IOC Report

loading gif

Files

File Path
Type
Category
Malicious
triage_dropped_file.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_3e2aba14ae6839fafa2e423496d524d852da7165_82810a17_041bce1d\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERB361.tmp.dmp
Mini DuMP crash report, 14 streams, Fri Dec 24 00:02:13 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERBB03.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERBD27.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
MS Windows registry file, NT/2000 or above
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_rundll32.exe_3e2aba14ae6839fafa2e423496d524d852da7165_82810a17_0e87d88a\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER3E4E.tmp.dmp
Mini DuMP crash report, 14 streams, Thu Dec 23 14:50:09 2021, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER4498.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER471A.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\triage_dropped_file.dll"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\triage_dropped_file.dll",#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\triage_dropped_file.dll",#1
malicious
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6376 -s 672
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6136 -s 684
clean

URLs

Name
IP
Malicious
http://upx.sf.net
unknown
clean
http://www.baxleystamps.comDVarFileInfo$
unknown
clean

IPs

IP
Domain
Country
Malicious
185.4.135.27
unknown
Greece
malicious
85.10.248.28
unknown
Germany
malicious
80.211.3.13
unknown
Italy
malicious
144.91.122.102
unknown
Germany
malicious

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHivePermissionsCorrect
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHiveOwnerCorrect
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProgramId
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
FileId
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LowerCaseLongPath
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LongPathHash
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Name
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Publisher
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Version
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinFileVersion
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinaryType
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProductName
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProductVersion
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LinkDate
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinProductVersion
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Size
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Language
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
IsPeFile
clean
\REGISTRY\A\{92262985-8b34-75f6-8793-9989e2097026}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
IsOsComponent
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
ExceptionRecord
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceTicket
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceId
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
ApplicationFlags
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
0018800453F4626F
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProgramId
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
FileId
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LowerCaseLongPath
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LongPathHash
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Name
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Publisher
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Version
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinFileVersion
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinaryType
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProductName
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
ProductVersion
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
LinkDate
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
BinProductVersion
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Size
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
Language
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
IsPeFile
clean
\REGISTRY\A\{ceefb094-3a66-e1f8-b178-6f6f51b62a70}\Root\InventoryApplicationFile\rundll32.exe|ab97b57a
IsOsComponent
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
00184006ACAABF3E
clean
There are 32 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
6EB21000
unkown image
page execute read
malicious
6EB21000
unkown image
page execute read
malicious
6EB21000
unkown image
page execute read
malicious
6EB21000
unkown image
page execute read
malicious
6EB20000
unkown image
page read and write
malicious
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF543AE2000
unkown image
page readonly
clean
1D2F0B08000
unkown
page read and write
clean
7FF5C719D000
unkown image
page readonly
clean
21FA5D4C000
unkown
page read and write
clean
21DDE3A0000
unkown image
page readonly
clean
7FF4F5A39000
unkown image
page readonly
clean
FE0000
unkown image
page readonly
clean
2A45000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5DCF000
unkown
page read and write
clean
7FF5C314A000
unkown image
page readonly
clean
33D0000
heap default
page read and write
clean
278E000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
7FF5C3161000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5D86000
unkown
page read and write
clean
12CF000
stack
page read and write
clean
7FF5188B3000
unkown image
page readonly
clean
A4880F7000
stack
page read and write
clean
7DF4CEC90000
unkown image
page readonly
clean
21FA5455000
unkown
page read and write
clean
1D2F0A5F000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2F12000
unkown image
page readonly
clean
7FAC0000
unkown image
page readonly
clean
2A72D20D000
unkown
page read and write
clean
4E10000
heap private
page read and write
clean
7FF4F59B5000
unkown image
page readonly
clean
6EB3F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
1E1E000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2A33000
unkown
page read and write
clean
3114000
unkown image
page readonly
clean
7FF4F5A53000
unkown image
page readonly
clean
7FF51889D000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
261A8102000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
3076000
unkown image
page readonly
clean
7FF4F5497000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF535C1F000
unkown image
page readonly
clean
36D0000
unkown image
page readonly
clean
21FA5800000
unkown image
page readonly
clean
4FFE000
stack
page read and write
clean
7FF5C78AB000
unkown image
page readonly
clean
7FF5C786F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
211E3479000
heap private
page read and write
clean
2342A8A0000
unkown image
page readonly
clean
7FF5188E3000
unkown image
page readonly
clean
29DF000
unkown
page read and write
clean
4647000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF4F5A83000
unkown image
page readonly
clean
211E333B000
unkown
page read and write
clean
2A72D202000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
211E332E000
heap default
page read and write
clean
278E000
unkown
page read and write
clean
21FA545B000
unkown
page read and write
clean
6EB3A000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2A72D100000
unkown image
page readonly
clean
261A7EB0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5AB0000
unkown
page read and write
clean
E57000
unkown
page read and write
clean
21FA5D75000
unkown
page read and write
clean
2A4B000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5188B7000
unkown image
page readonly
clean
311B000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA6200000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF574910000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
A10000
unkown
page read and write
clean
12D0000
unkown
page read and write
clean
6EB3A000
unkown image
page readonly
clean
7FF5C30BE000
unkown image
page readonly
clean
7FF5C30B3000
unkown image
page readonly
clean
306A000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF526602000
unkown image
page readonly
clean
7F632000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FAA2000
unkown image
page readonly
clean
4D20000
heap private
page read and write
clean
261A807E000
unkown
page read and write
clean
211E3170000
unkown
page read and write
clean
261A803C000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF4F5B2A000
unkown image
page readonly
clean
3143000
unkown image
page readonly
clean
4CAE000
stack
page read and write
clean
310F000
unkown image
page readonly
clean
21FA5D86000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29CE000
