IOC Report

loading gif

Files

File Path
Type
Category
Malicious
microsoft outlook.exe
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
initial sample
malicious
C:\Users\user\AppData\Local\Temp\nsm4A2D.tmp\wbyrs.dll
PE32 executable (DLL) (native) Intel 80386, for MS Windows
dropped
malicious
C:\Windows\System32\drivers\etc\hosts
ASCII text, with CRLF line terminators
modified
malicious
C:\Users\user\AppData\Local\Temp\175uaz481uk7obsbd
data
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\microsoft outlook.exe
"C:\Users\user\Desktop\microsoft outlook.exe"
malicious
C:\Users\user\Desktop\microsoft outlook.exe
"C:\Users\user\Desktop\microsoft outlook.exe"
malicious

URLs

Name
IP
Malicious
http://mail.cgyasc.com
unknown
clean
http://127.0.0.1:HTTP/1.1
unknown
clean
http://DynDns.comDynDNS
unknown
clean
http://YcxkAh.com
unknown
clean
http://nsis.sf.net/NSIS_Error
unknown
clean
http://nsis.sf.net/NSIS_ErrorError
unknown
clean
http://cgyasc.com
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip%tordir%%ha
unknown
clean
http://d8P2A6TrVo.net
unknown
clean
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip
unknown
clean

Domains

Name
IP
Malicious
cgyasc.com
192.185.25.212
malicious
mail.cgyasc.com
unknown
malicious

IPs

IP
Domain
Country
Malicious
192.185.25.212
cgyasc.com
United States
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
414000
unkown
page execute and read and write
malicious
2430000
unkown
page read and write
malicious
3511000
unkown
page read and write
malicious
49A2000
unkown
page execute and read and write
malicious
414000
unkown
page execute and read and write
malicious
2511000
unkown
page read and write
malicious
414000
unkown image
page execute and read and write
malicious
4950000
unkown image
page read and write
malicious
4CA000
heap default
page read and write
malicious
400000
unkown
page execute and read and write
malicious
590000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
4F45000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7DF56D5C0000
unkown image
page readonly
clean
7DF55FE42000
unkown image
page readonly
clean
830000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
23D8000
unkown
page read and write
clean
A5D000
unkown
page execute and read and write
clean
1F2B5460000
heap private
page read and write
clean
7DF5093A2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5A16000
unkown
page read and write
clean
840000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5101000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5A93000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
94F000
stack
page read and write
clean
461000
stack
page read and write
clean
460000
stack
page read and write
clean
1CDD3FC0000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
195C77000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
460000
stack
page read and write
clean
7FF5519F2000
unkown image
page readonly
clean
23D8000
unkown
page read and write
clean
7FF5521BA000
unkown image
page readonly
clean
4F45000
unkown
page read and write
clean
1F2B5110000
unkown
page read and write
clean
7FF53FD40000
unkown image
page readonly
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1F2B522D000
unkown
page read and write
clean
465000
stack
page read and write
clean
460000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
5CEF000
stack
page read and write
clean
2AD6000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
5930000
unkown
page read and write
clean
7FF55F559000
unkown image
page readonly
clean
4F45000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
7FF563B19000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
460000
stack
page read and write
clean
22AE499C000
unkown
page read and write
clean
481000
stack
page read and write
clean
22AE4F63000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
820000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1B0D9FF0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1F2B522E000
unkown
page read and write
clean
460000
stack
page read and write
clean
7FF56146D000
unkown image
page readonly
clean
195B7B000
stack
page read and write
clean
480000
stack
page read and write
clean
22AE40A5000
unkown
page read and write
clean
22AE49A2000
unkown
page read and write
clean
22AE4968000
unkown
page read and write
clean
7DF5093B0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
831000
stack
page read and write
clean
1B0DA247000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF5613B5000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
7FF53FF71000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5AA2000
unkown
page read and write
clean
470000
stack
page read and write
clean
22CD000
stack
page read and write
clean
4F30000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF54DBE2000
unkown image
page readonly
clean
6F2FC000
unkown image
page execute and read and write
clean
5E5000
unkown
page read and write
clean
29272B00000
unkown image
page readonly
clean
7FF4FB59C000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5A10000
unkown
page read and write
clean
450000
stack
page read and write
clean
1F2B5469000
heap private
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
4F40000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
590000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF5717B2000
unkown image
page readonly
clean
311000
unkown
page read and write
clean
22AE40F9000
unkown
page read and write
clean
465000
stack
page read and write
clean
7DF407260000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF5521B4000
unkown image
page readonly
clean
1B0DA780000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF563A1A000
unkown image
page readonly
clean
5AC6000
unkown
page read and write
clean
7DF55FE40000
unkown image
page readonly
clean
7FF4FB683000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
22AE4E00000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
A00000
unkown image
page readonly
clean
5A20000
unkown
page read and write
clean
805000
stack
page read and write
clean
590000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
840000
stack
page read and write
clean
A38A377000
stack
page read and write
clean
2318000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7FF561469000
unkown image
page readonly
clean
460000
stack
page read and write
clean
1CDD4100000
unkown
page read and write
clean
820000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
450000
stack
page read and write
clean
7FF55212E000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
6F2D1000
unkown image
page execute read
clean
5E4000
unkown
page read and write
clean
481000
stack
page read and write
clean
4EE0000
unkown
page read and write
clean
460000
stack
page read and write
clean
19597F000
stack
page read and write
clean
4F40000
unkown
page read and write
clean
460000
stack
page read and write
clean
7FF563995000
unkown image
page readonly
clean
7FF53FEBB000
unkown image
page readonly
clean
409000
unkown image
page write copy
clean
7FFB2000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
29272690000
unkown
page read and write
clean
7FF5520F0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF56136F000
unkown image
page readonly
clean
6FE000
stack
page read and write
clean
1F2B5420000
unkown
page read and write
clean
460000
stack
page read and write
clean
46C000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7DF46B490000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF563886000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
22AE404E000
unkown
page read and write
clean
ED2367B000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
22AE498A000
unkown
page read and write
clean
840000
stack
page read and write
clean
537E000
stack
page read and write
clean
2B28BC02000
unkown
page read and write
clean
1CDD4054000
unkown
page read and write
clean
7FF53FF42000
unkown image
page readonly
clean
480000
stack
page read and write
clean
22AE4F63000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF53FBF5000
unkown image
page readonly
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF563A02000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
451000
stack
page read and write
clean
460000
stack
page read and write
clean
460000
stack
page read and write
clean
7FF4FB63D000
unkown image
page readonly
clean
7FF55F0B6000
unkown image
page readonly
clean
437000
unkown image
page readonly
clean
5980000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
5C0000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5ACB000
unkown
page read and write
clean
1B0D9FC0000
heap private
page read and write
clean
9D0000
stack
page read and write
clean
5A00000
unkown
page read and write
clean
7FF53FE7F000
unkown image
page readonly
clean
461000
stack
page read and write
clean
1CDD402C000
unkown
page read and write
clean
35A4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
A20000
unkown image
