IOC Report

loading gif

Files

File Path
Type
Category
Malicious
SecuriteInfo.com.W32.AIDetect.malware1.23460.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_435bf9987f6a7ee95ec1aabecf98fbf5b0b7b2_82810a17_131cfb8a\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE1C9.tmp.dmp
Mini DuMP crash report, 14 streams, Thu Dec 23 04:10:37 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE8FD.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WEREBBD.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
MS Windows registry file, NT/2000 or above
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.W32.AIDetect.malware1.23460.dll"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.W32.AIDetect.malware1.23460.dll",#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.W32.AIDetect.malware1.23460.dll",#1
malicious
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2964 -s 672
clean

URLs

Name
IP
Malicious
http://upx.sf.net
unknown
clean
http://www.n4pkg6fy8o.gaDVarFileInfo$
unknown
clean

IPs

IP
Domain
Country
Malicious
185.4.135.27
unknown
Greece
malicious
85.10.248.28
unknown
Germany
malicious
80.211.3.13
unknown
Italy
malicious
144.91.122.102
unknown
Germany
malicious

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHivePermissionsCorrect
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHiveOwnerCorrect
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProgramId
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
FileId
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LowerCaseLongPath
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LongPathHash
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Name
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Publisher
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Version
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinFileVersion
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinaryType
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProductName
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProductVersion
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LinkDate
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinProductVersion
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Size
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Language
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
IsPeFile
clean
\REGISTRY\A\{efc38983-124d-a95f-ab63-8751671d6b56}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
IsOsComponent
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
ExceptionRecord
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceTicket
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceId
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
ApplicationFlags
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
0018800453F4626F
clean
There are 14 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
6EC31000
unkown image
page execute read
malicious
6EC31000
unkown image
page execute read
malicious
6EC31000
unkown image
page execute read
malicious
6EC31000
unkown image
page execute read
malicious
574E97B000
unkown
page read and write
clean
BBB000
unkown
page read and write
clean
B7A000
unkown
page read and write
clean
511E000
stack
page read and write
clean
200B000
unkown image
page readonly
clean
1E17000
unkown image
page readonly
clean
212F2987000
unkown
page read and write
clean
4E90000
unkown
page read and write
clean
212F204A000
unkown
page read and write
clean
977000
unkown
page read and write
clean
FC000
unkown
page read and write
clean
7FF504454000
unkown image
page readonly
clean
7FF5A9B4F000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
1ADE4629000
unkown
page read and write
clean
19A84A20000
unkown image
page readonly
clean
7FF5A9B77000
unkown image
page readonly
clean
4A7B000
unkown
page read and write
clean
212F2987000
unkown
page read and write
clean
7FF5A9B63000
unkown image
page readonly
clean
1ADE4652000
unkown
page read and write
clean
7FF511CA2000
unkown image
page readonly
clean
4B3D000
unkown
page read and write
clean
7F242000
unkown image
page readonly
clean
7FF500E09000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
19A84E00000
unkown image
page readonly
clean
1267000
unkown image
page readonly
clean
212F20B3000
unkown
page read and write
clean
977000
unkown
page read and write
clean
4970000
unkown
page read and write
clean
977000
unkown
page read and write
clean
213BD5A0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
13B000
unkown
page read and write
clean
26767F70000
unkown image
page readonly
clean
1F85B4A0000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
BCC000
unkown
page read and write
clean
19A84C4D000
unkown
page read and write
clean
1F85B710000
unkown
page read and write
clean
212F298D000
unkown
page read and write
clean
267683E0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF573A6A000
unkown image
page readonly
clean
212F1ED0000
unkown image
page readonly
clean
213BD649000
unkown
page read and write
clean
212F1EB0000
unkown image
page read and write
clean
2EDE000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
1F9D000
unkown image
page readonly
clean
7FF500D96000
unkown image
page readonly
clean
7DF51F9C0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
BD3000
unkown
page read and write
clean
7DF4A6260000
unkown image
page readonly
clean
7FF504383000
unkown image
page readonly
clean
6EC4A000
unkown image
page readonly
clean
1925E115000
unkown
page read and write
clean
7FF5042CB000
unkown image
page readonly
clean
26768060000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
250B000
unkown
page read and write
clean
4AC9000
unkown
page read and write
clean
212F298D000
unkown
page read and write
clean
1267000
unkown image
page readonly
clean
2FC4000
unkown image
page readonly
clean
230000
unkown
page execute and read and write
clean
99F15F8000
stack
page read and write
clean
19A84A70000
heap default
page read and write
clean
7FF500FCD000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF50445A000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
4AC9000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF59A71A000
unkown image
page readonly
clean
212F2987000
unkown
page read and write
clean
1925E038000
unkown
page read and write
clean
BFC000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
540000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF500DD6000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF511D4A000
unkown image
page readonly
clean
4A9B000
unkown
page read and write
clean
4B36000
unkown
page read and write
clean
7FB62000
unkown image
page readonly
clean
1ADE43E0000
unkown image
page readonly
clean
7FB72000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
6EC4A000
unkown image
page readonly
clean
B21000
unkown
page read and write
clean
212F298B000
unkown
page read and write
clean
212F2987000
unkown
page read and write
clean
1ADE4800000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
4ABC000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF511D41000
unkown image
page readonly
clean
212F29AC000
unkown
page read and write
clean
213BD64C000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1ADE4613000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
51DF000
stack
page read and write
clean
977000
unkown
page read and write
clean
7FF500EA5000
unkown image
page readonly
clean
1F85B660000
unkown
page read and write
clean
977000
unkown
page read and write
clean
BAE000
unkown
page read and write
clean
19A85402000
unkown
page read and write
clean
7FB80000
unkown image
page readonly
clean
7FF51158D000
unkown image
page readonly
clean
7DF5816F0000
unkown image
page readonly
clean
7FF59A58B000
unkown image
page readonly
clean
B00000
unkown
page read and write
clean
977000
unkown
page read and write
clean
A80000
unkown
page read and write
clean
240000
unkown
page read and write
clean
68D44FF000
stack
page read and write
clean
7FF5043EA000
unkown image
page readonly
clean
574EDFE000
stack
page read and write
clean
1ADE43A0000
heap private
page read and write
clean
1925E00D000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7DF5120D2000
unkown image
page readonly
clean
99F10AB000
unkown
page read and write
clean
2FF8000
unkown image
page readonly
clean
2DB8000
unkown image
page readonly
clean
13B000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF4F915D000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF5043A7000
