IOC Report

loading gif

Files

File Path
Type
Category
Malicious
CO DRAFT Al Zaytounah project.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\CO DRAFT Al Zaytounah project.exe.log
ASCII text, with CRLF line terminators
modified
malicious
C:\Users\user\AppData\Local\Temp\tmp79A6.tmp
XML 1.0 document, ASCII text
dropped
malicious
C:\Users\user\AppData\Roaming\eyjBzJU.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
data
dropped
clean
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_i2vykftg.4p5.psm1
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yroqhmk3.0un.ps1
very short file (no magic)
dropped
clean
C:\Users\user\AppData\Roaming\eyjBzJU.exe:Zone.Identifier
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\zbmzjx2g.c2f\Chrome\Default\Cookies
SQLite 3.x database, last written using SQLite version 3032001
dropped
clean
C:\Users\user\Documents\20211202\PowerShell_transcript.980108.3s9YWMHG.20211202163922.txt
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\CO DRAFT Al Zaytounah project.exe
"C:\Users\user\Desktop\CO DRAFT Al Zaytounah project.exe"
malicious
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\user\AppData\Roaming\eyjBzJU.exe
malicious
C:\Windows\SysWOW64\schtasks.exe
C:\Windows\System32\schtasks.exe" /Create /TN "Updates\eyjBzJU" /XML "C:\Users\user\AppData\Local\Temp\tmp79A6.tmp
malicious
C:\Users\user\Desktop\CO DRAFT Al Zaytounah project.exe
C:\Users\user\Desktop\CO DRAFT Al Zaytounah project.exe
malicious
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean

URLs

Name
IP
Malicious
https://KXS9NVa7QJoby.org
unknown
clean
http://127.0.0.1:HTTP/1.1
unknown
clean
https://api.ipify.org%GETMozilla/5.0
unknown
clean
http://CjhhBN.com
unknown
clean
http://DynDns.comDynDNS
unknown
clean
http://server126.web-hosting.com
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
unknown
clean
https://api.ipify.org%$
unknown
clean
https://KXS9NVa7QJoby.org$
unknown
clean
There are 1 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
server126.web-hosting.com
198.54.126.165
clean

IPs

IP
Domain
Country
Malicious
198.54.126.165
server126.web-hosting.com
United States
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
3370000
unkown
page read and write
malicious
3271000
unkown
page read and write
malicious
402000
unkown
page execute and read and write
malicious
2B21000
unkown
page read and write
malicious
402000
unkown
page execute and read and write
malicious
402000
unkown
page execute and read and write
malicious
402000
unkown
page execute and read and write
malicious
402000
unkown
page execute and read and write
malicious
4279000
unkown
page read and write
malicious
C60000
stack
page read and write
clean
55F0000
unkown
page read and write
clean
778000
unkown image
page readonly
clean
55F0000
stack
page read and write
clean
5EB0000
stack
page read and write
clean
DF0000
stack
page read and write
clean
16F1000
unkown
page read and write
clean
29976802000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
66A0000
unkown
page read and write
clean
DF1000
stack
page read and write
clean
7FF5E9DF0000
unkown image
page readonly
clean
6A51000
unkown
page read and write
clean
5B30000
unkown
page read and write
clean
5910000
unkown
page read and write
clean
7FF50812A000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
29975A59000
unkown
page read and write
clean
CC0000
stack
page read and write
clean
A82B7FC000
stack
page read and write
clean
55F0000
stack
page read and write
clean
7DF51D1C0000
unkown image
page readonly
clean
7FF5AC371000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
593C000
unkown
page read and write
clean
627D000
unkown
page read and write
clean
A82B6FF000
stack
page read and write
clean
288D000
unkown image
page readonly
clean
5B90000
heap private
page read and write
clean
C60000
stack
page read and write
clean
5D35000
unkown
page read and write
clean
6A44000
unkown
page read and write
clean
C51000
stack
page read and write
clean
7FF51EC68000
unkown image
page readonly
clean
55F5000
stack
page read and write
clean
199A8E4B000
unkown
page read and write
clean
7FF51EB6C000
unkown image
page readonly
clean
5B60000
unkown
page read and write
clean
1A8C000
unkown
page read and write
clean
D845E7A000
stack
page read and write
clean
C60000
stack
page read and write
clean
15EEA913000
unkown
page read and write
clean
51D0000
unkown
page read and write
clean
21A6A702000
unkown
page read and write
clean
F07000
unkown
page read and write
clean
15EEA900000
unkown
page read and write
clean
D00000
stack
page read and write
clean
702000
unkown image
page readonly
clean
299763D9000
unkown
page read and write
clean
7FF5AC391000
unkown image
page readonly
clean
29C5000
unkown
page read and write
clean
6620000
unkown
page read and write
clean
5B60000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5630000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
2997638A000
unkown
page read and write
clean
29976398000
unkown
page read and write
clean
D20000
stack
page read and write
clean
C61000
stack
page read and write
clean
C65000
stack
page read and write
clean
7FF508094000
unkown image
page readonly
clean
21A6A64C000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
831000
unkown
page read and write
clean
7FF54C58D000
unkown image
page readonly
clean
2997638D000
unkown
page read and write
clean
18F5000
unkown
page read and write
clean
C60000
stack
page read and write
clean
C50000
stack
page read and write
clean
29976802000
unkown
page read and write
clean
5570000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
7FF54C501000
unkown image
page readonly
clean
702000
unkown image
page readonly
clean
5A98000
heap private
page read and write
clean
29975C00000
unkown image
page readonly
clean
C51000
stack
page read and write
clean
C60000
stack
page read and write
clean
C61000
stack
page read and write
clean
CB0000
stack
page read and write
clean
7E0000
unkown image
page readonly
clean
29C5000
unkown
page read and write
clean
20484740000
heap private
page read and write
clean
7E0000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
2E80000
unkown image
page readonly
clean
29D0000
unkown
page read and write
clean
6680000
unkown
page read and write
clean
7DF533D70000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
CB1000
stack
page read and write
clean
7FF5AC4AA000
unkown image
page readonly
clean
7DF533D82000
unkown image
page readonly
clean
29976390000
unkown
page read and write
clean
199A9210000
unkown image
page readonly
clean
55D0000
stack
page read and write
clean
1860000
unkown
page execute and read and write
clean
29975A4D000
unkown
page read and write
clean
7FF54C72A000
unkown image
page readonly
clean
5180000
unkown
page read and write
clean
2997638B000
unkown
page read and write
clean
28CF000
unkown image
page readonly
clean
E46000
heap default
page read and write
clean
51C0000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
3050000
heap default
page read and write
clean
29975A3C000
unkown
page read and write
clean
29975F80000
unkown image
page readonly
clean
10A1000
unkown
page read and write
clean
12F7000
unkown
page read and write
clean
7DF5C1632000
unkown image
page readonly
clean
21A6A700000
unkown
page read and write
clean
2997637E000
unkown
page read and write
clean
29EA000
unkown
page read and write
clean
7F230000
unkown image
page readonly
clean
5190000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
EC0000
unkown image
page readonly
clean
5A98000
heap private
page read and write
clean
5060000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
16D4000
unkown
page read and write
clean
D00000
stack
page read and write
clean
702000
unkown image
page readonly
clean
7DF533D80000
unkown image
page readonly
clean
5070000
unkown
page read and write
clean
642C000
stack
page read and write
clean
29975ABA000
unkown
page read and write
clean
7FF51E32E000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
7F710000
unkown image
page readonly
clean
21A6A5A0000
unkown
page read and write
clean
7FF54C684000
unkown image
page readonly
clean
695E000
stack
page read and write
clean
7DF51D1B2000
unkown image
page readonly
clean
51D0000
unkown
page read and write
clean
15EEA690000
unkown image
page readonly
clean
7DF5617C0000
unkown image
page readonly
clean
714E000
stack
page read and write
clean
6761000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
6A3D000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5610000
unkown
page read and write
clean
7FF5AC526000
unkown image
page readonly
clean
70D0000
unkown
page read and write
clean
7DF533D82000
unkown image
page readonly
clean
D01000
stack
page read and write
clean
7FF5AC51E000
unkown image
page readonly
clean
2950000
heap private
page execute and read and write
clean
29C7000
unkown
page read and write
clean
C61000
stack
page read and write
clean
6A62000
unkown
page read and write
clean
7F180000
unkown image
page readonly
clean
50BE000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
C70000
stack
page read and write
clean
7DF5617C2000
unkown image
page readonly
clean
3080000
heap private
page read and write
clean
29C0000
unkown
page read and write
clean
D10000
stack
page read and write
clean
C61000
stack
page read and write
clean
7F702000
unkown image
page readonly
clean
700000
unkown image
page readonly
clean
299763A0000
unkown
page read and write
clean
6A41000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
1A7D000
unkown
page read and write
clean
2EA9000
unkown
page read and write
clean
7DF41B080000
unkown image
page readonly
clean
3B7D000
unkown
page read and write
clean
3020000
unkown
page read and write
clean
15A0000
unkown image
page readonly
clean
29975860000
unkown image
page read and write
clean
1606000
unkown
page execute and read and write
clean
ED3000
unkown
page read and write
clean
C61000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
7F222000
unkown image
page readonly
clean
C80000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
7F700000
unkown image
page readonly
clean
D16000
stack
page read and write
clean
21A6A613000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7DF533D90000
unkown image
page readonly
clean
C51000
stack
page read and write
clean
5278000
unkown