page read and write
clean
7FF55F880000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
1CDD405A000
unkown
page read and write
clean
7FF561311000
unkown image
page readonly
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF55F95A000
unkown image
page readonly
clean
7FF5638A5000
unkown image
page readonly
clean
7FF5520DD000
unkown image
page readonly
clean
1CDD3E90000
unkown image
page readonly
clean
22AE49A0000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
7FF56390D000
unkown image
page readonly
clean
480000
stack
page read and write
clean
ED233BF000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
23D0000
unkown image
page readonly
clean
7FF55F951000
unkown image
page readonly
clean
451000
stack
page read and write
clean
460000
stack
page read and write
clean
1B0DA229000
unkown
page read and write
clean
7FF4FB5B5000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
F9B4DFE000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
22AE3FA0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
434000
unkown image
page read and write
clean
5E4000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1F2B5465000
heap private
page read and write
clean
1F2B5F80000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
820000
stack
page read and write
clean
7FF5520F7000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1F2B5A00000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
7DF46D090000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5820000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
1B0DA200000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
ED2377E000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
481000
stack
page read and write
clean
460000
stack
page read and write
clean
9E0000
stack
page read and write
clean
7FF55F1E9000
unkown image
page readonly
clean
498000
heap default
page read and write
clean
7FF56384B000
unkown image
page readonly
clean
7DF55FE50000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
1B0000
unkown image
page readonly
clean
7DF44BAA0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
ED236F9000
stack
page read and write
clean
450000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
6C0000
stack
page read and write
clean
450000
stack
page read and write
clean
5A7E000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
B20D5FE000
stack
page read and write
clean
4F40000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
A389D0B000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
480000
stack
page read and write
clean
2C6F000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF5639F1000
unkown image
page readonly
clean
4F40000
unkown
page read and write
clean
450000
stack
page read and write
clean
451000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
4F40000
unkown
page read and write
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
7FF53FE79000
unkown image
page readonly
clean
1F2B50F0000
unkown
page read and write
clean
22AE4086000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
470000
stack
page read and write
clean
40000
unkown image
page readonly
clean
1CDD405F000
unkown
page read and write
clean
831000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
7FF5634A7000
unkown image
page readonly
clean
22AE499B000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
470000
stack
page read and write
clean
7FF56134B000
unkown image
page readonly
clean
7FF5613E5000
unkown image
page readonly
clean
7DF54DBF0000
unkown image
page readonly
clean
A38A47E000
stack
page read and write
clean
460000
stack
page read and write
clean
23D7000
unkown
page read and write
clean
7FF4FB53F000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
4F40000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
470000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
810000
stack
page read and write
clean
7FF5520E6000
unkown image
page readonly
clean
7DF509392000
unkown image
page readonly
clean
820000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF563A60000
unkown image
page readonly
clean
23D5000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
830000
stack
page read and write
clean
1CDD4064000
unkown
page read and write
clean
7FF563A63000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
7FF4FB639000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
7FF561561000
unkown image
page readonly
clean
B20D27A000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
5980000
unkown
page read and write
clean
5A9C000
unkown
page read and write
clean
590000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
451000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE3E70000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
1CDD4013000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4E02000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5A00000
unkown
page read and write
clean
1B0DA250000
unkown
page read and write
clean
460000
stack
page read and write
clean
7DF5093A2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
7DF55FE30000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF563A9E000
unkown image
page readonly
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
4F40000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
820000
stack
page read and write
clean
7FF4FB6AD000
unkown image
page readonly
clean
800000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
465000
stack
page read and write
clean
481000
stack
page read and write
clean
ECBD8FE000
stack
page read and write
clean
460000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
1B0DA24F000
unkown
page read and write
clean
590000
stack
page read and write
clean
451000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF53FDF1000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
7FF55F124000
unkown image
page readonly
clean
9D0000
stack
page read and write
clean
4EF2000
unkown
page read and write
clean
460000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7DF56F1D2000
unkown image
page readonly
clean
7FF4FB58B000
unkown image
page readonly
clean
7DF54DBD0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF4FB65E000
unkown image
page readonly
clean
22AE499B000
unkown
page read and write
clean
480000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
22AE4080000
unkown
page read and write
clean
22AE3EA0000
heap default
page read and write
clean
5970000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
53B000
unkown
page read and write
clean
292724D0000
unkown image
page read and write
clean
5E4000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
4F0C000
unkown
page read and write
clean
7FF55F94A000
unkown image
page readonly
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
481000
stack
page read and write
clean
5810000
stack
page read and write
clean
2B28BD13000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD4029000
unkown
page read and write
clean
1CDD4580000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
23E0000
unkown
page read and write
clean
7FF563A77000
unkown image
page readonly
clean
5BAF000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
1B0DA400000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
29272600000
unkown
page read and write
clean
A60000
unkown
page read and write
clean
22AE4E02000
unkown
page read and write
clean
1F2B5130000
unkown image
page readonly
clean
B20CE77000
stack
page read and write
clean
450000
stack
page read and write
clean
55FC000
stack
page read and write
clean
E80000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
5AA2000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
8D0000
stack
page read and write
clean
465000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB657000
unkown image
page readonly
clean
2900000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5980000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF55F8B2000
unkown image
page readonly
clean
2B28BC7D000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2320000
heap private
page read and write
clean
2C6B000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
451000
stack
page read and write
clean
2C6F000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
A44000
unkown
page read and write
clean
68F000
heap default
page read and write
clean
22AE4000000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
7FF53FF49000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
800000
stack
page read and write
clean
5ABA000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
460000
stack
page read and write
clean
2B28BB60000
heap private
page read and write
clean
59F0000
unkown
page read and write
clean
7FF563717000
unkown image
page readonly
clean
480000
stack
page read and write
clean
22AE4E02000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
8E0000
stack
page read and write
clean
830000
stack
page read and write
clean
5AAB000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4580000
unkown image
