IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Bank payment swift message.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Bank payment swift message.exe.log
ASCII text, with CRLF line terminators
dropped
malicious
C:\Users\user\AppData\Roaming\kprUEGC\kprUEGC.exe
PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Windows\System32\drivers\etc\hosts
ASCII text, with CRLF line terminators
modified
malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\kprUEGC.exe.log
ASCII text, with CRLF line terminators
dropped
clean
\Device\ConDrv
ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Bank payment swift message.exe
"C:\Users\user\Desktop\Bank payment swift message.exe"
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
malicious
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
malicious
C:\Users\user\AppData\Roaming\kprUEGC\kprUEGC.exe
"C:\Users\user\AppData\Roaming\kprUEGC\kprUEGC.exe"
malicious
C:\Users\user\AppData\Roaming\kprUEGC\kprUEGC.exe
"C:\Users\user\AppData\Roaming\kprUEGC\kprUEGC.exe"
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
http://mail.scsgroups.com
unknown
clean
http://127.0.0.1:HTTP/1.1
unknown
clean
https://api.ipify.org%GETMozilla/5.0
unknown
clean
http://DynDns.comDynDNS
unknown
clean
https://sectigo.com/CPS0
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
http://scsgroups.com
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
unknown
clean
https://api.ipify.org%$
unknown
clean
https://8LBhYvjS8QE2L4B.com
unknown
clean
http://WjMsNT.com
unknown
clean
There are 1 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
scsgroups.com
103.6.196.179
malicious
mail.scsgroups.com
unknown
malicious

IPs

IP
Domain
Country
Malicious
103.6.196.179
scsgroups.com
Malaysia
malicious

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
kprUEGC
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run
kprUEGC
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
402000
unkown
page execute and read and write
malicious
3B29000
unkown
page read and write
malicious
402000
unkown
page execute and read and write
malicious
402000
unkown
page execute and read and write
malicious
402000
unkown
page execute and read and write
malicious
2AE1000
unkown
page read and write
malicious
402000
unkown
page execute and read and write
malicious
2B21000
unkown
page read and write
malicious
2C10000
unkown
page read and write
malicious
CE0000
stack
page read and write
clean
D30000
stack
page read and write
clean
D31000
stack
page read and write
clean
B60000
unkown image
page readonly
clean
7FF55A9D1000
unkown image
page readonly
clean
FA0000
stack
page read and write
clean
50C0000
unkown
page read and write
clean
7F842000
unkown image
page readonly
clean
1B9D4402000
unkown
page read and write
clean
29783302000
unkown
page read and write
clean
2524F7F000
stack
page read and write
clean
D30000
stack
page read and write
clean
D31000
stack
page read and write
clean
CC2000
unkown
page read and write
clean
D00000
heap private
page read and write
clean
4A1E000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
1B9D3702000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
4F70000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
55F0000
unkown
page execute and read and write
clean
7DF5687B2000
unkown image
page readonly
clean
7FF535BDA000
unkown image
page readonly
clean
7FF535ACA000
unkown image
page readonly
clean
4FA0000
unkown
page read and write
clean
4F81000
unkown
page read and write
clean
8F0000
unkown image
page read and write
clean
2A80000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
1B9D4402000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
CE0000
stack
page read and write
clean
7FF55A9D5000
unkown image
page readonly
clean
5DB5000
unkown
page read and write
clean
7FF535B43000
unkown image
page readonly
clean
1B9D3540000
heap private
page read and write
clean
D30000
stack
page read and write
clean
1F7DF190000
unkown image
page readonly
clean
7FF535936000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
E9D000
unkown
page read and write
clean
3DD8000
unkown
page read and write
clean
1F7DF2C0000
unkown image
page readonly
clean
5FF0000
stack
page read and write
clean
10AF000
stack
page read and write
clean
5D60000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
291E000
stack
page read and write
clean
1B9D35A0000
heap default
page read and write
clean
7DF5687D0000
unkown image
page readonly
clean
50B0000
unkown
page read and write
clean
1B9D3FB8000
unkown
page read and write
clean
9D0000
unkown
page read and write
clean
50A0000
unkown
page read and write
clean
7DF543850000
unkown image
page readonly
clean
7DF5C9670000
unkown image
page readonly
clean
EE0000
stack
page read and write
clean
EE3FC79000
stack
page read and write
clean
2A9D000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
5FE0000
stack
page read and write
clean
CD1000
stack
page read and write
clean
4FEC000
stack
page read and write
clean
5D60000
unkown
page read and write
clean
29783200000
unkown
page read and write
clean
7FF5BB299000
unkown image
page readonly
clean
7FF57914B000
unkown image
page readonly
clean
7FF535AF9000
unkown image
page readonly
clean
50B0000
unkown
page read and write
clean
1B9D4402000
unkown
page read and write
clean
D30000
stack
page read and write
clean
2E45000
unkown
page read and write
clean
B70000
unkown image
page readonly
clean
7FBC0000
unkown image
page readonly
clean
7FF579055000
unkown image
page readonly
clean
6E8000
unkown image
page readonly
clean
5D0C000
unkown
page read and write
clean
2800000
unkown
page read and write
clean
10B7000
unkown
page execute and read and write
clean
1B9D3F91000
unkown
page read and write
clean
53C8000
heap private
page read and write
clean
F70000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
D52000
unkown
page read and write
clean
CF0000
stack
page read and write
clean
1B9D3F91000
unkown
page read and write
clean
D31000
stack
page read and write
clean
2E4D000
unkown
page read and write
clean
7FBD0000
unkown image
page readonly
clean
7FF57912E000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
1B9D3FB1000
unkown
page read and write
clean
E21000
unkown
page read and write
clean
7F850000
unkown image
page readonly
clean
2AC0000
unkown
page read and write
clean
D30000
stack
page read and write
clean
53C0000
heap private
page read and write
clean
7FD80000
unkown image
page readonly
clean
D57000
unkown
page read and write
clean
8EB000
unkown
page read and write
clean
5CF0000
unkown
page read and write
clean
6120000
unkown
page read and write
clean
3528D7F000
stack
page read and write
clean
6860000
unkown
page read and write
clean
F70000
stack
page read and write
clean
CD0000
stack
page read and write
clean
590000
unkown image
page readonly
clean
7FD00000
unkown image
page readonly
clean
1B9D3FC5000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
7FF55AB22000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
FF0000
heap private
page read and write
clean
D62000
unkown
page read and write
clean
9C1000
unkown
page read and write
clean
5FE0000
stack
page read and write
clean
1B9D36AA000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7FF535941000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
F70000
stack
page read and write
clean
716000
unkown
page read and write
clean
4D60000
unkown
page read and write
clean
1B9D3F60000
unkown
page read and write
clean
1B9D3FB2000
unkown
page read and write
clean
5EC0000
unkown
page read and write
clean
5FF0000
stack
page read and write
clean
D89000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
1F7DF35E000
unkown
page read and write
clean
2AC0000
unkown image
page readonly
clean
7FF5BB16F000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
17B0F6E0000
unkown image
page readonly
clean
7FF55A9AB000
unkown image
page readonly
clean
7FF5BB9E9000
unkown image
page readonly
clean
A7E000
stack
page read and write
clean
B7E000
stack
page read and write
clean
CF0000
stack
page read and write
clean
D84000
unkown
page read and write
clean
7FF57905B000
unkown image
page readonly
clean
1F5AABC0000
unkown image
page readonly
clean
D57000
unkown
page read and write
clean
2A75000
unkown
page read and write
clean
F70000
stack
page read and write
clean
117E000
unkown
page read and write
clean
970000
unkown image
page readonly
clean
7FF535A07000
unkown image
page readonly
clean
7FF523EA1000
unkown image
page readonly
clean
CCB000
unkown
page execute and read and write
clean
2E02000
unkown
page read and write
clean
4F72000
unkown
page read and write
clean
F70000
stack
page read and write
clean
2710000
heap private
page read and write
clean
1280000
unkown image
page readonly
clean
7F842000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
50B0000
unkown
page read and write
clean
7FD02000
unkown image
page readonly
clean
1B9D3F7F000
unkown
page read and write
clean
CF0000
stack
page read and write
clean
7FF55A1DB000
unkown image
page readonly
clean
7FF523DAF000
unkown image
page readonly
clean
7FF535759000
unkown image
page readonly
clean
7F5D0000
unkown image
page readonly
clean
55E0000
unkown
page read and write
clean
10B0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D64000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
5D80000
unkown
page read and write
clean
EE3F95E000
stack
page read and write
clean
55B0000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
1B9D3F68000
unkown
page read and write
clean
7FF55AAAE000
unkown image
page readonly
clean
2DD1000
unkown
page read and write
clean
7FF5BB87C000
unkown image
page readonly
clean
1F7DF4E0000
unkown
page read and write
clean
1F7DF319000
heap default
page read and write
clean
2A70000
unkown
page read and write
clean
4F2000
unkown image
page readonly
clean
D4B000
unkown
page read and write
clean
1F7DF356000
unkown
page read and write
clean
540C000
unkown
page read and write
clean
B80000
heap default
page read and write
clean
D40000
heap default
page read and write
clean
CD0000
stack
page read and write
clean
D30000
stack
page read and write
clean
4F80000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
1B9D3F79000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
5D60000
unkown
page read and write
clean
27F0000
unkown
page read and write
clean
5D6C000
unkown
page read and write
clean
7FF5A7921000
unkown image
page readonly
clean
5D50000
unkown
