IOC Report

loading gif

Files

File Path
Type
Category
Malicious
nhlHEF5IVY.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_88e9c9cb640b4f665f2020b110738337d7578_d70d8aa6_0e51d8a3\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_c048235b2cbfcf49ff1eab6d2a64f8e0c646d63f_d70d8aa6_0a5a0f82\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9086.tmp.csv
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER9411.tmp.txt
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERBAB5.tmp.csv
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERBE9E.tmp.txt
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD58.tmp.dmp
Mini DuMP crash report, 15 streams, Thu Dec 2 08:48:37 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD009.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERD23C.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF2D2.tmp.dmp
Mini DuMP crash report, 15 streams, Thu Dec 2 08:48:46 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFA07.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFC98.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
MS Windows registry file, NT/2000 or above
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_88e9c9cb640b4f665f2020b110738337d7578_d70d8aa6_0dacd410\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_d71d33d652a62c864cb684e881f783bcee8c2df7_d70d8aa6_0ddd14c2\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER1DED.tmp.csv
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER21A7.tmp.txt
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER4D6B.tmp.csv
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER5183.tmp.txt
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC635.tmp.dmp
Mini DuMP crash report, 15 streams, Thu Dec 2 08:35:11 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERC9C0.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERCC80.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE517.tmp.dmp
Mini DuMP crash report, 15 streams, Thu Dec 2 08:35:19 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERECE8.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFC89.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
There are 17 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\nhlHEF5IVY.dll"
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\nhlHEF5IVY.dll,Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\nhlHEF5IVY.dll",#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\nhlHEF5IVY.dll,ajkaibu
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\nhlHEF5IVY.dll,akyncbgollmj
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Rxalrmpxe\bkor.jtg",APfz
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\nhlHEF5IVY.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\nhlHEF5IVY.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\nhlHEF5IVY.dll",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Rxalrmpxe\bkor.jtg",Control_RunDLL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Kaxguqlsqyxr\izodilcglz.tnb",ftpxGYjL
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Kaxguqlsqyxr\izodilcglz.tnb",Control_RunDLL
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\nhlHEF5IVY.dll",#1
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4612 -ip 4612
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4612 -s 304
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 4612 -ip 4612
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4612 -s 336
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 488 -p 6640 -ip 6640
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6640 -s 320
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 568 -p 6640 -ip 6640
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6640 -s 340
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
There are 16 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://45.63.5.129/VCbYkbegGeqHFlwstrEAhPVucLQzDdpcoetAUGcPQabBfXg
45.63.5.129
malicious
http://upx.sf.net
unknown
clean
https://www.disneyplus.com/legal/your-california-privacy-rights
unknown
clean
https://45.63.5.129/VCbYkbegGeqHFlwstrEAhPVucLQzDdpcoetAUGcPQabBfXgRG
unknown
clean
https://www.disneyplus.com/legal/privacy-policy
unknown
clean
http://crl.m
unknown
clean
https://45.63.5.129/VCbYkbegGeqHFlwstrEAhPVucLQzDdpcoetAUGcPQabBfXg~
unknown
clean
https://disneyplus.com/legal.
unknown
clean
http://crl.ver)
unknown
clean
https://www.tiktok.com/legal/report/feedback
unknown
clean
http://crl.microsoft%C
unknown
clean
http://help.disneyplus.com.
unknown
clean
https://45.63.5.129/
unknown
clean
There are 3 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
45.63.5.129
unknown
United States
malicious

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\4612
Terminator
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\4612
Reason
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\4612
CreationTime
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHivePermissionsCorrect
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHiveOwnerCorrect
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
ExceptionRecord
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
ExceptionRecord
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6640
Terminator
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6640
Reason
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\TermReason\6640
CreationTime
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceTicket
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceId
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
ApplicationFlags
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
0018000734165AF5
clean
There are 4 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
1C0000
stack
page execute and read and write
malicious
5BB000
heap default
page read and write
malicious
E30000
stack
page execute and read and write
malicious
5BB000
heap default
page read and write
malicious
32AA000
heap default
page read and write
malicious
1C0000
stack
page execute and read and write
malicious
373A000
heap default
page read and write
malicious
31A0000
stack
page execute and read and write
malicious
750000
stack
page execute and read and write
malicious
371A000
heap default
page read and write
malicious
5BB000
heap default
page read and write
malicious
1C0000
stack
page execute and read and write
malicious
B2B000
unkown
page read and write
malicious
5BB000
heap default
page read and write
malicious
5BB000
heap default
page read and write
malicious
3400000
unkown
page execute and read and write
malicious
1C0000
stack
page execute and read and write
malicious
92A000
heap default
page read and write
malicious
1C0000
stack
page execute and read and write
malicious
8E0000
stack
page execute and read and write
malicious
6E4A0000
unkown image
page readonly
clean
2DEF000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
3178000
unkown image
page readonly
clean
B88000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
2DED000
unkown image
page readonly
clean
8A8000
unkown
page read and write
clean
7F350000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F232000
unkown image
page readonly
clean
2DE5000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
6114000
heap private
page read and write
clean
EA0000
heap default
page read and write
clean
F60000
unkown image
page readonly
clean
E30000
unkown
page read and write
clean
7F030000
unkown image
page readonly
clean
6E4A0000
unkown image
page readonly
clean
6E4A0000
unkown image
page readonly
clean
BA8000
unkown
page read and write
clean
7F0C2000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
6E4A1000
unkown image
page execute read
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
B30000
unkown image
page readonly
clean
2DFA000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DFF000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F682000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
150000
unkown image
page readonly
clean
10F5000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B7C000
unkown
page read and write
clean
B53000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
308C000
unkown image
page readonly
clean
2E61000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7FE70000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
BC7000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
CC4000
heap private
page read and write
clean
5B0000
heap default
page read and write
clean
21CAB502000
unkown
page read and write
clean
967000
unkown
page read and write
clean
BDA000
unkown
page read and write
clean
D0000
unkown image
page read and write
clean
21CAB437000
unkown
page read and write
clean
2DBC000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F032000
unkown image
page readonly
clean
7FF5001F2000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
1137000
unkown
page read and write
clean
B70000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E1B000
unkown image
page readonly
clean
1164000
unkown
page read and write
clean
967000
unkown
page read and write
clean
330000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
6E4A0000
unkown image
page readonly
clean
2DF3000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
E84000
unkown
page read and write
clean
6E4C8000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
6F0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F652000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
B0F000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B0F000
unkown
page read and write
clean
E50000
unkown image
page readonly
clean
2E16000
unkown image
page readonly
clean
7F0E0000
unkown image
page readonly
clean
21CAB460000
unkown
page read and write
clean
7F760000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F220000
unkown image
page readonly
clean
C80000
unkown image
page readonly
clean
4971000
unkown
page read and write
clean
BC7000
unkown
page read and write
clean
57E000
stack
page read and write
clean
5D0000
unkown image
page readonly
clean
7FE52000
unkown image
page readonly
clean
880000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7F032000
unkown image
page readonly
clean
950000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
B53000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
5150000
heap private