unkown
page read and write
clean
21DDE45F000
unkown
page read and write
clean
21FA5D81000
unkown
page read and write
clean
1D2F1002000
unkown
page read and write
clean
7FF4F54AC000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2A72D613000
unkown
page read and write
clean
7FAB2000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2738000
heap private
page read and write
clean
DE0000
unkown image
page read and write
clean
1D2F07E0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF574B19000
unkown image
page readonly
clean
30BC000
unkown image
page readonly
clean
308F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF5C7961000
unkown image
page readonly
clean
1E24000
unkown image
page readonly
clean
4712000
unkown
page read and write
clean
2A72D0C0000
unkown image
page read and write
clean
DC91E78000
stack
page read and write
clean
278E000
unkown
page read and write
clean
7FF5C306F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
DC916FE000
stack
page read and write
clean
1F8A000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7F652000
unkown image
page readonly
clean
29E7779000
stack
page read and write
clean
21FA5513000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
211E3475000
heap private
page read and write
clean
21FA5D86000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5C78DA000
unkown image
page readonly
clean
7FF574A53000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF5C78DD000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
22C0000
unkown image
page readonly
clean
7FF5C2FE5000
unkown image
page readonly
clean
46FE000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2A39000
unkown
page read and write
clean
7FF4F5A3D000
unkown image
page readonly
clean
3061000
unkown image
page readonly
clean
876BDF9000
stack
page read and write
clean
1E97000
unkown image
page readonly
clean
211E33D0000
unkown
page read and write
clean
7FF5C78B2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5454000
unkown
page read and write
clean
7DF543AF0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF5827B0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
1260000
unkown
page execute and read and write
clean
278E000
unkown
page read and write
clean
4B20000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1D2F0A13000
unkown
page read and write
clean
3085000
unkown image
page readonly
clean
2A72D300000
unkown
page read and write
clean
21FA54D1000
unkown
page read and write
clean
1E77000
unkown image
page readonly
clean
298B000
unkown
page read and write
clean
7DF5265F2000
unkown image
page readonly
clean
21FA54A1000
unkown
page read and write
clean
7FF535DA3000
unkown image
page readonly
clean
7FF4F5699000
unkown image
page readonly
clean
310F000
unkown image
page readonly
clean
2817000
heap private
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4F7000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
29DF000
unkown
page read and write
clean
2A27000
unkown
page read and write
clean
7DF5D0DC0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2A4B000
unkown
page read and write
clean
876BC7B000
unkown
page read and write
clean
21FA5D6B000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5E56BB000
unkown image
page readonly
clean
7FF4F5AAD000
unkown image
page readonly
clean
7FF5E5780000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF535E81000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2370000
unkown image
page readonly
clean
7FF5C27E2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF4F5A3F000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
49D2000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1D2F0A02000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF5C2EE6000
unkown image
page readonly
clean
30C0000
unkown image
page readonly
clean
2A72D700000
unkown
page read and write
clean
7FF51890D000
unkown image
page readonly
clean
7FF4F58FD000
unkown image
page readonly
clean
7FF574A4D000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
211E40C0000
unkown
page readonly
clean
775000
heap default
page read and write
clean
2787000
unkown
page read and write
clean
7DF5D0DC0000
unkown image
page readonly
clean
7FF5C7866000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21DDE44F000
unkown
page read and write
clean
7F652000
unkown image
page readonly
clean
1FB7000
unkown image
page readonly
clean
465B000
unkown
page read and write
clean
7FF4F51B8000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF535E71000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4CAE000
stack
page read and write
clean
278E000
unkown
page read and write
clean
1200000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF543B00000
unkown image
page readonly
clean
21DDE610000
unkown image
page readonly
clean
7FF5C3161000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
231C000
unkown
page read and write
clean
7F652000
unkown image
page readonly
clean
2034000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF503790000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
11C0000
unkown
page read and write
clean
DC919F8000
stack
page read and write
clean
29C6000
unkown
page read and write
clean
26DE000
heap private
page read and write
clean
278E000
unkown
page read and write
clean
B961B7B000
stack
page read and write
clean
7FF5C7777000
unkown image
page readonly
clean
7FF4F5A8E000
unkown image
page readonly
clean
21DDE44F000
unkown
page read and write
clean
30BC000
unkown image
page readonly
clean
7FF5C3080000
unkown image
page readonly
clean
7FF535D51000
unkown image
page readonly
clean
464E000
unkown
page read and write
clean
21FA5D19000
unkown
page read and write
clean
21DDE45F000
unkown
page read and write
clean
21DDEAD0000
unkown image
page readonly
clean
7FF51889F000
unkown image
page readonly
clean
21FA5D7B000
unkown
page read and write
clean
21FA5DAF000
unkown
page read and write
clean
21FA5600000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF401660000
unkown image
page readonly
clean
22C0000
unkown image
page readonly
clean
211E3E80000
unkown
page read and write
clean
2342A850000
unkown image
page read and write
clean
7FF4F59DF000
unkown image
page readonly
clean
7F642000
unkown image
page readonly
clean
7DF5D0DD2000
unkown image
page readonly
clean
D5EF47F000
stack
page read and write
clean
7FF5E5769000
unkown image
page readonly
clean
311B000
unkown image
page readonly
clean
2785000
heap default
page read and write
clean
278E000
unkown
page read and write
clean
21DDE431000
unkown
page read and write
clean
7FF5C7121000
unkown image
page readonly
clean
21DDE3C0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF5C3069000
unkown image
page readonly
clean
7FF5C308E000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF5C30AB000
unkown image
page readonly
clean
1FAB000
unkown image
page readonly
clean
21FA5C02000
unkown
page read and write
clean
7F642000
unkown image
page readonly
clean
21FA5429000
unkown
page read and write
clean
7FF574B31000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
1FBD000
unkown image
page readonly
clean
261A8027000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
DE0000
unkown image
page readonly
clean
7F650000
unkown image
page readonly
clean
7FF4F5A27000
unkown image
page readonly
clean
1338000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF5F34D0000
unkown image
page readonly
clean
7FF5E562D000
unkown image
page readonly
clean
7DF5827A0000
unkown image
page readonly
clean
2A2D000
unkown
page read and write
clean
26D4000
heap private
page read and write
clean
278E000
unkown
page read and write
clean
261A7EB0000
unkown image
page readonly
clean
2A1B000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
312B000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA5AB0000
unkown
page read and write
clean
3041000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2360000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
4703000
unkown
page read and write
clean
21FA5D86000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2342AA70000
unkown
page read and write
clean
7DF5827A2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF5C71DF000
unkown image
page readonly
clean
2A3F000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF518981000
unkown image
page readonly
clean
7DF4F1390000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
273B000
heap private
page read and write
clean
21FA5DC6000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
heap default
page read and write
clean
2A4C000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4647000
unkown
page read and write
clean
2056000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7F622000
unkown image
page readonly
clean
6EB20000
unkown image
