IOC Report

loading gif

Files

File Path
Type
Category
Malicious
YBfn5E3Dlw.dll
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_loaddll32.exe_12a180e49793e381a8b848106c2e1caa7a6a4277_7cac0383_18a51c8a\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER355.tmp.dmp
Mini DuMP crash report, 15 streams, Fri Jan 14 18:49:56 2022, 0x1205a4 type
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WER961.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERE44.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF761.tmp.csv
data
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERFF61.tmp.txt
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 61414 bytes, 1 file
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
modified
clean
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve.LOG1
MS Windows registry file, NT/2000 or above
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\YBfn5E3Dlw.dll"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\YBfn5E3Dlw.dll",#1
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe /s C:\Users\user\Desktop\YBfn5E3Dlw.dll
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\YBfn5E3Dlw.dll",#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\YBfn5E3Dlw.dll,DllRegisterServer
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\YBfn5E3Dlw.dll",DllRegisterServer
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Users\user\Desktop\YBfn5E3Dlw.dll",DllRegisterServer
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\SysWOW64\Dfktehrjwgeevy\pakqi.bja",rArKTBwXKBsr
malicious
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe "C:\Windows\System32\Dfktehrjwgeevy\pakqi.bja",DllRegisterServer
malicious
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6260 -ip 6260
clean
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 6260 -s 552
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k netsvcs -p
clean
There are 5 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://www.disneyplus.com/legal/your-california-privacy-rights
unknown
clean
http://crl.ver)
unknown
clean
https://www.disneyplus.com/legal/privacy-policy
unknown
clean
http://upx.sf.net
unknown
clean
https://www.tiktok.com/legal/report
unknown
clean
https://www.tiktok.com/legal/report/feedback
unknown
clean
http://help.disneyplus.com.
unknown
clean
https://disneyplus.com/legal.
unknown
clean

IPs

IP
Domain
Country
Malicious
207.148.81.119
unknown
United States
malicious
104.131.62.48
unknown
United States
malicious
85.214.67.203
unknown
Germany
malicious
191.252.103.16
unknown
Brazil
malicious
168.197.250.14
unknown
Argentina
malicious
66.42.57.149
unknown
United States
malicious
185.148.168.15
unknown
Germany
malicious
51.210.242.234
unknown
France
malicious
217.182.143.207
unknown
France
malicious
69.16.218.101
unknown
United States
malicious
159.69.237.188
unknown
Germany
malicious
45.138.98.34
unknown
Germany
malicious
116.124.128.206
unknown
Korea Republic of
malicious
78.46.73.125
unknown
Germany
malicious
37.59.209.141
unknown
France
malicious
210.57.209.142
unknown
Indonesia
malicious
185.148.168.220
unknown
Germany
malicious
54.37.228.122
unknown
France
malicious
190.90.233.66
unknown
Colombia
malicious
142.4.219.173
unknown
Canada
malicious
54.38.242.185
unknown
France
malicious
195.154.146.35
unknown
France
malicious
195.77.239.39
unknown
Spain
malicious
78.47.204.80
unknown
Germany
malicious
37.44.244.177
unknown
Germany
malicious
62.171.178.147
unknown
United Kingdom
malicious
128.199.192.135
unknown
United Kingdom
malicious
192.168.2.1
unknown
unknown
clean
There are 18 hidden IPs, click here to show them.

Registry

Path
Value
Malicious
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHivePermissionsCorrect
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
AmiHiveOwnerCorrect
clean
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\Windows Error Reporting\Debug
ExceptionRecord
clean

Memdumps

Base Address
Regiontype
Protect
Malicious
3450000
unkown
page execute and read and write
malicious
2AE1000
unkown
page execute read
malicious
B50000
unkown
page execute and read and write
malicious
2AB0000
unkown
page execute and read and write
malicious
5661000
unkown
page execute read
malicious
5501000
unkown
page execute read
malicious
53F0000
unkown
page execute and read and write
malicious
5690000
unkown
page execute and read and write
malicious
5630000
unkown
page execute and read and write
malicious
1270000
unkown
page execute and read and write
malicious
2AE1000
unkown
page execute read
malicious
47B1000
unkown
page execute read
malicious
B81000
unkown
page execute read
malicious
4780000
unkown
page execute and read and write
malicious
2AB0000
unkown
page execute and read and write
malicious
2AE1000
unkown
page execute read
malicious
980000
unkown
page execute and read and write
malicious
2AB0000
unkown
page execute and read and write
malicious
C61000
unkown
page execute read
malicious
11C0000
unkown
page execute and read and write
malicious
59F0000
unkown
page execute and read and write
malicious
5A21000
unkown
page execute read
malicious
12A1000
unkown
page execute read
malicious
B21000
unkown
page execute read
malicious
56C1000
unkown
page execute read
malicious
4F0000
unkown
page execute and read and write
malicious
4720000
unkown
page execute and read and write
malicious
54D0000
unkown
page execute and read and write
malicious
11F1000
unkown
page execute read
malicious
4751000
unkown
page execute read
malicious
3601000
unkown
page execute read
malicious
5421000
unkown
page execute read
malicious
1B46801F000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FF502617000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
1FB000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
2EBAEFB2000
unkown
page read and write
clean
7FF502D1E000
unkown image
page readonly
clean
7D60000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FF51ADBA000
unkown image
page readonly
clean
2EBAEFAB000
unkown
page read and write
clean
55AF000
stack
page read and write
clean
4D25000
unkown
page read and write
clean
4D08000
unkown
page read and write
clean
1EAAF5F1000
unkown
page read and write
clean
4D08000
unkown
page read and write
clean
BD0000
unkown
page read and write
clean
7FF599864000
unkown image
page readonly
clean
1B467EB0000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
113F000
stack
page read and write
clean
CA0000
unkown image
page readonly
clean
50A8000
heap private
page read and write
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7F240000
unkown image
page readonly
clean
52F0000
unkown image
page readonly
clean
2EBAED50000
unkown
page read and write
clean
10051000
unkown image
page read and write
clean
7F2F0000
unkown image
page readonly
clean
32C9000
unkown
page read and write
clean
3027000
unkown image
page readonly
clean
1B468039000
unkown
page read and write
clean
CB0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
3330000
stack
page read and write
clean
10000000
unkown image
page readonly
clean
7FED0000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
3790000
unkown image
page readonly
clean
2EBAE648000
unkown
page read and write
clean
2EBAE638000
unkown
page read and write
clean
5C8000
unkown
page read and write
clean
2EBAEF70000
unkown
page read and write
clean
50AD000
heap private
page read and write
clean
10089000
unkown image
page readonly
clean
2EBAE4C0000
unkown image
page read and write
clean
510000
unkown image
page readonly
clean
7DF517E32000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
2EBAEF85000
unkown
page read and write
clean
4D0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FF59975F000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
42A0000
unkown
page read and write
clean
10E4000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
8760000
unkown
page read and write
clean
480000
unkown image
page readonly
clean
7F8B2000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
9F0000
unkown image
page readonly
clean
2EBAF46A000
unkown
page read and write
clean
EC0000
unkown image
page readonly
clean
2EBAEF9A000
unkown
page read and write
clean
EB0000
unkown image
page read and write
clean
30A7000
unkown
page read and write
clean
7FEE0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
1EAAF5E0000
heap default
page read and write
clean
DDE000
stack
page read and write
clean
7FF502CEF000
unkown image
page readonly
clean
12C0000
unkown image
page readonly
clean
3450000
heap default
page read and write
clean
30AE000
unkown
page read and write
clean
7F2E2000
unkown image
page readonly
clean
7FF5997EE000
unkown image
page readonly
clean
2EBAE4E0000
unkown image
page readonly
clean
7FF56A26F000
unkown image
page readonly
clean
30C8000
unkown image
page readonly
clean
7FAE2000
unkown image
page readonly
clean
4D77000
unkown
page read and write
clean
7FF56A101000
unkown image
page readonly
clean
1160000
heap private
page read and write
clean
7F250000
unkown image
page readonly
clean
24726A55000
unkown
page read and write
clean
7FF56A2A8000
unkown image
page readonly
clean
5527000
unkown
page read and write
clean
4D1D000
unkown
page read and write
clean
14C000
unkown
page read and write
clean
1977F600000
unkown image
page readonly
clean
302F000
unkown image
page readonly
clean
10047000
unkown image
page readonly
clean
2EA4000
unkown image
page readonly
clean
2EBAE560000
unkown
page read and write
clean
10F0000
unkown
page read and write
clean
2EBAE63A000
unkown
page read and write
clean
530000
heap default
page read and write
clean
2EBAEF96000
unkown
page read and write
clean
30C2000
unkown image
page readonly
clean
24726900000
unkown image
page readonly
clean
7FF59962A000
unkown image
page readonly
clean
7FEE2000
unkown image
page readonly
clean
32B0000
unkown
page read and write
clean
2EBAEAD0000
unkown image
