IOC Report

loading gif

Files

File Path
Type
Category
Malicious
SWIFT - Copy - Copy.xlsx
Microsoft Excel 2007+
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\i4L[1].exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
downloaded
malicious
C:\Users\user\Desktop\~$SWIFT - Copy - Copy.xlsx
data
dropped
malicious
C:\Users\Public\Pcportk28.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
dropped
malicious
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\i4L[1].htm
HTML document, ASCII text
dropped
clean
C:\Users\user\AppData\Local\Temp\7916.tmp
Composite Document File V2 Document, Cannot read section info
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF01B9A0A507F75E4B.TMP
data
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
"C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE" -Embedding
malicious
C:\Users\Public\Pcportk28.exe
C:\Users\Public\Pcportk28.exe
malicious
C:\Users\Public\Pcportk28.exe
C:\Users\Public\Pcportk28.exe
malicious
C:\Windows\explorer.exe
C:\Windows\Explorer.EXE
malicious
C:\Windows\SysWOW64\wininit.exe
C:\Windows\SysWOW64\wininit.exe
malicious
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
clean
C:\Windows\SysWOW64\cmd.exe
/c del "C:\Users\Public\Pcportk28.exe"
clean

URLs

Name
IP
Malicious
http://mikeloayza.com/E9/i4L.exe
131.153.37.4
malicious
http://www.bitcointradel.com/i6ro/?1bwlC=v8wCmtdiFaomFbCqPmTRfuzV09iQsBcARN7AuQ2Z2cmxW4qEZgdAIsAR7HDX+F8RHnJ1WA==&Lvkth=7nk0PH684p
162.0.209.73
malicious
http://www.luckyfandom.com/i6ro/?1bwlC=p0eSlAztBYtTxVFAHr6whY3a3/Gvse9lKulyfm76J1CiWi63XOqEOX0vBd7zzyHot2+Q1w==&Lvkth=7nk0PH684p
118.67.131.217
malicious
www.healingandhealthy.com/i6ro/
malicious
https://mikeloayza.com/E9/i4L.exe
131.153.37.4
malicious
http://www.windows.com/pctv.
unknown
clean
http://investor.msn.com
unknown
clean
http://www.msnbc.com/news/ticker.txt
unknown
clean
http://wellformedweb.org/CommentAPI/
unknown
clean
http://www.iis.fhg.de/audioPA
unknown
clean
http://windowsmedia.com/redir/services.asp?WMPFriendly=true
unknown
clean
http://www.hotmail.com/oe
unknown
clean
http://treyresearch.net
unknown
clean
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
unknown
clean
http://java.sun.com
unknown
clean
http://www.fisioletsgo.com/i6ro/?1bwlC=EvZLIa9n10nRxiOVjDAbNaraserFHY+vFXfn78IjngAHha///qY0HtL3OeQWM3V4VGGKJg==&Lvkth=7nk0PH684p
216.239.34.21
clean
http://www.icra.org/vocabulary/.
unknown
clean
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
unknown
clean
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
unknown
clean
http://investor.msn.com/
unknown
clean
http://www.piriform.com/ccleaner
unknown
clean
http://computername/printers/printername/.printer
unknown
clean
http://www.%s.comPA
unknown
clean
http://www.autoitscript.com/autoit3
unknown
clean
https://support.mozilla.org
unknown
clean
http://www.executive-air.net/i6ro/?1bwlC=/cyLrpDDSN6YuFUytusJvMs1Fa8HKgEew+X60dN8PRm9IS30Y+vwImEN4uFaxkThXcWLPQ==&Lvkth=7nk0PH684p
34.102.136.180
clean
http://servername/isapibackend.dll
unknown
clean
There are 17 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.luckyfandom.com
118.67.131.217
malicious
mikeloayza.com
131.153.37.4
malicious
bitcointradel.com
162.0.209.73
malicious
www.executive-air.net
unknown
malicious
www.bitcointradel.com
unknown
malicious
www.freeadakahamazon.com
unknown
malicious
executive-air.net
34.102.136.180
clean
www.fisioletsgo.com
216.239.34.21
clean

IPs

IP
Domain
Country
Malicious
162.0.209.73
bitcointradel.com
Canada
malicious
118.67.131.217
www.luckyfandom.com
Korea Republic of
malicious
131.153.37.4
mikeloayza.com
United States
malicious
216.239.34.21
www.fisioletsgo.com
United States
clean
34.102.136.180
executive-air.net
United States
clean

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
y?)
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel
MTTT
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\ReviewCycle
ReviewToken
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\30628
30628
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
VBAFiles
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems
=c)
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\38018
38018
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Place MRU
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Max Display
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 1
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 2
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 3
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 4
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 5
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 6
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 7
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 8
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 9
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 10
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 11
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 12
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 13
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 14
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 15
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 16
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 17
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 18
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 19
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\file mru
Item 20
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\DocumentRecovery\386BC
386BC
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\Trusted Documents
LastPurgeTime
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\LanguageResources\EnabledLanguages
1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
EXCELFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109D30000000100000000F01FEC\Usage
ProductFiles
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
EquationEditorFilesIntl_1033
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004109E60090400100000000F01FEC\Usage
EquationEditorFilesIntl_1033
clean
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
SavedLegacySettings
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
Blob
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
Blob
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
Blob
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
Blob
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
Blob
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8
Blob
clean
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\12891DF7B048CD69D0196C8AD7A754C8A812A08C
Blob
clean
HKEY_CURRENT_USER\Software\Microsoft\GDIPlus
FontCachePath
clean
There are 58 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
3589000
unkown
page read and write
malicious
190000
unkown image
page execute and read and write
malicious
E0000
unkown image
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
98A9000
unkown image
page execute and read and write
malicious
400000
unkown
page execute and read and write
malicious
1C0000
unkown
page read and write
malicious
2581000
unkown
page read and write
malicious
400000
unkown
page execute and read and write
malicious
320000
unkown image
page execute and read and write
malicious
350000
unkown image
page execute and read and write
malicious
98A9000
unkown image
page execute and read and write
malicious
25B1000
unkown
page read and write
malicious
6755000
unkown
page read and write
clean
915E000
unkown
page read and write
clean
6736000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
3110000
unkown image
page readonly
clean
2C7000
heap default
page read and write
clean
2130000
unkown image
page read and write
clean
66B3000
unkown
page read and write
clean
4593000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
9C0000
unkown
page execute and read and write
clean
6750000
unkown
page read and write
clean
369000
heap private
page read and write
clean
654A000
unkown
page read and write
clean
6AF5000
unkown
page read and write
clean
4EE0000
unkown
page read and write
clean
83C5000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
AA0000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
2120000
unkown image