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
3425000
unkown
page execute and read and write
clean
967000
unkown
page read and write
clean
7FE62000
unkown image
page readonly
clean
1135000
unkown
page read and write
clean
7F772000
unkown image
page readonly
clean
651E000
stack
page read and write
clean
740000
unkown image
page readonly
clean
6E4FD000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
960000
heap default
page read and write
clean
2E12000
unkown image
page readonly
clean
30A000
unkown
page read and write
clean
6E730000
unkown image
page readonly
clean
B14000
unkown
page read and write
clean
7F380000
unkown image
page readonly
clean
7FF5001EA000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2E12000
unkown image
page readonly
clean
D60000
heap private
page read and write
clean
937000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2E88000
unkown image
page readonly
clean
BC7000
unkown
page read and write
clean
C10000
unkown image
page readonly
clean
2DFF000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
2DD9000
unkown image
page readonly
clean
2B89000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
6E4FC000
unkown image
page write copy
clean
10F6000
unkown
page read and write
clean
21CAB40D000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2CA3000
unkown image
page readonly
clean
31DF000
stack
page read and write
clean
B88000
unkown
page read and write
clean
4E0000
unkown image
page readonly
clean
7C0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
48AE000
stack
page read and write
clean
6E4FA000
unkown image
page read and write
clean
96E000
unkown
page read and write
clean
7F7A0000
unkown image
page readonly
clean
2DD0000
unkown image
page readonly
clean
2DB5000
unkown image
page readonly
clean
1142000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
30E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F050000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2E74000
unkown image
page readonly
clean
B82000
unkown
page read and write
clean
7F0D0000
unkown image
page readonly
clean
B6A000
unkown
page read and write
clean
2DC3000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
A10000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
3460000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
520000
stack
page read and write
clean
96E000
unkown
page read and write
clean
3540000
heap default
page read and write
clean
3A10000
unkown image
page readonly
clean
6240000
unkown
page read and write
clean
2C98000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F222000
unkown image
page readonly
clean
7FF50015F000
unkown image
page readonly
clean
2E1B000
unkown image
page readonly
clean
4A9E000
stack
page read and write
clean
490E000
stack
page read and write
clean
740000
unkown image
page readonly
clean
7F360000
unkown image
page readonly
clean
2DE7000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
FAE000
stack
page read and write
clean
82E000
unkown
page read and write
clean
7FF4FFEB0000
unkown image
page readonly
clean
116E000
unkown
page read and write
clean
B31000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F0C0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F662000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
1137000
unkown
page read and write
clean
937000
unkown
page read and write
clean
4961000
unkown
page read and write
clean
103D000
stack
page read and write
clean
7F042000
unkown image
page readonly
clean
7F0D2000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
740000
unkown image
page readonly
clean
2E61000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2E65000
unkown image
page readonly
clean
7F660000
unkown image
page readonly
clean
590000
heap default
page read and write
clean
937000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
6E4A0000
unkown image
page readonly
clean
7F250000
unkown image
page readonly
clean
2DE7000
unkown image
page readonly
clean
7A0000
unkown image
page readonly
clean
7C0000
unkown image
page readonly
clean
2DEF000
unkown image
page readonly
clean
2C6E000
unkown image
page readonly
clean
9A0000
stack
page read and write
clean
96E000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
49C000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
D30000
stack
page read and write
clean
96E000
unkown
page read and write
clean
2E82000
unkown image
page readonly
clean
2CC0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
D57000
heap private
page read and write
clean
7F220000
unkown image
page readonly
clean
BCD000
unkown
page read and write
clean
35A0000
heap default
page read and write
clean
A80000
unkown image
page readonly
clean
2DBC000
unkown image
page readonly
clean
2F4A000
unkown image
page readonly
clean
560D77F000
stack
page read and write
clean
BCD000
unkown
page read and write
clean
2DD9000
unkown image
page readonly
clean
140000
unkown image
page readonly
clean
D2A000
heap private
page read and write
clean
967000
unkown
page read and write
clean
3183000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
BC7000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F220000
unkown image
page readonly
clean
940000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B70000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2DF3000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
6E4A1000
unkown image
page execute read
clean
967000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
2CC0000
unkown image
page readonly
clean
6E4C8000
unkown image
page readonly
clean
9FE000
stack
page read and write
clean
B6A000
unkown
page read and write
clean
2DAD000
unkown image
page readonly
clean
506E000
stack
page read and write
clean
967000
unkown
page read and write
clean
7F040000
unkown image
page readonly
clean
4E30000
heap private
page read and write
clean
7EA000
heap private
page read and write
clean
BC1000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
13C000
unkown
page read and write
clean
7F690000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2FB0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
E84000
unkown
page read and write
clean
BDD000
unkown
page read and write
clean
6090000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
2E65000
unkown image
page readonly
clean
5E80000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7F042000
unkown image
page readonly
clean
72B000
unkown
page read and write
clean
7F680000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
3183000
unkown image
page readonly
clean
5E0000
unkown image
page readonly
clean
BE0000
unkown image
page readonly
clean
B7C000
unkown
page read and write
clean
CAB000
unkown
page read and write
clean
6E4FC000
unkown image
page write copy
clean
967000
unkown
page read and write
clean
F7C000
unkown
page read and write
clean
C00000
unkown image
page readonly
clean
21CAB200000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
6E4FD000
unkown image
page readonly
clean
D27000
heap private
page read and write
clean
2DED000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
2E61000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F780000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
30E3000
unkown image
page readonly
clean
3250000
unkown image
page readonly
clean
B20000
unkown image
page read and write
clean
7F2C0000
unkown image
page readonly
clean
2DED000
unkown image
page readonly
clean
7DF515270000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2F3E000
unkown image
page readonly
clean
B3D000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
30A5000
unkown image
page readonly
clean
7FF50012F000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
6F0000
unkown image
page readonly
clean
A57000
heap private
page read and write
clean
2DCC000
unkown image
page readonly
clean
3710000
heap default
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
489D000
stack
page read and write
clean
491E000
stack
page read and write
clean
2D89000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2DD9000
unkown image
page readonly
clean
2DFF000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2DCC000
unkown image
page readonly
clean
A50000
heap private
page read and write
clean
7F030000
unkown image
page readonly
clean
2E74000
unkown image
page readonly
clean
2F48000
unkown image
page readonly
clean
B76000
unkown
page read and write
clean
B50000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
140D000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
4ADF000
stack
page read and write
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
B97000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7DF515270000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
A10000
stack
page read and write
clean
96E000
unkown
page read and write
clean
6E4FC000
unkown image
page write copy
clean
2DCC000
unkown image
page readonly
clean
30DF000
unkown image
page readonly
clean
B1B000
unkown
page read and write
clean
7F350000
unkown image
page readonly
clean
2DED000
unkown image
page readonly
clean
6A0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
560D5FB000
stack
page read and write
clean
440000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
7F362000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
330000
unkown image
page readonly
clean
BD9000
unkown
page read and write
clean
6F0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2D8C000
unkown image
page readonly
clean
2D89000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
5B0000
heap default
page read and write
clean
7F352000
unkown image
page readonly
clean
6F0000
unkown image
page readonly
clean
7F7A2000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DB5000
unkown image
page readonly
clean
30BB000
unkown image
page readonly
clean
E7D000
unkown
page read and write
clean
6E4A1000
unkown image
page execute read
clean
93E000
unkown
page read and write
clean
308C000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2E74000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
B3A000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
494F000
stack
page read and write
clean
530000
unkown image
page readonly
clean
BB5000
unkown
page read and write
clean
2DEF000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
7F222000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
530000