unkown image
page readonly
clean
4B1A000
unkown
page read and write
clean
7FF59A500000
unkown image
page readonly
clean
212F2590000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
212F298A000
unkown
page read and write
clean
212F298B000
unkown
page read and write
clean
7FF59A657000
unkown image
page readonly
clean
212F2987000
unkown
page read and write
clean
1267000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
267680C6000
heap default
page read and write
clean
7FF5A9AAC000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
68D41FC000
stack
page read and write
clean
97E000
unkown
page read and write
clean
1ADE4646000
unkown
page read and write
clean
7FB60000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
BFC000
unkown
page read and write
clean
2320000
heap default
page read and write
clean
7FF573983000
unkown image
page readonly
clean
212F204C000
unkown
page read and write
clean
212F2E63000
unkown
page read and write
clean
4B40000
unkown
page read and write
clean
7FF59A3B5000
unkown image
page readonly
clean
7FF504397000
unkown image
page readonly
clean
1F85B8E0000
unkown
page read and write
clean
212F2989000
unkown
page read and write
clean
7FF59A714000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF573157000
unkown image
page readonly
clean
2F5B000
unkown image
page readonly
clean
1F85B670000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF59A667000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF50446A000
unkown image
page readonly
clean
2A04000
heap private
page read and write
clean
977000
unkown
page read and write
clean
2EE1000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
7FF57311A000
unkown image
page readonly
clean
212F29D9000
unkown
page read and write
clean
1FBC000
unkown image
page readonly
clean
7FF59A731000
unkown image
page readonly
clean
212F20E1000
unkown
page read and write
clean
7FF5738EC000
unkown image
page readonly
clean
4AFF000
unkown
page read and write
clean
212F2987000
unkown
page read and write
clean
213BD5C0000
unkown
page read and write
clean
1ADE4B80000
unkown image
page readonly
clean
7FA50000
unkown image
page readonly
clean
2FF8000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
BF6000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
213BD651000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F1ED0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
4A8E000
unkown
page read and write
clean
263E000
stack
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F4F000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F2113000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F298E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF5009BB000
unkown image
page readonly
clean
2DC4000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F298D000
unkown
page read and write
clean
B8A000
unkown
page read and write
clean
6EC30000
unkown image
page readonly
clean
1F2E000
unkown image
page readonly
clean
212F2E02000
unkown
page read and write
clean
7FF500D17000
unkown image
page readonly
clean
6EC4F000
unkown image
page readonly
clean
213BD600000
unkown
page read and write
clean
240000
unkown
page read and write
clean
A0000
unkown image
page readonly
clean
1F85B6C0000
heap default
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF5115D9000
unkown image
page readonly
clean
7FF59A5B5000
unkown image
page readonly
clean
22F0000
unkown image
page readonly
clean
212F2680000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
22AF000
stack
page read and write
clean
7DF5A8390000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7DF5A8392000
unkown image
page readonly
clean
B8F000
unkown
page read and write
clean
4D82000
unkown
page read and write
clean
7FF5A9B67000
unkown image
page readonly
clean
212F299E000
unkown
page read and write
clean
2F6C000
unkown image
page readonly
clean
7FF5A9C3A000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
1ADE43D0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
B92000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
267680EB000
unkown
page read and write
clean
7FF5007F9000
unkown image
page readonly
clean
7FF511BBC000
unkown image
page readonly
clean
17F817F000
stack
page read and write
clean
97E000
unkown
page read and write
clean
BBB000
unkown
page read and write
clean
7DF41D880000
unkown image
page readonly
clean
212F2E00000
unkown
page read and write
clean
7FF5043BB000
unkown image
page readonly
clean
1ADE4659000
unkown
page read and write
clean
7FF4F91E1000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
2048000
unkown image
page readonly
clean
7FB70000
unkown image
page readonly
clean
7FF511D45000
unkown image
page readonly
clean
7FF500F9B000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
267680C1000
unkown
page read and write
clean
7FF500ED1000
unkown image
page readonly
clean
17F7D7F000
stack
page read and write
clean
977000
unkown
page read and write
clean
97E000
heap default
page read and write
clean
7FF503AF8000
unkown image
page readonly
clean
7FF51150C000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
2A07000
heap private
page read and write
clean
212F2989000
unkown
page read and write
clean
1F85B4B0000
unkown image
page readonly
clean
1F79000
unkown image
page readonly
clean
7FF4F913E000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF59A59C000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
4B3D000
unkown
page read and write
clean
BCC000
unkown
page read and write
clean
2640000
unkown
page read and write
clean
A70000
heap private
page read and write
clean
7F230000
unkown image
page readonly
clean
7FB70000
unkown image
page readonly
clean
7FF5115CF000
unkown image
page readonly
clean
4A92000
unkown
page read and write
clean
7FF500F73000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
213BD530000
heap private
page read and write
clean
977000
unkown
page read and write
clean
21E000
stack
page read and write
clean
977000
unkown
page read and write
clean
7DF51F9D0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
40B0000
unkown image
page readonly
clean
2770000
unkown image
page readonly
clean
7FF5A9B53000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF50ECB2000
unkown image
page readonly
clean
19A84A20000
unkown image
page readonly
clean
7FF500C24000
unkown image
page readonly
clean
7FF500F3E000
unkown image
page readonly
clean
212F296F000
unkown
page read and write
clean
7FF500FC7000
unkown image
page readonly
clean
7FF59A4FD000
unkown image
page readonly
clean
1E75000
unkown image
page readonly
clean
7FF511C70000
unkown image
page readonly
clean
7F232000
unkown image
page readonly
clean
BDF000
unkown
page read and write
clean
2DD5000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF50104A000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F2740000
unkown
page read and write
clean
212F2070000
unkown
page read and write
clean
C7B807F000
stack
page read and write
clean
97E000
unkown
page read and write
clean
212F2057000
unkown
page read and write
clean
7DF51F9B0000
unkown image
page readonly
clean
B3B000
unkown
page read and write
clean
99F1A7E000
stack
page read and write
clean
2640000
unkown
page read and write
clean
977000
unkown
page read and write
clean
212F2990000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1E17000
unkown image
page readonly
clean
17F7F7F000
stack
page read and write
clean
BC6000
unkown
page read and write
clean
7DF5B78A2000
unkown image
page readonly
clean
212F29A7000
unkown
page read and write
clean
212F29AB000
unkown
page read and write
clean
212F294C000
unkown
page read and write
clean
7FF5A9B9E000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
267680EB000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
981830B000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
4B36000
unkown
page read and write
clean
1ADE4708000
unkown
page read and write
clean
BF0000
unkown
page read and write
clean
B1E000
unkown
page read and write
clean
7FF5115CD000
unkown image
page readonly
clean
1ADE43B0000
unkown image
page readonly
clean
7DF5120E0000
unkown image
page readonly
clean
7FF504471000
unkown image
page readonly
clean
212F298D000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1925E300000
unkown
page read and write
clean
4A9D000
unkown
page read and write
clean
BFD000
unkown
page read and write
clean
9FE000
stack
page read and write
clean
2048000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
B1A000
unkown
page read and write
clean
839FB7D000
unkown
