IOC Report

loading gif

Files

File Path
Type
Category
Malicious
Cab_Invoice_pdf.exe
PE32 executable (GUI) Intel 80386, for MS Windows
initial sample
 malicious
C:\Users\user\AppData\Roaming\svchost.exe
PE32 executable (GUI) Intel 80386, for MS Windows
dropped
 malicious
C:\ProgramData\Microsoft\Network\Downloader\edb.log
MPEG-4 LOAS
dropped
 clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.db
Extensible storage engine DataBase, version 0x620, checksum 0x0f1d7f0c, page size 16384, DirtyShutdown, Windows version 10.0
dropped
 clean
C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm
data
dropped
 clean
C:\Users\user\AppData\Local\Temp\4y2igpme
ASCII text, with no line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\Include\pyconfig.h
C source, ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\VCRUNTIME140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_asyncio.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_bz2.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_ctypes.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_decimal.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_hashlib.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_lzma.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_multiprocessing.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_overlapped.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_queue.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_socket.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_ssl.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\_win32sysloader.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-console-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-datetime-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-debug-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-errorhandling-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-file-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-file-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-file-l2-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-handle-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-interlocked-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-libraryloader-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-localization-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-memory-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-namedpipe-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-processenvironment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-processthreads-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-processthreads-l1-1-1.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-profile-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-rtlsupport-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-synch-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-synch-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-sysinfo-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-timezone-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-core-util-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-conio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-convert-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-environment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-filesystem-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-locale-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-math-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-process-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-runtime-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-stdio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-time-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\api-ms-win-crt-utility-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\base_library.zip
Zip archive data, at least v2.0 to extract
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\file.exe.manifest
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\libcrypto-1_1.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\libffi-7.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\libssl-1_1.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\pyexpat.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\python38.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\pywintypes38.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\select.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\ucrtbase.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\unicodedata.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\win32api.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\win32event.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI24122\win32gui.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\Include\pyconfig.h
C source, ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\VCRUNTIME140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_asyncio.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_bz2.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_ctypes.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_decimal.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_hashlib.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_lzma.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_multiprocessing.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_overlapped.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_queue.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_socket.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_ssl.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\_win32sysloader.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-console-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-datetime-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-debug-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-errorhandling-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-file-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-file-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-file-l2-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-handle-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-interlocked-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-libraryloader-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-localization-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-memory-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-namedpipe-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-processenvironment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-processthreads-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-processthreads-l1-1-1.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-profile-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-rtlsupport-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-synch-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-synch-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-sysinfo-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-timezone-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-core-util-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-conio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-convert-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-environment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-filesystem-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-locale-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-math-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-process-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-runtime-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-stdio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-time-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\api-ms-win-crt-utility-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\base_library.zip
Zip archive data, at least v2.0 to extract
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\file.exe.manifest
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\libcrypto-1_1.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\libffi-7.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\libssl-1_1.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\pyexpat.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\python38.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\pywintypes38.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\select.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\ucrtbase.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\unicodedata.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\win32api.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\win32event.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI61562\win32gui.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\Include\pyconfig.h
C source, ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\VCRUNTIME140.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_asyncio.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_bz2.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_ctypes.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_decimal.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_hashlib.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_lzma.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_multiprocessing.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_overlapped.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_queue.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_socket.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_ssl.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\_win32sysloader.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-console-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-datetime-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-debug-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-errorhandling-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-file-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-file-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-file-l2-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-handle-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-interlocked-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-libraryloader-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-localization-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-memory-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-namedpipe-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-processenvironment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-processthreads-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-processthreads-l1-1-1.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-profile-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-rtlsupport-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-synch-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-synch-l1-2-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-sysinfo-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-timezone-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-core-util-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-conio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-convert-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-environment-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-filesystem-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-heap-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-locale-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-math-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-process-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-runtime-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-stdio-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-string-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-time-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\api-ms-win-crt-utility-l1-1-0.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\base_library.zip
Zip archive data, at least v2.0 to extract
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\file.exe.manifest
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\libcrypto-1_1.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\libffi-7.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\libssl-1_1.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\pyexpat.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\python38.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\pywintypes38.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\select.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\ucrtbase.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\unicodedata.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\win32api.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\win32event.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Users\user\AppData\Local\Temp\_MEI63082\win32gui.pyd
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
 clean
C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp
ASCII text, with no line terminators
dropped
 clean
There are 195 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Cab_Invoice_pdf.exe
"C:\Users\user\Desktop\Cab_Invoice_pdf.exe"
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
 malicious
C:\Users\user\Desktop\Cab_Invoice_pdf.exe
"C:\Users\user\Desktop\Cab_Invoice_pdf.exe"
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
 malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
 malicious
C:\Users\user\AppData\Roaming\svchost.exe
"C:\Users\user\AppData\Roaming\svchost.exe"
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
 malicious
C:\Users\user\AppData\Roaming\svchost.exe
"C:\Users\user\AppData\Roaming\svchost.exe"
malicious
C:\Users\user\AppData\Roaming\svchost.exe
"C:\Users\user\AppData\Roaming\svchost.exe"
malicious
C:\Users\user\AppData\Roaming\svchost.exe
"C:\Users\user\AppData\Roaming\svchost.exe"
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
 malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c "reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v svchost /t REG_SZ /d "C:\Users\user\AppData\Roaming\svchost.exe""
 clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
 clean
C:\Windows\SysWOW64\reg.exe
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v svchost /t REG_SZ /d "C:\Users\user\AppData\Roaming\svchost.exe"
 clean
There are 4 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://crl.pki.goog/gsr1/gsr1.crldn
unknown
 clean
http://pki.goog/gsr1/gsr1.crt
unknown
 clean
http://crl.pki.goog/gsr1/gsr1.crl0;
unknown
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crl(
unknown
 clean
http://pki.goog/repo/certs/gts1c3.derB2
unknown
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crl0
unknown
 clean
https://github.com/mhammond/pywin32
unknown
 clean
http://crl.pki.goog/gsr1/gsr1.crl
unknown
 clean
http://pki.goog/repo/certs/gtsr1.der81
unknown
 clean
http://pki.goog/repo/certs/gts1c3.der
unknown
 clean
http://pki.goog/repo/certs/gtsr1.derv2
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crlR
unknown
 clean
http://pki.goog/gsr1/gsr1.crte
unknown
 clean
http://pki.goog/repo/certs/gtsr1.der
unknown
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crl#
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crlT
unknown
 clean
http://www.python.org/download/releases/2.3/mro/.
unknown
 clean
http://pki.goog/repo/certs/gtsr1.der$
unknown
 clean
http://pki.goog/repo/certs/gtsr1.der04
unknown
 clean
http://www.iana.org/assignments/tls-parameters/tls-parameters.xml#tls-parameters-6
unknown
 clean
http://crl.thawte.com/ThawteTimestampingCA.crl0
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crlb
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crld
unknown
 clean
http://www.iana.org/time-zones/repository/tz-link.html
unknown
 clean
https://github.com/BoboTiG/python-mss
unknown
 clean
http://www.python.org/dev/peps/pep-0205/
unknown
 clean
https://support.google.com/mail/?p=BadCredentials
unknown
 clean
http://python.org/dev/peps/pep-0263/
unknown
 clean
https://www.disneyplus.com/legal/your-california-privacy-rights
unknown