unkown image
page readonly
clean
67A000
unkown
page read and write
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
FF1000
unkown
page read and write
clean
3102000
unkown image
page readonly
clean
3B90000
unkown image
page readonly
clean
B98000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
920000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B70000
unkown
page read and write
clean
7F662000
unkown image
page readonly
clean
BD3000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
F70000
stack
page read and write
clean
5D0000
unkown image
page readonly
clean
790000
unkown image
page readonly
clean
7DF515272000
unkown image
page readonly
clean
B6A000
unkown
page read and write
clean
C3A000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
F20000
unkown image
page readonly
clean
3183000
unkown image
page readonly
clean
B8A000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7FF5000EA000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
30B3000
unkown image
page readonly
clean
7E7000
heap private
page read and write
clean
96E000
unkown
page read and write
clean
30A5000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DB5000
unkown image
page readonly
clean
B5E000
unkown
page read and write
clean
B16000
unkown
page read and write
clean
D29000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7FE70000
unkown image
page readonly
clean
880000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
CB0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
BC1000
unkown
page read and write
clean
2DFA000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
590000
heap default
page read and write
clean
7F772000
unkown image
page readonly
clean
7FF50017D000
unkown image
page readonly
clean
3D0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
F9D000
unkown
page read and write
clean
2E16000
unkown image
page readonly
clean
56D000
unkown
page read and write
clean
937000
unkown
page read and write
clean
1155000
unkown
page read and write
clean
967000
unkown
page read and write
clean
6A0000
unkown image
page readonly
clean
7FE60000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F0C0000
unkown image
page readonly
clean
880000
unkown image
page readonly
clean
7F7B2000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
B6F000
unkown
page read and write
clean
DCC000
stack
page read and write
clean
2DB5000
unkown image
page readonly
clean
BBB000
unkown
page read and write
clean
B06000
unkown
page read and write
clean
7F0D0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
6E4FC000
unkown image
page write copy
clean
96E000
unkown
page read and write
clean
7F352000
unkown image
page readonly
clean
E00000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7FF500144000
unkown image
page readonly
clean
7F6A0000
unkown image
page readonly
clean
2DD0000
unkown image
page readonly
clean
BBC000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
D50000
heap private
page read and write
clean
7DF515290000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
6E4A0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2DFF000
unkown image
page readonly
clean
1139000
unkown
page read and write
clean
7FE70000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F360000
unkown image
page readonly
clean
2F92000
unkown image
page readonly
clean
BD9000
unkown
page read and write
clean
13C0000
unkown image
page readonly
clean
B64000
unkown
page read and write
clean
21CAB602000
unkown
page read and write
clean
7F3D2000
unkown image
page readonly
clean
2DD0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
937000
unkown
page read and write
clean
7F682000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2F5E000
unkown image
page readonly
clean
B0A000
heap default
page read and write
clean
7F3C0000
unkown image
page readonly
clean
6E4A1000
unkown image
page execute read
clean
7F0E0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
CF0000
unkown image
page readonly
clean
BA8000
unkown
page read and write
clean
6E4C8000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DD0000
unkown image
page readonly
clean
1020000
unkown
page read and write
clean
7FE60000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
3450000
unkown image
page readonly
clean
1174000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
3540000
heap private
page read and write
clean
93E000
unkown
page read and write
clean
6E4A0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F360000
unkown image
page readonly
clean
A00000
stack
page read and write
clean
967000
unkown
page read and write
clean
32A0000
heap default
page read and write
clean
4B0000
unkown image
page read and write
clean
51C000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
560D87E000
stack
page read and write
clean
2DEF000
unkown image
page readonly
clean
6E4FD000
unkown image
page readonly
clean
560D4FF000
stack
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F7C0000
unkown image
page readonly
clean
9D0000
unkown image
page readonly
clean
B64000
unkown
page read and write
clean
967000
unkown
page read and write
clean
B76000
unkown
page read and write
clean
967000
unkown
page read and write
clean
A51000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2C6E000
unkown image
page readonly
clean
2DD9000
unkown image
page readonly
clean
3164000
unkown image
page readonly
clean
7F0D0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
47D2000
unkown
page read and write
clean
2DC3000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
BC1000
unkown
page read and write
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2DE5000
unkown image
page readonly
clean
E81000
unkown
page read and write
clean
D0000
unkown image
page read and write
clean
2DF3000
unkown image
page readonly
clean
21CAB1F0000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7FE52000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
6110000
heap private
page read and write
clean
8A4000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
2DB5000
unkown image
page readonly
clean
5D0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
3151000
unkown image
page readonly
clean
2E82000
unkown image
page readonly
clean
4E2B000
stack
page read and write
clean
967000
unkown
page read and write
clean
B76000
unkown
page read and write
clean
5D20000
unkown image
page readonly
clean
2DFA000
unkown image
page readonly
clean
EA0000
heap default
page read and write
clean
A80000
unkown image
page readonly
clean
30E000
unkown
page read and write
clean
49DC000
stack
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
BD3000
unkown
page read and write
clean
47D5000
unkown
page read and write
clean
5C2000
unkown
page read and write
clean
500000
unkown image
page read and write
clean
937000
unkown
page read and write
clean
6A0000
unkown image
page readonly
clean
1320000
unkown
page read and write
clean
9F0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
6560000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7FE62000
unkown image
page readonly
clean
38C000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2DE7000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
2FA8000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
3183000
unkown image
page readonly
clean
4E30000
heap private
page read and write
clean
96E000
unkown
page read and write
clean
520000
unkown image
page read and write
clean
7FE62000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E88000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F230000
unkown image
page readonly
clean
2C6E000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
1164000
unkown
page read and write
clean
72F000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
13C000
unkown
page read and write
clean
4C0000
unkown image
page readonly
clean
6E4A1000
unkown image
page execute read
clean
96E000
unkown
page read and write
clean
B1E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
6E4FD000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
5F0000
unkown
page read and write
clean
2E82000
unkown image
page readonly
clean
6E4A0000
unkown image
page readonly
clean
2DC3000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
2DE7000
unkown image
page readonly
clean
E0000
unkown image
page readonly
clean
114F000
unkown
page read and write
clean
21CAB713000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
800000
heap default
page read and write
clean
6E4A0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
325B000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DD0000
unkown image
page readonly
clean
7F230000
unkown image
page readonly
clean
150000
unkown image
page readonly
clean
A80000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
30EA000
unkown image
page readonly
clean
2D89000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
7A0000
unkown
page read and write
clean
7F240000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
A5A000
unkown
page read and write
clean
B30000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
F10000
unkown image
page read and write
clean
967000
unkown
page read and write
clean
30DF000
unkown image
page readonly
clean
7FF4FFDA5000
unkown image
page readonly
clean
BB5000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7FF500096000
unkown image
page readonly
clean
6E4FA000
unkown image
page read and write
clean
C80000
unkown image
page readonly
clean
108E000
stack
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F780000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
5E0000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
7F350000
unkown image
page readonly
clean
BAF000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2D89000
unkown image
page readonly
clean
500000
stack
page read and write
clean
BDD000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B68000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
BCB000
unkown
page read and write
clean
1080000
unkown
page read and write
clean
6E4A1000
unkown image
page execute read
clean
96E000
unkown
page read and write
clean
2DD9000
unkown image
page readonly
clean
FE0000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
BD3000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
BD0000
unkown image
page readonly
clean
8D0000
stack
page read and write
clean
10FB000
unkown