page read and write
clean
29976080000
unkown image
page write copy
clean
2E80000
unkown image
page readonly
clean
7FF5AC504000
unkown image
page readonly
clean
C50000
stack
page read and write
clean
7FF5080AE000
unkown image
page readonly
clean
2496F7F000
stack
page read and write
clean
7E0000
unkown image
page readonly
clean
EFB000
unkown
page read and write
clean
EFB000
unkown
page read and write
clean
65B0000
unkown image
page read and write
clean
6A78000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
C6A000
stack
page read and write
clean
7DF51D1B2000
unkown image
page readonly
clean
55F4000
stack
page read and write
clean
5941000
unkown
page read and write
clean
7FF51EC2F000
unkown image
page readonly
clean
7FF5AC48F000
unkown image
page readonly
clean
C50000
stack
page read and write
clean
28CA000
unkown image
page readonly
clean
700000
unkown image
page readonly
clean
ED3000
unkown
page read and write
clean
7D0000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
6650000
unkown
page read and write
clean
D00000
stack
page read and write
clean
D00000
stack
page read and write
clean
CA0000
stack
page read and write
clean
C65000
stack
page read and write
clean
4F60000
unkown
page read and write
clean
2963000
unkown image
page readonly
clean
51D0000
unkown
page read and write
clean
7E0000
unkown image
page readonly
clean
6A51000
unkown
page read and write
clean
7FF51EC44000
unkown image
page readonly
clean
7F702000
unkown image
page readonly
clean
20484380000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
2997635A000
unkown
page read and write
clean
7F170000
unkown image
page readonly
clean
7FF51EBFE000
unkown image
page readonly
clean
1890000
heap private
page execute and read and write
clean
7F702000
unkown image
page readonly
clean
5B60000
unkown
page read and write
clean
7FF54C53B000
unkown image
page readonly
clean
7FF50804B000
unkown image
page readonly
clean
7D0000
unkown image
page readonly
clean
7F222000
unkown image
page readonly
clean
55F0000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
C61000
stack
page read and write
clean
5B60000
unkown
page read and write
clean
7FF5AC012000
unkown image
page readonly
clean
5635000
unkown
page read and write
clean
6D9D000
stack
page read and write
clean
55D0000
stack
page execute and read and write
clean
5065000
unkown
page read and write
clean
7D0000
unkown image
page readonly
clean
D02000
stack
page read and write
clean
778000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
15EEA6B0000
heap default
page read and write
clean
299759D0000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
16E3000
unkown
page read and write
clean
7DF5FF1C2000
unkown image
page readonly
clean
6648000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
FD0000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
C51000
stack
page read and write
clean
6A3A000
unkown
page read and write
clean
7FF5AC276000
unkown image
page readonly
clean
778000
unkown image
page readonly
clean
7FF5AC0C5000
unkown image
page readonly
clean
7FF5AC4B5000
unkown image
page readonly
clean
7FF5AC3FD000
unkown image
page readonly
clean
7FF54C491000
unkown image
page readonly
clean
1A80000
unkown
page read and write
clean
C60000
stack
page read and write
clean
2997637C000
unkown
page read and write
clean
C70000
stack
page execute and read and write
clean
5CA0000
unkown
page read and write
clean
5620000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
18E0000
unkown
page read and write
clean
299758A0000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
D10000
stack
page read and write
clean
D10000
stack
page read and write
clean
1600000
unkown
page read and write
clean
7FF54C5A4000
unkown image
page readonly
clean
6B1E000
stack
page read and write
clean
EC0000
unkown image
page readonly
clean
2997638B000
unkown
page read and write
clean
109E000
unkown
page read and write
clean
7F702000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
C50000
stack
page read and write
clean
5610000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
29976385000
unkown
page read and write
clean
16C1000
heap default
page read and write
clean
1AC0000
heap private
page read and write
clean
29976319000
unkown
page read and write
clean
51D0000
unkown
page read and write
clean
E89000
unkown
page read and write
clean
104D000
unkown
page execute and read and write
clean
5B80000
unkown
page read and write
clean
2997638C000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5930000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
7FF5AC49C000
unkown image
page readonly
clean
299763A1000
unkown
page read and write
clean
D00000
stack
page read and write
clean
6C5E000
stack
page read and write
clean
1067000
unkown
page execute and read and write
clean
29976390000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5610000
unkown
page read and write
clean
7FF5ABBE4000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
D10000
stack
page read and write
clean
7FF54C215000
unkown image
page readonly
clean
20484750000
unkown image
page readonly
clean
55E0000
stack
page read and write
clean
2997637B000
unkown
page read and write
clean
E7B000
unkown
page read and write
clean
E7B000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
C61000
stack
page read and write
clean
C61000
stack
page read and write
clean
199A8CD0000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
5EC0000
stack
page read and write
clean
1610000
unkown
page read and write
clean
2A10000
heap private
page read and write
clean
D10000
stack
page read and write
clean
7FF51E977000
unkown image
page readonly
clean
5C3E000
stack
page read and write
clean
16E9000
unkown
page read and write
clean
21A6A580000
unkown image
page readonly
clean
5080000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
7F720000
unkown image
page readonly
clean
C70000
stack
page read and write
clean
29975A88000
unkown
page read and write
clean
778000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
2930000
unkown
page execute and read and write
clean
7FF5AC4DC000
unkown image
page readonly
clean
299760F0000
unkown
page read and write
clean
5A90000
heap private
page read and write
clean
C50000
stack
page read and write
clean
D00000
stack
page read and write
clean
778000
unkown image
page readonly
clean
1612000
unkown
page read and write
clean
21A6A470000
unkown image
page readonly
clean
CB1000
stack
page read and write
clean
D00000
stack
page read and write
clean
C80000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
106B000
unkown
page execute and read and write
clean
556F000
stack
page read and write
clean
299758B0000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
F19000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
2E87000
unkown
page read and write
clean
D0A000
stack
page read and write
clean
C60000
stack
page read and write
clean
C50000
stack
page read and write
clean
6BE0000
heap private
page read and write
clean
29975A52000
unkown
page read and write
clean
299763CD000
unkown
page read and write
clean
2997639F000
unkown
page read and write
clean
29975AC1000
unkown
page read and write
clean
159E000
stack
page read and write
clean
E51000
heap default
page read and write
clean
7FF508045000
unkown image
page readonly
clean
21A6A480000
unkown image
page readonly
clean
7F712000
unkown image
page readonly
clean
299758D0000
heap default
page read and write
clean
D10000
stack
page read and write
clean
3198000
heap default
page read and write
clean
5940000
unkown
page read and write
clean
C61000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
7DF533D80000
unkown image
page readonly
clean
16DE000
unkown
page read and write
clean
7DF533D70000
unkown image
page readonly
clean
C70000
stack
page read and write
clean
299763CD000
unkown
page read and write
clean
D10000
stack
page read and write
clean
7FF5EA0A8000
unkown image
page readonly
clean
29DA000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
1A91000
unkown
page read and write
clean
7E0000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
1A6B000
unkown
page read and write
clean
7DF5C1620000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7F182000
unkown image
page readonly
clean
2496D77000
stack
page read and write
clean
6240000
unkown
page read and write
clean
C61000
stack
page read and write
clean
7FF5AC085000
unkown image
page readonly
clean
29976385000
unkown
page read and write
clean
7FF5EA0AE000
unkown image
page readonly
clean
7DF5FF1C0000
unkown image
page readonly
clean
5070000
unkown
page read and write
clean
5B60000
unkown
page read and write
clean
7FF5EA077000
unkown image
page readonly
clean
5A98000
heap private
page read and write
clean
7DF5C1632000
unkown image
page readonly
clean
7FF51EBFA000
unkown image
page readonly
clean
29975AA4000
unkown
page read and write
clean
FE0000
unkown image
page readonly
clean
194C000
stack
page read and write
clean
58E0000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
5910000
unkown
page read and write
clean
15EEA650000
heap private
page read and write
clean
7FF508131000
unkown image
page readonly
clean
6A73000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
29C8000
unkown
page read and write
clean
7FF54C3B7000
unkown image
page readonly
clean
7DF5FF1B0000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
7FF54C4E3000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
7FF51EAFE000
unkown image
page readonly
clean
5960000
unkown
page read and write
clean
2997634C000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
7FF5AC260000
unkown image
page readonly
clean
5060000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
7FF5EA06F000
unkown image
page readonly
clean
55F0000
stack
page read and write
clean
7F220000
unkown image
page readonly
clean
5600000
stack
page read and write
clean
7FF5ABE07000
unkown image
page readonly
clean
7B0000
unkown image
page readonly
clean
55F6000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
199A8CD0000
unkown image
page readonly
clean
7FF5AC49A000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
55F0000
stack
page read and write
clean
29975870000
heap private
page read and write
clean
C60000
stack
page read and write
clean
21A6A67E000
unkown
page read and write
clean