page readonly
clean
7FF4FB217000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
19587B000
unkown
page read and write
clean
2C6B000
unkown
page read and write
clean
2AD6000
unkown
page read and write
clean
195D7F000
stack
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
22AE49DC000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5B0000
stack
page read and write
clean
2B28BB70000
unkown image
page readonly
clean
7FF563B3A000
unkown image
page readonly
clean
4F40000
unkown
page read and write
clean
7DF5093B0000
unkown image
page readonly
clean
451000
stack
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5B0000
stack
page read and write
clean
7FF5632ED000
unkown image
page readonly
clean
22AE499B000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
1B0DA308000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD3E70000
unkown image
page readonly
clean
7FF4FAF46000
unkown image
page readonly
clean
7FF55F961000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
7DF5093A0000
unkown image
page readonly
clean
7FF5613E1000
unkown image
page readonly
clean
B20D3F8000
stack
page read and write
clean
7FF563627000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
830000
stack
page read and write
clean
461000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
481000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
461000
stack
page read and write
clean
451000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD403C000
unkown
page read and write
clean
465000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
6F2D0000
unkown image
page readonly
clean
5A8A000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2B28BD00000
unkown
page read and write
clean
22AE498D000
unkown
page read and write
clean
22AE499B000
unkown
page read and write
clean
ECBD97E000
stack
page read and write
clean
451000
stack
page read and write
clean
460000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4F31000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
F9B4AFE000
stack
page read and write
clean
5970000
unkown
page read and write
clean
2300000
heap private
page execute and read and write
clean
5E4000
unkown
page read and write
clean
1CDD4002000
unkown
page read and write
clean
7DF56D5D0000
unkown image
page readonly
clean
4F20000
unkown
page read and write
clean
22AE409E000
unkown
page read and write
clean
5AA2000
unkown
page read and write
clean
22AE4200000
unkown image
page readonly
clean
1CDD4113000
unkown
page read and write
clean
451000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
29272691000
unkown
page read and write
clean
2B28BC4D000
unkown
page read and write
clean
461000
stack
page read and write
clean
2AD6000
unkown
page read and write
clean
451000
stack
page read and write
clean
5930000
unkown
page read and write
clean
9F0000
stack
page read and write
clean
460000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
2C6F000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
2B28BC2A000
unkown
page read and write
clean
7FF4FB714000
unkown image
page readonly
clean
5940000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
590000
stack
page read and write
clean
460000
stack
page read and write
clean
1B0DA246000
unkown
page read and write
clean
7FF563A23000
unkown image
page readonly
clean
5AAB000
unkown
page read and write
clean
1B0DA300000
unkown
page read and write
clean
820000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
590000
stack
page read and write
clean
22AE499B000
unkown
page read and write
clean
7FF53FD21000
unkown image
page readonly
clean
460000
stack
page read and write
clean
598000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
590000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FFB2000
unkown image
page readonly
clean
1B0DA313000
unkown
page read and write
clean
830000
stack
page read and write
clean
7FF4FB67B000
unkown image
page readonly
clean
29272680000
unkown
page read and write
clean
7FF560CFB000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
1F2B5430000
unkown
page read and write
clean
480000
stack
page execute and read and write
clean
22AE4102000
unkown
page read and write
clean
7FF55F1EE000
unkown image
page readonly
clean
7FF4FB653000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF5717B0000
unkown image
page readonly
clean
9D0000
stack
page read and write
clean
481000
stack
page read and write
clean
1F2B51F1000
heap default
page read and write
clean
5E5000
unkown
page read and write
clean
ECBDBFE000
stack
page read and write
clean
461000
stack
page read and write
clean
7FFD0000
unkown image
page readonly
clean
22AE4E02000
unkown
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
22D0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
5930000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
7FF5521A9000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
465000
stack
page read and write
clean
470000
stack
page read and write
clean
22AE40E8000
unkown
page read and write
clean
22AE404C000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5980000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5DEE000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
481000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5810000
stack
page read and write
clean
7FF563ABD000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
485000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF5521CA000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
1B0DA23C000
unkown
page read and write
clean
5B0000
stack
page read and write
clean
7DF56F1E0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
4EF7000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
437000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
2B28BB50000
unkown image
page read and write
clean
460000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4F00000
unkown
page read and write
clean
5A10000
unkown
page read and write
clean
481000
stack
page read and write
clean
22E0000
unkown
page read and write
clean
7FF5613CC000
unkown image
page readonly
clean
4F45000
unkown
page read and write
clean
450000
stack
page read and write
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
7DF5717B2000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
830000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
4EFD000
unkown
page read and write
clean
7DF55FE40000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
834000
stack
page read and write
clean
22AE3E80000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
4F40000
unkown
page read and write
clean
1F2B51C0000
unkown image
page read and write
clean
22AE496C000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
29272770000
unkown image
page readonly
clean
840000
stack
page read and write
clean
22AE495B000
unkown
page read and write
clean
7DF56D5D2000
unkown image
page readonly
clean
480000
stack
page read and write
clean
7FF563ABA000
unkown image
page readonly
clean
7FF561497000
unkown image
page readonly
clean
7FF5614B3000
unkown image
page readonly
clean
7FF563B24000
unkown image
page readonly
clean
7FF55211B000
unkown image
page readonly
clean
23D5000
unkown
page read and write
clean
22AE4051000
unkown
page read and write
clean
2B28C402000
unkown
page read and write
clean
1CDD408A000
unkown
page read and write
clean
800000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
F9B50FF000
stack
page read and write
clean
2B28BBC0000
heap default
page read and write
clean
1B0DA258000
unkown
page read and write
clean
451000
stack
page read and write
clean
830000
stack
page read and write
clean
820000
stack
page read and write
clean
7FF53FF6A000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE49C5000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
22AE4029000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
460000
stack
page read and write
clean
1F2B51E8000
heap default
page read and write
clean
480000
stack
page read and write
clean
5A10000
unkown
page read and write
clean
1F2B5400000
unkown
page read and write
clean
292724F0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
820000
stack
page read and write
clean
7FF563714000
unkown image
page readonly
clean
B20CC7E000
stack
page read and write
clean
7FF53F70B000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
7DF509390000
unkown image
page readonly
clean
7FF53FEED000
unkown image
page readonly
clean
22AE404B000
unkown
page read and write
clean
460000
stack
page read and write
clean
7DF5717A0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
4F40000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
800000
stack
page read and write
clean
7FF4FB68E000
unkown image
page readonly
clean
7FF563952000
unkown image
page readonly
clean
A66000
unkown
page execute and read and write
clean
22AE499D000
unkown
page read and write
clean
460000
stack
page read and write
clean
451000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB731000
unkown image
page readonly