page read and write
clean
6707000
unkown
page read and write
clean
9704000
unkown
page read and write
clean
2A80000
unkown
page read and write
clean
64B1000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
1B50000
unkown
page read and write
clean
64E7000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
79F0000
heap private
page read and write
clean
20B6000
unkown
page read and write
clean
1B60000
heap private
page read and write
clean
2A90000
unkown
page read and write
clean
2A30000
unkown
page read and write
clean
4A96000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
6360000
unkown
page read and write
clean
83E1000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
1E0000
unkown
page read and write
clean
70DB000
unkown
page read and write
clean
9682000
unkown
page read and write
clean
5CA000
unkown
page read and write
clean
75CC000
unkown
page read and write
clean
2670000
unkown
page execute and read and write
clean
7B40000
unkown
page read and write
clean
540000
unkown image
page read and write
clean
F0000
unkown image
page read and write
clean
4B9D000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
5270000
unkown
page execute read
clean
C50000
heap private
page execute and read and write
clean
2A40000
unkown
page read and write
clean
41F0000
unkown
page read and write
clean
6B46000
unkown
page read and write
clean
574000
heap default
page read and write
clean
6C52000
unkown
page read and write
clean
6B87000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
474000
heap default
page read and write
clean
518E000
stack
page read and write
clean
6A01000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
61DB000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
24F000
stack
page read and write
clean
3298000
unkown
page read and write
clean
371000
unkown
page read and write
clean
7FFFFFB0000
unkown image
page readonly
clean
64B8000
unkown
page read and write
clean
2800000
unkown
page execute and read and write
clean
1E0000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
90000
unkown image
page readonly
clean
940000
unkown
page execute and read and write
clean
1BE0000
unkown image
page readonly
clean
4C86000
heap private
page read and write
clean
7EFC2000
unkown image
page readonly
clean
642E000
unkown
page read and write
clean
96C0000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
43B0000
unkown image
page readonly
clean
295A000
unkown
page read and write
clean
8720000
unkown
page read and write
clean
6A60000
heap private
page read and write
clean
237000
heap default
page read and write
clean
2F50000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
4150000
unkown image
page readonly
clean
9D40000
heap private
page read and write
clean
4F60000
unkown image
page read and write
clean
45B4000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
AB7000
unkown
page execute and read and write
clean
36B000
unkown
page read and write
clean
445B000
unkown
page read and write
clean
9640000
unkown
page read and write
clean
330000
unkown
page read and write
clean
850000
unkown image
page readonly
clean
263C000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
66AE000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
6D40000
unkown
page read and write
clean
1D60000
unkown image
page readonly
clean
62A000
unkown
page read and write
clean
C1E000
stack
page read and write
clean
5F3E000
stack
page read and write
clean
1162000
unkown image
page readonly
clean
729A000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
2750000
unkown
page read and write
clean
2787000
unkown
page execute and read and write
clean
6C06000
unkown
page read and write
clean
673E000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
2110000
unkown image
page read and write
clean
6AEB000
unkown
page read and write
clean
510000
unkown
page read and write
clean
6C57000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
2110000
unkown image
page read and write
clean
163000
unkown
page execute and read and write
clean
96C0000
unkown
page read and write
clean
20000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
309E000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
7EDE000
unkown
page read and write
clean
2F50000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
79BE000
unkown
page read and write
clean
6570000
unkown
page read and write
clean
3C90000
unkown image
page read and write
clean
8355000
unkown
page read and write
clean
197000
unkown
page execute and read and write
clean
3270000
unkown
page read and write
clean
7EDE000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
729A000
unkown
page read and write
clean
79BE000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
301E000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
F20000
unkown image
page readonly
clean
4D70000
unkown image
page readonly
clean
2A90000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
449C000
unkown
page read and write
clean
7F0000
unkown
page read and write
clean
AC0000
unkown
page execute and read and write
clean
2604000
unkown
page execute and read and write
clean
4A73000
unkown
page read and write
clean
5CB000
heap default
page read and write
clean
6D65000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
4593000
unkown
page read and write
clean
E00000
unkown
page read and write
clean
530000
unkown
page read and write
clean
550000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
60000
unkown image
page readonly
clean
64C1000
unkown
page read and write
clean
90000
unkown image
page readonly
clean
6ED6000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
7EFB2000
unkown image
page readonly
clean
4E5E000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
46FF000
stack
page read and write
clean
4650000
unkown image
page readonly
clean
360000
heap private
page read and write
clean
249000
heap default
page read and write
clean
32A5000
heap private
page read and write
clean
74B0000
heap private
page read and write
clean
6CE9000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
2A40000
unkown
page read and write
clean
295A000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
4D20000
unkown
page execute and read and write
clean
74B0000
heap private
page read and write
clean
230000
heap default
page read and write
clean
840000
unkown
page execute and read and write
clean
4A3C000
unkown
page read and write
clean
6FC7000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
9783000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
4C70000
heap private
page read and write
clean
3120000
heap private
page read and write
clean
301E000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
4150000
unkown image
page readonly
clean
790000
unkown
page read and write
clean
6BB5000
unkown
page read and write
clean
6485000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
F0000
unkown image
page read and write
clean
23D000
heap default
page read and write
clean
10E0000
unkown image
page readonly
clean
7000000
unkown
page read and write
clean
68F8000
unkown
page read and write
clean
83E1000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
4308000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
8405000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
110000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
7EFB2000
unkown image
page readonly
clean
97C0000
unkown
page read and write
clean
29F0000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
6C52000
unkown
page read and write
clean
4D70000
unkown image
page readonly
clean
7FFFFFB0000
unkown image
page readonly
clean
4D50000
unkown image
page readonly
clean
6540000
unkown
page read and write
clean
29B000
heap default
page read and write
clean
6A60000
heap private
page read and write
clean
449C000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
8355000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
3120000
heap private
page read and write
clean
B40000
unkown image
page execute and read and write
clean
4DB1000
unkown image
page read and write
clean
29F0000
unkown
page read and write
clean
3278000
unkown
page read and write
clean
9704000
unkown
page read and write
clean
5B4000
heap default
page read and write
clean
40000
unkown image
page readonly
clean
4DB1000