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crlr
unknown
 clean
http://ocsp.thawte.com0
unknown
 clean
http://pki.goog/repo/certs/gts1c3.dere2
unknown
 clean
http://crl.ver)
unknown
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crl
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crl0W
unknown
 clean
https://www.tiktok.com/legal/report/feedback
unknown
 clean
http://pki.goog/gsr1/gsr1.crt02
unknown
 clean
http://www.cl.cam.ac.uk/~mgk25/iso-time.html
unknown
 clean
http://pki.goog/gsr1/gsr1.crtloc
unknown
 clean
https://pki.goog/repository/0
unknown
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crlc
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crl
unknown
 clean
http://crls.pki.goog/gts1c3/moVDfISia2k.crla
unknown
 clean
https://www.disneyplus.com/legal/privacy-policy
unknown
 clean
http://crl.p
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crlXx
unknown
 clean
https://www.tiktok.c
unknown
 clean
https://www.openssl.org/H
unknown
 clean
https://disneyplus.com/legal.
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crl:
unknown
 clean
http://pki.goog/repo/certs/gts1c3.dery1
unknown
 clean
http://crl.pki.goog/gtsr1/gtsr1.crlACE
unknown
 clean
http://www.phys.uu.nl/~vgent/calendar/isocalendar.htm
unknown
 clean
http://crl.pki.goog/gsr1/gsr1.crle
unknown
 clean
http://help.disneyplus.com.
unknown
 clean
http://pki.goog/repo/certs/gts1c3.der0
unknown
 clean
There are 46 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
smtp.gmail.com
142.250.145.108
 clean

IPs

IP
Domain
Country
Malicious
192.168.2.1
unknown
unknown
clean
142.250.145.109
unknown
United States
clean
142.250.145.108
smtp.gmail.com
United States
clean
127.0.0.1
unknown
unknown
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
svchost
 clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS
PerfMMFileName
 clean

Memdumps

Base Address
Regiontype
Protect
Malicious
BC1000
unkown image
page execute read
 clean
1084000
unkown
page read and write
 clean
6E9A0000
unkown image
page readonly
 clean
7FF55CACD000
unkown image
page readonly
 clean
1F912B00000
unkown image
page read and write
 clean
BC1000
unkown image
page execute read
 clean
7FF592897000
unkown image
page readonly
 clean
19D6F340000
unkown image
page readonly
 clean
1047000
unkown
page read and write
 clean
6EC20000
unkown image
page read and write
 clean
106B000
unkown
page read and write
 clean
6DBB0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
2191FB50000
unkown image
page readonly
 clean
6DA70000
unkown image
page readonly
 clean
6DA70000
unkown image
page readonly
 clean
301F000
unkown
page read and write
 clean
20D17A13000
unkown
page read and write
 clean
6DA96000
unkown image
page read and write
 clean
1612000
unkown
page read and write
 clean
1050000
heap default
page read and write
 clean
1084000
unkown
page read and write
 clean
88C000
unkown
page read and write
 clean
3464000
unkown
page read and write
 clean
7FA30000
unkown image
page readonly
 clean
7FF54D413000
unkown image
page readonly
 clean
2F00000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
6F9D1000
unkown image
page execute read
 clean
2EC0000
unkown
page read and write
 clean
20D17A29000
unkown
page read and write
 clean
2AF5000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
871000
unkown
page read and write
 clean
E00000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
7FF55C302000
unkown image
page readonly
 clean
7FF53E0BF000
unkown image
page readonly
 clean
844000
unkown
page read and write
 clean
88F000
unkown
page read and write
 clean
EF1000
heap default
page read and write
 clean
1F911B10000
unkown image
page readonly
 clean
7FF55CAAE000
unkown image
page readonly
 clean
6E961000
unkown image
page execute read
 clean
1628000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
70140000
unkown image
page read and write
 clean
106F000
unkown
page read and write
 clean
107C000
unkown
page read and write
 clean
7FF5AC3C6000
unkown image
page readonly
 clean
21457200000
unkown image
page readonly
 clean
20D18390000
unkown
page read and write
 clean
3451000
unkown
page read and write
 clean
F38000
unkown
page read and write
 clean
EE7000
unkown
page read and write
 clean
59E000
stack
page read and write
 clean
7FF53E1E2000
unkown image
page readonly
 clean
3444000
unkown
page read and write
 clean
7FF54D41E000
unkown image
page readonly
 clean
155639E0000
unkown image
page readonly
 clean
84E000
unkown
page read and write
 clean
7FF59272F000
unkown image
page readonly
 clean
6DABB000
unkown image
page readonly
 clean
70131000
unkown image
page execute read
 clean
6DAD1000
unkown image
page execute read
 clean
21457080000
unkown image
page readonly
 clean
1311000
unkown image
page execute read
 clean
7FF55CA9B000
unkown image
page readonly
 clean
40000
unkown image
page readonly
 clean
2C44000
unkown
page read and write
 clean
7FF5AC59E000
unkown image
page readonly
 clean
7FF53E095000
unkown image
page readonly
 clean
14320254000
unkown
page read and write
 clean
6E941000
unkown image
page readonly
 clean
7FF55CA66000
unkown image
page readonly
 clean
1F917300000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
7DF510E30000
unkown image
page readonly
 clean
6F9AF000
unkown image
page read and write
 clean
E1B000
unkown
page read and write
 clean
7FF53DF54000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
7DF55B150000
unkown image
page readonly
 clean
14320313000
unkown
page read and write
 clean
2BB8000
unkown image
page readonly
 clean
BF7000
unkown image
page readonly
 clean
E82000
unkown
page read and write
 clean
1F917220000
unkown
page read and write
 clean
6F2F3000
unkown image
page readonly
 clean
857000
unkown
page read and write
 clean
106E000
unkown
page read and write
 clean
7FF53E1E9000
unkown image
page readonly
 clean
3050000
unkown image
page readonly
 clean
6E93D000
unkown image
page write copy
 clean
7FF53DF1B000
unkown image
page readonly
 clean
481FCFF000
stack
page read and write
 clean
1097000
unkown
page read and write
 clean
6DBB0000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
106B000
unkown
page read and write
 clean
FF530000
unkown image
page readonly
 clean
20D17A48000
unkown
page read and write
 clean
E82000
unkown
page read and write
 clean
2F30000
unkown
page read and write
 clean
15563A30000
heap default
page read and write
 clean
FFBB2000
unkown image
page readonly
 clean
6F9C0000
unkown image
page readonly
 clean
FFF10000
unkown image
page readonly
 clean
1F911CFF000
unkown
page read and write
 clean
21456B70000
unkown
page read and write
 clean
7FF55CA73000
unkown image
page readonly
 clean
3300000
unkown
page read and write
 clean
E7E000
unkown
page read and write
 clean
1045000
unkown
page read and write
 clean
D06000
heap private
page read and write
 clean
36DE000
stack
page read and write
 clean
6EAE8000
unkown image
page read and write
 clean
BC0000
unkown image
page readonly
 clean
6F9C5000
unkown image
page readonly
 clean
1F9171C8000
unkown
page read and write
 clean
6E921000
unkown image
page execute read
 clean
19D6F370000
unkown
page read and write
 clean
6DDE0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
32C0000
unkown
page read and write
 clean
3433000
unkown
page read and write
 clean
E6C000
unkown
page read and write
 clean
7DF510E10000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
20D18394000
unkown
page read and write
 clean
497000
unkown
page read and write
 clean
10B6000
unkown
page read and write
 clean
3457000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
7FF59267F000
unkown image
page readonly
 clean
6DBF2000
unkown image
page execute read
 clean
703DB000
unkown image
page readonly
 clean
E19000
unkown
page read and write
 clean
105B000
unkown
page read and write
 clean
7DF54BE82000
unkown image
page readonly
 clean
E74000
unkown
page read and write
 clean
6DAEB000
unkown image
page readonly
 clean
7FF53E0DE000
unkown image
page readonly
 clean
6EDF8000
unkown image
page readonly
 clean
15563D13000
unkown
page read and write
 clean
19D6F7D0000
unkown image
page readonly
 clean
6F9A9000
unkown image
page readonly
 clean
70141000
unkown image
page readonly
 clean
1F911C00000
unkown
page read and write
 clean
C7DB77E000
stack
page read and write
 clean
20D18390000
unkown
page read and write
 clean
7DF5A05A0000
unkown image
page readonly
 clean
2FD5000
unkown
page read and write
 clean
7FF54CCF8000
unkown image
page readonly
 clean
36C0000
unkown
page read and write
 clean
7DF54BE90000
unkown image
page readonly
 clean
6DEE8000
unkown image
page read and write
 clean
703C0000
unkown image
page readonly
 clean
1088000
unkown
page read and write
 clean
6DB00000
unkown image
page readonly
 clean
166C000
unkown
page read and write
 clean
EA6000
unkown
page read and write
 clean
107E000
unkown
page read and write
 clean
10B8000
unkown
page read and write
 clean
995000
unkown
page read and write
 clean
55E000
stack
page read and write
 clean
1F9172F2000
unkown
page read and write
 clean
E26000
unkown
page read and write
 clean
6DACA000
unkown image
page readonly
 clean
703B7000
unkown image
page readonly
 clean
14320264000
unkown
page read and write
 clean
28301FE000
stack
page read and write
 clean
1079000
unkown
page read and write
 clean
2C2F000
unkown
page read and write
 clean
8DC000
unkown
page read and write
 clean
7F892000
unkown image
page readonly
 clean
2C47000
unkown
page read and write
 clean
6EC00000
unkown image
page readonly
 clean
493000
unkown
page read and write
 clean
703D3000
unkown image
page readonly
 clean
7FF5AC3F1000
unkown image
page readonly
 clean
7FF59289A000
unkown image
page readonly
 clean
700000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
1088000
unkown
page read and write
 clean
1F912BE0000
unkown
page read and write
 clean
13E967E000
stack
page read and write
 clean
EB1000
unkown
page read and write
 clean
7DF5A0592000
unkown image
page readonly
 clean
6E98E000
unkown image
page readonly
 clean
2E00000
unkown
page read and write
 clean
BC0000
unkown image
page readonly
 clean
87C000
unkown
page read and write
 clean
887000
unkown
page read and write
 clean
F11000
unkown
page read and write
 clean
1057000
unkown
page read and write
 clean
EC4000
unkown
page read and write
 clean
2C77000
unkown
page read and write
 clean
6E98B000
unkown image
page read and write
 clean
F01000
unkown
page read and write
 clean
3500000
unkown
page read and write
 clean
3250000
unkown image
page readonly
 clean
1045000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
6DD78000
unkown image
page readonly
 clean
FFF00000
unkown image
page readonly
 clean
7FF5928F2000
unkown image
page readonly
 clean
6E940000
unkown image
page read and write
 clean
20D17AE2000
unkown
page read and write
 clean
6E960000
unkown image
page readonly
 clean
7DF5BA2B2000
unkown image
page readonly
 clean
7DF5A0590000
unkown image
page readonly
 clean
86D000
unkown
page read and write
 clean
FFEF2000
unkown image
page readonly
 clean
1000000
unkown
page read and write
 clean
3401000
unkown
page read and write
 clean
887000
unkown
page read and write
 clean
BC1000
unkown image
page execute read
 clean
15563C64000
unkown
page read and write
 clean
7FF5B0321000
unkown image
page readonly
 clean
6F991000
unkown image
page execute read
 clean
6E960000
unkown image
page readonly
 clean
901000
unkown
page read and write
 clean
EA9000
unkown
page read and write
 clean
D9E000
stack
page read and write
 clean
8FD000
unkown
page read and write
 clean
1F912400000
unkown
page read and write
 clean
901000
unkown
page read and write
 clean
F0CF8FF000
stack
page read and write
 clean
7FF54D43B000
unkown image
page readonly
 clean
FFBC0000
unkown image
page readonly
 clean
7FF59282D000
unkown image
page readonly
 clean
20D17A00000
unkown
page read and write
 clean
6DAA0000
unkown image
page readonly
 clean
33F0000
unkown image
page readonly
 clean
10F4000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
7FF55CB34000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
2BA0000
unkown
page read and write
 clean
3434000
unkown
page read and write
 clean
8317C7F000
stack
page read and write
 clean
1880000
unkown image
page readonly
 clean
70130000
unkown image
page readonly
 clean
6EB50000
unkown image
page readonly
 clean
7FF5030D7000
unkown image
page readonly
 clean
7FF5AC58B000
unkown image
page readonly
 clean
3300000
unkown
page read and write
 clean
344B000
unkown
page read and write
 clean
3710000
unkown
page read and write
 clean
1ACF000
stack
page read and write
 clean
1F9174F0000
unkown
page read and write
 clean
7FF5B0257000
unkown image
page readonly
 clean
37E6000
unkown
page read and write
 clean
7DF510E12000
unkown image
page readonly
 clean
7DF54BE72000
unkown image
page readonly
 clean
83177FE000
stack
page read and write
 clean
6DA98000
unkown image
page readonly
 clean
20D183A2000
unkown
page read and write
 clean
7FF54D2BD000
unkown image
page readonly
 clean
6E3A0000
unkown image
page readonly
 clean
20D18399000
unkown
page read and write
 clean
BF7000
unkown image
page readonly
 clean
C7DBB7E000
stack
page read and write
 clean
2F75000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
2C16000
unkown
page read and write
 clean
FF550000
unkown image
page readonly
 clean
7FF5AC577000
unkown image
page readonly
 clean
6DB9A000
unkown image
page read and write
 clean
F0CEDFB000
stack
page read and write
 clean
E1B000
unkown
page read and write
 clean
14320286000
unkown
page read and write
 clean
6F9A9000
unkown image
page readonly
 clean
2F75000
unkown
page read and write
 clean
15563C5A000
unkown
page read and write
 clean
2F00000
unkown
page read and write
 clean
7FF54D427000
unkown image
page readonly
 clean
2CB8000
unkown
page read and write
 clean
6E93D000
unkown image
page write copy
 clean
8A1000
unkown
page read and write
 clean
2C5F000
unkown
page read and write
 clean
7FF53E0EE000
unkown image
page readonly
 clean
2C32000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
7FF53D95D000
unkown image
page readonly
 clean
E02000
unkown
page read and write
 clean
7FF5AC44F000
unkown image
page readonly
 clean
7DF5A0582000
unkown image
page readonly
 clean
EF1000
unkown
page read and write
 clean
6EAF0000
unkown image
page readonly
 clean
7FF5AC42B000
unkown image
page readonly
 clean
1101000
unkown
page read and write
 clean
20D179E0000
unkown
page read and write
 clean
7FF54D3E7000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
8A4000
unkown
page read and write
 clean
6EC31000
unkown image
page execute read
 clean
1084000
unkown
page read and write
 clean
21456E80000
unkown image
page readonly
 clean
7FF592775000
unkown image
page readonly
 clean
F40000
heap default
page read and write
 clean
1F9170B0000
unkown
page read and write
 clean
7DF4B8170000
unkown image
page readonly
 clean
9D7000
unkown
page read and write
 clean
7FF53DD77000
unkown image
page readonly
 clean
7FF5925E7000
unkown image
page readonly
 clean
2E80000
unkown
page read and write
 clean
E85000
unkown
page read and write
 clean
343A000
unkown
page read and write
 clean
7FF54D375000
unkown image
page readonly
 clean
36AF000
unkown
page read and write
 clean
1F911C8D000
unkown
page read and write
 clean
1F912513000
unkown
page read and write
 clean
7DF4BBE50000
unkown image
page readonly
 clean
7F882000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
6EB5E000
unkown image
page readonly
 clean
6F2D0000
unkown image
page readonly
 clean
6DE90000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
FF7C0000
unkown image
page readonly
 clean
15563C13000
unkown
page read and write
 clean
84F000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
6F995000
unkown image
page read and write
 clean
6F996000
unkown image
page readonly
 clean
1F9171E0000
unkown
page read and write
 clean
31C0000
unkown
page read and write
 clean
7FF54D3FD000
unkown image
page readonly
 clean
F0B000
unkown
page read and write
 clean
3800000
unkown
page read and write
 clean
7FF5B0217000
unkown image
page readonly
 clean
20D17A50000
unkown
page read and write
 clean
7FF5AC560000
unkown image
page readonly
 clean
6DEE9000
unkown image