page readonly
clean
1977F5F0000
heap private
page read and write
clean
7FF569EBD000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7DF57F3C0000
unkown image
page readonly
clean
5526000
unkown
page read and write
clean
DE0000
unkown image
page readonly
clean
2AC3000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
9B2000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7DF57F3C2000
unkown image
page readonly
clean
32C8000
unkown
page read and write
clean
FFA987B000
unkown
page read and write
clean
3027000
unkown image
page readonly
clean
2EBAE613000
unkown
page read and write
clean
2ACC000
unkown image
page readonly
clean
1977F800000
unkown
page read and write
clean
5686000
unkown
page read and write
clean
24726960000
unkown image
page readonly
clean
15A0000
unkown image
page readonly
clean
7FEE2000
unkown image
page readonly
clean
D3B000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
55A7000
unkown
page read and write
clean
7FF51ADF7000
unkown image
page readonly
clean
10047000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2EBAEF8C000
unkown
page read and write
clean
E6E000
stack
page read and write
clean
3019000
unkown image
page readonly
clean
9E0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
7FF59976C000
unkown image
page readonly
clean
2B60000
heap private
page read and write
clean
30A5000
unkown image
page readonly
clean
2EBAEF71000
unkown
page read and write
clean
DDE000
stack
page read and write
clean
1EAAF5D0000
unkown image
page readonly
clean
2EBAEF85000
unkown
page read and write
clean
2AAF000
stack
page read and write
clean
3056000
unkown image
page readonly
clean
1590000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FEE2000
unkown image
page readonly
clean
7FF51AD41000
unkown image
page readonly
clean
30A1000
unkown image
page readonly
clean
2EBAEF1B000
unkown
page read and write
clean
303A000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
10051000
unkown image
page read and write
clean
30A7000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
4F0000
unkown image
page readonly
clean
535D000
unkown
page read and write
clean
7F252000
unkown image
page readonly
clean
7FF56B3CB000
unkown image
page readonly
clean
7DF580660000
unkown image
page readonly
clean
2F00000
unkown image
page readonly
clean
7F250000
unkown image
page readonly
clean
247268F0000
heap private
page read and write
clean
30AE000
unkown
page read and write
clean
7FF5994F7000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
CC0000
unkown
page read and write
clean
18A000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
700000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
FFA9BFE000
stack
page read and write
clean
30A7000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2EBAEFBA000
unkown
page read and write
clean
1EAAF60F000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2B98000
unkown image
page readonly
clean
A3B000
unkown
page read and write
clean
3010000
unkown image
page readonly
clean
420000
unkown
page read and write
clean
1977F650000
heap default
page read and write
clean
7FF51ADAA000
unkown image
page readonly
clean
E00000
unkown image
page read and write
clean
302D000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FED2000
unkown image
page readonly
clean
1217000
unkown
page read and write
clean
2EEF000
unkown image
page readonly
clean
2EBAEF66000
unkown
page read and write
clean
7F8A2000
unkown image
page readonly
clean
190000
unkown image
page readonly
clean
7FF56A13E000
unkown image
page readonly
clean
303F000
unkown image
page readonly
clean
7F2D2000
unkown image
page readonly
clean
2EBAEF80000
unkown
page read and write
clean
7FF51ADEF000
unkown image
page readonly
clean
24726A7C000
unkown
page read and write
clean
7DF5AE910000
unkown image
page readonly
clean
7F2D2000
unkown image
page readonly
clean
4D08000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5F60000
unkown
page read and write
clean
6A0000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
B0E000
stack
page read and write
clean
7FE12000
unkown image
page readonly
clean
7F6C2000
unkown image
page readonly
clean
7DF52FF30000
unkown image
page readonly
clean
52B2000
unkown
page read and write
clean
3286000
unkown
page read and write
clean
2EBAEF28000
unkown
page read and write
clean
7F8B2000
unkown image
page readonly
clean
3670000
heap private
page read and write
clean
12D0000
unkown
page read and write
clean
A80000
unkown image
page readonly
clean
7DF52FF32000
unkown image
page readonly
clean
52B0000
unkown
page read and write
clean
7FF599871000
unkown image
page readonly
clean
DE2E96B000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7FF56A0E3000
unkown image
page readonly
clean
7F400000
unkown image
page readonly
clean
2EBAEF89000
unkown
page read and write
clean
12B0000
unkown image
page readonly
clean
770000
unkown image
page readonly
clean
2EBAEF6C000
unkown
page read and write
clean
2EBAEF5A000
unkown
page read and write
clean
7FAD0000
unkown image
page readonly
clean
1110000
heap default
page read and write
clean
30A7000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
3025000
unkown image
page readonly
clean
3025000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
E70000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FE12000
unkown image
page readonly
clean
2FFC000
unkown image
page readonly
clean
7FF599733000
unkown image
page readonly
clean
5820000
heap private
page read and write
clean
410000
unkown image
page readonly
clean
760000
unkown image
page readonly
clean
50C1000
unkown
page read and write
clean
7DF5AE902000
unkown image
page readonly
clean
2EBAEF85000
unkown
page read and write
clean
7FE00000
unkown image
page readonly
clean
7FF599580000
unkown image
page readonly
clean
75B000
unkown
page read and write
clean
7FF599720000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
71D000
unkown
page read and write
clean
7FEE2000
unkown image
page readonly
clean
34FD000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5336000
unkown
page read and write
clean
566F000
stack
page read and write
clean
1EAAF607000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
2EBAEF89000
unkown
page read and write
clean
32BC000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2EBAE530000
heap default
page read and write
clean
5500000
unkown
page read and write
clean
63A000
unkown
page read and write
clean
7FF56B5BA000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2EBAEF48000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
10001000
unkown image
page execute read
clean
1977F853000
unkown
page read and write
clean
4CB0000
unkown
page read and write
clean
3243000
unkown
page read and write
clean
DEEEFF9000
stack
page read and write
clean
2EBAEFA1000
unkown
page read and write
clean
5660000
unkown
page read and write
clean
5271000
unkown
page read and write
clean
24726B08000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
3420000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
2B80000
unkown
page read and write
clean
2EA4000
unkown image
page readonly
clean
2B60000
heap private
page read and write
clean
2FDA000
unkown image
page readonly
clean
1EAAF4A0000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
A40000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2FCC000
unkown image
page readonly
clean
B2E000
stack
page read and write
clean
12C0000
unkown image
page readonly
clean
24726920000
unkown image
page readonly
clean
2EBAE656000
unkown
page read and write
clean
3033000
unkown image
page readonly
clean
3B10000
unkown image
page readonly
clean
1210000
unkown image
page readonly
clean
5A20000
unkown
page read and write
clean
1210000
unkown image
page readonly
clean
31D0000
heap default
page read and write
clean
32B0000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
1977F630000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
7F420000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
7FF599780000
unkown image
page readonly
clean
2EBAEF85000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
5C5000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
8320000
unkown
page read and write
clean
33CE000
stack
page read and write
clean
30AE000
unkown
page read and write
clean
1110000
heap default
page read and write
clean
7FF56A1AC000
unkown image
page readonly
clean
32C2000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2A15000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
36DE000
stack
page read and write
clean
2EBAEF4A000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7F6B2000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
2B70000
heap private
page read and write
clean
30AE000
unkown
page read and write
clean
7FF51AC50000
unkown image
page readonly
clean
4B0000
unkown image
page readonly
clean
7FF56A091000
unkown image
page readonly
clean
2EBAEFA8000
unkown
page read and write
clean
7F260000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
4D1D000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
160000
unkown image
page readonly
clean
7FF5996CD000
unkown image
page readonly
clean
32BC000
unkown
page read and write
clean
3019000
unkown image
page readonly
clean
3033000
unkown image
page readonly
clean
BC0000
heap private
page read and write
clean
30A7000
unkown
page read and write
clean
DE0000
unkown image
page readonly
clean
2EBAE6F8000
unkown
page read and write
clean
2EBAEFB0000
unkown
page read and write
clean
7FF56B43C000
unkown image
page readonly
clean
7DF52FF50000
unkown image
page readonly
clean
2AC5000
unkown image
page readonly
clean
2EBAE600000
unkown
page read and write
clean
302F000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7F8C0000
unkown image
page readonly
clean
1EAAF4A0000
unkown image
page readonly
clean
2EBAEF60000
unkown
page read and write
clean