unkown image
page read and write
clean
4150000
unkown image
page readonly
clean
263C000
unkown
page read and write
clean
7FFFFFD0000
unkown image
page readonly
clean
41F7000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
2220000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
81AE000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
7F68000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
65DC000
unkown
page read and write
clean
66C9000
unkown
page read and write
clean
3D0000
unkown
page read and write
clean
2110000
unkown image
page read and write
clean
10E2000
unkown image
page execute read
clean
4200000
unkown image
page readonly
clean
36B000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
45CF000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2460000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
71C8000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
83C5000
unkown
page read and write
clean
9A0000
unkown
page execute and read and write
clean
510000
unkown
page read and write
clean
D0000
unkown image
page readonly
clean
2AB0000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
4300000
unkown
page read and write
clean
7B4B000
unkown
page read and write
clean
23D000
heap default
page read and write
clean
41F0000
unkown
page read and write
clean
520000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
2110000
unkown image
page read and write
clean
6BA7000
unkown
page read and write
clean
83C5000
unkown
page read and write
clean
71C8000
unkown
page read and write
clean
9D45000
heap private
page read and write
clean
820000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
66CE000
unkown
page read and write
clean
6D7000
heap default
page read and write
clean
310000
heap private
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
90000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
45F000
unkown
page read and write
clean
32A5000
heap private
page read and write
clean
5CA000
unkown
page read and write
clean
6FD5000
unkown
page read and write
clean
6B04000
unkown
page read and write
clean
696E000
unkown
page read and write
clean
371000
unkown
page read and write
clean
4160000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
301E000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
4593000
unkown
page read and write
clean
4A57000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
36F000
unkown
page read and write
clean
59A000
heap default
page read and write
clean
30000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
913E000
unkown
page read and write
clean
2CD000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
6B02000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
5410000
heap private
page read and write
clean
7EFB2000
unkown image
page readonly
clean
445B000
unkown
page read and write
clean
3A6000
heap private
page read and write
clean
29E0000
unkown
page read and write
clean
6C52000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
150000
unkown
page read and write
clean
45E000
unkown
page read and write
clean
820000
unkown
page read and write
clean
8355000
unkown
page read and write
clean
4AC0000
unkown
page read and write
clean
64AA000
unkown
page read and write
clean
8720000
unkown
page read and write
clean
249000
heap default
page read and write
clean
603F000
stack
page read and write
clean
67F9000
unkown
page read and write
clean
295A000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
96C0000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
F0000
unkown image
page read and write
clean
556F000
unkown
page read and write
clean
74D3000
heap private
page read and write
clean
650D000
unkown
page read and write
clean
6738000
unkown
page read and write
clean
2A40000
unkown
page read and write
clean
729A000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
30A8000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
913E000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
211F000
unkown image
page read and write
clean
A0000
unkown image
page readonly
clean
23D000
heap default
page read and write
clean
5B9000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
686C000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
63C0000
unkown
page read and write
clean
29F0000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
8405000
unkown
page read and write
clean
6744000
unkown
page read and write
clean
728E000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
4AAD000
unkown
page read and write
clean
62B3000
unkown
page read and write
clean
9D63000
heap private
page read and write
clean
31B000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
28E0000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
7BF000
stack
page read and write
clean
60000
unkown image
page readonly
clean
6630000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
6FAA000
unkown
page read and write
clean
2540000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
2A30000
unkown
page read and write
clean
503E000
stack
page read and write
clean
255000
heap default
page read and write
clean
350000
unkown
page execute and read and write
clean
350000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
1CE000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
255000
heap default
page read and write
clean
81AE000
unkown
page read and write
clean
3298000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
6928000
unkown
page read and write
clean
1162000
unkown image
page readonly
clean
6BBE000
unkown
page read and write
clean
6FC0000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
9682000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
6741000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
10000
unkown image
page read and write
clean
7EFE0000
unkown image
page readonly
clean
7F68000
unkown
page read and write
clean
66F6000
unkown
page read and write
clean
36F000
unkown
page read and write
clean
630E000
unkown
page read and write
clean
C90000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
140000
unkown
page read and write
clean
AA0000
unkown
page execute and read and write
clean
4308000
unkown
page read and write
clean
2A40000
unkown
page read and write
clean
6BBE000
unkown
page read and write
clean
7EDE000
unkown
page read and write
clean
71C8000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
4450000
unkown
page read and write
clean
2500000
unkown image
page readonly
clean
27F0000
unkown
page execute and read and write
clean
65FF000
unkown
page read and write
clean
490000
heap default
page read and write
clean
1B60000
heap private
page read and write
clean
4AF0000
unkown image
page readonly
clean
2C7000
heap default
page read and write
clean
6372000
unkown
page read and write
clean
2471000
unkown
page read and write
clean
70DB000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
1162000
unkown image
page readonly
clean
31D000
heap default
page read and write
clean
460B000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
782F000
unkown
page read and write
clean
550000
heap default
page read and write
clean
8720000
unkown
page read and write
clean
2130000
unkown image
page read and write
clean
7661000
unkown
page read and write
clean
243000
heap default
page read and write
clean
44E7000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
31FF000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
4AAD000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
110000
unkown
page read and write
clean
9682000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
4300000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
6632000
unkown
page read and write
clean
2060000
unkown
page read and write
clean
2646000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
2A50000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
400000
unkown
page execute and read and write
clean
8405000
unkown
page read and write
clean
2A20000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
74B4000
heap private
page read and write
clean
32A0000
heap private
page read and write
clean
10E0000
unkown image
page readonly
clean
7B50000
heap private
page read and write
clean
1E0000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
2EC1000
unkown
page read and write
clean
2750000
unkown