51D0000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
C60000
stack
page read and write
clean
51C0000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5600000
stack
page read and write
clean
C70000
stack
page read and write
clean
F18000
unkown
page read and write
clean
2EC3000
unkown
page read and write
clean
5900000
unkown
page read and write
clean
51C0000
unkown
page execute and read and write
clean
5070000
unkown
page read and write
clean
5B60000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
F60000
unkown image
page read and write
clean
D00000
stack
page read and write
clean
C51000
stack
page read and write
clean
6A47000
unkown
page read and write
clean
55E0000
stack
page read and write
clean
299760F0000
unkown
page read and write
clean
2496E7D000
stack
page read and write
clean
7FF5AC2F1000
unkown image
page readonly
clean
7FF54C62C000
unkown image
page readonly
clean
204844BF000
unkown
page read and write
clean
55BD000
stack
page read and write
clean
7DF5FF1B2000
unkown image
page readonly
clean
7F710000
unkown image
page readonly
clean
2997636A000
unkown
page read and write
clean
29975B08000
unkown
page read and write
clean
5A6CE7B000
unkown
page read and write
clean
55E0000
stack
page read and write
clean
C60000
stack
page read and write
clean
7F700000
unkown image
page readonly
clean
7DF5FF1C0000
unkown image
page readonly
clean
5610000
unkown
page read and write
clean
C60000
stack
page read and write
clean
29976863000
unkown
page read and write
clean
7FF5EA057000
unkown image
page readonly
clean
4F90000
unkown
page read and write
clean
7FF5080B9000
unkown image
page readonly
clean
5D20000
unkown
page read and write
clean
15EEA89B000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5910000
unkown
page read and write
clean
5600000
stack
page read and write
clean
10D7000
heap private
page read and write
clean
7B0000
unkown image
page readonly
clean
C80000
stack
page read and write
clean
5EF0000
stack
page read and write
clean
1460000
unkown image
page readonly
clean
CB4000
stack
page read and write
clean
29F0000
unkown
page read and write
clean
5CDD000
stack
page read and write
clean
5570000
unkown
page read and write
clean
6A62000
unkown
page read and write
clean
D10000
stack
page read and write
clean
7DF5C1630000
unkown image
page readonly
clean
5A6D3FE000
stack
page read and write
clean
D10000
stack
page read and write
clean
15EEA849000
unkown
page read and write
clean
199A9480000
unkown
page read and write
clean
5FC0000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
55F0000
stack
page read and write
clean
C70000
stack
page read and write
clean
D00000
stack
page read and write
clean
F38000
unkown image
page readonly
clean
CB0000
stack
page read and write
clean
2CFE000
unkown
page read and write
clean
7FF51EC6E000
unkown image
page readonly
clean
16E9000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
D00000
stack
page read and write
clean
226277E000
stack
page read and write
clean
4F90000
unkown
page read and write
clean
7FF51EA51000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
D00000
stack
page read and write
clean
A82B3FC000
stack
page read and write
clean
15EEA813000
unkown
page read and write
clean
7DF533D90000
unkown image
page readonly
clean
7FF5E9F21000
unkown image
page readonly
clean
7FF5AC0C7000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
55E0000
stack
page read and write
clean
161B000
unkown
page execute and read and write
clean
7FF5ABDB2000
unkown image
page readonly
clean
2997637B000
unkown
page read and write
clean
702000
unkown image
page readonly
clean
7E0000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
5B60000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
7FF54C521000
unkown image
page readonly
clean
148E000
stack
page read and write
clean
5070000
unkown
page read and write
clean
D845DF9000
stack
page read and write
clean
5186000
unkown
page read and write
clean
C50000
stack
page read and write
clean
F38000
unkown image
page readonly
clean
7F190000
unkown image
page readonly
clean
29976377000
unkown
page read and write
clean
7D0000
unkown image
page readonly
clean
1E50000
unkown image
page readonly
clean
C65000
stack
page read and write
clean
D00000
stack
page read and write
clean
63E0000
unkown
page read and write
clean
7F700000
unkown image
page readonly
clean
109B000
unkown
page read and write
clean
82D000
unkown
page read and write
clean
7FF5AC414000
unkown image
page readonly
clean
199A8E51000
unkown
page read and write
clean
16E1000
unkown
page read and write
clean
C65000
stack
page read and write
clean
2997637B000
unkown
page read and write
clean
C80000
stack
page read and write
clean
7FF51ECEA000
unkown image
page readonly
clean
69DE000
stack
page read and write
clean
7DF5FF1B2000
unkown image
page readonly
clean
51C0000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
C60000
stack
page read and write
clean
7FF508040000
unkown image
page readonly
clean
7FF54C593000
unkown image
page readonly
clean
5065000
unkown
page read and write
clean
C61000
stack
page read and write
clean
5CE0000
unkown
page read and write
clean
55E0000
stack
page read and write
clean
5190000
unkown
page read and write
clean
7FF5E9774000
unkown image
page readonly
clean
7FF5AC4E7000
unkown image
page readonly
clean
D30000
stack
page execute and read and write
clean
55F0000
stack
page read and write
clean
5EAC000
stack
page read and write
clean
55E0000
stack
page read and write
clean
24967FD000
stack
page read and write
clean
702000
unkown image
page readonly
clean
21A6A671000
unkown
page read and write
clean
C61000
stack
page read and write
clean
5060000
unkown
page read and write
clean
5D10000
unkown
page read and write
clean
2997638B000
unkown
page read and write
clean
A82B27E000
stack
page read and write
clean
2997638F000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
5750000
unkown
page read and write
clean
D00000
stack
page read and write
clean
2262BFF000
stack
page read and write
clean
16E6000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
5620000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
D00000
stack
page read and write
clean
C51000
stack
page read and write
clean
C60000
stack
page read and write
clean
C61000
stack
page read and write
clean
C40000
heap default
page read and write
clean
5750000
unkown
page read and write
clean
7F720000
unkown image
page readonly
clean
2EAF000
unkown
page read and write
clean
5B30000
unkown
page read and write
clean
C60000
stack
page read and write
clean
D00000
stack
page read and write
clean
1052000
unkown
page read and write
clean
299760F0000
unkown
page read and write
clean
D845D7F000
stack
page read and write
clean
5950000
unkown
page read and write
clean
7FF5AC47B000
unkown image
page readonly
clean
7FF5EA12A000
unkown image
page readonly
clean
299763A0000
unkown
page read and write
clean
3B49000
unkown
page read and write
clean
6170000
stack
page read and write
clean
632E000
stack
page read and write
clean
D02000
stack
page read and write
clean
C60000
stack
page read and write
clean
5180000
unkown
page read and write
clean
7F702000
unkown image
page readonly
clean
5B30000
unkown
page read and write
clean
204844CF000
unkown
page read and write
clean
D00000
stack
page read and write
clean
299763A6000
unkown
page read and write
clean
7FF50806C000
unkown image
page readonly
clean
4F80000
unkown
page read and write
clean
5750000
unkown
page read and write
clean
5D20000
unkown
page read and write
clean
6A72000
unkown
page read and write
clean
C60000
stack
page read and write
clean
20484950000
unkown image
page readonly
clean
3B21000
unkown
page read and write
clean
5627000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
D00000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
7F702000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
DF0000
stack
page read and write
clean
7F712000
unkown image
page readonly
clean
29976396000
unkown
page read and write
clean
5A40000
unkown
page read and write
clean
D00000
stack
page read and write
clean
199A9390000
unkown image
page readonly
clean
5065000
unkown
page read and write
clean
2E50000
unkown
page read and write
clean
C70000
stack
page read and write
clean
29976382000
unkown
page read and write
clean
CA0000
stack
page read and write
clean
1640000
unkown
page read and write
clean
29976385000
unkown
page read and write
clean
D10000
unkown image
page readonly
clean
C70000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
6A30000
unkown
page read and write
clean
5B70000
unkown
page read and write
clean
199A8E49000
unkown
page read and write
clean
6A35000
unkown
page read and write
clean
7FF5AC4C7000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
29C5000
unkown
page read and write
clean
5CA0000
unkown
page read and write
clean
D845F7D000
stack
page read and write
clean
DF1000
stack
page read and write
clean
C90000
stack
page read and write
clean
5ED0000
stack
page read and write
clean
29976387000
unkown
page read and write
clean
29975AED000
unkown
page read and write
clean
28BF000
unkown image
page readonly
clean
5065000
unkown
page read and write
clean
D00000
stack
page read and write
clean
2EB3000
unkown
page read and write
clean
CC0000
stack
page read and write
clean
226267B000
unkown
page read and write
clean
C60000
stack
page read and write
clean
C73000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
199A8F08000
unkown
page read and write
clean
1A64000
unkown
page read and write
clean
21A6A689000
unkown
page read and write
clean
C64000
stack
page read and write
clean
7F700000
unkown image
page readonly
clean
C51000
stack
page read and write
clean
5600000
stack
page read and write
clean
C60000
stack
page read and write
clean
D00000
stack
page read and write
clean
D00000
stack
page read and write
clean
D11000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
5A30000
unkown
page read and write
clean
5A6D2F7000
stack
page read and write
clean
29976396000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
5620000
unkown
page read and write
clean
2262CFE000
stack
page read and write
clean
5C9E000
stack
page read and write
clean
29975A55000
unkown
page read and write
clean
2BD0000
unkown image
page readonly
clean
5076000
unkown
page read and write
clean