page read and write
clean
212F26A0000
unkown image
page readonly
clean
7FF573967000
unkown image
page readonly
clean
1ADE4670000
unkown
page read and write
clean
212F290F000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
960000
unkown image
page readonly
clean
2FBF000
unkown image
page readonly
clean
BFD000
unkown
page read and write
clean
201B000
unkown image
page readonly
clean
7DF5B78A0000
unkown image
page readonly
clean
1160000
unkown
page read and write
clean
267680D6000
unkown
page read and write
clean
212F29B0000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF5A9AC1000
unkown image
page readonly
clean
213BD68B000
unkown
page read and write
clean
293F000
stack
page read and write
clean
1925E000000
unkown
page read and write
clean
212F20D9000
unkown
page read and write
clean
4A8E000
unkown
page read and write
clean
7DF506E60000
unkown image
page readonly
clean
BDF000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
BF6000
unkown
page read and write
clean
4A70000
unkown
page read and write
clean
90000
unkown image
page read and write
clean
212F297F000
unkown
page read and write
clean
7FF4F90F3000
unkown image
page readonly
clean
BF6000
unkown
page read and write
clean
212F2989000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF511C56000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
6EC4F000
unkown image
page readonly
clean
BFC000
unkown
page read and write
clean
1F8F000
unkown image
page readonly
clean
7FF59A639000
unkown image
page readonly
clean
2FD1000
unkown image
page readonly
clean
B88000
unkown
page read and write
clean
7FF511C66000
unkown image
page readonly
clean
4AAA000
unkown
page read and write
clean
7FB72000
unkown image
page readonly
clean
7FF500B37000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
B85000
unkown
page read and write
clean
640000
unkown image
page readonly
clean
7FF573990000
unkown image
page readonly
clean
7FB70000
unkown image
page readonly
clean
99F18FF000
stack
page read and write
clean
2F47000
unkown image
page readonly
clean
5F0000
unkown image
page readonly
clean
7DF51F9D0000
unkown image
page readonly
clean
7FA42000
unkown image
page readonly
clean
94E000
stack
page read and write
clean
977000
unkown
page read and write
clean
10B0000
unkown image
page readonly
clean
2021000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7DF50ECB0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F298D000
unkown
page read and write
clean
2F4D000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF504240000
unkown image
page readonly
clean
7FF500B31000
unkown image
page readonly
clean
7FF511D34000
unkown image
page readonly
clean
7FF500BB9000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF4F91DA000
unkown image
page readonly
clean
7FF5A9C24000
unkown image
page readonly
clean
19A84C4C000
unkown
page read and write
clean
212F2982000
unkown
page read and write
clean
BB5000
unkown
page read and write
clean
203C000
unkown image
page readonly
clean
2043000
unkown image
page readonly
clean
7FF4F90ED000
unkown image
page readonly
clean
1F8B000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF500EBC000
unkown image
page readonly
clean
28E1000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF573A5A000
unkown image
page readonly
clean
A78000
heap private
page read and write
clean
7FF5A9C41000
unkown image
page readonly
clean
1170000
unkown
page read and write
clean
7DF50ECC0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
212F298D000
unkown
page read and write
clean
7FF573A49000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
250B000
unkown
page read and write
clean
19A84B50000
unkown image
page readonly
clean
4AB2000
unkown
page read and write
clean
B15000
heap default
page read and write
clean
7FB62000
unkown image
page readonly
clean
7FF511B62000
unkown image
page readonly
clean
1F93000
unkown image
page readonly
clean
7FF500FA3000
unkown image
page readonly
clean
2950000
heap private
page read and write
clean
C7B7FF9000
stack
page read and write
clean
536E000
stack
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF500E01000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
1ADE4700000
unkown
page read and write
clean
7DF40FFA0000
unkown image
page readonly
clean
1F85B709000
unkown
page read and write
clean
212F2990000
unkown
page read and write
clean
2507000
unkown
page read and write
clean
7DF5816D2000
unkown image
page readonly
clean
6EC30000
unkown image
page readonly
clean
150000
unkown image
page readonly
clean
7FF501029000
unkown image
page readonly
clean
1E75000
unkown image
page readonly
clean
950000
unkown
page read and write
clean
7FF501041000
unkown image
page readonly
clean
1F85B490000
unkown image
page read and write
clean
BCC000
unkown
page read and write
clean
2F1A000
unkown image
page readonly
clean
212F297E000
unkown
page read and write
clean
2DBA000
unkown image
page readonly
clean
7FF5A9A2B000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
1ADE43B0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF500F63000
unkown image
page readonly
clean
10A0000
heap private
page read and write
clean
7FF4F9103000
unkown image
page readonly
clean
212F29BA000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF500BB7000
unkown image
page readonly
clean
212F203C000
unkown
page read and write
clean
1F85B4B0000
unkown image
page readonly
clean
4B38000
unkown
page read and write
clean
17F7AFE000
stack
page read and write
clean
977000
unkown
page read and write
clean
7FF504393000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1ADE4390000
unkown image
page read and write
clean
1F3E000
unkown image
page readonly
clean
212F20ED000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F2998000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
267680E0000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1FBC000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7F940000
unkown image
page readonly
clean
981887B000
stack
page read and write
clean
150000
unkown image
page readonly
clean
212F2050000
unkown
page read and write
clean
7FF59A4E1000
unkown image
page readonly
clean
BDF000
unkown
page read and write
clean
7FF511483000
unkown image
page readonly
clean
6EC30000
unkown image
page readonly
clean
7FF5042DC000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
B7C000
unkown
page read and write
clean
7DF5120D0000
unkown image
page readonly
clean
B83000
unkown
page read and write
clean
212F2982000
unkown
page read and write
clean
574ECF9000
stack
page read and write
clean
7FF500F70000
unkown image
page readonly
clean
2CDD000
unkown image
page readonly
clean
212F20C5000
unkown
page read and write
clean
213BDE02000
unkown
page read and write
clean
7DF506E40000
unkown image
page readonly
clean
2E25000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF5A9A95000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
267680B0000
heap default
page read and write
clean
267680D1000
unkown
page read and write
clean
1F41000
unkown image
page readonly
clean
1F85B5D0000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2A0B000
heap private
page read and write
clean
212F2900000
unkown
page read and write
clean
1ADE4600000
unkown
page read and write
clean
AD0000
unkown
page read and write
clean
977000
unkown
page read and write
clean
2021000
unkown image
page readonly
clean
2B60000
unkown image
page readonly
clean
212F2802000
unkown
page read and write
clean
1FA6000
unkown image
page readonly
clean
7FF5A9B4D000
unkown image
page readonly
clean
4A75000
unkown
page read and write
clean
BDF000
unkown
page read and write
clean
212F2053000
unkown
page read and write
clean
212F29D0000
unkown
page read and write
clean
B20000
unkown
page read and write
clean
7DF5120D0000
unkown image
page readonly
clean
1F85B7C0000
unkown image
page readonly
clean
4AAA000
unkown
page read and write
clean
7FA52000
unkown image
page readonly
clean
B1F000
unkown
page read and write
clean
7FF511AEA000
unkown image
page readonly
clean
7DF5120E0000
unkown image
page readonly
clean
3FDB000
unkown
page read and write
clean
2960000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
83A02F9000
stack
page read and write
clean
7DF50ECC2000
unkown image
page readonly
clean
7FF59A6AA000
unkown image
page readonly
clean
212F297C000
unkown
page read and write
clean
7FF5A9B37000
unkown image
page readonly
clean
7FF511C73000
unkown image
page readonly
clean
C7B7B9A000
unkown
page read and write
clean
7FF511C5D000
unkown image