page read and write
clean
35285F7000
stack
page read and write
clean
A00000
unkown image
page readonly
clean
7FBC2000
unkown image
page readonly
clean
7F5D0000
unkown image
page readonly
clean
7FF5BB930000
unkown image
page readonly
clean
1B9D3F7B000
unkown
page read and write
clean
5D60000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
ECA000
stack
page read and write
clean
D62000
unkown
page read and write
clean
670E000
stack
page read and write
clean
CE0000
stack
page read and write
clean
7FF523E84000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
2AA0000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
790000
unkown image
page readonly
clean
E30000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
F70000
stack
page read and write
clean
D30000
stack
page read and write
clean
D30000
stack
page read and write
clean
CE1000
stack
page read and write
clean
7FF55AB51000
unkown image
page readonly
clean
CE1000
stack
page read and write
clean
1F5AAC13000
unkown
page read and write
clean
7DF531B12000
unkown image
page readonly
clean
CE1000
stack
page read and write
clean
1B9D365D000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7FBD2000
unkown image
page readonly
clean
1F5AAC70000
unkown
page read and write
clean
D59000
unkown
page read and write
clean
2A75000
unkown
page read and write
clean
D69000
unkown
page read and write
clean
7DF586E62000
unkown image
page readonly
clean
F80000
stack
page read and write
clean
5D0E000
unkown
page read and write
clean
5D90000
unkown
page read and write
clean
252507E000
stack
page read and write
clean
AF7000
unkown
page read and write
clean
1F7DF2A0000
unkown
page read and write
clean
7FBC0000
unkown image
page readonly
clean
5D60000
unkown
page read and write
clean
D62000
unkown
page read and write
clean
7FBC2000
unkown image
page readonly
clean
540D000
unkown
page read and write
clean
11E0000
unkown
page read and write
clean
7FF57910F000
unkown image
page readonly
clean
95C000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
D10000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
7FF523DAD000
unkown image
page readonly
clean
5EA0000
unkown
page read and write
clean
10BE000
stack
page read and write
clean
352897E000
stack
page read and write
clean
5FA1000
unkown
page read and write
clean
1B9D3DC0000
unkown
page read and write
clean
1F7DF150000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
5580000
unkown
page read and write
clean
D00000
stack
page read and write
clean
1B9D3F18000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
CA3000
unkown
page read and write
clean
4FF0000
heap private
page execute and read and write
clean
7FF523E8A000
unkown image
page readonly
clean
2A75000
unkown
page read and write
clean
720000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
1B9D3DC0000
unkown
page read and write
clean
50F4000
heap private
page read and write
clean
2A70000
unkown
page read and write
clean
5191000
unkown
page read and write
clean
1B9D3F16000
unkown
page read and write
clean
93E000
stack
page read and write
clean
5DC0000
unkown
page read and write
clean
17B0F6E0000
unkown image
page readonly
clean
50B8000
unkown
page read and write
clean
1B9D3F8A000
unkown
page read and write
clean
F90000
stack
page read and write
clean
BD0000
heap private
page read and write
clean
CD0000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
7DF5687B0000
unkown image
page readonly
clean
7DF441720000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
7FF523DC0000
unkown image
page readonly
clean
5140000
unkown
page read and write
clean
27F4000
unkown
page read and write
clean
FA0000
stack
page read and write
clean
2AC0000
unkown
page read and write
clean
2A75000
unkown
page read and write
clean
B70000
unkown image
page readonly
clean
2921000
unkown
page read and write
clean
D30000
stack
page read and write
clean
7DF543860000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
7FD72000
unkown image
page readonly
clean
6860000
unkown
page read and write
clean
1B9D3AD0000
unkown image
page readonly
clean
1B9D3530000
unkown image
page read and write
clean
2A70000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7DF586E60000
unkown image
page readonly
clean
55D0000
unkown
page read and write
clean
1F7E00C0000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
5DA0000
unkown
page read and write
clean
CF0000
stack
page read and write
clean
2978328D000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7FD70000
unkown image
page readonly
clean
7FF5BB9F4000
unkown image
page readonly
clean
1B9D36F9000
unkown
page read and write
clean
2AF0000
unkown
page read and write
clean
5D3D000
unkown
page read and write
clean
1B9D3F91000
unkown
page read and write
clean
720000
unkown image
page readonly
clean
CD1000
stack
page read and write
clean
2AF0000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
7F5F0000
unkown image
page readonly
clean
E90000
unkown
page execute and read and write
clean
7FF535BE1000
unkown image
page readonly
clean
6850000
unkown
page read and write
clean
7FF52393B000
unkown image
page readonly
clean
7FF5BB822000
unkown image
page readonly
clean
7DF5687C2000
unkown image
page readonly
clean
5D70000
unkown
page read and write
clean
D31000
stack
page read and write
clean
4F70000
unkown
page read and write
clean
F70000
stack
page read and write
clean
1F5AAC7C000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
D30000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
FA0000
stack
page read and write
clean
520000
unkown image
page read and write
clean
6860000
unkown
page read and write
clean
FA0000
stack
page read and write
clean
5E40000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
D30000
stack
page read and write
clean
EB0000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
6000000
stack
page read and write
clean
D30000
stack
page read and write
clean
4FC0000
unkown
page read and write
clean
2AD0000
heap private
page execute and read and write
clean
7FF535B6D000
unkown image
page readonly
clean
3921000
unkown
page read and write
clean
2A97000
unkown
page read and write
clean
D83000
unkown
page execute and read and write
clean
51A0000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
D60000
unkown
page read and write
clean
7FF523DCE000
unkown image
page readonly
clean
7F5E2000
unkown image
page readonly
clean
D01000
stack
page read and write
clean
5190000
unkown
page read and write
clean
55C4000
unkown
page read and write
clean
29783264000
unkown
page read and write
clean
E84000
unkown
page read and write
clean
5B70000
unkown
page read and write
clean
29783950000
unkown
page read and write
clean
5D60000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
DA2000
unkown
page read and write
clean
5570000
unkown
page read and write
clean
7FF55A90C000
unkown image
page readonly
clean
EE3FCFA000
stack
page read and write
clean
5E20000
unkown
page read and write
clean
7FF535ADE000
unkown image
page readonly
clean
2AC0000
unkown
page read and write
clean
1B9D3FAA000
unkown
page read and write
clean
8CA000
unkown image
page readonly
clean
1B9D446A000
unkown
page read and write
clean
1B9D35D0000
unkown
page read and write
clean
965000
heap default
page read and write
clean
11BC000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
1B9D3F22000
unkown
page read and write
clean
7FF579081000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
710000
unkown image
page readonly
clean
DC0000
heap default
page read and write
clean
CE0000
stack
page read and write
clean
5580000
unkown
page read and write
clean
B70000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
7FF5BBA0A000
unkown image
page readonly
clean
6020000
stack
page read and write
clean
E2C000
unkown
page read and write
clean
1B9D36AF000
unkown
page read and write
clean
7DF586E80000
unkown image
page readonly
clean
1B9D3F8D000
unkown
page read and write
clean
1F5AB350000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
CB4000
unkown
page read and write
clean
5E2D000
stack
page read and write
clean
2A75000
unkown
page read and write
clean
4F90000
unkown
page read and write
clean
7FF5791EA000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
50B5000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
CF0000
stack
page read and write
clean
2E6F000
unkown
page read and write
clean
7FBD0000
unkown image
page readonly
clean
5190000
unkown
page read and write
clean
B60000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
FB0000
stack
page read and write
clean
7FF535BD4000
unkown image
page readonly
clean
C4A4477000
stack
page read and write
clean
F76000
stack
page read and write
clean
C4A467E000
stack
page read and write
clean
CE0000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
53C3000
heap private
page read and write
clean
4FE0000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
7FF535BC2000
unkown image
page readonly
clean
5E50000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
5FA0000
unkown
page read and write
clean
55D0000
unkown
page read and write
clean
7FF523DFE000
unkown image
page readonly
clean
CE1000
stack
page read and write
clean
1180000
heap private
page execute and read and write
clean
D30000
stack
page read and write
clean
1B9D36E3000
unkown
page read and write
clean
D47000
unkown
page read and write
clean
710000
unkown image
page readonly
clean
530000
unkown image
page readonly
clean
4F80000
unkown
page read and write
clean
670000
unkown image
page readonly
clean
D48000
unkown
page read and write
clean
2D10000
unkown
page execute and read and write
clean
400000
unkown
page execute and read and write
clean
1170000
unkown
page read and write
clean
2AD0000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
2B00000
unkown
page read and write
clean
2A78000
unkown
page read and write
clean
D30000
stack
page read and write
clean
CE5000
stack
page read and write
clean
7FF535A4B000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
7FF5BB933000
unkown image
page readonly
clean
1B9D36E6000
unkown
page read and write
clean
D10000
heap default
page read and write
clean
E5A000
heap default
page read and write
clean
10C8000
unkown
page read and write
clean
7FF5BBA11000
unkown image
page readonly
clean
D47000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
2AB1000
unkown
page read and write
clean
7FD70000
unkown image
page readonly
clean
FBE000
stack
page read and write