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD3E50000
unkown image
page read and write
clean
7DF5717B0000
unkown image
page readonly
clean
5A85000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
590000
stack
page read and write
clean
7FF4FB3B5000
unkown image
page readonly
clean
2AF000
unkown
page read and write
clean
5CF0000
stack
page read and write
clean
4F40000
unkown
page read and write
clean
56FC000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
2B28C0D0000
unkown image
page readonly
clean
2C6F000
unkown
page read and write
clean
7FF5614DD000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5A00000
unkown
page read and write
clean
7FF53FD3D000
unkown image
page readonly
clean
7FF563B31000
unkown image
page readonly
clean
7FF53F711000
unkown image
page readonly
clean
470000
stack
page read and write
clean
2C6F000
unkown
page read and write
clean
46A000
stack
page read and write
clean
22AE4977000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
29272680000
unkown
page read and write
clean
5A10000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE46C0000
unkown
page read and write
clean
4C7000
heap default
page read and write
clean
7FF4FB71A000
unkown image
page readonly
clean
4F80000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
B20D2FE000
stack
page read and write
clean
800000
stack
page read and write
clean
22AE4E6A000
unkown
page read and write
clean
590000
stack
page read and write
clean
2B28BBA0000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5B0000
stack
page read and write
clean
2B28BC00000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
ED2387F000
stack
page read and write
clean
7FF55197D000
unkown image
page readonly
clean
5F2D000
stack
page read and write
clean
1F2B4FD0000
unkown image
page readonly
clean
29272680000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2270000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4F02000
unkown
page read and write
clean
7FF55F866000
unkown image
page readonly
clean
4F90000
heap private
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB731000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE3FD0000
unkown image
page readonly
clean
7DF5717A2000
unkown image
page readonly
clean
7FF53FEE7000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
840000
stack
page read and write
clean
40000
unkown image
page readonly
clean
461000
stack
page read and write
clean
1B0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
451000
stack
page read and write
clean
5CF0000
stack
page read and write
clean
29272980000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
4F40000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
481000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
810000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF560D82000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
451000
stack
page read and write
clean
9D0000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
7FF5634AB000
unkown image
page readonly
clean
460000
stack
page read and write
clean
451000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7FF53FA57000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF53FA51000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
480000
stack
page read and write
clean
460000
stack
page read and write
clean
821000
stack
page read and write
clean
7FF4FB585000
unkown image
page readonly
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5AAB000
unkown
page read and write
clean
460000
stack
page read and write
clean
22AE4F02000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF45DD00000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5C0000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7FF561487000
unkown image
page readonly
clean
481000
stack
page read and write
clean
8F0000
stack
page read and write
clean
7FF5639AC000
unkown image
page readonly
clean
800000
stack
page read and write
clean
22AE49A3000
unkown
page read and write
clean
7FF56394F000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF55F873000
unkown image
page readonly
clean
7DF55FE32000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
28FF000
stack
page read and write
clean
22AE40DF000
unkown
page read and write
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
4F30000
unkown
page read and write
clean
199000
unkown
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
831000
stack
page read and write
clean
460000
stack
page read and write
clean
5930000
unkown
page read and write
clean
4F20000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF55FE32000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
1B0DA252000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD3EA0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7DF5717A0000
unkown image
page readonly
clean
7FF5639C1000
unkown image
page readonly
clean
4EEB000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
481000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD407C000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
460000
stack
page read and write
clean
2300000
unkown
page read and write
clean
242F000
stack
page read and write
clean
84E000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D7000
unkown
page read and write
clean
450000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF53F792000
unkown image
page readonly
clean
ED2333D000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
2B28BC53000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4E02000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
A77000
unkown
page execute and read and write
clean
5A1000
stack
page read and write
clean
1F2B5880000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5A00000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
9D0000
stack
page read and write
clean
7FF5613BB000
unkown image
page readonly
clean
4F94000
heap private
page read and write
clean
400000
unkown image
page readonly
clean
7FF563A1E000
unkown image
page readonly
clean
55B000
heap default
page read and write
clean
23D0000
unkown
page read and write
clean
7FF4FB72A000
unkown image
page readonly
clean
7FF563A67000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
460000
stack
page read and write
clean
A72000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
451000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
5A71000
unkown
page read and write
clean
2C6F000
unkown
page read and write
clean
480000
stack
page read and write
clean
7FF55F944000
unkown image
page readonly
clean
A389D8E000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
22AE491E000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
800000
stack
page read and write
clean
7FF55F0AE000
unkown image
page readonly
clean
7FF4FB211000
unkown image
page readonly
clean
7FF563891000
unkown image
page readonly
clean
ECBD9FE000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4EFA000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
590000
stack
page read and write
clean
5960000
unkown
page read and write
clean
4F50000
unkown
page read and write
clean
7FF56389F000
unkown image
page readonly
clean
830000
stack
page read and write
clean
22AE4070000
unkown
page read and write
clean
65A000
heap default
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
1CDD3FA0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
465000
stack
page read and write
clean
22D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
470000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD4058000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
800000
stack
page read and write
clean
5A60000
unkown
page execute and read and write
clean
19A000
unkown
page read and write
clean
29272650000
heap default
page read and write
clean
5E4000
unkown
page read and write
clean
7DF5717C0000
unkown image
page readonly
clean
7FF53FECE000
unkown image
page readonly
clean
5A10000
unkown
page read and write
clean
2872000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5940000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB5B1000
unkown image
page readonly
clean
7DF54DBE0000
unkown image
page readonly
clean
822000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
2B28BD08000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF55F86D000
unkown image
page readonly
clean
22AE3E50000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
482000
stack
page read and write
clean
1B0DA255000
unkown
page read and write
clean
480000
stack
page read and write
clean
4F45000
unkown
page read and write
clean
7FF53FE97000
unkown image
page readonly
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1B0DA000000
unkown image
page readonly
clean
2B28BC8B000
unkown
page read and write
clean
E70000
unkown image
page readonly
clean
460000
stack
page read and write
clean
2B28C250000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF4FB500000
unkown image
page readonly
clean
480000
stack
page read and write
clean
57FE000
stack