page readonly
 clean
2DF1000
unkown
page read and write
 clean
1060000
unkown
page read and write
 clean
6F2E5000
unkown image
page readonly
 clean
6E2F1000
unkown image
page execute read
 clean
6DEF0000
unkown image
page readonly
 clean
F01000
unkown
page read and write
 clean
21456A60000
unkown image
page readonly
 clean
3500000
unkown
page read and write
 clean
7FF5B0273000
unkown image
page readonly
 clean
F0CEA7E000
stack
page read and write
 clean
2900000
unkown
page read and write
 clean
12F5000
unkown
page read and write
 clean
13E93BC000
unkown
page read and write
 clean
7FF5927E2000
unkown image
page readonly
 clean
88E000
unkown
page read and write
 clean
7FF59282F000
unkown image
page readonly
 clean
2A0587B000
stack
page read and write
 clean
6E940000
unkown image
page read and write
 clean
20D18389000
unkown
page read and write
 clean
2FF5000
unkown
page read and write
 clean
133C000
unkown image
page read and write
 clean
1345000
unkown image
page read and write
 clean
CE5000
heap default
page read and write
 clean
EA7000
unkown
page read and write
 clean
6EB20000
unkown image
page readonly
 clean
1071000
unkown
page read and write
 clean
EC3000
unkown
page read and write
 clean
3260000
unkown
page read and write
 clean
30000
unkown image
page read and write
 clean
1F0000
unkown image
page readonly
 clean
F60000
unkown image
page readonly
 clean
2C64000
unkown
page read and write
 clean
20D17AE7000
unkown
page read and write
 clean
857000
unkown
page read and write
 clean
BF7000
unkown image
page readonly
 clean
876000
unkown
page read and write
 clean
21456A40000
unkown image
page readonly
 clean
1057000
unkown
page read and write
 clean
6F2F1000
unkown image
page execute read
 clean
859000
unkown
page read and write
 clean
6E963000
unkown image
page readonly
 clean
FF7D0000
unkown image
page readonly
 clean
6F31E000
unkown image
page readonly
 clean
108F000
unkown
page read and write
 clean
FFBC0000
unkown image
page readonly
 clean
7E0000
unkown image
page readonly
 clean
1046000
unkown
page read and write
 clean
10B2000
unkown
page read and write
 clean
20D18902000
unkown
page read and write
 clean
7F890000
unkown image
page readonly
 clean
2C50000
unkown
page read and write
 clean
6DB9A000
unkown image
page read and write
 clean
20D17800000
unkown image
page read and write
 clean
161B000
unkown
page read and write
 clean
6DE8B000
unkown image
page readonly
 clean
3435000
unkown
page read and write
 clean
6DA91000
unkown image
page execute read
 clean
E1B000
unkown
page read and write
 clean
CE0000
unkown
page read and write
 clean
6F331000
unkown image
page execute read
 clean
850000
unkown
page read and write
 clean
20D1836F000
unkown
page read and write
 clean
8317BF7000
stack
page read and write
 clean
7FF54D2C0000
unkown image
page readonly
 clean
6F9D0000
unkown image
page readonly
 clean
70283000
unkown image
page readonly
 clean
2F00000
unkown
page read and write
 clean
20D17F80000
unkown image
page readonly
 clean
F0CEBF7000
stack
page read and write
 clean
BEC000
unkown image
page write copy
 clean
1084000
unkown
page read and write
 clean
6EC21000
unkown image
page readonly
 clean
20D183B3000
unkown
page read and write
 clean
2B17000
unkown image
page readonly
 clean
13E9B7F000
stack
page read and write
 clean
6F9E8000
unkown image
page read and write
 clean
7FF5AFFA5000
unkown image
page readonly
 clean
3501000
unkown
page read and write
 clean
290000
unkown image
page read and write
 clean
17F0000
unkown image
page readonly
 clean
20D183BE000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
85F000
unkown
page read and write
 clean
3B1A000
unkown
page read and write
 clean
831767B000
stack
page read and write
 clean
EF6000
unkown
page read and write
 clean
6E93C000
unkown image
page read and write
 clean
20D183C0000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
2C22000
unkown
page read and write
 clean
1078000
unkown
page read and write
 clean
8EF000
unkown
page read and write
 clean
14320130000
unkown image
page read and write
 clean
20D18963000
unkown
page read and write
 clean
670000
heap default
page read and write
 clean
7FF53DB8C000
unkown image
page readonly
 clean
8A6000
unkown
page read and write
 clean
7DF5BA2A2000
unkown image
page readonly
 clean
2C04000
unkown
page read and write
 clean
2DF1000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
3200000
unkown image
page readonly
 clean
10FA000
unkown
page read and write
 clean
6E797000
unkown image
page read and write
 clean
E82000
unkown
page read and write
 clean
BE0000
unkown image
page readonly
 clean
1F912260000
unkown image
page readonly
 clean
7DF5BDF90000
unkown image
page readonly
 clean
BD0000
unkown image
page readonly
 clean
1B0000
unkown image
page readonly
 clean
BEC000
unkown image
page write copy
 clean
1F911C29000
unkown
page read and write
 clean
20D1835B000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
EB2000
unkown
page read and write
 clean
7FF5B029A000
unkown image
page readonly
 clean
2BB8000
unkown image
page readonly
 clean
7FF53E084000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
2191FD00000
unkown
page read and write
 clean
302C000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
345F000
unkown
page read and write
 clean
770000
unkown image
page readonly
 clean
7FF5925A5000
unkown image
page readonly
 clean
ECC000
unkown
page read and write
 clean
30BF000
unkown
page read and write
 clean
2BB3000
unkown image
page readonly
 clean
7FF53DD79000
unkown image
page readonly
 clean
21456BA0000
unkown image
page readonly
 clean
2C36000
unkown
page read and write
 clean
B00000
unkown image
page readonly
 clean
BEE000
unkown image
page read and write
 clean
2900000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
6DB01000
unkown image
page execute read
 clean
161B000
unkown
page read and write
 clean
20D17A47000
unkown
page read and write
 clean
7FA30000
unkown image
page readonly
 clean
790000
unkown image
page read and write
 clean
7FF54CFD7000
unkown image
page readonly
 clean
20D18802000
unkown
page read and write
 clean
2191FC3C000
unkown
page read and write
 clean
20D18377000
unkown
page read and write
 clean
6DB20000
unkown image
page readonly
 clean
F0CF27E000
stack
page read and write
 clean
2EC0000
unkown
page read and write
 clean
3428000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
342E000
unkown
page read and write
 clean
7F0000
unkown image
page readonly
 clean
20D18391000
unkown
page read and write
 clean
3700000
unkown image
page readonly
 clean
FF532000
unkown image
page readonly
 clean
7FF5B0311000
unkown image
page readonly
 clean
2B60000
unkown
page read and write
 clean
854000
unkown
page read and write
 clean
1F9123D0000
unkown image
page readonly
 clean
20D17970000
unkown
page read and write
 clean
70130000
unkown image
page readonly
 clean
2F00000
unkown
page read and write
 clean
155639D0000
heap private
page read and write
 clean
20D1831B000
unkown
page read and write
 clean
770000
heap default
page read and write
 clean
20D17A4F000
unkown
page read and write
 clean
10D8000
unkown
page read and write
 clean
6E920000
unkown image
page readonly
 clean
6DA71000
unkown image
page execute read
 clean
D0F000
stack
page read and write
 clean
32C0000
unkown
page read and write
 clean
B80000
unkown
page read and write
 clean
FFBA2000
unkown image
page readonly
 clean
F0CEEFF000
stack
page read and write
 clean
FF550000
unkown image
page readonly
 clean
19D70280000
unkown
page read and write
 clean
6DB80000
unkown image
page readonly
 clean
20D17870000
heap default
page read and write
 clean
7FF54CFD1000
unkown image
page readonly
 clean
7FF54D3F9000
unkown image
page readonly
 clean
3640000
unkown
page read and write
 clean
3520000
unkown
page read and write
 clean
7FF53DFC3000
unkown image
page readonly
 clean
2BA0000
unkown
page read and write
 clean
7FA40000
unkown image
page readonly
 clean
BE0000
unkown image
page readonly
 clean
EB2000
unkown
page read and write
 clean
2BE0000
unkown image
page readonly
 clean
7FF59287E000
unkown image
page readonly
 clean
3600000
unkown
page read and write
 clean
7DF459020000
unkown image
page readonly
 clean
21456C41000
unkown
page read and write
 clean
7FF53E119000
unkown image
page readonly
 clean
7DF5A0580000
unkown image
page readonly
 clean
1F911D13000
unkown
page read and write
 clean
72F20000
unkown image
page readonly
 clean
1F9171F0000
unkown
page read and write
 clean
E82000
unkown
page read and write
 clean
106B000
unkown
page read and write
 clean
1079000
unkown
page read and write
 clean
7F8A0000
unkown image
page readonly
 clean
7FF5927FE000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
3300000
unkown
page read and write
 clean
800000
unkown
page read and write
 clean
7FF5927FA000
unkown image
page readonly
 clean
BEC000
unkown image
page write copy
 clean
20D18391000
unkown
page read and write
 clean
1F911C76000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
CD0000
unkown image
page readonly
 clean
7FF5B022D000
unkown image
page readonly
 clean
6E920000
unkown image
page readonly
 clean
E87000
unkown
page read and write
 clean
6E971000
unkown image
page execute read
 clean
128F000
stack
page read and write
 clean
7FF5031B1000
unkown image
page readonly
 clean
20D17AE9000
unkown
page read and write
 clean
7FF55C2FB000
unkown image
page readonly
 clean
E8C000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
EC7000
unkown
page read and write
 clean
1344000
unkown image
page read and write
 clean
2C16000
unkown
page read and write
 clean
33C8000
heap default
page read and write
 clean
1628000
unkown
page read and write
 clean
8FA000
unkown
page read and write
 clean
FFEF0000
unkown image
page readonly
 clean
1049000
unkown
page read and write
 clean
6E9A1000
unkown image
page execute read
 clean
6E97E000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
EC4000
unkown
page read and write
 clean
FFBA0000
unkown image
page readonly
 clean
20D17B16000
unkown
page read and write
 clean
1F911C58000
unkown
page read and write
 clean
2BE6000
unkown
page read and write
 clean
20D18389000
unkown
page read and write
 clean
1F9170C0000
unkown
page read and write
 clean
20D18356000
unkown
page read and write
 clean
381E000
stack
page read and write
 clean
E1B000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
166C000
unkown
page read and write
 clean
E95000
unkown
page read and write
 clean
7FF59278C000
unkown image
page readonly
 clean
7FF59289D000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
19D6F5C0000
unkown
page read and write
 clean
FF7A0000
unkown image
page readonly
 clean
7DF55B150000
unkown image
page readonly
 clean
6F2F0000
unkown image
page readonly
 clean
10B4000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
8A5000
unkown
page read and write
 clean
7FF54D2A1000
unkown image
page readonly
 clean
72F21000
unkown image
page execute read
 clean
1057000
unkown
page read and write
 clean
7DF5BDF92000
unkown image
page readonly
 clean
7DF54BE72000
unkown image
page readonly
 clean
7FF53DFC5000
unkown image
page readonly
 clean
6EBF1000
unkown image
page readonly
 clean
2C1A000
unkown
page read and write
 clean
10D8000
unkown
page read and write
 clean
7FF55CA56000
unkown image
page readonly
 clean
2FD1000
unkown
page read and write
 clean
2F20000
unkown image
page readonly
 clean
8F5000
unkown
page read and write
 clean
1057000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
6F340000
unkown image
page readonly
 clean
20D17AA7000
unkown
page read and write
 clean
7FF53DF56000
unkown image
page readonly
 clean
21920000000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
7FF5AC641000
unkown image
page readonly
 clean
14320150000
unkown image
page readonly
 clean
3760000
unkown
page read and write
 clean
EFA000
unkown
page read and write
 clean
5B0000
unkown image
page readonly
 clean
7DF5BDF82000
unkown image
page readonly
 clean
72F31000
unkown image
page readonly
 clean
70280000
unkown image
page readonly
 clean
2B00000
unkown
page read and write
 clean
3600000
unkown
page read and write
 clean
7FF5AC619000
unkown image
page readonly
 clean
2C43000
unkown
page read and write
 clean
14320300000
unkown
page read and write
 clean
6F2F5000
unkown image
page read and write
 clean
1084000
unkown
page read and write
 clean
1050000
unkown
page read and write
 clean
6F9D0000
unkown image
page readonly
 clean
7FF54D35C000
unkown image
page readonly
 clean
C7DB4FE000
stack
page read and write
 clean
2191FD08000
unkown
page read and write
 clean
1F913020000
unkown
page read and write
 clean
107A000
unkown
page read and write
 clean
1086000
unkown
page read and write
 clean
3641000
unkown
page read and write
 clean
6EE48000
unkown image
page readonly
 clean
BEC000
unkown image
page read and write
 clean
20D18397000
unkown
page read and write
 clean
10FE000
unkown
page read and write
 clean
7FF55C3DE000
unkown image
page readonly
 clean
7FF55CB45000
unkown image
page readonly
 clean
EB5000
unkown
page read and write
 clean
7FF50312D000
unkown image
page readonly
 clean
166C000
unkown
page read and write
 clean
831757E000
stack
page read and write
 clean
7FF53E20A000
unkown image
page readonly
 clean
15563A10000
unkown image
page readonly
 clean
7FF53E0FE000
unkown image
page readonly
 clean
3300000
unkown
page read and write
 clean
CE0000
heap default
page read and write
 clean
6F993000
unkown image
page readonly
 clean
19D6F3E0000
heap private
page read and write
 clean
3010000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
1069000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
6DBB1000
unkown image
page execute read
 clean
3448000
unkown
page read and write
 clean
6DDC5000
unkown image
page readonly
 clean
118E000
stack
page read and write
 clean
20D183A2000
unkown
page read and write
 clean
10C7000
unkown
page read and write
 clean
7FF54D410000
unkown image
page readonly
 clean
ED4000
unkown
page read and write
 clean
7FF592833000
unkown image
page readonly
 clean
7FF5926D9000
unkown image
page readonly
 clean
7FF592128000
unkown image
page readonly
 clean
E82000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
365A000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
15563C3C000
unkown
page read and write
 clean
2C33000
unkown
page read and write
 clean
3010000
unkown
page read and write
 clean
760000
unkown image
page readonly
 clean
F2B000
unkown
page read and write
 clean
7DF5A0582000
unkown image
page readonly
 clean
6E958000
unkown image
page read and write
 clean
6DB9B000
unkown image
page readonly
 clean
6F991000
unkown image
page execute read
 clean
6DAD1000
unkown image
page execute read
 clean
108D000
unkown
page read and write
 clean
3436000
unkown
page read and write
 clean
6E2A9000
unkown image
page read and write
 clean
2B1B000
unkown image
page readonly
 clean
7D0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
2C28000
unkown
page read and write
 clean
D95000
unkown
page read and write
 clean
3190000
unkown
page read and write
 clean
342E000
unkown
page read and write
 clean
7DF56A7B2000
unkown image
page readonly
 clean
7FF53DF2A000
unkown image
page readonly
 clean
1F911B90000
unkown
page read and write
 clean
5FE000
stack
page read and write
 clean
2FDF000
unkown
page read and write
 clean
EC7000
unkown
page read and write
 clean
F70000
heap default
page read and write
 clean
BE0000
unkown image
page readonly
 clean
7FF53DCAB000
unkown image
page readonly
 clean
7DF54BE82000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
7FF5B01A5000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
10A6000
unkown
page read and write
 clean
1065000
unkown
page read and write
 clean
FFF02000
unkown image
page readonly
 clean
2C1E000
unkown
page read and write
 clean
7FF5B024E000
unkown image
page readonly
 clean
7FF53DF61000
unkown image
page readonly
 clean
7FF5030C3000
unkown image
page readonly
 clean
1F9123B0000
unkown image
page readonly
 clean
EDD000
unkown
page read and write
 clean
6DBA1000
unkown image
page readonly
 clean
331F000
stack
page read and write
 clean
7FF53E15B000
unkown image
page readonly
 clean
EC7000
unkown
page read and write
