IOC Report

loading gif

Files

File Path
Type
Category
Malicious
UioA2E9DBG.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Network\Downloader\edb.log
MPEG-4 LOAS
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
Extensible storage engine DataBase, version 0x620, checksum 0x52f1f60b, page size 16384, DirtyShutdown, Windows version 10.0
dropped
clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
data
dropped
clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
ASCII text, with no line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll"
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\UioA2E9DBG.dll,Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\UioA2E9DBG.dll,agrwqhxohbh
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\UioA2E9DBG.dll,aoydsyidkopcdbcv
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Uteaesuoyewsu\kffdjmqicgbnmom.ioj",ArlfCURNcI
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Jsczeisswlgpw\ifzwhxr.fpp",gqJNgJRYaqyk
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\UioA2E9DBG.dll",#1
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
clean
There are 4 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://crl.ver)
unknown
clean

IPs

IP
Domain
Country
Malicious
195.154.133.20
unknown
France
malicious
212.237.17.99
unknown
Italy
malicious
110.232.117.186
unknown
Australia
malicious
104.245.52.73
unknown
United States
malicious
138.185.72.26
unknown
Brazil
malicious
81.0.236.90
unknown
Czech Republic
malicious
45.118.115.99
unknown
Indonesia
malicious
103.75.201.2
unknown
Thailand
malicious
216.158.226.206
unknown
United States
malicious
107.182.225.142
unknown
United States
malicious
45.118.135.203
unknown
Japan
malicious
50.116.54.215
unknown
United States
malicious
51.68.175.8
unknown
France
malicious
103.8.26.102
unknown
Malaysia
malicious
46.55.222.11
unknown
Bulgaria
malicious
41.76.108.46
unknown
South Africa
malicious
103.8.26.103
unknown
Malaysia
malicious
178.79.147.66
unknown
United Kingdom
malicious
212.237.5.209
unknown
Italy
malicious
176.104.106.96
unknown
Serbia
malicious
207.38.84.195
unknown
United States
malicious
212.237.56.116
unknown
Italy
malicious
45.142.114.231
unknown
Germany
malicious
203.114.109.124
unknown
Thailand
malicious
210.57.217.132
unknown
Indonesia
malicious
58.227.42.236
unknown
Korea Republic of
malicious
185.184.25.237
unknown
Turkey
malicious
158.69.222.101
unknown
Canada
malicious
104.251.214.46
unknown
United States
malicious
127.0.0.1
unknown
unknown
clean
There are 20 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
PerfMMFileName
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
2790000
stack
page execute and read and write
malicious
2ADA000
heap default
page read and write
malicious
A8B000
heap default
page read and write
malicious
2E96000
heap default
page read and write
malicious
2875000
heap default
page read and write
malicious
306A000
heap default
page read and write
malicious
27A0000
stack
page execute and read and write
malicious
2CC0000
stack
page execute and read and write
malicious
830000
stack
page execute and read and write
malicious
2DB0000
stack
page execute and read and write
malicious
251C000
unkown image
page readonly
clean
2646000
unkown image
page readonly
clean
23E3000
unkown image
page readonly
clean
2E70000
heap default
page read and write
clean
7FF543971000
unkown image
page readonly
clean
2FB0000
unkown image
page readonly
clean
29DF000
unkown image
page readonly
clean
7FED0000
unkown image
page readonly
clean
6EA5D000
unkown image
page read and write
clean
2BEEF440000
unkown image
page readonly
clean
1A7FB689000
unkown
page read and write
clean
7DF5515E2000
unkown image
page readonly
clean
2106000
unkown image
page readonly
clean
7F692000
unkown image
page readonly
clean
29E4000
unkown image
page readonly
clean
23E8000
unkown image
page readonly
clean
3455000
unkown
page read and write
clean
2B81000
unkown image
page readonly
clean
2BEEF210000
unkown image
page readonly
clean
20BD000
unkown image
page readonly
clean
120000
unkown image
page readonly
clean
7FF5BC69C000
unkown image
page readonly
clean
20AB000
unkown image
page readonly
clean
2E20000
unkown image
page readonly
clean
3250000
unkown
page read and write
clean
2AE4000
unkown
page read and write
clean
2C63000
unkown image
page readonly
clean
2970000
unkown image
page read and write
clean
7DF5515D2000
unkown image
page readonly
clean
130000
unkown
page read and write
clean
7F540000
unkown image
page readonly
clean
2720000
unkown image
page readonly
clean
20AF000
unkown image
page readonly
clean
2346000
unkown image
page readonly
clean
2AF0000
heap private
page read and write
clean
24A8000
unkown image
page readonly
clean
238B000
unkown image
page readonly
clean
212F000
unkown image
page readonly
clean
7F8A0000
unkown image
page readonly
clean
22F3000
unkown image
page readonly
clean
32C0000
heap default
page read and write
clean
275B000
unkown
page read and write
clean
7FF5BCA9A000
unkown image
page readonly
clean
2546000
unkown image
page readonly
clean
2D40000
heap private
page read and write
clean
2156000
unkown image
page readonly
clean
27B0000
unkown image
page readonly
clean
7DF5CA712000
unkown image
page readonly
clean
7FF5BC870000
unkown image
page readonly
clean
2440000
unkown image
page readonly
clean
2BEEF5D0000
unkown image
page readonly
clean
23EF000
unkown image
page readonly
clean
2B75000
unkown
page read and write
clean
2390000
unkown image
page readonly
clean
205E000
unkown image
page readonly
clean
2680000
unkown image
page readonly
clean
7FCF0000
unkown image
page readonly
clean
28D0000
unkown image
page readonly
clean
2900000
unkown image
page readonly
clean
7FF543188000
unkown image
page readonly
clean
7F8A0000
unkown image
page readonly
clean
2771000
unkown
page read and write
clean
7FF5BC725000
unkown image
page readonly
clean
3455000
unkown
page read and write
clean
7F8A2000
unkown image
page readonly
clean
23AB000
unkown image
page readonly
clean
1FC4000
unkown image
page readonly
clean
7FED2000
unkown image
page readonly
clean
2BEEFA20000
unkown image
page readonly
clean
2BEEF345000
unkown
page read and write
clean
7FF543886000
unkown image
page readonly
clean
2ADD000
