IOC Report

loading gif

Files

File Path
Type
Category
Malicious
ComplaintDetails-1244065104-Nov-17.xlsb
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\Desktop\ComplaintDetails-1244065104-Nov-17.xlsb (copy)
Microsoft Excel 2007+
dropped
malicious
C:\Users\user\Desktop\~$ComplaintDetails-1244065104-Nov-17.xlsb
data
dropped
malicious
C:\Users\user\Desktop\ComplaintDetails-1244065104-Nov-17.xlsb17 (copy)
Microsoft Excel 2007+
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\630E636C-6B0C-44EA-BF33-295CC8DCC16C
XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\227F60C2.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames 3
dropped
clean
C:\Users\user\Desktop\74E50000
Microsoft Excel 2007+
dropped
clean
C:\Users\user\Desktop\74E50000:Zone.Identifier
ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\DC095B18.jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x988, frames 3
dropped
clean
C:\Users\user\Desktop\D1440000
Microsoft Excel 2007+
dropped
clean
C:\Users\user\Desktop\D1440000:Zone.Identifier
ASCII text, with CRLF line terminators
modified
clean

Processes

Path
Cmdline
Malicious
C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe ..\Tot1.ocx
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe ..\Tot2.ocx
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe ..\Tot3.ocx
malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
malicious
C:\Windows\System32\regsvr32.exe
regsvr32.exe ..\Tot1.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32.exe ..\Tot2.ocx
malicious
C:\Windows\System32\regsvr32.exe
regsvr32.exe ..\Tot3.ocx
malicious

URLs

Name
IP
Malicious
http://185.138.164.244/
unknown
malicious
https://shell.suite.office.com:1443
unknown
clean
https://substrate.office.comI9
unknown
clean
https://autodiscover-s.outlook.com/
unknown
clean
https://graph.ppe.windows.net/w6
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
unknown
clean
https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspee
unknown
clean
https://cdn.entity.
unknown
clean
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
unknown
clean
https://login.m
unknown
clean
https://rpsticket.partnerservices.getmicrosoftkey.com
unknown
clean
https://lookup.onenote.com/lookup/geolocation/v1
unknown
clean
https://login.windows.net/common/oauth2/authorizerX
unknown
clean
http://185.81.114.236/5563209-4053062332-1002
unknown
clean
http://schemas.open
unknown
clean
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
unknown
clean
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
unknown
clean
http://190.14.37.101/44532.8765170139.datc
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=FlickrMBI_SSL_SHORTssl.
unknown
clean
https://api.aadrm.com/
unknown
clean
https://login.wind
unknown
clean
https://clients.config.office.net/Aj
unknown
clean
http://185.81.114.236/44532.8765170139.dat_
unknown
clean
https://login.windows.net/common/oauth2/authorize:UL
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeform
unknown
clean
https://login.windows.net/common/oauth2/authorizeRZ
unknown
clean
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=ImmersiveApp
unknown
clean
https://api.microsoftstream.com/api/
unknown
clean
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
unknown
clean
http://190.14.37.101/44532.8765170139.datS
unknown
clean
https://cr.office.com
unknown
clean
https://api.powerbi.com/v1.0/myorg/groupsH
unknown
clean
https://login.windows.net/common/oauth2/authorize;Vs
unknown
clean
http://190.14.37.101/44532.8765170139.datO
unknown
clean
https://login.windows.net/common/oauth2/authorizesY
unknown
clean
https://login.windows.net/common/oauth2/authorizecome
unknown
clean
https://res.getmicrosoftkey.com/api/redemptionevents
unknown
clean
https://tasks.office.com
unknown
clean
https://officeci.azurewebsites.net/api/
unknown
clean
https://api.microsoftstream.com/api/Wk
unknown
clean
https://login.windows.net/common/oauth2/authorize#
unknown
clean
https://store.office.cn/addinstemplate
unknown
clean
https://login.windows.net/common/oauth2/authorize&
unknown
clean
https://login.windows.net/common/oauth2/authorizepZ
unknown
clean
https://graph.windows.net/ee
unknown
clean
https://outlook.office365.com/B
unknown
clean
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
unknown
clean
https://loki.delve.office.com/api/v1/configuration/officewin32/%
unknown
clean
https://substrate.office.coml
unknown
clean
https://www.odwebp.svc.ms
unknown
clean
https://api.powerbi.com/v1.0/myorg/groups
unknown
clean
https://web.microsoftstream.com/video/
unknown
clean
https://api.addins.store.officeppe.com/addinstemplate
unknown
clean
https://graph.windows.net
unknown
clean
https://api.addins.store.officeppe.com/addinstemplatebW
unknown
clean
http://190.14.37.101/53321935-2125563209-4053062332-1002y
unknown
clean
https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord?
unknown
clean
https://management.azure.comh
unknown
clean
https://login.microsoftonline.com/z
unknown
clean
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
unknown
clean
https://login.windows.net/common/oauth2/authorizeize)
unknown
clean
https://substrate.office.comc
unknown
clean
https://ncus.contentsync.
unknown
clean
http://190.14.37.101/A
unknown
clean
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=BingMBI_SSL_SHORTssl.
unknown
clean
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
unknown
clean
http://weather.service.msn.com/data.aspx
unknown
clean
https://substrate.office.comP
unknown
clean
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
unknown
clean
https://outlook.office365.com/autodiscover/autodiscover.jsonsP
unknown
clean
https://onedrive.live.com/embed?Z
unknown
clean
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
unknown
clean
https://outlook.office.comR87
unknown
clean
https://login.windows.net/common/oauth2/authorizeb
unknown
clean
https://wus2.contentsync.
unknown
clean
https://login.windows.net/common/oauth2/authorized
unknown
clean
https://clients.config.office.net/user/v1.0/ios
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/workO
unknown
clean
https://login.windows.net/common/oauth2/authorizeg
unknown
clean
https://login.windows.net/common/oauth2/authorizeX
unknown
clean
https://analysis.windows.net/powerbi/api8
unknown
clean
https://o365auditrealtimeingestion.manage.office.com
unknown
clean
https://outlook.office365.com/api/v1.0/me/Activities
unknown
clean
https://api.addins.omex.office.net/appstate/queryEX
unknown
clean
https://login.windows.net/common/oauth2/authorizeP
unknown
clean
https://login.windows.net/common/oauth2/authorizeQ
unknown
clean
https://clients.config.office.net/user/v1.0/android/policies
unknown
clean
https://login.windows.net/common/oauth2/authorizeS
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json$
unknown
clean
https://entitlement.diagnostics.office.com
unknown
clean
https://login.windows.net/common/oauth2/authorizeV
unknown
clean
https://login.windows.net/common/oauth2/authorizeW
unknown
clean
https://login.windows.net/common/oauth2/authorizeH
unknown
clean
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
unknown
clean
https://login.mcro
unknown
clean
https://login.windows.net/common/oauth2/authorizeI
unknown
clean
https://outlook.office.com/
unknown
clean
https://login.windows.net/common/oauth2/authorizeK
unknown
clean
https://sr.outlook.office.net/ws/speech/recognize/assistant/workU
unknown
clean
http://185.138.164.244/44532.8710387731.date9:00
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://schemas.openformatrg/package/2006/r
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://185.138.164.244/E
unknown
clean
http://schemas.openformatrg/package/2006/content-t
unknown
clean
http://investor.msn.com/
unknown
clean
http://www.%s.comPA
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://190.14.37.101/44532.8710387731.dat
190.14.37.101
clean
http://185.138.164.244/44532.8710387731.datc9:00
unknown
clean
http://servername/isapibackend.dll
unknown
clean
http://185.81.114.236/C
unknown
clean
http://185.138.164.244/44532.8710387731.dat
185.138.164.244
clean
There are 109 hidden URLs, click here to show them.

IPs

IP
Domain
Country
Malicious
190.14.37.101
unknown
Panama
clean
185.138.164.244
unknown
Germany
clean
185.81.114.236
unknown
United Kingdom
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
j==
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
k==
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
RemoteClearDate
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3
Last
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
FilePath
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
StartDate
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
EndDate
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Properties
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache\AllUsers\officeclient.microsoft.com\config16--lcid=1033&syslcid=1033&uilcid=1033&build=16.0.4954&crev=3\0
Url
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\internet\WebServiceCache
LastClean
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableWinHttpCertAuth
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableIsOwnerRegex
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableSessionAwareHttpClose
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALForExtendedApps
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
DisableADALSetSilentAuth
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableGuestCredProvider
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Identity
msoridDisableOstringReplace
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
LastBootTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\4A92E
4A92E
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
MSForms
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\Common\ExdCache\Excel8.0
MSComctlLib
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\StartupItems
pl=
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Resiliency\DocumentRecovery\5E901
5E901
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\General
FileFormatBallotBoxAppIDBootedOnce
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages
en-US
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00006109110000000000000000F01FEC\Usage
EXCELFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingConfigurableSettings
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastSyncTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\Roaming
RoamingLastWriteTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\IOAV
LastBootTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Excel\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
da-
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\2D864
2D864
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
`i-
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\44431
44431
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
clean
There are 60 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
12AD5000
unkown
page read and write
clean
15596000
unkown
page read and write
clean
152EF000
unkown
page read and write
clean
2788C689000
unkown
page read and write
clean
E0F8000
unkown
page read and write
clean
FF5E0000
unkown image
page readonly
clean
1AEA9CE000
stack
page read and write
clean
1545F000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
E0DE000
unkown
page read and write
clean
7FF553766000
unkown image
page readonly
clean
1A0000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
7F530000
unkown image
page readonly
clean
C476000
unkown
page read and write
clean
153C1000
unkown
page read and write
clean
15C70000
unkown
page read and write
clean
14F40000
unkown image
page readonly
clean
F19C000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
7FF5468E0000
unkown image
page readonly
clean
E103000
unkown
page read and write
clean
15C10000
unkown
page read and write
clean
15D20000
unkown
page read and write
clean
3CA000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
15C40000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
7DF568B12000
unkown image
page readonly
clean
F11A000
unkown
page read and write
clean
15C08000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
7FF5B0A1C000
unkown image
page readonly
clean
12C7E000
unkown
page read and write
clean
154FE000
unkown
page read and write
clean
F0FD000
unkown
page read and write
clean
14F31000
unkown
page read and write
clean
E093000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
14F3F000
unkown
page read and write
clean
C0DD000
unkown
page read and write
clean
7FF5531E0000
unkown image
page readonly
clean
129F2000
unkown
page read and write
clean
154E3000
unkown
page read and write
clean
2703000
heap private
page read and write
clean
7FF4F11E8000
unkown image
page readonly
clean
2660000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
677376A000
unkown
page read and write
clean
12C79000
unkown
page read and write
clean
169B96E0000
unkown image
page readonly
clean
7F1F0000
unkown image
page readonly
clean
F1C9000
unkown
page read and write
clean
12A13000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
15A1A000
unkown
page read and write
clean
15285000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
12BBB000
unkown
page read and write
clean
7FF553940000
unkown image
page readonly
clean
F1AC000
unkown
page read and write
clean
7F642000
unkown image
page readonly
clean
154FA000
unkown
page read and write
clean
E0D1000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
1538F000
unkown
page read and write
clean
1954C000
unkown
page read and write
clean
2788CD87000
unkown
page read and write
clean
2AE50C3C000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
7FF553575000
unkown image
page readonly
clean
12BAE000
unkown
page read and write
clean
25D0000
stack
page read and write
clean
180CCD00000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
2950000
unkown image
page readonly
clean
2788C600000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
154F7000
unkown
page read and write
clean
7F2C0000
unkown image