page read and write
clean
590000
stack
page read and write
clean
5930000
unkown
page read and write
clean
7FE50000
unkown
page execute and read and write
clean
1F2B4FF0000
unkown image
page readonly
clean
470000
stack
page read and write
clean
7FF5521A2000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
1F2B51E0000
heap default
page read and write
clean
465000
stack
page read and write
clean
8E0000
stack
page read and write
clean
7FF560D01000
unkown image
page readonly
clean
7FEB0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
7FF56146F000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
22AE4900000
unkown
page read and write
clean
7FF56155A000
unkown image
page readonly
clean
A4F000
stack
page read and write
clean
60EF000
stack
page read and write
clean
A30000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
29C0000
unkown
page read and write
clean
29272640000
unkown image
page readonly
clean
847000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
591000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
5930000
unkown
page read and write
clean
451000
stack
page read and write
clean
1A0000
unkown image
page readonly
clean
820000
stack
page read and write
clean
470000
stack
page read and write
clean
29272630000
heap private
page read and write
clean
90E000
stack
page read and write
clean
480000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
547F000
stack
page read and write
clean
4F45000
unkown
page read and write
clean
F9B4B7E000
stack
page read and write
clean
ECBDB7F000
stack
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
460000
stack
page read and write
clean
7FF561532000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
6CA000
stack
page read and write
clean
400000
unkown
page execute and read and write
clean
7FF563A53000
unkown image
page readonly
clean
7FF5632DB000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
7FF4FB63F000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
450000
stack
page read and write
clean
1B0DA288000
unkown
page read and write
clean
5A0000
stack
page execute and read and write
clean
5E5000
unkown
page read and write
clean
1F2B4FD0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
22AE499B000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
1B0DA302000
unkown
page read and write
clean
451000
stack
page read and write
clean
480000
stack
page read and write
clean
480000
stack
page read and write
clean
ED237FF000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
29272678000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
480000
stack
page read and write
clean
AE6000
heap private
page read and write
clean
22AE498A000
unkown
page read and write
clean
1CDD4400000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
22AE40EB000
unkown
page read and write
clean
9F0000
stack
page read and write
clean
7FF561544000
unkown image
page readonly
clean
5A40000
unkown
page read and write
clean
460000
stack
page read and write
clean
22AE40C5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1B0000
unkown image
page readonly
clean
2B28BC70000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5A30000
unkown
page read and write
clean
7FF53FE67000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
1F2B5470000
unkown
page read and write
clean
460000
stack
page read and write
clean
451000
stack
page read and write
clean
5A10000
unkown
page read and write
clean
2863000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
590000
stack
page read and write
clean
470000
stack
page read and write
clean
460000
stack
page read and write
clean
40000
unkown image
page readonly
clean
7DF56D5E0000
unkown image
page readonly
clean
480000
stack
page read and write
clean
7FF5639EF000
unkown image
page readonly
clean
460000
stack
page read and write
clean
480000
stack
page read and write
clean
7FF53FD5B000
unkown image
page readonly
clean
22F0000
unkown
page execute and read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF54DBF0000
unkown image
page readonly
clean
5800000
stack
page read and write
clean
7FF5614BE000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7DF54DBD2000
unkown image
page readonly
clean
B20C94B000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
591000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF561539000
unkown image
page readonly
clean
1F2B5226000
unkown
page read and write
clean
29272667000
heap default
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
A62000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
450000
stack
page read and write
clean
820000
stack
page read and write
clean
7FF563A8B000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB650000
unkown image
page readonly
clean
7DF56F1C2000
unkown image
page readonly
clean
1B0DA100000
unkown image
page readonly
clean
480000
stack
page read and write
clean
94E000
stack
page read and write
clean
7DF56F1C0000
unkown image
page readonly
clean
7FF561480000
unkown image
page readonly
clean
450000
stack
page read and write
clean
590000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
470000
stack
page read and write
clean
470000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
437000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF53FE93000
unkown image
page readonly
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
7FF55F8DD000
unkown image
page readonly
clean
480000
stack
page read and write
clean
9B000
unkown
page read and write
clean
6F2FE000
unkown image
page readonly
clean
461000
stack
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
9D0000
stack
page read and write
clean
4F30000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
B20CF7C000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
1B0D9FB0000
unkown image
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF55F55B000
unkown image
page readonly
clean
460000
stack
page read and write
clean
7FFB0000
unkown image
page readonly
clean
830000
stack
page read and write
clean
460000
stack
page read and write
clean
7FF5612E6000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
2AD6000
unkown
page read and write
clean
460000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
F9B4C7B000
stack
page read and write
clean
480000
stack
page read and write
clean
222E000
stack
page read and write
clean
400000
unkown image
page readonly
clean
22AE4966000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
4F40000
unkown
page read and write
clean
407000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
22AE3E30000
unkown image
page read and write
clean
480000
stack
page read and write
clean
2C6F000
unkown
page read and write
clean
590000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
1F2B4FB0000
unkown image
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB4E1000
unkown image
page readonly
clean
42C000
unkown image
page read and write
clean
7FF5520F3000
unkown image
page readonly
clean
1C0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
B20C9CE000
stack
page read and write
clean
1F2B5000000
unkown image
page readonly
clean
4F60000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5A00000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4F40000
unkown
page read and write
clean
1F2B4FC0000
unkown
page read and write
clean
7FF5632E1000
unkown image
page readonly
clean
2868000
unkown
page read and write
clean
7FF563957000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF55F777000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
4FA0000
unkown image
page readonly
clean
2AD6000
unkown
page read and write
clean
22AE3E40000
heap private
page read and write
clean
40000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
23D5000
unkown
page read and write
clean
5A10000
unkown
page read and write
clean
5BEE000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE499B000
unkown
page read and write
clean
1F2B5410000
unkown
page readonly
clean
5E4000
unkown
page read and write
clean
1F2B52E0000
unkown image
page readonly
clean
4F30000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
AF0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF563A6E000
unkown image
page readonly
clean
4F11000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
29272970000
unkown image
page readonly
clean
22AE46C0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
451000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
AE0000
heap private
page read and write
clean
5E4000
unkown
page read and write
clean
7FF55F7CC000
unkown image
page readonly
clean
7FF55F658000
unkown image
page readonly
clean
7FF5521D1000
unkown image
page readonly
clean
7DF54DBE2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
841000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
460000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
5AAB000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
A7B000
unkown
page execute and read and write
clean
7FF5520FE000
unkown image
page readonly
clean
5930000
unkown