page read and write
clean
101F000
stack
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
FC0000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
116B000
unkown
page read and write
clean
99E000
stack
page read and write
clean
2E65000
unkown image
page readonly
clean
9D0000
unkown
page read and write
clean
569000
unkown
page read and write
clean
7F2C0000
unkown image
page readonly
clean
7F7C0000
unkown image
page readonly
clean
A61000
unkown
page read and write
clean
7A0000
unkown image
page readonly
clean
D20000
stack
page read and write
clean
140D000
unkown image
page readonly
clean
2E01000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2E65000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
DE0000
unkown
page read and write
clean
950000
unkown image
page readonly
clean
2D89000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
B8E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
4B20000
heap private
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
6E4FD000
unkown image
page readonly
clean
6E4C8000
unkown image
page readonly
clean
2DC3000
unkown image
page readonly
clean
21CAB523000
heap private
page read and write
clean
96E000
unkown
page read and write
clean
5FC0000
unkown image
page readonly
clean
7F370000
unkown image
page readonly
clean
7FF4FFF90000
unkown image
page readonly
clean
7F760000
unkown image
page readonly
clean
140D000
unkown image
page readonly
clean
7F0C2000
unkown image
page readonly
clean
10F1000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E12000
unkown image
page readonly
clean
2DC3000
unkown image
page readonly
clean
7FF4FFDF1000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
5E0000
unkown image
page readonly
clean
7F370000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2C60000
unkown image
page readonly
clean
7F040000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
CC0000
heap private
page read and write
clean
7F692000
unkown image
page readonly
clean
A67000
unkown
page read and write
clean
9F0000
unkown image
page readonly
clean
2E61000
unkown image
page readonly
clean
3172000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2DC3000
unkown image
page readonly
clean
B82000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
2D93000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2E1B000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
5B0000
heap default
page read and write
clean
1060000
unkown image
page readonly
clean
9EE000
stack
page read and write
clean
2E74000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
2C64000
unkown image
page readonly
clean
2E16000
unkown image
page readonly
clean
7F662000
unkown image
page readonly
clean
2C62000
unkown image
page readonly
clean
2E1B000
unkown image
page readonly
clean
B53000
unkown
page read and write
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E82000
unkown image
page readonly
clean
7F652000
unkown image
page readonly
clean
2D9A000
unkown image
page readonly
clean
920000
unkown image
page readonly
clean
7F3E0000
unkown image
page readonly
clean
E79000
unkown
page read and write
clean
7F352000
unkown image
page readonly
clean
A5D000
unkown
page read and write
clean
320000
unkown image
page read and write
clean
2DED000
unkown image
page readonly
clean
A5D000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
6E4FA000
unkown image
page read and write
clean
7F762000
unkown image
page readonly
clean
3810000
unkown image
page readonly
clean
A80000
unkown image
page readonly
clean
F40000
unkown image
page readonly
clean
3102000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F362000
unkown image
page readonly
clean
B60000
unkown image
page readonly
clean
7F7B0000
unkown image
page readonly
clean
2DBC000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2E12000
unkown image
page readonly
clean
6A0000
unkown image
page readonly
clean
B82000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
4CF0000
unkown
page read and write
clean
4FC000
unkown
page read and write
clean
2DE7000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
BD3000
unkown
page read and write
clean
7F372000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2E01000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
560D47D000
unkown
page read and write
clean
B65000
unkown
page read and write
clean
7F762000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
C80000
unkown image
page readonly
clean
2DD9000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
2E74000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
B50000
heap private
page read and write
clean
2C6E000
unkown image
page readonly
clean
7FF4FFD94000
unkown image
page readonly
clean
C6D000
unkown
page read and write
clean
C7B000
unkown
page read and write
clean
320E000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B6A000
unkown
page read and write
clean
7F7B0000
unkown image
page readonly
clean
B88000
unkown
page read and write
clean
9D0000
unkown image
page readonly
clean
7F7B2000
unkown image
page readonly
clean
52BF000
stack
page read and write
clean
937000
unkown
page read and write
clean
3257000
unkown
page read and write
clean
967000
unkown
page read and write
clean
C90000
unkown image
page readonly
clean
7F0C2000
unkown image
page readonly
clean
BD3000
unkown
page read and write
clean
967000
unkown
page read and write
clean
4FC000
unkown
page read and write
clean
7F042000
unkown image
page readonly
clean
560000
unkown image
page readonly
clean
51AE000
stack
page read and write
clean
B4D000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2C64000
unkown image
page readonly
clean
FC0000
unkown image
page readonly
clean
7F2D0000
unkown image
page readonly
clean
B30000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
3550000
unkown image
page readonly
clean
4E30000
heap private
page read and write
clean
2D93000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
BC1000
unkown
page read and write
clean
967000
unkown
page read and write
clean
B47000
unkown
page read and write
clean
107E000
stack
page read and write
clean
10F8000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
5060000
heap private
page read and write
clean
967000
unkown
page read and write
clean
7F0D2000
unkown image
page readonly
clean
C10000
unkown image
page readonly
clean
30E000
unkown
page read and write
clean
7F232000
unkown image
page readonly
clean
C00000
unkown image
page read and write
clean
2E01000
unkown image
page readonly
clean
BDE000
unkown
page read and write
clean
D70000
heap default
page read and write
clean
2D9A000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
F90000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F652000
unkown image
page readonly
clean
A5B000
heap private
page read and write
clean
B88000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2FB0000
unkown image
page readonly
clean
7F3D0000
unkown image
page readonly
clean
B6D000
unkown
page read and write
clean
E7D000
unkown
page read and write
clean
7F372000
unkown image
page readonly
clean
2C64000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
B0B000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
E50000
heap default
page read and write
clean
13C000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7F230000
unkown image
page readonly
clean
B5B000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
21CAB500000
unkown
page read and write
clean
590000
heap default
page read and write
clean
96E000
unkown
page read and write
clean
7F780000
unkown image
page readonly
clean
FF0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
106E000
stack
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2C6E000
unkown image
page readonly
clean
7FE70000
unkown image
page readonly
clean
9AE000
stack
page read and write
clean
58C000
unkown
page read and write
clean
B47000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F550000
unkown image
page readonly
clean
6E4FA000
unkown image
page read and write
clean
967000
unkown
page read and write
clean
140D000
unkown image
page readonly
clean
D68000
heap private
page read and write
clean
7F7A2000
unkown image
page readonly
clean
2D8C000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
BDE000
unkown
page read and write
clean
2DD0000
unkown image
page readonly
clean
AE0000
heap default
page read and write
clean
2DE5000
unkown image
page readonly
clean
74A000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
1E5000
stack
page execute and read and write
clean
2DEF000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
21CAB702000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
CC0000
unkown image
page readonly
clean
6E4A0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
6E4A0000
unkown image
page readonly
clean
2E12000
unkown image
page readonly
clean
6E4A1000
unkown image
page execute read
clean
96E000
unkown
page read and write
clean
13C0000
unkown image
page readonly
clean
BA3000
unkown
page read and write
clean
967000
unkown
page read and write
clean
4E0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F350000
unkown image
page readonly
clean
B54000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E61000
unkown image
page readonly
clean
BAF000
unkown
page read and write
clean
114F000
unkown
page read and write
clean
2DD9000
unkown image
page readonly
clean
B5F000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
2D93000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
7F360000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2E01000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2DCC000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F772000
unkown image
page readonly
clean
2E74000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2DFA000
unkown image
page readonly
clean
30E000
unkown
page read and write
clean
2D9A000
unkown image
page readonly
clean
BC7000
unkown
page read and write
clean
B7C000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7FF5001F1000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
905000
stack
page execute and read and write
clean
D6B000
heap private
page read and write
clean
B68000
unkown
page read and write
clean
2E1B000
unkown image
page readonly
clean
7B0000
unkown
page read and write
clean
2DBC000
unkown image
page readonly
clean
BDD000
unkown
page read and write
clean
CD0000
unkown image