 clean
BEE000
unkown image
page read and write
 clean
6DA94000
unkown image
page readonly
 clean
3760000
unkown
page read and write
 clean
6E970000
unkown image
page readonly
 clean
790000
unkown image
page readonly
 clean
6EC30000
unkown image
page readonly
 clean
1F917253000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
E87000
unkown
page read and write
 clean
86D000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
EE5000
unkown
page read and write
 clean
7DF55B162000
unkown image
page readonly
 clean
7FF54D46D000
unkown image
page readonly
 clean
1F9174D0000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
E16000
unkown image
page readonly
 clean
7FF5AC410000
unkown image
page readonly
 clean
20D18399000
unkown
page read and write
 clean
6DAD0000
unkown image
page readonly
 clean
1F917400000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
7FF5AC567000
unkown image
page readonly
 clean
1F917302000
unkown
page read and write
 clean
EC4000
unkown
page read and write
 clean
7DF5BDFA0000
unkown image
page readonly
 clean
6DDE0000
unkown image
page readonly
 clean
1F9172DA000
unkown
page read and write
 clean
6E287000
unkown image
page read and write
 clean
7FF5AC62A000
unkown image
page readonly
 clean
20D1836D000
unkown
page read and write
 clean
6E9A1000
unkown image
page execute read
 clean
FF7A2000
unkown image
page readonly
 clean
481FD7D000
stack
page read and write
 clean
E1B000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
1F912518000
unkown
page read and write
 clean
7FF53DE15000
unkown image
page readonly
 clean
7FF5926F0000
unkown image
page readonly
 clean
3424000
unkown
page read and write
 clean
FF8E0000
unkown image
page readonly
 clean
ECB000
unkown
page read and write
 clean
2D00000
unkown
page read and write
 clean
105F000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
B5E000
stack
page read and write
 clean
8BD000
unkown
page read and write
 clean
3330000
heap private
page read and write
 clean
1028000
unkown
page read and write
 clean
7AE000
stack
page read and write
 clean
6E950000
unkown image
page readonly
 clean
6F301000
unkown image
page execute read
 clean
E82000
unkown
page read and write
 clean
1F911C94000
unkown
page read and write
 clean
2191FC4B000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
6E965000
unkown image
page read and write
 clean
1628000
unkown
page read and write
 clean
1F9172A8000
unkown
page read and write
 clean
21456C57000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
6DA98000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
D06000
heap private
page read and write
 clean
7FF592685000
unkown image
page readonly
 clean
2BC7000
unkown
page read and write
 clean
7FF5B0304000
unkown image
page readonly
 clean
2C54000
unkown
page read and write
 clean
327E000
stack
page read and write
 clean
6EADF000
unkown image
page readonly
 clean
EB7000
unkown
page read and write
 clean
6E955000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
AFE000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
3432000
unkown
page read and write
 clean
30B5000
unkown
page read and write
 clean
20D18902000
unkown
page read and write
 clean
19D6FB50000
unkown image
page readonly
 clean
8A0000
unkown
page read and write
 clean
6F9E8000
unkown image
page read and write
 clean
6EC1C000
unkown image
page read and write
 clean
6DBB1000
unkown image
page execute read
 clean
7FF59280E000
unkown image
page readonly
 clean
2B3B000
unkown image
page readonly
 clean
1086000
unkown
page read and write
 clean
854000
unkown
page read and write
 clean
1F9172AB000
unkown
page read and write
 clean
6F9A0000
unkown image
page readonly
 clean
EB1000
unkown
page read and write
 clean
6F9C0000
unkown image
page readonly
 clean
20D1837C000
unkown
page read and write
 clean
7FF548A61000
unkown image
page readonly
 clean
F10000
unkown image
page readonly
 clean
7F8A0000
unkown image
page readonly
 clean
7FF53DF0B000
unkown image
page readonly
 clean
10F9000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
C7DB6FB000
stack
page read and write
 clean
20D17A55000
unkown
page read and write
 clean
89E000
unkown
page read and write
 clean
3150000
unkown
page read and write
 clean
EB7000
unkown
page read and write
 clean
1074000
unkown
page read and write
 clean
7DF5BA2C0000
unkown image
page readonly
 clean
19D70000000
unkown
page read and write
 clean
3000000
unkown image
page readonly
 clean
1311000
unkown image
page execute read
 clean
846000
unkown
page read and write
 clean
7FF5B0233000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
E6C000
unkown
page read and write
 clean
7EE000
stack
page read and write
 clean
6EB1A000
unkown image
page readonly
 clean
6DDC8000
unkown image
page readonly
 clean
104F000
unkown
page read and write
 clean
21456E70000
heap private
page read and write
 clean
1068000
unkown
page read and write
 clean
6E963000
unkown image
page readonly
 clean
377A000
unkown
page read and write
 clean
3B12000
unkown
page read and write
 clean
3150000
unkown image
page readonly
 clean
BF5000
unkown image
page read and write
 clean
1084000
unkown
page read and write
 clean
15563E00000
unkown image
page readonly
 clean
BC0000
unkown image
page readonly
 clean
2191FC4F000
unkown
page read and write
 clean
7FA22000
unkown image
page readonly
 clean
EDD000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
2E40000
unkown
page read and write
 clean
7DF5BA2B0000
unkown image
page readonly
 clean
13FE000
stack
page read and write
 clean
1F912518000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
6E2A9000
unkown image
page read and write
 clean
2B5A000
unkown
page read and write
 clean
1F911CB1000
unkown
page read and write
 clean
1F917610000
unkown image
page read and write
 clean
20D17820000
unkown image
page readonly
 clean
6E3F9000
unkown image
page readonly
 clean
32C0000
unkown
page read and write
 clean
2C1F000
unkown
page read and write
 clean
2C56000
unkown
page read and write
 clean
2F00000
unkown
page read and write
 clean
6DEE7000
unkown image
page readonly
 clean
6E960000
unkown image
page readonly
 clean
2BA0000
unkown
page read and write
 clean
6DB21000
unkown image
page execute read
 clean
700000
unkown image
page readonly
 clean
7FF5927A1000
unkown image
page readonly
 clean
EB1000
unkown
page read and write
 clean
6EC3D000
unkown image
page execute read
 clean
1048000
unkown
page read and write
 clean
EB2000
unkown
page read and write
 clean
2900000
unkown
page read and write
 clean
7FF5AFB22000
unkown image
page readonly
 clean
20D18372000
unkown
page read and write
 clean
BBC000
unkown
page read and write
 clean
7FF5B022F000
unkown image
page readonly
 clean
F16000
unkown
page read and write
 clean
20D18800000
unkown
page read and write
 clean
2191FA40000
unkown image
page readonly
 clean
EC7000
unkown
page read and write
 clean
1F911B40000
unkown image
page readonly
 clean
E2C000
unkown
page read and write
 clean
1F9172EC000
unkown
page read and write
 clean
303B000
unkown
page read and write
 clean
21456C5F000
unkown
page read and write
 clean
FD0000
unkown image
page readonly
 clean
10FF000
unkown
page read and write
 clean
133C000
unkown image
page write copy
 clean
1701000
unkown
page read and write
 clean
6DABB000
unkown image
page readonly
 clean
20D1838A000
unkown
page read and write
 clean
1000000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
1432025F000
unkown
page read and write
 clean
6DA90000
unkown image
page readonly
 clean
F02000
unkown
page read and write
 clean
14320213000
unkown
page read and write
 clean
C7DB1BB000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
7FF55CB51000
unkown image
page readonly
 clean
3446000
unkown
page read and write
 clean
E28000
unkown
page read and write
 clean
133C000
unkown image
page write copy
 clean
20D18370000
unkown
page read and write
 clean
21456C30000
heap default
page read and write
 clean
7FF55CB41000
unkown image
page readonly
 clean
107B000
unkown
page read and write
 clean
342C000
unkown
page read and write
 clean
282FD1A000
unkown
page read and write
 clean
6EC1D000
unkown image
page write copy
 clean
1068000
unkown
page read and write
 clean
703B5000
unkown image
page readonly
 clean
13E997F000
stack
page read and write
 clean
FFBB2000
unkown image
page readonly
 clean
7FF592732000
unkown image
page readonly
 clean
FF540000
unkown image
page readonly
 clean
6F2E0000
unkown image
page readonly
 clean
20D17A4B000
unkown
page read and write
 clean
84E000
unkown
page read and write
 clean
901000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
6EB44000
unkown image
page read and write
 clean
2C2A000
unkown
page read and write
 clean
15563C29000
unkown
page read and write
 clean
70141000
unkown image
page readonly
 clean
107D000
unkown
page read and write
 clean
30A5000
unkown
page read and write
 clean
831747B000
unkown
page read and write
 clean
7FF54D467000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
1F9171E4000
unkown
page read and write
 clean
1056000
unkown
page read and write
 clean
7FF53E0D2000
unkown image
page readonly
 clean
3180000
unkown
page read and write
 clean
F0CE79B000
unkown
page read and write
 clean
2C1C000
unkown
page read and write
 clean
C7DB5FB000
stack
page read and write
 clean
7FF53E18A000
unkown image
page readonly
 clean
72F30000
unkown image
page read and write
 clean
3350000
unkown
page read and write
 clean
6E2F0000
unkown image
page readonly
 clean
7FF5928F9000
unkown image
page readonly
 clean
7FF53E1F4000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
1069000
unkown
page read and write
 clean
7FF5924F4000
unkown image
page readonly
 clean
1087000
unkown
page read and write
 clean
1330000
unkown image
page readonly
 clean
20D1886A000
unkown
page read and write
 clean
7FF53E187000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
8C4000
unkown
page read and write
 clean
FF6A0000
unkown image
page readonly
 clean
2191FD13000
unkown
page read and write
 clean
FF540000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
6E801000
unkown image
page execute read
 clean
3433000
unkown
page read and write
 clean
7F880000
unkown image
page readonly
 clean
889000
unkown
page read and write
 clean
1F9171C0000
unkown
page read and write
 clean
1088000
unkown
page read and write
 clean
7FF5B00A6000
unkown image
page readonly
 clean
2191FB70000
unkown
page read and write
 clean
7DF5BDF82000
unkown image
page readonly
 clean
10A7000
unkown
page read and write
 clean
7F8A0000
unkown image
page readonly
 clean
F38000
unkown
page read and write
 clean
6EC01000
unkown image
page execute read
 clean
E1B000
unkown
page read and write
 clean
2A058FF000
stack
page read and write
 clean
7DF5BDF90000
unkown image
page readonly
 clean
7FF5029D1000
unkown image
page readonly
 clean
7FA20000
unkown image
page readonly
 clean
104F000
unkown
page read and write
 clean
7FF55CACA000
unkown image
page readonly
 clean
1F911B10000
unkown image
page readonly
 clean
3457000
unkown
page read and write
 clean
1360000
unkown image
page readonly
 clean
1F911C7B000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
6EE45000
unkown image
page readonly
 clean
20D1835F000
unkown
page read and write
 clean
AFF000
stack
page read and write
 clean
7FF5AC2C5000
unkown image
page readonly
 clean
7FF5031AA000
unkown image
page readonly
 clean
15564202000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
20D18802000
unkown
page read and write
 clean
6E950000
unkown image
page readonly
 clean
21920402000
unkown
page read and write
 clean
7FF5924F7000
unkown image
page readonly
 clean
7DF55B160000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
7FF50319A000
unkown image
page readonly
 clean
7FF54D403000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
1082000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
12F1000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
1200000
unkown image
page readonly
 clean
6EB50000
unkown image
page readonly
 clean
7FF5030FB000
unkown image
page readonly
 clean
7FF54CCF2000
unkown image
page readonly
 clean
BEC000
unkown image
page read and write
 clean
15564190000
unkown
page read and write
 clean
7DF5A0592000
unkown image
page readonly
 clean
20D1833F000
unkown
page read and write
 clean
3600000
unkown
page read and write
 clean
1094000
unkown
page read and write
 clean
8BE000
unkown
page read and write
 clean
FF7A2000
unkown image
page readonly
 clean
B00000
heap private
page read and write
 clean
BD0000
heap default
page read and write
 clean
2BAA000
unkown
page read and write
 clean
19D6F3F0000
heap default
page read and write
 clean
6EB16000
unkown image
page read and write
 clean
7FF5B0243000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
6EBEB000
unkown image
page readonly
 clean
3404000
unkown
page read and write
 clean
7B0000
unkown image
page readonly
 clean
1086000
unkown
page read and write
 clean
6F300000
unkown image
page readonly
 clean
7FF59270B000
unkown image
page readonly
 clean
7FF5031A5000
unkown image
page readonly
 clean
6EE3F000
unkown image
page read and write
 clean
6F9B0000
unkown image
page readonly
 clean
2FE2000
unkown
page read and write
 clean
1042000
unkown
page read and write
 clean
1310000
unkown image
page readonly
 clean
14320259000
unkown
page read and write
 clean
1F917404000
unkown
page read and write
 clean
6E920000
unkown image
page readonly
 clean
E16000
unkown image
page readonly
 clean
6E2C1000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
3030000
unkown image
page readonly
 clean
6DB00000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
858000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
7DF55B170000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
12CE000
stack
page read and write
 clean
7FF5AC54D000
unkown image
page readonly
 clean
7FF59290A000
unkown image
page readonly
 clean
FF8D2000
unkown image
page readonly
 clean
7DF56A7D0000
unkown image
page readonly
 clean
10C7000
unkown
page read and write
 clean
20D18391000
unkown
page read and write
 clean
7FF5AFE07000
unkown image
page readonly
 clean
6DAC6000
unkown image
page read and write
 clean
19D6F450000
heap default
page read and write
 clean
2FE9000
unkown
page read and write
 clean
6DDC5000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
7FF5AC4C1000
unkown image
page readonly
 clean
B35000
unkown
page read and write
 clean
F0B000
unkown
page read and write
 clean
2B00000
unkown
page read and write
 clean
10FC000
unkown
page read and write
 clean
20D17AEA000
unkown
page read and write
 clean
6E285000
unkown image
page read and write
 clean
C7DB877000
stack
page read and write
 clean
EFC000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
EC7000
unkown
page read and write
 clean
1F911C71000
unkown
page read and write
 clean
7FF53DEE2000
unkown image
page readonly
 clean
6E966000
unkown image
page readonly
 clean
2BD8000
unkown image
page readonly
 clean
6EC30000
unkown image
page readonly
 clean
6F9EB000
unkown image
page readonly
 clean
BF7000
unkown image
page readonly
 clean
7FF53DF96000
unkown image
page readonly
 clean
6E971000
unkown image
page execute read
 clean
6EB45000
unkown image
page readonly
 clean
342A000
unkown
page read and write
 clean
7DF510E20000
unkown image
page readonly
 clean
7FF5030C6000
unkown image
page readonly
 clean
381F000
unkown
page read and write
 clean
6DBA1000
unkown image
page readonly
 clean
1F9120D0000
unkown image
page readonly
 clean
7DF54BE70000
unkown image
page readonly
 clean
A3C000
unkown
page read and write
 clean
7FF53DFB2000
unkown image
page readonly
 clean
7FF54D443000
unkown image
page readonly
 clean
1F912402000
unkown
page read and write
 clean
EC7000
unkown
page read and write
 clean
7FF5B00ED000
unkown image
page readonly
 clean
1669000
unkown
page read and write
 clean
6F300000
unkown image
page readonly
 clean
34A8000
unkown
page read and write
 clean
6DDE0000
unkown image
page readonly
 clean
7FF503189000
unkown image
page readonly
 clean
B40000
unkown image
page read and write
 clean
10A4000
unkown
page read and write
 clean
EBC000
unkown
page read and write
 clean
7FF55C2C1000
unkown image
page readonly
 clean
2B50000