page readonly
clean
21FA5DAF000
unkown
page read and write
clean
7DF5F34C2000
unkown image
page readonly
clean
21DDE420000
heap default
page read and write
clean
2787000
unkown
page read and write
clean
3085000
unkown image
page readonly
clean
7FF5C794A000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
3136000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
DD0000
heap private
page read and write
clean
278E000
unkown
page read and write
clean
21FA5DAF000
unkown
page read and write
clean
30AB000
unkown image
page readonly
clean
D5EF9FF000
stack
page read and write
clean
2787000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
211E3430000
unkown
page read and write
clean
7FF5E5630000
unkown image
page readonly
clean
21FA5D73000
unkown
page read and write
clean
21DDE745000
heap private
page read and write
clean
11E0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF4F5611000
unkown image
page readonly
clean
21FA5D7D000
unkown
page read and write
clean
4D6F000
stack
page read and write
clean
21FA5DD3000
unkown
page read and write
clean
4B56000
heap private
page read and write
clean
21FA6202000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF574627000
unkown image
page readonly
clean
7FF5E5861000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF5C71DD000
unkown image
page readonly
clean
1D2F0B13000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
30BC000
unkown image
page readonly
clean
7FF535DF7000
unkown image
page readonly
clean
4CDF000
stack
page read and write
clean
4678000
unkown
page read and write
clean
46AA000
unkown
page read and write
clean
2A45000
unkown
page read and write
clean
4E40000
heap private
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
760000
unkown
page execute and read and write
clean
7FF5E5832000
unkown image
page readonly
clean
21FA5D7A000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA5DAF000
unkown
page read and write
clean
7FF4F5B1A000
unkown image
page readonly
clean
261A8108000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5188B0000
unkown image
page readonly
clean
3061000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A11000
unkown
page read and write
clean
7FF4F5A1E000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF4F588F000
unkown image
page readonly
clean
7FF535D8F000
unkown image
page readonly
clean
7FF5E5773000
unkown image
page readonly
clean
2342AA13000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
211E40B0000
unkown
page read and write
clean
21FA5D89000
unkown
page read and write
clean
7FF4F572C000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1D4D000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
105C000
unkown
page read and write
clean
4689000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1D2F0A5D000
unkown
page read and write
clean
2A2D000
unkown
page read and write
clean
30A6000
unkown image
page readonly
clean
261A8802000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
DF0000
unkown image
page readonly
clean
7FF57492B000
unkown image
page readonly
clean
46FD000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29E787C000
stack
page read and write
clean
2787000
unkown
page read and write
clean
4DEB000
stack
page read and write
clean
7FF4F58E9000
unkown image
page readonly
clean
7F660000
unkown image
page readonly
clean
3143000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29E1000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF535DA0000
unkown image
page readonly
clean
261A7ED0000
unkown image
page readonly
clean
29FD000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1E11000
unkown image
page readonly
clean
2342A9C0000
unkown
page read and write
clean
7FF5C7876000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21DDE45F000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
46FD000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
1F96000
unkown image
page readonly
clean
109B000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2A27000
unkown
page read and write
clean
2730000
heap private
page read and write
clean
7FF4F5881000
unkown image
page readonly
clean
465C000
unkown
page read and write
clean
21DDE600000
unkown image
page readonly
clean
7FF5C71EE000
unkown image
page readonly
clean
498E000
stack
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF4F5895000
unkown image
page readonly
clean
21FA5AC0000
unkown image
page read and write
clean
2787000
unkown
page read and write
clean
7FF5E5839000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5D96000
unkown
page read and write
clean
2A72D0E0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
261A804A000
unkown
page read and write
clean
21FA54C4000
unkown
page read and write
clean
876BEFF000
stack
page read and write
clean
7FF5C315A000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
3079000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
6EB3A000
unkown image
page readonly
clean
7FF4F5697000
unkown image
page readonly
clean
21FA5D98000
unkown
page read and write
clean
3136000
unkown image
page readonly
clean
21FA5D93000
unkown
page read and write
clean
7FF5C3144000
unkown image
page readonly
clean
7FF4F5985000
unkown image
page readonly
clean
21FA5D99000
unkown
page read and write
clean
1F71000
unkown image
page readonly
clean
7FAA0000
unkown image
page readonly
clean
7FF4F5900000
unkown image
page readonly
clean
33D0000
heap default
page read and write
clean
B961A7B000
stack
page read and write
clean
7DF526610000
unkown image
page readonly
clean
21FA5DAF000
unkown
page read and write
clean
49C1000
unkown
page read and write
clean
4630000
unkown
page read and write
clean
211E31B0000
unkown image
page readonly
clean
4700000
unkown
page read and write
clean
2A33000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
1D2F0A62000
unkown
page read and write
clean
7FF5E5787000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
1D2F0F80000
unkown image
page readonly
clean
261A8100000
unkown
page read and write
clean
2A4B000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2342AA49000
unkown
page read and write
clean
7FF5C7880000
unkown image
page readonly
clean
1D2F0A8C000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
465B000
unkown
page read and write
clean
21DDE448000
unkown
page read and write
clean
470F000
unkown
page read and write
clean
7FF5188DB000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5449000
unkown
page read and write
clean
1D2F0B00000
unkown
page read and write
clean
2780000
heap default
page read and write
clean
7FF574B41000
unkown image
page readonly
clean
21FA5D8E000
unkown
page read and write
clean
2A4C000
unkown
page read and write
clean
21FA6363000
unkown
page read and write
clean
11C0000
unkown
page read and write
clean
21FA5370000
unkown image
page readonly
clean
2A15000
unkown
page read and write
clean
7FF535512000
unkown image
page readonly
clean
7DF5D0DD2000
unkown image
page readonly
clean
21FA5D7F000
unkown
page read and write
clean
21FA5450000
unkown
page read and write
clean
2971000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
6FB000
unkown
page read and write
clean
21FA5D86000
unkown
page read and write
clean
6EB20000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA5D8D000
unkown
page read and write
clean
21FA5270000
unkown image
page readonly
clean
1E30000
unkown image
page readonly
clean
310B000
unkown image
page readonly
clean
2A3F000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2A72D0D0000
unkown
page read and write
clean
4CEF000
stack
page read and write
clean
4666000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5D60000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
26DB000
heap private
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
467A000
unkown
page read and write
clean
7FF5188EE000
unkown image
page readonly
clean
7FF51813F000
unkown image
page readonly
clean
2342A870000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA54A8000
unkown
page read and write
clean
29E732A000
unkown
page read and write
clean
312B000
unkown image
page readonly
clean
7FAA0000
unkown image
page readonly
clean
105C000
unkown
page read and write
clean
7FAB0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF5C3132000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
3148000
unkown image
page readonly
clean
33DA000
heap default
page read and write
clean
2787000
unkown
page read and write
clean
7FF5E584A000
unkown image
page readonly
clean
1338000
unkown
page read and write
clean
3076000
unkown image
page readonly
clean
7FF4F51B2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7DF5D0DD0000
unkown image
page readonly
clean
4DC0000
unkown
page read and write
clean
26E0000
unkown
page read and write
clean
1270000
unkown
page read and write
clean