page read and write
clean
7FF561551000
unkown image
page readonly
clean
9E0000
stack
page read and write
clean
22AE4039000
unkown
page read and write
clean
250F000
stack
page read and write
clean
4F45000
unkown
page read and write
clean
7FFC2000
unkown image
page readonly
clean
460000
stack
page read and write
clean
7FF55F8DA000
unkown image
page readonly
clean
4F40000
unkown
page read and write
clean
480000
stack
page read and write
clean
2B28BC13000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4EF4000
unkown
page read and write
clean
1B0DA259000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB627000
unkown image
page readonly
clean
1CDD4802000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
460000
stack
page read and write
clean
5A10000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1F2B5190000
unkown
page read and write
clean
481000
stack
page read and write
clean
7DF56F1E0000
unkown image
page readonly
clean
7FF56148E000
unkown image
page readonly
clean
7FFC2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
2C6B000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
5E4000
unkown
page read and write
clean
55BF000
stack
page read and write
clean
590000
stack
page read and write
clean
4F40000
unkown
page read and write
clean
400000
unkown image
page execute and read and write
clean
5D0000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
510000
heap default
page read and write
clean
460000
stack
page read and write
clean
7FF5636A7000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF53FF54000
unkown image
page readonly
clean
5940000
unkown
page read and write
clean
226E000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF5639C5000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
22AE4660000
unkown image
page write copy
clean
7FFC2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
1B0DA020000
heap default
page read and write
clean
465000
stack
page read and write
clean
590000
stack
page read and write
clean
7FF563A4F000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF563A49000
unkown image
page readonly
clean
476000
stack
page read and write
clean
7DF56D5C2000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
451000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
480000
stack
page read and write
clean
820000
stack
page read and write
clean
5A10000
unkown
page read and write
clean
5A00000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE499B000
unkown
page read and write
clean
533F000
stack
page read and write
clean
22AE40EA000
unkown
page read and write
clean
5950000
unkown
page execute and read and write
clean
460000
stack
page read and write
clean
7FF55F8BE000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF46F670000
unkown image
page readonly
clean
824000
stack
page read and write
clean
7FF563B2A000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
5FEE000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF53FE90000
unkown image
page readonly
clean
480000
stack
page read and write
clean
450000
stack
page read and write
clean
465000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
7DF56F1D2000
unkown image
page readonly
clean
450000
stack
page read and write
clean
7FF4FADC3000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
850000
stack
page execute and read and write
clean
1958FF000
stack
page read and write
clean
450000
stack
page read and write
clean
5A9C000
unkown
page read and write
clean
7FF561561000
unkown image
page readonly
clean
22AE3E50000
unkown image
page readonly
clean
7FFD0000
unkown image
page readonly
clean
1CDD405C000
unkown
page read and write
clean
22AE496A000
unkown
page read and write
clean
460000
stack
page read and write
clean
820000
stack
page read and write
clean
22AE40AA000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1B0DA802000
unkown
page read and write
clean
4F80000
unkown
page read and write
clean
59E0000
unkown
page read and write
clean
820000
stack
page read and write
clean
22AE49A3000
unkown
page read and write
clean
22AE4116000
unkown
page read and write
clean
C50000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
5930000
unkown
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
7FF55214A000
unkown image
page readonly
clean
820000
stack
page read and write
clean
7FF55F772000
unkown image
page readonly
clean
7FFB0000
unkown image
page readonly
clean
800000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
1CDD3E60000
heap private
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
451000
stack
page read and write
clean
5A00000
unkown
page read and write
clean
22AE40BE000
unkown
page read and write
clean
A75000
unkown
page execute and read and write
clean
409000
unkown image
page write copy
clean
590000
stack
page read and write
clean
5A20000
unkown
page read and write
clean
451000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
569000
heap default
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
F9B4FFF000
stack
page read and write
clean
40000
unkown image
page readonly
clean
7DF56F1D0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
A38A27B000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
820000
stack
page read and write
clean
1A0000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
7FF563812000
unkown image
page readonly
clean
4F48000
unkown
page read and write
clean
9E0000
stack
page read and write
clean
5A11000
unkown
page read and write
clean
1B0D9FD0000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
22AE4802000
unkown
page read and write
clean
7FF563807000
unkown image
page readonly
clean
7FFC0000
unkown image
page readonly
clean
451000
stack
page read and write
clean
F9B4EF7000
stack
page read and write
clean
7FF53FCF6000
unkown image
page readonly
clean
2B28BB90000
unkown image
page readonly
clean
451000
stack
page read and write
clean
4F80000
unkown
page read and write
clean
437000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
7FF4FB6AA000
unkown image
page readonly
clean
7FF563884000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5A87000
unkown
page read and write
clean
461000
stack
page read and write
clean
4F40000
unkown
page read and write
clean
7FF563B41000
unkown image
page readonly
clean
ADE000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
4AE000
stack
page read and write
clean
465000
stack
page read and write
clean
1A0000
unkown image
page readonly
clean
2B50000
unkown
page read and write
clean
1F2B5680000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
2B28BBF0000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
480000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
461000
stack
page read and write
clean
B20D17E000
stack
page read and write
clean
451000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1F2B5D50000
unkown
page read and write
clean
22AE4962000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
451000
stack
page read and write
clean
22AE4058000
unkown
page read and write
clean
460000
stack
page read and write
clean
9E0000
stack
page read and write
clean
6E0000
stack
page read and write
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5960000
unkown
page read and write
clean
460000
stack
page read and write
clean
590000
stack
page read and write
clean
4F00000
unkown
page read and write
clean
22AE4984000
unkown
page read and write
clean
7FF563621000
unkown image
page readonly
clean
2C6F000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
407000
unkown image
page readonly
clean
821000
stack
page read and write
clean
7FF5614D7000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7FF56392B000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
2AD6000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2C6B000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7FF5636A9000
unkown image
page readonly
clean
2C6B000
unkown
page read and write
clean
22AE4059000
unkown
page read and write
clean
7FF53FE9E000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7DF56F1C2000
unkown image
page readonly
clean
451000
stack
page read and write
clean
7DF509390000
unkown image
page readonly
clean
460000
stack
page read and write
clean
4F30000
unkown
page read and write
clean
450000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
1B0DA22C000
unkown
page read and write
clean
481000
stack
page read and write
clean
7FF55214D000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
7FF5521C5000
unkown image
page readonly
clean
480000
stack
page read and write
clean
4F80000
unkown
page read and write
clean
2B28BBD0000
unkown image
page readonly
clean
23F0000
unkown
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1B0DA24C000
unkown
page read and write
clean
5AA2000
unkown
page read and write
clean
7FFC0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5A00000
unkown
page read and write
clean
7FF4FB6A7000
unkown image
page readonly
clean
A6A000
unkown
page execute and read and write
clean