page readonly
clean
7FF59A585000
unkown image
page readonly
clean
7FF500FAE000
unkown image
page readonly
clean
7FF500DA1000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
6EC30000
unkown image
page readonly
clean
212F2E6A000
unkown
page read and write
clean
4B3D000
unkown
page read and write
clean
2F3B000
unkown image
page readonly
clean
99F19FA000
stack
page read and write
clean
977000
unkown
page read and write
clean
52E0000
unkown image
page write copy
clean
1F4F000
unkown image
page readonly
clean
7FF59A5B1000
unkown image
page readonly
clean
AD0000
stack
page read and write
clean
97E000
unkown
page read and write
clean
1FBC000
unkown image
page readonly
clean
4B39F000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
5E0000
unkown image
page readonly
clean
213BD540000
unkown image
page readonly
clean
1F6A000
unkown image
page readonly
clean
A00000
heap private
page read and write
clean
1FAB000
unkown image
page readonly
clean
1F6A000
unkown image
page readonly
clean
213BD540000
unkown image
page readonly
clean
B1B000
unkown
page read and write
clean
293F000
stack
page read and write
clean
97E000
unkown
page read and write
clean
7FF59A51B000
unkown image
page readonly
clean
8A2000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
981877B000
stack
page read and write
clean
140000
unkown image
page readonly
clean
4AAE000
unkown
page read and write
clean
7DF5120F0000
unkown image
page readonly
clean
26768080000
heap private
page read and write
clean
213BD590000
heap default
page read and write
clean
97E000
unkown
page read and write
clean
BD3000
unkown
page read and write
clean
7FF4FDC61000
unkown image
page readonly
clean
267680D0000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF50ECC2000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
1925E200000
unkown
page read and write
clean
212F296E000
unkown
page read and write
clean
4A92000
unkown
page read and write
clean
C7B7E7F000
stack
page read and write
clean
BFC000
unkown
page read and write
clean
212F299A000
unkown
page read and write
clean
AF0000
unkown
page execute and read and write
clean
7FF500FCA000
unkown image
page readonly
clean
7FF59A627000
unkown image
page readonly
clean
1F41000
unkown image
page readonly
clean
B21000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF5B78B2000
unkown image
page readonly
clean
7DF4B5770000
unkown image
page readonly
clean
1925E123000
heap private
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7DF506E50000
unkown image
page readonly
clean
4B4F000
unkown
page read and write
clean
212F29AC000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FA60000
unkown image
page readonly
clean
7FF5043CE000
unkown image
page readonly
clean
981838F000
stack
page read and write
clean
7FF5043ED000
unkown image
page readonly
clean
2021000
unkown image
page readonly
clean
26767F50000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF59A653000
unkown image
page readonly
clean
53AF000
stack
page read and write
clean
1ADE4713000
unkown
page read and write
clean
1F9D000
unkown image
page readonly
clean
7FF50406A000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
212F29AF000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF573997000
unkown image
page readonly
clean
1925DDC0000
unkown
page read and write
clean
14D0000
unkown image
page readonly
clean
1925DDB0000
unkown image
page read and write
clean
212F29B4000
unkown
page read and write
clean
1F85C400000
unkown
page read and write
clean
7FF4F9100000
unkown image
page readonly
clean
200B000
unkown image
page readonly
clean
7FF5A99F1000
unkown image
page readonly
clean
7DF51F9B0000
unkown image
page readonly
clean
4A81000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF59A72A000
unkown image
page readonly
clean
2960000
unkown image
page readonly
clean
7FF504379000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
4C60000
unkown
page read and write
clean
7FF59A650000
unkown image
page readonly
clean
7FA52000
unkown image
page readonly
clean
2FBB000
unkown image
page readonly
clean
7DF5B78B0000
unkown image
page readonly
clean
5F0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F41000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
2950000
heap private
page read and write
clean
BD9000
unkown
page read and write
clean
7DF5816F0000
unkown image
page readonly
clean
26768560000
unkown image
page readonly
clean
1ADE464C000
unkown
page read and write
clean
212F2102000
unkown
page read and write
clean
7FF57327F000
unkown image
page readonly
clean
19A84A10000
heap private
page read and write
clean
21E000
stack
page read and write
clean
AC0000
stack
page read and write
clean
212F2987000
unkown
page read and write
clean
213BDAD0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
4B36000
unkown
page read and write
clean
2507000
unkown
page read and write
clean
212F2116000
unkown
page read and write
clean
1F2E000
unkown image
page readonly
clean
7FF4F91D5000
unkown image
page readonly
clean
26767F50000
unkown image
page readonly
clean
19A84A40000
unkown image
page readonly
clean
BFC000
unkown
page read and write
clean
2A00000
heap private
page read and write
clean
2FE6000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
1ADE467D000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
2036000
unkown image
page readonly
clean
7FF5A9AC5000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
212F2400000
unkown image
page readonly
clean
970000
heap default
page read and write
clean
212F2410000
unkown image
page readonly
clean
19A84C4F000
unkown
page read and write
clean
B8A000
unkown
page read and write
clean
977000
unkown
page read and write
clean
2043000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
640000
unkown image
page readonly
clean
2036000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF500E5F000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F1F00000
unkown image
page readonly
clean
19A84C47000
unkown
page read and write
clean
3F70000
unkown
page read and write
clean
4B36000
unkown
page read and write
clean
1F85C1F0000
unkown
page read and write
clean
90000
unkown image
page read and write
clean
977000
unkown
page read and write
clean
10CE000
stack
page read and write
clean
7FF4F9133000
unkown image
page readonly
clean
4AC9000
unkown
page read and write
clean
A0000
unkown image
page readonly
clean
7FF59A4B6000
unkown image
page readonly
clean
7DF5B78C0000
unkown image
page readonly
clean
28F0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
99F16FA000
stack
page read and write
clean
213BD8D0000
unkown image
page readonly
clean
267681D0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F29A7000
unkown
page read and write
clean
7FF59A217000
unkown image
page readonly
clean
7DF51F9C2000
unkown image
page readonly
clean
7F242000
unkown image
page readonly
clean
7FF500D5B000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
E00000
unkown image
page readonly
clean
7FA60000
unkown image
page readonly
clean
4AC9000
unkown
page read and write
clean
212F2987000
unkown
page read and write
clean
7DF506E52000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
19A84C00000
unkown
page read and write
clean
202B000
unkown image
page readonly
clean
212F29BD000
unkown
page read and write
clean
212F297F000
unkown
page read and write
clean
4A87000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
F90000
stack
page read and write
clean
3FDB000
unkown
page read and write
clean
22AF000
stack
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
3F70000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
212F20A9000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
6EC30000
unkown image
page readonly
clean
2770000
unkown image
page readonly
clean
1F85B900000
heap private
page read and write
clean
140000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7DF5A83A0000
unkown image
page readonly
clean
7FF5A9C12000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF503F57000
unkown image
page readonly
clean
7FF511CAE000
unkown image
page readonly
clean
40A0000
heap private
page read and write
clean
7FF500F12000
unkown image
page readonly
clean
212F205A000
unkown
page read and write
clean
977000
unkown
page read and write
clean
5D2000
unkown
page read and write
clean
212F205B000
unkown
page read and write
clean
212F2750000
unkown image
page read and write
clean
1F85B910000
unkown
page read and write
clean
7FF5A9A10000
unkown image
page readonly
clean
7F232000
unkown image
page readonly
clean