page readonly
clean
AC0000
unkown
page read and write
clean
A30000
heap default
page read and write
clean
9B0000
stack
page read and write
clean
7F7A2000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
B1B000
unkown
page read and write
clean
2DCC000
unkown image
page readonly
clean
BDD000
unkown
page read and write
clean
937000
unkown
page read and write
clean
6E4FC000
unkown image
page write copy
clean
B11000
unkown
page read and write
clean
7F352000
unkown image
page readonly
clean
520000
stack
page read and write
clean
7F770000
unkown image
page readonly
clean
21CAB230000
unkown image
page readonly
clean
30A000
unkown
page read and write
clean
7F030000
unkown image
page readonly
clean
7FE62000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F030000
unkown image
page readonly
clean
EB0000
unkown image
page readonly
clean
21CAB438000
unkown
page read and write
clean
BB8000
unkown
page read and write
clean
2DBC000
unkown image
page readonly
clean
EE0000
unkown image
page readonly
clean
3164000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B45000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2F4D000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
6A0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
4CF1000
unkown
page read and write
clean
BCD000
unkown
page read and write
clean
500000
stack
page read and write
clean
D25000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
500000
unkown
page read and write
clean
73B000
unkown
page read and write
clean
82A000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
2CC0000
unkown image
page readonly
clean
775000
stack
page execute and read and write
clean
967000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
7F3C2000
unkown image
page readonly
clean
B8C000
unkown
page read and write
clean
7F0D2000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2CC0000
unkown image
page readonly
clean
7F120000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
1031000
unkown
page read and write
clean
7F040000
unkown image
page readonly
clean
B82000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
E79000
unkown
page read and write
clean
B7C000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7FF4FFD9B000
unkown image
page readonly
clean
7FF500100000
unkown image
page readonly
clean
BC7000
unkown
page read and write
clean
B6A000
unkown
page read and write
clean
2E88000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
34F0000
heap private
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
500000
stack
page read and write
clean
937000
unkown
page read and write
clean
880000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
67E000
unkown
page read and write
clean
B1B000
unkown
page read and write
clean
6E4A0000
unkown image
page readonly
clean
7FF5000C3000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
B2D000
unkown
page read and write
clean
2C98000
unkown image
page readonly
clean
2F4D000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7FF500081000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
50AF000
stack
page read and write
clean
BC1000
unkown
page read and write
clean
B3D000
unkown
page read and write
clean
30EF000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2D89000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
DE0000
unkown image
page readonly
clean
2E88000
unkown image
page readonly
clean
2DE7000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F652000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F3E0000
unkown image
page readonly
clean
B53000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2DBC000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2DBC000
unkown image
page readonly
clean
4E30000
heap private
page read and write
clean
FC0000
unkown image
page readonly
clean
B53000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
499E000
stack
page read and write
clean
4E34000
heap private
page read and write
clean
750000
unkown image
page readonly
clean
B5E000
unkown
page read and write
clean
7F2C2000
unkown image
page readonly
clean
30DD000
unkown image
page readonly
clean
7F7A0000
unkown image
page readonly
clean
140D000
unkown image
page readonly
clean
2DE7000
unkown image
page readonly
clean
2DED000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F7C0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2DEF000
unkown image
page readonly
clean
FF0000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F670000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
2DEF000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
D0000
unkown image
page read and write
clean
96E000
unkown
page read and write
clean
2DB5000
unkown image
page readonly
clean
B16000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
1130000
unkown
page read and write
clean
A98000
heap default
page read and write
clean
96E000
unkown
page read and write
clean
2DBC000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2C6E000
unkown image
page readonly
clean
7F6A0000
unkown image
page readonly
clean
1E5000
stack
page execute and read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DC3000
unkown image
page readonly
clean
5DC0000
unkown image
page readonly
clean
B76000
unkown
page read and write
clean
E7A000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
7FF50010B000
unkown image
page readonly
clean
1040000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
FF1000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
FB0000
unkown
page read and write
clean
F30000
unkown image
page read and write
clean
6E4FD000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F370000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
BF0000
unkown
page read and write
clean
2E88000
unkown image
page readonly
clean
6E4FA000
unkown image
page read and write
clean
7F042000
unkown image
page readonly
clean
2DE5000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F362000
unkown image
page readonly
clean
30C9000
unkown image
page readonly
clean
2FA8000
unkown image
page readonly
clean
FD0000
unkown image
page readonly
clean
30B3000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
D5A000
heap private
page read and write
clean
7F762000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
9F0000
unkown image
page readonly
clean
2E12000
unkown image
page readonly
clean
30AC000
unkown image
page readonly
clean
6E4FC000
unkown image
page write copy
clean
6E4FD000
unkown image
page readonly
clean
7F050000
unkown image
page readonly
clean
B62000
unkown
page read and write
clean
7F1C0000
unkown image
page readonly
clean
498D000
stack
page read and write
clean
967000
unkown
page read and write
clean
7F032000
unkown image
page readonly
clean
2DD9000
unkown image
page readonly
clean
30D7000
unkown image
page readonly
clean
7F7B0000
unkown image
page readonly
clean
2DAD000
unkown image
page readonly
clean
B76000
unkown
page read and write
clean
AF0000
heap default
page read and write
clean
967000
unkown
page read and write
clean
2C64000
unkown image
page readonly
clean
3155000
unkown image
page readonly
clean
2DD0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F360000
unkown image
page readonly
clean
BC1000
unkown
page read and write
clean
B38000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F040000
unkown image
page readonly
clean
1A0000
unkown
page read and write
clean
9C0000
unkown image
page read and write
clean
7F780000
unkown image
page readonly
clean
BA8000
unkown
page read and write
clean
2DC3000
unkown image
page readonly
clean
10A0000
unkown image
page readonly
clean
7F7A0000
unkown image
page readonly
clean
B5B000
unkown
page read and write
clean
6E4FC000
unkown image
page write copy
clean
21CAB400000
unkown
page read and write
clean
BA2000
unkown
page read and write
clean
2E01000
unkown image
page readonly
clean
BD0000
unkown image
page readonly
clean
560D67F000
stack
page read and write
clean
B6A000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DE5000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2D93000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F0C0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
B6A000
unkown
page read and write
clean
2DF3000
unkown image
page readonly
clean
2C64000
unkown image
page readonly
clean
2F97000
unkown image
page readonly
clean
B91000
unkown
page read and write
clean
6E4FC000
unkown image
page write copy
clean
93E000
unkown
page read and write
clean
BD3000
unkown
page read and write
clean
2DED000
unkown image
page readonly
clean
2E12000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
7F050000
unkown image
page readonly
clean
E55000
stack
page execute and read and write
clean
2CA3000
unkown image
page readonly
clean
7F222000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
1030000
unkown
page read and write
clean
B4D000
unkown
page read and write
clean
7FE62000
unkown image
page readonly
clean
7FE52000
unkown image
page readonly
clean
1040000
unkown
page read and write
clean
967000
unkown
page read and write
clean
30EA000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
4FEE000
stack
page read and write
clean
B90000
unkown image
page readonly
clean
36D0000
unkown image
page readonly
clean
2DF3000
unkown image
page readonly
clean
761000
unkown
page read and write
clean
30EF000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
D50000
stack
page read and write
clean
96E000
unkown
page read and write
clean
2E65000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2DE5000
unkown image
page readonly
clean
BB5000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2CC0000
unkown image
page readonly
clean
BC1000
unkown
page read and write
clean
B04000
unkown
page read and write
clean
7F690000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
D10000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2D93000
unkown image
page readonly
clean
7F760000
unkown image
page readonly
clean
5052000
heap private
page read and write
clean
935000
heap default
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
113D000
unkown
page read and write
clean
2E01000
unkown image
page readonly
clean
2C6E000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
6200000
unkown
page read and write
clean
B62000
unkown
page read and write
clean
B89000
unkown
page read and write
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