unkown image
page readonly
 clean
371E000
stack
page read and write
 clean
20D18900000
unkown
page read and write
 clean
7DF49E450000
unkown image
page readonly
 clean
83C000
unkown
page read and write
 clean
7FF55C3CD000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
2C09000
unkown
page read and write
 clean
3036000
unkown
page read and write
 clean
2191FC00000
unkown
page read and write
 clean
E40000
heap default
page read and write
 clean
3064000
unkown
page read and write
 clean
6DAA1000
unkown image
page execute read
 clean
1F91722E000
unkown
page read and write
 clean
703B0000
unkown image
page readonly
 clean
7FF53DFC9000
unkown image
page readonly
 clean
F60000
unkown image
page readonly
 clean
21456C5F000
unkown
page read and write
 clean
2191FA10000
heap private
page read and write
 clean
7DF56A7C2000
unkown image
page readonly
 clean
6DA88000
unkown image
page read and write
 clean
EB1000
unkown
page read and write
 clean
106B000
unkown
page read and write
 clean
BC0000
unkown image
page readonly
 clean
3300000
unkown
page read and write
 clean
FF542000
unkown image
page readonly
 clean
2FF4000
unkown
page read and write
 clean
7FF54D2FF000
unkown image
page readonly
 clean
88C000
unkown
page read and write
 clean
30D0000
unkown
page read and write
 clean
6DB00000
unkown image
page readonly
 clean
6EB51000
unkown image
page execute read
 clean
1076000
unkown
page read and write
 clean
481FB7E000
stack
page read and write
 clean
3421000
unkown
page read and write
 clean
2C5E000
unkown
page read and write
 clean
6DAD0000
unkown image
page readonly
 clean
6DB9B000
unkown image
page readonly
 clean
2BA0000
unkown
page read and write
 clean
14320150000
unkown image
page readonly
 clean
15563C54000
unkown
page read and write
 clean
20D18399000
unkown
page read and write
 clean
6DB20000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
7FF53D99B000
unkown image
page readonly
 clean
20D18398000
unkown
page read and write
 clean
20D1839A000
unkown
page read and write
 clean
1E10000
unkown image
page readonly
 clean
FF430000
unkown image
page readonly
 clean
6E950000
unkown image
page readonly
 clean
3300000
unkown
page read and write
 clean
8C6000
unkown
page read and write
 clean
6E285000
unkown image
page read and write
 clean
1051000
unkown
page read and write
 clean
EE8000
unkown
page read and write
 clean
3457000
unkown
page read and write
 clean
8A9000
unkown
page read and write
 clean
14320200000
unkown
page read and write
 clean
2A0C000
unkown
page read and write
 clean
7FF5B0229000
unkown image
page readonly
 clean
3F5000
unkown
page read and write
 clean
7FF5B018C000
unkown image
page readonly
 clean
F38000
unkown
page read and write
 clean
1F911C78000
unkown
page read and write
 clean
7FF592671000
unkown image
page readonly
 clean
87B000
unkown
page read and write
 clean
7DF56A7B0000
unkown image
page readonly
 clean
7FF5926ED000
unkown image
page readonly
 clean
6E401000
unkown image
page execute read
 clean
6EDAC000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
32C0000
unkown
page read and write
 clean
1F9123F0000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
7FF55CB4A000
unkown image
page readonly
 clean
6E7D1000
unkown image
page readonly
 clean
828000
unkown
page read and write
 clean
F00000
unkown
page read and write
 clean
7DF510E12000
unkown image
page readonly
 clean
DE0000
unkown image
page readonly
 clean
EC4000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
3020000
unkown image
page read and write
 clean
3560000
unkown
page read and write
 clean
380C000
unkown
page read and write
 clean
19D70250000
unkown
page read and write
 clean
6EAA7000
unkown image
page read and write
 clean
161B000
unkown
page read and write
 clean
6F9A0000
unkown image
page readonly
 clean
700000
unkown image
page readonly
 clean
6DA90000
unkown image
page readonly
 clean
7FF53E091000
unkown image
page readonly
 clean
E69000
unkown
page read and write
 clean
6DE87000
unkown image
page readonly
 clean
13DE000
stack
page read and write
 clean
6DD2C000
unkown image
page readonly
 clean
7FF5AC127000
unkown image
page readonly
 clean
3418000
unkown
page read and write
 clean
7FF5AC49B000
unkown image
page readonly
 clean
BE0000
unkown image
page readonly
 clean
7FF59291A000
unkown image
page readonly
 clean
1140000
unkown image
page readonly
 clean
E82000
unkown
page read and write
 clean
3416000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
879000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
2C2E000
unkown
page read and write
 clean
7FF5031B1000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
7FF53DF75000
unkown image
page readonly
 clean
2A0000
unkown image
page readonly
 clean
895000
unkown
page read and write
 clean
133C000
unkown image
page read and write
 clean
2B12000
unkown image
page readonly
 clean
7FF54D417000
unkown image
page readonly
 clean
6DB01000
unkown image
page execute read
 clean
6DDBF000
unkown image
page read and write
 clean
3032000
unkown
page read and write
 clean
1055000
unkown
page read and write
 clean
166C000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
EE1000
unkown
page read and write
 clean
7FF59209F000
unkown image
page readonly
 clean
7FF5AC5B7000
unkown image
page readonly
 clean
BC1000
unkown image
page execute read
 clean
108F000
unkown
page read and write
 clean
881000
unkown
page read and write
 clean
E28000
unkown
page read and write
 clean
6E955000
unkown image
page readonly
 clean
19D6F43C000
unkown
page read and write
 clean
873000
unkown
page read and write
 clean
2C25000
unkown
page read and write
 clean
EBD000
unkown
page read and write
 clean
C7DB97F000
stack
page read and write
 clean
161B000
unkown
page read and write
 clean
6DDE1000
unkown image
page execute read
 clean
7DF468680000
unkown image
page readonly
 clean
6DAA0000
unkown image
page readonly
 clean
32B0000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
1F911B60000
heap default
page read and write
 clean
2A20000
unkown
page read and write
 clean
FFF10000
unkown image
page readonly
 clean
7FF55CA70000
unkown image
page readonly
 clean
20D183BB000
unkown
page read and write
 clean
35DC000
stack
page read and write
 clean
1F917020000
unkown
page read and write
 clean
E89000
unkown
page read and write
 clean
1F91724C000
unkown
page read and write
 clean
BA0000
heap private
page read and write
 clean
7FF503194000
unkown image
page readonly
 clean
7DF5BA2A0000
unkown image
page readonly
 clean
FFAA0000
unkown image
page readonly
 clean
2C07000
unkown
page read and write
 clean
F0CF7FC000
stack
page read and write
 clean
8EF000
unkown
page read and write
 clean
10AB000
unkown
page read and write
 clean
305D000
unkown
page read and write
 clean
7FF53E211000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
7DF56A7D0000
unkown image
page readonly
 clean
1F911B00000
heap private
page read and write
 clean
7DF5A0590000
unkown image
page readonly
 clean
106B000
unkown
page read and write
 clean
20D17E00000
unkown image
page readonly
 clean
6F9C5000
unkown image
page readonly
 clean
21456C58000
unkown
page read and write
 clean
1F911ED0000
unkown image
page readonly
 clean
6EAD0000
unkown image
page readonly
 clean
7FF5AFB28000
unkown image
page readonly
 clean
6E12C000
unkown image
page readonly
 clean
2191FC48000
unkown
page read and write
 clean
E55000
heap default
page read and write
 clean
6F2D0000
unkown image
page readonly
 clean
303F000
unkown
page read and write
 clean
20D179E0000
unkown
page read and write
 clean
108D000
unkown
page read and write
 clean
6E63C000
unkown image
page readonly
 clean
6DE90000
unkown image
page readonly
 clean
1F9123E0000
unkown image
page readonly
 clean
7F890000
unkown image
page readonly
 clean
C7DBA7C000
stack
page read and write
 clean
EBF000
unkown
page read and write
 clean
F09000
unkown
page read and write
 clean
EBA000
unkown
page read and write
 clean
3450000
unkown
page read and write
 clean
1F91723F000
unkown
page read and write
 clean
E6C000
unkown
page read and write
 clean
2191FE00000
unkown image
page readonly
 clean
3438000
unkown
page read and write
 clean
6DDE6000
unkown image
page readonly
 clean
7FA40000
unkown image
page readonly
 clean
6F9C0000
unkown image
page readonly
 clean
2191FC02000
unkown
page read and write
 clean
6E34B000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
6DB13000
unkown image
page readonly
 clean
6E93C000
unkown image
page read and write
 clean
F0CF3FD000
stack
page read and write
 clean
BC0000
unkown image
page readonly
 clean
7FF55C967000
unkown image
page readonly
 clean
7FF54D44E000
unkown image
page readonly
 clean
20D18399000
unkown
page read and write
 clean
BC1000
unkown image
page execute read
 clean
2BB8000
unkown image
page readonly
 clean
10BA000
unkown
page read and write
 clean
341C000
unkown
page read and write
 clean
7F882000
unkown image
page readonly
 clean
BF4000
unkown image
page read and write
 clean
3F1000
unkown
page read and write
 clean
32A0000
unkown image
page readonly
 clean
E87000
unkown
page read and write
 clean
6E921000
unkown image
page execute read
 clean
481FAFE000
stack
page read and write
 clean
6DA90000
unkown image
page readonly
 clean
305B000
unkown
page read and write
 clean
7FF5926D1000
unkown image
page readonly
 clean
1072000
unkown
page read and write
 clean
BF7000
unkown image
page readonly
 clean
2BA0000
unkown
page read and write
 clean
106E000
unkown
page read and write
 clean
6DDE1000
unkown image
page execute read
 clean
7FF592920000
unkown image
page readonly
 clean
3446000
unkown
page read and write
 clean
1F917030000
unkown
page read and write
 clean
143201D0000
unkown
page read and write
 clean
7FF59229C000
unkown image
page readonly
 clean
7FF5AC631000
unkown image
page readonly
 clean
6DEF1000
unkown image
page execute read
 clean
1068000
unkown
page read and write
 clean
7FF55CA5F000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
385E000
stack
page read and write
 clean
20D1830F000
unkown
page read and write
 clean
3447000
unkown
page read and write
 clean
896000
unkown
page read and write
 clean
10BF000
unkown
page read and write
 clean
F0CF4FF000
stack
page read and write
 clean
1068000
unkown
page read and write
 clean
10C7000
unkown
page read and write
 clean
13F0000
heap private
page read and write
 clean
BC0000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
1072000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
8C6000
unkown
page read and write
 clean
20D183B3000
unkown
page read and write
 clean
6F0000
unkown image
page read and write
 clean
BC0000
unkown image
page readonly
 clean
14320850000
unkown image
page readonly
 clean
BEC000
unkown image
page write copy
 clean
1628000
unkown
page read and write
 clean
20D183C2000
unkown
page read and write
 clean
822000
unkown
page read and write
 clean
8F3000
unkown
page read and write
 clean
2F70000
unkown
page read and write
 clean
88C000
unkown
page read and write
 clean
7FF53E162000
unkown image
page readonly
 clean
37C7000
unkown
page read and write
 clean
8D0000
unkown
page read and write
 clean
FF560000
unkown image
page readonly
 clean
2BB8000
unkown image
page readonly
 clean
6E941000
unkown image
page readonly
 clean
7DF5BDF80000
unkown image
page readonly
 clean
7DF510E22000
unkown image
page readonly
 clean
888000
unkown
page read and write
 clean
F40000
unkown image
page readonly
 clean
20D17AC5000
unkown
page read and write
 clean
7FF55C3CF000
unkown image
page readonly
 clean
6DE3B000
unkown image
page readonly
 clean
32BE000
stack
page read and write
 clean
10F5000
unkown
page read and write
 clean
1330000
unkown image
page readonly
 clean
15564180000
unkown image
page readonly
 clean
6DAC6000
unkown image
page read and write
 clean
20D17A3C000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
EE1000
unkown
page read and write
 clean
34B9000
unkown
page read and write
 clean
1012000
unkown
page read and write
 clean
7FF55C8EA000
unkown image
page readonly
 clean
2A05AFE000
stack
page read and write
 clean
BF7000
unkown image
page readonly
 clean
1C10000
unkown image
page readonly
 clean
FFBB0000
unkown image
page readonly
 clean
20D1835F000
unkown
page read and write
 clean
3FC000
unkown
page read and write
 clean
3457000
unkown
page read and write
 clean
15563C00000
unkown
page read and write
 clean
33D0000
unkown image
page readonly
 clean
195000
unkown
page read and write
 clean
6DAA0000
unkown image
page readonly
 clean
7FF59262B000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
1F9123C0000
unkown image
page readonly
 clean
20D183C2000
unkown
page read and write
 clean
7EC000
unkown
page read and write
 clean
1089000
unkown
page read and write
 clean
108F000
unkown
page read and write
 clean
EBA000
unkown
page read and write
 clean
6E2C1000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
7FF54D4F1000
unkown image
page readonly
 clean
7FF592857000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
6EB3B000
unkown image
page readonly
 clean
855000
unkown
page read and write
 clean
2CA7000
unkown
page read and write
 clean
7FF54D34B000
unkown image
page readonly
 clean
19D6F3E9000
heap private
page read and write
 clean
FF8F0000
unkown image
page readonly
 clean
6E800000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
20D18391000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
20D183C6000
unkown
page read and write
 clean
155639E0000
unkown image
page readonly
 clean
20D17850000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
7FF592829000
unkown image
page readonly
 clean
9D000
unkown
page read and write
 clean
1F912500000
unkown
page read and write
 clean
B60000
heap default
page read and write
 clean
1330000
heap default
page read and write
 clean
EB7000
unkown
page read and write
 clean
1061000
unkown
page read and write
 clean
1F917200000
unkown
page read and write
 clean
6F990000
unkown image
page readonly
 clean
3478000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
8AB000
unkown
page read and write
 clean
2191FA20000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
877000
unkown
page read and write
 clean
2C0C000
unkown
page read and write
 clean
84E000
unkown
page read and write
 clean
E16000
unkown image
page readonly
 clean
3422000
unkown
page read and write
 clean
780000
unkown
page read and write
 clean
10DD000
unkown
page read and write
 clean
3060000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
7FF5AC54F000
unkown image
page readonly
 clean
3705000
unkown
page read and write
 clean
FF7B2000
unkown image
page readonly
 clean
EF1000
unkown
page read and write
 clean
881000
unkown
page read and write
 clean
853000
unkown
page read and write
 clean
7DF5BA2B2000
unkown image
page readonly
 clean
7FF5B029D000
unkown image
page readonly
 clean
872000
unkown
page read and write
 clean
1055000
unkown
page read and write
 clean
6DDBF000
unkown image
page read and write
 clean
EA7000
unkown
page read and write
 clean
7FF592817000
unkown image
page readonly
 clean
2FB0000
unkown image
page readonly
 clean
6E961000
unkown image
page execute read
 clean
21920180000
unkown image
page readonly
 clean
6DAF4000
unkown image
page read and write
 clean
1628000
unkown
page read and write
 clean
6E2BF000
unkown image
page read and write
 clean
1068000
unkown
page read and write
 clean
20D18361000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
7FF592911000
unkown image
page readonly
 clean
6E203000
unkown image
page readonly
 clean
8A3000
unkown
page read and write
 clean
13E0000
unkown image
page readonly
 clean
2F90000
unkown
page read and write
 clean
7FF55CB29000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
7FF53DDBF000
unkown image
page readonly
 clean
1380000
unkown image
page readonly
 clean
7F880000
unkown image
page readonly
 clean
6DB12000
unkown image
page read and write
 clean
7FF5030BF000
unkown image
page readonly
 clean
7F892000
unkown image
page readonly
 clean
FBC000
unkown
page read and write
 clean
3400000
unkown
page read and write
 clean
2D50000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
FFDF0000
unkown image
page readonly
 clean
1101000
unkown
page read and write