clean
5EA1000
unkown
page read and write
clean
1B9D3F91000
unkown
page read and write
clean
7FF579201000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
7FF55A637000
unkown image
page readonly
clean
1F5AB260000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
F81000
stack
page read and write
clean
7FF5353B7000
unkown image
page readonly
clean
5E40000
unkown
page read and write
clean
7FF579201000
unkown image
page readonly
clean
F80000
stack
page read and write
clean
1B9D3651000
unkown
page read and write
clean
D00000
stack
page read and write
clean
4234B7F000
stack
page read and write
clean
17B0F950000
unkown image
page readonly
clean
D62000
unkown
page read and write
clean
ABA000
heap default
page read and write
clean
7DF586E72000
unkown image
page readonly
clean
1B9D3F79000
unkown
page read and write
clean
27D0000
unkown
page read and write
clean
D20000
stack
page read and write
clean
5D04000
unkown
page read and write
clean
D30000
stack
page read and write
clean
7FBE0000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
1B9D3F80000
unkown
page read and write
clean
639E000
stack
page read and write
clean
4FE0000
unkown
page read and write
clean
6010000
stack
page read and write
clean
A00000
unkown image
page readonly
clean
2701000
unkown
page read and write
clean
D31000
stack
page read and write
clean
CE0000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
900000
unkown image
page readonly
clean
7DF5C9672000
unkown image
page readonly
clean
29783276000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
B60000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
1B9D3FD2000
unkown
page read and write
clean
D38000
stack
page read and write
clean
C94000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
7FBC0000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
CD1000
stack
page read and write
clean
CD0000
stack
page read and write
clean
53D1000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
E2E000
unkown
page read and write
clean
4F2000
unkown image
page readonly
clean
CD1000
stack
page read and write
clean
7FF5358B7000
unkown image
page readonly
clean
5D50000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
1F5AB402000
unkown
page read and write
clean
7FBC2000
unkown image
page readonly
clean
7FBC2000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
D62000
unkown
page read and write
clean
5D9D000
stack
page read and write
clean
4AE8000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
2E05000
unkown
page read and write
clean
7FF55AA70000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
7DF543870000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
4FA0000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
E2E000
stack
page read and write
clean
F70000
stack
page read and write
clean
2D90000
unkown
page read and write
clean
3527F7B000
unkown
page read and write
clean
4F81000
unkown
page read and write
clean
1B9D3FB4000
unkown
page read and write
clean
7DF5687B0000
unkown image
page readonly
clean
BD7000
heap private
page read and write
clean
7FF5791E4000
unkown image
page readonly
clean
7FF5BB9FA000
unkown image
page readonly
clean
8C2000
unkown image
page readonly
clean
7FF53555B000
unkown image
page readonly
clean
EC0000
stack
page read and write
clean
17B0F7C1000
unkown
page read and write
clean
649F000
stack
page read and write
clean
CD1000
stack
page read and write
clean
1F7DF780000
unkown image
page readonly
clean
1B9D3F7B000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
2AB0000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
17B0F6C0000
unkown image
page read and write
clean
54F0000
unkown
page read and write
clean
1F5AAC88000
unkown
page read and write
clean
2AA0000
unkown image
page readonly
clean
5ED0000
unkown
page read and write
clean
D30000
stack
page read and write
clean
CE1000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
17B0F740000
unkown
page read and write
clean
1B9D3F7F000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
2A75000
unkown
page read and write
clean
35286FF000
stack
page read and write
clean
55E0000
unkown
page read and write
clean
5DD0000
unkown
page read and write
clean
5CB0000
unkown
page read and write
clean
1B9D365E000
unkown
page read and write
clean
7FF578FCD000
unkown image
page readonly
clean
50B0000
unkown
page read and write
clean
D31000
stack
page read and write
clean
CD1000
stack
page read and write
clean
2524FF9000
stack
page read and write
clean
610C000
stack
page read and write
clean
11F5000
heap private
page read and write
clean
55C0000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
D30000
stack
page read and write
clean
29783190000
heap private
page read and write
clean
D90000
unkown
page read and write
clean
CF0000
stack
page read and write
clean
1B9D3650000
unkown
page read and write
clean
1F7DF560000
heap private
page read and write
clean
7F832000
unkown image
page readonly
clean
54F0000
unkown
page read and write
clean
F70000
stack
page read and write
clean
CD1000
stack
page read and write
clean
D46000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
7FF5791FA000
unkown image
page readonly
clean
1B9D3550000
unkown image
page readonly
clean
7FBD0000
unkown image
page readonly
clean
F70000
stack
page read and write
clean
D6D000
unkown
page read and write
clean
7F830000
unkown image
page readonly
clean
2E43000
unkown
page read and write
clean
7FBE0000
unkown image
page readonly
clean
7FBC2000
unkown image
page readonly
clean
55E0000
unkown
page read and write
clean
4F7D000
unkown
page read and write
clean
1B9D4402000
unkown
page read and write
clean
900000
unkown image
page readonly
clean
7FF535AB2000
unkown image
page readonly
clean
CE1000
stack
page read and write
clean
5580000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
297836D0000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
7FF55A7D5000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
CD1000
stack
page read and write
clean
8C0000
unkown image
page readonly
clean
2720000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
D31000
stack
page read and write
clean
D30000
stack
page read and write
clean
51F0000
heap private
page read and write
clean
55C0000
unkown
page read and write
clean
CF0000
stack
page read and write
clean
CD1000
stack
page read and write
clean
7FBC2000
unkown image
page readonly
clean
2AAC000
unkown
page read and write
clean
7FD82000
unkown image
page readonly
clean
4FA0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
CAD000
unkown
page execute and read and write
clean
CE0000
stack
page read and write
clean
CF0000
stack
page read and write
clean
4F70000
unkown
page read and write
clean
557E000
stack
page read and write
clean
D34000
stack
page read and write
clean
26F0000
unkown
page read and write
clean
3A0000
unkown image
page readonly
clean
624E000
stack
page read and write
clean
CE0000
stack
page read and write
clean
630E000
stack
page read and write
clean
1F5AAC8E000
unkown
page read and write
clean
7DF5C9682000
unkown image
page readonly
clean
55E0000
unkown
page read and write
clean
2B00000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
5D3E000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
1B9D4463000
unkown
page read and write
clean
7FF55AA5F000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
F70000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
B60000
unkown image
page readonly
clean
FA0000
stack
page read and write
clean
E8D000
stack
page read and write
clean
E2C000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
1F5AAC3C000
unkown
page read and write
clean
A5B000
unkown
page read and write
clean
5240000
unkown
page read and write
clean
DAA000
unkown
page read and write
clean
2BD0000
heap private
page read and write
clean
7FCF2000
unkown image
page readonly
clean
FB0000
stack
page read and write
clean
1B9D3F8D000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
50B0000
unkown
page read and write
clean
7DF42F9D0000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
5270000
heap private
page execute and read and write
clean
5D69000
unkown
page read and write
clean
7FF55AA9B000
unkown image
page readonly
clean
D62000
unkown
page read and write
clean
5D60000
unkown
page read and write
clean
5D80000
unkown
page read and write
clean
127F000
stack
page read and write
clean
5D46000
unkown
page read and write
clean
50B5000
unkown
page read and write
clean
8FA000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D93000
unkown
page read and write
clean
1F7DF550000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7F840000
unkown image
page readonly
clean
7DF586E62000
unkown image
page readonly
clean
F70000
stack
page read and write
clean
CE1000
stack
page read and write
clean
DA0000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
7FF5356D1000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
D30000
stack
page read and write
clean
1B9D3DC0000
unkown
page read and write
clean
AAD000
unkown
page execute and read and write
clean
55C0000
unkown
page read and write
clean
9AB000
unkown
page read and write
clean
1B9D365A000
unkown
page read and write
clean
7DF531B02000
unkown image
page readonly
clean
D55000
unkown
page read and write
clean
1B9D3570000
unkown image
page readonly
clean
7FF535A02000
unkown image
page readonly
clean
27F0000
unkown
page read and write
clean
726000
unkown
page read and write
clean
D31000
stack
page read and write
clean
D4A000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
5E50000
unkown
page read and write
clean
960000
unkown image
page readonly
clean
1B9D3716000
unkown
page read and write
clean
2B00000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
5FA0000
unkown
page read and write
clean
7FF535955000
unkown image
page readonly
clean
D31000
stack
page read and write
clean
CD1000
stack
page read and write
clean
640F000
stack
page read and write
clean
2B00000
unkown
page read and write
clean
7F840000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
7DF531B00000
unkown image
page readonly
clean
1B9D3E02000
unkown
page read and write
clean
1B9D36BF000
unkown
page read and write
clean
C4A437B000
stack
page read and write
clean
2E41000
unkown
page read and write
clean
50B5000
unkown
page read and write
clean
1F7E00A0000
unkown
page readonly
clean
2A75000
unkown
page read and write
clean
1F5AB0E0000
unkown image
page readonly
clean
423467B000
unkown