2A21000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1FA5000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7DF5037B0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
211E3450000
unkown
page read and write
clean
7FF5E57AB000
unkown image
page readonly
clean
7FF5C2F30000
unkown image
page readonly
clean
7FF5E56E5000
unkown image
page readonly
clean
21FA5D97000
unkown
page read and write
clean
211E3180000
unkown image
page readonly
clean
D5EF8FF000
stack
page read and write
clean
2787000
unkown
page read and write
clean
303E000
unkown image
page readonly
clean
308F000
unkown image
page readonly
clean
211E31A0000
unkown image
page readonly
clean
7F9A0000
unkown image
page readonly
clean
E5B000
unkown
page read and write
clean
211E40D0000
unkown
page read and write
clean
2A4C000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5D69000
unkown
page read and write
clean
7FF5B3871000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A4B000
unkown
page read and write
clean
4668000
unkown
page read and write
clean
7FF51858C000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
4653000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
211E32E1000
heap default
page read and write
clean
1000000
unkown image
page readonly
clean
7FF5C78BE000
unkown image
page readonly
clean
7FAB2000
unkown image
page readonly
clean
21FA5D86000
unkown
page read and write
clean
7FF4F5A57000
unkown image
page readonly
clean
21FA6202000
unkown
page read and write
clean
109B000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA6202000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF574A4F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF5C3139000
unkown image
page readonly
clean
7FF518991000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
26F0000
unkown
page read and write
clean
46FD000
unkown
page read and write
clean
211E3338000
unkown
page read and write
clean
211E332D000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF526610000
unkown image
page readonly
clean
2A1B000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
4B39B000
unkown
page read and write
clean
21DDE3E0000
unkown
page read and write
clean
211E3160000
unkown image
page read and write
clean
2787000
unkown
page read and write
clean
7FF5C30DD000
unkown image
page readonly
clean
7FF5E56B5000
unkown image
page readonly
clean
311B000
unkown image
page readonly
clean
211E32A0000
unkown
page read and write
clean
261A7E90000
unkown image
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
306A000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF4F58B6000
unkown image
page readonly
clean
21FA5DAF000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21DDE3A0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
33DA000
heap default
page read and write
clean
2787000
unkown
page read and write
clean
21FA5DC0000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7F620000
unkown image
page readonly
clean
7FAA2000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A3F000
unkown
page read and write
clean
21FA5390000
unkown
page read and write
clean
21FA5D45000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
4E6F000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29E76FE000
stack
page read and write
clean
278E000
unkown
page read and write
clean
7FF5C7944000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA5DAE000
unkown
page read and write
clean
21FA5D8D000
unkown
page read and write
clean
370000
unkown image
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF5265F0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF5D55D2000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
30AB000
unkown image
page readonly
clean
7DF5D55C2000
unkown image
page readonly
clean
261A804F000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
470F000
unkown
page read and write
clean
21FA5457000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2870000
stack
page read and write
clean
46F6000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4653000
unkown
page read and write
clean
1E57000
unkown image
page readonly
clean
A487FFB000
stack
page read and write
clean
10A0000
unkown image
page readonly
clean
313C000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A17000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
22C0000
unkown image
page readonly
clean
7FF4F5A0E000
unkown image
page readonly
clean
7FF5E578E000
unkown image
page readonly
clean
7DF5D0DE0000
unkown image
page readonly
clean
21FA5413000
unkown
page read and write
clean
7FF5C7932000
unkown image
page readonly
clean
261A8400000
unkown image
page readonly
clean
CE8000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2068000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF5E56E1000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF4F598B000
unkown image
page readonly
clean
7FF4F5A7B000
unkown image
page readonly
clean
21FA5D74000
unkown
page read and write
clean
7FF535DA7000
unkown image
page readonly
clean
21FA5451000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4689000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
211E3470000
heap private
page read and write
clean
33DA000
heap default
page read and write
clean
2A4B000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF574A77000
unkown image
page readonly
clean
7DF4419B0000
unkown image
page readonly
clean
3079000
unkown image
page readonly
clean
202B000
unkown image
page readonly
clean
DC9167B000
unkown
page read and write
clean
6EB3D000
unkown image
page read and write
clean
2787000
unkown
page read and write
clean
34D0000
unkown image
page readonly
clean
4CAE000
stack
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2342AE00000
unkown image
page readonly
clean
4647000
unkown
page read and write
clean
4635000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4668000
unkown
page read and write
clean
46FD000
unkown
page read and write
clean
30C0000
unkown image
page readonly
clean
49B0000
unkown
page read and write
clean
211E3890000
unkown image
page readonly
clean
2A39000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
DF0000
unkown image
page readonly
clean
2A72D213000
unkown
page read and write
clean
7FF5C2C41000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF574A37000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7F640000
unkown image
page readonly
clean
7FF5C7939000
unkown image
page readonly
clean
2A27000
unkown
page read and write
clean
6EB3F000
unkown image
page readonly
clean
4F70000
unkown image
page write copy
clean
7FF5C77CC000
unkown image
page readonly
clean
7FF574A9E000
unkown image
page readonly
clean
46FD000
unkown
page read and write
clean
261A8660000
unkown
page read and write
clean
7FF5C3151000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5D47000
unkown
page read and write
clean
21FA54DE000
unkown
page read and write
clean
261A8070000
unkown
page read and write
clean
6EB3A000
unkown image
page readonly
clean
2A72D315000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7DF5827C0000
unkown image
page readonly
clean
2A27000
unkown
page read and write
clean
26DD000
heap private
page read and write
clean
7FF535DFA000
unkown image
page readonly
clean
A4882FF000
stack
page read and write
clean
7F640000
unkown image
page readonly
clean
7FF57494F000
unkown image
page readonly
clean
21FA5D76000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5E5797000
unkown image
page readonly
clean
7FF4F5B31000
unkown image
page readonly
clean
1E52000
unkown image
page readonly
clean
7FF4F5942000
unkown image
page readonly
clean
7DF526600000
unkown image
page readonly
clean
7F642000
unkown image
page readonly
clean
1210000
heap default
page read and write
clean
467A000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2850000
stack
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
303E000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
DC91AF7000
stack
page read and write
clean
2068000
unkown image
page readonly
clean
380000
unkown image
page readonly
clean
7FF535DD5000
unkown image
page readonly
clean
7FF5C2FCC000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF574A6E000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7DF5827B2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
211E3180000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF5C7178000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2342AA56000
unkown
page read and write
clean
3850000
unkown image
page readonly
clean
1FAF000
unkown image
page readonly
clean
7DF5D55E0000
unkown image
page readonly
clean
7FF4F5802000
unkown image
page readonly
clean
21FA626A000
unkown
page read and write
clean
10A0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
DC91CF8000
stack
page read and write
clean