440000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F7B0000
unkown image
page readonly
clean
7F7B2000
unkown image
page readonly
clean
7F770000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E7C000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
7F230000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2CC0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7FF500154000
unkown image
page readonly
clean
7F362000
unkown image
page readonly
clean
4E32000
heap private
page read and write
clean
967000
unkown
page read and write
clean
2E82000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
30A000
unkown
page read and write
clean
7F760000
unkown image
page readonly
clean
BD3000
unkown
page read and write
clean
2DFA000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
6E4C8000
unkown image
page readonly
clean
2C6E000
unkown image
page readonly
clean
93E000
stack
page read and write
clean
7E0000
heap private
page read and write
clean
2E93000
unkown image
page readonly
clean
A5D000
unkown
page read and write
clean
7F260000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
440000
unkown image
page readonly
clean
2C62000
unkown image
page readonly
clean
2E16000
unkown image
page readonly
clean
BC7000
unkown
page read and write
clean
2D9A000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
115C000
unkown
page read and write
clean
937000
unkown
page read and write
clean
7A0000
unkown image
page readonly
clean
1031000
unkown
page read and write
clean
B0D000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
FF1000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
316C000
unkown image
page readonly
clean
2E88000
unkown image
page readonly
clean
1135000
unkown
page read and write
clean
E79000
unkown
page read and write
clean
967000
unkown
page read and write
clean
790000
unkown image
page readonly
clean
6E4C8000
unkown image
page readonly
clean
7F762000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
13C000
unkown
page read and write
clean
967000
unkown
page read and write
clean
BD3000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
9FB000
heap private
page read and write
clean
B6E000
stack
page read and write
clean
B7C000
unkown
page read and write
clean
967000
unkown
page read and write
clean
6E4FA000
unkown image
page read and write
clean
2E61000
unkown image
page readonly
clean
7F232000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
B04000
heap private
page read and write
clean
2D9A000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F032000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7DF515280000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F362000
unkown image
page readonly
clean
B8A000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2C64000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
C80000
unkown image
page readonly
clean
7F3D2000
unkown image
page readonly
clean
720000
unkown image
page readonly
clean
7F7A2000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
BBB000
unkown
page read and write
clean
2DED000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
490E000
stack
page read and write
clean
9F0000
heap private
page read and write
clean
7FF5000EC000
unkown image
page readonly
clean
2CB4000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7FE52000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
E75000
unkown
page read and write
clean
E0000
unkown image
page readonly
clean
7F042000
unkown image
page readonly
clean
D80000
unkown image
page readonly
clean
2DB5000
unkown image
page readonly
clean
E7D000
unkown
page read and write
clean
13C0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2D9A000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7FF5001E4000
unkown image
page readonly
clean
13C000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
6E4FD000
unkown image
page readonly
clean
C90000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7DF515282000
unkown image
page readonly
clean
B68000
unkown
page read and write
clean
2DB5000
unkown image
page readonly
clean
2DCC000
unkown image
page readonly
clean
B6D000
unkown
page read and write
clean
7F692000
unkown image
page readonly
clean
402000
unkown
page read and write
clean
21CAB413000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2F75000
unkown image
page readonly
clean
5DF0000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
6E4FD000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2D93000
unkown image
page readonly
clean
3183000
unkown image
page readonly
clean
47D0000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
6E4FC000
unkown image
page write copy
clean
140D000
unkown image
page readonly
clean
B47000
unkown
page read and write
clean
F8E000
stack
page read and write
clean
2E88000
unkown image
page readonly
clean
A2E000
stack
page read and write
clean
B8E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
7F230000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
6E4C8000
unkown image
page readonly
clean
2DAD000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
7F370000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
140D000
unkown image
page readonly
clean
7F040000
unkown image
page readonly
clean
7F232000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
920000
heap default
page read and write
clean
96E000
unkown
page read and write
clean
472F000
stack
page read and write
clean
2E93000
unkown image
page readonly
clean
B3D000
unkown
page read and write
clean
790000
unkown image
page readonly
clean
10AE000
stack
page read and write
clean
6E4FC000
unkown image
page write copy
clean
2DFA000
unkown image
page readonly
clean
4F0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
700000
unkown
page read and write
clean
7DF413140000
unkown image
page readonly
clean
7F220000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
5D0000
unkown image
page readonly
clean
6E4FA000
unkown image
page read and write
clean
78B000
unkown
page read and write
clean
B1E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
FDE000
stack
page read and write
clean
967000
unkown
page read and write
clean
7F362000
unkown image
page readonly
clean
880000
unkown image
page readonly
clean
7FE52000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
CA0000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
BE0000
unkown image
page readonly
clean
5D0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
30E3000
unkown image
page readonly
clean
B0B000
unkown
page read and write
clean
2E61000
unkown image
page readonly
clean
2E16000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
B51000
heap default
page read and write
clean
7DF515280000
unkown image
page readonly
clean
7F222000
unkown image
page readonly
clean
2F5E000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
765000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
21CAB220000
unkown image
page readonly
clean
3172000
unkown image
page readonly
clean
30D7000
unkown image
page readonly
clean
BCD000
unkown
page read and write
clean
4E0000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
2DE5000
unkown image
page readonly
clean
30AC000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
316C000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
C00000
unkown image
page readonly
clean
7F3D0000
unkown image
page readonly
clean
7F0000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
6E4A1000
unkown image
page execute read
clean
495F000
stack
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7FE70000
unkown image
page readonly
clean
B1E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
7F0C0000
unkown image
page readonly
clean
5E0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F050000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
B0B000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
21CAB250000
heap default
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2C6E000
unkown image
page readonly
clean
3450000
unkown image
page readonly
clean
B3A000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
10F0000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
A5E000
unkown
page read and write
clean
500000
unkown image
page read and write
clean
B82000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
150000
unkown image
page readonly
clean
CD0000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E01000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2DFF000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F662000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
114F000
unkown
page read and write
clean
4D2000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B70000
unkown
page read and write
clean
7F370000
unkown image
page readonly
clean
B82000
unkown
page read and write
clean
7F0C2000
unkown image
page readonly
clean
BAB000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2C98000
unkown image
page readonly
clean
30D0000
unkown image
page readonly
clean
2DB5000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
B82000
unkown
page read and write
clean
2C64000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
E0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
7F0C2000
unkown image
page readonly
clean
21CAB402000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
51EF000
stack
page read and write
clean
2CC0000
unkown image
page readonly
clean
1E5000
stack
page execute and read and write
clean
967000
unkown
page read and write
clean
7F240000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
2E01000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
1080000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
937000
unkown
page read and write
clean
A55000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
2DE5000
unkown image
page readonly
clean
402000
unkown
page read and write
clean
2C64000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
B50000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B7C000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
31C5000
stack
page execute and read and write
clean
A40000
unkown
page read and write
clean
E60000
unkown image
page readonly
clean
2DF3000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
10A0000
unkown image
page readonly
clean
5C0000
unkown
page read and write
clean
2DE7000
unkown image
page readonly