19A84C52000
unkown
page read and write
clean
212F2058000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2FCB000
unkown image
page readonly
clean
13B000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F299C000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2DBE000
unkown image
page readonly
clean
200F000
unkown image
page readonly
clean
6EC4F000
unkown image
page readonly
clean
7FF504221000
unkown image
page readonly
clean
7FB80000
unkown image
page readonly
clean
212F2986000
unkown
page read and write
clean
267683D0000
unkown image
page readonly
clean
1267000
unkown image
page readonly
clean
2FDB000
unkown image
page readonly
clean
2DEA000
unkown image
page readonly
clean
7FF5009B7000
unkown image
page readonly
clean
1F79000
unkown image
page readonly
clean
BC6000
unkown
page read and write
clean
212F20A8000
unkown
page read and write
clean
977000
unkown
page read and write
clean
212F297A000
unkown
page read and write
clean
B7F000
unkown
page read and write
clean
7FB80000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
40A0000
heap private
page read and write
clean
977000
unkown
page read and write
clean
50DD000
stack
page read and write
clean
7DF5816E0000
unkown image
page readonly
clean
BF0000
unkown
page read and write
clean
977000
unkown
page read and write
clean
201B000
unkown image
page readonly
clean
7DF5816D0000
unkown image
page readonly
clean
7FF500E62000
unkown image
page readonly
clean
2770000
unkown image
page readonly
clean
4B1A000
unkown
page read and write
clean
7FF500C4C000
unkown image
page readonly
clean
4A93000
unkown
page read and write
clean
7FF50439E000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1FC0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7F230000
unkown image
page readonly
clean
7FF500F01000
unkown image
page readonly
clean
267680D7000
unkown
page read and write
clean
1ADE4647000
unkown
page read and write
clean
212F298D000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1925E013000
unkown
page read and write
clean
7DF5B78C0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F2E000
unkown image
page readonly
clean
68D40FF000
stack
page read and write
clean
1ADE464B000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7DF5A83B0000
unkown image
page readonly
clean
4B37000
unkown
page read and write
clean
2014000
unkown image
page readonly
clean
530000
unkown image
page read and write
clean
7FF511D3A000
unkown image
page readonly
clean
7FF4F910E000
unkown image
page readonly
clean
2048000
unkown image
page readonly
clean
C7B7EFF000
stack
page read and write
clean
212F298D000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F204D000
unkown
page read and write
clean
981867F000
stack
page read and write
clean
7FF5A9BB7000
unkown image
page readonly
clean
7FF5A983C000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F66000
unkown image
page readonly
clean
7DF5A83A2000
unkown image
page readonly
clean
7DF47F5A0000
unkown image
page readonly
clean
7FF599F49000
unkown image
page readonly
clean
212F2E02000
unkown
page read and write
clean
7FF500DB5000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
3F70000
unkown
page read and write
clean
977000
unkown
page read and write
clean
BDF000
unkown
page read and write
clean
230000
unkown
page execute and read and write
clean
212F296B000
unkown
page read and write
clean
7FF501051000
unkown image
page readonly
clean
4EA0000
heap private
page read and write
clean
BF6000
unkown
page read and write
clean
26768085000
heap private
page read and write
clean
4AC9000
unkown
page read and write
clean
B8F000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
203C000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F297F000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2014000
unkown image
page readonly
clean
1230000
unkown image
page readonly
clean
7FF573979000
unkown image
page readonly
clean
293F000
stack
page read and write
clean
7FF5043C3000
unkown image
page readonly
clean
6EC4F000
unkown image
page readonly
clean
4B3D000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1E75000
unkown image
page readonly
clean
40B0000
unkown image
page readonly
clean
212F205C000
unkown
page read and write
clean
1ADE4657000
unkown
page read and write
clean
BC0000
unkown
page read and write
clean
1FA6000
unkown image
page readonly
clean
2ED8000
unkown image
page readonly
clean
7FF50427F000
unkown image
page readonly
clean
1ADE4658000
unkown
page read and write
clean
7F230000
unkown image
page readonly
clean
213BD64E000
unkown
page read and write
clean
212F2021000
unkown
page read and write
clean
28E0000
unkown
page read and write
clean
4A87000
unkown
page read and write
clean
7DF506E42000
unkown image
page readonly
clean
19A84C70000
unkown
page read and write
clean
19A84C29000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FB80000
unkown image
page readonly
clean
212F204F000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1925DE20000
heap default
page read and write
clean
B42000
unkown
page read and write
clean
267A000
heap default
page read and write
clean
977000
unkown
page read and write
clean
213BD713000
unkown
page read and write
clean
212F2996000
unkown
page read and write
clean
7FF59A68E000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F1F20000
heap default
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF5A8392000
unkown image
page readonly
clean
7FF4F912B000
unkown image
page readonly
clean
7DF506E60000
unkown image
page readonly
clean
17F779B000
unkown
page read and write
clean
7FB62000
unkown image
page readonly
clean
7DF5A8390000
unkown image
page readonly
clean
7FF5A9A9B000
unkown image
page readonly
clean
2640000
unkown
page read and write
clean
7FA60000
unkown image
page readonly
clean
9818977000
stack
page read and write
clean
212F2E02000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F8B000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF57380F000
unkown image
page readonly
clean
7F250000
unkown image
page readonly
clean
69C000
unkown
page read and write
clean
7FF500E1D000
unkown image
page readonly
clean
1ADE4688000
unkown
page read and write
clean
19A84C13000
unkown
page read and write
clean
28FB000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
6EC30000
unkown image
page readonly
clean
1F85B712000
unkown
page read and write
clean
529D000
stack
page read and write
clean
7FA50000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2F3F000
unkown image
page readonly
clean
7FF5A9A0D000
unkown image
page readonly
clean
26767F30000
unkown image
page read and write
clean
150000
unkown image
page readonly
clean
2670000
heap default
page read and write
clean
4971000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F93000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
BFC000
unkown
page read and write
clean
19A85000000
unkown image
page readonly
clean
839FEFE000
stack
page read and write
clean
7DF5B78A0000
unkown image
page readonly
clean
212F297C000
unkown
page read and write
clean
17F7CFB000
stack
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F76000
unkown image
page readonly
clean
267681C0000
unkown image
page readonly
clean
7B0000
unkown image
page readonly
clean
1F85000
unkown image
page readonly
clean
7FF4F91B9000
unkown image
page readonly
clean
202B000
unkown image
page readonly
clean
212F297F000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF500E20000
unkown image
page readonly
clean
7FF573941000
unkown image
page readonly
clean
1F85B5F0000
unkown
page read and write
clean
212F20ED000
unkown
page read and write
clean
99F112E000
stack
page read and write
clean
97E000
unkown
page read and write
clean
2FF8000
unkown image
page readonly
clean
2F35000
unkown image
page readonly
clean
4AAA000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF5A9459000
unkown image
page readonly
clean
1925E313000
unkown
page read and write
clean
BF0000
unkown
page read and write
clean
7F232000
unkown image
page readonly
clean
BF6000
unkown
page read and write
clean
7FF511D29000
unkown image
page readonly
clean
1925E100000
unkown
page read and write
clean
1F9D000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
2DD3000
unkown image
page readonly
clean
2F26000
unkown image
page readonly
clean
2DAD000
unkown image
page readonly
clean
19A85180000
unkown image
page readonly
clean
7FF573A65000
unkown image
page readonly
clean
2B60000
unkown image
page readonly
clean
7E6000
unkown
page read and write
clean
7FF5A9C2A000
unkown image