2370000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA6300000
unkown
page read and write
clean
2342AA28000
unkown
page read and write
clean
4F2D000
stack
page read and write
clean
21FA5470000
unkown
page read and write
clean
2342AA00000
unkown
page read and write
clean
2A39000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
29E73AF000
stack
page read and write
clean
21DDE950000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
3066000
unkown image
page readonly
clean
7FF4F5B09000
unkown image
page readonly
clean
7FF5C2F11000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A3F000
unkown
page read and write
clean
21FA5260000
unkown image
page readonly
clean
21FA5D7F000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FAB0000
unkown image
page readonly
clean
1160000
unkown image
page readonly
clean
1FC6000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2342AA51000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
304F000
unkown image
page readonly
clean
21FA543C000
unkown
page read and write
clean
DC91F7F000
stack
page read and write
clean
278E000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
D5EF4FF000
stack
page read and write
clean
2342AB13000
unkown
page read and write
clean
261A7F00000
heap default
page read and write
clean
21DDE750000
unkown image
page readonly
clean
21FA5D7F000
unkown
page read and write
clean
30AB000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
6EB3F000
unkown image
page read and write
clean
2787000
unkown
page read and write
clean
7FF4F5B30000
unkown image
page readonly
clean
7FF5C71E9000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF5F34D0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5AB0000
unkown
page read and write
clean
2C50000
unkown image
page readonly
clean
3061000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF5E576F000
unkown image
page readonly
clean
4689000
unkown
page read and write
clean
11C0000
unkown
page read and write
clean
7F642000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF4F57F7000
unkown image
page readonly
clean
7DF5037B0000
unkown image
page readonly
clean
2A27000
unkown
page read and write
clean
7FF5E54E5000
unkown image
page readonly
clean
21DDE447000
unkown
page read and write
clean
261A8029000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
10A0000
unkown image
page readonly
clean
2A33000
unkown
page read and write
clean
2A72D110000
unkown image
page readonly
clean
1D2F07C0000
unkown image
page read and write
clean
278E000
unkown
page read and write
clean
4530000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2A0A000
unkown
page read and write
clean
1D2F0E00000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
3148000
unkown image
page readonly
clean
7DF5827B0000
unkown image
page readonly
clean
2426000
unkown
page read and write
clean
7FF4F58E5000
unkown image
page readonly
clean
DC9177E000
stack
page read and write
clean
7FF4F5A5E000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF518985000
unkown image
page readonly
clean
6EB3F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
D5EF1FB000
unkown
page read and write
clean
7FF574B41000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A72D130000
heap default
page read and write
clean
2787000
unkown
page read and write
clean
2342AB02000
unkown
page read and write
clean
211E3A20000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
30A6000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A3F000
unkown
page read and write
clean
2F12000
unkown image
page readonly
clean
261A8113000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
1E8E000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF535D25000
unkown image
page readonly
clean
298B000
unkown
page read and write
clean
46C7000
unkown
page read and write
clean
3860000
unkown image
page readonly
clean
4B50000
heap private
page read and write
clean
6EB20000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF4F5B02000
unkown image
page readonly
clean
7DF5F34C2000
unkown image
page readonly
clean
7FF4F57B5000
unkown image
page readonly
clean
4CF0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF4F5AA7000
unkown image
page readonly
clean
21FA5D8D000
unkown
page read and write
clean
4706000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
211E331C000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF535E59000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5502000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5749C5000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
29CC000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FAC0000
unkown image
page readonly
clean
21FA5DB0000
unkown
page read and write
clean
7FF5747C5000
unkown image
page readonly
clean
21FA5508000
unkown
page read and write
clean
2342A860000
heap private
page read and write
clean
7FF5748C6000
unkown image
page readonly
clean
7DF5265F2000
unkown image
page readonly
clean
1E5B000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF535DAE000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF518962000
unkown image
page readonly
clean
D5EF7F7000
stack
page read and write
clean
1000000
unkown image
page readonly
clean
26D0000
heap private
page read and write
clean
278E000
unkown
page read and write
clean
21FA54F8000
unkown
page read and write
clean
2342AF80000
unkown image
page readonly
clean
D5EFAFF000
stack
page read and write
clean
21FA544A000
unkown
page read and write
clean
4653000
unkown
page read and write
clean
21FA54E9000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF5C27E8000
unkown image
page readonly
clean
7F9A0000
unkown image
page readonly
clean
7DF5037A2000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21DDE464000
unkown
page read and write
clean
4CF0000
unkown image
page readonly
clean
E5B000
unkown
page read and write
clean
7FAA0000
unkown image
page readonly
clean
296B000
unkown
page read and write
clean
A487B7F000
stack
page read and write
clean
278E000
unkown
page read and write
clean
2A15000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
211E32D8000
heap default
page read and write
clean
7FF5C2C47000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA5D86000
unkown
page read and write
clean
261A8200000
unkown image
page readonly
clean
2342A8C0000
heap default
page read and write
clean
7FF5C2DE5000
unkown image
page readonly
clean
1D2F0F90000
unkown
page read and write
clean
7FF5E57DD000
unkown image
page readonly
clean
202F000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
211E32D0000
heap default
page read and write
clean
27CE000
stack
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
E57000
unkown
page read and write
clean
4B20000
unkown
page read and write
clean
211E4130000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1D2F0A80000
unkown
page read and write
clean
3093000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
3079000
unkown image
page readonly
clean
21FA5D6D000
unkown
page read and write
clean
2342AB08000
unkown
page read and write
clean
7FF5C3097000
unkown image
page readonly
clean
7DF5037A0000
unkown image
page readonly
clean
1D2F0B02000
unkown
page read and write
clean
4B39F000
unkown
page read and write
clean
46F6000
unkown
page read and write
clean
7FF574B3A000
unkown image
page readonly
clean
7FF5748F1000
unkown image
page readonly
clean
7FF4F5A43000
unkown image
page readonly
clean
2F12000
unkown image
page readonly
clean
21DDE380000
unkown image
page read and write
clean
21FA5D60000
unkown
page read and write
clean
7FF53568F000
unkown image
page readonly
clean
21FA5488000
unkown
page read and write
clean
7FF57499B000
unkown image
page readonly
clean
296E000
unkown
page read and write
clean
4641000
unkown
page read and write
clean
7FAB2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5240000
unkown image
page readonly
clean
7FF4F5874000
unkown image
page readonly
clean
261A8079000
unkown
page read and write
clean
125E000
stack
page read and write
clean
7FF4F5876000
unkown image
page readonly
clean
6EB3D000
unkown image
page read and write
clean
278E000
unkown
page read and write
clean
740000
unkown
page read and write
clean
7FF5C2FBB000
unkown image
page readonly
clean
211E331C000
unkown
page read and write
clean
380000
unkown image
page readonly
clean
4CEF000
stack
page read and write
clean
33D0000
heap default
page read and write
clean
2787000
unkown
page read and write
clean
270E000
stack
page read and write
clean
7DF5D55C0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
1D2F07E0000
unkown image
page readonly
clean
21FA6302000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29CE000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2958000
heap default
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