29975B13000
unkown
page read and write
clean
5B80000
unkown
page read and write
clean
5D13000
unkown
page read and write
clean
7FF51EC2C000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
7F070000
unkown image
page readonly
clean
29A0000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
A82BA7C000
stack
page read and write
clean
5B60000
unkown
page read and write
clean
D10000
stack
page read and write
clean
21A6AA00000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
5910000
unkown
page execute and read and write
clean
7DF431C40000
unkown image
page readonly
clean
7FF5AC227000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
55D0000
unkown
page read and write
clean
199A8E4D000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5620000
unkown
page read and write
clean
5AA0000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
4C1D000
stack
page read and write
clean
D01000
stack
page read and write
clean
7F210000
unkown image
page readonly
clean
7FF51EAA3000
unkown image
page readonly
clean
2963000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
30CE000
stack
page read and write
clean
DF0000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
7FF5AC4DF000
unkown image
page readonly
clean
DF0000
stack
page read and write
clean
7DF5FF1C2000
unkown image
page readonly
clean
21A6A450000
unkown image
page readonly
clean
7FF5AC4BB000
unkown image
page readonly
clean
24966FC000
unkown
page read and write
clean
CA0000
stack
page read and write
clean
12E0000
unkown image
page readonly
clean
7FF5E9FA4000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
2E9D000
unkown
page read and write
clean
C65000
stack
page read and write
clean
5630000
unkown
page read and write
clean
15EEA908000
unkown
page read and write
clean
D00000
stack
page read and write
clean
E7B000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
7D0000
unkown image
page readonly
clean
16E9000
unkown
page read and write
clean
61A0000
stack
page read and write
clean
7FF5080A8000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
A82B2FE000
stack
page read and write
clean
2BF0000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
5770000
unkown
page read and write
clean
E10000
unkown image
page read and write
clean
5190000
unkown
page read and write
clean
512E000
stack
page read and write
clean
29C5000
unkown
page read and write
clean
1719000
unkown
page read and write
clean
7F212000
unkown image
page readonly
clean
5610000
unkown
page read and write
clean
D00000
stack
page read and write
clean
700000
unkown image
page readonly
clean
7F222000
unkown image
page readonly
clean
7F720000
unkown image
page readonly
clean
15D0000
unkown
page read and write
clean
7FF5EA131000
unkown image
page readonly
clean
310F000
stack
page read and write
clean
7D0000
unkown image
page readonly
clean
299763A1000
unkown
page read and write
clean
D20000
stack
page read and write
clean
5B30000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7FF5AC518000
unkown image
page readonly
clean
5620000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
D00000
stack
page read and write
clean
622E000
stack
page read and write
clean
1726000
heap default
page read and write
clean
5CE0000
unkown
page read and write
clean
29976382000
unkown
page read and write
clean
5830000
heap private
page read and write
clean
55F0000
stack
page read and write
clean
5060000
unkown
page read and write
clean
2936000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7F210000
unkown image
page readonly
clean
7D0000
unkown image
page readonly
clean
7B0000
unkown image
page readonly
clean
745E000
stack
page read and write
clean
C50000
stack
page read and write
clean
C50000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
6EDE000
stack
page read and write
clean
170B000
unkown
page read and write
clean
7F720000
unkown image
page readonly
clean
6761000
unkown
page read and write
clean
C61000
stack
page read and write
clean
7B0000
unkown image
page readonly
clean
778000
unkown image
page readonly
clean
6ADE000
stack
page read and write
clean
29975E00000
unkown image
page readonly
clean
29976387000
unkown
page read and write
clean
7FF51EC5F000
unkown image
page readonly
clean
7FF54C640000
unkown image
page readonly
clean
2997636E000
unkown
page read and write
clean
C45000
heap default
page read and write
clean
55E0000
stack
page read and write
clean
C50000
stack
page read and write
clean
29C5000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
D00000
stack
page read and write
clean
7F5A0000
unkown
page execute and read and write
clean
5CA0000
unkown
page read and write
clean
C60000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
6A72000
unkown
page read and write
clean
204844C1000
unkown
page read and write
clean
28E2000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
C60000
stack
page read and write
clean
7D0000
unkown image
page readonly
clean
15EEA854000
unkown
page read and write
clean
7FF5AC070000
unkown image
page readonly
clean
7FF54C694000
unkown image
page readonly
clean
204844B6000
unkown
page read and write
clean
199A8CC0000
heap private
page read and write
clean
7F712000
unkown image
page readonly
clean
2997637C000
unkown
page read and write
clean
1490000
heap default
page read and write
clean
C60000
stack
page read and write
clean
D01000
stack
page read and write
clean
55E0000
stack
page read and write
clean
7DF5C1640000
unkown image
page readonly
clean
2B1E000
stack
page read and write
clean
DF0000
stack
page read and write
clean
51B0000
unkown
page execute and read and write
clean
5B40000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7FF50809E000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
7F212000
unkown image
page readonly
clean
4F90000
unkown
page read and write
clean
5620000
unkown
page read and write
clean
7F710000
unkown image
page readonly
clean
7FF5EA09F000
unkown image
page readonly
clean
C90000
stack
page read and write
clean
29975A00000
unkown
page read and write
clean
D00000
stack
page read and write
clean
299759B0000
unkown image
page readonly
clean
D01000
stack
page read and write
clean
1739000
heap default
page read and write
clean
5620000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7FF5AC2E6000
unkown image
page readonly
clean
51A0000
unkown
page read and write
clean
C61000
stack
page read and write
clean
7F710000
unkown image
page readonly
clean
C80000
stack
page read and write
clean
21A6A450000
unkown image
page readonly
clean
58F0000
unkown
page read and write
clean
29976385000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
21A6A648000
unkown
page read and write
clean
C80000
unkown image
page readonly
clean
7F0000
unkown
page read and write
clean
D00000
stack
page read and write
clean
51D0000
unkown
page read and write
clean
204845B0000
unkown
page read and write
clean
7FF54C657000
unkown image
page readonly
clean
2952000
unkown image
page readonly
clean
5630000
unkown
page read and write
clean
7260000
unkown
page read and write
clean
CF0000
heap private
page read and write
clean
5630000
unkown
page read and write
clean
5610000
unkown
page read and write
clean
29C0000
unkown image
page readonly
clean
7DF51D1C0000
unkown image
page readonly
clean
204844C1000
unkown
page read and write
clean
7F720000
unkown image
page readonly
clean
692E000
stack
page read and write
clean
6640000
unkown
page read and write
clean
7FF5EA03A000
unkown image
page readonly
clean
7FF5EA045000
unkown image
page readonly
clean
7FF51EC7D000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
7DF5617D0000
unkown image
page readonly
clean
2963000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
724C000
stack
page read and write
clean
55F0000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
4F90000
unkown image
page readonly
clean
29975ADD000
unkown
page read and write
clean
2496C7E000
stack
page read and write
clean
5EC0000
stack
page read and write
clean
EE5000
heap default
page read and write
clean
D10000
stack
page read and write
clean
E81000
unkown
page read and write
clean
6190000
stack
page execute and read and write
clean
2E91000
unkown
page read and write
clean
1716000
unkown
page read and write
clean
16E7000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
7FF5AC403000
unkown image
page readonly
clean
C80000
stack
page read and write
clean
D01000
stack
page read and write
clean
29975A54000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
C61000
stack
page read and write
clean
E2A000
heap default
page read and write
clean
5180000
unkown
page read and write
clean
C60000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
C60000
stack
page read and write
clean
29E7000
unkown
page read and write
clean
D10000
stack
page read and write
clean
C51000
stack
page read and write
clean
7FF5ABE03000
unkown image
page readonly
clean
1495000
heap default
page read and write
clean
29976317000
unkown
page read and write
clean
204845F0000
unkown image
page readonly
clean
7F720000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
7FF54C69F000
unkown image
page readonly
clean
C65000
stack
page read and write
clean
6A35000
unkown
page read and write
clean
2A01000
unkown
page read and write
clean
6670000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
7FF5EA0B9000
unkown image
page readonly
clean
16E4000
unkown
page read and write
clean
5CE0000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
D10000
stack
page read and write
clean
7FF5E9F01000
unkown image
page readonly
clean
29975A57000
unkown
page read and write
clean
20484745000
heap private
page read and write
clean
7DF51D1B0000
unkown image
page readonly
clean
E00000
unkown image
page read and write
clean
1030000
unkown
page read and write
clean
7FF5EA06C000
unkown image
page readonly
clean
5060000
unkown
page read and write
clean
199A8E81000
unkown
page read and write
clean
C70000
stack
page read and write
clean
63E1000
unkown
page read and write
clean
C60000
stack
page read and write
clean
C60000
stack
page read and write
clean
5190000
unkown
page read and write
clean
21A6A67F000
unkown
page read and write
clean
7DF5617B0000
unkown image
page readonly
clean
F1E000
unkown
page read and write
clean
D10000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
105A000
unkown
page execute and read and write