unkown
page read and write
clean
2BEEF1E0000
unkown image
page readonly
clean
2C68000
unkown image
page readonly
clean
20CB000
unkown image
page readonly
clean
27EA000
unkown image
page readonly
clean
6EA60000
unkown image
page readonly
clean
3461000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
2780000
unkown
page read and write
clean
23E5000
unkown image
page readonly
clean
2750000
heap default
page read and write
clean
5824000
heap private
page read and write
clean
2BEEF364000
unkown
page read and write
clean
7F232000
unkown image
page readonly
clean
7FF5BCA91000
unkown image
page readonly
clean
7F132000
unkown image
page readonly
clean
2920000
unkown
page read and write
clean
2BEEF34C000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
7F5A0000
unkown image
page readonly
clean
2B8A000
unkown image
page readonly
clean
24A8000
unkown image
page readonly
clean
2C68000
unkown image
page readonly
clean
7FF5BC86D000
unkown image
page readonly
clean
214B000
unkown image
page readonly
clean
7DF5515F0000
unkown image
page readonly
clean
2BEEFE60000
unkown
page read and write
clean
2BEEF450000
unkown image
page readonly
clean
31B6000
unkown
page read and write
clean
6EA5D000
unkown image
page read and write
clean
2BEEF364000
unkown
page read and write
clean
2770000
unkown image
page readonly
clean
2C4B000
unkown image
page readonly
clean
7FF42000
unkown image
page readonly
clean
20A5000
unkown image
page readonly
clean
1A7FB654000
unkown
page read and write
clean
2B5E000
unkown image
page readonly
clean
2CE5000
stack
page execute and read and write
clean
4D2C000
stack
page read and write
clean
2BCB000
unkown image
page readonly
clean
7DF5CA720000
unkown image
page readonly
clean
16E5B7B000
stack
page read and write
clean
2787000
unkown
page read and write
clean
1A7FB4B0000
unkown image
page readonly
clean
7DF4C85D0000
unkown image
page readonly
clean
2730000
unkown image
page readonly
clean
32C0000
unkown image
page readonly
clean
6EA11000
unkown image
page execute read
clean
2086000
unkown image
page readonly
clean
2168000
unkown image
page readonly
clean
6EA60000
unkown image
page readonly
clean
5750000
unkown image
page readonly
clean
7FF543942000
unkown image
page readonly
clean
10B000
unkown
page read and write
clean
249C000
unkown image
page readonly
clean
7F242000
unkown image
page readonly
clean
2BEEF34C000
unkown
page read and write
clean
2420000
unkown image
page readonly
clean
6EA4A000
unkown image
page readonly
clean
2700000
unkown image
page readonly
clean
2AE7000
unkown
page read and write
clean
7FF5BC925000
unkown image
page readonly
clean
7FF543965000
unkown image
page readonly
clean
7FF5BC826000
unkown image
page readonly
clean
1A7FBE02000
unkown
page read and write
clean
21FA000
unkown image
page readonly
clean
246F000
unkown image
page readonly
clean
3451000
unkown
page read and write
clean
31BA000
unkown
page read and write
clean
2F80000
unkown
page read and write
clean
7F2C0000
unkown image
page readonly
clean
7DF5CA702000
unkown image
page readonly
clean
7F5B0000
unkown image
page readonly
clean
2B6E000
stack
page read and write
clean
24E0000
unkown image
page readonly
clean
247B000
unkown image
page readonly
clean
26F4000
unkown image
page readonly
clean
283D000
unkown image
page readonly
clean
6EA10000
unkown image
page readonly
clean
7F690000
unkown image
page readonly
clean
7F3D0000
unkown image
page readonly
clean
16E5A7B000
stack
page read and write
clean
20DC000
unkown image
page readonly
clean
1A7FB600000
unkown
page read and write
clean
6EA60000
unkown image
page readonly
clean
7F3C2000
unkown image
page readonly
clean
214B000
unkown image
page readonly
clean
254A000
unkown image
page readonly
clean
2910000
unkown
page read and write
clean
7FF52F881000
unkown image
page readonly
clean
7FF5BCA1D000
unkown image
page readonly
clean
5820000
heap private
page read and write
clean
2346000
unkown image
page readonly
clean
326A000
heap private
page read and write
clean
7F5B0000
unkown image
page readonly
clean
7FF5BC9F3000
unkown image
page readonly
clean
7F130000
unkown image
page readonly
clean
2AE0000
unkown image
page readonly
clean
24F0000
unkown image
page readonly
clean
29EB000
unkown image
page readonly
clean
7F250000
unkown image
page readonly
clean
2C38000
unkown
page read and write
clean
220D000
unkown image
page readonly
clean
7F6A0000
unkown image
page readonly
clean
23C6000
unkown image
page readonly
clean
2428000
unkown image
page readonly
clean
2BEEF35F000
unkown
page read and write
clean
23FD000
unkown image
page readonly
clean
2722000
unkown image
page readonly
clean
7FF5BC88B000
unkown image
page readonly
clean
2B4A000
heap default
page read and write
clean
7FF50000
unkown image
page readonly
clean
2B99000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
7FD02000
unkown image
page readonly
clean
7FF54318A000
unkown image
page readonly
clean
289A000
unkown
page read and write
clean
7F6A0000
unkown image
page readonly
clean
7F5A2000
unkown image
page readonly
clean
266F000
unkown image
page readonly
clean
2716000
unkown image
page readonly
clean
1A7FB63C000
unkown
page read and write
clean
4550000
unkown
page read and write
clean
241A000
unkown
page read and write
clean
2EC0000
unkown image
page readonly
clean
3467000
unkown
page read and write
clean
2F70000
unkown image
page readonly
clean
2728000
unkown image
page readonly
clean
2096000
unkown image
page readonly
clean
239C000
unkown image
page readonly
clean
2204000
unkown image
page readonly
clean
345A000
unkown
page read and write
clean
5CC0000
unkown image
page readonly
clean
1A7FB800000
unkown image
page readonly
clean
7FF5BC9FE000
unkown image
page readonly
clean
2073000
unkown image
page readonly
clean
21C4000
unkown image
page readonly
clean
2B82000
unkown
page read and write
clean
2356000
unkown image
page readonly
clean
2820000
unkown image
page readonly
clean
7F6A0000
unkown image
page readonly
clean
2A20000
heap default
page read and write
clean
7FF5BC997000
unkown image
page readonly
clean
2730000
unkown image
page readonly
clean
3530000
unkown image
page readonly
clean
7FF40000
unkown image
page readonly
clean
2EE5000
heap default
page read and write
clean
2B61000
unkown
page read and write