page readonly
clean
15A12000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
A50000
unkown image
page readonly
clean
12A88000
unkown
page read and write
clean
F048000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
1659A000
unkown image
page read and write
clean
15285000
unkown
page read and write
clean
154FD000
unkown
page read and write
clean
28C7000
unkown image
page readonly
clean
12B76000
unkown
page read and write
clean
E10A000
unkown
page read and write
clean
15285000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
51A000
heap default
page read and write
clean
12B84000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
7F1D2000
unkown image
page readonly
clean
C381000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
B025000
unkown
page read and write
clean
7FF5463A6000
unkown image
page readonly
clean
7F1E2000
unkown image
page readonly
clean
DD90000
unkown
page read and write
clean
2788CD15000
unkown
page read and write
clean
F0C9000
unkown
page read and write
clean
7FF5B0A5E000
unkown image
page readonly
clean
1599B000
unkown
page read and write
clean
15ED0000
heap private
page read and write
clean
12B7B000
unkown
page read and write
clean
2788C63C000
unkown
page read and write
clean
359000
unkown
page read and write
clean
154EE000
unkown
page read and write
clean
E10A000
unkown
page read and write
clean
2AE50A80000
unkown image
page read and write
clean
12BC9000
unkown
page read and write
clean
E079000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
29C5000
unkown image
page readonly
clean
E127000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
15355000
unkown
page read and write
clean
154DC000
unkown
page read and write
clean
7FF59FC8B000
unkown image
page readonly
clean
14E30000
unkown
page read and write
clean
7FF5539D7000
unkown image
page readonly
clean
155FB000
unkown
page read and write
clean
56E000
stack
page read and write
clean
DAA0000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
2788CC02000
unkown
page read and write
clean
C42A000
unkown
page read and write
clean
7FF5B095C000
unkown image
page readonly
clean
C13F000
unkown
page read and write
clean
7FF59FD64000
unkown image
page readonly
clean
12A23000
unkown
page read and write
clean
70C000
unkown
page read and write
clean
7DF568B20000
unkown image
page readonly
clean
12B8E000
unkown
page read and write
clean
E040000
unkown
page read and write
clean
5E0000
heap default
page read and write
clean
4070000
unkown image
page readonly
clean
169B9863000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
6FB000
unkown
page read and write
clean
7FF4F0AD3000
unkown image
page readonly
clean
154E3000
unkown
page read and write
clean
510000
heap default
page read and write
clean
15A35000
unkown
page read and write
clean
42B4000
heap private
page read and write
clean
F052000
unkown
page read and write
clean
12A0E000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
26B5000
unkown image
page readonly
clean
129E7000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
7DF55BCF0000
unkown image
page readonly
clean
152EC000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
F0A6000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
7DF55BCE0000
unkown image
page readonly
clean
15C10000
unkown
page read and write
clean
29AA000
unkown image
page readonly
clean
154F0000
unkown
page read and write
clean
153B9000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
152A7000
unkown
page read and write
clean
15C57000
unkown
page read and write
clean
12A3F000
unkown
page read and write
clean
610000
unkown image
page readonly
clean
180CCB20000
heap default
page read and write
clean
15C13000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
7FF55398A000
unkown image
page readonly
clean
12ACE000
unkown
page read and write
clean
15993000
unkown
page read and write
clean
154DE000
unkown
page read and write
clean
F1C9000
unkown
page read and write
clean
67AD0000
unkown image
page readonly
clean
7FF5B0AE2000
unkown image
page readonly
clean
155BE000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
E10A000
unkown
page read and write
clean
29BD000
unkown image
page readonly
clean
2788CBF0000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
738000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
E127000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
7FF546BCE000
unkown image
page readonly
clean
C577000
unkown
page read and write
clean
7FF59FCF9000
unkown image
page readonly
clean
15C0C000
unkown
page read and write
clean
66E000
stack
page read and write
clean
15355000
unkown
page read and write
clean
F10A000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
3CE000
unkown
page read and write
clean
114E0000
unkown
page read and write
clean
154E7000
unkown
page read and write
clean
15355000
unkown
page read and write
clean
15355000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
1AEA8CC000
unkown
page read and write
clean
6773AFF000
stack
page read and write
clean
7FF4F11D4000
unkown image
page readonly
clean
12B15000
unkown
page read and write
clean
7DE000
stack
page read and write
clean
2788CD4A000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
155A4000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
129DD000
unkown
page read and write
clean
90A000
heap private
page read and write
clean
2788CD98000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
2788CD59000
unkown
page read and write
clean
F0B2000
unkown
page read and write
clean
7DF5C5B60000
unkown image
page readonly
clean
12A0E000
unkown
page read and write
clean
2788CD74000
unkown
page read and write
clean
729000
unkown
page read and write
clean
1582D000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
7DF5C5B60000
unkown image
page readonly
clean
12ACE000
unkown
page read and write
clean
605000
unkown
page read and write
clean
A10000
unkown image
page readonly
clean
128EC000
unkown
page read and write
clean
538000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
FCB9EF7000
stack
page read and write
clean
12ADE000
unkown
page read and write
clean
154EC000
unkown
page read and write
clean
152BD000
unkown
page read and write
clean
2740000
heap private
page read and write
clean
29CC000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
1AEACFC000
stack
page read and write
clean
154C3000
unkown
page read and write
clean
4B0000
unkown image
page readonly
clean
154EE000
unkown
page read and write
clean
F103000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
C428000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
5C0000
unkown
page read and write
clean
15266000
unkown
page read and write
clean
7FF5B09EA000
unkown image
page readonly
clean
12B8A000
unkown
page read and write
clean
2788CBF0000
unkown
page read and write
clean
14FA0000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
2788CD84000
unkown
page read and write
clean
FF4C6000
unkown
page execute read
clean
7F1E2000
unkown image
page readonly
clean
2788CD78000
unkown
page read and write
clean
450000
unkown
page read and write
clean
533000
heap default
page read and write
clean
15D50000
unkown
page read and write
clean
E07E000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
2788C656000
unkown
page read and write
clean
FCB99FF000
stack
page read and write
clean
603000
heap default
page read and write
clean
F111000
unkown
page read and write
clean
2788CD99000
unkown
page read and write
clean
2AE50C49000
unkown
page read and write
clean
F0A6000
unkown
page read and write
clean
1954C000
unkown
page read and write
clean
7FF553904000
unkown image
page readonly
clean
128DA000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
1954C000
unkown
page read and write
clean
6C0000
heap default
page read and write
clean
2AE50C7B000
unkown
page read and write
clean
1AEAF77000
stack
page read and write
clean
E04D000
unkown
page read and write
clean
FF5D2000
unkown image
page readonly
clean
7FF546AAD000
unkown image
page readonly
clean
157E7000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
15BF0000
unkown
page read and write
clean
2788C6A8000
unkown
page read and write
clean
2A98000
unkown image
page readonly
clean
F06B000
unkown
page read and write
clean
E030000
unkown
page read and write
clean
650000
heap default
page read and write
clean
14F48000
unkown
page read and write
clean
2A03000
unkown image
page readonly
clean
157E7000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
154EE000
unkown
page read and write
clean
15488000
unkown
page read and write
clean
29E9000
unkown image
page readonly
clean
2788D202000
unkown
page read and write
clean
1599E000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
12AD5000
unkown
page read and write
clean
F1BB000
unkown
page read and write
clean
86E000
stack
page read and write
clean
154EC000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
1522D000
unkown
page read and write
clean
E6BE71C000
unkown
page read and write
clean
F18E000
unkown
page read and write
clean
2788CD64000
unkown
page read and write
clean
E057000
unkown
page read and write
clean
16F83698000
unkown
page read and write
clean
15415000
unkown
page read and write
clean
F0F8000
unkown
page read and write
clean
7FF5B05C5000
unkown image
page readonly
clean
2788C500000
unkown image
page readonly
clean
159D9000
unkown
page read and write
clean
2788C613000
unkown
page read and write
clean
152BD000
unkown
page read and write
clean
12A70000
unkown
page read and write
clean
15363000
unkown
page read and write
clean
E0E4000
unkown
page read and write
clean
2A0A000
unkown image
page readonly
clean
12BAA000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
2A92000
unkown image
page readonly
clean
F115000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
E078000
unkown
page read and write
clean
19558000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
2788D190000
unkown image
page read and write
clean
703000
unkown
page read and write
clean
152EC000
unkown
page read and write
clean
15BF0000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
15DC7000
unkown
page read and write
clean
45C000
unkown
page read and write
clean
2788CDBF000
unkown
page read and write
clean
15327000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
12BAB000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
E0C5000
unkown
page read and write
clean
14F88000
unkown
page read and write
clean
1149E000
stack
page read and write
clean
2788CD98000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
7FF59FC97000
unkown image
page readonly
clean
2788CD74000
unkown
page read and write
clean
7DF5B4E02000
unkown image
page readonly
clean
C1D2000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
12ACE000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
2AE50C4B000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
1954C000
unkown
page read and write
clean
15D60000
unkown
page read and write
clean
F0C9000
unkown
page read and write
clean
910000
unkown image
page readonly
clean
D31C000
unkown
page read and write
clean
2788C655000
unkown
page read and write
clean
16F834A0000
unkown image
page readonly
clean
E0DC000
unkown
page read and write
clean
625000
heap default
page read and write
clean
625000
unkown
page read and write
clean
1AEA94E000
stack
page read and write
clean
154E3000
unkown
page read and write
clean
154C3000
unkown
page read and write
clean
7FF59FB7E000
unkown image
page readonly
clean
2788CDA9000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
2A75000
unkown image
page readonly
clean
16F835F0000
unkown image
page readonly
clean
82E000
stack
page read and write
clean
154EE000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
12A46000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
480000
unkown image
page readonly
clean
7FF59FBCD000
unkown image
page readonly
clean
C0FF000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
180CD402000
unkown
page read and write
clean
129FC000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
129E7000
unkown
page read and write
clean
7DF5B4DF0000
unkown image
page readonly
clean
FCB98FC000
unkown
page read and write
clean
E6BEB7B000
stack
page read and write
clean
C165000
unkown
page read and write
clean
2788CD87000
unkown
page read and write
clean
180CCC82000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
15338000
unkown
page read and write
clean
25A0000
stack
page read and write
clean
29BD000
unkown image
page readonly
clean
12B8E000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
F115000
unkown
page read and write
clean
708000
unkown
page read and write
clean
7FF4F1272000
unkown image
page readonly
clean
15A25000
unkown
page read and write
clean
154F7000
unkown
page read and write
clean
F10A000
unkown
page read and write
clean
11C18000
unkown
page read and write
clean
14C80000
unkown
page read and write
clean
7FF55350E000
unkown image
page readonly
clean
12B74000
unkown
page read and write
clean
2788CD78000
unkown
page read and write
clean
12BBB000
unkown
page read and write
clean
152C0000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
410000
unkown image
page readonly
clean
480000
unkown image
page readonly
clean
14C90000
unkown
page read and write
clean
11C14000
unkown
page read and write
clean
EF70000
unkown
page read and write
clean
15294000
unkown
page read and write
clean
15A2D000
unkown
page read and write
clean
2788CDBA000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
7FF553A91000
unkown image
page readonly
clean
7FF546C51000
unkown image
page readonly
clean
12B6B000
unkown
page read and write
clean
15508000
unkown
page read and write
clean
1599B000
unkown
page read and write
clean
12C7E000
unkown
page read and write
clean
14F5C000
unkown
page read and write
clean
2788CDBA000
unkown
page read and write
clean
12C76000
unkown
page read and write
clean
154DC000
unkown
page read and write
clean
12C79000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
F0DC000
unkown
page read and write
clean
C90000
unkown image
page readonly
clean
12A2F000
unkown
page read and write
clean
155F9000
unkown
page read and write
clean
2788CDBB000
unkown
page read and write
clean
15E44000
