FD99000
unkown
page read and write
clean
27A2462A000
unkown
page read and write
clean
674E000
stack
page read and write
clean
4CE157E000
stack
page read and write
clean
2AC01317000
unkown
page read and write
clean
7FF5A0A6A000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7D0000
heap default
page read and write
clean
40A000
unkown image
page write copy
clean
254B4071000
unkown
page read and write
clean
7DF51D092000
unkown image
page readonly
clean
1B090202000
unkown
page read and write
clean
7FF5B5327000
unkown image
page readonly
clean
1B08FC02000
unkown
page read and write
clean
1B08FA50000
unkown image
page readonly
clean
F906F9B000
unkown
page read and write
clean
7FF591890000
unkown image
page readonly
clean
7FF50A287000
unkown image
page readonly
clean
7FF57A893000
unkown image
page readonly
clean
24E07240000
unkown image
page readonly
clean
8AB0000
unkown
page read and write
clean
7FF50A1AB000
unkown image
page readonly
clean
199DB002000
unkown
page read and write
clean
7DF5885C0000
unkown image
page readonly
clean
7DF574522000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
1B08F508000
unkown
page read and write
clean
24E07270000
unkown image
page readonly
clean
979000
unkown
page read and write
clean
7FF50F373000
unkown image
page readonly
clean
AC54DBF000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7DF5170A2000
unkown image
page readonly
clean
7FF50A263000
unkown image
page readonly
clean
7FF5A097D000
unkown image
page readonly
clean
1ABD2A60000
unkown
page read and write
clean
1B08FD68000
unkown
page read and write
clean
919000
heap default
page read and write
clean
7FF5919E0000
unkown image
page readonly
clean
7FF591287000
unkown image
page readonly
clean
1ABD2A5C000
unkown
page read and write
clean
AC550FA000
stack
page read and write
clean
7FF5B535E000
unkown image
page readonly
clean
1928A8B0000
unkown image
page readonly
clean
97C000
unkown
page read and write
clean
7FF56680E000
unkown image
page readonly
clean
A30000
unkown
page read and write
clean
1ABD2A61000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
283F000
stack
page read and write
clean
1B090202000
unkown
page read and write
clean
AC54D3F000
stack
page read and write
clean
7FF509B8C000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF50A1D1000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
7FF56689A000
unkown image
page readonly
clean
7FF5141CD000
unkown image
page readonly
clean
7FF5B5401000
unkown image
page readonly
clean
BB307FB000
stack
page read and write
clean
1ABD2A67000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
E40000
unkown image
page readonly
clean
7DF521EC0000
unkown image
page readonly
clean
7FF53A0FE000
unkown image
page readonly
clean
7FF57A8BD000
unkown image
page readonly
clean
254B4056000
unkown
page read and write
clean
8970000
heap private
page read and write
clean
400000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
1B08F4AA000
unkown
page read and write
clean
7DF5AE6E2000
unkown image
page readonly
clean
7FF5B5281000
unkown image
page readonly
clean
1B08FD5E000
unkown
page read and write
clean
7FF50A29B000
unkown image
page readonly
clean
1BB93D02000
unkown
page read and write
clean
7FF5093BA000
unkown image
page readonly
clean
7FF566577000
unkown image
page readonly
clean
1B08FDA1000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5A0983000
unkown image
page readonly
clean
1B08FD5E000
unkown
page read and write
clean
CC0000
unkown image
page readonly
clean
1B08F456000
unkown
page read and write
clean
1ABD2A47000
unkown
page read and write
clean
7FF539F81000
unkown image
page readonly
clean
21F20DA0000
unkown image
page read and write
clean
1E1D0000
unkown
page read and write
clean
199DA740000
unkown image
page readonly
clean
21F20DB0000
heap private
page read and write
clean
AB0000
heap private
page read and write
clean
4CE167E000
stack
page read and write
clean
7FF591945000
unkown image
page readonly
clean
1E6FB000
unkown
page read and write
clean
27A24713000
unkown
page read and write
clean
254B404E000
unkown
page read and write
clean
21F21069000
unkown
page read and write
clean
1B08FD84000
unkown
page read and write
clean
7FF509E31000
unkown image
page readonly
clean
7FF53A1C1000
unkown image
page readonly
clean
7FF566894000
unkown image
page readonly
clean
7FF53A051000
unkown image
page readonly
clean
2AC012C0000
unkown
page read and write
clean
27A24700000
unkown
page read and write
clean
7FF53A025000
unkown image
page readonly
clean
1B08FDA8000
unkown
page read and write
clean
8140000
heap private
page read and write
clean
7FF514173000
unkown image
page readonly
clean
6D9A6FC000
stack
page read and write
clean
7FF5B5285000
unkown image
page readonly
clean
7FF5140EE000
unkown image
page readonly
clean
2AC011A0000
heap private
page read and write
clean
1ABD2B02000
unkown
page read and write
clean
431000
unkown image
page read and write
clean
7DF547E50000
unkown image
page readonly
clean
7FF5B4C2D000
unkown image
page readonly
clean
BB3077C000
stack
page read and write
clean
7FF57A941000
unkown image
page readonly
clean
7FF50F343000
unkown image
page readonly
clean
7FF50F421000
unkown image
page readonly
clean
7FF59199A000
unkown image
page readonly
clean
24E0748B000
unkown
page read and write
clean
7FF5919AE000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
7FF50A1BC000
unkown image
page readonly
clean
7FF50915A000
unkown image
page readonly
clean
1BB93A40000
unkown image
page readonly
clean
21F21068000
unkown
page read and write
clean
1B08F8D0000
unkown image
page readonly
clean
7DF59F720000
unkown image
page readonly
clean
1ABD2910000
unkown image
page read and write
clean
7FF514163000
unkown image
page readonly
clean
7FF57A86E000
unkown image
page readonly
clean
7FF509100000
unkown image
page readonly
clean
27A245D0000
heap default
page read and write
clean
84B8DFB000
stack
page read and write
clean
7DF5170A0000
unkown image
page readonly
clean
7FF591ABA000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
1928AF90000
unkown image
page readonly
clean
1BB93B40000
unkown image
page readonly
clean
7DF5AE6D2000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF5660D4000
unkown image
page readonly
clean
7FF51401D000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
7FF5B5313000
unkown image
page readonly
clean
7DF547E30000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1B08FDAA000
unkown
page read and write
clean
7FF50F347000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
1ABD2A4E000
unkown
page read and write
clean
7FF591A0B000
unkown image
page readonly
clean
7FF5A0941000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
254B4013000
unkown
page read and write
clean
There are 1289 hidden memdumps, click here to show them.