7DF57F3C2000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2EBAE64C000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
1977F600000
unkown image
page readonly
clean
DEEEE7A000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2A9B000
unkown image
page readonly
clean
2AB2000
unkown image
page readonly
clean
3400000
unkown
page read and write
clean
7FF599340000
unkown image
page readonly
clean
30B4000
unkown image
page readonly
clean
55C000
heap default
page read and write
clean
4A61000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
344F000
stack
page read and write
clean
1977F620000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
FFA9EFF000
stack
page read and write
clean
7FF51AE3D000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FF569E00000
unkown image
page readonly
clean
7FF51ADCB000
unkown image
page readonly
clean
717000
heap default
page read and write
clean
2EBAF402000
unkown
page read and write
clean
7FF56A32A000
unkown image
page readonly
clean
56C0000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
10084000
unkown image
page read and write
clean
300B000
unkown image
page readonly
clean
10084000
unkown image
page read and write
clean
5C4000
unkown
page read and write
clean
7FF51AEAA000
unkown image
page readonly
clean
29C3000
unkown image
page readonly
clean
7FF56A22C000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
3027000
unkown image
page readonly
clean
6E0000
unkown image
page readonly
clean
7FE02000
unkown image
page readonly
clean
7F8B0000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
2FFC000
unkown image
page readonly
clean
7DF415D00000
unkown image
page readonly
clean
32C8000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
C92000
unkown
page read and write
clean
4C5000
heap default
page read and write
clean
10001000
unkown image
page execute read
clean
4A61000
unkown
page read and write
clean
30A5000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
32BC000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
C00000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
324D000
unkown
page read and write
clean
390000
unkown image
page readonly
clean
7F252000
unkown image
page readonly
clean
7FF56A13B000
unkown image
page readonly
clean
2FED000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2BA3000
unkown image
page readonly
clean
7FF502D14000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
7FF56B5C1000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
470000
unkown image
page readonly
clean
2FFC000
unkown image
page readonly
clean
7FED0000
unkown image
page readonly
clean
32AA000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2EBAF402000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7DF517E30000
unkown image
page readonly
clean
DEEEF7F000
stack
page read and write
clean
30AE000
unkown
page read and write
clean
2EBAEFAB000
unkown
page read and write
clean
3300000
stack
page read and write
clean
7FF502D2E000
unkown image
page readonly
clean
1A0000
unkown image
page readonly
clean
2F00000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
E70000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
7FF502CEC000
unkown image
page readonly
clean
7DF57F3D0000
unkown image
page readonly
clean
FFA997E000
stack
page read and write
clean
5C4000
unkown
page read and write
clean
34C6000
heap default
page read and write
clean
7F9D0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
32B6000
unkown
page read and write
clean
7DF580652000
unkown image
page readonly
clean
7FED2000
unkown image
page readonly
clean
7DF517E32000
unkown image
page readonly
clean
97F000
stack
page read and write
clean
10084000
unkown image
page read and write
clean
2EBAEFB2000
unkown
page read and write
clean
31D8000
heap default
page read and write
clean
30C2000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2EBAE63C000
unkown
page read and write
clean
2EBAE688000
unkown
page read and write
clean
2EBAE653000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
D90000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
7F662000
unkown image
page readonly
clean
7FAF0000
unkown image
page readonly
clean
556E000
stack
page read and write
clean
EC0000
unkown image
page readonly
clean
4BB7000
unkown
page read and write
clean
E70000
unkown
page read and write
clean
56E6000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
1210000
unkown image
page readonly
clean
7FF56A257000
unkown image
page readonly
clean
2961000
unkown image
page readonly
clean
BE0000
unkown
page read and write
clean
52AB000
unkown
page read and write
clean
7FF56A2B6000
unkown image
page readonly
clean
1977F908000
unkown
page read and write
clean
2AFF000
unkown image
page readonly
clean
7FEE0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
32D0000
stack
page read and write
clean
7DF517E40000
unkown image
page readonly
clean
7FF56B090000
unkown image
page readonly
clean
12B0000
unkown image
page readonly
clean
2AF5000
unkown image
page readonly
clean
7DF57F3B2000
unkown image
page readonly
clean
7FF56B434000
unkown image
page readonly
clean
2EBAED50000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
C86000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
2EBAEF00000
unkown
page read and write
clean
2EBAE64E000
unkown
page read and write
clean
1B468313000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2A1D000
unkown image
page readonly
clean
7F8A2000
unkown image
page readonly
clean
2EBAEF87000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30A1000
unkown image
page readonly
clean
10F3000
unkown
page read and write
clean
10086000
unkown image
page read and write
clean
3990000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FF51AE1F000
unkown image
page readonly
clean
DEEEEFF000
stack
page read and write
clean
2BB000
unkown
page read and write
clean
B6F000
stack
page read and write
clean
10000000
unkown image
page readonly
clean
7FF56B4BA000
unkown image
page readonly
clean
2EBAEF8C000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
3041000
unkown image
page readonly
clean
24726A59000
unkown
page read and write
clean
32C8000
unkown
page read and write
clean
D3E000
stack
page read and write
clean
7F662000
unkown image
page readonly
clean
3056000
unkown image
page readonly
clean
3310000
stack
page read and write
clean
2A00000
unkown image
page readonly
clean
30B4000
unkown image
page readonly
clean
32C8000
unkown
page read and write
clean
7F140000
unkown image
page readonly
clean
3052000
unkown image
page readonly
clean
2FF5000
unkown image
page readonly
clean
5710000
unkown
page read and write
clean
3003000
unkown image
page readonly
clean
10054000
unkown image
page write copy
clean
3003000
unkown image
page readonly
clean
29C7000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
C87000
unkown
page read and write
clean
30C8000
unkown image
page readonly
clean
3626000
unkown
page read and write
clean
2EBAE6C6000
unkown
page read and write
clean
1977F87A000
unkown
page read and write
clean
7FED0000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
2A46000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FAE0000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
1EAAF60F000
unkown
page read and write
clean
50A5000
heap private
page read and write
clean
4A61000
unkown
page read and write
clean
7FF56B096000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2AD3000
unkown image
page readonly
clean
7FF56B0A5000
unkown image
page readonly
clean
DE2F17E000
stack
page read and write
clean
1257000
unkown
page read and write
clean
2EBAEF85000
unkown
page read and write
clean
7FE12000
unkown image
page readonly
clean
160000
unkown image
page readonly
clean
9E0000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
F0000
unkown image
page readonly
clean
7FF51A658000
unkown image
page readonly
clean
C3D000
unkown
page read and write
clean
10EF000
stack
page read and write
clean
7FE00000
unkown image
page readonly
clean
10E6000
unkown
page read and write
clean
2BA3000
unkown image
page readonly
clean
7FF569A73000
unkown image
page readonly
clean
4D23000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7DF5AE900000
unkown image
page readonly
clean
5170000
unkown
page read and write
clean
F80000
unkown
page read and write
clean
ACF000
stack
page read and write
clean
DE2E9EF000
stack
page read and write
clean
2EBAF402000
unkown
page read and write
clean
3627000
unkown
page read and write
clean
2FB9000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2EBAEFA1000
unkown
page read and write
clean
D60000
heap private
page read and write
clean
303F000
stack
page read and write
clean
2EBAEF5A000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
3297000
unkown
page read and write
clean
7FE10000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
302F000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
325C000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7FF51AE0A000
unkown image
page readonly
clean
7FF56B4FF000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
5547000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
9D0000
heap private
page read and write
clean
1B467EC0000
unkown image
page readonly
clean
2FFC000
unkown image
page readonly
clean
7FEE0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
1B468123000
heap private
page read and write
clean
CA0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
1EAAF5F6000
heap default
page read and write
clean
2B80000
unkown
page read and write
clean
B46000
unkown
page read and write
clean
DE2ED7B000
stack
page read and write
clean
30A7000
unkown
page read and write
clean
FFA9B77000
stack
page read and write
clean
30A7000
unkown
page read and write
clean
2EBAEF5A000
unkown
page read and write
clean
52B8000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7DF517E42000
unkown image
page readonly
clean