clean
2365000
unkown image
page readonly
clean
2980000
unkown image
page readonly
clean
240000
unkown
page read and write
clean
3458000
unkown
page read and write
clean
2096000
unkown image
page readonly
clean
7FF50000
unkown image
page readonly
clean
22DE000
unkown image
page readonly
clean
7FED0000
unkown image
page readonly
clean
2ADD000
unkown
page read and write
clean
28E0000
unkown
page read and write
clean
20DE000
unkown image
page readonly
clean
2360000
unkown image
page readonly
clean
5E3F000
stack
page read and write
clean
2B75000
unkown
page read and write
clean
237D000
unkown image
page readonly
clean
31E000
stack
page read and write
clean
212B000
unkown image
page readonly
clean
345D000
unkown
page read and write
clean
7FF5BC851000
unkown image
page readonly
clean
2CF0000
stack
page read and write
clean
7F230000
unkown image
page readonly
clean
7FF543126000
unkown image
page readonly
clean
1A7FB500000
heap default
page read and write
clean
7F5C0000
unkown image
page readonly
clean
7F530000
unkown image
page readonly
clean
268B000
unkown image
page readonly
clean
2EFD000
unkown
page read and write
clean
205E000
unkown image
page readonly
clean
7FF543890000
unkown image
page readonly
clean
2168000
unkown image
page readonly
clean
D4042FB000
unkown
page read and write
clean
7FF5438C2000
unkown image
page readonly
clean
23D6000
unkown image
page readonly
clean
295F000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
6EA60000
unkown image
page readonly
clean
7FF60000
unkown image
page readonly
clean
6FB000
unkown
page read and write
clean
34C0000
unkown image
page readonly
clean
2319000
unkown image
page readonly
clean
7F532000
unkown image
page readonly
clean
2504000
unkown image
page readonly
clean
271B000
unkown
page read and write
clean
23CA000
unkown image
page readonly
clean
7F4A0000
unkown image
page readonly
clean
6EA10000
unkown image
page readonly
clean
2A3A000
unkown image
page readonly
clean
7FF5BCA17000
unkown image
page readonly
clean
6EA5D000
unkown image
page read and write
clean
7FEE0000
unkown image
page readonly
clean
7FEC2000
unkown image
page readonly
clean
4560000
unkown
page read and write
clean
7FF5BC8F5000
unkown image
page readonly
clean
7F532000
unkown image
page readonly
clean
3730000
unkown image
page readonly
clean
298C000
unkown image
page readonly
clean
2A06000
unkown image
page readonly
clean
2306000
unkown image
page readonly
clean
26A0000
unkown image
page readonly
clean
2168000
unkown image
page readonly
clean
23EF000
unkown image
page readonly
clean
2BEF0190000
unkown
page read and write
clean
7F430000
unkown image
page readonly
clean
2DF0000
unkown image
page readonly
clean
7FEE0000
unkown image
page readonly
clean
855000
stack
page execute and read and write
clean
24A8000
unkown image
page readonly
clean
27B0000
unkown image
page readonly
clean
2D0B000
unkown
page read and write
clean
251E000
unkown image
page readonly
clean
269C000
unkown image
page readonly
clean
7F5B0000
unkown image
page readonly
clean
4DAE000
stack
page read and write
clean
7FCF2000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
3260000
heap private
page read and write
clean
6EA10000
unkown image
page readonly
clean
5E9000
unkown
page read and write
clean
7FF5BC9A9000
unkown image
page readonly
clean
7FED2000
unkown image
page readonly
clean
2BAF000
unkown image
page readonly
clean
2BEF0120000
unkown
page readonly
clean
2ADE000
unkown
page read and write
clean
2A40000
heap private
page read and write
clean
280000
unkown image
page readonly
clean
2680000
unkown image
page readonly
clean
25C5000
unkown
page read and write
clean
7F5A0000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
2D00000
heap private
page read and write
clean
2C2B000
unkown image
page readonly
clean
7F5B2000
unkown image
page readonly
clean
7FF543961000
unkown image
page readonly
clean
2640000
unkown image
page readonly
clean
B80000
unkown image
page readonly
clean
7F8B0000
unkown image
page readonly
clean
7F242000
unkown image
page readonly
clean
2EC0000
unkown image
page readonly
clean
70000
unkown image
page readonly
clean
6EA10000
unkown image
page readonly
clean
266B000
unkown image
page readonly
clean
7F8C0000
unkown image
page readonly
clean
21C1000
unkown image
page readonly
clean
2C68000
unkown image
page readonly
clean
2D10000
unkown image
page readonly
clean
70000
unkown image
page readonly
clean
2AFA000
heap private
page read and write
clean
820000
unkown image
page readonly
clean
7FEC2000
unkown image
page readonly
clean
7FD00000
unkown image
page readonly
clean
7FEC2000
unkown image
page readonly
clean
1A7FBB80000
unkown image
page readonly
clean
254D000
unkown image
page readonly
clean
7F122000
unkown image
page readonly
clean
2116000
unkown image
page readonly
clean
7F5B0000
unkown image
page readonly
clean
277D000
unkown
page read and write
clean
2750000
heap default
page read and write
clean
27C0000
unkown
page read and write
clean
4CEF000
stack
page read and write
clean
277A000
unkown
page read and write
clean
25BE000
stack
page read and write
clean
277D000
unkown
page read and write
clean
F00000
unkown image
page readonly
clean
7DF5CA710000
unkown image
page readonly
clean
7F682000
unkown image
page readonly
clean
1A7FB64F000
unkown
page read and write
clean
2923000
unkown image
page readonly
clean
2061000
unkown image
page readonly
clean
24DB000
unkown
page read and write
clean
2850000
unkown image
page readonly
clean
2720000
unkown image
page readonly
clean
1A7FB4D0000
unkown image
page readonly
clean
2F50000
unkown image
page readonly
clean
D4043FF000
stack
page read and write
clean
2428000
unkown image
page readonly
clean
2F70000
unkown image
page readonly
clean
343A000
heap default
page read and write
clean
7DF5CA700000
unkown image
page readonly
clean
2099000
unkown image
page readonly
clean
445F000
stack
page read and write
clean
2B77000
unkown
page read and write
clean
213B000
unkown image
page readonly
clean
1F3A000
unkown image
page readonly
clean
6EA10000
unkown image
page readonly
clean
2E7A000
heap default
page read and write
clean
7F690000
unkown image
page readonly
clean
1A7FB646000
unkown
page read and write
clean
1F8D000
unkown image
page readonly
clean
7FF5BCA79000