unkown
page read and write
clean
153C1000
unkown
page read and write
clean
7FF5B0A44000
unkown image
page readonly
clean
D96E000
stack
page read and write
clean
12A43000
unkown
page read and write
clean
DAC0000
unkown
page read and write
clean
29FD000
unkown image
page readonly
clean
F139000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
F1C9000
unkown
page read and write
clean
7FF55399E000
unkown image
page readonly
clean
12BAB000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
7F640000
unkown image
page readonly
clean
15510000
unkown
page read and write
clean
1954C000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
180CCAC0000
heap private
page read and write
clean
15503000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
E3AC000
stack
page read and write
clean
161BE000
stack
page read and write
clean
15595000
unkown
page read and write
clean
7FF55397F000
unkown image
page readonly
clean
1599B000
unkown
page read and write
clean
FF4B8000
unkown
page execute read
clean
7F2C2000
unkown image
page readonly
clean
2AE50AA0000
unkown image
page readonly
clean
12B84000
unkown
page read and write
clean
535000
unkown
page read and write
clean
7DF568B10000
unkown image
page readonly
clean
4B0000
unkown image
page readonly
clean
15C20000
unkown
page read and write
clean
7FF59FB61000
unkown image
page readonly
clean
7FF546B97000
unkown image
page readonly
clean
E06F000
unkown
page read and write
clean
F0FD000
unkown
page read and write
clean
7FF59FB7B000
unkown image
page readonly
clean
7F650000
unkown image
page readonly
clean
7FF55390C000
unkown image
page readonly
clean
1550F000
unkown
page read and write
clean
12D3D000
stack
page read and write
clean
7DF5062F2000
unkown image
page readonly
clean
15232000
unkown
page read and write
clean
410000
unkown image
page readonly
clean
16595000
unkown image
page read and write
clean
15E13000
unkown
page read and write
clean
E0C8000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
410000
unkown image
page readonly
clean
15596000
unkown
page read and write
clean
7FF4F1185000
unkown image
page readonly
clean
2AE50C4C000
unkown
page read and write
clean
2788CD75000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
560000
unkown
page read and write
clean
7FF4F11B8000
unkown image
page readonly
clean
7FF553717000
unkown image
page readonly
clean
154EC000
unkown
page read and write
clean
2788CD70000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
2AE50C8D000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
12ACE000
unkown
page read and write
clean
15475000
unkown
page read and write
clean
2788CD9A000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
7EE000
stack
page read and write
clean
2788CD98000
unkown
page read and write
clean
7FF59FC7A000
unkown image
page readonly
clean
65B000
heap default
page read and write
clean
2788C3F0000
unkown image
page readonly
clean
F139000
unkown
page read and write
clean
15446000
unkown
page read and write
clean
E108000
unkown
page read and write
clean
2788CD7D000
unkown
page read and write
clean
7FF5532F3000
unkown image
page readonly
clean
7F2D2000
unkown image
page readonly
clean
2AE50C86000
unkown
page read and write
clean
11CBD000
unkown
page read and write
clean
2AE51180000
unkown image
page readonly
clean
400000
unkown image
page read and write
clean
2788CD70000
unkown
page read and write
clean
7DF4041C0000
unkown image
page readonly
clean
12BD5000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
F10F000
unkown
page read and write
clean
E101000
unkown
page read and write
clean
2788CD9B000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
2AE50C29000
unkown
page read and write
clean
157EE000
unkown
page read and write
clean
C039000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
E10A000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
7FF59FBE4000
unkown image
page readonly
clean
153B9000
unkown
page read and write
clean
E0EC000
unkown
page read and write
clean
2AE50D02000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
F10E000
unkown
page read and write
clean
15322000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
15595000
unkown
page read and write
clean
E108000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
C031000
unkown
page read and write
clean
2A75000
unkown image
page readonly
clean
12B8E000
unkown
page read and write
clean
1954D000
unkown
page read and write
clean
F1DD000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
475000
unkown
page read and write
clean
12B6B000
unkown
page read and write
clean
480000
unkown image
page readonly
clean
E0E4000
unkown
page read and write
clean
7FF553974000
unkown image
page readonly
clean
12A74000
unkown
page read and write
clean
14F2C000
unkown
page read and write
clean
D13D000
stack
page read and write
clean
7FF553512000
unkown image
page readonly
clean
12B88000
unkown
page read and write
clean
28D0000
unkown image
page readonly
clean
F113000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
FF5F0000
unkown image
page readonly
clean
12B86000
unkown
page read and write
clean
E086000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
A80000
unkown image
page readonly
clean
12B7F000
unkown
page read and write
clean
7DF55BCD0000
unkown image
page readonly
clean
12A0E000
unkown
page read and write
clean
154DC000
unkown
page read and write
clean
14F4C000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
1110D000
stack
page read and write
clean
154D0000
unkown
page read and write
clean
7FF55367A000
unkown image
page readonly
clean
12B8A000
unkown
page read and write
clean
727000
unkown
page read and write
clean
154F7000
unkown
page read and write
clean
2AE50C51000
unkown
page read and write
clean
D400000
unkown image
page readonly
clean
154E3000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
14F70000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
67AD1000
unkown image
page execute read
clean
14DDE000
stack
page read and write
clean
7FF546C44000
unkown image
page readonly
clean
F125000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
154DE000
unkown
page read and write
clean
12BAB000
unkown
page read and write
clean
80A000
heap private
page read and write
clean
1139E000
stack
page read and write
clean
12BBB000
unkown
page read and write
clean
7FF553942000
unkown image
page readonly
clean
154F7000
unkown
page read and write
clean
4D0000
unkown
page read and write
clean
16F83460000
unkown image
page read and write
clean
11C04000
unkown
page read and write
clean
7FF4F11FD000
unkown image
page readonly
clean
12B72000
unkown
page read and write
clean
15285000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
180CCC00000
unkown
page read and write
clean
7FF5B0954000
unkown image
page readonly
clean
6FB000
unkown
page read and write
clean
152BD000
unkown
page read and write
clean
4090000
heap private
page read and write
clean
15C4B000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
40F0000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
169B9D80000
unkown image
page readonly
clean
7F642000
unkown image
page readonly
clean
2A0F000
unkown image
page readonly
clean
E110000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
2788C654000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
7F0D0000
unkown image
page readonly
clean
E0D3000
unkown
page read and write
clean
15254000
unkown
page read and write
clean
7FF5469B1000
unkown image
page readonly
clean
12620000
unkown
page read and write
clean
2AD0000
unkown image
page readonly
clean
DE10000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
2AE50BD0000
unkown image
page readonly
clean
14CD0000
heap private
page read and write
clean
15C80000
unkown
page read and write
clean
154C3000
unkown
page read and write
clean
7FF546B6B000
unkown image
page readonly
clean
2788CDAF000
unkown
page read and write
clean
15CD0000
heap private
page read and write
clean
15363000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
4C0000
unkown image
page readonly
clean
67737EF000
stack
page read and write
clean
640000
unkown
page read and write
clean
15355000
unkown
page read and write
clean
2788C64E000
unkown
page read and write
clean
12BA0000
unkown
page read and write
clean
29FD000
unkown image
page readonly
clean
12F50000
heap private
page read and write
clean
FF4C1000
unkown
page execute read
clean
F10A000
unkown
page read and write
clean
41EF000
stack
page read and write
clean
7FF4F1271000
unkown image
page readonly
clean
2788D263000
unkown
page read and write
clean
16F83830000
heap private
page read and write
clean
154F7000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
152BD000
unkown
page read and write
clean
880000
unkown image
page readonly
clean
7F2D0000
unkown image
page readonly
clean
7FF553502000
unkown image
page readonly
clean
6773BFE000
stack
page read and write
clean
12B8E000
unkown
page read and write
clean
28D0000
unkown image
page readonly
clean
129DD000
unkown
page read and write
clean
2788CDB0000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
15323000
unkown
page read and write
clean
7440000
unkown
page read and write
clean
7FF5463A0000
unkown image
page readonly
clean
159C3000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
25E0000
stack
page read and write
clean
7F2E0000
unkown image
page readonly
clean
73E0000
unkown
page read and write
clean
2788CD9A000
unkown
page read and write
clean
E07E000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
7FF546B8F000
unkown image
page readonly
clean
15C30000
unkown
page read and write
clean
15210000
unkown
page read and write
clean
1697B000
unkown image
page read and write
clean
15C00000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
154D5000
unkown
page read and write
clean
F115000
unkown
page read and write
clean
7FF546B4C000
unkown image
page readonly
clean
610000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
7F1E0000
unkown image
page readonly
clean
154DE000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
F0B2000
unkown
page read and write
clean
12A09000
unkown
page read and write
clean
152BD000
unkown
page read and write
clean
7F2C0000
unkown image
page readonly
clean
12A88000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
538000
unkown
page read and write
clean
7FF59FCE8000
unkown image
page readonly
clean
154E5000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
7FF59FC7E000
unkown image
page readonly
clean
A30000
unkown image
page readonly
clean
2788C65D000
unkown
page read and write
clean
12B80000
unkown
page read and write
clean
FCBA1F7000
stack
page read and write
clean
2788CD6E000
unkown
page read and write
clean
FF5D2000
unkown image
page readonly
clean
E108000
unkown
page read and write
clean
7FF59FCAF000
unkown image
page readonly
clean
1531C000
unkown
page read and write
clean
608000
unkown
page read and write
clean
7FF55384A000
unkown image
page readonly
clean
7F632000
unkown image
page readonly
clean
153B9000
unkown
page read and write
clean
E6BE79E000
stack
page read and write
clean
12B52000
unkown
page read and write
clean
7F1D0000
unkown image
page readonly
clean
E0AD000
unkown
page read and write
clean
F103000
unkown
page read and write
clean
542000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
12B15000
unkown
page read and write
clean
890000
unkown
page read and write
clean
7F2C0000
unkown image
page readonly
clean
16F83667000
heap default
page read and write
clean
15522000
unkown
page read and write
clean
15323000
unkown
page read and write
clean
12A13000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
180CCD08000
unkown
page read and write
clean
154FD000
unkown
page read and write
clean
1528A000
unkown
page read and write
clean
180CCAD0000
unkown image
page readonly
clean
DDF0000
unkown
page read and write
clean
E6BEC7B000
stack
page read and write
clean
2788C694000
unkown
page read and write
clean
15323000
unkown
page read and write
clean
155FB000
unkown
page read and write
clean
154DE000
unkown
page read and write
clean
E10A000
unkown
page read and write
clean
7DF506302000
unkown image
page readonly
clean
F0B2000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
7FF5537F1000
unkown image
page readonly
clean
12AD7000
unkown
page read and write
clean
154DC000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
29F5000
unkown image
page readonly
clean
F115000
unkown
page read and write
clean
2788CD84000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
E108000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
C13C000
unkown
page read and write
clean
7FF553566000
unkown image
page readonly
clean
12B88000
unkown
page read and write
clean
2788C400000
unkown image
page readonly
clean
E119000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
154E7000
unkown
page read and write
clean
D326000
unkown
page read and write
clean
551000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
154EC000
unkown
page read and write
clean
FCB9FFE000
stack
page read and write
clean
12A72000
unkown
page read and write
clean
F198000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
7FF55375B000
unkown image
page readonly
clean
154D5000
unkown
page read and write
clean
FF4C7000
unkown
page readonly
clean
169B9800000
unkown
page read and write
clean
16F83A40000
unkown image
page readonly
clean
2A71000
unkown image
page readonly
clean
12B80000
unkown
page read and write
clean
7FF4F11DE000
unkown image
page readonly
clean
F19C000
unkown
page read and write
clean
15D20000
unkown
page read and write
clean
7FF5537A0000
unkown image
page readonly
clean
4F0000
unkown image
page readonly
clean
7FF4F118B000
unkown image
page readonly
clean
16F83676000
heap default
page read and write
clean
12A46000
unkown
page read and write
clean
2788CD9E000
unkown
page read and write
clean
2788CDB9000
unkown
page read and write
clean
4080000
unkown
page read and write
clean
E0DE000
unkown
page read and write
clean
F048000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
F198000
unkown
page read and write
clean
7FF5B0ADA000
unkown image
page readonly
clean
7FF546C52000
unkown image
page readonly
clean
2882000
unkown image
page readonly