CB0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FF59986A000
unkown image
page readonly
clean
2EBAEE02000
unkown
page read and write
clean
2EBAEF8E000
unkown
page read and write
clean
50A0000
heap private
page read and write
clean
7F8C0000
unkown image
page readonly
clean
F60000
unkown image
page readonly
clean
11F0000
unkown
page read and write
clean
10047000
unkown image
page readonly
clean
E20000
heap default
page read and write
clean
B70000
unkown image
page readonly
clean
7DF517E50000
unkown image
page readonly
clean
7FF59978B000
unkown image
page readonly
clean
2EBAE692000
unkown
page read and write
clean
7FF56B4D5000
unkown image
page readonly
clean
7F8A0000
unkown image
page readonly
clean
302D000
unkown image
page readonly
clean
2AE0000
unkown
page read and write
clean
7FAE0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
10089000
unkown image
page readonly
clean
7FF56B524000
unkown image
page readonly
clean
1210000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5687000
unkown
page read and write
clean
2E9E000
unkown image
page readonly
clean
7F300000
unkown image
page readonly
clean
160000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
CB0000
unkown image
page readonly
clean
3480000
heap default
page read and write
clean
29E5000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FF59977E000
unkown image
page readonly
clean
2EBAEFA3000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7F242000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2EBAEFD7000
unkown
page read and write
clean
EC0000
unkown image
page readonly
clean
2FDA000
unkown image
page readonly
clean
32C2000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2EBAE4E0000
unkown image
page readonly
clean
2B06000
unkown
page read and write
clean
81F887D000
unkown
page read and write
clean
1210000
unkown image
page readonly
clean
EC0000
unkown image
page readonly
clean
55D000
unkown
page read and write
clean
3056000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
32C9000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
A25000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7FF5995B6000
unkown image
page readonly
clean
4D08000
unkown
page read and write
clean
7FF502613000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
FC0000
unkown
page read and write
clean
7FED2000
unkown image
page readonly
clean
7FF5992EE000
unkown image
page readonly
clean
7FF599872000
unkown image
page readonly
clean
EC0000
unkown image
page readonly
clean
7FEF0000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
129E000
stack
page read and write
clean
2EBAE687000
unkown
page read and write
clean
4BB0000
unkown
page read and write
clean
24726930000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FF56B4E7000
unkown image
page readonly
clean
7DF57F3C0000
unkown image
page readonly
clean
7F2D0000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2EBAF400000
unkown
page read and write
clean
4D17000
unkown
page read and write
clean
4D23000
unkown
page read and write
clean
7FF56B53E000
unkown image
page readonly
clean
10054000
unkown image
page write copy
clean
7F8B0000
unkown image
page readonly
clean
569000
unkown
page read and write
clean
303A000
unkown image
page readonly
clean
2B03000
unkown image
page readonly
clean
7F410000
unkown image
page readonly
clean
2EBAEF5A000
unkown
page read and write
clean
2EBAE716000
unkown
page read and write
clean
10001000
unkown image
page execute read
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
1EAAF920000
unkown image
page readonly
clean
7FE02000
unkown image
page readonly
clean
470000
unkown image
page readonly
clean
24726B02000
unkown
page read and write
clean
8FE000
stack
page read and write
clean
3041000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
2EBAE679000
unkown
page read and write
clean
10089000
unkown image
page readonly
clean
10051000
unkown image
page read and write
clean
7DF52FF40000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2FC9000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
7F8A2000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7FE10000
unkown image
page readonly
clean
2B75000
unkown image
page readonly
clean
30C8000
unkown image
page readonly
clean
7FF599688000
unkown image
page readonly
clean
7FEF0000
unkown image
page readonly
clean
7DF580652000
unkown image
page readonly
clean
410000
unkown image
page readonly
clean
7F252000
unkown image
page readonly
clean
7DF5AE8F0000
unkown image
page readonly
clean
32B0000
unkown
page read and write
clean
5447000
unkown
page read and write
clean
2B60000
heap private
page read and write
clean
3252000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7F2F0000
unkown image
page readonly
clean
10051000
unkown image
page read and write
clean
DEEF07F000
stack
page read and write
clean
30A7000
unkown
page read and write
clean
5A47000
unkown
page read and write
clean
7FF5992F2000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7F260000
unkown image
page readonly
clean
7FF51A655000
unkown image
page readonly
clean
7FF56A29F000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
1B468115000
unkown
page read and write
clean
3590000
unkown image
page readonly
clean
2AE0000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2A23000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
10054000
unkown image
page write copy
clean
6C0000
unkown image
page readonly
clean
7F242000
unkown image
page readonly
clean
4776000
unkown
page read and write
clean
329E000
unkown
page read and write
clean
7FF59953B000
unkown image
page readonly
clean
10051000
unkown image
page read and write
clean
470000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
10ABD7E000
stack
page read and write
clean
30D3000
unkown image
page readonly
clean
7FF56B373000
unkown image
page readonly
clean
10001000
unkown image
page execute read
clean
52B8000
unkown
page read and write
clean
10086000
unkown image
page read and write
clean
2AE0000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7DF47D280000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FF5996E4000
unkown image
page readonly
clean
7FF599395000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7DF580650000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
CB0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
4D1D000
unkown
page read and write
clean
4D23000
unkown
page read and write
clean
1410000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
10089000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
2EBAEFA7000
unkown
page read and write
clean
300B000
unkown image
page readonly
clean
10054000
unkown image
page write copy
clean
7FE20000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7FF502D39000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FF5990D7000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
CA0000
unkown image
page readonly
clean
2EBAEFB6000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
A77000
unkown
page read and write
clean
50A8000
heap private
page read and write
clean
7F260000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
D80000
unkown
page read and write
clean
A7B000
unkown
page read and write
clean
6520000
unkown
page read and write
clean
10084000
unkown image
page read and write
clean
7FF56A23A000
unkown image
page readonly
clean
7FF5997E8000
unkown image
page readonly
clean
BB0000
heap default
page read and write
clean
7FAF0000
unkown image
page readonly
clean
3249000
unkown
page read and write
clean
1EAAF4C0000
unkown image
page readonly
clean
24726900000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2A31000
unkown image
page readonly
clean
FFAA17B000
stack
page read and write
clean
2DC9000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
3405000
heap default
page read and write
clean
7F402000
unkown image
page readonly
clean
31BE000
stack
page read and write
clean
5C4000
unkown
page read and write
clean
10ABAFB000
stack
page read and write
clean
5C4000
unkown
page read and write
clean
55B1000
unkown
page read and write
clean
7FF599082000
unkown image
page readonly
clean
52CA000
unkown
page read and write
clean
32C9000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5170000
unkown
page read and write
clean
35C000
unkown
page read and write
clean
7FE02000
unkown image
page readonly
clean
7FEF0000
unkown image
page readonly
clean
7DF580642000
unkown image
page readonly
clean
2EBAEF89000
unkown
page read and write
clean
2B80000
unkown
page read and write
clean
7FF502DB1000
unkown image
page readonly
clean
7FED2000
unkown image
page readonly
clean
7F2D0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FF502CCB000
unkown image
page readonly
clean
52D7000
unkown
page read and write
clean
2EBAEF8A000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
500000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
2B0A000
unkown image
page readonly
clean
30A5000
heap default
page read and write
clean
E0000
unkown image
page read and write
clean
FE0000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
BF0000
unkown image
page read and write
clean
30A7000
unkown
page read and write
clean
10EF000
stack
page read and write
clean
325C000
unkown
page read and write
clean
D80000
unkown
page read and write
clean
2EBAF463000
unkown
page read and write
clean
2BA3000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
1040000
unkown
page read and write
clean
10051000
unkown image
page read and write
clean
3291000
unkown
page read and write
clean
24726A50000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7DF517E30000
unkown image
page readonly
clean
3400000
heap default
page read and write
clean
1977F870000
unkown
page read and write
clean
1B468002000
unkown
page read and write
clean
640000
unkown image
page readonly
clean
7FF599471000
unkown image
page readonly
clean