205C000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2342A9A0000
unkown image
page readonly
clean
49B0000
unkown
page read and write
clean
7FF5188A6000
unkown image
page readonly
clean
7F520000
unkown image
page readonly
clean
7DF503790000
unkown image
page readonly
clean
7FF5C7772000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF4F5617000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A4B000
unkown
page read and write
clean
261A8013000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29E1000
unkown
page read and write
clean
7FF5188BE000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
3860000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
3114000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5448000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF4F599C000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
204B000
unkown image
page readonly
clean
21FA544E000
unkown
page read and write
clean
7FF5C76FA000
unkown image
page readonly
clean
7DF4244C0000
unkown image
page readonly
clean
46FD000
unkown
page read and write
clean
211E3480000
unkown
page read and write
clean
465D000
unkown
page read and write
clean
21DDE436000
heap default
page read and write
clean
7F630000
unkown image
page readonly
clean
7FAB2000
unkown image
page readonly
clean
1D2F0910000
unkown image
page readonly
clean
4CEF000
stack
page read and write
clean
278E000
unkown
page read and write
clean
46F8000
unkown
page read and write
clean
7FF5E564B000
unkown image
page readonly
clean
1D2F0C00000
unkown image
page readonly
clean
21FA5D75000
unkown
page read and write
clean
12CF000
stack
page read and write
clean
278E000
unkown
page read and write
clean
7DF5827C0000
unkown image
page readonly
clean
3076000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7DF5D0DC2000
unkown image
page readonly
clean
7DF5D55C0000
unkown image
page readonly
clean
6EB20000
unkown image
page readonly
clean
21FA5482000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA5D6F000
unkown
page read and write
clean
304F000
unkown image
page readonly
clean
3143000
unkown image
page readonly
clean
1210000
heap default
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF5D0DE0000
unkown image
page readonly
clean
34D0000
unkown image
page readonly
clean
890000
unkown
page read and write
clean
7DF5F34C0000
unkown image
page readonly
clean
2A2D000
unkown
page read and write
clean
4E10000
heap private
page read and write
clean
1260000
unkown
page execute and read and write
clean
C5D80FE000
stack
page read and write
clean
1000000
unkown image
page readonly
clean
8AB000
heap default
page read and write
clean
7DF5D55D2000
unkown image
page readonly
clean
7FF574A49000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4668000
unkown
page read and write
clean
7DF5827A0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
211E3314000
unkown
page read and write
clean
7FF5741C8000
unkown image
page readonly
clean
29D3000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29D5000
unkown
page read and write
clean
1280000
heap private
page read and write
clean
7DF543AF0000
unkown image
page readonly
clean
7DF5D55E0000
unkown image
page readonly
clean
2F6D000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF5741C2000
unkown image
page readonly
clean
2A33000
unkown
page read and write
clean
7FAC0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA6202000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF5E55E6000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
308B000
unkown image
page readonly
clean
7DF5F34C0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF535E75000
unkown image
page readonly
clean
3850000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA5DAF000
unkown
page read and write
clean
4820000
unkown
page read and write
clean
46FE000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
3093000
unkown image
page readonly
clean
29DF000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
3148000
unkown image
page readonly
clean
261A7EA0000
heap private
page read and write
clean
2787000
unkown
page read and write
clean
E57000
unkown
page read and write
clean
7FF5C7961000
unkown image
page readonly
clean
7DF543B00000
unkown image
page readonly
clean
503F000
stack
page read and write
clean
3114000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
1D2F0830000
heap default
page read and write
clean
2360000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
4666000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5E56CC000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
DC91BFF000
stack
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF518991000
unkown image
page readonly
clean
7DF5F34E0000
unkown image
page readonly
clean
7FF4F59B1000
unkown image
page readonly
clean
7FF5E57B3000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A2D000
unkown
page read and write
clean
E5B000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
1FDC000
unkown image
page readonly
clean
1280000
heap private
page read and write
clean
7DF5265F0000
unkown image
page readonly
clean
2F6D000
unkown image
page readonly
clean
7FF5E585A000
unkown image
page readonly
clean
7FF5C7883000
unkown image
page readonly
clean
7FF5E5851000
unkown image
page readonly
clean
7DF5D55D0000
unkown image
page readonly
clean
304F000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
309D000
unkown image
page readonly
clean
7FF574A93000
unkown image
page readonly
clean
2971000
unkown
page read and write
clean
33B0000
unkown image
page readonly
clean
7FF4F5A50000
unkown image
page readonly
clean
7FAB0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
23FE000
stack
page read and write
clean
2787000
unkown
page read and write
clean
2370000
unkown image
page readonly
clean
7F640000
unkown image
page readonly
clean
7FF5188A3000
unkown image
page readonly
clean
22B0000
unkown image
page read and write
clean
7FF535D77000
unkown image
page readonly
clean
125E000
stack
page read and write
clean
2787000
unkown
page read and write
clean
36D0000
unkown image
page readonly
clean
2A04000
unkown
page read and write
clean
B961C77000
stack
page read and write
clean
30C0000
unkown image
page readonly
clean
7DF5D55C2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF574A60000
unkown image
page readonly
clean
B961F7E000
stack
page read and write
clean
7F640000
unkown image
page readonly
clean
7FF5749AC000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7F9A0000
unkown image
page readonly
clean
308F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7DF526600000
unkown image
page readonly
clean
21FA5516000
unkown
page read and write
clean
2F6D000
unkown image
page readonly
clean
211E32C0000
unkown image
page readonly
clean
21FA5DAF000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7F620000
unkown image
page readonly
clean
6EB3D000
unkown image
page read and write
clean
7FF574B12000
unkown image
page readonly
clean
1F51000
unkown image
page readonly
clean
7FF5E5341000
unkown image
page readonly
clean
770000
heap default
page read and write
clean
21FA5D85000
unkown
page read and write
clean
3093000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF4F593F000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
1E26000
unkown image
page readonly
clean
876BE7B000
stack
page read and write
clean
33B0000
unkown image
page readonly
clean
7FF4F5A0A000
unkown image
page readonly
clean
21FA5452000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
3085000
unkown image
page readonly
clean
7FF4F549B000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2068000
unkown image
page readonly
clean
21FA544D000
unkown
page read and write
clean
2A39000
unkown
page read and write
clean
2A4D000
unkown
page read and write
clean
2352000
unkown
page read and write
clean
2062000
unkown image
page readonly
clean
7FF5C2FE1000
unkown image
page readonly
clean
211E40E0000
unkown
page read and write
clean
21FA5D97000
unkown
page read and write
clean
29E77FE000
stack
page read and write
clean
2787000
unkown
page read and write
clean
7DF543AF2000
unkown image
page readonly
clean
7FF51813B000
unkown image
page readonly
clean
7FF57490D000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2A21000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7DF503792000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
3136000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2342B202000
unkown
page read and write
clean
46F6000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF5D0DD0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF5D0DC2000
unkown image
page readonly
clean
7DF5037A2000
unkown image
page readonly
clean
7FF535D93000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
B961D7E000
stack
page read and write
clean