clean
7F360000
unkown image
page readonly
clean
2D8C000
unkown image
page readonly
clean
2DE5000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7F2C0000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
E75000
unkown
page read and write
clean
2C8D000
unkown image
page readonly
clean
4870000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2F92000
unkown image
page readonly
clean
BD9000
unkown
page read and write
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2F95000
unkown image
page readonly
clean
B5D000
unkown
page read and write
clean
6E4FD000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
5F0000
heap private
page read and write
clean
937000
unkown
page read and write
clean
F20000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
1031000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
2F37000
unkown image
page readonly
clean
6E4C8000
unkown image
page readonly
clean
B00000
heap private
page read and write
clean
96E000
unkown
page read and write
clean
3730000
heap default
page read and write
clean
93E000
unkown
page read and write
clean
2F97000
unkown image
page readonly
clean
B8E000
unkown
page read and write
clean
1034000
unkown
page read and write
clean
2D8C000
unkown image
page readonly
clean
3066000
unkown image
page readonly
clean
7F7B2000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7FF50014A000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
A58000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7FF500179000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
140D000
unkown image
page readonly
clean
3151000
unkown image
page readonly
clean
B30000
unkown image
page readonly
clean
2D89000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
7F0C0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
2E16000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
B9C000
unkown
page read and write
clean
BD0000
unkown image
page readonly
clean
7F2C2000
unkown image
page readonly
clean
30DD000
unkown image
page readonly
clean
2D93000
unkown image
page readonly
clean
2E65000
unkown image
page readonly
clean
2E61000
unkown image
page readonly
clean
150000
unkown image
page readonly
clean
6F0000
unkown image
page readonly
clean
440000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2E74000
unkown image
page readonly
clean
2DFF000
unkown image
page readonly
clean
B70000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B70000
unkown
page read and write
clean
2DCC000
unkown image
page readonly
clean
AE8000
heap default
page read and write
clean
2DCC000
unkown image
page readonly
clean
740000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
E7D000
unkown
page read and write
clean
2E12000
unkown image
page readonly
clean
2C64000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
7F0C0000
unkown image
page readonly
clean
3E0000
unkown image
page readonly
clean
7F0D2000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7F370000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2E74000
unkown image
page readonly
clean
B35000
unkown
page read and write
clean
560D979000
stack
page read and write
clean
96E000
unkown
page read and write
clean
6E4FA000
unkown image
page read and write
clean
E0000
unkown image
page readonly
clean
CE0000
unkown
page read and write
clean
21CAB700000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2C8D000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
D60000
unkown image
page readonly
clean
6E4A0000
unkown image
page readonly
clean
530000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F0D0000
unkown image
page readonly
clean
7F770000
unkown image
page readonly
clean
7F0C2000
unkown image
page readonly
clean
109E000
stack
page read and write
clean
6E4A0000
unkown image
page readonly
clean
7FF5000FA000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
51F0000
unkown image
page write copy
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B9C000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
32D0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
9D0000
unkown image
page readonly
clean
307B000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
21CAB1E0000
unkown image
page read and write
clean
2DFA000
unkown image
page readonly
clean
61F0000
unkown
page read and write
clean
2E82000
unkown image
page readonly
clean
2DCC000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
5050000
heap private
page read and write
clean
96E000
unkown
page read and write
clean
AD0000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
6E4FA000
unkown image
page read and write
clean
2E16000
unkown image
page readonly
clean
30C0000
unkown image
page readonly
clean
4E0000
unkown image
page readonly
clean
2D79000
unkown image
page readonly
clean
7F0D2000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
430000
unkown image
page read and write
clean
967000
unkown
page read and write
clean
9E0000
unkown
page read and write
clean
570000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
F20000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
B64000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
3250000
unkown image
page readonly
clean
7F0D0000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
B70000
unkown
page read and write
clean
E87000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
BB0000
heap default
page read and write
clean
7F670000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
48DE000
stack
page read and write
clean
B0D000
unkown
page read and write
clean
B5D000
unkown
page read and write
clean
937000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
7F0E0000
unkown image
page readonly
clean
FC0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
7F7A0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
9F7000
heap private
page read and write
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F7C0000
unkown image
page readonly
clean
F20000
unkown image
page readonly
clean
2C8D000
unkown image
page readonly
clean
2E1B000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
BDD000
unkown
page read and write
clean
2E88000
unkown image
page readonly
clean
2DD9000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
9F0000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
B82000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7F0000
unkown image
page readonly
clean
30D5000
unkown image
page readonly
clean
2DF3000
unkown image
page readonly
clean
32D0000
unkown image
page readonly
clean
530000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
D6E000
stack
page read and write
clean
7F660000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2E12000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
30A000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F0E0000
unkown image
page readonly
clean
B1A000
heap default
page read and write
clean
4CF0000
unkown
page read and write
clean
2D93000
unkown image
page readonly
clean
6E4FC000
unkown image
page write copy
clean
2E82000
unkown image
page readonly
clean
1157000
unkown
page read and write
clean
937000
unkown
page read and write
clean
6E4FD000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
2CA3000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
6E4A1000
unkown image
page execute read
clean
93E000
unkown
page read and write
clean
E99000
unkown
page read and write
clean
485F000
stack
page read and write
clean
E80000
heap private
page read and write
clean
937000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
3CB000
unkown
page read and write
clean
48EF000
stack
page read and write
clean
967000
unkown
page read and write
clean
FE0000
unkown
page read and write
clean
690000
unkown image
page read and write
clean
937000
unkown
page read and write
clean
1E5000
stack
page execute and read and write
clean
6E4A0000
unkown image
page readonly
clean
30C0000
unkown image
page readonly
clean
F40000
unkown image
page readonly
clean
2E16000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
6E4A0000
unkown image
page readonly
clean
2E1B000
unkown image
page readonly
clean
1171000
unkown
page read and write
clean
7F580000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
7FE60000
unkown image
page readonly
clean
7F0D0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
BB5000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
7FE60000
unkown image
page readonly
clean
B7C000
unkown
page read and write
clean
B3E000
unkown
page read and write
clean
2E61000
unkown image
page readonly
clean
5120000
heap private
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
B64000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
A5D000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
E70000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
402000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
2DFF000
unkown image
page readonly
clean
2DFF000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
B14000
unkown
page read and write
clean
760000
unkown
page read and write
clean
7A0000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
7F660000
unkown image
page readonly
clean
2CB0000
unkown image
page readonly
clean
5DE0000
unkown
page read and write
clean
937000
unkown
page read and write
clean
2DAD000
unkown image
page readonly
clean
B82000
unkown
page read and write
clean
6E4C8000
unkown image
page readonly
clean
7F3C0000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
9D0000
unkown image
page readonly
clean
6E4A0000
unkown image
page readonly
clean
2E82000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
A80000
unkown image
page readonly
clean
D0000
unkown image
page read and write
clean
937000
unkown
page read and write
clean
1175000
unkown
page read and write
clean
2C62000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
4960000
unkown
page read and write
clean
7F770000
unkown image
page readonly
clean
2E82000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
B30000
unkown image
page readonly
clean
2DE7000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
3830000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
10F7000
unkown
page read and write
clean
306F000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
7F780000
unkown image
page readonly
clean
2D9A000
unkown image
page readonly
clean
FBB000
unkown
page read and write
clean
4C0000
unkown image
page readonly