page read and write
clean
E6D000
stack
page read and write
clean
DA6000
unkown
page execute and read and write
clean
2A3E000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
C4A407C000
unkown
page read and write
clean
D62000
unkown
page read and write
clean
1B9D3FA0000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
4FA0000
unkown
page read and write
clean
8C2000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
53D0000
unkown
page read and write
clean
7FF523DB6000
unkown image
page readonly
clean
D89000
heap default
page read and write
clean
2A92000
unkown
page read and write
clean
D5E000
unkown
page read and write
clean
D31000
stack
page read and write
clean
1F7DF35E000
unkown
page read and write
clean
7FF523E1A000
unkown image
page readonly
clean
BFE000
unkown
page read and write
clean
F76000
stack
page read and write
clean
7DF531B12000
unkown image
page readonly
clean
4F80000
unkown
page read and write
clean
5E50000
unkown
page read and write
clean
F70000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
D31000
stack
page read and write
clean
1B9D3629000
unkown
page read and write
clean
7FF523E9A000
unkown image
page readonly
clean
7FF578CE7000
unkown image
page readonly
clean
5500000
unkown
page read and write
clean
D01000
stack
page read and write
clean
55E0000
unkown
page read and write
clean
7F840000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
5BFE000
stack
page read and write
clean
CD0000
stack
page read and write
clean
D4B000
unkown
page read and write
clean
7FBC0000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
5E40000
unkown
page read and write
clean
7FBE0000
unkown image
page readonly
clean
17B0FDF0000
unkown image
page readonly
clean
DF4000
heap default
page read and write
clean
5197000
unkown
page read and write
clean
EB2000
unkown
page read and write
clean
D30000
stack
page read and write
clean
5DB0000
unkown
page read and write
clean
670000
unkown image
page readonly
clean
1B9D3FB1000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
1B9D3657000
unkown
page read and write
clean
5FE5000
stack
page read and write
clean
CD0000
stack
page read and write
clean
D00000
stack
page read and write
clean
CE0000
stack
page read and write
clean
E48000
heap default
page read and write
clean
2A70000
unkown
page read and write
clean
2C0E000
unkown
page read and write
clean
7FF535AD3000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
CFA000
unkown
page read and write
clean
7FF535A75000
unkown image
page readonly
clean
7FF535BC9000
unkown image
page readonly
clean
D45000
heap default
page read and write
clean
5580000
unkown
page read and write
clean
D30000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
1F7DF569000
heap private
page read and write
clean
543E000
stack
page read and write
clean
CD1000
stack
page read and write
clean
1B9D36D6000
unkown
page read and write
clean
D4A000
unkown
page read and write
clean
7FF55A9A5000
unkown image
page readonly
clean
D53000
unkown
page read and write
clean
E90000
unkown
page read and write
clean
50C3000
heap private
page read and write
clean
55C0000
unkown
page execute and read and write
clean
29783860000
unkown image
page readonly
clean
1160000
unkown
page execute and read and write
clean
7FF55AA73000
unkown image
page readonly
clean
6860000
unkown
page read and write
clean
E2D000
unkown
page read and write
clean
7FF55AB51000
unkown image
page readonly
clean
CB6000
unkown
page execute and read and write
clean
50B0000
unkown
page read and write
clean
1F7DF570000
unkown
page read and write
clean
7FBD2000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
7FBD2000
unkown image
page readonly
clean
D60000
unkown image
page read and write
clean
FB0000
stack
page read and write
clean
540D000
unkown
page read and write
clean
D05000
stack
page read and write
clean
720000
unkown image
page readonly
clean
FB0000
stack
page read and write
clean
13A0000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
55B0000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
8C0000
unkown image
page readonly
clean
CD1000
stack
page read and write
clean
3DA4000
unkown
page read and write
clean
B60000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
55E0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7FF578F86000
unkown image
page readonly
clean
FA0000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
B70000
unkown image
page readonly
clean
FB0000
stack
page read and write
clean
1F7DFB00000
unkown image
page readonly
clean
5E40000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
D30000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
7F830000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
F70000
stack
page read and write
clean
CD0000
stack
page read and write
clean
7DF543862000
unkown image
page readonly
clean
9BE000
unkown
page read and write
clean
7DF586E70000
unkown image
page readonly
clean
7FF5BB9E2000
unkown image
page readonly
clean
7FF535B13000
unkown image
page readonly
clean
530000
unkown image
page readonly
clean
7DF5C9670000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
6860000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
3A0000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
E21000
unkown
page read and write
clean
7F4D0000
unkown image
page readonly
clean
115D000
stack
page read and write
clean
CE1000
stack
page read and write
clean
55E0000
unkown
page read and write
clean
9CD000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
1B9D3F91000
unkown
page read and write
clean
CE5000
stack
page read and write
clean
F70000
stack
page read and write
clean
5C70000
unkown
page read and write
clean
1B9D364C000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
352847B000
stack
page read and write
clean
1090000
heap private
page read and write
clean
423477F000
stack
page read and write
clean
3528C7A000
stack
page read and write
clean
10D0000
unkown
page read and write
clean
64DE000
stack
page read and write
clean
2A9A000
unkown
page read and write
clean
7FF57910D000
unkown image
page readonly
clean
CD1000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
CB0000
unkown
page read and write
clean
7FF55A8D6000
unkown image
page readonly
clean
F80000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
FA0000
stack
page read and write
clean
CE1000
stack
page read and write
clean
6860000
unkown
page read and write
clean
1B9D3F8D000
unkown
page read and write
clean
7FBD0000
unkown image
page readonly
clean
50E0000
heap private
page execute and read and write
clean
5E30000
unkown
page read and write
clean
7FF55AA47000
unkown image
page readonly
clean
780000
unkown image
page readonly
clean
297831C0000
unkown image
page readonly
clean
CC7000
unkown
page execute and read and write
clean
CF0000
stack
page read and write
clean
5DF0000
unkown
page read and write
clean
7DF4C7540000
unkown image
page readonly
clean
FA0000
stack
page read and write
clean
A00000
unkown image
page readonly
clean
7FF57906C000
unkown image
page readonly
clean
7FBE0000
unkown image
page readonly
clean
7DF586E60000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
17B0F720000
unkown
page read and write
clean
51E0000
unkown
page read and write
clean
CF0000
stack
page read and write
clean
5580000
unkown
page read and write
clean
F90000
stack
page read and write
clean
E9D000
unkown
page execute and read and write
clean
CE1000
stack
page read and write
clean
F70000
stack
page read and write
clean
D30000
stack
page read and write
clean
1B9D3550000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
2E5D000
unkown
page read and write
clean
CDB000
unkown
page execute and read and write
clean
27C0000
unkown
page execute and read and write
clean
7FF523667000
unkown image
page readonly
clean
7FD02000
unkown image
page readonly
clean
1B9D3FA1000
unkown
page read and write
clean
7FF578FEB000
unkown image
page readonly
clean
629E000
stack
page read and write
clean
CE0000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
EE3000
heap default
page read and write
clean
7DF543852000
unkown image
page readonly
clean
3B09000
unkown
page read and write
clean
F80000
stack
page read and write
clean
4C7D000
stack
page read and write
clean
7FC70000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
55D0000
unkown
page read and write
clean
7FF578CE1000
unkown image
page readonly
clean
50B5000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D30000
stack
page execute and read and write
clean
55B0000
unkown
page read and write
clean
6870000
unkown
page read and write
clean
D10000
stack
page read and write
clean
CE0000
stack
page read and write
clean
1520000
unkown image
page readonly
clean
7DF5C9672000
unkown image
page readonly
clean
7FF5BB29E000
unkown image
page readonly
clean
4FD0000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
D30000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
D30000
stack
page read and write
clean
4FE0000
unkown
page read and write
clean
C80000
unkown
page read and write
clean
1F5AAC00000
unkown
page read and write
clean
2A70000
unkown image
page readonly
clean
E0E000
stack
page read and write
clean
B70000
unkown image
page readonly
clean
42346FF000
stack
page read and write
clean
7FF535934000
unkown image
page readonly
clean
3527FFE000
stack
page read and write
clean
CE0000
stack
page read and write
clean
2A75000
unkown
page read and write
clean
7FBD2000
unkown image
page readonly
clean
1580000
unkown image
page readonly
clean
F70000
stack
page read and write
clean
8C0000
unkown image
page readonly
clean
E2E000
unkown
page read and write
clean
2A8B000
unkown
page read and write
clean
5110000
unkown
page read and write
clean
107D000
stack
page read and write
clean
D40000
stack
page execute and read and write
clean
11A0000
unkown image
page readonly
clean
7FF578E85000
unkown image
page readonly
clean
7FF523E91000
unkown image
page readonly
clean
5DE9000
unkown
page read and write
clean
7FF535A5C000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
1B9D363C000
unkown
page read and write
clean
7FF55AB4A000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
7FBE0000
unkown image
page readonly
clean
2A75000
unkown
page read and write
clean
D00000
stack
page read and write
clean
11AD000
unkown
page read and write
clean
F80000
stack
page read and write
clean
4F60000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
7F5D2000
unkown image
page readonly