clean
7F630000
unkown image
page readonly
clean
15508000
unkown
page read and write
clean
155F5000
unkown
page read and write
clean
15338000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
154FD000
unkown
page read and write
clean
159CD000
unkown
page read and write
clean
CE4D000
unkown
page read and write
clean
D3AC000
unkown
page read and write
clean
2788CD6C000
unkown
page read and write
clean
15E70000
unkown
page read and write
clean
29C5000
unkown image
page readonly
clean
12B7F000
unkown
page read and write
clean
12C7E000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
E0E5000
unkown
page read and write
clean
169B9902000
unkown
page read and write
clean
7FF4F11CA000
unkown image
page readonly
clean
2788CD9B000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
2A98000
unkown image
page readonly
clean
F0F8000
unkown
page read and write
clean
7FF5B09FB000
unkown image
page readonly
clean
15355000
unkown
page read and write
clean
15226000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
152B3000
unkown
page read and write
clean
1120C000
stack
page read and write
clean
12AF0000
unkown
page read and write
clean
7FF59F846000
unkown image
page readonly
clean
12B7F000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
12C76000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
C12C000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
288E000
unkown image
page readonly
clean
12A54000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
157E7000
unkown
page read and write
clean
2788CD77000
unkown
page read and write
clean
12A73000
unkown
page read and write
clean
67D29000
unkown image
page readonly
clean
155F9000
unkown
page read and write
clean
15551000
unkown
page read and write
clean
15387000
unkown
page read and write
clean
CE9E000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
E057000
unkown
page read and write
clean
CE4B000
unkown
page read and write
clean
29F7000
unkown image
page readonly
clean
154FA000
unkown
page read and write
clean
BA000
unkown
page read and write
clean
1550D000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
D54F000
stack
page read and write
clean
12AF0000
unkown
page read and write
clean
154E7000
unkown
page read and write
clean
4B0000
unkown image
page readonly
clean
F11C000
unkown
page read and write
clean
114E0000
unkown
page read and write
clean
155EF000
unkown
page read and write
clean
180CCC53000
unkown
page read and write
clean
F10A000
unkown
page read and write
clean
2788CD86000
unkown
page read and write
clean
159DA000
unkown
page read and write
clean
7FF546726000
unkown image
page readonly
clean
12B76000
unkown
page read and write
clean
7DF568B12000
unkown image
page readonly
clean
F18E000
unkown
page read and write
clean
15228000
unkown
page read and write
clean
47B000
unkown
page read and write
clean
288E000
unkown image
page readonly
clean
FF5D0000
unkown image
page readonly
clean
12B76000
unkown
page read and write
clean
2788CD10000
unkown
page read and write
clean
180CCC2A000
unkown
page read and write
clean
169B9C00000
unkown image
page readonly
clean
C251000
unkown
page read and write
clean
2788CD9F000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
D0FC000
stack
page read and write
clean
12B72000
unkown
page read and write
clean
43A000
heap default
page read and write
clean
152EC000
unkown
page read and write
clean
2A2B000
unkown image
page readonly
clean
7FF553720000
unkown image
page readonly
clean
7FF553A84000
unkown image
page readonly
clean
74E000
unkown
page read and write
clean
E0DE000
unkown
page read and write
clean
6FE000
unkown
page read and write
clean
F10E000
unkown
page read and write
clean
600000
unkown
page read and write
clean
15350000
unkown
page read and write
clean
2788CD75000
unkown
page read and write
clean
E0E1000
unkown
page read and write
clean
E0D7000
unkown
page read and write
clean
510000
unkown
page read and write
clean
729000
unkown
page read and write
clean
29C5000
unkown image
page readonly
clean
67CF3000
unkown image
page readonly
clean
12B70000
unkown
page read and write
clean
165A3000
unkown image
page read and write
clean
F10E000
unkown
page read and write
clean
7FF5538A8000
unkown image
page readonly
clean
7450000
unkown
page read and write
clean
154A3000
unkown
page read and write
clean
154E7000
unkown
page read and write
clean
7F2E0000
unkown image
page readonly
clean
E127000
unkown
page read and write
clean
E10B000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
154E3000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
B10000
unkown image
page readonly
clean
E0CF000
unkown
page read and write
clean
7F632000
unkown image
page readonly
clean
2788D202000
unkown
page read and write
clean
14F80000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
E108000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
7FF546B5A000
unkown image
page readonly
clean
25C0000
stack
page read and write
clean
C31F000
unkown
page read and write
clean
7FF546BD9000
unkown image
page readonly
clean
7DF568B30000
unkown image
page readonly
clean
15323000
unkown
page read and write
clean
E0C2000
unkown
page read and write
clean
2788D202000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
34550000
unkown
page execute read
clean
1554D000
unkown
page read and write
clean
490000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
7DF506302000
unkown image
page readonly
clean
12AD7000
unkown
page read and write
clean
2788CD70000
unkown
page read and write
clean
180CCC3C000
unkown
page read and write
clean
F115000
unkown
page read and write
clean
6F4000
unkown
page read and write
clean
C0E5000
unkown
page read and write
clean
FF4C8000
unkown
page execute read
clean
F18E000
unkown
page read and write
clean
7F640000
unkown image
page readonly
clean
E6BEA7E000
stack
page read and write
clean
12BBB000
unkown
page read and write
clean
12ACE000
unkown
page read and write
clean
2788CD65000
unkown
page read and write
clean
154E3000
unkown
page read and write
clean
169B987F000
unkown
page read and write
clean
2A11000
unkown image
page readonly
clean
12A13000
unkown
page read and write
clean
12BBB000
unkown
page read and write
clean
7FF5539A0000
unkown image
page readonly
clean
270E000
unkown image
page readonly
clean
2AE51402000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
E250000
unkown
page read and write
clean
D58E000
stack
page read and write
clean
14F90000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
4C0000
unkown image
page readonly
clean
16F83687000
unkown
page read and write
clean
730000
unkown
page read and write
clean
DDC0000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
7FF553881000
unkown image
page readonly
clean
7FF553A08000
unkown image
page readonly
clean
15355000
unkown
page read and write
clean
2788CDBE000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
6EE000
heap default
page read and write
clean
6B0000
unkown image
page readonly
clean
15C4D000
unkown
page read and write
clean
12ACE000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
15294000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
15595000
unkown
page read and write
clean
1954C000
unkown
page read and write
clean
1550B000
unkown
page read and write
clean
7FF4F11F9000
unkown image
page readonly
clean
7FF5B08EE000
unkown image
page readonly
clean
125E0000
unkown
page read and write
clean
7FF4F1180000
unkown image
page readonly
clean
E07E000
unkown
page read and write
clean
152EC000
unkown
page read and write
clean
12A43000
unkown
page read and write
clean
100000
unkown image
page readonly
clean
F111000
unkown
page read and write
clean
2788CD77000
unkown
page read and write
clean
180CCC4D000
unkown
page read and write
clean
154E7000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
14F6D000
unkown
page read and write
clean
2A22000
unkown image
page readonly
clean
E101000
unkown
page read and write
clean
15491000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
4027000
stack
page read and write
clean
F19C000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
D6CE000
stack
page read and write
clean
D44E000
stack
page read and write
clean
12BAB000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
160000
unkown
page read and write
clean
7FF546A5B000
unkown image
page readonly
clean
12ADE000
unkown
page read and write
clean
2788CD9A000
unkown
page read and write
clean
F0F8000
unkown
page read and write
clean
1161E000
stack
page read and write
clean
74E000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
15504000
unkown
page read and write
clean
410000
unkown image
page readonly
clean
2788CDC5000
unkown
page read and write
clean
7F642000
unkown image
page readonly
clean
1599C000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
2788CDB9000
unkown
page read and write
clean
12BAB000
unkown
page read and write
clean
7FF5539A5000
unkown image
page readonly
clean
FCBA0F8000
stack
page read and write
clean
9F0000
unkown image
page readonly
clean
C256000
unkown
page read and write
clean
2A26000
unkown image
page readonly
clean
7FF55398C000
unkown image
page readonly
clean
12B86000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
D342000
unkown
page read and write
clean
1554B000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
12A66000
unkown
page read and write
clean
5BE000
stack
page read and write
clean
169B9600000
heap default
page read and write
clean
2788CD64000
unkown
page read and write
clean
7FF59FC85000
unkown image
page readonly
clean
159D9000
unkown
page read and write
clean
7FF5B0767000
unkown image
page readonly
clean
F0DC000
unkown
page read and write
clean
12BA0000
unkown
page read and write
clean
7DF5B4DF0000
unkown image
page readonly
clean
1AEB17E000
stack
page read and write
clean
410000
unkown image
page readonly
clean
F131000
unkown
page read and write
clean
5A0000
heap default
page read and write
clean
12BAB000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
16590000
unkown image
page read and write
clean
152F2000
unkown
page read and write
clean
738000
unkown
page read and write
clean
600000
unkown image
page readonly
clean
F11C000
unkown
page read and write
clean
C10000
unkown image
page readonly
clean
2788CD74000
unkown
page read and write
clean
7DF5C5B72000
unkown image
page readonly
clean
7FF5532F7000
unkown image
page readonly
clean
12BE4000
unkown
page read and write
clean
15355000
unkown
page read and write
clean
E0AD000
unkown
page read and write
clean
2788CD70000
unkown
page read and write
clean
15A14000
unkown
page read and write
clean
29F5000
unkown image
page readonly
clean
F000000
unkown
page read and write
clean
16F83699000
unkown
page read and write
clean
7DF4C3A30000
unkown image
page readonly
clean
E22E000
stack
page read and write
clean
7F2C0000
unkown image
page readonly
clean
C5AF000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
E108000
unkown
page read and write
clean
C02E000
unkown
page read and write
clean
F1C9000
unkown
page read and write
clean
169B95A0000
heap private
page read and write
clean
154F7000
unkown
page read and write
clean
E6BEF7F000
stack
page read and write
clean
F11A000
unkown
page read and write
clean
DDF0000
unkown
page read and write
clean
FF4CC000
unkown
page execute read
clean
2788C671000
unkown
page read and write
clean
1526F000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
15224000
unkown
page read and write
clean
E127000
unkown
page read and write
clean
2788CD76000
unkown
page read and write
clean
42C0000
heap private
page read and write
clean
F0A6000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
152BD000
unkown
page read and write
clean
1550D000
unkown
page read and write
clean
1276D000
stack
page read and write
clean
7DF459BA0000
unkown image
page readonly
clean
DBDF000
stack
page read and write
clean
154E3000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
129EB000
unkown
page read and write
clean
FF4CE000
unkown
page execute read
clean
F11C000
unkown
page read and write
clean
12BBB000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
12BAB000
unkown
page read and write
clean
46A000
unkown
page read and write
clean
550000
heap private
page read and write
clean
F0FD000
unkown
page read and write
clean
4B0000
unkown image
page readonly
clean
C14C000
unkown
page read and write
clean
F1C9000
unkown
page read and write
clean
12BA3000
unkown
page read and write
clean
FF4B0000
unkown
page execute read
clean
12BAA000
unkown
page read and write
clean
7FF546A03000
unkown image
page readonly
clean
F115000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
2788CD6E000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
151EC000
stack
page read and write
clean
2AE50C13000
unkown
page read and write
clean
2A98000
unkown image
page readonly
clean
4C0000
unkown image
page readonly
clean
1C0000
unkown image
page read and write
clean
FF5F0000
unkown image
page readonly
clean
7FF5531E6000
unkown image
page readonly
clean
1AEAE7E000
stack
page read and write
clean
154FD000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
DAD0000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
14DE0000
unkown
page read and write
clean
15C90000
unkown
page read and write
clean
E0AD000
unkown
page read and write
clean
1528A000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
12A13000
unkown
page read and write
clean
11BEB000
unkown
page read and write
clean
12A73000
unkown
page read and write
clean
154A4000
unkown
page read and write
clean
7FF59FD6A000
unkown image
page readonly
clean
152EB000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
7FF5B0A34000
unkown image
page readonly
clean
2A26000
unkown image
page readonly
clean
2788CD98000
unkown
page read and write
clean
7FF55396F000
unkown image
page readonly
clean
12B8A000
unkown
page read and write
clean
2A71000
unkown image
page readonly
clean
FF5E2000
unkown image
page readonly
clean
F139000
unkown
page read and write
clean
548000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
35D000
unkown
page read and write
clean
7FF5B09F5000
unkown image
page readonly
clean
2788C6EF000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
530000