page readonly
clean
7DF5B78A2000
unkown image
page readonly
clean
7FF500F77000
unkown image
page readonly
clean
540000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F2108000
unkown
page read and write
clean
7FF500869000
unkown image
page readonly
clean
1925E202000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF500F7E000
unkown image
page readonly
clean
7FF504390000
unkown image
page readonly
clean
B85000
unkown
page read and write
clean
1FA6000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF4F8989000
unkown image
page readonly
clean
1F85C410000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
212F298F000
unkown
page read and write
clean
213BD670000
unkown
page read and write
clean
212F2913000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF500E3B000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF501034000
unkown image
page readonly
clean
7FF5A9B60000
unkown image
page readonly
clean
267680EB000
unkown
page read and write
clean
213BD680000
unkown
page read and write
clean
F90000
stack
page read and write
clean
7F230000
unkown image
page readonly
clean
2DA6000
unkown image
page readonly
clean
1E17000
unkown image
page readonly
clean
B00000
heap default
page read and write
clean
97E000
unkown
page read and write
clean
1F61000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
28F0000
unkown image
page readonly
clean
B81000
unkown
page read and write
clean
1F85C460000
unkown
page read and write
clean
7FF5A9A4F000
unkown image
page readonly
clean
7FF573A54000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7DF506E40000
unkown image
page readonly
clean
7FA40000
unkown image
page readonly
clean
2950000
heap private
page read and write
clean
7FF573A71000
unkown image
page readonly
clean
212F29B0000
unkown
page read and write
clean
250B000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F29B4000
unkown
page read and write
clean
4B36000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF500D94000
unkown image
page readonly
clean
212F2982000
unkown
page read and write
clean
B10000
heap default
page read and write
clean
AE0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
1F85B710000
unkown
page read and write
clean
4971000
unkown
page read and write
clean
7FB60000
unkown image
page readonly
clean
7FF5A9C31000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
4ABC000
unkown
page read and write
clean
12D0000
unkown image
page readonly
clean
7FF501050000
unkown image
page readonly
clean
B8F000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
B81000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
19A84C4B000
unkown
page read and write
clean
7FF50425B000
unkown image
page readonly
clean
505F000
stack
page read and write
clean
BF0000
unkown
page read and write
clean
17F7A7E000
stack
page read and write
clean
BC6000
unkown
page read and write
clean
267680E0000
unkown
page read and write
clean
1F8F000
unkown image
page readonly
clean
1925E002000
unkown
page read and write
clean
99F17F7000
stack
page read and write
clean
630000
unkown image
page read and write
clean
7FB72000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
267680E0000
unkown
page read and write
clean
4AAE000
unkown
page read and write
clean
7FF5A9B49000
unkown image
page readonly
clean
19A84C3C000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F85B6C8000
heap default
page read and write
clean
7F242000
unkown image
page readonly
clean
7FF4F915A000
unkown image
page readonly
clean
7FF504442000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
A0B000
heap private
page read and write
clean
7FF59A63F000
unkown image
page readonly
clean
4B36000
unkown
page read and write
clean
AF0000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
7FF50103A000
unkown image
page readonly
clean
1F76000
unkown image
page readonly
clean
4B52000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
9818A7F000
stack
page read and write
clean
7DF506E52000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
1ADE464F000
unkown
page read and write
clean
201B000
unkown image
page readonly
clean
1F3E000
unkown image
page readonly
clean
BFC000
unkown
page read and write
clean
68D43F7000
stack
page read and write
clean
7FF500CD5000
unkown image
page readonly
clean
2507000
unkown
page read and write
clean
7FF59A702000
unkown image
page readonly
clean
7FF59A67B000
unkown image
page readonly
clean
200F000
unkown image
page readonly
clean
7FF5042F5000
unkown image
page readonly
clean
A7B000
heap private
page read and write
clean
7FF500F47000
unkown image
page readonly
clean
212F2029000
unkown
page read and write
clean
5210000
unkown
page read and write
clean
240000
unkown
page read and write
clean
BDF000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2F29000
unkown image
page readonly
clean
79C000
unkown
page read and write
clean
1F76000
unkown image
page readonly
clean
9BE000
stack
page read and write
clean
7FF5040F5000
unkown image
page readonly
clean
212F29AD000
unkown
page read and write
clean
BF6000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF5816E0000
unkown image
page readonly
clean
7FF511CCA000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
1925DDF0000
unkown image
page readonly
clean
7FF511B67000
unkown image
page readonly
clean
BDF000
unkown
page read and write
clean
4B1A000
unkown
page read and write
clean
BC0000
unkown
page read and write
clean
977000
unkown
page read and write
clean
2A20000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
4B4F000
unkown
page read and write
clean
7FF500F87000
unkown image
page readonly
clean
7FA60000
unkown image
page readonly
clean
68D3D8B000
unkown
page read and write
clean
1F85B725000
heap default
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F85000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
213BD627000
unkown
page read and write
clean
213BD560000
unkown image
page readonly
clean
212F2000000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
40A0000
heap private
page read and write
clean
7F240000
unkown image
page readonly
clean
7A0000
unkown image
page readonly
clean
2670000
heap default
page read and write
clean
2A10000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF573A61000
unkown image
page readonly
clean
1F85BEA0000
unkown image
page readonly
clean
7FF500F59000
unkown image
page readonly
clean
1925E102000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F79000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
2F01000
unkown image
page readonly
clean
19A84D13000
unkown
page read and write
clean
7FF503AF2000
unkown image
page readonly
clean
19A84D02000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
213BD520000
unkown image
page read and write
clean
4EA6000
heap private
page read and write
clean
97E000
unkown
page read and write
clean
519E000
stack
page read and write
clean
97E000
unkown
page read and write
clean
7FF5739E7000
unkown image
page readonly
clean
230000
unkown
page execute and read and write
clean
7FF500ED5000
unkown image
page readonly
clean
A0000
unkown image
page readonly
clean
7DF50ECD0000
unkown image
page readonly
clean
7FF4F90EF000
unkown image
page readonly
clean
212F2982000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
FD0000
unkown
page read and write
clean
7DF50ECC0000
unkown image
page readonly
clean
1F6A000
unkown image
page readonly
clean
1ADE463C000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F85B909000
heap private
page read and write
clean
7FF5A98C5000
unkown image
page readonly
clean
7DF50ECD0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
BF0000
unkown
page read and write
clean
2A0D000
heap private
page read and write
clean
7FF500F5D000
unkown image
page readonly
clean
7FF500C27000
unkown image
page readonly
clean
4B44000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1ADE4A00000
unkown image
page readonly
clean
212F2979000
unkown
page read and write
clean
A4F000
stack
page read and write
clean
7FF511D22000
unkown image
page readonly
clean
212F208A000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF5043E7000
unkown image
page readonly
clean
7DF5120D2000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
6EC4A000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF51F9B2000
unkown image
page readonly
clean
2320000
heap default
page read and write
clean
4B3D000
unkown
page read and write
clean
212F2049000
unkown
page read and write
clean
212F204B000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
99F1B78000
stack