clean
D45000
unkown
page read and write
clean
7DF5687B2000
unkown image
page readonly
clean
7FF55A93B000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
1B9D3F68000
unkown
page read and write
clean
F80000
stack
page read and write
clean
CE0000
stack
page read and write
clean
7F850000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
7F0000
unkown image
page read and write
clean
CD0000
stack
page read and write
clean
A90000
unkown
page read and write
clean
55E0000
unkown
page read and write
clean
2AF0000
unkown
page read and write
clean
7F832000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
DB5000
unkown
page execute and read and write
clean
CD0000
stack
page read and write
clean
F70000
stack
page read and write
clean
1B9D4402000
unkown
page read and write
clean
D48000
unkown
page read and write
clean
E5E000
stack
page read and write
clean
EA0000
heap private
page read and write
clean
7FF535B1E000
unkown image
page readonly
clean
7FBD0000
unkown image
page readonly
clean
FA0000
stack
page read and write
clean
2524E7E000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
F80000
unkown image
page readonly
clean
FA1000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
7FF55AAA3000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
EA0000
unkown
page read and write
clean
7FF57888B000
unkown image
page readonly
clean
7FF55AA77000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
2A40000
unkown
page read and write
clean
9FE000
stack
page read and write
clean
11F0000
heap private
page read and write
clean
CE0000
stack
page read and write
clean
AA4000
unkown
page read and write
clean
9CA000
unkown
page read and write
clean
710000
unkown image
page read and write
clean
17B0FA60000
heap private
page read and write
clean
7FF535281000
unkown image
page readonly
clean
2A75000
unkown
page read and write
clean
6110000
unkown
page read and write
clean
7FBE0000
unkown image
page readonly
clean
7FBD0000
unkown image
page readonly
clean
E21000
unkown
page read and write
clean
17B0F7A7000
unkown
page read and write
clean
65DE000
stack
page read and write
clean
7FF57915E000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
3B3C000
unkown
page read and write
clean
17B0F7B3000
unkown
page read and write
clean
7FF5BBA05000
unkown image
page readonly
clean
66CE000
stack
page read and write
clean
1F7DF310000
heap default
page read and write
clean
CE0000
stack
page read and write
clean
7FF57917D000
unkown image
page readonly
clean
D47000
unkown
page read and write
clean
1B9D3F7D000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
1B9D3708000
unkown
page read and write
clean
7FBE0000
unkown image
page readonly
clean
CF0000
stack
page read and write
clean
7FBC2000
unkown image
page readonly
clean
17B0F770000
unkown image
page readonly
clean
7FBD2000
unkown image
page readonly
clean
5D90000
unkown
page read and write
clean
1B9D3600000
unkown
page read and write
clean
2D83000
unkown
page read and write
clean
7FF523DEB000
unkown image
page readonly
clean
BF0000
heap default
page read and write
clean
2A77000
unkown
page read and write
clean
D10000
stack
page read and write
clean
FA0000
stack
page read and write
clean
DAA000
heap default
page read and write
clean
5E30000
unkown
page read and write
clean
55BD000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
54F0000
unkown
page read and write
clean
D30000
stack
page read and write
clean
5510000
unkown
page read and write
clean
7FF5359DB000
unkown image
page readonly
clean
4F0000
unkown image
page readonly
clean
A00000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
BF5000
unkown
page read and write
clean
F70000
stack
page read and write
clean
CE0000
stack
page read and write
clean
7FF579113000
unkown image
page readonly
clean
7FF535AFF000
unkown image
page readonly
clean
CF0000
stack
page read and write
clean
55E0000
unkown
page read and write
clean
7FF55A9BC000
unkown image
page readonly
clean
B70000
unkown image
page readonly
clean
EE3FDFF000
stack
page read and write
clean
4FE0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7DF531B20000
unkown image
page readonly
clean
1F7DF160000
unkown image
page readonly
clean
55D0000
unkown
page read and write
clean
5580000
unkown
page read and write
clean
65CD000
stack
page read and write
clean
D00000
stack
page read and write
clean
CD1000
stack
page read and write
clean
1F5AABA0000
unkown image
page readonly
clean
DBB000
unkown
page execute and read and write
clean
1B9D3F7D000
unkown
page read and write
clean
1F5AAD13000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
644E000
stack
page read and write
clean
7FBE0000
unkown image
page readonly
clean
50B5000
unkown
page read and write
clean
7DF586E80000
unkown image
page readonly
clean
1B9D3F68000
unkown
page read and write
clean
7FBC0000
unkown image
page readonly
clean
B3E000
stack
page read and write
clean
CE0000
heap default
page read and write
clean
553E000
stack
page read and write
clean
7DF5C9690000
unkown image
page readonly
clean
1160000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7FF5BB1BF000
unkown image
page readonly
clean
7FBC0000
unkown image
page readonly
clean
1F7DF160000
unkown image
page readonly
clean
CD1000
stack
page read and write
clean
CE0000
stack
page read and write
clean
CE0000
stack
page read and write
clean
5580000
unkown
page read and write
clean
7DF5C9682000
unkown image
page readonly
clean
D5B000
unkown
page read and write
clean
2D80000
unkown
page read and write
clean
7FBD2000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
D30000
stack
page read and write
clean
50B5000
unkown
page read and write
clean
EE3FE7B000
stack
page read and write
clean
DB2000
unkown
page read and write
clean
50B0000
unkown
page read and write
clean
53C8000
heap private
page read and write
clean
3528B7F000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
5E50000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
7F840000
unkown image
page readonly
clean
D93000
heap default
page read and write
clean
55C0000
unkown
page read and write
clean
CE5000
stack
page read and write
clean
AA3000
unkown
page execute and read and write
clean
62CE000
stack
page read and write
clean
7FD00000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
5D3E000
unkown
page read and write
clean
D6B000
unkown
page read and write
clean
2B10000
heap private
page read and write
clean
CE0000
stack
page read and write
clean
7FBD2000
unkown image
page readonly
clean
4FE0000
unkown
page read and write
clean
5195000
unkown
page read and write
clean
D45000
unkown
page read and write
clean
672000
unkown image
page readonly
clean
D31000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
7FF535B4E000
unkown image
page readonly
clean
E39000
heap default
page read and write
clean
7FCF2000
unkown image
page readonly
clean
7FBF0000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
17B0F7C2000
unkown
page read and write
clean
DF6000
heap default
page read and write
clean
CF0000
stack
page read and write
clean
EFE000
stack
page read and write
clean
35284FE000
stack
page read and write
clean
50B5000
unkown
page read and write
clean
5E32000
unkown
page read and write
clean
F70000
stack
page read and write
clean
CE5000
stack
page read and write
clean
7DF586E70000
unkown image
page readonly
clean
1B9D3F9F000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
CEA000
stack
page read and write
clean
7FD82000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
7FF55A920000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
D30000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
D30000
stack
page read and write
clean
5580000
unkown
page read and write
clean
CEC000
stack
page read and write
clean
1F7E0110000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
17B0FA70000
unkown image
page readonly
clean
AB0000
heap default
page read and write
clean
2524EFF000
stack
page read and write
clean
7FF55A901000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
29783229000
unkown
page read and write
clean
7FF55A631000
unkown image
page readonly
clean
7FBD0000
unkown image
page readonly
clean
29783213000
unkown
page read and write
clean
F70000
stack
page read and write
clean
7FF5BB962000
unkown image
page readonly
clean
D1D000
heap default
page read and write
clean
2B00000
unkown
page execute and read and write
clean
A00000
unkown image
page readonly
clean
CF0000
stack
page read and write
clean
1F5AAED0000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
4FA0000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
7FBC0000
unkown image
page readonly
clean
7FF5BB91D000
unkown image
page readonly
clean
2E75000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
D4F000
unkown
page read and write
clean
7FF55AB41000
unkown image
page readonly
clean
55E0000
unkown
page read and write
clean
1B9D36AA000
unkown
page read and write
clean
1B9D36A5000
unkown
page read and write
clean
29783281000
unkown
page read and write
clean
7FF523E1D000
unkown image
page readonly
clean
7FF578FBC000
unkown image
page readonly
clean
50B5000
unkown
page read and write
clean
D30000
stack
page read and write
clean
103E000
stack
page read and write
clean
552E000
stack
page read and write
clean
2A75000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
F70000
stack
page read and write
clean
35288F8000
stack
page read and write
clean
CE5000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
1B9D35F0000
unkown image
page readonly
clean
3DD1000
unkown
page read and write
clean
CE5000
stack
page read and write
clean
D31000
stack
page read and write
clean
50D0000
unkown image
page readonly
clean
2A75000
unkown
page read and write
clean
5ED0000
unkown
page read and write
clean
1F5AAC59000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7E0000
unkown
page read and write
clean
1F5AABF0000
heap default
page read and write
clean
7FF579177000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
50C6000
unkown
page read and write
clean
5D70000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
7FF5BB916000
unkown image
page readonly
clean
7FF5359C0000
unkown image
page readonly
clean
29783308000
unkown
page read and write
clean
F70000
stack
page read and write
clean
1B9D3671000
unkown
page read and write
clean
CE5000
stack
page read and write
clean
5E40000
unkown
page read and write
clean
7FF55AA59000
unkown image
page readonly
clean
5590000
unkown