unkown image
page readonly
clean
2EDB000
heap default
page read and write
clean
26DB000
unkown
page read and write
clean
2D10000
unkown image
page readonly
clean
810000
unkown
page read and write
clean
7FEC0000
unkown image
page readonly
clean
2481000
unkown image
page readonly
clean
234A000
unkown image
page readonly
clean
2325000
unkown image
page readonly
clean
2FFD000
unkown
page read and write
clean
2700000
unkown image
page readonly
clean
215C000
unkown image
page readonly
clean
6EA5D000
unkown image
page read and write
clean
2DD0000
unkown image
page readonly
clean
3240000
unkown image
page readonly
clean
1FBA000
unkown image
page readonly
clean
1A7FB67E000
unkown
page read and write
clean
16E597F000
stack
page read and write
clean
2474000
unkown image
page readonly
clean
7FF40000
unkown image
page readonly
clean
2428000
unkown image
page readonly
clean
20AB000
unkown image
page readonly
clean
7F540000
unkown image
page readonly
clean
206F000
unkown image
page readonly
clean
27C5000
stack
page execute and read and write
clean
21B4000
unkown image
page readonly
clean
7FF5437DC000
unkown image
page readonly
clean
7FF52000
unkown image
page readonly
clean
2B65000
unkown
page read and write
clean
2A44000
unkown image
page readonly
clean
231E000
unkown image
page readonly
clean
2390000
unkown image
page readonly
clean
2AE4000
unkown
page read and write
clean
7FED0000
unkown image
page readonly
clean
7FF5BC9CE000
unkown image
page readonly
clean
7F140000
unkown image
page readonly
clean
4BCE000
stack
page read and write
clean
2496000
unkown image
page readonly
clean
27A0000
unkown image
page readonly
clean
22B7000
unkown image
page readonly
clean
214B000
unkown image
page readonly
clean
2BEEF200000
unkown image
page readonly
clean
2A40000
unkown image
page readonly
clean
7FF54387D000
unkown image
page readonly
clean
2386000
unkown image
page readonly
clean
23C1000
unkown image
page readonly
clean
23F4000
unkown image
page readonly
clean
6EA4A000
unkown image
page readonly
clean
240B000
unkown image
page readonly
clean
6EA10000
unkown image
page readonly
clean
272E000
stack
page read and write
clean
7F530000
unkown image
page readonly
clean
31E0000
heap default
page read and write
clean
23E8000
unkown image
page readonly
clean
2F60000
unkown image
page readonly
clean
2B6A000
unkown
page read and write
clean
2401000
unkown image
page readonly
clean
345D000
unkown
page read and write
clean
2C70000
unkown image
page readonly
clean
1A7FB708000
unkown
page read and write
clean
270B000
unkown image
page readonly
clean
380000
unkown image
page readonly
clean
342E000
stack
page read and write
clean
2641000
unkown image
page readonly
clean
CA000
unkown
page read and write
clean
2720000
unkown image
page readonly
clean
1F44000
unkown image
page readonly
clean
246B000
unkown image
page readonly
clean
16E5E7F000
stack
page read and write
clean
7FF543949000
unkown image
page readonly
clean
26EF000
unkown image
page readonly
clean
2C68000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
7F120000
unkown image
page readonly
clean
2F17000
unkown
page read and write
clean
7F540000
unkown image
page readonly
clean
29FB000
unkown image
page readonly
clean
2BEEFEC0000
unkown
page read and write
clean
2A18000
unkown image
page readonly
clean
2125000
unkown image
page readonly
clean
7FF543782000
unkown image
page readonly
clean
21AB000
unkown image
page readonly
clean
7FF5438BB000
unkown image
page readonly
clean
269D000
unkown
page read and write
clean
212B000
unkown image
page readonly
clean
5D90000
unkown
page read and write
clean
2BEEF600000
heap private
page read and write
clean
2CA0000
unkown image
page readonly
clean
2850000
heap default
page read and write
clean
2BEEF1E0000
unkown image
page readonly
clean
345D000
unkown
page read and write
clean
7FD10000
unkown image
page readonly
clean
7FF5BCAA1000
unkown image
page readonly
clean
7FF5BCAA1000
unkown image
page readonly
clean
241C000
unkown image
page readonly
clean
291F000
unkown image
page readonly
clean
D4047F9000
stack
page read and write
clean
7F3C0000
unkown image
page readonly
clean
2C68000
unkown image
page readonly
clean
7F232000
unkown image
page readonly
clean
7FF5BC9AF000
unkown image
page readonly
clean
2640000
unkown image
page readonly
clean
360000
unkown
page read and write
clean
32AF000
stack
page read and write
clean
7F8A2000
unkown image
page readonly
clean
2086000
unkown image
page readonly
clean
51E000
unkown image
page readonly
clean
2B96000
unkown image
page readonly
clean
4A8E000
stack
page read and write
clean
65D0000
unkown
page read and write
clean
215C000
unkown image
page readonly
clean
7F8C0000
unkown image
page readonly
clean
7F540000
unkown image
page readonly
clean
7F532000
unkown image
page readonly
clean
2EC0000
unkown image
page readonly
clean
2DD5000
stack
page execute and read and write
clean
7F530000
unkown image
page readonly
clean
27A0000
unkown image
page readonly
clean
7FF5438ED000
unkown image
page readonly
clean
2B65000
unkown
page read and write
clean
3140000
unkown image
page readonly
clean
5830000
unkown
page read and write
clean
20E0000
unkown image
page readonly
clean
7F6A0000
unkown image
page readonly
clean
26F0000
unkown image
page read and write
clean
2B6D000
unkown
page read and write
clean
263B000
unkown
page read and write
clean
2D40000
heap default
page read and write
clean
5A90000
unkown image
page readonly
clean
7FF54395A000
unkown image
page readonly
clean
2AD8000
unkown
page read and write
clean
23DC000
unkown image
page readonly
clean
6660000
unkown
page read and write
clean
7F5C0000
unkown image
page readonly
clean
20A5000
unkown image
page readonly
clean
6EA11000
unkown image
page execute read
clean
2701000
unkown image
page readonly
clean
2A3A000
heap private
page read and write
clean
23EB000
unkown image
page readonly
clean
7F542000
unkown image
page readonly
clean
29F0000
unkown image
page readonly
clean
3430000
heap default
page read and write
clean
20E0000
unkown image
page readonly
clean
290000
heap default
page read and write
clean
2980000
unkown image
page readonly
clean
7F3C2000
unkown image
page readonly
clean
4E3F000
stack
page read and write
clean
30D0000
unkown image
page readonly