clean
6FDF000
stack
page read and write
clean
5900000
unkown
page read and write
clean
7A0000
unkown image
page read and write
clean
29975A53000
unkown
page read and write
clean
D10000
stack
page read and write
clean
5620000
unkown
page read and write
clean
D01000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
2E4D000
unkown
page read and write
clean
7FF5E9F3B000
unkown image
page readonly
clean
55E0000
stack
page read and write
clean
700000
unkown image
page readonly
clean
6630000
unkown
page read and write
clean
5B30000
unkown
page read and write
clean
249677E000
stack
page read and write
clean
6A51000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
C61000
stack
page read and write
clean
7FF5AC076000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
C60000
stack
page read and write
clean
D00000
stack
page read and write
clean
5EB0000
stack
page read and write
clean
15EEA83C000
unkown
page read and write
clean
EC0000
unkown image
page readonly
clean
7FF5AC2B0000
unkown image
page readonly
clean
627D000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
29976385000
unkown
page read and write
clean
144E000
stack
page read and write
clean
C60000
stack
page read and write
clean
C60000
stack
page read and write
clean
7FF5AC5A2000
unkown image
page readonly
clean
6D5F000
stack
page read and write
clean
C60000
stack
page read and write
clean
5610000
unkown
page read and write
clean
29975B02000
unkown
page read and write
clean
29976300000
unkown
page read and write
clean
15EEA7B0000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
6630000
unkown
page read and write
clean
D20000
stack
page read and write
clean
7FF5AC452000
unkown image
page readonly
clean
199A8E29000
unkown
page read and write
clean
7FF54C645000
unkown image
page readonly
clean
16DE000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
55E0000
stack
page read and write
clean
55D0000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
7FF51EBEA000
unkown image
page readonly
clean
D845C7A000
unkown
page read and write
clean
D20000
stack
page read and write
clean
C60000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
A3B000
unkown
page read and write
clean
7F220000
unkown image
page readonly
clean
7FF5AC50F000
unkown image
page readonly
clean
7B0000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
7E0000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
22629FE000
stack
page read and write
clean
D20000
stack
page read and write
clean
5D10000
unkown
page read and write
clean
2EC8000
unkown
page read and write
clean
C61000
stack
page read and write
clean
5940000
unkown
page read and write
clean
7F700000
unkown image
page readonly
clean
5ED6000
stack
page read and write
clean
6640000
unkown
page read and write
clean
2997637F000
unkown
page read and write
clean
6A3D000
unkown
page read and write
clean
5068000
unkown
page read and write
clean
7FF508084000
unkown image
page readonly
clean
7FF51EB4D000
unkown image
page readonly
clean
2997638B000
unkown
page read and write
clean
199A9200000
unkown image
page readonly
clean
778000
unkown image
page readonly
clean
301F000
stack
page read and write
clean
C61000
stack
page read and write
clean
51D0000
unkown
page read and write
clean
2E80000
unkown image
page readonly
clean
C65000
stack
page read and write
clean
D00000
stack
page read and write
clean
7FF5EA084000
unkown image
page readonly
clean
C70000
stack
page read and write
clean
7F700000
unkown image
page readonly
clean
7FF54C5AC000
unkown image
page readonly
clean
D01000
stack
page read and write
clean
7FF54C63E000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
2963000
unkown image
page readonly
clean
29C5000
unkown
page read and write
clean
D10000
stack
page read and write
clean
101E000
stack
page read and write
clean
6A7D000
unkown
page read and write
clean
7F720000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
5065000
unkown
page read and write
clean
7FF5AC3AB000
unkown image
page readonly
clean
29976386000
unkown
page read and write
clean
1034000
unkown
page read and write
clean
D7E000
stack
page read and write
clean
C60000
stack
page read and write
clean
29975AA4000
unkown
page read and write
clean
1056000
unkown
page execute and read and write
clean
C60000
stack
page read and write
clean
2E90000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7FF507997000
unkown image
page readonly
clean
7DF5617C2000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
5190000
unkown
page read and write
clean
5A6CEFE000
stack
page read and write
clean
10D0000
heap private
page read and write
clean
5B40000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
7FF51ECF2000
unkown image
page readonly
clean
7FF51E7C6000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
2BD0000
unkown image
page readonly
clean
5190000
unkown
page read and write
clean
108B000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
7F712000
unkown image
page readonly
clean
E82000
unkown
page read and write
clean
D01000
stack
page read and write
clean
C65000
stack
page read and write
clean
7FF54C724000
unkown image
page readonly
clean
7FF54C6AE000
unkown image
page readonly
clean
4F91000
unkown
page read and write
clean
5630000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
18F0000
unkown
page read and write
clean
7FF54C3F0000
unkown image
page readonly
clean
5B60000
unkown
page read and write
clean
D01000
stack
page read and write
clean
29976389000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
7DF533D72000
unkown image
page readonly
clean
7FF54BD74000
unkown image
page readonly
clean
7DF5C1640000
unkown image
page readonly
clean
15EEAA00000
unkown image
page readonly
clean
D08000
stack
page read and write
clean
D00000
stack
page read and write
clean
29975AAE000
unkown
page read and write
clean
7DF5617D0000
unkown image
page readonly
clean
7FF51ECE4000
unkown image
page readonly
clean
55C0000
unkown
page execute and read and write
clean
7DF5C1622000
unkown image
page readonly
clean
5D20000
unkown
page read and write
clean
2920000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
D00000
stack
page read and write
clean
702000
unkown image
page readonly
clean
7FF5EA02A000
unkown image
page readonly
clean
1CD0000
unkown image
page readonly
clean
CB0000
stack
page read and write
clean
C51000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
7FF5080BD000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
204844A6000
heap default
page read and write
clean
C65000
stack
page read and write
clean
5637000
unkown
page read and write
clean
7FF5EA02C000
unkown image
page readonly
clean
20484380000
unkown image
page readonly
clean
7FF51EC0B000
unkown image
page readonly
clean
22626FD000
stack
page read and write
clean
29975AED000
unkown
page read and write
clean
D01000
stack
page read and write
clean
778000
unkown image
page readonly
clean
5940000
unkown
page read and write
clean
5A6D1FF000
stack
page read and write
clean
7DF45F680000
unkown image
page readonly
clean
C51000
stack
page read and write
clean
55F0000
stack
page read and write
clean
6A41000
unkown
page read and write
clean
A82B978000
stack
page read and write
clean
5B60000
unkown
page read and write
clean
6A80000
unkown
page read and write
clean
29E4000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7FF5AC4AE000
unkown image
page readonly
clean
7DF51D1D0000
unkown image
page readonly
clean
6A51000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
5F2E000
stack
page read and write
clean
5134000
heap private
page read and write
clean
55E0000
stack
page read and write
clean
2933000
unkown image
page readonly
clean
1062000
unkown
page read and write
clean
7DF5617B0000
unkown image
page readonly
clean
299763CD000
unkown
page read and write
clean
7FF54C206000
unkown image
page readonly
clean
5B60000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
15EEB002000
unkown
page read and write
clean
299D000
stack
page read and write
clean
C60000
stack
page read and write
clean
778000
unkown image
page readonly
clean
29975880000
unkown image
page readonly
clean
5910000
unkown
page read and write
clean
5910000
unkown
page read and write
clean
51A0000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5180000
unkown
page read and write
clean
7FF54C62A000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
5630000
unkown
page read and write
clean
C51000
stack
page read and write
clean
5060000
unkown
page read and write
clean
51D0000
unkown
page read and write
clean
7FF51EC37000
unkown image
page readonly
clean
7F710000
unkown image
page readonly
clean
5190000
unkown
page read and write
clean
C91000
stack
page read and write
clean
CA0000
stack
page read and write
clean
2D02000
unkown
page read and write
clean
702000
unkown image
page readonly
clean
5B60000
unkown
page read and write
clean
C60000
stack
page read and write
clean
21A6A653000
unkown
page read and write
clean
7FF51E334000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7DF4FD080000
unkown image
page readonly
clean
C65000
stack
page read and write
clean
6770000
unkown
page read and write
clean
5068000
unkown
page read and write
clean
7F700000
unkown image
page readonly
clean
55F0000
stack
page read and write
clean
7F710000
unkown image
page readonly
clean
C90000
stack
page read and write
clean
7F212000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
D00000
stack
page read and write
clean
10CE000
stack
page read and write
clean
5065000
unkown
page read and write
clean
1950000
heap private
page read and write
clean
29975A5A000
unkown
page read and write
clean
6A47000
unkown
page read and write
clean
44F8000
unkown
page read and write
clean
682F000
stack
page read and write
clean
7FF5E9C15000
unkown image
page readonly
clean
1880000
unkown
page read and write
clean
199A9000000
unkown image
page readonly
clean
1630000
unkown
page read and write
clean
2997686A000
unkown
page read and write
clean
5616000
unkown
page read and write
clean
2958000
unkown image
page readonly
clean
55F0000
stack
page read and write
clean
7FF51EBEC000
unkown image
page readonly
clean
7F182000
unkown image
page readonly
clean
5630000
unkown
page read and write
clean
D10000
stack
page read and write
clean
29976202000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