page read and write
clean
540D000
unkown
page read and write
clean
29783313000
unkown
page read and write
clean
2A75000
unkown
page read and write
clean
1B9D3F6F000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D47000
unkown
page read and write
clean
9BB000
unkown
page read and write
clean
670000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
CE5000
stack
page read and write
clean
D30000
stack
page read and write
clean
CD0000
stack
page read and write
clean
F71000
stack
page read and write
clean
CD1000
stack
page read and write
clean
CE0000
stack
page read and write
clean
D62000
unkown
page read and write
clean
E30000
unkown
page read and write
clean
7FF53556C000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
FA0000
stack
page read and write
clean
7DF543860000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
5DA0000
unkown
page read and write
clean
1B9D35B0000
unkown image
page readonly
clean
7FF578FB1000
unkown image
page readonly
clean
7FF523DC3000
unkown image
page readonly
clean
CE5000
stack
page read and write
clean
5D5A000
unkown
page read and write
clean
50D0000
unkown
page read and write
clean
9B8000
unkown
page read and write
clean
F70000
stack
page read and write
clean
71A000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
55E1000
unkown
page read and write
clean
D62000
unkown
page read and write
clean
6E8000
unkown image
page readonly
clean
2E6B000
unkown
page read and write
clean
7DF484D30000
unkown image
page readonly
clean
1B9D4400000
unkown
page read and write
clean
1B9D368C000
unkown
page read and write
clean
D30000
stack
page read and write
clean
614E000
stack
page read and write
clean
7FD72000
unkown image
page readonly
clean
7F842000
unkown image
page readonly
clean
50B5000
unkown
page read and write
clean
7FBC2000
unkown image
page readonly
clean
7F832000
unkown image
page readonly
clean
7FA60000
unkown
page execute and read and write
clean
55B0000
unkown
page read and write
clean
50B0000
unkown
page read and write
clean
53C2000
heap private
page read and write
clean
7FBC0000
unkown image
page readonly
clean
4FE1000
unkown
page read and write
clean
D40000
stack
page read and write
clean
B80000
unkown
page read and write
clean
1B9D369E000
unkown
page read and write
clean
7FF5BB923000
unkown image
page readonly
clean
119B000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
111E000
stack
page read and write
clean
1F7DF35E000
unkown
page read and write
clean
7FF535AE7000
unkown image
page readonly
clean
7DF5687C0000
unkown image
page readonly
clean
5D63000
unkown
page read and write
clean
1B9D3713000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
EB0000
heap private
page read and write
clean
17B0F7B3000
unkown
page read and write
clean
7FF5357C4000
unkown image
page readonly
clean
960000
heap default
page read and write
clean
5E50000
unkown
page read and write
clean
17B0F7A6000
unkown
page read and write
clean
7FF55AA87000
unkown image
page readonly
clean
7DF531B00000
unkown image
page readonly
clean
3A0000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
4C1C000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
5E52000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
CE0000
stack
page read and write
clean
F70000
stack
page read and write
clean
2978323C000
unkown
page read and write
clean
600E000
stack
page read and write
clean
2978325C000
unkown
page read and write
clean
2B00000
unkown
page read and write
clean
1B9D3F00000
unkown
page read and write
clean
55E0000
unkown
page read and write
clean
5D70000
unkown
page read and write
clean
1B9D3F89000
unkown
page read and write
clean
D30000
stack
page read and write
clean
5E40000
unkown
page read and write
clean
5DC0000
unkown
page read and write
clean
7FF578FD0000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
50C0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
352827E000
stack
page read and write
clean
4234A77000
stack
page read and write
clean
7FF579153000
unkown image
page readonly
clean
7FF535B67000
unkown image
page readonly
clean
50B0000
unkown
page read and write
clean
1F7E0090000
unkown
page read and write
clean
5130000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
1B9D3F75000
unkown
page read and write
clean
DAA000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7F830000
unkown image
page readonly
clean
EBA000
heap default
page read and write
clean
5F0000
unkown
page read and write
clean
7FF55AA7E000
unkown image
page readonly
clean
F80000
stack
page read and write
clean
F7E000
stack
page read and write
clean
CD1000
stack
page read and write
clean
CD0000
stack
page read and write
clean
7DF543852000
unkown image
page readonly
clean
7DF5687C2000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
7FF5358FB000
unkown image
page readonly
clean
50B5000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D30000
stack
page read and write
clean
55E0000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
297836E0000
unkown image
page readonly
clean
9AF000
unkown
page read and write
clean
5D11000
unkown
page read and write
clean
D9D000
unkown
page execute and read and write
clean
CE1000
stack
page read and write
clean
DB7000
unkown
page execute and read and write
clean
D6C000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
D00000
stack
page read and write
clean
2A9E000
stack
page read and write
clean
D30000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
2AD0000
unkown
page read and write
clean
940000
unkown image
page readonly
clean
B60000
unkown image
page readonly
clean
54F0000
unkown
page read and write
clean
E94000
unkown
page read and write
clean
1F5AAD00000
unkown
page read and write
clean
1B9D3F6A000
unkown
page read and write
clean
DF1000
heap default
page read and write
clean
50B5000
unkown
page read and write
clean
55B0000
unkown
page execute and read and write
clean
F70000
stack
page read and write
clean
A00000
unkown image
page readonly
clean
D20000
stack
page execute and read and write
clean
CD0000
stack
page read and write
clean
55D0000
unkown
page read and write
clean
7FF5359AC000
unkown image
page readonly
clean
DE6000
heap default
page read and write
clean
55E0000
unkown
page read and write
clean
E70000
unkown
page read and write
clean
7FF535875000
unkown image
page readonly
clean
7FF5BB91F000
unkown image
page readonly
clean
1B9D3FAF000
unkown
page read and write
clean
D31000
stack
page read and write
clean
7FBD2000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
7FF5359A5000
unkown image
page readonly
clean
297831F0000
heap default
page read and write
clean
2978325F000
unkown
page read and write
clean
7FF55A91D000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
CD1000
stack
page read and write
clean
1F5AAC29000
unkown
page read and write
clean
1B9D3FA1000
unkown
page read and write
clean
D01000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
11B0000
unkown
page read and write
clean
7FBC0000
unkown image
page readonly
clean
5114000
unkown
page read and write
clean
7FF535557000
unkown image
page readonly
clean
1B9D3FB3000
unkown
page read and write
clean
7FF535A9F000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
CD1000
stack
page read and write
clean
9C7000
unkown
page read and write
clean
55AE000
stack
page read and write
clean
BE0000
unkown image
page readonly
clean
7FBD0000
unkown image
page readonly
clean
7F842000
unkown image
page readonly
clean
2E44000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
CF0000
stack
page read and write
clean
55E0000
unkown
page read and write
clean
7FF5BB98D000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
D00000
unkown
page read and write
clean
297834D0000
unkown image
page readonly
clean
1F5AAC4F000
unkown
page read and write
clean
D31000
stack
page read and write
clean
1B9D4402000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7FF579123000
unkown image
page readonly
clean
D62000
unkown
page read and write
clean
50D0000
unkown
page read and write
clean
3A0000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
CE1000
stack
page read and write
clean
D10000
stack
page read and write
clean
1F7DF140000
unkown image
page read and write
clean
7FAC0000
unkown image
page readonly
clean
5E50000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
7F840000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
50B5000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
1B9D3F74000
unkown
page read and write
clean
7DF531B20000
unkown image
page readonly
clean
2CE1000
unkown
page read and write
clean
35287F7000
stack
page read and write
clean
7FF5BB208000
unkown image
page readonly
clean
CF0000
stack
page read and write
clean
7FF5791D9000
unkown image
page readonly
clean
1B9D3C50000
unkown image
page readonly
clean
E70000
unkown
page read and write
clean
54F0000
unkown
page read and write
clean
50B0000
unkown
page read and write
clean
1F5AAB80000
unkown image
page read and write
clean
2E42000
unkown
page read and write
clean
7DF5C9680000
unkown image
page readonly
clean
5E50000
unkown
page read and write
clean
297831A0000
unkown image
page readonly
clean
7FF535B6A000
unkown image
page readonly
clean
B60000
unkown image
page readonly
clean
119E000
stack
page read and write
clean
4E50000
heap private
page execute and read and write
clean
11A7000
unkown
page read and write
clean
297831A0000
unkown image
page readonly
clean
1B9D36E9000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
29783255000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
1B9D3F83000
unkown
page read and write
clean
1B9D3580000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
297831D0000
unkown image
page readonly
clean
5120000
unkown
page read and write
clean
17B0F796000
heap default
page read and write
clean
D4A000
unkown
page read and write
clean
7FBD0000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
7FF535AA1000
unkown image
page readonly
clean
D83000
unkown
page read and write
clean
5D55000
unkown
page read and write
clean
17B0F700000
unkown image
page readonly
clean
7F850000
unkown image
page readonly
clean
5CF7000
unkown
page read and write
clean
1B9D3D50000
unkown image
page write copy
clean
5190000
unkown
page read and write
clean
D30000
stack
page read and write
clean
CD1000
stack
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
55E6000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
1F5AAB90000
heap private
page read and write