7FF4FB51B000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
1F2B51A0000
unkown
page read and write
clean
5A00000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
4F56000
unkown
page read and write
clean
460000
stack
page read and write
clean
460000
stack
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
7FF5634BC000
unkown image
page readonly
clean
460000
stack
page read and write
clean
451000
stack
page read and write
clean
465000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
2AD6000
unkown
page read and write
clean
7FF563A2E000
unkown image
page readonly
clean
5E2E000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
4990000
heap private
page execute and read and write
clean
5E4000
unkown
page read and write
clean
806000
stack
page read and write
clean
7FF4FB709000
unkown image
page readonly
clean
7FF55F6FA000
unkown image
page readonly
clean
30000
unkown image
page read and write
clean
7DF54DBD2000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF561457000
unkown image
page readonly
clean
820000
stack
page read and write
clean
A4D000
unkown
page execute and read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7FF5521D1000
unkown image
page readonly
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF561473000
unkown image
page readonly
clean
810000
stack
page read and write
clean
461000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
30000
unkown image
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
22AE46D0000
unkown image
page read and write
clean
7FF5520E3000
unkown image
page readonly
clean
ED232BB000
unkown
page read and write
clean
480000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
29272679000
unkown
page read and write
clean
7FF5521C1000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
22AE4113000
unkown
page read and write
clean
414000
unkown
page execute and read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF561483000
unkown image
page readonly
clean
23D5000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
A43000
unkown
page execute and read and write
clean
5E5000
unkown
page read and write
clean
29272750000
unkown
page read and write
clean
460000
stack
page read and write
clean
7FF55F939000
unkown image
page readonly
clean
590000
stack
page read and write
clean
4F40000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
460000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1B0DA27E000
unkown
page read and write
clean
470000
stack
page read and write
clean
5A10000
unkown
page read and write
clean
465000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
DD0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
22AE46C0000
unkown
page read and write
clean
480000
stack
page read and write
clean
7FF56399B000
unkown image
page readonly
clean
7FF5611E5000
unkown image
page readonly
clean
820000
stack
page read and write
clean
F9B4A7B000
unkown
page read and write
clean
29272510000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
1CDD4102000
unkown
page read and write
clean
4F50000
unkown
page read and write
clean
590000
stack
page read and write
clean
470000
stack
page read and write
clean
6320000
heap private
page read and write
clean
450000
stack
page read and write
clean
460000
stack
page read and write
clean
481000
stack
page read and write
clean
7FF563910000
unkown image
page readonly
clean
7FF55F8AB000
unkown image
page readonly
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFB0000
unkown image
page readonly
clean
22AE4400000
unkown image
page readonly
clean
451000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4038000
unkown
page read and write
clean
590000
stack
page read and write
clean
420000
unkown image
page read and write
clean
23D5000
unkown
page read and write
clean
2290000
heap private
page read and write
clean
5E4000
unkown
page read and write
clean
ECBDA7E000
stack
page read and write
clean
800000
stack
page read and write
clean
7FF53FF5A000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
470000
stack
page read and write
clean
5930000
unkown
page read and write
clean
437000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
4F48000
unkown
page read and write
clean
1B0DA600000
unkown image
page readonly
clean
7FF5638F1000
unkown image
page readonly
clean
830000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
1B0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1A0000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
5A20000
unkown
page read and write
clean
460000
stack
page read and write
clean
830000
stack
page read and write
clean
7FF000
stack
page read and write
clean
451000
stack
page read and write
clean
7FFC0000
unkown image
page readonly
clean
460000
stack
page read and write
clean
7DF5717A2000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
470000
stack
page read and write
clean
470000
stack
page read and write
clean
62E000
stack
page read and write
clean
473000
stack
page read and write
clean
7FF563AB7000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
315000
unkown
page read and write
clean
4EE000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
470000
stack
page read and write
clean
800000
stack
page read and write
clean
195E7F000
stack
page read and write
clean
7DF56D5C0000
unkown image
page readonly
clean
831000
stack
page read and write
clean
5B2000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4960000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4013000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
1CDD3E70000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF5614DA000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2AD6000
unkown
page read and write
clean
1B0DA1F0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF56D5D2000
unkown image
page readonly
clean
7FF53FDC5000
unkown image
page readonly
clean
830000
stack
page read and write
clean
460000
stack
page read and write
clean
2B28BC3C000
unkown
page read and write
clean
2400000
heap private
page read and write
clean
5E5000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
471000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
F9B4D7B000
stack
page read and write
clean
451000
stack
page read and write
clean
7FF4FB667000
unkown image
page readonly
clean
1CDD4000000
unkown
page read and write
clean
7FF53FE7D000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
1B0DA24D000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
2B28BB70000
unkown image
page readonly
clean
6D0000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
22AE49A5000
unkown
page read and write
clean
2AD6000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE40AF000
unkown
page read and write
clean
590000
stack
page read and write
clean
A50000
unkown image
page readonly
clean
409000
unkown image
page read and write
clean
5E4000
unkown
page read and write
clean
5101000
unkown
page read and write
clean
7FF55F955000
unkown image
page readonly
clean
7FF53FEEA000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
451000
stack
page read and write
clean
7FF53FDF5000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
7FF53FEA7000
unkown image
page readonly
clean
7FF53FEC3000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
7DF56D5D0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
6F2D0000
unkown image
page readonly
clean
22AE4962000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
590000
stack
page read and write
clean
5E5000
unkown
page read and write
clean
5970000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
590000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
52D000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FFD0000
unkown image
page readonly
clean
2C6B000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
22AE4973000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
523E000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1B0DA26F000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF561041000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
450000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
22AE4108000
unkown
page read and write
clean
590000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
450000
stack
page read and write
clean
1CDD4200000
unkown image
page readonly
clean
810000
stack
page read and write
clean
480000
stack
page read and write
clean
7DF56F1D0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
22AE49C5000
unkown
page read and write
clean
CF0000
unkown image
page readonly
clean
7FF53FF71000
unkown image
page readonly
clean
A40000
unkown
page read and write
clean
450000
stack
page read and write
clean
800000
stack
page read and write
clean
7FF4FB721000
unkown image
page readonly
clean
B20D077000
stack
page read and write
clean
7FFC2000
unkown image
page readonly
clean
5B0000
stack
page read and write
clean
5960000
unkown
page read and write
clean
451000
stack
page read and write
clean
23B0000
unkown
page read and write
clean
5E0000
heap default