page read and write
clean
7FF5115DE000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
B8A000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2960000
unkown image
page readonly
clean
213BD64B000
unkown
page read and write
clean
1ADE4672000
unkown
page read and write
clean
7FF504367000
unkown image
page readonly
clean
515D000
stack
page read and write
clean
1ADE44E0000
unkown image
page readonly
clean
1ADE464D000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
7FA40000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF504461000
unkown image
page readonly
clean
212F2013000
unkown
page read and write
clean
4B3E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2E1C000
unkown image
page readonly
clean
2A0E000
heap private
page read and write
clean
B7F000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF504471000
unkown image
page readonly
clean
574EE79000
stack
page read and write
clean
1F61000
unkown image
page readonly
clean
1F3E000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FA42000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
1F85B6EF000
heap default
page read and write
clean
19A84A50000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF504449000
unkown image
page readonly
clean
7FF50437D000
unkown image
page readonly
clean
213BD63C000
unkown
page read and write
clean
7FA60000
unkown image
page readonly
clean
B83000
unkown
page read and write
clean
7FF59A721000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F295F000
unkown
page read and write
clean
6EC30000
unkown image
page readonly
clean
7FF511511000
unkown image
page readonly
clean
7DF5120E2000
unkown image
page readonly
clean
1F85000
unkown image
page readonly
clean
108D000
stack
page read and write
clean
977000
unkown
page read and write
clean
213BD64F000
unkown
page read and write
clean
213BD570000
unkown image
page readonly
clean
7FF59A53F000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
4B1A000
unkown
page read and write
clean
7FF500F33000
unkown image
page readonly
clean
4B3D000
unkown
page read and write
clean
7F240000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F93000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF573915000
unkown image
page readonly
clean
4D60000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF51F9B2000
unkown image
page readonly
clean
FC000
unkown
page read and write
clean
2F56000
unkown image
page readonly
clean
1C0000
unkown image
page readonly
clean
4A9B000
unkown
page read and write
clean
7DF40CB80000
unkown image
page readonly
clean
7DF5B78B2000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7DF5A83A2000
unkown image
page readonly
clean
4B1A000
unkown
page read and write
clean
7FF500F2E000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1A0000
unkown
page read and write
clean
7FF5739EA000
unkown image
page readonly
clean
4AAE000
unkown
page read and write
clean
2043000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7DF51F9C0000
unkown image
page readonly
clean
7DF506E50000
unkown image
page readonly
clean
BFC000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF573A71000
unkown image
page readonly
clean
7F130000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
68D42FB000
stack
page read and write
clean
21E000
stack
page read and write
clean
10E0000
heap private
page read and write
clean
6EC4D000
unkown image
page read and write
clean
1925DDD0000
unkown image
page readonly
clean
7FF4FDC61000
unkown image
page readonly
clean
7FF4F91C4000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F298B000
unkown
page read and write
clean
7FF500DAF000
unkown image
page readonly
clean
1FC0000
unkown image
page readonly
clean
4B280000
unkown
page read and write
clean
7FF511C9B000
unkown image
page readonly
clean
6EC4D000
unkown image
page read and write
clean
213BD682000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF5120F0000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FB62000
unkown image
page readonly
clean
213BD700000
unkown
page read and write
clean
7F242000
unkown image
page readonly
clean
7FF5A9BBD000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
B88000
unkown
page read and write
clean
212F2982000
unkown
page read and write
clean
4A87000
unkown
page read and write
clean
212F297A000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FB72000
unkown image
page readonly
clean
7DF51F9C2000
unkown image
page readonly
clean
212F298B000
unkown
page read and write
clean
4D60000
unkown
page read and write
clean
6EC4D000
unkown image
page read and write
clean
59C000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
4AB2000
unkown
page read and write
clean
4B3D000
unkown
page read and write
clean
7FF511C63000
unkown image
page readonly
clean
7FF501022000
unkown image
page readonly
clean
7FF59A731000
unkown image
page readonly
clean
52DB000
stack
page read and write
clean
7F232000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
1F85B8F0000
unkown
page readonly
clean
7FF511CCD000
unkown image
page readonly
clean
7FF4F9107000
unkown image
page readonly
clean
7FF5739C5000
unkown image
page readonly
clean
40B0000
unkown image
page readonly
clean
212F2990000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF57399E000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
B3B000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF500E05000
unkown image
page readonly
clean
113E000
stack
page read and write
clean
977000
unkown
page read and write
clean
7FB60000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF59A683000
unkown image
page readonly
clean
1000000
unkown
page read and write
clean
977000
unkown
page read and write
clean
3FDB000
unkown
page read and write
clean
4B44000
unkown
page read and write
clean
7FF5A9C41000
unkown image
page readonly
clean
22F0000
unkown image
page readonly
clean
7DF5816E2000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF51150A000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
1ADE4C02000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
7DF50ECB0000
unkown image
page readonly
clean
7FF5A9B6E000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
212F29D0000
unkown
page read and write
clean
7DF5B78B0000
unkown image
page readonly
clean
212F298D000
unkown
page read and write
clean
1ADE4654000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
19A84D00000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F2987000
unkown
page read and write
clean
F80000
unkown image
page readonly
clean
B4B000
heap default
page read and write
clean
1925E213000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F8F000
unkown image
page readonly
clean
17F7E77000
stack
page read and write
clean
7FF59A32C000
unkown image
page readonly
clean
212F20EA000
unkown
page read and write
clean
212F20BE000
unkown
page read and write
clean
1F85BB20000
unkown image
page readonly
clean
1925DE00000
unkown image
page readonly
clean
4B44000
unkown
page read and write
clean
574ED79000
stack
page read and write
clean
212F295A000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF511C5F000
unkown image
page readonly
clean
2036000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF573993000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
212F2967000
unkown
page read and write
clean
1FAB000
unkown image
page readonly
clean
19A84C8B000
unkown
page read and write
clean
7FF500EFF000
unkown image
page readonly
clean
213BD64A000
unkown
page read and write
clean
4B4F000
unkown
page read and write
clean
7FF5042F1000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1ADE45D0000
unkown
page read and write
clean
BFC000
unkown
page read and write
clean
200F000
unkown image
page readonly
clean
7FF51148B000
unkown image
page readonly
clean
7FF4F91E1000
unkown image
page readonly
clean
B92000
unkown
page read and write
clean
977000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
7FF59A6AD000
unkown image
page readonly
clean
2FEC000
unkown image
page readonly
clean
7DF5816E2000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7DF5A83A0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7DF5816D0000
unkown image
page readonly
clean
19A84C80000
unkown
page read and write
clean
7FF500F2A000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
B77000
unkown
page read and write
clean
1F85B6D0000
heap default
page read and write
clean
7FF503F51000
unkown image
page readonly
clean
212F20F6000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF511D51000
unkown image
page readonly
clean