 clean
FF7C0000
unkown image
page readonly
 clean
20D183B1000
unkown
page read and write
 clean
1F9170A0000
unkown
page read and write
 clean
2C2E000
unkown
page read and write
 clean
6EB70000
unkown image
page readonly
 clean
7FF54D4F1000
unkown image
page readonly
 clean
7F890000
unkown image
page readonly
 clean
2B2D000
unkown image
page readonly
 clean
1F911B30000
unkown image
page readonly
 clean
20D183AA000
unkown
page read and write
 clean
17E0000
unkown image
page readonly
 clean
6F9A1000
unkown image
page execute read
 clean
602000
unkown
page read and write
 clean
6EAA9000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
3417000
unkown
page read and write
 clean
E16000
unkown image
page readonly
 clean
20D17810000
heap private
page read and write
 clean
E6C000
unkown
page read and write
 clean
2FE5000
unkown
page read and write
 clean
ED5000
unkown
page read and write
 clean
7DF54BE80000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
1700000
unkown image
page readonly
 clean
6DA70000
unkown image
page readonly
 clean
3433000
unkown
page read and write
 clean
10D2000
unkown
page read and write
 clean
371000
unkown
page read and write
 clean
FF7B2000
unkown image
page readonly
 clean
7FF503182000
unkown image
page readonly
 clean
14320302000
unkown
page read and write
 clean
7FF5B0247000
unkown image
page readonly
 clean
2D90000
unkown
page read and write
 clean
1062000
unkown
page read and write
 clean
2FD5000
unkown
page read and write
 clean
3357000
unkown
page read and write
 clean
84A000
unkown
page read and write
 clean
19D6F310000
unkown
page read and write
 clean
2C1F000
unkown
page read and write
 clean
E47000
heap default
page read and write
 clean
E28000
unkown
page read and write
 clean
BEC000
unkown image
page read and write
 clean
7FF592407000
unkown image
page readonly
 clean
1310000
unkown image
page readonly
 clean
37A1000
unkown
page read and write
 clean
2F00000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
345F000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
283007E000
stack
page read and write
 clean
6E713000
unkown image
page readonly
 clean
20D179F0000
unkown image
page read and write
 clean
1310000
unkown image
page readonly
 clean
7FF5AC624000
unkown image
page readonly
 clean
2FC000
unkown
page read and write
 clean
7FF592287000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
2D80000
heap private
page read and write
 clean
2C2C000
unkown
page read and write
 clean
870000
unkown
page read and write
 clean
F0CF47F000
stack
page read and write
 clean
7FF54D4EA000
unkown image
page readonly
 clean
2C05000
unkown
page read and write
 clean
3260000
unkown
page read and write
 clean
20D17840000
unkown image
page readonly
 clean
B40000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
8F2000
unkown
page read and write
 clean
810000
unkown
page read and write
 clean
40000
unkown image
page readonly
 clean
7DF54BE80000
unkown image
page readonly
 clean
E82000
unkown
page read and write
 clean
6F9C1000
unkown image
page execute read
 clean
7DF510E10000
unkown image
page readonly
 clean
B00000
unkown
page read and write
 clean
6E951000
unkown image
page execute read
 clean
7FF5AC537000
unkown image
page readonly
 clean
3595000
unkown
page read and write
 clean
7DF55B170000
unkown image
page readonly
 clean
812000
unkown
page read and write
 clean
6DAA0000
unkown image
page readonly
 clean
20D1833C000
unkown
page read and write
 clean
8C6000
unkown
page read and write
 clean
108D000
unkown
page read and write
 clean
6DA71000
unkown image
page execute read
 clean
7FF54D4E1000
unkown image
page readonly
 clean
6E286000
unkown image
page write copy
 clean
30D0000
unkown
page read and write
 clean
B10000
unkown
page read and write
 clean
F0CF1FE000
stack
page read and write
 clean
7FF5B031A000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
2900000
unkown
page read and write
 clean
1F912415000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
BC1000
unkown image
page execute read
 clean
EA1000
unkown
page read and write
 clean
19D6F43C000
unkown
page read and write
 clean
FF8E2000
unkown image
page readonly
 clean
2AFF000
stack
page read and write
 clean
1096000
unkown
page read and write
 clean
6E286000
unkown image
page write copy
 clean
7FF53DFCC000
unkown image
page readonly
 clean
6E795000
unkown image
page read and write
 clean
89A000
unkown
page read and write
 clean
E8C000
unkown
page read and write
 clean
7FF54D3FF000
unkown image
page readonly
 clean
7FF5030D0000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
10C1000
unkown
page read and write
 clean
87D000
unkown
page read and write
 clean
19D6F43E000
unkown
page read and write
 clean
ED4000
unkown
page read and write
 clean
7DF5BDF92000
unkown image
page readonly
 clean
610000
unkown image
page readonly
 clean
2191FA00000
unkown image
page read and write
 clean
E6C000
unkown
page read and write
 clean
20D183C0000
unkown
page read and write
 clean
E26000
unkown
page read and write
 clean
2AFA000
unkown image
page readonly
 clean
6F993000
unkown image
page readonly
 clean
770000
unkown image
page readonly
 clean
1071000
unkown
page read and write
 clean
BE0000
unkown image
page readonly
 clean
6EE43000
unkown image
page read and write
 clean
3500000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
8D7000
unkown
page read and write
 clean
7FA20000
unkown image
page readonly
 clean
6DAF4000
unkown image
page read and write
 clean
FFBA2000
unkown image
page readonly
 clean
2F80000
unkown image
page readonly
 clean
ED4000
unkown
page read and write
 clean
19D6F459000
heap default
page read and write
 clean
7FF592921000
unkown image
page readonly
 clean
F38000
unkown
page read and write
 clean
88C000
unkown
page read and write
 clean
EBA000
unkown
page read and write
 clean
3760000
unkown
page read and write
 clean
E89000
unkown
page read and write
 clean
20D1835B000
unkown
page read and write
 clean
7FF53E107000
unkown image
page readonly
 clean
20000
heap default
page read and write
 clean
85B000
unkown
page read and write
 clean
AFE000
stack
page read and write
 clean
7FF5B012F000
unkown image
page readonly
 clean
7FF592141000
unkown image
page readonly
 clean
802000
unkown
page read and write
 clean
20D17A4E000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
1F917260000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
6EB20000
unkown image
page readonly
 clean
395F000
stack
page read and write
 clean
1086000
unkown
page read and write
 clean
36AA000
unkown
page read and write
 clean
7DF510E22000
unkown image
page readonly
 clean
6F33F000
unkown image
page read and write
 clean
BC0000
unkown image
page readonly
 clean
1086000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
30E0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
1F9171E1000
unkown
page read and write
 clean
7FF53E16E000
unkown image
page readonly
 clean
6E3F8000
unkown image
page read and write
 clean
7FF5B0321000
unkown image
page readonly
 clean
6E958000
unkown image
page read and write
 clean
6E2F6000
unkown image
page readonly
 clean
10AA000
unkown
page read and write
 clean
BB0000
unkown image
page readonly
 clean
6F9A1000
unkown image
page execute read
 clean
1077000
unkown
page read and write
 clean
20D1836D000
unkown
page read and write
 clean
999000
unkown
page read and write
 clean
7FF54D4DA000
unkown image
page readonly
 clean
6DAF5000
unkown image
page readonly
 clean
1074000
unkown
page read and write
 clean
2C46000
unkown
page read and write
 clean
703D8000
unkown image
page read and write
 clean
308D000
unkown
page read and write
 clean
88D000
unkown
page read and write
 clean
F0B000
unkown
page read and write
 clean
1063000
unkown
page read and write
 clean
20D183BB000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
FF8F0000
unkown image
page readonly
 clean
BEC000
unkown image
page read and write
 clean
20D17A4D000
unkown
page read and write
 clean
1347000
unkown image
page readonly
 clean
ED5000
unkown
page read and write
 clean
6E2BF000
unkown image
page read and write
 clean
109B000
unkown
page read and write
 clean
10A1000
unkown
page read and write
 clean
2C46000
unkown
page read and write
 clean
6E800000
unkown image
page readonly
 clean
10A5000
unkown
page read and write
 clean
F2A000
unkown
page read and write
 clean
6E950000
unkown image
page readonly
 clean
2B00000
unkown
page read and write
 clean
2191FA70000
heap default
page read and write
 clean
6DBBD000
unkown image
page execute read
 clean
6EB70000
unkown image
page readonly
 clean
1065000
heap default
page read and write
 clean
3090000
unkown
page read and write
 clean
7DF56A7B2000
unkown image
page readonly
 clean
7FF5B00D1000
unkown image
page readonly
 clean
30C1000
unkown
page read and write
 clean
20D17950000
unkown image
page readonly
 clean
BC1000
unkown image
page execute read
 clean
6DEF1000
unkown image
page execute read
 clean
20D1839A000
unkown
page read and write
 clean
2BA1000
unkown
page read and write
 clean
7FF5B02F2000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
3438000
unkown
page read and write
 clean
7F892000
unkown image
page readonly
 clean
D06000
heap private
page read and write
 clean
E28000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
20D18371000
unkown
page read and write
 clean
EB1000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
760000
unkown image
page readonly
 clean
6E3F7000
unkown image
page readonly
 clean
6DB00000
unkown image
page readonly
 clean
20D18393000
unkown
page read and write
 clean
19D6F390000
unkown
page read and write
 clean
3600000
unkown
page read and write
 clean
7FF54D4C9000
unkown image
page readonly
 clean
107A000
unkown
page read and write
 clean
7FF53DD7E000
unkown image
page readonly
 clean
7FF53DF24000
unkown image
page readonly
 clean
19D6FF90000
unkown
page read and write
 clean
30D0000
unkown image
page readonly
 clean
7FF53DE0F000
unkown image
page readonly
 clean
75D000
unkown
page read and write
 clean
341B000
unkown
page read and write
 clean
7FF53DF20000
unkown image
page readonly
 clean
20D17B13000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
3447000
unkown
page read and write
 clean
6DDE0000
unkown image
page readonly
 clean
D1E000
stack
page read and write
 clean
106D000
unkown
page read and write
 clean
7FF5926D5000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
37C0000
unkown
page read and write
 clean
3210000
unkown
page read and write
 clean
7FF59277B000
unkown image
page readonly
 clean
15563D08000
unkown
page read and write
 clean
703C0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
1F912250000
unkown image
page readonly
 clean
6F9C0000
unkown image
page readonly
 clean
20D1835D000
unkown
page read and write
 clean
1F911C9F000
unkown
page read and write
 clean
BC0000
unkown image
page readonly
 clean
1086000
unkown
page read and write
 clean
7FF55CB22000
unkown image
page readonly
 clean
7FF55C3D9000
unkown image
page readonly
 clean
20D18399000
unkown
page read and write
 clean
3750000
unkown image
page readonly
 clean
ED0000
unkown
page read and write
 clean
F0CF2FF000
stack
page read and write
 clean
6EAA7000
unkown image
page read and write
 clean
13E97FB000
stack
page read and write
 clean
1F9174E0000
unkown
page read and write
 clean
7FF54D371000
unkown image
page readonly
 clean
BE0000
unkown image
page readonly
 clean
EA1000
unkown
page read and write
 clean
20D183AA000
unkown
page read and write
 clean
6F30E000
unkown image
page readonly
 clean
7FF53E1FA000
unkown image
page readonly
 clean
6DB80000
unkown image
page readonly
 clean
7FF5B030A000
unkown image
page readonly
 clean
B90000
unkown image
page readonly
 clean
7FF592666000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
FF8E0000
unkown image
page readonly
 clean
107E000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
7FF592904000
unkown image
page readonly
 clean
FF560000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
7FF53DD63000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
1090000
unkown image
page readonly
 clean
1054000
unkown
page read and write
 clean
14320170000
unkown image
page readonly
 clean
2FD6000
unkown
page read and write
 clean
7FF5B017B000
unkown image
page readonly
 clean
21456A20000
unkown image
page read and write
 clean
1084000
unkown
page read and write
 clean
20D17990000
unkown image
page readonly
 clean
2F00000
unkown image
page readonly
 clean
E82000
unkown
page read and write
 clean
1078000
unkown
page read and write
 clean
1084000
heap default
page read and write
 clean
2C4F000
unkown
page read and write
 clean
7FF5030D3000
unkown image
page readonly
 clean
8C0000
unkown
page read and write
 clean
1310000
unkown image
page readonly
 clean
760000
unkown image
page readonly
 clean
2C56000
unkown
page read and write
 clean
6F2D1000
unkown image
page execute read
 clean
20D18390000
unkown
page read and write
 clean
6DEF0000
unkown image
page readonly
 clean
ED4000
unkown
page read and write
 clean
7FF592840000
unkown image
page readonly
 clean
14320202000
unkown
page read and write
 clean
83D000
unkown
page read and write
 clean
14320180000
unkown image
page readonly
 clean
302F000
unkown
page read and write
 clean
20D17AA8000
unkown
page read and write
 clean
6DA70000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
ED4000
unkown
page read and write
 clean
6E909000
unkown image
page readonly
 clean
2FE3000
unkown
page read and write
 clean
7FF5AC56E000
unkown image
page readonly
 clean
88D000
unkown
page read and write
 clean
7FF5AC495000
unkown image
page readonly
 clean
600000
unkown image
page readonly
 clean
6DB21000
unkown image
page execute read
 clean
6DB97000
unkown image
page write copy
 clean
2C18000
unkown
page read and write
 clean
13E98FB000
stack
page read and write
 clean
878000
unkown
page read and write
 clean
1330000
unkown image
page readonly
 clean
20D17820000
unkown image
page readonly
 clean
7FF53E11D000
unkown image
page readonly
 clean
143204D0000
unkown image
page readonly
 clean
7F880000
unkown image
page readonly
 clean
6DA7F000
unkown image
page readonly
 clean
1057000
heap default
page read and write
 clean
FF542000
unkown image
page readonly
 clean
20D18367000
unkown
page read and write
 clean
20D183B1000
unkown
page read and write
 clean
6F2E0000
unkown image
page readonly
 clean
7F0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
12FE000
stack
page read and write
 clean
20D1835C000
unkown
page read and write
 clean
20D17A53000
unkown
page read and write
 clean
7FF53E07C000
unkown image
page readonly
 clean
3455000
unkown
page read and write
 clean
19D6F3B0000
unkown image
page readonly
 clean
20D1831D000
unkown
page read and write
 clean
6E7CF000
unkown image
page read and write
 clean
6DAD0000
unkown image
page readonly
 clean
2191FC86000
unkown
page read and write
 clean
1086000
unkown
page read and write
 clean
1347000
unkown image
page readonly
 clean
7FF53E11F000
unkown image
page readonly
 clean
886000
unkown
page read and write
 clean
6DAA1000
unkown image
page execute read
 clean
6E9A0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
20D18300000
unkown
page read and write
 clean
F0CEFFB000
stack
page read and write
 clean
7FF5031A1000
unkown image
page readonly
 clean
6EC0E000
unkown image
page readonly
 clean
7FF53E147000
unkown image
page readonly
 clean
7FF53DEF4000
unkown image
page readonly
 clean
2C31000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
DA0000
unkown
page read and write
 clean
847000
unkown
page read and write
 clean
6F2E9000
unkown image
page readonly
 clean
37B0000
unkown image
page readonly
 clean
19D6F350000
unkown image
page readonly
 clean
2FF9000
unkown
page read and write
 clean
856000
unkown
page read and write
 clean
20D1831B000
unkown
page read and write
 clean
7FF53E18D000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
6EAF1000
unkown image
page execute read
 clean
19D70010000
unkown
page read and write
 clean
1402000
unkown
page read and write
 clean
3510000
unkown image
page readonly
 clean
19D70260000
unkown
page readonly
 clean
1074000
unkown
page read and write
 clean
6F2F6000
unkown image
page readonly
 clean