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
437000
unkown image
page readonly
clean
590000
stack
page read and write
clean
7DF56D5E0000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
461000
stack
page read and write
clean
7FF563B40000
unkown image
page readonly
clean
7FF56132D000
unkown image
page readonly
clean
1B0000
unkown image
page readonly
clean
400000
unkown
page execute and read and write
clean
461000
stack
page read and write
clean
451000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
470000
stack
page read and write
clean
29272662000
unkown
page read and write
clean
7FF55F876000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
460000
unkown image
page readonly
clean
7FF5520DF000
unkown image
page readonly
clean
460000
stack
page read and write
clean
22F0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
460000
stack
page read and write
clean
451000
stack
page read and write
clean
ECBD87A000
unkown
page read and write
clean
ECBDAF9000
stack
page read and write
clean
480000
stack
page read and write
clean
460000
stack
page read and write
clean
A50000
unkown
page read and write
clean
7DF56F1C0000
unkown image
page readonly
clean
7DF55FE42000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
9B000
unkown
page read and write
clean
5A70000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
A38A57F000
stack
page read and write
clean
451000
stack
page read and write
clean
7FF5637C5000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
292724F0000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
22AE4E6A000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
83E000
stack
page read and write
clean
54BE000
stack
page read and write
clean
830000
stack
page execute and read and write
clean
5E4000
unkown
page read and write
clean
5A93000
unkown
page read and write
clean
7FF55F883000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF563362000
unkown image
page readonly
clean
5E5000
unkown
page read and write
clean
22AE3F80000
unkown image
page readonly
clean
2C6B000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
465000
stack
page read and write
clean
7FF5614AB000
unkown image
page readonly
clean
451000
stack
page read and write
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
2C6B000
unkown
page read and write
clean
460000
stack
page read and write
clean
451000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FFB2000
unkown image
page readonly
clean
4F40000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7DF5717C0000
unkown image
page readonly
clean
7FF54B871000
unkown image
page readonly
clean
7FF54B871000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF4FB4FD000
unkown image
page readonly
clean
451000
stack
page read and write
clean
7FF4FB4B6000
unkown image
page readonly
clean
7FF55F932000
unkown image
page readonly
clean
535000
heap default
page read and write
clean
4F40000
unkown
page read and write
clean
7FF563A37000
unkown image
page readonly
clean
480000
stack
page read and write
clean
1CDD3EC0000
heap default
page read and write
clean
4F60000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
490000
heap default
page read and write
clean
5E4000
unkown
page read and write
clean
22AE404F000
unkown
page read and write
clean
409000
unkown image
page write copy
clean
470000
stack
page read and write
clean
49A0000
unkown
page execute and read and write
clean
5A4E000
stack
page read and write
clean
821000
stack
page read and write
clean
7FFB2000
unkown image
page readonly
clean
7FF4FB702000
unkown image
page readonly
clean
830000
stack
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
650000
heap default
page read and write
clean
7FF561330000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
22AE491C000
unkown
page read and write
clean
6F2FB000
unkown image
page readonly
clean
23D0000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4F05000
unkown
page read and write
clean
450000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF5638F9000
unkown image
page readonly
clean
7FF53FDCB000
unkown image
page readonly
clean
4F80000
unkown
page read and write
clean
568000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
1B0DA24B000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
821000
stack
page read and write
clean
7DF509392000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7FF53FD7F000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
480000
stack
page read and write
clean
9D0000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
7FEB0000
unkown image
page readonly
clean
356F000
unkown
page read and write
clean
7FF55F961000
unkown image
page readonly
clean
7FF56154A000
unkown image
page readonly
clean
7FF552123000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF55FE50000
unkown image
page readonly
clean
22AE4929000
unkown
page read and write
clean
820000
stack
page read and write
clean
1B0D9FD0000
unkown image
page readonly
clean
22AE499C000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
23D5000
unkown
page read and write
clean
24B0000
heap private
page read and write
clean
481000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
7FF53FE83000
unkown image
page readonly
clean
401000
unkown image
page execute read
clean
1B0DA257000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
A10000
unkown image
page read and write
clean
22AE4E02000
unkown
page read and write
clean
5AA2000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
451000
stack
page read and write
clean
820000
stack
page read and write
clean
1B0DA213000
unkown
page read and write
clean
5E5000
unkown
page read and write
clean
800000
stack
page read and write
clean
1F2B522E000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
590000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
2C6B000
unkown
page read and write
clean
401000
unkown image
page execute read
clean
7FF563B12000
unkown image
page readonly
clean
480000
stack
page read and write
clean
9D0000
stack
page read and write
clean
5100000
unkown
page read and write
clean
461000
stack
page read and write
clean
2B28BED0000
unkown image
page readonly
clean
5930000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2B28BD02000
unkown
page read and write
clean
590000
stack
page read and write
clean
401000
unkown image
page execute read
clean
23C0000
heap private
page read and write
clean
40000
unkown image
page readonly
clean
800000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
4F45000
unkown
page read and write
clean
9D0000
stack
page read and write
clean
7FF53FF61000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
7FF55F86F000
unkown image
page readonly
clean
22AE403C000
unkown
page read and write
clean
7FF5638F5000
unkown image
page readonly
clean
820000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
23D0000
unkown
page read and write
clean
7DF54DBE0000
unkown image
page readonly
clean
5A00000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
2C6F000
unkown
page read and write
clean
7FF561047000
unkown image
page readonly
clean
5930000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
7DF56D5C2000
unkown image
page readonly
clean
7FF563A4D000
unkown image
page readonly
clean
7FF53FDDC000
unkown image
page readonly
clean
2B50000
unkown
page read and write
clean
5AAB000
unkown
page read and write
clean
470000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
5A50000
unkown
page read and write
clean
1F2B5180000
unkown
page read and write
clean
7DF54DBD0000
unkown image
page readonly
clean
481000
stack
page read and write
clean
7FF4FB643000
unkown image
page readonly
clean
23D5000
unkown
page read and write
clean
29C0000
unkown
page read and write
clean
8D0000
stack
page read and write
clean
23D0000
unkown
page read and write
clean
2B50000
unkown
page read and write
clean
461000
stack
page read and write
clean
7DF55FE30000
unkown image
page readonly
clean
5E4000
unkown
page read and write
clean
810000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
7FF5638C6000
unkown image
page readonly
clean
A38A07E000
stack
page read and write
clean
29272635000
heap private
page read and write
clean
5C0000
stack
page read and write
clean
4F45000
unkown
page read and write
clean
5E4000
unkown
page read and write
clean
9D0000
stack
page read and write
clean
7FF563A93000
unkown image
page readonly
clean
2B3000
unkown
page read and write
clean
5930000
unkown
page read and write
clean
480000
stack
page read and write
clean
4F40000
unkown
page read and write
clean
460E000
stack
page read and write
clean
7DF5093A0000
unkown image
page readonly
clean
590000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
460000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
800000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
B20D4FF000
stack
page read and write
clean
5E4000
unkown
page read and write
clean
1CDD4108000
unkown
page read and write
clean
There are 2261 hidden memdumps, click here to show them.