clean
3040000
unkown image
page readonly
clean
22E1000
unkown image
page readonly
clean
1A7FB64C000
unkown
page read and write
clean
7F3C0000
unkown image
page readonly
clean
4E6C000
stack
page read and write
clean
236F000
unkown image
page readonly
clean
7F692000
unkown image
page readonly
clean
345D000
unkown
page read and write
clean
7F3E0000
unkown image
page readonly
clean
24E0000
unkown image
page readonly
clean
2BEEF605000
heap private
page read and write
clean
7FED0000
unkown image
page readonly
clean
2B20000
unkown image
page readonly
clean
7F680000
unkown image
page readonly
clean
2E40000
stack
page read and write
clean
16E5D7F000
stack
page read and write
clean
2D45000
heap default
page read and write
clean
7F532000
unkown image
page readonly
clean
32F0000
unkown image
page readonly
clean
213D000
unkown image
page readonly
clean
2776000
unkown
page read and write
clean
2A8D000
unkown image
page readonly
clean
2BEEF1C0000
unkown image
page read and write
clean
1A7FB4B0000
unkown image
page readonly
clean
2C56000
unkown image
page readonly
clean
5FAE000
stack
page read and write
clean
7F542000
unkown image
page readonly
clean
267D000
unkown image
page readonly
clean
29DC000
unkown
page read and write
clean
7F8A0000
unkown image
page readonly
clean
2670000
unkown image
page read and write
clean
23AF000
unkown image
page readonly
clean
230A000
unkown image
page readonly
clean
2794000
unkown
page read and write
clean
7FED2000
unkown image
page readonly
clean
2959000
unkown
page read and write
clean
2BFF000
unkown
page read and write
clean
7FF5BC9C7000
unkown image
page readonly
clean
7F3E0000
unkown image
page readonly
clean
1A7FB64B000
unkown
page read and write
clean
2560000
unkown image
page readonly
clean
27A0000
unkown image
page readonly
clean
20C6000
unkown image
page readonly
clean
7F8A2000
unkown image
page readonly
clean
21E3000
unkown image
page readonly
clean
7FF60000
unkown image
page readonly
clean
7F5A0000
unkown image
page readonly
clean
2BEEF34C000
unkown
page read and write
clean
2119000
unkown image
page readonly
clean
29D0000
unkown image
page readonly
clean
7F542000
unkown image
page readonly
clean
5B60000
heap private
page read and write
clean
2168000
unkown image
page readonly
clean
240B000
unkown image
page readonly
clean
1A7FB702000
unkown
page read and write
clean
29F1000
unkown image
page readonly
clean
7F682000
unkown image
page readonly
clean
21E8000
unkown image
page readonly
clean
7FF543954000
unkown image
page readonly
clean
6A20000
unkown
page read and write
clean
20CB000
unkown image
page readonly
clean
6ECA0000
unkown image
page readonly
clean
7FF5BCA72000
unkown image
page readonly
clean
3267000
heap private
page read and write
clean
277D000
unkown
page read and write
clean
7F680000
unkown image
page readonly
clean
2BEF000
stack
page read and write
clean
24F0000
unkown image
page readonly
clean
2677000
unkown image
page readonly
clean
7DF5CA720000
unkown image
page readonly
clean
2B6F000
unkown image
page readonly
clean
2134000
unkown image
page readonly
clean
2C70000
unkown image
page readonly
clean
7FEE0000
unkown image
page readonly
clean
1A7FB5E0000
unkown image
page readonly
clean
7FF5431F9000
unkown image
page readonly
clean
7FEC0000
unkown image
page readonly
clean
2168000
unkown image
page readonly
clean
20EF000
unkown image
page readonly
clean
24F0000
unkown image
page readonly
clean
33A0000
unkown image
page readonly
clean
2BEF0110000
unkown
page read and write
clean
7FF543787000
unkown image
page readonly
clean
110000
unkown image
page readonly
clean
2949000
unkown image
page readonly
clean
26E0000
unkown image
page readonly
clean
2F70000
unkown image
page readonly
clean
7FF5438EA000
unkown image
page readonly
clean
6EA5D000
unkown image
page read and write
clean
289E000
unkown
page read and write
clean
2A30000
heap private
page read and write
clean
370000
unkown image
page read and write
clean
7DF44F4A0000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
296D000
unkown image
page readonly
clean
2F60000
unkown image
page readonly
clean
2700000
unkown image
page readonly
clean
7FEC0000
unkown image
page readonly
clean
3640000
unkown image
page readonly
clean
5DFE000
stack
page read and write
clean
2630000
unkown image
page read and write
clean
7FD00000
unkown image
page readonly
clean
248B000
unkown image
page readonly
clean
7F530000
unkown image
page readonly
clean
5BF0000
unkown
page read and write
clean
7F692000
unkown image
page readonly
clean
2C2F000
unkown image
page readonly
clean
7F540000
unkown image
page readonly
clean
7FBF0000
unkown image
page readonly
clean
7F8A0000
unkown image
page readonly
clean
2785000
unkown
page read and write
clean
7F5B2000
unkown image
page readonly
clean
2AA0000
unkown image
page readonly
clean
293A000
unkown image
page readonly
clean
2B6D000
unkown
page read and write
clean
2141000
unkown image
page readonly
clean
2D20000
unkown image
page readonly
clean
120000
unkown image
page readonly
clean
D40477E000
stack
page read and write
clean
2BEF0130000
unkown
page read and write
clean
25FE000
stack
page read and write
clean
6EA10000
unkown image
page readonly
clean
1F8D000
unkown image
page readonly
clean
23D6000
unkown image
page readonly
clean
2BEEF35E000
unkown
page read and write
clean
261E000
unkown image
page readonly
clean
7F122000
unkown image
page readonly
clean
7F6A0000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
360000
unkown image
page readonly
clean
5F6E000
stack
page read and write
clean
27D0000
unkown image
page readonly
clean
6EA11000
unkown image
page execute read
clean
7DF5CA702000
unkown image
page readonly
clean
2FC0000
unkown
page read and write
clean
297B000
unkown image
page readonly
clean
2A77000
unkown image
page readonly
clean
2720000
unkown image
page readonly
clean
208A000
unkown image
page readonly
clean
275A000
heap default
page read and write
clean
24A8000
unkown image
page readonly
clean
2539000
unkown image
page readonly
clean
2440000
unkown image
page readonly
clean
2416000
unkown image
page readonly
clean
2423000
unkown image
page readonly
clean
21D6000
unkown image
page readonly
clean
5B70000
unkown
page read and write
clean
2A13000
unkown image
page readonly
clean