20D1836A000
unkown
page read and write
 clean
20D18394000
unkown
page read and write
 clean
6E397000
unkown image
page readonly
 clean
FF440000
unkown image
page readonly
 clean
20D18370000
unkown
page read and write
 clean
7FF55CA63000
unkown image
page readonly
 clean
901000
unkown
page read and write
 clean
86E000
unkown
page read and write
 clean
1082000
unkown
page read and write
 clean
7FF53DFDD000
unkown image
page readonly
 clean
6DA8B000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
20D18391000
unkown
page read and write
 clean
6EAA9000
unkown image
page readonly
 clean
6E92E000
unkown image
page readonly
 clean
1F9171F0000
unkown
page read and write
 clean
1072000
unkown
page read and write
 clean
7DF510E30000
unkown image
page readonly
 clean
7FF503103000
unkown image
page readonly
 clean
6E97E000
unkown image
page readonly
 clean
1F917289000
unkown
page read and write
 clean
F0CECFD000
stack
page read and write
 clean
7FE000
stack
page read and write
 clean
CC0000
unkown image
page readonly
 clean
1347000
unkown image
page readonly
 clean
1F90000
unkown image
page readonly
 clean
14320229000
unkown
page read and write
 clean
7DF510E20000
unkown image
page readonly
 clean
6F9AF000
unkown image
page read and write
 clean
3420000
unkown
page read and write
 clean
EB1000
unkown
page read and write
 clean
1F9171C0000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
1600000
unkown
page read and write
 clean
7DF5BA2B0000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
7DF55B160000
unkown image
page readonly
 clean
D00000
heap private
page read and write
 clean
2830179000
stack
page read and write
 clean
6DB0E000
unkown image
page readonly
 clean
1F912559000
unkown
page read and write
 clean
19D6F43C000
unkown
page read and write
 clean
7FF55CB3A000
unkown image
page readonly
 clean
1055000
unkown
page read and write
 clean
FF7B0000
unkown image
page readonly
 clean
20D17A4A000
unkown
page read and write
 clean
15563D00000
unkown
page read and write
 clean
301A000
unkown
page read and write
 clean
887000
unkown
page read and write
 clean
6E920000
unkown image
page readonly
 clean
6DEF0000
unkown image
page readonly
 clean
6DE87000
unkown image
page readonly
 clean
295F000
unkown
page read and write
 clean
CDF000
stack
page read and write
 clean
19D70270000
unkown
page read and write
 clean
1073000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
2A00000
unkown
page read and write
 clean
20D183DB000
unkown
page read and write
 clean
89F000
unkown
page read and write
 clean
14320140000
heap private
page read and write
 clean
7FF54D276000
unkown image
page readonly
 clean
B60000
unkown image
page readonly
 clean
7FF5AFE01000
unkown image
page readonly
 clean
6E12C000
unkown image
page readonly
 clean
108D000
unkown
page read and write
 clean
70280000
unkown image
page readonly
 clean
3380000
unkown image
page readonly
 clean
6DB13000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
85E000
unkown
page read and write
 clean
7FF5AC4AC000
unkown image
page readonly
 clean
6EB62000
unkown image
page read and write
 clean
909000
unkown
page read and write
 clean
6DDC8000
unkown image
page readonly
 clean
F0CF5FC000
stack
page read and write
 clean
B60000
unkown image
page readonly
 clean
6DB0E000
unkown image
page readonly
 clean
1091000
unkown
page read and write
 clean
823000
unkown
page read and write
 clean
888000
unkown
page read and write
 clean
3433000
unkown
page read and write
 clean
1082000
unkown
page read and write
 clean
20D18802000
unkown
page read and write
 clean
E6C000
unkown
page read and write
 clean
20D1836D000
unkown
page read and write
 clean
1F911C13000
unkown
page read and write
 clean
13E96FE000
stack
page read and write
 clean
3446000
unkown
page read and write
 clean
F38000
unkown
page read and write
 clean
890000
unkown
page read and write
 clean
AF5000
unkown
page read and write
 clean
EC4000
unkown
page read and write
 clean
1089000
unkown
page read and write
 clean
2B7A000
unkown
page read and write
 clean
21456C46000
heap default
page read and write
 clean
FFBB0000
unkown image
page readonly
 clean
106B000
unkown
page read and write
 clean
70130000
unkown image
page readonly
 clean
20D18374000
unkown
page read and write
 clean
905000
unkown
page read and write
 clean
6DAD0000
unkown image
page readonly
 clean
2C01000
unkown
page read and write
 clean
20D18389000
unkown
page read and write
 clean
1077000
unkown
page read and write
 clean
21456E75000
heap private
page read and write
 clean
7FF53DFFB000
unkown image
page readonly
 clean
7FF592401000
unkown image
page readonly
 clean
8AD000
unkown
page read and write
 clean
7DF5A0580000
unkown image
page readonly
 clean
6E2F0000
unkown image
page readonly
 clean
700000
unkown image
page readonly
 clean
6EB0B000
unkown image
page readonly
 clean
10AE000
unkown
page read and write
 clean
7DF449D40000
unkown image
page readonly
 clean
3600000
unkown
page read and write
 clean
2CD0000
unkown
page read and write
 clean
106F000
unkown
page read and write
 clean
20D18391000
unkown
page read and write
 clean
1088000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
6F9D1000
unkown image
page execute read
 clean
2A05BFE000
stack
page read and write
 clean
6DEE8000
unkown image
page read and write
 clean
6E965000
unkown image
page read and write
 clean
6E400000
unkown image
page readonly
 clean
1500000
unkown image
page readonly
 clean
3433000
unkown
page read and write
 clean
7FF592489000
unkown image
page readonly
 clean
7FF53D98C000
unkown image
page readonly
 clean
1F911B70000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
2BF0000
unkown image
page readonly
 clean
E28000
unkown
page read and write
 clean
2BAF000
unkown
page read and write
 clean
155639C0000
unkown image
page read and write
 clean
1F917520000
unkown
page read and write
 clean
6DACA000
unkown image
page readonly
 clean
1E0000
heap default
page read and write
 clean
FF530000
unkown image
page readonly
 clean
BC1000
unkown image
page execute read
 clean
2A0567E000
stack
page read and write
 clean
83174FE000
stack
page read and write
 clean
1072000
unkown
page read and write
 clean
1071000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
7DF5BA2C0000
unkown image
page readonly
 clean
20D18393000
unkown
page read and write
 clean
1101000
unkown
page read and write
 clean
770000
unkown image
page readonly
 clean
1F912559000
unkown
page read and write
 clean
7DF5BDF80000
unkown image
page readonly
 clean
7FF5AC5BD000
unkown image
page readonly
 clean
20D17AB1000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
6E970000
unkown image
page readonly
 clean
EB1000
unkown
page read and write
 clean
7FF55C390000
unkown image
page readonly
 clean
1F9123F3000
unkown
page read and write
 clean
12FC000
unkown
page read and write
 clean
20D18389000
unkown
page read and write
 clean
7FF592847000
unkown image
page readonly
 clean
19D6F3E5000
heap private
page read and write
 clean
2C05000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
70140000
unkown image
page read and write
 clean
1F917310000
unkown
page read and write
 clean
1660000
unkown image
page readonly
 clean
7FF53E133000
unkown image
page readonly
 clean
19D6F3F7000
heap default
page read and write
 clean
20D17A8C000
unkown
page read and write
 clean
6E796000
unkown image
page write copy
 clean
7F882000
unkown image
page readonly
 clean
1F913001000
unkown
page read and write
 clean
6E203000
unkown image
page readonly
 clean
1086000
unkown
page read and write
 clean
FF550000
unkown image
page readonly
 clean
105A000
unkown
page read and write
 clean
166C000
unkown
page read and write
 clean
20D17C00000
unkown image
page readonly
 clean
10C1000
unkown
page read and write
 clean
6EAD1000
unkown image
page execute read
 clean
7FF53E0EA000
unkown image
page readonly
 clean
703C1000
unkown image
page execute read
 clean
14320A02000
unkown
page read and write
 clean
6DA88000
unkown image
page read and write
 clean
70285000
unkown image
page read and write
 clean
30D0000
unkown
page read and write
 clean
303C000
unkown
page read and write
 clean
19CE000
stack
page read and write
 clean
8FB000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
143201A0000
heap default
page read and write
 clean
19D6F320000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
107D000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
108E000
unkown
page read and write
 clean
3405000
unkown
page read and write
 clean
1095000
unkown
page read and write
 clean
6E9A0000
unkown image
page readonly
 clean
FF7A0000
unkown image
page readonly
 clean
6F9E3000
unkown image
page readonly
 clean
6E39B000
unkown image
page readonly
 clean
D0E000
stack
page read and write
 clean
EAD000
unkown
page read and write
 clean
7FF55CAA2000
unkown image
page readonly
 clean
14FE000
stack
page read and write
 clean
1084000
unkown
page read and write
 clean
7FF53E130000
unkown image
page readonly
 clean
2191FC13000
unkown
page read and write
 clean
13E9C7F000
stack
page read and write
 clean
7FF592487000
unkown image
page readonly
 clean
EB5000
unkown
page read and write
 clean
F0B000
unkown
page read and write
 clean
FF540000
unkown image
page readonly
 clean
7DF55B162000
unkown image
page readonly
 clean
861000
unkown
page read and write
 clean
1090000
unkown
page read and write
 clean
6DEE9000
unkown image
page readonly
 clean
2890000
heap private
page read and write
 clean
2A0000
unkown image
page readonly
 clean
2C32000
unkown
page read and write
 clean
2B60000
unkown
page read and write
 clean
15563C5C000
unkown
page read and write
 clean
BC0000
unkown image
page readonly
 clean
70131000
unkown image
page execute read
 clean
7FF53E0E1000
unkown image
page readonly
 clean
481FC79000
stack
page read and write
 clean
EB5000
unkown
page read and write
 clean
481FBF9000
stack
page read and write
 clean
7FF5AC593000
unkown image
page readonly
 clean
1628000
unkown
page read and write
 clean
6F9E3000
unkown image
page readonly
 clean
7FF5B01A1000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
6E970000
unkown image
page readonly
 clean
6DA7F000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
1C0F000
stack
page read and write
 clean
1058000
unkown
page read and write
 clean
6EB63000
unkown image
page readonly
 clean
2D01000
unkown
page read and write
 clean
3430000
unkown
page read and write
 clean
10D8000
unkown
page read and write
 clean
6DEE7000
unkown image
page readonly
 clean
1077000
unkown
page read and write
 clean
6F9D0000
unkown image
page readonly
 clean
166C000
unkown
page read and write
 clean
3110000
unkown
page read and write
 clean
6F996000
unkown image
page readonly
 clean
6F2D6000
unkown image
page read and write
 clean
7FF5AC121000
unkown image
page readonly
 clean
FFEF0000
unkown image
page readonly
 clean
7FF59284E000
unkown image
page readonly
 clean
DF0000
unkown image
page readonly
 clean
FF7B0000
unkown image
page readonly
 clean
887000
unkown
page read and write
 clean
6EB21000
unkown image
page execute read
 clean
1F911C3F000
unkown
page read and write
 clean
2FFD000
unkown
page read and write
 clean
2BD3000
unkown image
page readonly
 clean
BC0000
unkown image
page readonly
 clean
108D000
unkown
page read and write
 clean
E28000
unkown
page read and write
 clean
7F882000
unkown image
page readonly
 clean
1F917520000
unkown
page read and write
 clean
6F330000
unkown image
page readonly
 clean
6E959000
unkown image
page readonly
 clean
21456BB0000
unkown image
page readonly
 clean
143201B0000
unkown image
page readonly
 clean
E85000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
2B4C000
unkown image
page readonly
 clean
3041000
unkown
page read and write
 clean
862000
unkown
page read and write
 clean
109B000
unkown
page read and write
 clean
20D17AD5000
unkown
page read and write
 clean
20D183BC000
unkown
page read and write
 clean
6DD78000
unkown image
page readonly
 clean
6F990000
unkown image
page readonly
 clean
6E287000
unkown image
page read and write
 clean
6EBD0000
unkown image
page readonly
 clean
7FF54D345000
unkown image
page readonly
 clean
8B2000
unkown
page read and write
 clean
7FF5B010B000
unkown image
page readonly
 clean
2191FC2A000
unkown
page read and write
 clean
1F911AF0000
unkown image
page read and write
 clean
2C23000
unkown
page read and write
 clean
7FF54D46A000
unkown image
page readonly
 clean
29E0000
unkown
page read and write
 clean
6E9A0000
unkown image
page readonly
 clean
7FF5030DE000
unkown image
page readonly
 clean
D10000
unkown image
page readonly
 clean
EBD000
unkown
page read and write
 clean
2A0537B000
unkown
page read and write
 clean
2C1D000
unkown
page read and write
 clean
7FF5B0240000
unkown image
page readonly
 clean
2191FC8D000
unkown
page read and write
 clean
7DF5BA2A0000
unkown image
page readonly
 clean
143206D0000
unkown image
page readonly
 clean
7FF54D4C2000
unkown image
page readonly
 clean
1628000
unkown
page read and write
 clean
21456B50000
unkown
page read and write
 clean
831777B000
stack
page read and write
 clean
161B000
unkown
page read and write
 clean
2F10000
unkown
page execute and read and write
 clean
7FF592803000
unkown image
page readonly
 clean
F50000
unkown image
page readonly
 clean
12C0000
unkown image
page readonly
 clean
6F2E8000
unkown image
page read and write
 clean
6E960000
unkown image
page readonly
 clean
3416000
unkown
page read and write
 clean
6DE3B000
unkown image
page readonly
 clean
20D17AF8000
unkown
page read and write
 clean
7FF5B0297000
unkown image
page readonly
 clean
2EC0000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
70286000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
6F2F0000
unkown image
page readonly
 clean
6EBE7000
unkown image
page read and write
 clean
8317AFE000
stack
page read and write
 clean
2191FA50000
unkown image
page readonly
 clean
1F9172FC000
unkown
page read and write
 clean
20D18389000
unkown
page read and write
 clean
8B7000
unkown
page read and write
 clean
8A7000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
6F9B0000
unkown image
page readonly
 clean
2F40000
unkown
page read and write
 clean
7FF53E0F3000
unkown image
page readonly
 clean
355F000
unkown
page read and write
 clean
6F31B000
unkown image
page read and write
 clean
EFA000
unkown
page read and write
 clean
E28000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
3680000
unkown
page read and write
 clean
20D18327000
unkown
page read and write
 clean
33E0000
unkown
page execute and read and write
 clean
7DF56A7C0000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
3300000
unkown
page read and write
 clean
2C43000
unkown
page read and write
 clean
7DF55B152000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
873000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
3450000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
10F0000
unkown
page read and write
 clean
7FF53E123000
unkown image
page readonly
 clean
7B0000
unkown image
page readonly
 clean
20D18802000
unkown
page read and write
 clean
20D18390000
unkown
page read and write
 clean
F04000
unkown
page read and write
 clean
7FF5927A5000
unkown image
page readonly
 clean
7FF55C2FD000
unkown image
page readonly
 clean
7FF5AC563000
unkown image
page readonly
 clean
166C000
unkown
page read and write
 clean
7FF548A61000
unkown image
page readonly
 clean
83179F8000
stack
page read and write
 clean
EB5000
unkown
page read and write
 clean
19D6F9D0000
unkown image
page readonly
 clean
7FF5AC612000
unkown image
page readonly
 clean
6F9A0000
unkown image
page readonly
 clean
1057000
unkown
page read and write
 clean
D5E000
stack
page read and write
 clean
7FF50292F000
unkown image
page readonly
 clean
8F4000
unkown
page read and write
 clean
2F60000
heap default
page read and write
 clean
F00000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
7FF592873000
unkown image
page readonly
 clean
481FA7B000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
FF8D0000
unkown image
page readonly
 clean
2A053FE000
stack
page read and write
 clean
20D18399000
unkown
page read and write
 clean
1310000
unkown image
page readonly
 clean
3407000
unkown
page read and write