7F710000
unkown image
page readonly
clean
7FF5AC450000
unkown image
page readonly
clean
5B60000
unkown
page read and write
clean
D00000
stack
page read and write
clean
2E89000
unkown
page read and write
clean
5910000
unkown
page read and write
clean
7F712000
unkown image
page readonly
clean
7F712000
unkown image
page readonly
clean
199A8E2C000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
7D0000
unkown image
page readonly
clean
5060000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
160A000
unkown
page execute and read and write
clean
29C5000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
5A40000
unkown
page read and write
clean
D10000
stack
page read and write
clean
D01000
stack
page read and write
clean
DF0000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
18EE000
unkown
page read and write
clean
7FF5E9F8D000
unkown image
page readonly
clean
D01000
stack
page read and write
clean
15EEA87E000
unkown
page read and write
clean
5A92000
heap private
page read and write
clean
299763AD000
unkown
page read and write
clean
29976385000
unkown
page read and write
clean
29975A50000
unkown
page read and write
clean
7FF5EA03E000
unkown image
page readonly
clean
5620000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
29975A6D000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
29975A5B000
unkown
page read and write
clean
29C8000
unkown
page read and write
clean
5610000
unkown
page read and write
clean
5B10000
unkown
page execute and read and write
clean
2BD0000
unkown image
page readonly
clean
F70000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7F212000
unkown image
page readonly
clean
299763B7000
unkown
page read and write
clean
7FF51ECF1000
unkown image
page readonly
clean
51D0000
unkown
page read and write
clean
15EEA660000
unkown image
page readonly
clean
CB0000
stack
page read and write
clean
2496AFB000
stack
page read and write
clean
5B44000
unkown
page read and write
clean
1A85000
unkown
page read and write
clean
1726000
unkown
page read and write
clean
29976802000
unkown
page read and write
clean
6C1F000
stack
page read and write
clean
4F80000
unkown
page read and write
clean
29976382000
unkown
page read and write
clean
7FF5AC47F000
unkown image
page readonly
clean
6A72000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
D00000
stack
page read and write
clean
C65000
stack
page read and write
clean
55E0000
stack
page read and write
clean
D10000
stack
page read and write
clean
6243000
unkown
page read and write
clean
6A82000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
199A8CB0000
unkown image
page read and write
clean
5930000
unkown
page read and write
clean
7250000
unkown
page read and write
clean
D01000
stack
page read and write
clean
D00000
stack
page read and write
clean
A82B5F7000
stack
page read and write
clean
55FE000
stack
page read and write
clean
2262AF7000
stack
page read and write
clean
1470000
unkown image
page readonly
clean
7DF5C1620000
unkown image
page readonly
clean
CB0000
stack
page read and write
clean
21A6A708000
unkown
page read and write
clean
C61000
stack
page read and write
clean
6170000
stack
page read and write
clean
7DF51D1C2000
unkown image
page readonly
clean
2E3D000
unkown
page read and write
clean
29975B16000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7FF507DE9000
unkown image
page readonly
clean
199A8E00000
unkown
page read and write
clean
EDD000
unkown
page read and write
clean
1739000
unkown
page read and write
clean
CA0000
stack
page read and write
clean
CB0000
stack
page read and write
clean
C70000
stack
page read and write
clean
CA0000
stack
page read and write
clean
29975A29000
unkown
page read and write
clean
51D0000
unkown
page read and write
clean
7FF5AC01E000
unkown image
page readonly
clean
C50000
stack
page read and write
clean
55E0000
stack
page read and write
clean
7FF5AC41C000
unkown image
page readonly
clean
21A6A600000
unkown
page read and write
clean
C60000
stack
page read and write
clean
2496BFB000
stack
page read and write
clean
66B0000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
D00000
stack
page read and write
clean
7DF5617B2000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
C50000
stack
page read and write
clean
5570000
unkown
page read and write
clean
1080000
unkown
page read and write
clean
7FF507993000
unkown image
page readonly
clean
CE0000
unkown image
page readonly
clean
5930000
unkown
page read and write
clean
D01000
stack
page read and write
clean
55C0000
unkown
page read and write
clean
C61000
stack
page read and write
clean
1711000
unkown
page read and write
clean
7FF5E9FAC000
unkown image
page readonly
clean
C70000
stack
page read and write
clean
6A8E000
unkown
page read and write
clean
6620000
unkown
page read and write
clean
29975AFC000
unkown
page read and write
clean
55E0000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
7FF5AC3B3000
unkown image
page readonly
clean
C80000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
5EEE000
stack
page read and write
clean
517E000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
299763A6000
unkown
page read and write
clean
5A6CF7E000
stack
page read and write
clean
C50000
stack
page read and write
clean
5D3D000
unkown
page read and write
clean
50E0000
heap private
page execute and read and write
clean
C61000
stack
page read and write
clean
199A8CF0000
unkown image
page readonly
clean
5190000
unkown
page read and write
clean
5630000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
7FF5AC529000
unkown image
page readonly
clean
29975A13000
unkown
page read and write
clean
702000
unkown image
page readonly
clean
7FF51EC54000
unkown image
page readonly
clean
299763A7000
unkown
page read and write
clean
5B60000
unkown
page read and write
clean
55E0000
stack
page read and write
clean
1A77000
unkown
page read and write
clean
5D3E000
stack
page read and write
clean
55E0000
stack
page read and write
clean
5620000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
7FF5AC4FA000
unkown image
page readonly
clean
5630000
unkown
page read and write
clean
C60000
stack
page read and write
clean
6A53000
unkown
page read and write
clean
D00000
stack
page read and write
clean
15E3000
unkown
page execute and read and write
clean
7FF5EA124000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
D10000
stack
page read and write
clean
6A56000
unkown
page read and write
clean
15EEA86B000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
5638000
unkown
page read and write
clean
7F600000
unkown image
page readonly
clean
21A6A4A0000
heap default
page read and write
clean
6A62000
unkown
page read and write
clean
D00000
stack
page read and write
clean
15EEA660000
unkown image
page readonly
clean
7FF5AC3B8000
unkown image
page readonly
clean
C80000
stack
page read and write
clean
EC2000
unkown image
page readonly
clean
C65000
stack
page read and write
clean
DF0000
stack
page read and write
clean
C60000
stack
page read and write
clean
778000
unkown image
page readonly
clean
5190000
unkown
page read and write
clean
5A6D17B000
stack
page read and write
clean
C60000
stack
page read and write
clean
7FF5E9C06000
unkown image
page readonly
clean
21A6A713000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
5620000
unkown
page read and write
clean
7FF51E7C0000
unkown image
page readonly
clean
2997637B000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
D00000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
7FF51EC05000
unkown image
page readonly
clean
199A8E13000
unkown
page read and write
clean
A82BB7E000
stack
page read and write
clean
C60000
stack
page read and write
clean
7F170000
unkown image
page readonly
clean
7FF5E9EE3000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
D00000
stack
page read and write
clean
7FF5EA0BD000
unkown image
page readonly
clean
6771000
unkown
page read and write
clean
5630000
unkown
page read and write
clean
5820000
unkown image
page readonly
clean
1AA0000
unkown
page read and write
clean
5FD0000
unkown
page read and write
clean
C65000
stack
page read and write
clean
C60000
stack
page read and write
clean
5B00000
unkown
page read and write
clean
C70000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
5A6D07B000
stack
page read and write
clean
C61000
stack
page read and write
clean
CB0000
stack
page read and write
clean
7FF5AC594000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
15EEA800000
unkown
page read and write
clean
7F220000
unkown image
page readonly
clean
5190000
unkown
page read and write
clean
D01000
stack
page read and write
clean
C60000
stack
page read and write
clean
C60000
stack
page read and write
clean
7FF54C200000
unkown image
page readonly
clean
5070000
unkown
page read and write
clean
15E4000
unkown
page read and write
clean
15EEAC00000
unkown image
page readonly
clean
1A60000
unkown
page read and write
clean
5610000
unkown
page read and write
clean
C60000
stack
page read and write
clean
51D0000
unkown
page read and write
clean
6A3E000
unkown
page read and write
clean
D00000
stack
page read and write
clean
C50000
stack
page read and write
clean
7F720000
unkown image
page readonly
clean
29975A5C000
unkown
page read and write
clean
7FF54C732000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
5900000
unkown
page read and write
clean
F18000
unkown
page read and write
clean
7FF51EC4A000
unkown image
page readonly
clean
1A5E000
stack
page read and write
clean
5060000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
1065000
unkown
page execute and read and write
clean
1617000
unkown
page execute and read and write
clean
7FF54C68A000
unkown image
page readonly
clean
1020000
unkown
page read and write
clean
C50000
stack
page read and write
clean
21A6A726000
unkown
page read and write
clean
FCB000
unkown
page read and write
clean
6A86000
unkown
page read and write
clean
5A93000
heap private
page read and write
clean
CA0000
stack
page read and write
clean
7F172000
unkown image
page readonly
clean
7DF5617C0000
unkown image
page readonly
clean
5B60000
unkown
page read and write
clean
7FF5ABF8E000
unkown image
page readonly
clean
199A8D00000
unkown image
page readonly
clean
7FF5E9F3E000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
C60000
stack
page read and write
clean
C60000