unkown image
page readonly
clean
12A72000
unkown
page read and write
clean
169B9829000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
7FF546B8C000
unkown image
page readonly
clean
15258000
unkown
page read and write
clean
152F2000
unkown
page read and write
clean
15232000
unkown
page read and write
clean
554000
heap private
page read and write
clean
12B84000
unkown
page read and write
clean
C044000
unkown
page read and write
clean
155F5000
unkown
page read and write
clean
F198000
unkown
page read and write
clean
7FF59F4C0000
unkown image
page readonly
clean
F10E000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
12A13000
unkown
page read and write
clean
6F2000
heap default
page read and write
clean
12BE4000
unkown
page read and write
clean
29E9000
unkown image
page readonly
clean
7FF546AB3000
unkown image
page readonly
clean
2788CDA9000
unkown
page read and write
clean
F2977E000
stack
page read and write
clean
1D0000
unkown image
page readonly
clean
7F1D2000
unkown image
page readonly
clean
1528A000
unkown
page read and write
clean
1D0000
unkown image
page readonly
clean
12B76000
unkown
page read and write
clean
159D9000
unkown
page read and write
clean
410000
unkown image
page readonly
clean
1523C000
unkown
page read and write
clean
12BA0000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
15A37000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
FF4BA000
unkown
page execute read
clean
F103000
unkown
page read and write
clean
7F2D0000
unkown image
page readonly
clean
2788CD6E000
unkown
page read and write
clean
180CCD13000
unkown
page read and write
clean
2788CD9C000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
7FF4F11AF000
unkown image
page readonly
clean
2788CB80000
unkown image
page readonly
clean
12BE4000
unkown
page read and write
clean
6773C7C000
stack
page read and write
clean
15993000
unkown
page read and write
clean
C136000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
169B9590000
unkown image
page read and write
clean
16F835B0000
unkown
page read and write
clean
16F83669000
heap default
page read and write
clean
12BB2000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
6773A7E000
stack
page read and write
clean
7FF59FB41000
unkown image
page readonly
clean
7F2D0000
unkown image
page readonly
clean
1599B000
unkown
page read and write
clean
E129000
unkown
page read and write
clean
D3B2000
unkown
page read and write
clean
169B9E02000
unkown
page read and write
clean
1528F000
unkown
page read and write
clean
2AE50C56000
unkown
page read and write
clean
12ACE000
unkown
page read and write
clean
2788C658000
unkown
page read and write
clean
7F632000
unkown image
page readonly
clean
154DC000
unkown
page read and write
clean
42B0000
heap private
page read and write
clean
7FF553861000
unkown image
page readonly
clean
12AD5000
unkown
page read and write
clean
2788C6F9000
unkown
page read and write
clean
E10B000
unkown
page read and write
clean
15285000
unkown
page read and write
clean
67D26000
unkown image
page write copy
clean
EBEC000
stack
page read and write
clean
12B74000
unkown
page read and write
clean
129DD000
unkown
page read and write
clean
15A39000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
14F33000
unkown
page read and write
clean
15323000
unkown
page read and write
clean
6AE000
stack
page read and write
clean
7FF59FCDF000
unkown image
page readonly
clean
F125000
unkown
page read and write
clean
F115000
unkown
page read and write
clean
2788C650000
unkown
page read and write
clean
7DF568B22000
unkown image
page readonly
clean
15302000
unkown
page read and write
clean
1524D000
unkown
page read and write
clean
7FF5532A2000
unkown image
page readonly
clean
7FF5538ED000
unkown image
page readonly
clean
7FF55347E000
unkown image
page readonly
clean
12BBB000
unkown
page read and write
clean
C42D000
unkown
page read and write
clean
15285000
unkown
page read and write
clean
E078000
unkown
page read and write
clean
F18E000
unkown
page read and write
clean
F050000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
12A3F000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
F131000
unkown
page read and write
clean
180CD010000
unkown image
page readonly
clean
1528F000
unkown
page read and write
clean
7FF5B0A4F000
unkown image
page readonly
clean
29AA000
unkown image
page readonly
clean
1582D000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
E114000
unkown
page read and write
clean
7FF59F855000
unkown image
page readonly
clean
E10B000
unkown
page read and write
clean
2788CD76000
unkown
page read and write
clean
D7CF000
stack
page read and write
clean
15595000
unkown
page read and write
clean
6F6000
unkown
page read and write
clean
7FF5B0AE1000
unkown image
page readonly
clean
FF4A5000
unkown
page execute read
clean
7FF5B09EE000
unkown image
page readonly
clean
157E8000
unkown
page read and write
clean
10FB0000
unkown
page read and write
clean
169B9908000
unkown
page read and write
clean
154EC000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
EAE000
unkown image
page readonly
clean
15285000
unkown
page read and write
clean
12AF8000
unkown
page read and write
clean
25C0000
stack
page read and write
clean
F2967B000
unkown
page read and write
clean
2788CD9F000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
12AD7000
unkown
page read and write
clean
1522D000
unkown
page read and write
clean
E0AD000
unkown
page read and write
clean
180CCD02000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
15323000
unkown
page read and write
clean
14EF0000
unkown image
page readonly
clean
12AD5000
unkown
page read and write
clean
14E60000
heap private
page read and write
clean
F111000
unkown
page read and write
clean
2788CA00000
unkown image
page readonly
clean
2788C6DB000
unkown
page read and write
clean
C170000
unkown
page read and write
clean
14F35000
unkown
page read and write
clean
5B0000
unkown
page read and write
clean
E088000
unkown
page read and write
clean
1524C000
unkown
page read and write
clean
E10B000
unkown
page read and write
clean
F115000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
7FF546BBF000
unkown image
page readonly
clean
152EB000
unkown
page read and write
clean
E11C000
unkown
page read and write
clean
C272000
unkown
page read and write
clean
7FF5B0A27000
unkown image
page readonly
clean
71D000
unkown
page read and write
clean
180CCC6F000
unkown
page read and write
clean
E0C8000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
154E7000
unkown
page read and write
clean
7F642000
unkown image
page readonly
clean
7FF5B0A58000
unkown image
page readonly
clean
F131000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
12610000
unkown
page read and write
clean
159D9000
unkown
page read and write
clean
11BE4000
unkown
page read and write
clean
1547F000
unkown
page read and write
clean
12BAA000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
E0D7000
unkown
page read and write
clean
C1F3000
unkown
page read and write
clean
154DE000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
1550A000
unkown
page read and write
clean
11680000
unkown image
page read and write
clean
15595000
unkown
page read and write
clean
12ACE000
unkown
page read and write
clean
155EF000
unkown
page read and write
clean
2AE50AC0000
unkown image
page readonly
clean
7FF5538A3000
unkown image
page readonly
clean
29DC000
unkown image
page readonly
clean
180CCB00000
unkown image
page readonly
clean
12A88000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
159D9000
unkown
page read and write
clean
154C3000
unkown
page read and write
clean
14C70000
heap private
page read and write
clean
F06B000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
C310000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
D90F000
stack
page read and write
clean
2788CDAF000
unkown
page read and write
clean
580000
unkown image
page readonly
clean
E125000
unkown
page read and write
clean
7FF5B05B6000
unkown image
page readonly
clean
12B15000
unkown
page read and write
clean
15355000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
114E0000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
F010000
unkown
page read and write
clean
E07E000
unkown
page read and write
clean
E0E2000
unkown
page read and write
clean
D33C000
unkown
page read and write
clean
7DF55BCE2000
unkown image
page readonly
clean
1599E000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
2788C629000
unkown
page read and write
clean
2999000
unkown image
page readonly
clean
2788CD98000
unkown
page read and write
clean
154C3000
unkown
page read and write
clean
159D0000
unkown
page read and write
clean
F18E000
unkown
page read and write
clean
15A26000
unkown
page read and write
clean
7FF5B066B000
unkown image
page readonly
clean
2A0A000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
2788CDA9000
unkown
page read and write
clean
169B987F000
unkown
page read and write
clean
7DF568B30000
unkown image
page readonly
clean
727000
unkown
page read and write
clean
B90000
unkown image
page readonly
clean
7FF5537D4000
unkown image
page readonly
clean
F1AC000
unkown
page read and write
clean
129F2000
unkown
page read and write
clean
7FF59FB23000
unkown image
page readonly
clean
154DC000
unkown
page read and write
clean
2788CD77000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
6FE000
unkown
page read and write
clean
E2AD000
stack
page read and write
clean
FF495000
unkown
page execute read
clean
154E3000
unkown
page read and write
clean
2A26000
unkown image
page readonly
clean
12B7B000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
169B95B0000
unkown image
page readonly
clean
12BC9000
unkown
page read and write
clean
2999000
unkown image
page readonly
clean
154FD000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
7F640000
unkown image
page readonly
clean
12B70000
unkown
page read and write
clean
570000
unkown image
page readonly
clean
710000
unkown
page read and write
clean
F230000
unkown image
page readonly
clean
12B74000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
C0EE000
unkown
page read and write
clean
12C7E000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
7DF5C5B80000
unkown image
page readonly
clean
15E80000
unkown
page read and write
clean
15491000
unkown
page read and write
clean
555000
unkown
page read and write
clean
155FB000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
169B985E000
unkown
page read and write
clean
1535E000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
15510000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
169B989D000
unkown
page read and write
clean
7F2D0000
unkown image
page readonly
clean
154F7000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
155FA000
unkown
page read and write
clean
154F0000
unkown
page read and write
clean
7FF546A41000
unkown image
page readonly
clean
7F650000
unkown image
page readonly
clean
7DF5C5B62000
unkown image
page readonly
clean
12B70000
unkown
page read and write
clean
E088000
unkown
page read and write
clean
154E3000
unkown
page read and write
clean
25B0000
stack
page read and write
clean
154D5000
unkown
page read and write
clean
12A74000
unkown
page read and write
clean
159D9000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
2788CDCE000
unkown
page read and write
clean
F020000
unkown
page read and write
clean
807000
heap private
page read and write
clean
7FF5B05B0000
unkown image
page readonly
clean
F11A000
unkown
page read and write
clean
159D9000
unkown
page read and write
clean
810000
unkown image
page readonly
clean
E088000
unkown
page read and write
clean
CF0B000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
70C000
unkown
page read and write
clean
E088000
unkown
page read and write
clean
154EE000
unkown
page read and write
clean
2788CD9B000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
E0C2000
unkown
page read and write
clean
C1D4000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
152ED000
unkown
page read and write
clean
154FA000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
F10A000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
16F8368F000
unkown
page read and write
clean
F0DC000
unkown
page read and write
clean
154FA000
unkown
page read and write
clean
7FF546AC4000
unkown image
page readonly
clean
2882000
unkown image
page readonly
clean
15C68000
unkown
page read and write
clean
7FF553560000
unkown image
page readonly
clean
12B7D000
unkown
page read and write
clean
2788CD00000
unkown
page read and write
clean
159DD000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
2A84000
unkown image
page readonly
clean
169B985A000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
12E3E000
stack
page read and write
clean
29CC000
unkown image
page readonly
clean
F1AC000
unkown
page read and write
clean
151FB000
unkown
page read and write
clean
E0C5000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
2788D140000
unkown image
page write copy
clean
125F0000
unkown
page read and write
clean
16F83671000
unkown
page read and write
clean
14F83000
unkown
page read and write
clean
154F0000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
7F2C0000
unkown image
page readonly
clean
608000
unkown
page read and write
clean
129F2000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
733E000
stack
page read and write
clean
F0C9000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
129DD000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
154D1000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
11670000
unkown image
page read and write
clean
180000
unkown image
page readonly
clean
12A13000
unkown
page read and write
clean
154EE000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
7F2C2000
unkown image
page readonly
clean
154F0000
unkown
page read and write
clean
719000
unkown
page read and write
clean
7DF55BCD2000
unkown image
page readonly
clean
7FF546B60000
unkown image
page readonly
clean
7FF553A92000
unkown image
page readonly
clean
F06B000
unkown
page read and write
clean
87A000
heap private
page read and write
clean
67D1F000
unkown image
page write copy
clean
43A000
unkown
page read and write
clean
C4FE000
unkown
page read and write
clean