1EAAFAB0000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2AAC000
unkown image
page readonly
clean
9C0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
9AE000
unkown
page read and write
clean
4440000
heap private
page read and write
clean
7F242000
unkown image
page readonly
clean
7F652000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
338B000
heap private
page read and write
clean
1977F5E0000
unkown image
page read and write
clean
24726A3C000
unkown
page read and write
clean
7FF51AEB1000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
24727050000
unkown image
page readonly
clean
10001000
unkown image
page execute read
clean
7FF5997AC000
unkown image
page readonly
clean
4D1F000
unkown
page read and write
clean
2EBAE6E5000
unkown
page read and write
clean
1977F848000
unkown
page read and write
clean
32E0000
stack
page read and write
clean
7FF56A23E000
unkown image
page readonly
clean
2EBAE681000
unkown
page read and write
clean
2AB8000
unkown image
page readonly
clean
2EBAEF89000
unkown
page read and write
clean
1B46800D000
unkown
page read and write
clean
2965000
unkown image
page readonly
clean
9F0000
unkown image
page readonly
clean
2FD3000
unkown image
page readonly
clean
7FF5997D4000
unkown image
page readonly
clean
7FF569FB7000
unkown image
page readonly
clean
3019000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FF56B538000
unkown image
page readonly
clean
DE2EE7B000
stack
page read and write
clean
2EBAEF89000
unkown
page read and write
clean
3287000
unkown
page read and write
clean
7DF52FF42000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F252000
unkown image
page readonly
clean
53A000
heap default
page read and write
clean
7F662000
unkown image
page readonly
clean
7FF56B41D000
unkown image
page readonly
clean
50A2000
heap private
page read and write
clean
5C4000
unkown
page read and write
clean
EB0000
unkown image
page readonly
clean
A3B000
unkown
page read and write
clean
32C9000
unkown
page read and write
clean
7FF56B546000
unkown image
page readonly
clean
7FF599346000
unkown image
page readonly
clean
690000
heap default
page read and write
clean
7FF5997C4000
unkown image
page readonly
clean
30A5000
unkown image
page readonly
clean
300B000
unkown image
page readonly
clean
3010000
unkown image
page readonly
clean
F60000
unkown image
page readonly
clean
2EBAEF7D000
unkown
page read and write
clean
4777000
unkown
page read and write
clean
125E000
stack
page read and write
clean
3780000
heap private
page read and write
clean
7F5B0000
unkown image
page readonly
clean
3003000
unkown image
page readonly
clean
6FA000
heap default
page read and write
clean
2EA4000
unkown image
page readonly
clean
1977F887000
unkown
page read and write
clean
32A4000
unkown
page read and write
clean
2DC9000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2FCC000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
E16000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7DF5AE8F2000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7FF56B391000
unkown image
page readonly
clean
3570000
heap default
page read and write
clean
10000000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
9C0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
A02000
unkown
page read and write
clean
3910000
unkown image
page readonly
clean
7F550000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7F6B0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
C50000
unkown
page read and write
clean
10051000
unkown image
page read and write
clean
30D3000
unkown image
page readonly
clean
A40000
unkown
page read and write
clean
32C2000
unkown
page read and write
clean
302D000
unkown image
page readonly
clean
7FF599397000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7DF5AE8F2000
unkown image
page readonly
clean
2EBAE655000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7F2E2000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2EBAED60000
unkown image
page read and write
clean
2EBAE5B0000
unkown image
page write copy
clean
7FF599546000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
E20000
heap default
page read and write
clean
303F000
unkown image
page readonly
clean
7FE20000
unkown image
page readonly
clean
12E0000
unkown image
page readonly
clean
47D7000
unkown
page read and write
clean
7F240000
unkown image
page readonly
clean
2EBAEF48000
unkown
page read and write
clean
B4F000
stack
page read and write
clean
324D000
unkown
page read and write
clean
24726CD0000
unkown image
page readonly
clean
7DF57F3D0000
unkown image
page readonly
clean
2EBAEF85000
unkown
page read and write
clean
1977F84E000
unkown
page read and write
clean
B50000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2FC9000
unkown image
page readonly
clean
7F660000
unkown image
page readonly
clean
7FF5990D3000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
11AE000
stack
page read and write
clean
30A7000
unkown
page read and write
clean
7FF5997F9000
unkown image
page readonly
clean
32C8000
unkown
page read and write
clean
2EBAEFC3000
unkown
page read and write
clean
A120000
unkown
page read and write
clean
24726A90000
unkown
page read and write
clean
29B6000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7F2D0000
unkown image
page readonly
clean
24726A4F000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7DF517E40000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
1B467EE0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
24726A52000
unkown
page read and write
clean
2888000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
10054000
unkown image
page write copy
clean
30A7000
unkown
page read and write
clean
7FF59967B000
unkown image
page readonly
clean
4BB1000
unkown
page read and write
clean
6B0000
unkown image
page read and write
clean
296B000
unkown image
page readonly
clean
2F00000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
2FB9000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7FF51AD83000
unkown image
page readonly
clean
C00000
unkown image
page readonly
clean
29F3000
unkown image
page readonly
clean
7FF56B4CA000
unkown image
page readonly
clean
7FF56B514000
unkown image
page readonly
clean
A7B000
unkown
page read and write
clean
12C0000
unkown image
page readonly
clean
9C0000
unkown image
page readonly
clean
32AA000
unkown
page read and write
clean
7FE02000
unkown image
page readonly
clean
32AA000
unkown
page read and write
clean
7FF5997B7000
unkown image
page readonly
clean
12AB000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
328C000
unkown
page read and write
clean
3056000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
1977FC00000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
B47000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
10047000
unkown image
page readonly
clean
2FC9000
unkown image
page readonly
clean
4E0000
unkown
page read and write
clean
7F2F0000
unkown image
page readonly
clean
D40000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
24726A00000
unkown
page read and write
clean
6F20000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
52AD000
unkown
page read and write
clean
7FF502DA4000
unkown image
page readonly
clean
7F2F0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F8A2000
unkown image
page readonly
clean
105F000
stack
page read and write
clean
325C000
unkown
page read and write
clean
10086000
unkown image
page read and write
clean
5B20000
unkown
page read and write
clean
3041000
unkown image
page readonly
clean
9720000
unkown
page read and write
clean
2AFD000
unkown image
page readonly
clean
7FF56A2B9000
unkown image
page readonly
clean
10B0000
unkown image
page readonly
clean
3388000
heap private
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
B80000
unkown
page read and write
clean
880000
unkown image
page readonly
clean
29CA000
unkown image
page readonly
clean
9F0000
unkown image
page readonly
clean
7FF51AD56000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
9B60000
unkown
page read and write
clean
7DF5AE8F0000
unkown image
page readonly
clean
33D0000
unkown
page read and write
clean
30C2000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2EBAEFA9000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2EA4000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
565000
unkown
page read and write
clean
B27000
unkown
page read and write
clean
10086000
unkown image
page read and write
clean
29B3000
unkown image
page readonly
clean
7FF598FB3000
unkown image
page readonly
clean
1B468102000
unkown
page read and write
clean
1977FD80000
unkown image
page readonly
clean
7FF59925E000
unkown image
page readonly
clean
327A000
unkown
page read and write
clean
2EBAE540000
unkown image
page readonly
clean
7FF59976A000
unkown image
page readonly
clean
7FF599722000
unkown image
page readonly
clean
7FF5997F6000
unkown image
page readonly
clean
302D000
unkown image
page readonly
clean
2EBAE590000
unkown image
page readonly
clean
3052000
unkown image
page readonly
clean
10AB5EB000
unkown
page read and write
clean
D3B000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
900000
unkown image
page readonly
clean
7FF599623000
unkown image
page readonly
clean
E16000
unkown image
page readonly
clean
7FF56B4D0000
unkown image
page readonly
clean
2EBAEFAB000
unkown
page read and write
clean
2EBAEF88000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
34E2000
unkown
page read and write
clean
30BC000
unkown image
page readonly
clean
325E000
unkown
page read and write
clean
A77000
unkown
page read and write
clean
30A1000
unkown image
page readonly
clean
2EBAEFAC000
unkown
page read and write
clean
2EBAEFC3000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7FAD0000
unkown image
page readonly
clean
8A0000
unkown image
page readonly
clean
F0000
unkown image
page readonly
clean
1EAAF5C5000
heap private
page read and write
clean
1EAAF480000
unkown image