page read and write
clean
20B6000
unkown
page read and write
clean
AA0000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
4A14000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
220000
unkown image
page readonly
clean
45B4000
unkown
page read and write
clean
457000
heap default
page read and write
clean
E9E000
stack
page read and write
clean
24F0000
unkown image
page readonly
clean
4AF0000
unkown image
page readonly
clean
64E0000
unkown
page read and write
clean
BE9000
unkown image
page execute and read and write
clean
10E2000
unkown image
page execute read
clean
41F0000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
4AC6000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
F0000
unkown image
page read and write
clean
6D40000
unkown
page read and write
clean
4AC6000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
6715000
unkown
page read and write
clean
66C1000
unkown
page read and write
clean
E50000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
4D50000
unkown image
page readonly
clean
40000
unkown image
page readonly
clean
830000
unkown
page execute and read and write
clean
30F0000
unkown image
page readonly
clean
6C57000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
66CB000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
22FD000
unkown
page read and write
clean
7839000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
915E000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
2550000
unkown
page read and write
clean
6BEB000
unkown
page read and write
clean
6710000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
3E50000
unkown image
page readonly
clean
4B9D000
unkown
page read and write
clean
32AE000
heap private
page read and write
clean
4C86000
heap private
page read and write
clean
1F0000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
6F84000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
6BC8000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
2370000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
63DF000
unkown
page read and write
clean
19B000
unkown
page execute and read and write
clean
220000
unkown image
page readonly
clean
7839000
unkown
page read and write
clean
6C50000
unkown
page read and write
clean
9018000
unkown
page read and write
clean
9140000
unkown
page read and write
clean
4450000
unkown
page read and write
clean
1CE000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
90000
unkown image
page readonly
clean
5230000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
97C0000
unkown
page read and write
clean
4308000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
447A000
unkown
page read and write
clean
2933000
unkown
page read and write
clean
810000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
7EFB2000
unkown image
page readonly
clean
83E1000
unkown
page read and write
clean
937000
unkown
page execute and read and write
clean
4160000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
B20000
unkown
page execute and read and write
clean
456F000
unkown
page read and write
clean
5B9000
unkown
page read and write
clean
43C0000
heap private
page read and write
clean
31D000
heap default
page read and write
clean
32A0000
heap private
page read and write
clean
79BE000
unkown
page read and write
clean
5BB000
unkown
page read and write
clean
4C70000
heap private
page read and write
clean
2EC1000
unkown
page read and write
clean
447A000
unkown
page read and write
clean
9140000
unkown
page read and write
clean
3F0000
heap default
page read and write
clean
2100000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
1D7000
unkown
page read and write
clean
23B0000
unkown
page execute and read and write
clean
730F000
unkown
page read and write
clean
8C000
unkown
page read and write
clean
C20000
unkown
page read and write
clean
28E0000
unkown
page read and write
clean
650000
unkown image
page readonly
clean
620000
heap default
page read and write
clean
F10000
unkown image
page readonly
clean
A0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
7EFE0000
unkown image
page readonly
clean
2690000
unkown
page execute and read and write
clean
6AE3000
unkown
page read and write
clean
D9E000
stack
page read and write | page guard
clean
7EFC0000
unkown image
page readonly
clean
3120000
heap private
page read and write
clean
3E50000
unkown image
page readonly
clean
41F7000
unkown
page read and write
clean
74B0000
heap private
page read and write
clean
AB1000
unkown
page execute and read and write
clean
4200000
unkown image
page readonly
clean
520000
unkown
page read and write
clean
7B40000
unkown
page read and write
clean
6B30000
unkown
page read and write
clean
30A8000
unkown
page read and write
clean
B00000
unkown image
page readonly
clean
6E50000
heap private
page read and write
clean
9D40000
heap private
page read and write
clean
6D40000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
460B000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
45D6000
unkown
page read and write
clean
675C000
unkown
page read and write
clean
10E0000
unkown image
page readonly
clean
6F4000
heap default
page read and write
clean
2477000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
34E000
stack
page read and write
clean
130000
unkown image
page read and write
clean
5B0000
unkown image
page readonly
clean
654D000
unkown
page read and write
clean
6A0000
unkown
page read and write
clean
3C90000
unkown image
page read and write
clean
4C7D000
heap private
page read and write
clean
6782000
unkown
page read and write
clean
5EB000
heap default
page read and write
clean
460B000
unkown
page read and write
clean
243000
heap default
page read and write
clean
4AC0000
unkown
page read and write
clean
6A5B000
unkown
page read and write
clean
456F000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
32AE000
heap private
page read and write
clean
6BFB000
unkown
page read and write
clean
332000
heap private
page read and write
clean
7EFC0000
unkown image
page readonly
clean
4150000
unkown image
page readonly
clean
5270000
unkown
page execute read
clean
45BE000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
6BBE000
unkown
page read and write
clean
4DB1000
unkown image
page read and write
clean
6C52000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
7A4000
unkown
page read and write
clean
4450000
unkown
page read and write
clean
9140000
unkown
page read and write
clean
43A0000
unkown image
page readonly
clean
EA9000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
744D000
unkown
page read and write
clean
540000
unkown
page read and write
clean
4C81000
heap private
page read and write
clean
4A74000
unkown
page read and write
clean
74B0000
heap private
page read and write
clean
622F000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
810000
unkown
page read and write
clean
36B000
unkown
page read and write
clean
2790000
unkown
page execute and read and write
clean
B30000
unkown
page execute and read and write
clean
44E7000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
61F000
unkown
page read and write
clean
7B4B000
unkown
page read and write
clean
20000
unkown image
page readonly
clean
9E0000
unkown
page read and write
clean
7839000
unkown
page read and write
clean
2520000
unkown
page read and write
clean
6BBD000
unkown
page read and write
clean
62AE000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
81AE000
unkown
page read and write
clean
63A2000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
6B70000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
6B73000
unkown
page read and write
clean
810000
unkown
page read and write
clean
EA0000
unkown
page read and write
clean
1162000
unkown image
page readonly
clean
29F0000
unkown
page read and write
clean
29E0000
unkown
page read and write
clean
8405000
unkown
page read and write
clean
A2E000
stack
page read and write
clean
34E000
unkown
page read and write
clean
29B000
heap default
page read and write
clean
73BB000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
800000
unkown
page read and write
clean
C30000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
4E5E000
unkown
page read and write
clean
728E000
unkown
page read and write
clean
3E0000
heap default
page read and write
clean
4AB2000