E107000
unkown
page read and write
clean
2A0A000
unkown image
page readonly
clean
12B7B000
unkown
page read and write
clean
37F000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
154DE000
unkown
page read and write
clean
67D27000
unkown image
page read and write
clean
800000
heap private
page read and write
clean
7DF5B4E10000
unkown image
page readonly
clean
7FF59FBD3000
unkown image
page readonly
clean
2788CD7F000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
F29B7F000
stack
page read and write
clean
12BE4000
unkown
page read and write
clean
F10E000
unkown
page read and write
clean
15252000
unkown
page read and write
clean
3F2C000
stack
page read and write
clean
12ACE000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
D240000
unkown image
page readonly
clean
53C000
unkown
page read and write
clean
12A0E000
unkown
page read and write
clean
2A0F000
unkown image
page readonly
clean
129DD000
unkown
page read and write
clean
12A23000
unkown
page read and write
clean
F18E000
unkown
page read and write
clean
129DD000
unkown
page read and write
clean
15363000
unkown
page read and write
clean
2788C713000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
7FF4F11C4000
unkown image
page readonly
clean
580000
unkown image
page readonly
clean
7FF59FCC4000
unkown image
page readonly
clean
458000
unkown
page read and write
clean
5D0000
heap default
page read and write
clean
12B47000
unkown
page read and write
clean
1525A000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
25C0000
stack
page read and write
clean
2788C6B3000
unkown
page read and write
clean
152EC000
unkown
page read and write
clean
FF4B2000
unkown
page execute read
clean
E12B000
unkown
page read and write
clean
7FF546ACC000
unkown image
page readonly
clean
169B9900000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
E108000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
EE6D000
stack
page read and write
clean
7FF5B09DC000
unkown image
page readonly
clean
12B74000
unkown
page read and write
clean
7DF5B4E02000
unkown image
page readonly
clean
154EE000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
12A13000
unkown
page read and write
clean
180CD280000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
E11C000
unkown
page read and write
clean
7FF59FA00000
unkown image
page readonly
clean
12B8A000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
E0A3000
unkown
page read and write
clean
2999000
unkown image
page readonly
clean
E06D000
unkown
page read and write
clean
E260000
heap private
page read and write
clean
12AD5000
unkown
page read and write
clean
7DF5062F2000
unkown image
page readonly
clean
7F632000
unkown image
page readonly
clean
F113000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
870000
heap private
page read and write
clean
169B9A00000
unkown image
page readonly
clean
7FF55389E000
unkown image
page readonly
clean
2AE51000000
unkown image
page readonly
clean
12B76000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
180CD000000
unkown image
page readonly
clean
12AD7000
unkown
page read and write
clean
154F0000
unkown
page read and write
clean
7FF4F0AD7000
unkown image
page readonly
clean
D23B000
stack
page read and write
clean
129F2000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
159DF000
unkown
page read and write
clean
14CB0000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
15232000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
7DF506300000
unkown image
page readonly
clean
15595000
unkown
page read and write
clean
169B9913000
unkown
page read and write
clean
1124E000
stack
page read and write
clean
154E7000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
129DE000
unkown
page read and write
clean
14F85000
unkown
page read and write
clean
2788CDBB000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
7FF5537E1000
unkown image
page readonly
clean
7F2C2000
unkown image
page readonly
clean
15A39000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
2788C3C0000
heap private
page read and write
clean
180CCC5E000
unkown
page read and write
clean
14F28000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
19270000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
7DF5062F0000
unkown image
page readonly
clean
14E30000
unkown
page read and write
clean
D80E000
stack
page read and write
clean
15226000
unkown
page read and write
clean
12C74000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
2AE50C53000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
2A75000
unkown image
page readonly
clean
15503000
unkown
page read and write
clean
154DC000
unkown
page read and write
clean
F04B000
unkown
page read and write
clean
C129000
unkown
page read and write
clean
14F6B000
unkown
page read and write
clean
E114000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
15504000
unkown
page read and write
clean
708000
unkown
page read and write
clean
180CCC76000
unkown
page read and write
clean
15285000
unkown
page read and write
clean
7FF5B08B1000
unkown image
page readonly
clean
12A77000
unkown
page read and write
clean
2788CD7E000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
FF4A1000
unkown
page execute read
clean
12BBB000
unkown
page read and write
clean
2788CD7C000
unkown
page read and write
clean
7DF5B4DF2000
unkown image
page readonly
clean
F19C000
unkown
page read and write
clean
12C74000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
1599B000
unkown
page read and write
clean
2AE50E00000
unkown image
page readonly
clean
14F73000
unkown
page read and write
clean
12BBB000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
1528A000
unkown
page read and write
clean
F220000
unkown
page read and write
clean
154F0000
unkown
page read and write
clean
E0C5000
unkown
page read and write
clean
16F83590000
unkown
page read and write
clean
12B76000
unkown
page read and write
clean
12BA3000
unkown
page read and write
clean
DDF0000
unkown
page read and write
clean
7FF55396B000
unkown image
page readonly
clean
157E7000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
12A43000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
C21C000
unkown
page read and write
clean
2788CD12000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
15C60000
unkown
page read and write
clean
7F1D0000
unkown image
page readonly
clean
12AF0000
unkown
page read and write
clean
72E000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
7FF5B09DA000
unkown image
page readonly
clean
12A3F000
unkown
page read and write
clean
E020000
heap private
page read and write
clean
16F83BC0000
unkown image
page readonly
clean
2788D202000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
152B3000
unkown
page read and write
clean
26B5000
unkown image
page readonly
clean
12CA0000
unkown image
page readonly
clean
1AEB07F000
stack
page read and write
clean
F0C9000
unkown
page read and write
clean
E0DA000
unkown
page read and write
clean
29FF000
unkown image
page readonly
clean
E108000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
7F642000
unkown image
page readonly
clean
7FF546735000
unkown image
page readonly
clean
620000
heap default
page read and write
clean
F0F8000
unkown
page read and write
clean
2788CDC5000
unkown
page read and write
clean
154F7000
unkown
page read and write
clean
7FF5539B7000
unkown image
page readonly
clean
29FD000
unkown image
page readonly
clean
E0C2000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
F18E000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
7FF59FCF6000
unkown image
page readonly
clean
7FF55399A000
unkown image
page readonly
clean
7DF4B2CC0000
unkown image
page readonly
clean
12BB0000
unkown
page read and write
clean
169B9852000
unkown
page read and write
clean
2788C3D0000
unkown image
page readonly
clean
F131000
unkown
page read and write
clean
2788C702000
unkown
page read and write
clean
37B000
unkown
page read and write
clean
7FF5B0841000
unkown image
page readonly
clean
16F835E0000
unkown image
page readonly
clean
7F2C2000
unkown image
page readonly
clean
2788CD98000
unkown
page read and write
clean
E0A3000
unkown
page read and write
clean
7FF59F4C6000
unkown image
page readonly
clean
1599B000
unkown
page read and write
clean
16F83686000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
E04E000
unkown
page read and write
clean
7FF5B0A6D000
unkown image
page readonly
clean
E0D9000
unkown
page read and write
clean
2788CD74000
unkown
page read and write
clean
15A2B000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
7FF4F1264000
unkown image
page readonly
clean
12AD5000
unkown
page read and write
clean
F131000
unkown
page read and write
clean
180CCC13000
unkown
page read and write
clean
E10B000
unkown
page read and write
clean
73F000
unkown
page read and write
clean
14CC0000
unkown
page read and write
clean
2A0F000
unkown image
page readonly
clean
12B70000
unkown
page read and write
clean
14E50000
unkown
page read and write
clean
154DC000
unkown
page read and write
clean
110000
unkown image
page readonly
clean
159DF000
unkown
page read and write
clean
1528A000
unkown
page read and write
clean
C3C9000
unkown
page read and write
clean
CE43000
unkown
page read and write
clean
129E7000
unkown
page read and write
clean
154FA000
unkown
page read and write
clean
7FF5B093D000
unkown image
page readonly
clean
2AE50AD0000
unkown image
page readonly
clean
F18E000
unkown
page read and write
clean
29DC000
unkown image
page readonly
clean
7FF5539F4000
unkown image
page readonly
clean
7F640000
unkown image
page readonly
clean
877000
heap private
page read and write
clean
2788C6BE000
unkown
page read and write
clean
169B9867000
unkown
page read and write
clean
E11F000
unkown
page read and write
clean
F0DC000
unkown
page read and write
clean
14F78000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
7FF5B0A3A000
unkown image
page readonly
clean
12B47000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
7FF5B0893000
unkown image
page readonly
clean
730000
unkown
page read and write
clean
FF4D0000
unkown image
page readonly
clean
E127000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
15557000
unkown
page read and write
clean
29A2000
unkown image
page readonly
clean
2747000
heap private
page read and write
clean
E0FE000
unkown
page read and write
clean
2788C420000
heap default
page read and write
clean
16F83480000
unkown image
page readonly
clean
2A92000
unkown image
page readonly
clean
129F2000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
7FF546BAA000
unkown image
page readonly
clean
2788C5F0000
unkown
page read and write
clean
15E90000
unkown
page read and write
clean
2788CD81000
unkown
page read and write
clean
15228000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
2788D202000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
15355000
unkown
page read and write
clean
E240000
unkown
page read and write
clean
7FF59F9F7000
unkown image
page readonly
clean
7DF5C5B70000
unkown image
page readonly
clean
2788CD6E000
unkown
page read and write
clean
12A2F000
unkown
page read and write
clean
154EE000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
152C0000
unkown
page read and write
clean
2788CD75000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
11C00000
unkown
page read and write
clean
12A13000
unkown
page read and write
clean
7FF546A21000
unkown image
page readonly
clean
2AE50AA0000
unkown image
page readonly
clean
12A0E000
unkown
page read and write
clean
453000
heap default
page read and write
clean
15208000
unkown
page read and write
clean
7FF546B77000
unkown image
page readonly
clean
2788C65C000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
162CC000
stack
page read and write
clean
12ADE000
unkown
page read and write
clean
29BD000
unkown image
page readonly
clean
15D70000
heap private
page read and write
clean
C253000
unkown
page read and write
clean
530000
unkown
page read and write
clean
159DA000
unkown
page read and write
clean
7350000
unkown
page read and write
clean
165B4000
unkown image
page read and write
clean
7FF4F11EE000
unkown image
page readonly
clean
15355000
unkown
page read and write
clean
FCBA37A000
stack
page read and write
clean
12B74000
unkown
page read and write
clean
16F83480000
unkown image
page readonly
clean
155FB000
unkown
page read and write
clean
F18E000
unkown
page read and write
clean
10FD0000
unkown
page read and write
clean
12A70000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
F0B2000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
15596000
unkown
page read and write
clean
25B0000
unkown image
page readonly
clean
F0C6000
unkown
page read and write
clean
159D9000
unkown
page read and write
clean
2788C716000
unkown
page read and write
clean
7FF546B65000
unkown image
page readonly
clean
12B47000
unkown
page read and write
clean
2A03000
unkown image
page readonly
clean
154E7000
unkown
page read and write
clean
CE3F000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
1550A000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
461000
unkown
page read and write
clean
E127000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
154DE000
unkown
page read and write
clean
16F83840000
unkown image
page readonly
clean
E0D4000
unkown
page read and write
clean
154F7000
unkown
page read and write
clean
14EAC000
stack
page read and write
clean
F1C9000
unkown
page read and write
clean
C00000
unkown image
page readonly
clean
15C06000
unkown
page read and write
clean
154EC000
unkown
page read and write
clean
67D1C000
unkown image
page read and write
clean
DDE0000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
28C7000
unkown image
page readonly
clean
1599B000
unkown
page read and write
clean
169B95B0000
unkown image
page readonly
clean
15355000
unkown
page read and write
clean
7DF55BCD0000
unkown image
page readonly
clean
1954C000
unkown
page read and write
clean
F296FE000
stack
page read and write
clean
129DD000
unkown
page read and write
clean
12BAB000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
4C0000
unkown image
page readonly
clean
154EC000
unkown
page read and write
clean
129E7000
unkown
page read and write
clean
1D0000
unkown image
page readonly
clean