21FA5980000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2422000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
7FF518969000
unkown image
page readonly
clean
4531000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF574A63000
unkown image
page readonly
clean
21FA5D7E000
unkown
page read and write
clean
29D3000
unkown
page read and write
clean
7DF5037A0000
unkown image
page readonly
clean
6EB3F000
unkown image
page readonly
clean
21FA5447000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5D22000
unkown
page read and write
clean
21FA54E8000
unkown
page read and write
clean
2A0B000
unkown
page read and write
clean
2380000
unkown
page read and write
clean
2370000
unkown image
page readonly
clean
296F000
unkown
page read and write
clean
2840000
stack
page read and write
clean
7DF5F34E0000
unkown image
page readonly
clean
303E000
unkown image
page readonly
clean
2A45000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF4F58E1000
unkown image
page readonly
clean
7DF480670000
unkown image
page readonly
clean
2041000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7F652000
unkown image
page readonly
clean
A487EFB000
stack
page read and write
clean
2787000
unkown
page read and write
clean
1D2F07D0000
heap private
page read and write
clean
278E000
unkown
page read and write
clean
7FF574A8B000
unkown image
page readonly
clean
7FF5C30D7000
unkown image
page readonly
clean
7FF535E64000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
3850000
unkown image
page readonly
clean
2A33000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5C2F2D000
unkown image
page readonly
clean
3041000
unkown image
page readonly
clean
7FF4F52DF000
unkown image
page readonly
clean
2880000
stack
page read and write
clean
2342AA88000
unkown
page read and write
clean
D5EF6FB000
stack
page read and write
clean
11E0000
unkown image
page readonly
clean
A487AFB000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF5E57DA000
unkown image
page readonly
clean
1D2F0800000
unkown image
page readonly
clean
7FF4F5AAA000
unkown image
page readonly
clean
7DF543AE0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A72D238000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5E5757000
unkown image
page readonly
clean
2DD0000
unkown image
page readonly
clean
463B000
unkown
page read and write
clean
261A804C000
unkown
page read and write
clean
7FF4F59F2000
unkown image
page readonly
clean
2342AA7D000
unkown
page read and write
clean
1D2F0A55000
unkown
page read and write
clean
7FF535E81000
unkown image
page readonly
clean
46F6000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FAB0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA545C000
unkown
page read and write
clean
2A39000
unkown
page read and write
clean
7FF5E5861000
unkown image
page readonly
clean
21DDE740000
heap private
page read and write
clean
1E14000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
4F6D000
stack
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
27F0000
unkown
page read and write
clean
7FF5C717A000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA6302000
unkown
page read and write
clean
4E2E000
stack
page read and write
clean
2787000
unkown
page read and write
clean
7DF5827B2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
12D0000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
46F6000
unkown
page read and write
clean
11E0000
unkown image
page readonly
clean
4B20000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
4B20000
unkown
page read and write
clean
21DDE400000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF5C786D000
unkown image
page readonly
clean
46F6000
unkown
page read and write
clean
21FA5D8D000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
261A7FE0000
unkown image
page readonly
clean
2A72D323000
heap private
page read and write
clean
2360000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
4AB0000
unkown
page read and write
clean
4630000
unkown
page read and write
clean
308B000
unkown image
page readonly
clean
309D000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
B9618FF000
stack
page read and write
clean
211E3338000
heap default
page read and write
clean
2787000
unkown
page read and write
clean
A487BFE000
stack
page read and write
clean
2787000
unkown
page read and write
clean
7FF4F5707000
unkown image
page readonly
clean
7DF5F34D2000
unkown image
page readonly
clean
7DF543AF2000
unkown image
page readonly
clean
7F650000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2A0F000
unkown
page read and write
clean
2068000
unkown image
page readonly
clean
4531000
unkown
page read and write
clean
3DC000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF5C3083000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5290000
heap default
page read and write
clean
7F640000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
3E0000
unkown image
page readonly
clean
7FAA2000
unkown image
page readonly
clean
261A8000000
unkown
page read and write
clean
7FF5C7873000
unkown image
page readonly
clean
2A45000
unkown
page read and write
clean
B96197F000
stack
page read and write
clean
105C000
unkown
page read and write
clean
7FF518974000
unkown image
page readonly
clean
12CF000
stack
page read and write
clean
1338000
unkown
page read and write
clean
2A45000
unkown
page read and write
clean
B96187C000
unkown
page read and write
clean
29D0000
unkown
page read and write
clean
7FF5C30DA000
unkown image
page readonly
clean
21FA5D75000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
8A0000
heap default
page read and write
clean
21FA5230000
heap private
page read and write
clean
21FA5DC6000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2581000
unkown
page read and write
clean
7FF574B24000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
3121000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
211E331C000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
12D0000
unkown
page read and write
clean
7DF4D3490000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF4F5704000
unkown image
page readonly
clean
C5D7C9D000
unkown
page read and write
clean
21FA5D97000
unkown
page read and write
clean
21FA5DAF000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF4F5B14000
unkown image
page readonly
clean
21FA5A60000
unkown image
page write copy
clean
7FF5E5844000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA54E5000
unkown
page read and write
clean
4647000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
261A8088000
unkown
page read and write
clean
7FAC0000
unkown image
page readonly
clean
21FA6363000
unkown
page read and write
clean
21FA54BD000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5C3057000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF4F5B21000
unkown image
page readonly
clean
46FD000
unkown
page read and write
clean
21FA53B0000
unkown image
page readonly
clean
7FF5C711A000
unkown image
page readonly
clean
109B000
unkown
page read and write
clean
DE0000
unkown image
page read and write
clean
7FF574621000
unkown image
page readonly
clean
2A2D000
unkown
page read and write
clean
21FA5DCF000
unkown
page read and write
clean
2992000
unkown
page read and write
clean
2A72D702000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
46AA000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF51898A000
unkown image
page readonly
clean
2950000
heap default
page read and write
clean
A4881FE000
stack
page read and write
clean
2342AA4D000
unkown
page read and write
clean
7FF5E57D7000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7F540000
unkown image
page readonly
clean
7FF4F583B000
unkown image
page readonly
clean
7FF5C2FB5000
unkown image
page readonly
clean
21FA54AC000
unkown
page read and write
clean
7DF503792000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
464E000
unkown
page read and write
clean
21DDE463000
unkown
page read and write
clean
2A72D602000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
310B000
unkown image
page readonly
clean
2A33000
unkown
page read and write
clean
312B000
unkown image
page readonly
clean
7FF5E5611000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2360000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
29D0000
unkown
page read and write
clean
21FA5D86000
unkown
page read and write
clean
1280000
heap private
page read and write
clean
4D1E000
stack
page read and write
clean
2787000
unkown
page read and write
clean
7FF574ABA000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF5C2F6F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF5B3871000
unkown image
page readonly
clean
1F86000
unkown image
page readonly
clean
2A72D713000
unkown
page read and write
clean
1D2F0A64000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7DF543AE2000
unkown image
page readonly