clean
CE1000
stack
page read and write
clean
CE0000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
FB0000
stack
page read and write
clean
2B1E000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
7FF5791D2000
unkown image
page readonly
clean
4FD0000
unkown
page read and write
clean
54F0000
unkown
page read and write
clean
1F5AAC4C000
unkown
page read and write
clean
4FA000
unkown image
page readonly
clean
A00000
unkown image
page readonly
clean
D31000
stack
page read and write
clean
D30000
stack
page read and write
clean
7DF586E72000
unkown image
page readonly
clean
7DF531B10000
unkown image
page readonly
clean
D31000
stack
page read and write
clean
1B9D3DD0000
unkown image
page read and write
clean
7FF535AFD000
unkown image
page readonly
clean
F90000
stack
page read and write
clean
7F850000
unkown image
page readonly
clean
50B5000
unkown
page read and write
clean
7F830000
unkown image
page readonly
clean
7FF535B10000
unkown image
page readonly
clean
11C1000
unkown
page read and write
clean
7FF5BB98A000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
1B9D3FD2000
unkown
page read and write
clean
1B9D3655000
unkown
page read and write
clean
5E9D000
stack
page read and write
clean
1B9D3F7D000
unkown
page read and write
clean
4FE0000
unkown
page read and write
clean
3528A7F000
stack
page read and write
clean
CE0000
stack
page read and write
clean
DB4000
unkown
page read and write
clean
4234D7F000
stack
page read and write
clean
55E0000
unkown
page read and write
clean
55A0000
unkown
page execute and read and write
clean
D30000
stack
page read and write
clean
D51000
unkown
page read and write
clean
BC0000
unkown
page read and write
clean
3AE1000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D53000
unkown
page read and write
clean
7FF5359FF000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
1B9D36A6000
unkown
page read and write
clean
11F3000
unkown
page read and write
clean
7FF55AACD000
unkown image
page readonly
clean
7FBC0000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
7FF5359A1000
unkown image
page readonly
clean
1194000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
1B9D3F8E000
unkown
page read and write
clean
CA0000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
2524BBA000
unkown
page read and write
clean
1F7DF410000
unkown image
page readonly
clean
7FF53527B000
unkown image
page readonly
clean
17B0F780000
heap default
page read and write
clean
CE0000
stack
page read and write
clean
5E40000
unkown
page read and write
clean
7FF535976000
unkown image
page readonly
clean
7FF55A1E1000
unkown image
page readonly
clean
1B9D3F80000
unkown
page read and write
clean
7FF5359BD000
unkown image
page readonly
clean
5E10000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
7FF535BF0000
unkown image
page readonly
clean
FA0000
unkown image
page readonly
clean
D31000
stack
page read and write
clean
7FF579120000
unkown image
page readonly
clean
D55000
unkown
page read and write
clean
9C4000
unkown
page read and write
clean
513E000
stack
page read and write
clean
D4C000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
29783300000
unkown
page read and write
clean
1F5AAC54000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
6880000
heap private
page read and write
clean
7FF535B03000
unkown image
page readonly
clean
2DC0000
heap private
page execute and read and write
clean
2810000
heap private
page execute and read and write
clean
7FF523E95000
unkown image
page readonly
clean
CD1000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
D93000
unkown
page read and write
clean
7FF5BB168000
unkown image
page readonly
clean
628D000
stack
page read and write
clean
5E30000
unkown
page read and write
clean
7FF523E79000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
7FF55AAC7000
unkown image
page readonly
clean
5D8D000
unkown
page read and write
clean
1F7DF4F0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D86000
unkown
page read and write
clean
1230000
unkown image
page readonly
clean
5D6C000
unkown
page read and write
clean
CBA000
unkown
page execute and read and write
clean
5E30000
unkown
page read and write
clean
D30000
stack
page read and write
clean
D30000
stack
page read and write
clean
1F5AAD02000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
5E40000
unkown
page read and write
clean
7FF5356D7000
unkown image
page readonly
clean
5EA0000
unkown
page read and write
clean
5580000
unkown
page read and write
clean
58C000
unkown
page read and write
clean
7FF579085000
unkown image
page readonly
clean
D4A000
unkown
page read and write
clean
7FF535ACE000
unkown image
page readonly
clean
11B5000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
D6B000
unkown
page read and write
clean
54D0000
unkown
page execute and read and write
clean
1B9D3F7A000
unkown
page read and write
clean
4F60000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
E4E000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
7FF535A45000
unkown image
page readonly
clean
7FF5BBA11000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
7F5E2000
unkown image
page readonly
clean
7FF579127000
unkown image
page readonly
clean
7DF5687C0000
unkown image
page readonly
clean
50B0000
unkown image
page read and write
clean
5ED1000
unkown
page read and write
clean
5DF0000
unkown
page read and write
clean
CF0000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
29783259000
unkown
page read and write
clean
1B9D3F85000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
D30000
stack
page read and write
clean
D5D000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7FF55AA5D000
unkown image
page readonly
clean
5D60000
unkown
page read and write
clean
1B9D3654000
unkown
page read and write
clean
D30000
stack
page read and write
clean
BF5000
heap default
page read and write
clean
2A70000
unkown
page read and write
clean
D3F000
unkown
page read and write
clean
2AA5000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
CBD000
unkown
page execute and read and write
clean
CE0000
stack
page read and write
clean
CE2000
stack
page read and write
clean
7FF578891000
unkown image
page readonly
clean
55E0000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
7FD10000
unkown image
page readonly
clean
D47000
unkown
page read and write
clean
352837B000
stack
page read and write
clean
710000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
1B9D3F89000
unkown
page read and write
clean
7FBC2000
unkown image
page readonly
clean
B60000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
7FF5A7921000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
17B0F7B3000
unkown
page read and write
clean
7FF523E72000
unkown image
page readonly
clean
1190000
unkown
page read and write
clean
D8D000
unkown
page execute and read and write
clean
7FF5BB1BD000
unkown image
page readonly
clean
DCA000
heap default
page read and write
clean
7FF579109000
unkown image
page readonly
clean
7FCF0000
unkown image
page readonly
clean
CF0000
stack
page read and write
clean
5EA0000
unkown
page read and write
clean
50F0000
heap private
page read and write
clean
2BC0000
unkown
page read and write
clean
7FCF0000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
CE0000
stack
page read and write
clean
7FF5BB1D6000
unkown image
page readonly
clean
4D70000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
7FF523DC7000
unkown image
page readonly
clean
E8D000
unkown
page execute and read and write
clean
1400000
unkown image
page readonly
clean
CE1000
stack
page read and write
clean
1B9D3F7D000
unkown
page read and write
clean
1B9D3F80000
unkown
page read and write
clean
10BB000
unkown
page execute and read and write
clean
7DF5687D0000
unkown image
page readonly
clean
D31000
stack
page read and write
clean
D77000
heap default
page read and write
clean
1F5AAC90000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
7FF523EA1000
unkown image
page readonly
clean
4234C7E000
stack
page read and write
clean
50B0000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
1B9D3FAC000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
5D69000
unkown
page read and write
clean
D01000
stack
page read and write
clean
7DF531B10000
unkown image
page readonly
clean
11D0000
unkown
page read and write
clean
1B9D3F0F000
unkown
page read and write
clean
B60000
unkown image
page readonly
clean
1B9D3F6F000
unkown
page read and write
clean
7FF535B17000
unkown image
page readonly
clean
D58000
unkown
page read and write
clean
1F7DF980000
unkown image
page readonly
clean
2AF0000
unkown
page read and write
clean
D30000
stack
page read and write
clean
C4A417E000
stack
page read and write
clean
7FF523DF3000
unkown image
page readonly
clean
7FF53568B000
unkown image
page readonly
clean
7FBD0000
unkown image
page readonly
clean
5CB0000
unkown
page read and write
clean
1B9D3658000
unkown
page read and write
clean
7FBE0000
unkown image
page readonly
clean
1F7E00B0000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
7F5E0000
unkown image
page readonly
clean
1080000
unkown
page execute and read and write
clean
AE4000
heap default
page read and write
clean
4FA000
unkown image
page readonly
clean
8CA000
unkown image
page readonly
clean
7FF5BB827000
unkown image
page readonly
clean
5DD0000
unkown
page read and write
clean
7F850000
unkown image
page readonly
clean
7FF535757000
unkown image
page readonly
clean
D5E000
unkown
page read and write
clean
1B9D3F8D000
unkown
page read and write
clean
1B9D36EA000
unkown
page read and write
clean
3B21000
unkown
page read and write
clean
77B000
unkown
page read and write
clean
5D80000
unkown
page read and write
clean
5580000
unkown
page read and write
clean
ED0000
stack
page read and write
clean
5DBD000
unkown
page read and write
clean
7FF55AACA000
unkown image
page readonly
clean
1480000
unkown image
page readonly
clean
B70000
unkown image
page readonly
clean
29783A02000
unkown
page read and write
clean
5241000
unkown
page read and write
clean
7FF535BF1000
unkown image
page readonly
clean
17B0FA65000
heap private
page read and write
clean
D21000
stack
page read and write
clean
CE5000
stack
page read and write
clean
F70000
stack
page read and write
clean
7FF55A95F000
unkown image
page readonly
clean
7FF5791F1000
unkown image
page readonly
clean
50C0000
heap private
page read and write
clean
7FF535A71000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