12BE4000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
2788CD7B000
unkown
page read and write
clean
16588000
unkown image
page read and write
clean
154DC000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
169B9880000
unkown
page read and write
clean
E127000
unkown
page read and write
clean
7DF5B4DF2000
unkown image
page readonly
clean
12ACE000
unkown
page read and write
clean
12A2B000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
C2EA000
unkown
page read and write
clean
2AE50C55000
unkown
page read and write
clean
F2997B000
stack
page read and write
clean
C0C9000
unkown
page read and write
clean
7F1F0000
unkown image
page readonly
clean
12A63000
unkown
page read and write
clean
154EE000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
15A39000
unkown
page read and write
clean
1524D000
unkown
page read and write
clean
129E7000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
25A0000
stack
page read and write
clean
40F0000
unkown image
page readonly
clean
A10000
unkown image
page readonly
clean
2788C3B0000
unkown image
page read and write
clean
154FA000
unkown
page read and write
clean
12A3F000
unkown
page read and write
clean
C122000
unkown
page read and write
clean
154FD000
unkown
page read and write
clean
12A54000
unkown
page read and write
clean
15510000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
1D0000
unkown image
page readonly
clean
154DC000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
F29C7F000
stack
page read and write
clean
1599B000
unkown
page read and write
clean
19556000
unkown
page read and write
clean
2A84000
unkown image
page readonly
clean
F115000
unkown
page read and write
clean
2788C6E3000
unkown
page read and write
clean
15327000
unkown
page read and write
clean
16F8368F000
unkown
page read and write
clean
16F83835000
heap private
page read and write
clean
12B47000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
464000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
E0C2000
unkown
page read and write
clean
7DF568B20000
unkown image
page readonly
clean
12B72000
unkown
page read and write
clean
2788D26A000
unkown
page read and write
clean
7DF506310000
unkown image
page readonly
clean
10BD2000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
159D9000
unkown
page read and write
clean
180CCAF0000
unkown image
page readonly
clean
12B86000
unkown
page read and write
clean
F10E000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
152EC000
unkown
page read and write
clean
DE5000
unkown image
page readonly
clean
12A43000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
1134A000
stack
page read and write
clean
15254000
unkown
page read and write
clean
7FF5B0943000
unkown image
page readonly
clean
169B97D0000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
2AE50D13000
unkown
page read and write
clean
7FF59FCB7000
unkown image
page readonly
clean
F0C6000
unkown
page read and write
clean
F18E000
unkown
page read and write
clean
12A43000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
410000
unkown
page read and write
clean
E093000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
15387000
unkown
page read and write
clean
1523C000
unkown
page read and write
clean
2882000
unkown image
page readonly
clean
F115000
unkown
page read and write
clean
7FF5B0A1F000
unkown image
page readonly
clean
16F8368F000
unkown
page read and write
clean
E0D9000
unkown
page read and write
clean
29F5000
unkown image
page readonly
clean
154C9000
unkown
page read and write
clean
F103000
unkown
page read and write
clean
2788CD65000
unkown
page read and write
clean
2788C708000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
12A43000
unkown
page read and write
clean
1550F000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
7DF5062F0000
unkown image
page readonly
clean
8FE000
stack
page read and write
clean
155AD000
unkown
page read and write
clean
154EC000
unkown
page read and write
clean
7DF55BCF0000
unkown image
page readonly
clean
7FF5468D7000
unkown image
page readonly
clean
128B4000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
270E000
unkown image
page readonly
clean
15A37000
unkown
page read and write
clean
7FF5539FF000
unkown image
page readonly
clean
F125000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
D38F000
unkown
page read and write
clean
F11A000
unkown
page read and write
clean
152A8000
unkown
page read and write
clean
152C0000
unkown
page read and write
clean
E117000
unkown
page read and write
clean
703000
unkown
page read and write
clean
129D3000
unkown
page read and write
clean
4D0000
unkown
page read and write
clean
11C9A000
unkown
page read and write
clean
29E9000
unkown image
page readonly
clean
12B8A000
unkown
page read and write
clean
154FA000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
2788CDBB000
unkown
page read and write
clean
154E3000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
288E000
unkown image
page readonly
clean
154DE000
unkown
page read and write
clean
2788CD6A000
unkown
page read and write
clean
154EE000
unkown
page read and write
clean
2788C65B000
unkown
page read and write
clean
E0F0000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
12B84000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
F1C9000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
7FF546A5E000
unkown image
page readonly
clean
14F4F000
unkown
page read and write
clean
7DF568B10000
unkown image
page readonly
clean
258E000
stack
page read and write
clean
29D3000
unkown image
page readonly
clean
F125000
unkown
page read and write
clean
E0A3000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
154EC000
unkown
page read and write
clean
28C7000
unkown image
page readonly
clean
2788CDCA000
unkown
page read and write
clean
7F630000
unkown image
page readonly
clean
14EE0000
unkown image
page readonly
clean
2788CD70000
unkown
page read and write
clean
7F630000
unkown image
page readonly
clean
7DF5C5B80000
unkown image
page readonly
clean
1582C000
unkown
page read and write
clean
12A6E000
unkown
page read and write
clean
152C0000
unkown
page read and write
clean
29AA000
unkown image
page readonly
clean
15C3B000
unkown
page read and write
clean
15503000
unkown
page read and write
clean
F0C6000
unkown
page read and write
clean
12AF0000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
2788C687000
unkown
page read and write
clean
154DC000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
2788D202000
unkown
page read and write
clean
F29A77000
stack
page read and write
clean
F11A000
unkown
page read and write
clean
7FF59FAD1000
unkown image
page readonly
clean
155FB000
unkown
page read and write
clean
E0A3000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
14F30000
heap private
page read and write
clean
29FF000
unkown image
page readonly
clean
7FF59FD72000
unkown image
page readonly
clean
1528F000
unkown
page read and write
clean
1151E000
stack
page read and write
clean
154E7000
unkown
page read and write
clean
FB000
unkown
page read and write
clean
151F0000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
154F0000
unkown
page read and write
clean
7FF59FC80000
unkown image
page readonly
clean
F11A000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
12A43000
unkown
page read and write
clean
15500000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
14F37000
unkown
page read and write
clean
E10A000
unkown
page read and write
clean
2788D200000
unkown
page read and write
clean
2AE50A90000
heap private
page read and write
clean
7DF55BCE2000
unkown image
page readonly
clean
F113000
unkown
page read and write
clean
169B95E0000
unkown image
page readonly
clean
154F0000
unkown
page read and write
clean
15A2B000
unkown
page read and write
clean
129E7000
unkown
page read and write
clean
7FF5B08EB000
unkown image
page readonly
clean
12A88000
unkown
page read and write
clean
7DF5B4E00000
unkown image
page readonly
clean
11BA4000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
2700000
heap private
page read and write
clean
2788CD6A000
unkown
page read and write
clean
2788CBA0000
unkown image
page readonly
clean
2788CD98000
unkown
page read and write
clean
11BE9000
unkown
page read and write
clean
12880000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
1599B000
unkown
page read and write
clean
7FF4F11AC000
unkown image
page readonly
clean
7FF5535B7000
unkown image
page readonly
clean
FCB9DF8000
stack
page read and write
clean
12B15000
unkown
page read and write
clean
2788CD79000
unkown
page read and write
clean
F10E000
unkown
page read and write
clean
C127000
unkown
page read and write
clean
1582C000
unkown
page read and write
clean
7DF568B22000
unkown image
page readonly
clean
15221000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
15510000
unkown
page read and write
clean
7FF59FCD4000
unkown image
page readonly
clean
12A23000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
FF493000
unkown
page execute read
clean
E0FA000
unkown
page read and write
clean
169B9862000
unkown
page read and write
clean
152B3000
unkown
page read and write
clean
FF5E0000
unkown image
page readonly
clean
2A11000
unkown image
page readonly
clean
7FF546BC8000
unkown image
page readonly
clean
7FF59FCCA000
unkown image
page readonly
clean
154FD000
unkown
page read and write
clean
71D000
unkown
page read and write
clean
7F1C0000
unkown image
page readonly
clean
7F630000
unkown image
page readonly
clean
E108000
unkown
page read and write
clean
28D0000
unkown image
page readonly
clean
154EC000
unkown
page read and write
clean
A20000
unkown image
page readonly
clean
1FE000
stack
page read and write
clean
15C26000
unkown
page read and write
clean
7DF55BCE0000
unkown image
page readonly
clean
29E0000
unkown image
page readonly
clean
12A53000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
7FF5537D6000
unkown image
page readonly
clean
2A2B000
unkown image
page readonly
clean
154C3000
unkown
page read and write
clean
E108000
unkown
page read and write
clean
7DF5C5B70000
unkown image
page readonly
clean
7F630000
unkown image
page readonly
clean
15510000
unkown
page read and write
clean
2750000
unkown image
page readonly
clean
12B8A000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
2788CD84000
unkown
page read and write
clean
E101000
unkown
page read and write
clean
15221000
unkown
page read and write
clean
611000
unkown
page read and write
clean
15500000
unkown
page read and write
clean
10FC0000
unkown
page read and write
clean
E127000
unkown
page read and write
clean
F115000
unkown
page read and write
clean
EF6C000
stack
page read and write
clean
1538F000
unkown
page read and write
clean
12BAA000
unkown
page read and write
clean
29CC000
unkown image
page readonly
clean
7FF553A16000
unkown image
page readonly
clean
12B47000
unkown
page read and write
clean
157E7000
unkown
page read and write
clean
19558000
unkown
page read and write
clean
7FF59FC6A000
unkown image
page readonly
clean
152BB000
unkown
page read and write
clean
2788C6A9000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
1550F000
unkown
page read and write
clean
1528C000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
D331000
unkown
page read and write
clean
14C0D000
stack
page read and write
clean
7FF59FCFD000
unkown image
page readonly
clean
1550A000
unkown
page read and write
clean
CA0000
unkown
page read and write
clean
12E40000
unkown
page read and write
clean
2788CD5A000
unkown
page read and write
clean
154C3000
unkown
page read and write
clean
FCB997E000
stack
page read and write
clean
4AB000
unkown
page read and write
clean
7FF553953000
unkown image
page readonly
clean
12AD5000
unkown
page read and write
clean
E0CF000
unkown
page read and write
clean
12A72000
unkown
page read and write
clean
7F2C2000
unkown image
page readonly
clean
154E7000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
E06D000
unkown
page read and write
clean
12A13000
unkown
page read and write
clean
12B88000
unkown
page read and write
clean
430000
heap default
page read and write
clean
1954C000
unkown
page read and write
clean
E12B000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
12A6E000
unkown
page read and write
clean
D68F000
stack
page read and write
clean
12B47000
unkown
page read and write
clean
12B8E000
unkown
page read and write
clean
12AD8000
unkown
page read and write
clean
FF491000
unkown
page execute read
clean
F11C000
unkown
page read and write
clean
7FF5B0A69000
unkown image
page readonly
clean
15503000
unkown
page read and write
clean
7FF5539CF000
unkown image
page readonly
clean
2AE50C4E000
unkown
page read and write
clean
29D3000
unkown image
page readonly
clean
A70000
unkown image
page readonly
clean
F115000
unkown
page read and write
clean
7FF546BA4000
unkown image
page readonly
clean
12B47000
unkown
page read and write
clean
7FF546C4A000
unkown image
page readonly
clean
15323000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
29D3000
unkown image
page readonly
clean
180CCE00000
unkown image
page readonly
clean
12BAA000
unkown
page read and write
clean
2AE50C00000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
FF5D0000
unkown image
page readonly
clean
154DE000
unkown
page read and write
clean
29F7000
unkown image
page readonly
clean
12B15000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
E0F7000
unkown
page read and write
clean
154DE000
unkown
page read and write
clean
2590000
stack
page read and write
clean
29DC000
unkown image
page readonly
clean
F1AC000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
12BC9000
unkown
page read and write
clean
54F000
unkown
page read and write
clean
29A2000
unkown image
page readonly
clean
12A0E000
unkown
page read and write
clean
F1DC000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
2A11000
unkown image
page readonly
clean
7FF553A19000
unkown image
page readonly
clean
128C3000
unkown
page read and write
clean
274000
unkown
page read and write
clean
2A22000
unkown image
page readonly
clean
7FF546B4A000
unkown image
page readonly
clean
D300000
unkown
page read and write
clean
154E5000
unkown
page read and write
clean
FF4BE000
unkown
page execute read
clean
458000