90000
unkown image
page read and write
clean
97E000
unkown
page read and write
clean
213BD702000
unkown
page read and write
clean
7FF5041F6000
unkown image
page readonly
clean
28F0000
unkown image
page readonly
clean
5F0000
unkown image
page readonly
clean
213BDC50000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
1F85B4E0000
unkown image
page readonly
clean
7FF57397D000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F297D000
unkown
page read and write
clean
5F0000
unkown image
page readonly
clean
7FF4F91B2000
unkown image
page readonly
clean
89E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF5A99C6000
unkown image
page readonly
clean
7FF5A9C19000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
6EC4A000
unkown image
page readonly
clean
2FF2000
unkown image
page readonly
clean
7FF500EAB000
unkown image
page readonly
clean
4AC9000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F298B000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F85B4D0000
unkown image
page readonly
clean
212F26D0000
unkown image
page write copy
clean
B08000
heap default
page read and write
clean
4A9C000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
17F807F000
stack
page read and write
clean
212F298D000
unkown
page read and write
clean
212F2992000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF511D51000
unkown image
page readonly
clean
2F16000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
4971000
unkown
page read and write
clean
7FB70000
unkown image
page readonly
clean
1925E028000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF5042C5000
unkown image
page readonly
clean
9818B7F000
stack
page read and write
clean
22F0000
unkown image
page readonly
clean
1F4F000
unkown image
page readonly
clean
212F2200000
unkown image
page readonly
clean
B92000
unkown
page read and write
clean
975000
heap default
page read and write
clean
1F85B680000
unkown
page read and write
clean
A07000
heap private
page read and write
clean
263E000
stack
page read and write
clean
1F85B905000
heap private
page read and write
clean
1F66000
unkown image
page readonly
clean
212F2740000
unkown
page read and write
clean
212F20AA000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
19A84D08000
unkown
page read and write
clean
1ADE4655000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
540000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
977000
unkown
page read and write
clean
267A000
heap default
page read and write
clean
4B3D000
unkown
page read and write
clean
BD9000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7FF5A9727000
unkown image
page readonly
clean
2E07000
unkown image
page readonly
clean
212F1EC0000
heap private
page read and write
clean
212F29AF000
unkown
page read and write
clean
977000
unkown
page read and write
clean
212F298F000
unkown
page read and write
clean
BBB000
unkown
page read and write
clean
4B36000
unkown
page read and write
clean
22AF000
stack
page read and write
clean
7FF50437F000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F2740000
unkown
page read and write
clean
1925DDD0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF59A63D000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF5739ED000
unkown image
page readonly
clean
202B000
unkown image
page readonly
clean
4B3D000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F66000
unkown image
page readonly
clean
1FC0000
unkown image
page readonly
clean
212F2054000
unkown
page read and write
clean
7DF50ECB2000
unkown image
page readonly
clean
4D71000
unkown
page read and write
clean
509D000
stack
page read and write
clean
212F2056000
unkown
page read and write
clean
7FF5A9B8B000
unkown image
page readonly
clean
7FF59A709000
unkown image
page readonly
clean
200B000
unkown image
page readonly
clean
B40000
heap default
page read and write
clean
7FF57397F000
unkown image
page readonly
clean
1FAB000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF50423D000
unkown image
page readonly
clean
4E90000
unkown
page read and write
clean
6EC4D000
unkown image
page read and write
clean
212F299C000
unkown
page read and write
clean
977000
unkown
page read and write
clean
5E0000
unkown image
page readonly
clean
213BD613000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F85B710000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
19A84A00000
unkown image
page read and write
clean
1F8B000
unkown image
page readonly
clean
7FF4F91CA000
unkown image
page readonly
clean
2014000
unkown image
page readonly
clean
C7B7F7A000
stack
page read and write
clean
97E000
unkown
page read and write
clean
7FF500F5F000
unkown image
page readonly
clean
5E0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
99F11AE000
stack
page read and write
clean
7FF500E67000
unkown image
page readonly
clean
1ADE4650000
unkown
page read and write
clean
4A87000
unkown
page read and write
clean
212F299E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
106B000
unkown
page read and write
clean
4E90000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
263E000
stack
page read and write
clean
2320000
heap default
page read and write
clean
19A84C48000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
212F2E02000
unkown
page read and write
clean
A0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
BFC000
unkown
page read and write
clean
1F61000
unkown image
page readonly
clean
FC000
unkown
page read and write
clean
68D407F000
stack
page read and write
clean
68D45FF000
stack
page read and write
clean
977000
unkown
page read and write
clean
7DF5A83B0000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
7FF5A9BBA000
unkown image
page readonly
clean
213BD629000
unkown
page read and write
clean
1ADE4702000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1925E302000
unkown
page read and write
clean
4AB2000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
2048000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF4F91D1000
unkown image
page readonly
clean
212F2E02000
unkown
page read and write
clean
977000
unkown
page read and write
clean
7E2000
unkown
page read and write
clean
19A84C02000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FF5009CC000
unkown image
page readonly
clean
7FF500D22000
unkown image
page readonly
clean
2EEF000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
212F2989000
unkown
page read and write
clean
26768090000
unkown
page read and write
clean
1F85B733000
heap default
page read and write
clean
977000
unkown
page read and write
clean
7FF59A6A7000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
977000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7FB60000
unkown image
page readonly
clean
BF0000
unkown
page read and write
clean
4B39B000
unkown
page read and write
clean
212F2996000
unkown
page read and write
clean
977000
unkown
page read and write
clean
1F85BD20000
unkown image
page readonly
clean
7FF5A9721000
unkown image
page readonly
clean
7DF5120E2000
unkown image
page readonly
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
1F85B610000
unkown image
page readonly
clean
7FF59A211000
unkown image
page readonly
clean
7FF59A643000
unkown image
page readonly
clean
2FF8000
unkown image
page readonly
clean
BC0000
unkown
page read and write
clean
2670000
heap default
page read and write
clean
97E000
unkown
page read and write
clean
97E000
unkown
page read and write
clean
7DF506E42000
unkown image
page readonly
clean
977000
unkown
page read and write
clean
7FF59A65E000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
212F1EF0000
unkown image
page readonly
clean
19A84C50000
unkown
page read and write
clean
7FF5A9B93000
unkown image
page readonly
clean
7FF4F90F6000
unkown image
page readonly
clean
5E0000
unkown image
page readonly
clean
7DF5816D2000
unkown image
page readonly
clean
19A84B70000
unkown
page read and write
clean
1ADE4400000
heap default
page read and write
clean
540000
unkown image
page readonly
clean
4ABA000
unkown
page read and write
clean
C7B80FD000
stack
page read and write
clean
BD9000
unkown
page read and write
clean
977000
unkown
page read and write
clean
BF6000
unkown
page read and write
clean
800000
unkown
page read and write
clean
267A000
heap default
page read and write
clean
97E000
unkown
page read and write
clean
213BD708000
unkown
page read and write
clean
977000
unkown
page read and write
clean
203C000
unkown image
page readonly
clean
7DF404D10000
unkown image
page readonly
clean
There are 1725 hidden memdumps, click here to show them.