2FE0000
unkown image
page readonly
clean
27A0000
unkown image
page readonly
clean
27F4000
unkown image
page readonly
clean
7FEC2000
unkown image
page readonly
clean
2EB0000
unkown image
page read and write
clean
2740000
unkown
page read and write
clean
25C9000
unkown
page read and write
clean
2333000
unkown image
page readonly
clean
2160000
unkown image
page readonly
clean
2359000
unkown image
page readonly
clean
6510000
unkown image
page readonly
clean
2C50000
unkown image
page readonly
clean
2700000
unkown image
page readonly
clean
880000
heap private
page read and write
clean
2C60000
unkown image
page read and write
clean
7FED2000
unkown image
page readonly
clean
2780000
unkown image
page readonly
clean
7DF5515E0000
unkown image
page readonly
clean
7F5A2000
unkown image
page readonly
clean
215C000
unkown image
page readonly
clean
7F5B2000
unkown image
page readonly
clean
7FF5BC581000
unkown image
page readonly
clean
6EA10000
unkown image
page readonly
clean
290E000
unkown image
page readonly
clean
20BD000
unkown image
page readonly
clean
2428000
unkown image
page readonly
clean
7F680000
unkown image
page readonly
clean
4AD0000
unkown image
page readonly
clean
2775000
unkown
page read and write
clean
7FF52F881000
unkown image
page readonly
clean
27A0000
unkown image
page readonly
clean
7FF5431FE000
unkown image
page readonly
clean
6EA10000
unkown image
page readonly
clean
27FE000
stack
page read and write
clean
2A37000
heap private
page read and write
clean
24A3000
unkown image
page readonly
clean
23B4000
unkown image
page readonly
clean
2BEEF60B000
heap private
page read and write
clean
7FEC0000
unkown image
page readonly
clean
24A8000
unkown image
page readonly
clean
3DC000
unkown
page read and write
clean
7F542000
unkown image
page readonly
clean
2728000
unkown image
page readonly
clean
2AF4000
unkown
page read and write
clean
27B0000
unkown image
page readonly
clean
212F000
unkown image
page readonly
clean
24F7000
unkown image
page readonly
clean
233D000
unkown image
page readonly
clean
21E8000
unkown image
page readonly
clean
7F7A0000
unkown image
page readonly
clean
870000
unkown image
page readonly
clean
2730000
unkown image
page readonly
clean
120000
unkown image
page readonly
clean
1A7FB700000
unkown
page read and write
clean
6654000
heap private
page read and write
clean
7FF543876000
unkown image
page readonly
clean
16E587B000
unkown
page read and write
clean
2C80000
unkown
page read and write
clean
5D80000
unkown image
page readonly
clean
8D0000
heap default
page read and write
clean
7DF5515D0000
unkown image
page readonly
clean
1FED000
unkown image
page readonly
clean
7FE40000
unkown image
page readonly
clean
38B0000
unkown image
page readonly
clean
7FF543540000
unkown image
page readonly
clean
2BEEF400000
unkown
page read and write
clean
2BEEF820000
unkown image
page readonly
clean
7FF543883000
unkown image
page readonly
clean
7F8A2000
unkown image
page readonly
clean
2168000
unkown image
page readonly
clean
2406000
unkown image
page readonly
clean
20C6000
unkown image
page readonly
clean
2BEEF310000
heap default
page read and write
clean
2BEEF610000
unkown
page read and write
clean
27B5000
stack
page execute and read and write
clean
7F5C0000
unkown image
page readonly
clean
7FD02000
unkown image
page readonly
clean
26A0000
heap default
page read and write
clean
2AD1000
unkown
page read and write
clean
4E2E000
stack
page read and write
clean
7F240000
unkown image
page readonly
clean
208A000
unkown image
page readonly
clean
2B10000
heap default
page read and write
clean
2EC0000
unkown image
page readonly
clean
2BEEF369000
unkown
page read and write
clean
4DFE000
stack
page read and write
clean
2830000
unkown image
page readonly
clean
3130000
unkown image
page readonly
clean
6EA60000
unkown image
page readonly
clean
1F77000
unkown image
page readonly
clean
2134000
unkown image
page readonly
clean
277A000
unkown
page read and write
clean
2665000
unkown image
page readonly
clean
7DF5515D0000
unkown image
page readonly
clean
7F120000
unkown image
page readonly
clean
1F6D000
unkown image
page readonly
clean
7F8C0000
unkown image
page readonly
clean
2936000
unkown image
page readonly
clean
2ADD000
unkown
page read and write
clean
4DEF000
stack
page read and write
clean
2AB0000
heap default
page read and write
clean
2C5C000
unkown image
page readonly
clean
2EC0000
unkown image
page readonly
clean
2680000
unkown image
page readonly
clean
7FF5BCA8A000
unkown image
page readonly
clean
2DE000
stack
page read and write
clean
2156000
unkown image
page readonly
clean
5B64000
heap private
page read and write
clean
7FF5BC9B3000
unkown image
page readonly
clean
1F44000
unkown image
page readonly
clean
2A18000
unkown image
page readonly
clean
4E40000
unkown
page read and write
clean
2163000
unkown image
page readonly
clean
224D000
unkown image
page readonly
clean
2686000
unkown image
page readonly
clean
271C000
unkown image
page readonly
clean
279B000
unkown
page read and write
clean
2740000
unkown
page read and write
clean
1A7FB64D000
unkown
page read and write
clean
70000
unkown image
page readonly
clean
7FEC0000
unkown image
page readonly
clean
120000
unkown image
page readonly
clean
21AF000
unkown image
page readonly
clean
7FF543893000
unkown image
page readonly
clean
2099000
unkown image
page readonly
clean
7FED0000
unkown image
page readonly
clean
2BEEFED6000
unkown
page read and write
clean
2990000
unkown image
page readonly
clean
2BBD000
unkown image
page readonly
clean
7FF5BC9D7000
unkown image
page readonly
clean
2680000
unkown image
page readonly
clean
23C1000
unkown image
page readonly
clean
23ED000
unkown
page read and write
clean
29EA000
heap private
page read and write
clean
6EA60000
unkown image
page readonly
clean
260000
unkown image
page readonly
clean
2A0C000
unkown image
page readonly
clean
21F7000
unkown image
page readonly
clean
7FF5BC8FB000
unkown image
page readonly
clean
D404679000
stack
page read and write
clean
3464000
unkown
page read and write
clean
2500000
unkown
page read and write
clean
7FF54370A000
unkown image
page readonly
clean
7FF54387F000
unkown image
page readonly
clean
2146000
unkown image
page readonly
clean
2680000
unkown image
page readonly
clean
2081000
unkown image