 clean
7FA22000
unkown image
page readonly
 clean
1F917520000
unkown
page read and write
 clean
21456A40000
unkown image
page readonly
 clean
EB1000
unkown
page read and write
 clean
7FF53E137000
unkown image
page readonly
 clean
6DEF0000
unkown image
page readonly
 clean
1073000
unkown
page read and write
 clean
7FF55CB51000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
6DE8B000
unkown image
page readonly
 clean
6DDE6000
unkown image
page readonly
 clean
6DD2C000
unkown image
page readonly
 clean
7FF5B026B000
unkown image
page readonly
 clean
3390000
unkown
page read and write
 clean
109F000
unkown
page read and write
 clean
7F892000
unkown image
page readonly
 clean
7FF59286B000
unkown image
page readonly
 clean
7DF5BDFA0000
unkown image
page readonly
 clean
6F9EB000
unkown image
page readonly
 clean
7FF5AC641000
unkown image
page readonly
 clean
280000
heap default
page read and write
 clean
161B000
unkown
page read and write
 clean
7FF54D175000
unkown image
page readonly
 clean
282FD9F000
stack
page read and write
 clean
703B1000
unkown image
page execute read
 clean
8AA000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
15563C77000
unkown
page read and write
 clean
6F995000
unkown image
page read and write
 clean
1068000
unkown
page read and write
 clean
3820000
unkown
page read and write
 clean
1311000
unkown image
page execute read
 clean
20D1831D000
unkown
page read and write
 clean
1F9171CE000
unkown
page read and write
 clean
8FE000
unkown
page read and write
 clean
2BA6000
unkown
page read and write
 clean
6EAF0000
unkown image
page readonly
 clean
EE8000
unkown
page read and write
 clean
84B000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
2C56000
unkown
page read and write
 clean
703B0000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
7DF55B152000
unkown image
page readonly
 clean
32D0000
heap default
page read and write
 clean
30CC000
unkown
page read and write
 clean
BC0000
unkown image
page readonly
 clean
85A000
unkown
page read and write
 clean
E87000
unkown
page read and write
 clean
6EC00000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
2191FC54000
unkown
page read and write
 clean
1330000
unkown image
page readonly
 clean
7FF5AC63A000
unkown image
page readonly
 clean
7FA32000
unkown image
page readonly
 clean
3465000
unkown
page read and write
 clean
2C28000
unkown
page read and write
 clean
760000
unkown image
page readonly
 clean
7FF5926A6000
unkown image
page readonly
 clean
6E959000
unkown image
page readonly
 clean
1F917500000
unkown
page read and write
 clean
2191FC70000
unkown
page read and write
 clean
FF8D0000
unkown image
page readonly
 clean
7FF55CA5D000
unkown image
page readonly
 clean
6F339000
unkown image
page readonly
 clean
375000
unkown
page read and write
 clean
6F9C7000
unkown image
page readonly
 clean
6F9C7000
unkown image
page readonly
 clean
19D6FB60000
unkown image
page readonly
 clean
1628000
unkown
page read and write
 clean
19D6F435000
unkown
page read and write
 clean
3160000
unkown
page execute and read and write
 clean
F38000
unkown
page read and write
 clean
3170000
unkown image
page readonly
 clean
2FC0000
unkown
page read and write
 clean
1432025D000
unkown
page read and write
 clean
F50000
unkown image
page read and write
 clean
6DBB0000
unkown image
page readonly
 clean
6E98E000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
BE0000
unkown image
page readonly
 clean
6DBBD000
unkown image
page execute read
 clean
19D6F320000
unkown image
page readonly
 clean
FF532000
unkown image
page readonly
 clean
88C000
unkown
page read and write
 clean
7DF54BE90000
unkown image
page readonly
 clean
20D17A71000
unkown
page read and write
 clean
2C4F000
unkown
page read and write
 clean
E6C000
unkown
page read and write
 clean
FFEF2000
unkown image
page readonly
 clean
7DF40ECE0000
unkown image
page readonly
 clean
7FF592843000
unkown image
page readonly
 clean
12D0000
unkown
page read and write
 clean
6DAF5000
unkown image
page readonly
 clean
83178F7000
stack
page read and write
 clean
7F780000
unkown image
page readonly
 clean
107B000
unkown
page read and write
 clean
BE0000
unkown image
page readonly
 clean
BF5000
unkown image
page read and write
 clean
1084000
unkown
page read and write
 clean
360C000
unkown
page read and write
 clean
7FF5030BD000
unkown image
page readonly
 clean
7FF50310E000
unkown image
page readonly
 clean
1628000
unkown
page read and write
 clean
6E970000
unkown image
page readonly
 clean
7FF5B02F9000
unkown image
page readonly
 clean
EE8000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
D02000
heap private
page read and write
 clean
2C20000
unkown
page read and write
 clean
7FF5927D1000
unkown image
page readonly
 clean
1086000
unkown
page read and write
 clean
EE1000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
EB1000
unkown
page read and write
 clean
1068000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
6DAEB000
unkown image
page readonly
 clean
6EB71000
unkown image
page execute read
 clean
7FF5B0175000
unkown image
page readonly
 clean
7FF5AC40D000
unkown image
page readonly
 clean
7FF50312A000
unkown image
page readonly
 clean
20D17ABE000
unkown
page read and write
 clean
6F9D0000
unkown image
page readonly
 clean
1076000
unkown
page read and write
 clean
FFF00000
unkown image
page readonly
 clean
7F890000
unkown image
page readonly
 clean
161B000
unkown
page read and write
 clean
6E966000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
323E000
stack
page read and write
 clean
3500000
unkown
page read and write
 clean
FF550000
unkown image
page readonly
 clean
EBD000
unkown
page read and write
 clean
7FF53E13E000
unkown image
page readonly
 clean
10B3000
unkown
page read and write
 clean
EC3000
unkown
page read and write
 clean
FF552000
unkown image
page readonly
 clean
6F2E1000
unkown image
page execute read
 clean
10F0000
unkown
page read and write
 clean
E96000
unkown
page read and write
 clean
BF7000
unkown image
page readonly
 clean
33C0000
heap default
page read and write
 clean
37A0000
unkown image
page readonly
 clean
2191FA20000
unkown image
page readonly
 clean
20D18381000
unkown
page read and write
 clean
1432023C000
unkown
page read and write
 clean
1F912502000
unkown
page read and write
 clean
84D000
unkown
page read and write
 clean
7F880000
unkown image
page readonly
 clean
1084000
unkown
page read and write
 clean
EBF000
unkown
page read and write
 clean
6E907000
unkown image
page read and write
 clean
14320308000
unkown
page read and write
 clean
FFBA0000
unkown image
page readonly
 clean
7FF55C9BC000
unkown image
page readonly
 clean
EE5000
unkown
page read and write
 clean
1310000
unkown image
page readonly
 clean
7DF5BA2A2000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
7DF5A05A0000
unkown image
page readonly
 clean
70281000
unkown image
page execute read
 clean
1F911D02000
unkown
page read and write
 clean
7FF5B027E000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
7FF5B00F0000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
7FF53DED7000
unkown image
page readonly
 clean
2A41000
unkown
page read and write
 clean
1F9172F8000
unkown
page read and write
 clean
2C38000
unkown
page read and write
 clean
108E000
unkown
page read and write
 clean
89A000
unkown
page read and write
 clean
1311000
unkown image
page execute read
 clean
2BD8000
unkown image
page readonly
 clean
E1B000
unkown
page read and write
 clean
7F920000
unkown image
page readonly
 clean
FC0000
unkown image
page readonly
 clean
6DA8B000
unkown image
page readonly
 clean
F0CEAFE000
stack
page read and write
 clean
1619000
unkown
page read and write
 clean
2870000
unkown
page read and write
 clean
6F330000
unkown image
page readonly
 clean
107B000
unkown
page read and write
 clean
20D18376000
unkown
page read and write
 clean
109F000
unkown
page read and write
 clean
E85000
unkown
page read and write
 clean
3070000
unkown
page read and write
 clean
7FF5AC5BA000
unkown image
page readonly
 clean
1432027C000
unkown
page read and write
 clean
BF7000
unkown image
page readonly
 clean
E82000
unkown
page read and write
 clean
EC7000
unkown
page read and write
 clean
D99000
unkown
page read and write
 clean
20D1886A000
unkown
page read and write
 clean
8B1000
unkown
page read and write
 clean
20D18202000
unkown
page read and write
 clean
3340000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
6F9A0000
unkown image
page readonly
 clean
7FF55C962000
unkown image
page readonly
 clean
1B0E000
stack
page read and write
 clean
3110000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
E28000
unkown
page read and write
 clean
2C45000
unkown
page read and write
 clean
3030000
unkown image
page readonly
 clean
7FF5AC553000
unkown image
page readonly
 clean
7FF5925F2000
unkown image
page readonly
 clean
2191FD02000
unkown
page read and write
 clean
72F20000
unkown image
page readonly
 clean
864000
unkown
page read and write
 clean
21456C5F000
unkown
page read and write
 clean
CB0000
unkown image
page readonly
 clean
6E400000
unkown image
page readonly
 clean
E10000
unkown
page read and write
 clean
3428000
unkown
page read and write
 clean
1F912390000
unkown image
page readonly
 clean
E71000
unkown
page read and write
 clean
1058000
unkown
page read and write
 clean
7FF53DF06000
unkown image
page readonly
 clean
FF552000
unkown image
page readonly
 clean
BF4000
unkown image
page read and write
 clean
20D18376000
unkown
page read and write
 clean
20D179E0000
unkown
page read and write
 clean
881000
unkown
page read and write
 clean
1101000
unkown
page read and write
 clean
6DBB0000
unkown image
page readonly
 clean
6DB12000
unkown image
page read and write
 clean
790000
unkown image
page readonly
 clean
C7DB47E000
stack
page read and write
 clean
854000
unkown
page read and write
 clean
88E000
unkown
page read and write
 clean
2C21000
unkown
page read and write
 clean
20D183A2000
unkown
page read and write
 clean
EFA000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
15564000000
unkown image
page readonly
 clean
88A000
unkown
page read and write
 clean
7FF5927CF000
unkown image
page readonly
 clean
1F9172F6000
unkown
page read and write
 clean
139E000
stack
page read and write
 clean
3041000
unkown
page read and write
 clean
2B36000
unkown image
page readonly
 clean
2C20000
unkown
page read and write
 clean
F0CF6FA000
stack
page read and write
 clean
780000
unkown image
page read and write
 clean
7FF592737000
unkown image
page readonly
 clean
6DB97000
unkown image
page write copy
 clean
1610000
unkown
page read and write
 clean
E28000
unkown
page read and write
 clean
7FF53DF6F000
unkown image
page readonly
 clean
36A6000
unkown
page read and write
 clean
1082000
unkown
page read and write
 clean
6DA90000
unkown image
page readonly
 clean
307D000
unkown
page read and write
 clean
9DB000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
7FF59228B000
unkown image
page readonly
 clean
7FF53E20E000
unkown image
page readonly
 clean
345F000
unkown
page read and write
 clean
6E951000
unkown image
page execute read
 clean
20D18060000
unkown image
page write copy
 clean
1360000
unkown image
page readonly
 clean
7FF592664000
unkown image
page readonly
 clean
EB1000
unkown
page read and write
 clean
7FF5AC4C5000
unkown image
page readonly
 clean
2B15000
unkown image
page readonly
 clean
15563C5F000
unkown
page read and write
 clean
E28000
unkown
page read and write
 clean
15563C58000
unkown
page read and write
 clean
1086000
unkown
page read and write
 clean
2BA0000
unkown
page read and write
 clean
19D6F300000
unkown image
page read and write
 clean
6EAD0000
unkown image
page readonly
 clean
6DB20000
unkown image
page readonly
 clean
7FA32000
unkown image
page readonly
 clean
2C52000
unkown
page read and write
 clean
E30000
unkown image
page readonly
 clean
6E7B9000
unkown image
page read and write
 clean
104F000
unkown
page read and write
 clean
13E9A77000
stack
page read and write
 clean
1084000
unkown
page read and write
 clean
7FF54D4D4000
unkown image
page readonly
 clean
1F911BA0000
unkown image
page read and write
 clean
6DA91000
unkown image
page execute read
 clean
1068000
unkown
page read and write
 clean
1347000
unkown image
page readonly
 clean
1068000
unkown
page read and write
 clean
70130000
unkown image
page readonly
 clean
15563D02000
unkown
page read and write
 clean
1F9172F4000
unkown
page read and write
 clean
2C00000
unkown
page read and write
 clean
15563A00000
unkown image
page readonly
 clean
7FF53E201000
unkown image
page readonly
 clean
3433000
unkown
page read and write
 clean
1010000
unkown
page read and write
 clean
5A0000
heap private
page read and write
 clean
1F9172E1000
unkown
page read and write
 clean
7DF56A7B0000
unkown image
page readonly
 clean
3012000
unkown
page read and write
 clean
FF540000
unkown image
page readonly
 clean
6EAEB000
unkown image
page readonly
 clean
8FF000
unkown
page read and write
 clean
6DBF2000
unkown image
page execute read
 clean
104B000
unkown
page read and write
 clean
F0CF17F000
stack
page read and write
 clean
7F8A0000
unkown image
page readonly
 clean
1091000
unkown
page read and write
 clean
20D183AD000
unkown
page read and write
 clean
6F2D4000
unkown image
page readonly
 clean
1F917320000
unkown
page read and write
 clean
7DF56A7C2000
unkown image
page readonly
 clean
2FD0000
unkown
page read and write
 clean
6F990000
unkown image
page readonly
 clean
901000
unkown
page read and write
 clean
7FF5AC549000
unkown image
page readonly
 clean
EE1000
unkown
page read and write
 clean
841000
unkown
page read and write
 clean
1628000
unkown
page read and write
 clean
6EC72000
unkown image
page execute read
 clean
7DF54BE70000
unkown image
page readonly
 clean
7DF56A7C0000
unkown image
page readonly
 clean
FF542000
unkown image
page readonly
 clean
6DA96000
unkown image
page read and write
 clean
1F917214000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
EC7000
unkown
page read and write
 clean
20D18394000
unkown
page read and write
 clean
33B0000
unkown
page read and write
 clean
30AF000
unkown
page read and write
 clean
FF8D2000
unkown image
page readonly
 clean
1F9123A0000
unkown image
page readonly
 clean
20D17B08000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
10A8000
unkown
page read and write
 clean
6F990000
unkown image
page readonly
 clean
133E000
unkown image
page read and write
 clean
10D1000
unkown
page read and write
 clean
15563C81000
unkown
page read and write
 clean
848000
unkown
page read and write
 clean
20D17B02000
unkown
page read and write
 clean
1A0000
unkown image
page readonly
 clean
269E000
stack
page read and write
 clean
1080000
unkown
page read and write
 clean
161B000
unkown
page read and write
 clean
6E92E000
unkown image
page readonly
 clean
EB0000
unkown
page read and write
 clean
FFF02000
unkown image
page readonly
 clean
6F2D8000
unkown image
page readonly
 clean
6DB20000
unkown image
page readonly
 clean
EC3000
unkown
page read and write
 clean
6E98B000
unkown image
page read and write
 clean
EFE000
unkown
page read and write
 clean
2D10000
unkown
page read and write
 clean
E12000
unkown
page read and write
 clean
E1B000
unkown
page read and write
 clean
6DA94000
unkown image
page readonly
 clean
3433000
unkown
page read and write
 clean
2C45000
unkown
page read and write
 clean
6F9C1000
unkown image
page execute read
 clean
FF8E2000
unkown image
page readonly
 clean
3444000
unkown
page read and write
 clean
2A059F7000
stack
page read and write
 clean
7FF54D2DB000
unkown image
page readonly
 clean
770000
unkown image
page readonly
 clean
FF542000
unkown image
page readonly
 clean
F0CF0FB000
stack
page read and write
 clean
EFA000
unkown
page read and write
 clean
28300FF000
stack
page read and write
 clean
165F000
stack
page read and write
 clean
1086000
unkown
page read and write
 clean
15563B10000
unkown image
page readonly
 clean
7FF592122000
unkown image
page readonly
 clean
EBA000
unkown
page read and write
 clean
1084000
unkown
page read and write
 clean
1F917490000
unkown
page read and write
 clean
BC0000
unkown image
page readonly
 clean
There are 2634 hidden memdumps, click here to show them.