clean
A55000
unkown
page read and write
clean
6E4C8000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
965000
heap default
page read and write
clean
A64000
unkown
page read and write
clean
494F000
stack
page read and write
clean
7FD50000
unkown image
page readonly
clean
5C0000
unkown
page read and write
clean
6E4FA000
unkown image
page read and write
clean
B5F000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DED000
unkown image
page readonly
clean
1E5000
stack
page execute and read and write
clean
B16000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
30E000
unkown
page read and write
clean
5054000
heap private
page read and write
clean
2DFF000
unkown image
page readonly
clean
E80000
heap private
page read and write
clean
967000
unkown
page read and write
clean
3155000
unkown image
page readonly
clean
BD9000
unkown
page read and write
clean
7DF515290000
unkown image
page readonly
clean
558000
unkown
page read and write
clean
B41000
unkown
page read and write
clean
967000
unkown
page read and write
clean
21CAB613000
unkown
page read and write
clean
13C0000
unkown image
page readonly
clean
7F2D0000
unkown image
page readonly
clean
BE0000
unkown image
page readonly
clean
E10000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
6E4C8000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
BDD000
unkown
page read and write
clean
6E4A0000
unkown image
page readonly
clean
2D9A000
unkown image
page readonly
clean
F70000
stack
page read and write
clean
3178000
unkown image
page readonly
clean
BAF000
unkown
page read and write
clean
B00000
heap default
page read and write
clean
96E000
unkown
page read and write
clean
7DF515272000
unkown image
page readonly
clean
2D8C000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
2E1B000
unkown image
page readonly
clean
E0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
C10000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
7F222000
unkown image
page readonly
clean
47D0000
unkown
page read and write
clean
502D000
stack
page read and write
clean
97F000
stack
page read and write
clean
BCD000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
B88000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2DD0000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
655E000
stack
page read and write
clean
5E0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
937000
unkown
page read and write
clean
7F232000
unkown image
page readonly
clean
7F652000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
5F8000
heap private
page read and write
clean
2E1B000
unkown image
page readonly
clean
2DD0000
unkown image
page readonly
clean
4F0000
unkown image
page readonly
clean
527E000
stack
page read and write
clean
B11000
unkown
page read and write
clean
D30000
unkown
page read and write
clean
B6D000
unkown
page read and write
clean
46EE000
stack
page read and write
clean
FDB000
unkown
page read and write
clean
937000
unkown
page read and write
clean
7FE60000
unkown image
page readonly
clean
1020000
unkown image
page readonly
clean
5B0000
heap default
page read and write
clean
7F6A0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
21CAB428000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
2E93000
unkown image
page readonly
clean
590000
heap default
page read and write
clean
937000
unkown
page read and write
clean
4A10000
heap private
page read and write
clean
2E01000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
6120000
unkown
page read and write
clean
2DC3000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7FE50000
unkown image
page readonly
clean
B08000
unkown
page read and write
clean
3183000
unkown image
page readonly
clean
BDE000
unkown
page read and write
clean
6FA000
unkown
page read and write
clean
2E93000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
4D11000
unkown
page read and write
clean
46AF000
stack
page read and write
clean
7F662000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
520000
stack
page read and write
clean
590000
heap default
page read and write
clean
93E000
unkown
page read and write
clean
7F3C2000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
B96000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2D89000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
937000
unkown
page read and write
clean
B10000
heap default
page read and write
clean
7F760000
unkown image
page readonly
clean
6E4A1000
unkown image
page execute read
clean
7F240000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
2D93000
unkown image
page readonly
clean
21CAB200000
unkown image
page readonly
clean
9B5000
heap default
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2F75000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
B45000
unkown
page read and write
clean
BBB000
unkown
page read and write
clean
9D0000
unkown image
page readonly
clean
E7E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B3D000
unkown
page read and write
clean
967000
unkown
page read and write
clean
30D5000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
90E000
stack
page read and write
clean
DF0000
heap private
page read and write
clean
2E65000
unkown image
page readonly
clean
150000
unkown image
page readonly
clean
307B000
unkown image
page readonly
clean
2DFA000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2E74000
unkown image
page readonly
clean
E0000
unkown image
page readonly
clean
BD3000
unkown
page read and write
clean
C00000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
11F3000
unkown image
page readonly
clean
3183000
unkown image
page readonly
clean
1159000
unkown
page read and write
clean
967000
unkown
page read and write
clean
3183000
unkown image
page readonly
clean
2E16000
unkown image
page readonly
clean
BCD000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
7FF500137000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
EDA000
heap default
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2D89000
unkown image
page readonly
clean
FEF000
stack
page read and write
clean
96E000
unkown
page read and write
clean
7F0D2000
unkown image
page readonly
clean
93E000
unkown
page read and write
clean
30A000
unkown
page read and write
clean
BBB000
unkown
page read and write
clean
10F5000
unkown
page read and write
clean
2E88000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2DF3000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
A90000
heap default
page read and write
clean
140000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
937000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
B50000
unkown
page read and write
clean
967000
unkown
page read and write
clean
ED0000
heap default
page read and write
clean
930000
heap default
page read and write
clean
967000
unkown
page read and write
clean
B76000
unkown
page read and write
clean
2CC0000
unkown image
page readonly
clean
E5A000
heap default
page read and write
clean
B35000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7EF30000
unkown image
page readonly
clean
7F380000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
7DF515282000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
B56000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
E99000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F220000
unkown image
page readonly
clean
A3A000
heap default
page read and write
clean
B89000
unkown
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
7F050000
unkown image
page readonly
clean
7FE50000
unkown image
page readonly
clean
BD0000
unkown image
page readonly
clean
5FB000
heap private
page read and write
clean
2E65000
unkown image
page readonly
clean
D60000
unkown image
page readonly
clean
E00000
unkown image
page readonly
clean
B1E000
unkown
page read and write
clean
B76000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
2DFA000
unkown image
page readonly
clean
BE0000
unkown image
page readonly
clean
B6E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
BA2000
unkown
page read and write
clean
21CAB515000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
790000
unkown image
page readonly
clean
B14000
unkown
page read and write
clean
BAE000
stack
page read and write
clean
2DBC000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
967000
unkown
page read and write
clean
30BD000
unkown image
page readonly
clean
30C9000
unkown image
page readonly
clean
7FF500176000
unkown image
page readonly
clean
D70000
unkown image
page readonly
clean
6E0000
unkown image
page read and write
clean
9B0000
heap default
page read and write
clean
2DEF000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
2DEF000
unkown image
page readonly
clean
B58000
unkown
page read and write
clean
6E4FA000
unkown image
page read and write
clean
1148000
unkown
page read and write
clean
7F030000
unkown image
page readonly
clean
5B0000
heap default
page read and write
clean
93E000
unkown
page read and write
clean
6E4A1000
unkown image
page execute read
clean
2DF3000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F770000
unkown image
page readonly
clean
D20000
heap private
page read and write
clean
967000
unkown
page read and write
clean
967000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
7F0E0000
unkown image
page readonly
clean
BE0000
unkown image
page readonly
clean
7F762000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
2D9A000
unkown image
page readonly
clean
937000
unkown
page read and write
clean
7F772000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
967000
unkown
page read and write
clean
2CC0000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
7F772000
unkown image
page readonly
clean
7F032000
unkown image
page readonly
clean
D0000
unkown image
page read and write
clean
320A000
unkown
page read and write
clean
7F0E0000
unkown image
page readonly
clean
B88000
unkown
page read and write
clean
96E000
unkown
page read and write
clean
D10000
unkown image
page readonly
clean
967000
unkown
page read and write
clean
F20000
unkown image
page readonly
clean
A64000
unkown
page read and write
clean
93E000
unkown
page read and write
clean
1157000
unkown
page read and write
clean
2E65000
unkown image
page readonly
clean
96E000
unkown
page read and write
clean
5BE000
stack
page read and write
clean
7F680000
unkown image
page readonly
clean
There are 2405 hidden memdumps, click here to show them.