unkown
page read and write
clean
212F000
unkown image
page read and write
clean
22FA000
unkown
page read and write
clean
31D000
heap default
page read and write
clean
73B9000
unkown
page read and write
clean
7A1000
unkown
page read and write
clean
29E0000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
9E0000
unkown
page execute and read and write
clean
32A5000
heap private
page read and write
clean
C20000
unkown
page read and write
clean
1162000
unkown image
page readonly
clean
4A3D000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
3581000
unkown
page read and write
clean
9640000
unkown
page read and write
clean
49D0000
unkown
page read and write
clean
2933000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
7EFDF000
unkown
page read and write
clean
4DC0000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
4D70000
unkown image
page readonly
clean
9840000
unkown image
page execute and read and write
clean
728E000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
6513000
unkown
page read and write
clean
450000
heap default
page read and write
clean
9704000
unkown
page read and write
clean
6515000
unkown
page read and write
clean
6B7B000
unkown
page read and write
clean
7EFDF000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
693C000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
45BE000
unkown
page read and write
clean
920000
unkown
page execute and read and write
clean
2380000
unkown
page read and write
clean
1B65000
heap private
page read and write
clean
8401000
unkown
page read and write
clean
6B38000
unkown
page read and write
clean
6A60000
heap private
page read and write
clean
24F0000
unkown image
page readonly
clean
4300000
unkown
page read and write
clean
20B6000
unkown
page read and write
clean
447A000
unkown
page read and write
clean
510000
unkown image
page readonly
clean
6F0000
unkown image
page execute and read and write
clean
7EFC2000
unkown image
page readonly
clean
45D6000
unkown
page read and write
clean
59C000
heap default
page read and write
clean
2520000
unkown
page read and write
clean
7839000
unkown
page read and write
clean
330000
unkown
page read and write
clean
2933000
unkown
page read and write
clean
5CD000
heap default
page read and write
clean
110000
unkown
page read and write
clean
32A9000
heap private
page read and write
clean
2610000
unkown
page execute and read and write
clean
6982000
unkown
page read and write
clean
731A000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
64DA000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
10C0000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
32A5000
heap private
page read and write
clean
66AA000
unkown
page read and write
clean
63CB000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
7B50000
heap private
page read and write
clean
231F000
stack
page read and write
clean
4AB2000
unkown
page read and write
clean
9D40000
heap private
page read and write
clean
9840000
unkown image
page execute and read and write
clean
3A0000
heap private
page read and write
clean
4200000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
71C8000
unkown
page read and write
clean
58E000
stack
page read and write
clean
5414000
heap private
page read and write
clean
730F000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
79F0000
heap private
page read and write
clean
7EFC2000
unkown image
page readonly
clean
6BB2000
unkown
page read and write
clean
44E7000
unkown
page read and write
clean
3CA0000
unkown
page read and write
clean
45CF000
unkown
page read and write
clean
2760000
heap private
page read and write
clean
7EFE0000
unkown image
page readonly
clean
2540000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
522C000
heap private
page read and write
clean
6830000
unkown
page read and write
clean
3D50000
unkown
page read and write
clean
6DE000
stack
page read and write
clean
457A000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
2A50000
unkown
page read and write
clean
24F0000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
4A57000
unkown
page read and write
clean
8401000
unkown
page read and write
clean
6D40000
unkown
page read and write
clean
430000
unkown image
page readonly
clean
2AA0000
unkown
page read and write
clean
7BD0000
heap private
page read and write
clean
27E0000
unkown
page read and write
clean
4AC6000
unkown
page read and write
clean
C40000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
3D40000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
230000
heap default
page read and write
clean
4AF0000
unkown image
page readonly
clean
934000
unkown
page execute and read and write
clean
20000
unkown image
page read and write
clean
7A7000
unkown
page read and write
clean
6BAA000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
10E0000
unkown image
page readonly
clean
5390000
heap private
page read and write
clean
3CA0000
unkown
page read and write
clean
AC0000
heap private
page read and write
clean
25C3000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
D0000
unkown image
page readonly
clean
484E000
stack
page read and write
clean
1B50000
unkown
page read and write
clean
3278000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
6291000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
9D63000
heap private
page read and write
clean
7D0000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
447A000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
834B000
unkown
page read and write
clean
457A000
unkown
page read and write
clean
EC0000
unkown
page read and write
clean
2A20000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
4DD0000
heap private
page read and write
clean
2A17000
unkown image
page read and write
clean
2A50000
unkown
page read and write
clean
182000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
20000
unkown image
page readonly
clean
7BD0000
heap private
page read and write
clean
3D50000
unkown
page read and write
clean
98E9000
unkown image
page execute and read and write
clean
2A70000
unkown
page read and write
clean
710000
unkown image
page readonly
clean
21BF000
unkown
page read and write
clean
10000
unkown image
page read and write
clean
4E60000
unkown
page read and write
clean
524D000
unkown
page read and write
clean
230000
heap default
page read and write
clean
9018000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
810000
unkown
page read and write
clean
603E000
stack
page read and write | page guard
clean
3D50000
unkown
page read and write
clean
190000
unkown
page execute and read and write
clean
2B92000
unkown image
page read and write
clean
2500000
unkown image
page readonly
clean
3D50000
unkown
page read and write
clean
207D000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
2100000
unkown image
page readonly
clean
43A0000
unkown image
page readonly
clean
4C86000
heap private
page read and write
clean
782F000
unkown
page read and write
clean
677F000
unkown
page read and write
clean
255000
heap default
page read and write
clean
21BF000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
67A2000
unkown
page read and write
clean
E4000
heap private
page read and write
clean
4C81000
heap private
page read and write
clean
30000
unkown image
page read and write
clean
7EFE0000
unkown image
page readonly
clean
6BF1000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
A30000
unkown image
page readonly
clean
1E30000
unkown image
page readonly
clean
43C0000
heap private
page read and write
clean
616E000
stack
page read and write
clean
4A59000
unkown
page read and write
clean
6629000
unkown
page read and write
clean
212F000
unkown image
page read and write
clean
6546000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
5390000
heap private
page read and write
clean
164000
unkown
page read and write
clean
17D000
unkown
page execute and read and write
clean
45DC000
stack
page read and write
clean
3298000
unkown
page read and write
clean
243000
heap default
page read and write
clean
2130000
unkown image
page read and write
clean
64AC000
unkown
page read and write
clean
9640000
unkown
page read and write
clean
2533000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
623E000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
C29000
unkown
page read and write