page read and write
clean
5C4000
unkown
page read and write
clean
548C000
stack
page read and write
clean
7F2E2000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
33F0000
unkown image
page readonly
clean
7FF56A324000
unkown image
page readonly
clean
10AB87E000
stack
page read and write
clean
15A0000
unkown image
page readonly
clean
5560000
unkown
page read and write
clean
4750000
unkown
page read and write
clean
5271000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2A42000
unkown image
page readonly
clean
7DF52FF32000
unkown image
page readonly
clean
7DF580650000
unkown image
page readonly
clean
2EBAEF7B000
unkown
page read and write
clean
FFA98FE000
stack
page read and write
clean
470000
unkown image
page readonly
clean
7FE10000
unkown image
page readonly
clean
1BD000
unkown
page read and write
clean
1EAAF700000
unkown
page read and write
clean
150000
unkown image
page read and write
clean
30A7000
unkown
page read and write
clean
3056000
unkown image
page readonly
clean
1150000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
2A2A000
unkown image
page readonly
clean
2FF5000
unkown image
page readonly
clean
2FFC000
unkown image
page readonly
clean
10ABC77000
stack
page read and write
clean
30D3000
unkown image
page readonly
clean
7FE20000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
3052000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
56EF000
stack
page read and write
clean
2AA4000
unkown image
page readonly
clean
3041000
unkown image
page readonly
clean
3003000
unkown image
page readonly
clean
9B0000
unkown image
page read and write
clean
30A7000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
10089000
unkown image
page readonly
clean
7F402000
unkown image
page readonly
clean
30B4000
unkown image
page readonly
clean
1216000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
F70000
unkown image
page readonly
clean
2FD3000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2E80000
unkown image
page readonly
clean
7FF56B4FC000
unkown image
page readonly
clean
303A000
unkown image
page readonly
clean
4B30000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
890000
heap private
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
10001000
unkown image
page execute read
clean
1977F83C000
unkown
page read and write
clean
3041000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
A28000
unkown
page read and write
clean
12C0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
1410000
unkown image
page readonly
clean
2EBAE649000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
7FF502CC0000
unkown image
page readonly
clean
2FDA000
unkown image
page readonly
clean
3025000
unkown image
page readonly
clean
E6E000
stack
page read and write
clean
1B468013000
unkown
page read and write
clean
7DF5AE902000
unkown image
page readonly
clean
7FF56B4BC000
unkown image
page readonly
clean
B80000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
56AE000
stack
page read and write
clean
7FF56A24B000
unkown image
page readonly
clean
F70000
unkown image
page readonly
clean
30A1000
unkown image
page readonly
clean
30C2000
unkown image
page readonly
clean
1977F750000
unkown
page read and write
clean
3299000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
111B000
heap default
page read and write
clean
55EE000
stack
page read and write
clean
1B468300000
unkown
page read and write
clean
1200000
unkown image
page read and write
clean
10A0000
heap private
page read and write
clean
1EAAF930000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
30C2000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
2EBAEF85000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2EBAEF89000
unkown
page read and write
clean
2AE9000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
520000
unkown image
page readonly
clean
7F2E2000
unkown image
page readonly
clean
C5C000
unkown
page read and write
clean
7F8A0000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
3600000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
53EE000
stack
page read and write
clean
7DF57F3B2000
unkown image
page readonly
clean
7FF51ADAC000
unkown image
page readonly
clean
7FF56A26C000
unkown image
page readonly
clean
410000
unkown image
page readonly
clean
2A09000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7F6D0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7DF517E42000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2EBAEF79000
unkown
page read and write
clean
E20000
heap default
page read and write
clean
2A17000
unkown image
page readonly
clean
10AB8FD000
stack
page read and write
clean
29FB000
unkown image
page readonly
clean
7F260000
unkown image
page readonly
clean
126D000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FF599785000
unkown image
page readonly
clean
28F0000
unkown image
page readonly
clean
7FF599797000
unkown image
page readonly
clean
F58000
unkown
page read and write
clean
160000
unkown image
page readonly
clean
7FEE0000
unkown image
page readonly
clean
3025000
unkown image
page readonly
clean
7FF51AE39000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
390000
unkown image
page readonly
clean
7F650000
unkown image
page readonly
clean
7F242000
unkown image
page readonly
clean
1EAAF6E0000
unkown
page read and write
clean
29BC000
unkown image
page readonly
clean
10E8000
unkown
page read and write
clean
2FF5000
unkown image
page readonly
clean
357A000
heap default
page read and write
clean
30A7000
unkown
page read and write
clean
510000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
D80000
unkown
page read and write
clean
F60000
unkown image
page readonly
clean
7FF59977A000
unkown image
page readonly
clean
4EE000
stack
page read and write
clean
A4A000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7FF502DB2000
unkown image
page readonly
clean
302F000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F662000
unkown image
page readonly
clean
7FF56B507000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
29EC000
unkown image
page readonly
clean
7FF59974F000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
32A4000
unkown
page read and write
clean
2B92000
unkown image
page readonly
clean
24726A4B000
unkown
page read and write
clean
6F0000
heap default
page read and write
clean
305B000
unkown image
page readonly
clean
29CF000
unkown image
page readonly
clean
2EBAEF89000
unkown
page read and write
clean
2FD3000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
305B000
unkown image
page readonly
clean
3010000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7FED2000
unkown image
page readonly
clean
55D7000
unkown
page read and write
clean
DDE000
stack
page read and write
clean
2FC9000
unkown image
page readonly
clean
3710000
unkown image
page readonly
clean
7FF502DAA000
unkown image
page readonly
clean
520000
heap default
page read and write
clean
7FF599355000
unkown image
page readonly
clean
324B000
unkown
page read and write
clean
2EBAE651000
unkown
page read and write
clean
7FF5995D1000
unkown image
page readonly
clean
7FF51AE36000
unkown image
page readonly
clean
1210000
unkown image
page readonly
clean
32C9000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
50B0000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
10084000
unkown image
page read and write
clean
30AE000
unkown
page read and write
clean
F60000
unkown image
page readonly
clean
2F00000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
2EBAE6E1000
unkown
page read and write
clean
52D7000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
10047000
unkown image
page readonly
clean
7DF42DE00000
unkown image
page readonly
clean
2FED000
unkown image
page readonly
clean
111B000
heap default
page read and write
clean
30AE000
unkown
page read and write
clean
AA0000
unkown
page read and write
clean
7FF569E15000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
1210000
unkown image
page readonly
clean
490000
heap private
page read and write
clean
30D3000
unkown image
page readonly
clean
3EC000
unkown
page read and write
clean
7FF56A22A000
unkown image
page readonly
clean
53A000
heap default
page read and write
clean
30AE000
unkown
page read and write
clean
2EBAEF60000
unkown
page read and write
clean
1EAAF720000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2BA3000
unkown image
page readonly
clean
32C8000
unkown
page read and write
clean
7F400000
unkown image
page readonly
clean
7FF502D04000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
CA0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
527F000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
BD3000
heap default
page read and write
clean
6C0000
unkown image
page readonly
clean
109E000
stack
page read and write
clean
30A7000
unkown
page read and write
clean
9B0000
unkown image
page read and write
clean
3370000
unkown
page read and write
clean
2B07000
unkown
page read and write
clean
3580000
unkown
page read and write
clean
300B000
unkown image
page readonly
clean
2EBAE64B000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7F670000
unkown image
page readonly
clean
410000
unkown image
page readonly
clean
2FF5000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7360000
unkown
page read and write
clean
2EBAE670000
unkown
page read and write
clean
7F412000
unkown image
page readonly
clean
7F8A0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7C0000
unkown
page read and write
clean
7F660000
unkown image
page readonly
clean
7FF5995C1000
unkown image
page readonly
clean
30A1000
unkown image
page readonly
clean
4720000
unkown
page read and write
clean
F1C000
unkown
page read and write
clean
7FF51AEB2000
unkown image
page readonly
clean
2EBAEF89000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
D6B000
heap private
page read and write
clean
2AE000
unkown
page read and write
clean
2EBAE708000
unkown
page read and write