stack
page read and write
clean
29975A4F000
unkown
page read and write
clean
7DF5617B2000
unkown image
page readonly
clean
18DE000
stack
page read and write
clean
7DF51D1C2000
unkown image
page readonly
clean
7F220000
unkown image
page readonly
clean
C70000
stack
page read and write
clean
1900000
heap private
page read and write
clean
7FF5AC353000
unkown image
page readonly
clean
7FF5E9F93000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
6660000
unkown
page read and write
clean
5B60000
unkown
page read and write
clean
5EB0000
stack
page read and write
clean
55FE000
stack
page read and write
clean
29E2000
unkown
page read and write
clean
15EEA87F000
unkown
page read and write
clean
6E9F000
stack
page read and write
clean
DF0000
stack
page read and write
clean
2EB1000
unkown
page read and write
clean
602F000
stack
page read and write
clean
55F0000
stack
page read and write
clean
7F712000
unkown image
page readonly
clean
CB0000
stack
page read and write
clean
7DF5FF1D0000
unkown image
page readonly
clean
29975A70000
unkown
page read and write
clean
5AA0000
unkown image
page read and write
clean
C61000
stack
page read and write
clean
204844B7000
unkown
page read and write
clean
5D10000
unkown
page read and write
clean
7FF50808A000
unkown image
page readonly
clean
7F700000
unkown image
page readonly
clean
7FF5AC484000
unkown image
page readonly
clean
10E0000
unkown image
page readonly
clean
702000
unkown image
page readonly
clean
15EEA640000
unkown image
page read and write
clean
C51000
stack
page read and write
clean
D20000
stack
page read and write
clean
672E000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
C60000
stack
page read and write
clean
29ED000
unkown
page read and write
clean
7FF5E9E91000
unkown image
page readonly
clean
5080000
unkown
page read and write
clean
21A6A63C000
unkown
page read and write
clean
7FF5AC022000
unkown image
page readonly
clean
C90000
stack
page read and write
clean
7F702000
unkown image
page readonly
clean
5B30000
unkown
page read and write
clean
5FED000
stack
page read and write
clean
1060000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
C70000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
5F6E000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
7FF51EC79000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
D10000
stack
page read and write
clean
5630000
unkown
page read and write
clean
D00000
stack
page read and write
clean
21A6A430000
unkown image
page read and write
clean
21A6A64E000
unkown
page read and write
clean
7FF51EC00000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
D01000
stack
page read and write
clean
7DF4BF4F0000
unkown image
page readonly
clean
7F190000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
C50000
stack
page read and write
clean
2FDE000
stack
page read and write
clean
5570000
unkown
page read and write
clean
29976385000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
51D0000
unkown
page read and write
clean
7FF51EB64000
unkown image
page readonly
clean
1400000
unkown
page read and write
clean
204844BF000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
5570000
unkown
page read and write
clean
21A6AE02000
unkown
page read and write
clean
29976390000
unkown
page read and write
clean
5280000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
5B40000
unkown
page read and write
clean
7DF51D1B0000
unkown image
page readonly
clean
7FF5AC2E4000
unkown image
page readonly
clean
3190000
heap default
page read and write
clean
C60000
stack
page read and write
clean
55F0000
stack
page read and write
clean
2888000
unkown
page read and write
clean
C50000
stack
page read and write
clean
5F00000
stack
page read and write
clean
7FF5EA132000
unkown image
page readonly
clean
7F702000
unkown image
page readonly
clean
16EE000
unkown
page read and write
clean
5960000
unkown
page read and write
clean
C60000
stack
page read and write
clean
20484360000
unkown image
page read and write
clean
5190000
unkown
page read and write
clean
C70000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
2BC0000
unkown image
page read and write
clean
400000
unkown
page execute and read and write
clean
1AD0000
unkown image
page readonly
clean
7DF533D72000
unkown image
page readonly
clean
7FF5AC5A1000
unkown image
page readonly
clean
55E0000
stack
page read and write
clean
D00000
stack
page read and write
clean
5760000
unkown
page read and write
clean
108F000
unkown
page read and write
clean
29975880000
unkown image
page readonly
clean
700000
unkown image
page readonly
clean
1660000
heap default
page read and write
clean
5CC0000
unkown
page read and write
clean
20484590000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
E20000
heap default
page read and write
clean
7FF51EAC1000
unkown image
page readonly
clean
6690000
unkown
page read and write
clean
4F90000
unkown
page read and write
clean
15F0000
unkown
page read and write
clean
7F712000
unkown image
page readonly
clean
7F172000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
15ED000
unkown
page execute and read and write
clean
29C0000
unkown
page read and write
clean
15FD000
unkown
page execute and read and write
clean
5B80000
unkown
page read and write
clean
D00000
stack
page read and write
clean
C60000
stack
page read and write
clean
6A56000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
55E0000
stack
page read and write
clean
15EEA82A000
unkown
page read and write
clean
15EEAD80000
unkown image
page readonly
clean
199A8E8F000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
D10000
stack
page read and write
clean
5070000
unkown
page read and write
clean
C60000
stack
page read and write
clean
6A3D000
unkown
page read and write
clean
C61000
stack
page read and write
clean
7DF5FF1D0000
unkown image
page readonly
clean
A82B87E000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
1033000
unkown
page execute and read and write
clean
7FF5AC59A000
unkown image
page readonly
clean
7F210000
unkown image
page readonly
clean
B38000
unkown
page read and write
clean
199A8F02000
unkown
page read and write
clean
299759F0000
unkown image
page readonly
clean
29976371000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
204844BF000
unkown
page read and write
clean
E54000
heap default
page read and write
clean
29976382000
unkown
page read and write
clean
5760000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
5630000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
7FF54C6B9000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
7FF54C6A8000
unkown image
page readonly
clean
5600000
stack
page read and write
clean
D845CFF000
stack
page read and write
clean
C60000
stack
page read and write
clean
7F180000
unkown image
page readonly
clean
700000
unkown image
page readonly
clean
C50000
stack
page read and write
clean
4F90000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
7FF5AC4B0000
unkown image
page readonly
clean
2BF0000
unkown image
page readonly
clean
15EEA84C000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
15EEA902000
unkown
page read and write
clean
7B0000
unkown image
page readonly
clean
7B0000
unkown image
page readonly
clean
EE5000
unkown
page read and write
clean
15EEA790000
unkown image
page readonly
clean
55F0000
stack
page read and write
clean
EAB000
unkown
page read and write
clean
51A0000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
675D000
stack
page read and write
clean
C80000
stack
page read and write
clean
7DF5C1622000
unkown image
page readonly
clean
29F5000
unkown
page read and write
clean
C60000
stack
page read and write
clean
5060000
unkown
page read and write
clean
204844D0000
unkown
page read and write
clean
D01000
stack
page read and write
clean
5620000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
7FF54C53E000
unkown image
page readonly
clean
21A6A62A000
unkown
page read and write
clean
29976321000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
D01000
stack
page read and write
clean
C60000
stack
page read and write
clean
1AB0000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7F702000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
7F710000
unkown image
page readonly
clean
55E0000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
29975A4B000
unkown
page read and write
clean
1738000
unkown
page read and write
clean
EE6000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
204845E0000
unkown image
page readonly
clean
7FF5EA04B000
unkown image
page readonly
clean
7FF54C66C000
unkown image
page readonly
clean
DF0000
stack
page read and write
clean
5B40000
unkown
page execute and read and write
clean
199A8D20000
heap default
page read and write
clean
5630000
unkown
page read and write
clean
5960000
unkown
page read and write
clean
627C000
unkown
page read and write
clean
5CB0000
unkown
page read and write
clean
2649000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
55F2000
stack
page read and write
clean
D10000
stack
page read and write
clean
D10000
stack
page read and write
clean
7FF5AC259000
unkown image
page readonly
clean
1050000
unkown
page read and write
clean
7FF54C6BD000
unkown image
page readonly
clean
2BF0000
unkown image
page readonly
clean
16EE000
unkown
page read and write
clean
2997638F000
unkown
page read and write
clean
5630000
unkown
page read and write
clean
29976370000
unkown
page read and write
clean
5065000
unkown
page read and write
clean
D00000
stack
page read and write
clean
103D000
unkown
page execute and read and write
clean
173C000
heap default
page read and write
clean
29C0000
unkown
page read and write
clean
29C7000
unkown
page read and write
clean
7FF5EA0B6000
unkown image
page readonly
clean
204843A0000
unkown image
page readonly
clean
7FF51EC17000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
7FF54C66F000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
7DF5FF1B0000
unkown image
page readonly
clean
29FC000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
7E0000
unkown image
page readonly
clean
2997637A000
unkown
page read and write
clean
5620000
unkown
page read and write
clean
199A8F00000
unkown
page read and write
clean
C61000
stack
page read and write
clean
C50000
stack
page read and write
clean
20484AD0000
unkown image
page readonly
clean
F1E000
unkown
page read and write