clean
10E0000
unkown image
page readonly
clean
5C0000
unkown image
page readonly
clean
249000
heap default
page read and write
clean
9803000
unkown
page read and write
clean
731A000
unkown
page read and write
clean
840000
heap private
page read and write
clean
1F0000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
45CB000
unkown
page read and write
clean
744D000
unkown
page read and write
clean
5DC9000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
4C7D000
heap private
page read and write
clean
7EFB2000
unkown image
page readonly
clean
20B6000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
459000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
590000
heap default
page read and write
clean
820000
unkown
page read and write
clean
2A50000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
4AC0000
unkown
page read and write
clean
24E0000
unkown
page read and write
clean
679F000
unkown
page read and write
clean
6795000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
730F000
unkown
page read and write
clean
34E000
unkown
page read and write
clean
380000
unkown image
page readonly
clean
32A9000
heap private
page read and write
clean
187000
unkown
page execute and read and write
clean
69C9000
unkown
page read and write
clean
4575000
unkown
page read and write
clean
43C0000
heap private
page read and write
clean
7673000
unkown
page read and write
clean
5270000
unkown
page execute read
clean
4308000
unkown
page read and write
clean
24F0000
unkown image
page readonly
clean
479000
heap default
page read and write
clean
263C000
unkown
page read and write
clean
170000
unkown
page read and write
clean
A0000
unkown image
page readonly
clean
74B4000
heap private
page read and write
clean
237000
heap default
page read and write
clean
6637000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
6C57000
unkown
page read and write
clean
5270000
unkown
page execute read
clean
7B4B000
unkown
page read and write
clean
731A000
unkown
page read and write
clean
E0000
heap private
page read and write
clean
7EFC2000
unkown image
page readonly
clean
7FFFFFD0000
unkown image
page readonly
clean
4160000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
1FD0000
unkown image
page readonly
clean
2A00000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
67C0000
unkown
page read and write
clean
830000
unkown
page read and write
clean
309E000
unkown
page read and write
clean
1BE0000
unkown image
page readonly
clean
45BE000
unkown
page read and write
clean
64E4000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
834B000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
9803000
unkown
page read and write
clean
834B000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
2A00000
unkown
page read and write
clean
7F68000
unkown
page read and write
clean
10E0000
unkown image
page readonly
clean
3CA0000
unkown
page read and write
clean
66FA000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
A0000
unkown image
page readonly
clean
5BC000
heap default
page read and write
clean
9D45000
heap private
page read and write
clean
68A8000
unkown
page read and write
clean
29E0000
unkown
page read and write
clean
2A80000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
7BD0000
heap private
page read and write
clean
9B0000
unkown
page execute and read and write
clean
7EFC2000
unkown image
page readonly
clean
6D48000
unkown
page read and write
clean
211F000
unkown image
page read and write
clean
4D60000
unkown image
page readonly
clean
AB0000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
2AB0000
unkown
page read and write
clean
6243000
unkown
page read and write
clean
61C0000
unkown
page read and write
clean
661E000
unkown
page read and write
clean
683E000
unkown
page read and write
clean
597000
heap default
page read and write
clean
60000
unkown image
page readonly
clean
249000
heap default
page read and write
clean
213F000
unkown image
page read and write
clean
9D63000
heap private
page read and write
clean
9D45000
heap private
page read and write
clean
2933000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
4A73000
unkown
page read and write
clean
3110000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
7FFFFFB2000
unkown image
page readonly
clean
3125000
heap private
page read and write
clean
255000
heap default
page read and write
clean
83C5000
unkown
page read and write
clean
7B0000
unkown
page read and write
clean
2A20000
unkown
page read and write
clean
2480000
unkown
page read and write
clean
10E0000
unkown image
page readonly
clean
50000
unkown image
page readonly
clean
79F0000
heap private
page read and write
clean
2500000
unkown
page execute and read and write
clean
6574000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
81AE000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
5C0000
unkown image
page readonly
clean
10E0000
unkown image
page readonly
clean
4A82000
unkown
page read and write
clean
4650000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
10E0000
unkown image
page readonly
clean
728E000
unkown
page read and write
clean
2120000
unkown image
page read and write
clean
2607000
unkown
page execute and read and write
clean
D0000
unkown image
page readonly
clean
4160000
unkown
page read and write
clean
4D80000
unkown image
page readonly
clean
2740000
unkown image
page readonly
clean
1B65000
heap private
page read and write
clean
7EFB0000
unkown image
page readonly
clean
EB0000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
2CC000
unkown
page read and write
clean
43B0000
unkown image
page readonly
clean
532E000
unkown
page read and write
clean
5D81000
unkown
page read and write
clean
A0000
unkown image
page readonly
clean
810000
unkown
page read and write
clean
2A30000
unkown
page read and write
clean
456F000
unkown
page read and write
clean
4AAD000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
7FFFFFC0000
unkown image
page readonly
clean
7677000
unkown
page read and write
clean
6AB4000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
8A0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
213F000
unkown image
page read and write
clean
6BBE000
unkown
page read and write
clean
6AEE000
unkown
page read and write
clean
43A0000
unkown image
page readonly
clean
45CF000
unkown
page read and write
clean
6C57000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
4580000
unkown
page read and write
clean
32A0000
heap private
page read and write
clean
7B4B000
unkown
page read and write
clean
30F0000
unkown image
page readonly
clean
3278000
unkown
page read and write
clean
10D0000
unkown
page read and write
clean
30D0000
unkown image
page readonly
clean
30E0000
unkown image
page readonly
clean
6B68000
unkown
page read and write
clean
73BB000
unkown
page read and write
clean
674E000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
45D6000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
2130000
unkown image
page read and write
clean
10000
unkown image
page read and write
clean
74D3000
heap private
page read and write
clean
10E0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
915E000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
140000
unkown image
page readonly
clean
10E0000
unkown image
page readonly
clean
6E50000
heap private
page read and write
clean
2760000
heap private
page read and write
clean
6757000
unkown
page read and write
clean
6D25000
unkown
page read and write
clean
2E8000
unkown
page read and write
clean
2AE0000
unkown image
page readonly
clean
30A8000
unkown
page read and write
clean
36F000
unkown
page read and write
clean
25AF000
unkown
page read and write
clean
74D3000
heap private
page read and write
clean
41F7000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
A0000
heap default
page read and write
clean
2A80000
unkown
page read and write
clean
1EC000
unkown
page read and write
clean
4200000
unkown image
page readonly
clean
1162000
unkown image
page readonly
clean
4D50000
unkown image
page readonly
clean
62D000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7EFDF000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
6A60000
heap private
page read and write
clean
449C000
unkown
page read and write
clean
2784000
unkown
page execute and read and write
clean