clean
7FF4F59E1000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
1E1B000
unkown image
page readonly
clean
296B000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5D97000
unkown
page read and write
clean
2A0A000
unkown
page read and write
clean
7FF5C795A000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
306A000
unkown image
page readonly
clean
2342AB00000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2A4D000
unkown
page read and write
clean
2A0F000
unkown
page read and write
clean
28A0000
unkown
page read and write
clean
1F48000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
1170000
unkown image
page readonly
clean
876BF79000
stack
page read and write
clean
278E000
unkown
page read and write
clean
7FF5E5783000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21DDE44F000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
4666000
unkown
page read and write
clean
21FA5DC0000
unkown
page read and write
clean
2A72D302000
unkown
page read and write
clean
4689000
unkown
page read and write
clean
7FF5C2F4B000
unkown image
page readonly
clean
29D5000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
1E4F000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF574AB7000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
DF0000
unkown image
page readonly
clean
7FF535CFC000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7FF535D89000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
4689000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7DF5D55D0000
unkown image
page readonly
clean
2342A890000
unkown image
page readonly
clean
7FF5C7955000
unkown image
page readonly
clean
211E3440000
unkown
page read and write
clean
277E000
stack
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
B961E7F000
stack
page read and write
clean
21FA5D86000
unkown
page read and write
clean
4689000
unkown
page read and write
clean
261A8580000
unkown image
page readonly
clean
1F99000
unkown image
page readonly
clean
22C0000
unkown image
page readonly
clean
4DAD000
stack
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
310B000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5DB0000
unkown
page read and write
clean
46F7000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
36D0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
261A8052000
unkown
page read and write
clean
1D2F0A00000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5C306D000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
313C000
unkown image
page readonly
clean
7FF4F5A13000
unkown image
page readonly
clean
1D2F0A3C000
unkown
page read and write
clean
7FF535E6A000
unkown image
page readonly
clean
203B000
unkown image
page readonly
clean
310F000
unkown image
page readonly
clean
7FF5E576D000
unkown image
page readonly
clean
21FA5D00000
unkown
page read and write
clean
2A72D0E0000
unkown image
page readonly
clean
1D2F0A29000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7DF543AE0000
unkown image
page readonly
clean
1F5F000
unkown image
page readonly
clean
3148000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FAA2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
281B000
heap private
page read and write
clean
7FF574ABD000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
308B000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5D82000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
3121000
unkown image
page readonly
clean
2A72D200000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7FF574B2A000
unkown image
page readonly
clean
2A72D228000
unkown
page read and write
clean
21FA5D80000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA5D86000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
1D2F0810000
unkown image
page readonly
clean
1200000
unkown image
page readonly
clean
7FF51897A000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
6EB3D000
unkown image
page read and write
clean
2787000
unkown
page read and write
clean
21FA544C000
unkown
page read and write
clean
1FCB000
unkown image
page readonly
clean
2710000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
30A6000
unkown image
page readonly
clean
2342AA3C000
unkown
page read and write
clean
1000000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
DC918FE000
stack
page read and write
clean
1260000
unkown
page execute and read and write
clean
21FA6202000
unkown
page read and write
clean
4712000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
46FD000
unkown
page read and write
clean
21FA5D86000
unkown
page read and write
clean
7FF535D8D000
unkown image
page readonly
clean
261A7EE0000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF535DFD000
unkown image
page readonly
clean
3041000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
1210000
heap default
page read and write
clean
21FA5220000
unkown image
page read and write
clean
21FA626A000
unkown
page read and write
clean
2580000
unkown
page read and write
clean
29E767F000
stack
page read and write
clean
1270000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
3066000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA5400000
unkown
page read and write
clean
DC91D7E000
stack
page read and write
clean
3F0000
unkown image
page readonly
clean
3121000
unkown image
page readonly
clean
21FA5D6B000
unkown
page read and write
clean
2A2D000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
34D0000
unkown image
page readonly
clean
7FF5749C1000
unkown image
page readonly
clean
7FF5E57BE000
unkown image
page readonly
clean
2342A870000
unkown image
page readonly
clean
7DF5F34D2000
unkown image
page readonly
clean
7FF574995000
unkown image
page readonly
clean
6EB20000
unkown image
page readonly
clean
3066000
unkown image
page readonly
clean
4FB000
unkown
page read and write
clean
2342AC00000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
C5D8479000
stack
page read and write
clean
278E000
unkown
page read and write
clean
7DF5827A2000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2720000
unkown image
page readonly
clean
7FF574A67000
unkown image
page readonly
clean
7FF51890A000
unkown image
page readonly
clean
21FA5DAF000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF4F5A67000
unkown image
page readonly
clean
7FF5C7951000
unkown image
page readonly
clean
2A45000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
7F640000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
33B0000
unkown image
page readonly
clean
7FF4F591B000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7DF526602000
unkown image
page readonly
clean
259B000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA54B2000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2A50000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5D7C000
unkown
page read and write
clean
7FF5C3073000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
21FA5240000
unkown image
page readonly
clean
7FF5E5347000
unkown image
page readonly
clean
7F632000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
C80000
unkown
page read and write
clean
211E3A10000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
21FA5D71000
unkown
page read and write
clean
4E10000
heap private
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
21FA5D94000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
21FA5D17000
unkown
page read and write
clean
211E3690000
unkown image
page readonly
clean
4703000
unkown
page read and write
clean
7FF5E566F000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
DE0000
unkown image
page read and write
clean
7FF535E7A000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
6EB20000
unkown image
page readonly
clean
1E2A000
unkown image
page readonly
clean
7FF4F52DB000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
7FF5C3087000
unkown image
page readonly
clean
4CF0000
unkown image
page readonly
clean
1270000
unkown
page read and write
clean
278E000
unkown
page read and write
clean
29E1000
unkown
page read and write
clean
309D000
unkown image
page readonly
clean
2810000
heap private
page read and write
clean
7F622000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FF4F5947000
unkown image
page readonly
clean
2787000
unkown
page read and write
clean
7FAA0000
unkown image
page readonly
clean
278E000
unkown
page read and write
clean
7F630000
unkown image
page readonly
clean
26D7000
heap private
page read and write
clean
21FA5DAF000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
4531000
unkown
page read and write
clean
313C000
unkown image
page readonly
clean
21FA5D86000
unkown
page read and write
clean
4B280000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
2787000
unkown
page read and write
clean
125E000
stack
page read and write
clean
There are 1858 hidden memdumps, click here to show them.