unkown
page read and write
clean
7FF5535B5000
unkown image
page readonly
clean
12620000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
152EB000
unkown
page read and write
clean
12BB9000
unkown
page read and write
clean
154FA000
unkown
page read and write
clean
12600000
unkown
page read and write
clean
154F0000
unkown
page read and write
clean
7DF5C5B62000
unkown image
page readonly
clean
15D3C000
stack
page read and write
clean
2788C651000
unkown
page read and write
clean
1525D000
unkown
page read and write
clean
7DF4669E0000
unkown image
page readonly
clean
15294000
unkown
page read and write
clean
169B95D0000
unkown image
page readonly
clean
7DF5B4E00000
unkown image
page readonly
clean
15C63000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
E127000
unkown
page read and write
clean
60C000
unkown
page read and write
clean
E093000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
129F2000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
67D20000
unkown image
page read and write
clean
15C17000
unkown
page read and write
clean
152EF000
unkown
page read and write
clean
ECEC000
stack
page read and write
clean
1528A000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
152BD000
unkown
page read and write
clean
2680000
unkown image
page write copy
clean
12B7D000
unkown
page read and write
clean
154C3000
unkown
page read and write
clean
E108000
unkown
page read and write
clean
F11C000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
12B8A000
unkown
page read and write
clean
2AA3000
unkown image
page readonly
clean
159FC000
unkown
page read and write
clean
2788CD7B000
unkown
page read and write
clean
CEFB000
unkown
page read and write
clean
1550D000
unkown
page read and write
clean
7FF5539EA000
unkown image
page readonly
clean
7FF4F126A000
unkown image
page readonly
clean
7DF5C5B72000
unkown image
page readonly
clean
29A2000
unkown image
page readonly
clean
12AD1000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
7FF59FD71000
unkown image
page readonly
clean
E06F000
unkown
page read and write
clean
11690000
unkown image
page read and write
clean
2A71000
unkown image
page readonly
clean
16F83660000
heap default
page read and write
clean
15533000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
15A1A000
unkown
page read and write
clean
152B3000
unkown
page read and write
clean
2AE50BF0000
unkown
page read and write
clean
2788C6C5000
unkown
page read and write
clean
F0A6000
unkown
page read and write
clean
169B9813000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
15C1F000
unkown
page read and write
clean
E0CF000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
12F53000
heap private
page read and write
clean
1F0000
unkown image
page read and write
clean
152BD000
unkown
page read and write
clean
F125000
unkown
page read and write
clean
154E7000
unkown
page read and write
clean
12B7F000
unkown
page read and write
clean
7FF546BD6000
unkown image
page readonly
clean
129F2000
unkown
page read and write
clean
7FF5538F3000
unkown image
page readonly
clean
2788CD7F000
unkown
page read and write
clean
2788CD76000
unkown
page read and write
clean
7FF59FCAC000
unkown image
page readonly
clean
2AE50AF0000
heap default
page read and write
clean
12B74000
unkown
page read and write
clean
7FF5539E4000
unkown image
page readonly
clean
50000
unkown image
page read and write
clean
1266D000
stack
page read and write
clean
152EB000
unkown
page read and write
clean
15C6C000
stack
page read and write
clean
2788CD6F000
unkown
page read and write
clean
7DF5B4E10000
unkown image
page readonly
clean
15219000
unkown
page read and write
clean
155AD000
unkown
page read and write
clean
7FF59F840000
unkown image
page readonly
clean
154DE000
unkown
page read and write
clean
12B15000
unkown
page read and write
clean
F10E000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
15500000
unkown
page read and write
clean
FF4BC000
unkown
page execute read
clean
E0FE000
unkown
page read and write
clean
154FD000
unkown
page read and write
clean
154E3000
unkown
page read and write
clean
154D0000
unkown
page read and write
clean
7FF5539AB000
unkown image
page readonly
clean
12B7F000
unkown
page read and write
clean
F19C000
unkown
page read and write
clean
C02C000
unkown
page read and write
clean
29F7000
unkown image
page readonly
clean
406D000
stack
page read and write
clean
12B7D000
unkown
page read and write
clean
15C53000
unkown
page read and write
clean
1522F000
unkown
page read and write
clean
12A43000
unkown
page read and write
clean
11C6D000
unkown
page read and write
clean
C442000
unkown
page read and write
clean
169B9827000
unkown
page read and write
clean
F1D8000
unkown
page read and write
clean
7DF506300000
unkown image
page readonly
clean
E127000
unkown
page read and write
clean
2788C3D0000
unkown image
page readonly
clean
C596000
unkown
page read and write
clean
29E0000
unkown image
page readonly
clean
12A0E000
unkown
page read and write
clean
7DF55BCD2000
unkown image
page readonly
clean
F113000
unkown
page read and write
clean
154F0000
unkown
page read and write
clean
FF4A3000
unkown
page execute read
clean
12B8A000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
7FF5B08D1000
unkown image
page readonly
clean
2788CDBA000
unkown
page read and write
clean
12F57000
heap private
page read and write
clean
2788C64C000
unkown
page read and write
clean
7F1E0000
unkown image
page readonly
clean
12B7B000
unkown
page read and write
clean
12BA0000
unkown
page read and write
clean
E0DE000
unkown
page read and write
clean
DDF0000
unkown
page read and write
clean
DFEC000
stack
page read and write
clean
2788C64D000
unkown
page read and write
clean
154D1000
unkown
page read and write
clean
12AD7000
unkown
page read and write
clean
E127000
unkown
page read and write
clean
15235000
unkown
page read and write
clean
7FF59FCEE000
unkown image
page readonly
clean
E6BED77000
stack
page read and write
clean
1AEADFB000
stack
page read and write
clean
15363000
unkown
page read and write
clean
12B72000
unkown
page read and write
clean
F06B000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
11BBA000
unkown
page read and write
clean
154F7000
unkown
page read and write
clean
143D0000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
11BE6000
unkown
page read and write
clean
2AE50D00000
unkown
page read and write
clean
F0F8000
unkown
page read and write
clean
541000
unkown
page read and write
clean
12BAB000
unkown
page read and write
clean
E0FE000
unkown
page read and write
clean
12C7D000
unkown
page read and write
clean
14F64000
unkown
page read and write
clean
15319000
unkown
page read and write
clean
152C0000
unkown
page read and write
clean
7FF553A8A000
unkown image
page readonly
clean
6E4000
heap default
page read and write
clean
72E000
unkown
page read and write
clean
7FF5B0A66000
unkown image
page readonly
clean
12B52000
unkown
page read and write
clean
F1AC000
unkown
page read and write
clean
154A3000
unkown
page read and write
clean
128B6000
unkown
page read and write
clean
12BE4000
unkown
page read and write
clean
1526E000
unkown
page read and write
clean
7DF506310000
unkown image
page readonly
clean
F0C9000
unkown
page read and write
clean
180CCAD0000
unkown image
page readonly
clean
7FF5B0AD4000
unkown image
page readonly
clean
E0C5000
unkown
page read and write
clean
15992000
unkown
page read and write
clean
1599B000
unkown
page read and write
clean
129E7000
unkown
page read and write
clean
410000
unkown image
page readonly
clean
710000
unkown
page read and write
clean
F0DC000
unkown
page read and write
clean
FCBA27F000
stack
page read and write
clean
12B15000
unkown
page read and write
clean
7FF553A0E000
unkown image
page readonly
clean
2788CBF0000
unkown
page read and write
clean
154FA000
unkown
page read and write
clean
1F0000
unkown image
page readonly
clean
6773B79000
stack
page read and write
clean
129E7000
unkown
page read and write
clean
159F0000
unkown
page read and write
clean
FF4B4000
unkown
page execute read
clean
41F0000
unkown
page read and write
clean
12BB2000
unkown
page read and write
clean
CE49000
unkown
page read and write
clean
12A43000
unkown
page read and write
clean
12BB0000
unkown
page read and write
clean
2788CD98000
unkown
page read and write
clean
7F632000
unkown image
page readonly
clean
15992000
unkown
page read and write
clean
29FF000
unkown image
page readonly
clean
12B88000
unkown
page read and write
clean
159DA000
unkown
page read and write
clean
701000
unkown
page read and write
clean
DA70000
unkown
page read and write
clean
151FD000
unkown
page read and write
clean
F115000
unkown
page read and write
clean
F188000
unkown
page read and write
clean
2788CDA9000
unkown
page read and write
clean
152C3000
unkown
page read and write
clean
2AE50D08000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
2A92000
unkown image
page readonly
clean
FF4C3000
unkown
page execute read
clean
154FD000
unkown
page read and write
clean
E0FB000
unkown
page read and write
clean
7FF553843000
unkown image
page readonly
clean
154EE000
unkown
page read and write
clean
1550E000
unkown
page read and write
clean
455000
unkown
page read and write
clean
12B84000
unkown
page read and write
clean
F139000
unkown
page read and write
clean
12C76000
unkown
page read and write
clean
FF5E2000
unkown image
page readonly
clean
2788CD6A000
unkown
page read and write
clean
2788CD79000
unkown
page read and write
clean
F113000
unkown
page read and write
clean
E6BEE7E000
stack
page read and write
clean
15A27000
unkown
page read and write
clean
12B86000
unkown
page read and write
clean
7F2E0000
unkown image
page readonly
clean
2788CD60000
unkown
page read and write
clean
FF4B6000
unkown
page execute read
clean
12A43000
unkown
page read and write
clean
F0FD000
unkown
page read and write
clean
12BAB000
unkown
page read and write
clean
15508000
unkown
page read and write
clean
F0FD000
unkown
page read and write
clean
12A88000
unkown
page read and write
clean
480000
unkown image
page readonly
clean
12AD1000
unkown
page read and write
clean
2788C659000
unkown
page read and write
clean
F1C9000
unkown
page read and write
clean
29E0000
unkown image
page readonly
clean
E093000
unkown
page read and write
clean
14F00000
unkown
page read and write
clean
2AE50C6E000
unkown
page read and write
clean
12B47000
unkown
page read and write
clean
12BAE000
unkown
page read and write
clean
15350000
unkown
page read and write
clean
152C0000
unkown
page read and write
clean
2788CD9E000
unkown
page read and write
clean
180CD190000
unkown image
page readonly
clean
154F7000
unkown
page read and write
clean
7340000
unkown
page read and write
clean
270E000
unkown image
page readonly
clean
42C4000
heap private
page read and write
clean
7FF4F0E5A000
unkown image
page readonly
clean
129F2000
unkown
page read and write
clean
7FF5B09F0000
unkown image
page readonly
clean
12C74000
unkown
page read and write
clean
270000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
7FF5B0A07000
unkown image
page readonly
clean
2788CD7F000
unkown
page read and write
clean
907000
heap private
page read and write
clean
D910000
unkown image
page readonly
clean
F1AC000
unkown
page read and write
clean
7FF546BDD000
unkown image
page readonly
clean
1550E000
unkown
page read and write
clean
E078000
unkown
page read and write
clean
12ADE000
unkown
page read and write
clean
169B983C000
unkown
page read and write
clean
154EC000
unkown
page read and write
clean
2788CDBF000
unkown
page read and write
clean
A40000
unkown image
page readonly
clean
1550C000
unkown
page read and write
clean
12C79000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
7FF5539CC000
unkown image
page readonly
clean
7FF546720000
unkown image
page readonly
clean
7F2D0000
unkown image
page readonly
clean
15C50000
unkown
page read and write
clean
C1D6000
unkown
page read and write
clean
DA6F000
stack
page read and write
clean
2A03000
unkown image
page readonly
clean
2A84000
unkown image
page readonly
clean
15D81000
unkown
page read and write
clean
154FD000
unkown
page read and write
clean
BA0000
unkown image
page readonly
clean
7F640000
unkown image
page readonly
clean
2A22000
unkown image
page readonly
clean
1D0000
unkown image
page readonly
clean
E0D3000
unkown
page read and write
clean
12A0E000
unkown
page read and write
clean
14F26000
unkown
page read and write
clean
F103000
unkown
page read and write
clean
1582C000
unkown
page read and write
clean
12B7D000
unkown
page read and write
clean
7FF59FC6C000
unkown image
page readonly
clean
12B88000
unkown
page read and write
clean
26B5000
unkown image
page readonly
clean
12B7D000
unkown
page read and write
clean
7F2E0000
unkown image
page readonly
clean
12C7D000
unkown
page read and write
clean
2788C800000
unkown image
page readonly
clean
7FF546BB4000
unkown image
page readonly
clean
900000
heap private
page read and write
clean
154E5000
unkown
page read and write
clean
2730000
unkown
page read and write
clean
7FF59FBEC000
unkown image
page readonly
clean
154F0000
unkown
page read and write
clean
701000
unkown
page read and write
clean
154FD000
unkown
page read and write
clean
12B7B000
unkown
page read and write
clean
12B74000
unkown
page read and write
clean
5EA000
heap default
page read and write
clean
C18D000
unkown
page read and write
clean
12A0E000
unkown
page read and write
clean
9E0000
unkown
page read and write
clean
1531F000
unkown
page read and write
clean
180CCAB0000
unkown image
page read and write
clean
F19C000
unkown
page read and write
clean
7FF546B5E000
unkown image
page readonly
clean
152BD000
unkown
page read and write
clean
2788CD78000
unkown
page read and write
clean
F111000
unkown
page read and write
clean
DDA0000
unkown
page read and write
clean
719000
unkown
page read and write
clean
12B70000
unkown
page read and write
clean
F0C6000
unkown
page read and write
clean
12AD5000
unkown
page read and write
clean
12BAA000
unkown
page read and write
clean
7FF55389B000
unkown image
page readonly
clean
F139000
unkown
page read and write
clean
12AD1000
unkown
page read and write
clean
There are 2649 hidden memdumps, click here to show them.