page readonly
clean
2730000
unkown image
page readonly
clean
29C5000
unkown
page read and write
clean
232B000
unkown image
page readonly
clean
2ABA000
heap default
page read and write
clean
5E5000
unkown
page read and write
clean
7F132000
unkown image
page readonly
clean
2C40000
unkown image
page readonly
clean
7FF5438CE000
unkown image
page readonly
clean
2BC6000
unkown image
page readonly
clean
232F000
unkown image
page readonly
clean
27E0000
unkown image
page readonly
clean
29DB000
unkown image
page readonly
clean
24E0000
unkown image
page readonly
clean
2AF7000
heap private
page read and write
clean
7F5A2000
unkown image
page readonly
clean
2700000
unkown image
page readonly
clean
2BDC000
unkown image
page readonly
clean
1A7FBA00000
unkown image
page readonly
clean
22AD000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
1F61000
unkown image
page readonly
clean
5E40000
unkown
page read and write
clean
2BEEF300000
heap default
page read and write
clean
7F692000
unkown image
page readonly
clean
2659000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
2BEEF34E000
unkown
page read and write
clean
6EA10000
unkown image
page readonly
clean
24FA000
unkown image
page readonly
clean
29E7000
heap private
page read and write
clean
1F37000
unkown image
page readonly
clean
22A1000
unkown image
page readonly
clean
7F130000
unkown image
page readonly
clean
206F000
unkown image
page readonly
clean
7F5C0000
unkown image
page readonly
clean
7F5A2000
unkown image
page readonly
clean
2163000
unkown image
page readonly
clean
1A7FB4A0000
heap private
page read and write
clean
2ADA000
unkown
page read and write
clean
7FF543668000
unkown image
page readonly
clean
1A7FBC60000
unkown
page read and write
clean
7F8C0000
unkown image
page readonly
clean
239E000
unkown image
page readonly
clean
2BEEF1D0000
unkown
page read and write
clean
2AD0000
heap default
page read and write
clean
7FF543971000
unkown image
page readonly
clean
2B0F000
stack
page read and write
clean
340000
unkown image
page readonly
clean
26FB000
unkown image
page readonly
clean
2775000
unkown
page read and write
clean
3000000
unkown image
page readonly
clean
6EA11000
unkown image
page execute read
clean
26EB000
unkown image
page readonly
clean
1A7FB602000
unkown
page read and write
clean
2F60000
unkown image
page readonly
clean
21BA000
unkown image
page readonly
clean
D4046F9000
stack
page read and write
clean
6650000
heap private
page read and write
clean
3464000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
7F530000
unkown image
page readonly
clean
2955000
unkown image
page readonly
clean
2430000
unkown image
page read and write
clean
21DC000
unkown image
page readonly
clean
295B000
unkown image
page readonly
clean
2B40000
heap default
page read and write
clean
7FED2000
unkown image
page readonly
clean
7F3D0000
unkown image
page readonly
clean
16E58FF000
stack
page read and write
clean
6EA10000
unkown image
page readonly
clean
20DC000
unkown image
page readonly
clean
26DD000
unkown
page read and write
clean
6EA4A000
unkown image
page readonly
clean
23CB000
unkown image
page readonly
clean
345F000
unkown
page read and write
clean
350000
unkown
page read and write
clean
A80000
heap default
page read and write
clean
403F000
stack
page read and write
clean
7F8B0000
unkown image
page readonly
clean
210A000
unkown image
page readonly
clean
7FF5BC9EB000
unkown image
page readonly
clean
110000
unkown image
page readonly
clean
2F5B000
unkown
page read and write
clean
7F8A2000
unkown image
page readonly
clean
212F000
unkown image
page readonly
clean
23FB000
unkown image
page readonly
clean
2F70000
unkown image
page readonly
clean
23F0000
unkown image
page readonly
clean
2E80000
unkown image
page readonly
clean
27E7000
unkown image
page readonly
clean
6240000
unkown
page read and write
clean
D40437E000
stack
page read and write
clean
110000
unkown image
page readonly
clean
295D000
unkown
page read and write
clean
D40487B000
stack
page read and write
clean
1A7FB629000
unkown
page read and write
clean
27B0000
unkown image
page readonly
clean
23EB000
unkown image
page readonly
clean
2284000
unkown image
page readonly
clean
7F5B2000
unkown image
page readonly
clean
2BEEF308000
heap default
page read and write
clean
7FF5BCA84000
unkown image
page readonly
clean
7F682000
unkown image
page readonly
clean
6EA11000
unkown image
page execute read
clean
5DB0000
heap private
page read and write
clean
7FF42000
unkown image
page readonly
clean
1A7FB4E0000
unkown image
page readonly
clean
234B000
unkown image
page readonly
clean
2950000
heap default
page read and write
clean
2BA5000
unkown image
page readonly
clean
5DB4000
heap private
page read and write
clean
29C1000
unkown
page read and write
clean
2440000
unkown image
page readonly
clean
22EF000
unkown image
page readonly
clean
21E8000
unkown image
page readonly
clean
2D70000
unkown
page read and write
clean
23A0000
unkown image
page readonly
clean
2D90000
unkown image
page readonly
clean
2C3B000
unkown image
page readonly
clean
264A000
unkown image
page readonly
clean
2BA0000
unkown image
page readonly
clean
7F532000
unkown image
page readonly
clean
232F000
unkown image
page readonly
clean
7FF5BC9C3000
unkown image
page readonly
clean
7FF5BC921000
unkown image
page readonly
clean
2168000
unkown image
page readonly
clean
7F8A0000
unkown image
page readonly
clean
110000
unkown image
page readonly
clean
29E0000
unkown image
page readonly
clean
1F3A000
unkown image
page readonly
clean
70000
unkown image
page readonly
clean
2BEEFE50000
unkown
page read and write
clean
7DF5515E2000
unkown image
page readonly
clean
2656000
unkown image
page readonly
clean
3060000
heap default
page read and write
clean
2AD5000
unkown
page read and write
clean
7DF5515D2000
unkown image
page readonly
clean
21BB000
unkown image
page readonly
clean
7FCF2000
unkown image
page readonly
clean
7FEC2000
unkown image
page readonly
clean
4ACF000
stack
page read and write
clean
2AE1000
unkown
page read and write
clean
212B000
unkown image
page readonly
clean
2C34000
unkown image
page readonly
clean
7F140000
unkown image
page readonly
clean
1A7FB657000
unkown
page read and write
clean
23AF000
unkown image
page readonly
clean
29E0000
heap private