clean
3300000
stack
page read and write
clean
47B0000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
E6E000
stack
page read and write
clean
4AF000
stack
page read and write
clean
5C4000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FF5997CA000
unkown image
page readonly
clean
2EBAEF96000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
10084000
unkown image
page read and write
clean
BA7000
unkown
page read and write
clean
302F000
unkown image
page readonly
clean
2FC9000
unkown image
page readonly
clean
3297000
unkown
page read and write
clean
12D0000
unkown image
page readonly
clean
10086000
unkown image
page read and write
clean
2AAF000
stack
page read and write
clean
7FF59974B000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7F8A0000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
7FF51AB70000
unkown image
page readonly
clean
7FF502D0A000
unkown image
page readonly
clean
410000
unkown image
page readonly
clean
30C8000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F8C0000
unkown image
page readonly
clean
2EBAEF92000
unkown
page read and write
clean
24726A13000
unkown
page read and write
clean
7FF56A193000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F260000
unkown image
page readonly
clean
2ADD000
unkown image
page readonly
clean
5170000
unkown
page read and write
clean
10EF000
stack
page read and write
clean
2A4B000
unkown image
page readonly
clean
2EBAEFB6000
unkown
page read and write
clean
30A5000
unkown image
page readonly
clean
303F000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
AD0000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
DE2EF77000
stack
page read and write
clean
7F2D0000
unkown image
page readonly
clean
7FF56A284000
unkown image
page readonly
clean
7F8B0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FF51AE04000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
2B22000
unkown image
page readonly
clean
1030000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
32B6000
unkown
page read and write
clean
3F0000
unkown image
page readonly
clean
F70000
unkown image
page readonly
clean
7FAE2000
unkown image
page readonly
clean
2B8C000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
2D00000
unkown image
page readonly
clean
1110000
heap default
page read and write
clean
5C4000
unkown
page read and write
clean
3052000
unkown image
page readonly
clean
4FFE000
stack
page read and write
clean
30AE000
unkown
page read and write
clean
10086000
unkown image
page read and write
clean
10054000
unkown image
page write copy
clean
3297000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7FEE0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
2FD3000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2996000
unkown image
page readonly
clean
7FEF0000
unkown image
page readonly
clean
10F0000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
FFA9DFC000
stack
page read and write
clean
2B06000
unkown
page read and write
clean
7FF56B423000
unkown image
page readonly
clean
2EBAEF89000
unkown
page read and write
clean
2EBAE500000
unkown image
page readonly
clean
2FDA000
unkown image
page readonly
clean
7DF4AC7C0000
unkown image
page readonly
clean
30A0000
heap default
page read and write
clean
30AE000
unkown
page read and write
clean
12C6000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7F250000
unkown image
page readonly
clean
E16000
unkown image
page readonly
clean
2B71000
unkown image
page readonly
clean
520000
unkown image
page readonly
clean
2EBAED50000
unkown
page read and write
clean
5057000
unkown
page read and write
clean
7F8B2000
unkown image
page readonly
clean
7FF569E06000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
34D0000
heap default
page read and write
clean
7FF56A245000
unkown image
page readonly
clean
2E9E000
unkown image
page readonly
clean
1B467EC0000
unkown image
page readonly
clean
7FF5996D3000
unkown image
page readonly
clean
24726A29000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
111B000
heap default
page read and write
clean
30A7000
unkown
page read and write
clean
2B06000
unkown
page read and write
clean
10FE000
stack
page read and write
clean
30C8000
unkown image
page readonly
clean
1170000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7FF5995B4000
unkown image
page readonly
clean
303A000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
2F00000
unkown image
page readonly
clean
B9E000
stack
page read and write
clean
7DF5AE900000
unkown image
page readonly
clean
7FF56B3CE000
unkown image
page readonly
clean
1977F813000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
2BE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
7F1D0000
unkown image
page readonly
clean
4EA5000
unkown
page read and write
clean
CB0000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
2EBAEC50000
unkown image
page readonly
clean
32C2000
unkown
page read and write
clean
520000
unkown image
page readonly
clean
4D39000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2FD3000
unkown image
page readonly
clean
D67000
heap private
page read and write
clean
2EBAE6E9000
unkown
page read and write
clean
FFA9CF7000
stack
page read and write
clean
2EBAEF79000
unkown
page read and write
clean
325E000
unkown
page read and write
clean
10000000
unkown image
page readonly
clean
7F252000
unkown image
page readonly
clean
700000
unkown image
page readonly
clean
7FED0000
unkown image
page readonly
clean
2AF7000
unkown image
page readonly
clean
7F240000
unkown image
page readonly
clean
1EAAF606000
unkown
page read and write
clean
50AD000
heap private
page read and write
clean
2AAF000
stack
page read and write
clean
2EA4000
unkown image
page readonly
clean
2EBAEF5A000
unkown
page read and write
clean
12A0000
unkown
page read and write
clean
2FF5000
unkown image
page readonly
clean
7FF5997DF000
unkown image
page readonly
clean
1F0000
unkown
page read and write
clean
360000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FE00000
unkown image
page readonly
clean
10054000
unkown image
page write copy
clean
50D1000
unkown
page read and write
clean
303F000
unkown image
page readonly
clean
7FF56B4CE000
unkown image
page readonly
clean
81F8A7E000
stack
page read and write
clean
2F13000
unkown
page read and write
clean
7FF56B1AA000
unkown image
page readonly
clean
2EBAEF9A000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FF56A1A4000
unkown image
page readonly
clean
4D04000
unkown
page read and write
clean
303A000
unkown image
page readonly
clean
24726ED0000
unkown image
page readonly
clean
7FF56A331000
unkown image
page readonly
clean
10EA000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
24726980000
unkown
page read and write
clean
9C0000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
24726B13000
unkown
page read and write
clean
4D0C000
unkown
page read and write
clean
10089000
unkown image
page readonly
clean
7FDD0000
unkown image
page readonly
clean
348A000
heap default
page read and write
clean
7FF56B247000
unkown image
page readonly
clean
50C0000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
400000
unkown image
page readonly
clean
7FF56B5B4000
unkown image
page readonly
clean
7FF56A18D000
unkown image
page readonly
clean
57F0000
unkown
page read and write
clean
2EBAE702000
unkown
page read and write
clean
2FCC000
unkown image
page readonly
clean
32C2000
unkown
page read and write
clean
7FF56B5C2000
unkown image
page readonly
clean
2F0F000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7F8B0000
unkown image
page readonly
clean
7F652000
unkown image
page readonly
clean
160000
unkown image
page readonly
clean
24726B00000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
3380000
heap private
page read and write
clean
7F2F0000
unkown image
page readonly
clean
C3D000
unkown
page read and write
clean
7F0000
heap private
page read and write
clean
7DF52FF40000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
55F000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
52B0000
unkown
page read and write
clean
7F2D2000
unkown image
page readonly
clean
10047000
unkown image
page readonly
clean
7FAD2000
unkown image
page readonly
clean
2EBAEFB0000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
2894000
unkown image
page readonly
clean
56E7000
unkown
page read and write
clean
325E000
unkown
page read and write
clean
DE2EC7F000
stack
page read and write
clean
9E0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
530000
unkown
page read and write
clean
2EBAE64D000
unkown
page read and write
clean
BBA000
heap default
page read and write
clean
3710000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
307D000
stack
page read and write
clean
10F6000
unkown
page read and write
clean
2EBAEF89000
unkown
page read and write
clean
3010000
unkown image
page readonly
clean
2EBAEF89000
unkown
page read and write
clean
1B468000000
unkown
page read and write
clean
7F7A0000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
1977F913000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
32B6000
unkown
page read and write
clean
5A46000
unkown
page read and write
clean
12B0000
unkown image
page readonly
clean
5247000
unkown
page read and write
clean
1210000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
2EBAEF89000
unkown
page read and write
clean
12C7000
unkown
page read and write
clean
7FF56B3B1000
unkown image
page readonly
clean
7E0000
heap default
page read and write
clean
30AE000
unkown
page read and write
clean
5447000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2EBAF402000
unkown
page read and write
clean
2B70000
heap private
page read and write
clean
24727202000
unkown
page read and write
clean
380000
unkown image
page read and write
clean
303F000
unkown image
page readonly
clean
7FF59945A000
unkown image
page readonly
clean
2EBAE8D0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