clean
29976385000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
7FF508078000
unkown image
page readonly
clean
16E9000
unkown
page read and write
clean
CA0000
stack
page read and write
clean
21A6A440000
heap private
page read and write
clean
15F3000
unkown
page read and write
clean
C61000
stack
page read and write
clean
C60000
stack
page read and write
clean
199A8F13000
unkown
page read and write
clean
5070000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
2997638C000
unkown
page read and write
clean
7FF5AC4F4000
unkown image
page readonly
clean
29C5000
unkown
page read and write
clean
A82AFAB000
unkown
page read and write
clean
C60000
stack
page read and write
clean
204844A1000
unkown
page read and write
clean
7FF54C677000
unkown image
page readonly
clean
606D000
stack
page read and write
clean
651E000
stack
page read and write
clean
20484490000
heap default
page read and write
clean
CD0000
unkown
page read and write
clean
5EE0000
stack
page read and write
clean
6650000
unkown
page read and write
clean
5B40000
unkown
page read and write
clean
29975A4C000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
E7F000
unkown
page read and write
clean
D00000
stack
page read and write
clean
7FF54C63A000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
29C5000
unkown
page read and write
clean
C70000
stack
page read and write
clean
5833000
heap private
page read and write
clean
15EEA84F000
unkown
page read and write
clean
E7B000
unkown
page read and write
clean
6A37000
unkown
page read and write
clean
7FF5AC26B000
unkown image
page readonly
clean
2944000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
7F110000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7F710000
unkown image
page readonly
clean
5A50000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
C60000
stack
page read and write
clean
5620000
unkown
page read and write
clean
1870000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
5610000
unkown
page read and write
clean
C70000
stack
page read and write
clean
7F230000
unkown image
page readonly
clean
2997636A000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
55E0000
stack
page read and write
clean
7FF51E7D5000
unkown image
page readonly
clean
7F700000
unkown image
page readonly
clean
C61000
stack
page read and write
clean
199A9602000
unkown
page read and write
clean
7DF51D1D0000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
C70000
stack
page read and write
clean
29976385000
unkown
page read and write
clean
5600000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
C61000
stack
page read and write
clean
540C000
stack
page read and write
clean
D00000
stack
page read and write
clean
2997638C000
unkown
page read and write
clean
29976389000
unkown
page read and write
clean
4271000
unkown
page read and write
clean
5630000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
29976800000
unkown
page read and write
clean
5610000
unkown
page read and write
clean
2E7A000
unkown
page read and write
clean
5960000
unkown
page read and write
clean
7E0000
unkown image
page readonly
clean
5940000
unkown
page read and write
clean
C70000
stack
page read and write
clean
59D0000
heap private
page execute and read and write
clean
29C0000
unkown
page read and write
clean
5B60000
unkown
page read and write
clean
5FB0000
unkown
page read and write
clean
2BD0000
unkown image
page readonly
clean
7FF54C64B000
unkown image
page readonly
clean
CB1000
stack
page read and write
clean
C6C000
stack
page read and write
clean
55E0000
stack
page read and write
clean
5900000
unkown
page read and write
clean
1749000
heap default
page read and write
clean
5760000
unkown image
page readonly
clean
51D0000
unkown
page read and write
clean
702000
unkown image
page readonly
clean
7F720000
unkown image
page readonly
clean
55D0000
stack
page read and write
clean
7DF5C1630000
unkown image
page readonly
clean
C70000
stack
page read and write
clean
CB1000
stack
page read and write
clean
29976398000
unkown
page read and write
clean
7F720000
unkown image
page readonly
clean
2997637D000
unkown
page read and write
clean
5060000
unkown
page read and write
clean
7FF508124000
unkown image
page readonly
clean
55E0000
stack
page read and write
clean
A82B4FA000
stack
page read and write
clean
7FF5EA040000
unkown image
page readonly
clean
7F710000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
5920000
unkown
page read and write
clean
C61000
stack
page read and write
clean
7FF50806F000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
5B50000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
55E0000
unkown
page read and write
clean
7FF51E9B0000
unkown image
page readonly
clean
5600000
stack
page read and write
clean
D00000
stack
page read and write
clean
2893000
unkown image
page readonly
clean
7FF51EAFB000
unkown image
page readonly
clean
7F230000
unkown image
page readonly
clean
7F230000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7FF508132000
unkown image
page readonly
clean
D10000
stack
page read and write
clean
199A8E6C000
unkown
page read and write
clean
666E000
stack
page read and write
clean
4F70000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
5190000
unkown
page read and write
clean
226297B000
stack
page read and write
clean
7B0000
unkown image
page readonly
clean
29976387000
unkown
page read and write
clean
7FF5EA08A000
unkown image
page readonly
clean
15EEA680000
unkown image
page readonly
clean
C90000
stack
page read and write
clean
55E0000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
7F210000
unkown image
page readonly
clean
7FF5AC301000
unkown image
page readonly
clean
21A6AB80000
unkown image
page readonly
clean
7FF51EAE1000
unkown image
page readonly
clean
5B0F000
unkown
page read and write
clean
6760000
unkown
page read and write
clean
6170000
unkown image
page read and write
clean
2997637B000
unkown
page read and write
clean
5070000
unkown
page read and write
clean
7FF5AC3AE000
unkown image
page readonly
clean
700000
unkown image
page readonly
clean
5060000
unkown
page read and write
clean
249707E000
stack
page read and write
clean
5B70000
unkown
page read and write
clean
29C5000
unkown
page read and write
clean
DF0000
stack
page read and write
clean
7FF5ABBDE000
unkown image
page readonly
clean
2E80000
unkown image
page readonly
clean
C60000
stack
page read and write
clean
7F702000
unkown image
page readonly
clean
665D000
stack
page read and write
clean
1098000
unkown
page read and write
clean
7F712000
unkown image
page readonly
clean
D11000
stack
page read and write
clean
6A51000
unkown
page read and write
clean
2940000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
29976802000
unkown
page read and write
clean
2997638F000
unkown
page read and write
clean
D00000
stack
page read and write
clean
7FF5E9DB7000
unkown image
page readonly
clean
16CB000
heap default
page read and write
clean
7F700000
unkown image
page readonly
clean
7FF5E976E000
unkown image
page readonly
clean
2BF0000
unkown image
page readonly
clean
5940000
unkown
page read and write
clean
CB0000
stack
page read and write
clean
2885000
unkown image
page readonly
clean
EC2000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
55F0000
stack
page read and write
clean
5A6D4F9000
stack
page read and write
clean
6A44000
unkown
page read and write
clean
C61000
stack
page read and write
clean
7FF5AC35A000
unkown image
page readonly
clean
D00000
stack
page read and write
clean
2997636F000
unkown
page read and write
clean
DF5000
stack
page read and write
clean
169F000
heap default
page read and write
clean
7F712000
unkown image
page readonly
clean
169C000
heap default
page read and write
clean
5611000
unkown
page read and write
clean
C60000
stack
page read and write
clean
2ECE000
unkown
page read and write
clean
6A56000
unkown
page read and write
clean
452A000
unkown
page read and write
clean
2997635D000
unkown
page read and write
clean
16D2000
unkown
page read and write
clean
5180000
unkown
page read and write
clean
EDD000
unkown
page read and write
clean
7FF54C6B6000
unkown image
page readonly
clean
5060000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
185E000
stack
page read and write
clean
5920000
unkown
page read and write
clean
7FF5AC463000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
29976100000
unkown image
page read and write
clean
5635000
unkown
page read and write
clean
5610000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
D00000
stack
page read and write
clean
C60000
stack
page read and write
clean
5B40000
unkown
page read and write
clean
5760000
unkown
page read and write
clean
7FF51EB53000
unkown image
page readonly
clean
D845EFE000
stack
page read and write
clean
199A8E4F000
unkown
page read and write
clean
5A2C000
stack
page read and write
clean
5B60000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
5065000
unkown
page read and write
clean
5630000
unkown
page read and write
clean
C61000
stack
page read and write
clean
D01000
stack
page read and write
clean
D00000
stack
page read and write
clean
6A35000
unkown
page read and write
clean
C60000
stack
page read and write
clean
55F0000
stack
page read and write
clean
D10000
stack
page read and write
clean
29C0000
unkown
page read and write
clean
7FF5EA094000
unkown image
page readonly
clean
5130000
heap private
page read and write
clean
5620000
unkown
page read and write
clean
616B000
unkown
page read and write
clean
D16000
stack
page read and write
clean
21A6A800000
unkown image
page readonly
clean
5B70000
unkown
page read and write
clean
204844C1000
unkown
page read and write
clean
6241000
unkown
page read and write
clean
C61000
stack
page read and write
clean
199A8E3C000
unkown
page read and write
clean
5D30000
unkown
page read and write
clean
C60000
stack
page read and write
clean
7FF5E9C00000
unkown image
page readonly
clean
E97000
heap default
page read and write
clean
29975A6D000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
7FF54C731000
unkown image
page readonly
clean
5630000
unkown
page read and write
clean
170D000
unkown
page read and write
clean
5D30000
unkown
page read and write
clean
7FF51EC76000
unkown image
page readonly
clean
7F222000
unkown image
page readonly
clean
There are 2014 hidden memdumps, click here to show them.