7EFC2000
unkown image
page readonly
clean
4E5E000
unkown
page read and write
clean
8355000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
9018000
unkown
page read and write
clean
C4B000
unkown
page read and write
clean
4A96000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
2A30000
unkown
page read and write
clean
68B7000
unkown
page read and write
clean
4D60000
unkown image
page readonly
clean
314000
heap private
page read and write
clean
80000
unkown
page read and write
clean
6BF3000
unkown
page read and write
clean
4A3C000
unkown
page read and write
clean
2EC1000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7D20000
heap private
page read and write
clean
6B2E000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
460B000
unkown
page read and write
clean
212F000
unkown image
page read and write
clean
820000
unkown
page read and write
clean
4513000
unkown
page read and write
clean
3270000
unkown
page read and write
clean
4C7D000
heap private
page read and write
clean
34E000
unkown
page read and write
clean
45BE000
unkown
page read and write
clean
E4000
heap private
page read and write
clean
43C0000
heap private
page read and write
clean
2F50000
unkown
page read and write
clean
65CF000
unkown
page read and write
clean
890000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
4C81000
heap private
page read and write
clean
E0000
heap private
page read and write
clean
3CC000
stack
page read and write
clean
60000
unkown image
page readonly
clean
45A1000
unkown
page read and write
clean
31FF000
unkown
page read and write
clean
5050000
heap private
page read and write
clean
4BFF000
stack
page read and write
clean
4D40000
unkown image
page readonly
clean
301E000
unkown
page read and write
clean
30F0000
unkown image
page readonly
clean
4D70000
unkown image
page readonly
clean
590000
heap default
page read and write
clean
230000
heap default
page read and write
clean
4DC0000
unkown
page read and write
clean
30E0000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
98E9000
unkown image
page execute and read and write
clean
281A000
unkown image
page read and write
clean
34E000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
6B25000
unkown
page read and write
clean
8401000
unkown
page read and write
clean
AB0000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
2474000
unkown
page read and write
clean
782F000
unkown
page read and write
clean
72F000
stack
page read and write
clean
73BB000
unkown
page read and write
clean
9640000
unkown
page read and write
clean
380000
unkown image
page execute and read and write
clean
60000
unkown image
page readonly
clean
2A20000
unkown
page read and write
clean
4D40000
unkown image
page readonly
clean
4D40000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
32AE000
heap private
page read and write
clean
4AAD000
unkown
page read and write
clean
4DD0000
heap private
page read and write
clean
7F68000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
6D8A000
unkown
page read and write
clean
6C9C000
unkown
page read and write
clean
8374000
unkown
page read and write
clean
4AF0000
unkown image
page readonly
clean
D0000
unkown image
page readonly
clean
6D48000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
6217000
unkown
page read and write
clean
E4000
heap private
page read and write
clean
744D000
unkown
page read and write
clean
6322000
unkown
page read and write
clean
FCE000
stack
page read and write
clean
4C86000
heap private
page read and write
clean
32AE000
heap private
page read and write
clean
1B65000
heap private
page read and write
clean
20000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
8320000
unkown
page read and write
clean
DA0000
unkown
page read and write
clean
3125000
heap private
page read and write
clean
5390000
heap private
page read and write
clean
6E50000
heap private
page read and write
clean
66C7000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
2F50000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
5D80000
unkown
page read and write
clean
2A10000
unkown
page read and write
clean
79F0000
heap private
page read and write
clean
6469000
unkown
page read and write
clean
20DA000
unkown
page read and write
clean
746A000
unkown
page read and write
clean
679B000
unkown
page read and write
clean
6D48000
unkown
page read and write
clean
913E000
unkown
page read and write
clean
263C000
unkown
page read and write
clean
31FF000
unkown
page read and write
clean
1FD0000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
35E000
unkown
page read and write
clean
25C3000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
7EFD0000
unkown image
page readonly
clean
FD0000
unkown
page read and write
clean
45D6000
unkown
page read and write
clean
210000
heap private
page read and write
clean
1BE0000
unkown image
page readonly
clean
81CE000
stack
page read and write
clean
DD000
unkown
page read and write
clean
2AA0000
unkown
page read and write
clean
7E1E000
unkown
page read and write
clean
31FF000
unkown
page read and write
clean
10B0000
unkown
page read and write
clean
3D4B000
unkown
page read and write
clean
2A70000
unkown
page read and write
clean
4D30000
unkown image
page readonly
clean
6B44000
unkown
page read and write
clean
AB4000
unkown
page execute and read and write
clean
6B0000
unkown
page read and write
clean
3110000
unkown image
page readonly
clean
330000
unkown
page read and write
clean
66FD000
unkown
page read and write
clean
1B50000
unkown
page read and write
clean
731A000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
50000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
8320000
unkown
page read and write
clean
3CC0000
unkown image
page readonly
clean
4650000
unkown image
page readonly
clean
4AB2000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
45A1000
unkown
page read and write
clean
3278000
unkown
page read and write
clean
2781000
unkown
page execute and read and write
clean
7EFDF000
unkown
page read and write
clean
820000
unkown
page read and write
clean
5220000
heap private
page read and write
clean
2A10000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
2646000
unkown
page read and write
clean
9682000
unkown
page read and write
clean
70DB000
unkown
page read and write
clean
64B5000
unkown
page read and write
clean
627E000
unkown
page read and write
clean
5BF000
heap default
page read and write
clean
4A38000
unkown
page read and write
clean
67EA000
unkown
page read and write
clean
661C000
unkown
page read and write
clean
53AE000
stack
page read and write
clean
20000
unkown
page read and write
clean
2C7000
heap default
page read and write
clean
213F000
unkown image
page read and write
clean
7E1E000
unkown
page read and write
clean
3D40000
unkown
page read and write
clean
D8F000
stack
page read and write
clean
635E000
unkown
page read and write
clean
2600000
unkown
page execute and read and write
clean
9783000
unkown
page read and write
clean
532E000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
47AD000
stack
page read and write
clean
2120000
unkown image
page read and write
clean
7FFFFFC0000
unkown image
page readonly
clean
E0000
heap private
page read and write
clean
370000
unkown
page read and write
clean
6C50000
unkown
page read and write
clean
41F0000
unkown
page read and write
clean
36F000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
F0000
heap private
page execute and read and write
clean
243000
heap default
page read and write
clean
2750000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
810000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
1B50000
unkown
page read and write
clean
40000
unkown image
page readonly
clean
6310000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
1162000
unkown image
page readonly
clean
7B50000
heap private
page read and write
clean
1B60000
heap private
page read and write
clean
E4000
heap private
page read and write
clean
687B000
unkown
page read and write
clean
4B9D000
unkown
page read and write
clean
7FFFFFB2000
unkown image
page readonly
clean
1E0000
unkown
page read and write
clean
4C81000
heap private
page read and write
clean
7D0000
unkown image
page readonly
clean
670E000
unkown
page read and write
clean
2A60000
unkown
page read and write
clean
70DB000
unkown