CE0000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
D5B000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
D30000
stack
page read and write
clean
1F5AABD0000
unkown image
page readonly
clean
7FF55AB3A000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
B70000
unkown image
page readonly
clean
2AB0000
unkown
page read and write
clean
1F5AAD08000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
1B9D3F0D000
unkown
page read and write
clean
517E000
stack
page read and write
clean
1B9D3FA1000
unkown
page read and write
clean
D7D000
unkown
page read and write
clean
55E0000
unkown
page read and write
clean
D62000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
5D39000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
EE3F9DD000
stack
page read and write
clean
5D8F000
unkown
page read and write
clean
7FF5359A9000
unkown image
page readonly
clean
5DE0000
unkown
page read and write
clean
1B9D3F7B000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
5CAE000
stack
page read and write
clean
C9D000
unkown
page execute and read and write
clean
CE1000
stack
page read and write
clean
7F5D2000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
50B5000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
7FF5358C2000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
53C8000
heap private
page read and write
clean
1B9D3F85000
unkown
page read and write
clean
D66000
unkown
page read and write
clean
7FF523DB3000
unkown image
page readonly
clean
7FF55AA63000
unkown image
page readonly
clean
F70000
stack
page read and write
clean
1F7E0070000
unkown image
page read and write
clean
700000
unkown image
page readonly
clean
5EC3000
unkown
page read and write
clean
D00000
stack
page read and write
clean
D1F000
heap default
page read and write
clean
7DF543870000
unkown image
page readonly
clean
D30000
stack
page read and write
clean
2B00000
unkown
page read and write
clean
D30000
stack
page read and write
clean
5DE0000
unkown
page read and write
clean
D54000
unkown
page read and write
clean
CE5000
stack
page read and write
clean
CE0000
stack
page read and write
clean
7DF5C9680000
unkown image
page readonly
clean
2AE0000
unkown
page read and write
clean
CD7000
unkown
page execute and read and write
clean
2A75000
unkown
page read and write
clean
2AC1000
unkown
page read and write
clean
7FBC2000
unkown image
page readonly
clean
27E0000
unkown
page read and write
clean
1F7DF180000
unkown image
page readonly
clean
7FD90000
unkown image
page readonly
clean
DAA000
unkown
page execute and read and write
clean
CF0000
stack
page read and write
clean
5B71000
unkown
page read and write
clean
1B9D3F8D000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
10B0000
unkown image
page readonly
clean
EE3FD7F000
stack
page read and write
clean
7FD90000
unkown image
page readonly
clean
CB0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
2A77000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
7FF5790F7000
unkown image
page readonly
clean
7FF5BB95B000
unkown image
page readonly
clean
50B6000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
D00000
stack
page read and write
clean
F70000
stack
page read and write
clean
D30000
stack
page read and write
clean
5580000
unkown
page read and write
clean
1F5AB0D0000
unkown image
page readonly
clean
7FF535BEA000
unkown image
page readonly
clean
536E000
stack
page read and write
clean
CD1000
stack
page read and write
clean
2A70000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
7FF5BB7AA000
unkown image
page readonly
clean
D83000
unkown
page read and write
clean
EE3F8DC000
unkown
page read and write
clean
7FF57900F000
unkown image
page readonly
clean
5590000
unkown
page read and write
clean
E90000
unkown
page execute and read and write
clean
27D3000
unkown
page read and write
clean
1B9D3F9A000
unkown
page read and write
clean
7DF466680000
unkown image
page readonly
clean
7DF5C9690000
unkown image
page readonly
clean
11D5000
unkown
page read and write
clean
D00000
stack
page read and write
clean
7FBD2000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
2978328E000
unkown
page read and write
clean
5D5E000
unkown
page read and write
clean
D51000
unkown
page read and write
clean
2CDE000
stack
page read and write
clean
5DA0000
unkown
page read and write
clean
723000
unkown
page read and write
clean
D00000
stack
page read and write
clean
1F5AABA0000
unkown image
page readonly
clean
7FD80000
unkown image
page readonly
clean
CD1000
stack
page read and write
clean
1B9D3F16000
unkown
page read and write
clean
7FF57917A000
unkown image
page readonly
clean
1B9D36C6000
unkown
page read and write
clean
7FBD2000
unkown image
page readonly
clean
F70000
stack
page read and write
clean
7FF5357C7000
unkown image
page readonly
clean
F70000
stack
page read and write
clean
5CE0000
unkown image
page read and write
clean
2A75000
unkown
page read and write
clean
7DF531B02000
unkown image
page readonly
clean
5580000
unkown
page read and write
clean
D22000
stack
page read and write
clean
6870000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
5590000
unkown
page read and write
clean
7DF543850000
unkown image
page readonly
clean
1600000
unkown image
page readonly
clean
B70000
unkown image
page readonly
clean
423497B000
stack
page read and write
clean
2A94000
unkown
page read and write
clean
CD1000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
5D90000
unkown
page read and write
clean
CF3000
stack
page read and write
clean
D00000
stack
page read and write
clean
1F7DF565000
heap private
page read and write
clean
2A78000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
5A0000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
CD1000
stack
page read and write
clean
1B9D3FA1000
unkown
page read and write
clean
D30000
stack
page read and write
clean
680F000
stack
page read and write
clean
D31000
stack
page read and write
clean
D30000
stack
page read and write
clean
17B0FC70000
unkown image
page readonly
clean
CE0000
stack
page read and write
clean
CE5000
stack
page read and write
clean
7F830000
unkown image
page readonly
clean
55C0000
unkown
page read and write
clean
CE1000
stack
page read and write
clean
1B9D364F000
unkown
page read and write
clean
E83000
unkown
page execute and read and write
clean
7F5F0000
unkown image
page readonly
clean
7FBE0000
unkown image
page readonly
clean
556E000
stack
page read and write
clean
5D90000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
8E7000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
D51000
unkown
page read and write
clean
7FF5BB96E000
unkown image
page readonly
clean
1B9D38D0000
unkown image
page readonly
clean
1F7DFE50000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
1530000
unkown image
page readonly
clean
FA0000
stack
page read and write
clean
D30000
stack
page read and write
clean
1B9D3FA2000
unkown
page read and write
clean
7F832000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
7FF5BBA01000
unkown image
page readonly
clean
DB4000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
EE3FEFF000
stack
page read and write
clean
7F0000
unkown image
page readonly
clean
619E000
stack
page read and write
clean
7FF535B27000
unkown image
page readonly
clean
7F832000
unkown image
page readonly
clean
7F5E0000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
EB0000
heap default
page read and write
clean
7FF53594F000
unkown image
page readonly
clean
C4A40FD000
stack
page read and write
clean
1B9D364D000
unkown
page read and write
clean
FA5000
stack
page read and write
clean
5E00000
unkown
page read and write
clean
5110000
unkown
page read and write
clean
1B9D3F9E000
unkown
page read and write
clean
2E79000
unkown
page read and write
clean
54F0000
unkown
page read and write
clean
FE0000
unkown
page read and write
clean
D78000
unkown
page read and write
clean
C4A457E000
stack
page read and write
clean
1170000
heap private
page read and write
clean
7FF535B3B000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
CD0000
stack
page read and write
clean
B58000
unkown
page read and write
clean
7FF5BB926000
unkown image
page readonly
clean
1B9D3F4C000
unkown
page read and write
clean
E60000
heap private
page read and write
clean
3A0000
unkown image
page readonly
clean
7DF543862000
unkown image
page readonly
clean
7FD10000
unkown image
page readonly
clean
50B5000
unkown
page read and write
clean
D50000
unkown image
page read and write
clean
5D60000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
D30000
stack
page read and write
clean
5FD0000
stack
page read and write
clean
E3C000
heap default
page read and write
clean
5FD0000
stack
page read and write
clean
BF1000
unkown
page read and write
clean
55C0000
unkown
page read and write
clean
1F7DF280000
unkown
page read and write
clean
29783180000
unkown image
page read and write
clean
1B9D3613000
unkown
page read and write
clean
17B0F791000
unkown
page read and write
clean
7F842000
unkown image
page readonly
clean
50B0000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
CD0000
stack
page read and write
clean
4F70000
unkown
page read and write
clean
50B5000
unkown
page read and write
clean
1B9D3F18000
unkown
page read and write
clean
50B8000
unkown
page read and write
clean
1B9D3F90000
unkown
page read and write
clean
2D80000
unkown
page read and write
clean
C93000
unkown
page execute and read and write
clean
672000
unkown image
page readonly
clean
50B0000
unkown
page read and write
clean
1B9D3F90000
unkown
page read and write
clean
D89000
unkown
page read and write
clean
CE0000
stack
page read and write
clean
1B9D3F7D000
unkown
page read and write
clean
7FF579137000
unkown image
page readonly
clean
2A70000
unkown
page read and write
clean
5E30000
unkown
page read and write
clean
D30000
stack
page read and write
clean
CD0000
stack
page read and write
clean
7FF55AB29000
unkown image
page readonly
clean
64CD000
stack
page read and write
clean
FA0000
stack
page read and write
clean
CD0000
stack
page read and write
clean
B85000
heap default
page read and write
clean
2A70000
unkown
page read and write
clean
5FCD000
stack
page read and write
clean
2A75000
unkown
page read and write
clean
7FF55AB34000
unkown image
page readonly
clean
5E30000
unkown
page read and write
clean
D70000
unkown
page read and write
clean
710000
unkown image
page readonly
clean
CAE000
stack
page read and write
clean
There are 2078 hidden memdumps, click here to show them.