page read and write
clean
2680000
unkown
page read and write
clean
7F690000
unkown image
page readonly
clean
2C80000
unkown image
page readonly
clean
7F8B0000
unkown image
page readonly
clean
2A9E000
stack
page read and write
clean
16E5C77000
stack
page read and write
clean
70000
unkown image
page readonly
clean
345F000
unkown
page read and write
clean
345F000
unkown
page read and write
clean
2BEEF420000
unkown
page read and write
clean
2101000
unkown image
page readonly
clean
7FF5BC8AF000
unkown image
page readonly
clean
21E8000
unkown image
page readonly
clean
7F3D2000
unkown image
page readonly
clean
2428000
unkown image
page readonly
clean
2BEEFED0000
unkown
page read and write
clean
2CBA000
heap default
page read and write
clean
4D6D000
stack
page read and write
clean
3170000
unkown image
page readonly
clean
7F5B0000
unkown image
page readonly
clean
7DF5CA712000
unkown image
page readonly
clean
60000
unkown image
page read and write
clean
7F8C0000
unkown image
page readonly
clean
2A50000
unkown image
page readonly
clean
7DF5CA700000
unkown image
page readonly
clean
2CCC000
unkown
page read and write
clean
D80000
unkown image
page readonly
clean
5FB0000
unkown
page read and write
clean
2B6D000
unkown
page read and write
clean
7DF5515F0000
unkown image
page readonly
clean
1FF7000
unkown image
page readonly
clean
2B6D000
unkown
page read and write
clean
2911000
unkown image
page readonly
clean
1A7FB490000
unkown image
page read and write
clean
7F680000
unkown image
page readonly
clean
7FF54396A000
unkown image
page readonly
clean
2B86000
unkown image
page readonly
clean
7F690000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
7F580000
unkown image
page readonly
clean
213B000
unkown image
page readonly
clean
200D000
unkown image
page readonly
clean
7F5A0000
unkown image
page readonly
clean
4C0F000
stack
page read and write
clean
22CD000
unkown image
page readonly
clean
2DB0000
unkown image
page readonly
clean
7F690000
unkown image
page readonly
clean
24E0000
unkown image
page readonly
clean
2141000
unkown image
page readonly
clean
2C00000
heap private
page read and write
clean
7F130000
unkown image
page readonly
clean
7F8B0000
unkown image
page readonly
clean
1A7FB621000
unkown
page read and write
clean
380000
unkown image
page readonly
clean
7DF5515E0000
unkown image
page readonly
clean
2D50000
unkown image
page readonly
clean
6EA11000
unkown image
page execute read
clean
7F230000
unkown image
page readonly
clean
7FF52000
unkown image
page readonly
clean
2960000
unkown image
page readonly
clean
2C41000
unkown image
page readonly
clean
277E000
unkown
page read and write
clean
1A7FB613000
unkown
page read and write
clean
7F3D2000
unkown image
page readonly
clean
7F5A2000
unkown image
page readonly
clean
24F0000
unkown image
page readonly
clean
7FF5BC9AD000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
323D000
stack
page read and write
clean
1A7FB670000
unkown
page read and write
clean
4CAE000
stack
page read and write
clean
29F0000
unkown image
page readonly
clean
7FEE0000
unkown image
page readonly
clean
6EA4A000
unkown image
page readonly
clean
2316000
unkown image
page readonly
clean
285A000
heap default
page read and write
clean
7F8B0000
unkown image
page readonly
clean
262F000
unkown image
page readonly
clean
2321000
unkown image
page readonly
clean
2946000
unkown image
page readonly
clean
2778000
unkown
page read and write
clean
241E000
unkown
page read and write
clean
20AF000
unkown image
page readonly
clean
2D20000
unkown image
page readonly
clean
2BAB000
unkown image
page readonly
clean
21E8000
unkown image
page readonly
clean
7FF5BCA1A000
unkown image
page readonly
clean
2785000
unkown
page read and write
clean
2B68000
unkown
page read and write
clean
350000
unkown image
page read and write
clean
2440000
unkown image
page readonly
clean
235C000
unkown image
page readonly
clean
2BE0000
unkown image
page readonly
clean
1FE1000
unkown image
page readonly
clean
236B000
unkown image
page readonly
clean
249A000
unkown
page read and write
clean
7F5B2000
unkown image
page readonly
clean
2976000
unkown image
page readonly
clean
1A7FB713000
unkown
page read and write
clean
7FDC0000
unkown image
page readonly
clean
7FF5BC9C0000
unkown image
page readonly
clean
2F70000
unkown image
page readonly
clean
7FEE0000
unkown image
page readonly
clean
2A6D000
unkown image
page readonly
clean
2F1A000
unkown
page read and write
clean
7F542000
unkown image
page readonly
clean
345E000
unkown
page read and write
clean
2F60000
unkown image
page readonly
clean
6EA4A000
unkown image
page readonly
clean
7FF5BC587000
unkown image
page readonly
clean
6EA5D000
unkown image
page read and write
clean
2BEF0140000
unkown
page read and write
clean
7DF5CA710000
unkown image
page readonly
clean
3F0000
unkown image
page readonly
clean
2B6E000
unkown
page read and write
clean
23D9000
unkown image
page readonly
clean
2CB0000
heap default
page read and write
clean
7F020000
unkown image
page readonly
clean
23BB000
unkown image
page readonly
clean
26F0000
unkown image
page readonly
clean
2421000
unkown image
page readonly
clean
2E50000
stack
page read and write
clean
2440000
unkown image
page readonly
clean
21B7000
unkown image
page readonly
clean
7F692000
unkown image
page readonly
clean
277D000
unkown
page read and write
clean
7F682000
unkown image
page readonly
clean
7F5A0000
unkown image
page readonly
clean
2ADD000
unkown
page read and write
clean
320000
unkown
page read and write
clean
6EA10000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
241C000
unkown image
page readonly
clean
227A000
unkown image
page readonly
clean
21CB000
unkown image
page readonly
clean
7FF5BC90C000
unkown image
page readonly
clean
33EE000
stack
page read and write
clean
2AD5000
unkown
page read and write
clean
260C000
unkown image
page readonly
clean
6EA4A000
unkown image
page readonly
clean
2A61000
unkown image
page readonly
clean
7FCF0000
unkown image
page readonly
clean
7F682000
unkown image
page readonly
clean
3E0000
unkown image
page readonly
clean
7FD10000
unkown image
page readonly
clean
31D0000
heap private
page read and write
clean
7F680000
unkown image
page readonly
clean
There are 1106 hidden memdumps, click here to show them.