page read and write
clean
4D20000
unkown
page execute and read and write
clean
7CFE000
unkown
page read and write
clean
7EFE0000
unkown image
page readonly
clean
80000
unkown
page execute and read and write
clean
73B9000
unkown
page read and write
clean
65D6000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
1BE0000
unkown image
page readonly
clean
10E0000
unkown image
page readonly
clean
5418000
heap private
page read and write
clean
7EFB2000
unkown image
page readonly
clean
7EFC0000
unkown image
page readonly
clean
468000
unkown
page read and write
clean
2770000
unkown
page execute and read and write
clean
213F000
unkown image
page read and write
clean
28E0000
unkown
page read and write
clean
60000
unkown image
page readonly
clean
2520000
unkown
page read and write
clean
1162000
unkown image
page readonly
clean
23D000
heap default
page read and write
clean
3298000
unkown
page read and write
clean
66B6000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
50000
unkown image
page readonly
clean
1FD0000
unkown image
page readonly
clean
1162000
unkown image
page readonly
clean
820000
unkown
page read and write
clean
678A000
unkown
page read and write
clean
3DF8000
unkown
page read and write
clean
9704000
unkown
page read and write
clean
5360000
unkown image
page read and write
clean
32A9000
heap private
page read and write
clean
52E000
stack
page read and write
clean
97C0000
unkown
page read and write
clean
5390000
heap private
page read and write
clean
237000
heap default
page read and write
clean
27E0000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
9018000
unkown
page read and write
clean
330000
unkown
page read and write
clean
73B9000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
7EFC2000
unkown image
page readonly
clean
21BF000
unkown
page read and write
clean
445B000
unkown
page read and write
clean
6787000
unkown
page read and write
clean
7CFE000
unkown
page read and write
clean
1B65000
heap private
page read and write
clean
1162000
unkown image
page readonly
clean
8720000
unkown
page read and write
clean
295A000
unkown
page read and write
clean
3D90000
unkown
page read and write
clean
7EFC0000
unkown image
page readonly
clean
1B60000
heap private
page read and write
clean
228F000
stack
page read and write
clean
30A8000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
21BF000
unkown
page read and write
clean
29B000
heap default
page read and write
clean
7011000
unkown
page read and write
clean
4C7D000
heap private
page read and write
clean
180000
unkown
page read and write
clean
4A82000
unkown
page read and write
clean
2A80000
unkown
page read and write
clean
68E5000
unkown
page read and write
clean
3125000
heap private
page read and write
clean
739E000
unkown
page read and write
clean
90000
unkown image
page readonly
clean
7EFB0000
unkown image
page readonly
clean
2C7000
heap default
page read and write
clean
5C0000
unkown image
page readonly
clean
4D30000
unkown image
page readonly
clean
673C000
unkown
page read and write
clean
8401000
unkown
page read and write
clean
4D50000
unkown image
page readonly
clean
430000
unkown image
page readonly
clean
4575000
unkown
page read and write
clean
66F1000
unkown
page read and write
clean
371000
unkown
page read and write
clean
140000
unkown image
page readonly
clean
30E0000
unkown image
page readonly
clean
557000
heap default
page read and write
clean
25F0000
unkown
page execute and read and write
clean
4D80000
unkown image
page readonly
clean
83E1000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
9803000
unkown
page read and write
clean
1162000
unkown image
page readonly
clean
309E000
unkown
page read and write
clean
61C1000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
96C0000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
36B000
unkown
page read and write
clean
2510000
unkown
page execute and read and write
clean
9783000
unkown
page read and write
clean
371000
unkown
page read and write
clean
1B83000
heap private
page read and write
clean
45B4000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
4593000
unkown
page read and write
clean
10E2000
unkown image
page execute read
clean
3D40000
unkown
page read and write
clean
74B4000
heap private
page read and write
clean
6D0000
heap default
page read and write
clean
237000
heap default
page read and write
clean
2320000
unkown
page execute and read and write
clean
456F000
unkown
page read and write
clean
7E7000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
650F000
unkown
page read and write
clean
2100000
unkown image
page readonly
clean
D9F000
stack
page read and write
clean
4300000
unkown
page read and write
clean
5B0000
unkown image
page readonly
clean
49ED000
unkown
page read and write
clean
5410000
heap private
page read and write
clean
744D000
unkown
page read and write
clean
528D000
unkown
page read and write
clean
4450000
unkown
page read and write
clean
6E50000
heap private
page read and write
clean
6BE9000
unkown
page read and write
clean
445B000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
7E0000
unkown
page read and write
clean
6F0000
unkown image
page execute and read and write
clean
4513000
unkown
page read and write
clean
4A38000
unkown
page read and write
clean
6C50000
unkown
page read and write
clean
50000
unkown image
page readonly
clean
30F0000
unkown image
page readonly
clean
29B000
heap default
page read and write
clean
2646000
unkown
page read and write
clean
7B50000
heap private
page read and write
clean
641A000
unkown
page read and write
clean
7EFB2000
unkown image
page readonly
clean
707F000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
690000
unkown image
page readonly
clean
2A60000
unkown
page read and write
clean
730F000
unkown
page read and write
clean
16D000
unkown
page execute and read and write
clean
3E50000
unkown image
page readonly
clean
3C90000
unkown image
page read and write
clean
1F0000
unkown
page read and write
clean
30C0000
unkown
page read and write
clean
4A82000
unkown
page read and write
clean
1D7000
unkown
page read and write
clean
750000
unkown image
page readonly
clean
449C000
unkown
page read and write
clean
2CC7000
unkown image
page readonly
clean
212F000
unkown image
page read and write
clean
930000
unkown
page execute and read and write
clean
10E0000
unkown image
page readonly
clean
4A96000
unkown
page read and write
clean
7EFC2000
unkown image
page readonly
clean
43B0000
unkown image
page readonly
clean
65C4000
unkown
page read and write
clean
45CB000
unkown
page read and write
clean
7D20000
heap private
page read and write
clean
6BAD000
unkown
page read and write
clean
2550000
unkown
page read and write
clean
2740000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
729A000
unkown
page read and write
clean
18A000
unkown
page execute and read and write
clean
31D000
heap default
page read and write
clean
2760000
heap private
page read and write
clean
1B83000
heap private
page read and write
clean
30E0000
unkown image
page readonly
clean
1DA000
unkown
page read and write
clean
4E60000
unkown
page read and write
clean
E10000
heap private
page execute and read and write
clean
41F7000
unkown
page read and write
clean
4B00000
unkown image
page readonly
clean
10E2000
unkown image
page execute read
clean
110000
unkown
page read and write
clean
2A90000
unkown
page read and write
clean
27E0000
unkown
page read and write
clean
2760000
heap private
page read and write
clean
7B40000
unkown
page read and write
clean
28E0000
unkown
page read and write
clean
3C90000
unkown image
page read and write
clean
2680000
unkown
page execute and read and write
clean
648A000
unkown
page read and write
clean
556F000
unkown
page read and write
clean
5C5000
unkown
page read and write
clean
7EFB0000
unkown image
page readonly
clean
7656000
unkown
page read and write
clean
43B0000
unkown image
page readonly
clean
765B000
unkown
page read and write
clean
7FFFFFC2000
unkown image
page readonly
clean
2750000
unkown
page read and write
clean
6C50000
unkown
page read and write
clean
7EFD0000
unkown image
page readonly
clean
260000
heap private
page read and write
clean
74D3000
heap private
page read and write
clean
There are 1555 hidden memdumps, click here to show them.