2EBAEF48000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
305B000
unkown image
page readonly
clean
7DF580640000
unkown image
page readonly
clean
3033000
unkown image
page readonly
clean
32A4000
unkown
page read and write
clean
1B468202000
unkown
page read and write
clean
334E000
stack
page read and write
clean
30BC000
unkown image
page readonly
clean
7920000
unkown
page read and write
clean
D3B000
unkown
page read and write
clean
7FF50299A000
unkown image
page readonly
clean
3291000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
2EBAEFAC000
unkown
page read and write
clean
7F550000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
BE0000
unkown
page read and write
clean
1590000
unkown image
page readonly
clean
2EBAEF4A000
unkown
page read and write
clean
565000
unkown
page read and write
clean
3690000
heap private
page read and write
clean
4A61000
unkown
page read and write
clean
10ABE7F000
stack
page read and write
clean
24726A4D000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
E00000
unkown image
page read and write
clean
BD0000
heap private
page read and write
clean
32B6000
unkown
page read and write
clean
7FF56B4DB000
unkown image
page readonly
clean
52A2000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
10089000
unkown image
page readonly
clean
BA6000
unkown
page read and write
clean
A7B000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
7FF51ADC0000
unkown image
page readonly
clean
D50000
unkown image
page readonly
clean
7FF56A277000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
7FF5992E2000
unkown image
page readonly
clean
52B8000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
32BC000
unkown
page read and write
clean
7FF599641000
unkown image
page readonly
clean
D90000
unkown image
page readonly
clean
3640000
unkown
page read and write
clean
2B84000
unkown image
page readonly
clean
3019000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
2EBAE6BF000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7DF57F3B0000
unkown image
page readonly
clean
530000
heap default
page read and write
clean
3A90000
unkown image
page readonly
clean
2B2000
unkown
page read and write
clean
7DF517E50000
unkown image
page readonly
clean
305B000
unkown image
page readonly
clean
29B9000
unkown image
page readonly
clean
7DF47E510000
unkown image
page readonly
clean
1410000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F650000
unkown image
page readonly
clean
7FF599661000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
24726950000
heap default
page read and write
clean
7DF57F3B0000
unkown image
page readonly
clean
46E000
stack
page read and write
clean
24726A70000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
3010000
unkown image
page readonly
clean
7FE10000
unkown image
page readonly
clean
B20000
unkown
page read and write
clean
10047000
unkown image
page readonly
clean
247268E0000
unkown image
page read and write
clean
30A7000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
3700000
heap private
page read and write
clean
7F652000
unkown image
page readonly
clean
3033000
unkown image
page readonly
clean
7F2E0000
unkown image
page readonly
clean
FFAA07F000
stack
page read and write
clean
7FF56B51A000
unkown image
page readonly
clean
562C000
stack
page read and write
clean
1B467EA0000
unkown image
page read and write
clean
7F660000
unkown image
page readonly
clean
9B0000
unkown image
page read and write
clean
2EBAE510000
unkown image
page readonly
clean
1B468028000
unkown
page read and write
clean
7FED0000
unkown image
page readonly
clean
3027000
unkown image
page readonly
clean
5C4000
unkown
page read and write
clean
30B4000
unkown image
page readonly
clean
6C0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
2A2F000
unkown image
page readonly
clean
460000
unkown
page read and write
clean
C60000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2B70000
heap private
page read and write
clean
30A7000
unkown
page read and write
clean
7DF580640000
unkown image
page readonly
clean
7F650000
unkown image
page readonly
clean
2EBAEF82000
unkown
page read and write
clean
7F8B2000
unkown image
page readonly
clean
7F420000
unkown image
page readonly
clean
12B0000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
10001000
unkown image
page execute read
clean
7DF580660000
unkown image
page readonly
clean
3052000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7F410000
unkown image
page readonly
clean
2AC3000
unkown image
page readonly
clean
400000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
3252000
unkown
page read and write
clean
4B60000
unkown
page read and write
clean
7FF56A28A000
unkown image
page readonly
clean
3027000
unkown image
page readonly
clean
2EBAEF85000
unkown
page read and write
clean
30B4000
unkown image
page readonly
clean
2A1F000
unkown image
page readonly
clean
4D23000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
1977F730000
unkown image
page readonly
clean
9160000
unkown
page read and write
clean
DE2F07F000
stack
page read and write
clean
30A7000
unkown
page read and write
clean
3003000
unkown image
page readonly
clean
FFA9FF8000
stack
page read and write
clean
7F6C0000
unkown image
page readonly
clean
E16000
unkown image
page readonly
clean
328C000
unkown
page read and write
clean
1B467EF0000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
4D1D000
unkown
page read and write
clean
7FF59967E000
unkown image
page readonly
clean
7FF502D3D000
unkown image
page readonly
clean
10000000
unkown image
page readonly
clean
2A95000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
7DF52FF42000
unkown image
page readonly
clean
2FCC000
unkown image
page readonly
clean
2EBAEF90000
unkown
page read and write
clean
32C8000
unkown
page read and write
clean
1B468100000
unkown
page read and write
clean
325F000
unkown
page read and write
clean
10084000
unkown image
page read and write
clean
7FF56A240000
unkown image
page readonly
clean
7FF56A294000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
1977F902000
unkown
page read and write
clean
305B000
unkown image
page readonly
clean
4BB1000
unkown
page read and write
clean
7FF56A2AE000
unkown image
page readonly
clean
5167000
unkown
page read and write
clean
2B0F000
unkown image
page readonly
clean
3033000
unkown image
page readonly
clean
1B467F10000
heap default
page read and write
clean
32C2000
unkown
page read and write
clean
7FF5996EC000
unkown image
page readonly
clean
5120000
unkown
page read and write
clean
2EBAE629000
unkown
page read and write
clean
1B468302000
unkown
page read and write
clean
50A0000
heap private
page read and write
clean
3281000
unkown
page read and write
clean
32B6000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
7FAD2000
unkown image
page readonly
clean
8D20000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
2EBAEF4A000
unkown
page read and write
clean
302D000
unkown image
page readonly
clean
7FF5997AF000
unkown image
page readonly
clean
32C2000
unkown
page read and write
clean
5420000
unkown
page read and write
clean
2FDA000
unkown image
page readonly
clean
7FF599683000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
32C2000
unkown
page read and write
clean
1977F900000
unkown
page read and write
clean
4BB1000
unkown
page read and write
clean
47D6000
unkown
page read and write
clean
7DF580642000
unkown image
page readonly
clean
DE0000
unkown image
page readonly
clean
3292000
unkown
page read and write
clean
338F000
stack
page read and write
clean
300C000
unkown image
page readonly
clean
7FF502D28000
unkown image
page readonly
clean
32B0000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
7FF502CC5000
unkown image
page readonly
clean
2EEF000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
1EAAF60F000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7F242000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7F2D0000
unkown image
page readonly
clean
7FF599754000
unkown image
page readonly
clean
7F8C0000
unkown image
page readonly
clean
4EB0000
unkown
page read and write
clean
A77000
unkown
page read and write
clean
2EBAEF85000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
1EAAF5C0000
heap private
page read and write
clean
4D2C000
unkown
page read and write
clean
2EBAEF9A000
unkown
page read and write
clean
7DF5AE910000
unkown image
page readonly
clean
7FE12000
unkown image
page readonly
clean
3080000
unkown
page read and write
clean
4C0000
heap default
page read and write
clean
24726A86000
unkown
page read and write
clean
2EBAE713000
unkown
page read and write
clean
A560000
unkown
page read and write
clean
10086000
unkown image
page read and write
clean
30A7000
unkown
page read and write
clean
10ABB7E000
stack
page read and write
clean
1977F829000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7FE20000
unkown image
page readonly
clean
81F8DF9000
stack
page read and write
clean
54CD000
stack
page read and write
clean
7FEF0000
unkown image
page readonly
clean
10FC000
unkown
page read and write
clean
7F240000
unkown image
page readonly
clean
DEEF17C000
stack
page read and write
clean
7F652000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
7FF51AEA4000
unkown image
page readonly
clean
52A9000
unkown
page read and write
clean
2EBAE6E8000
unkown
page read and write
clean
3025000
unkown image
page readonly
clean
30AE000
unkown
page read and write
clean
30A7000
unkown
page read and write
clean
30D3000
unkown image
page readonly
clean
7F660000
unkown image
page readonly
clean
30A5000
unkown image
page readonly
clean
7FF56A332000
unkown image
page readonly
clean
10F0000
unkown
page read and write
clean
2EBAE650000
unkown
page read and write
clean
7F412000
unkown image
page readonly
clean
7DF52FF50000
unkown image
page readonly
clean
7FE00000
unkown image
page readonly
clean
2A82000
unkown image
page readonly
clean
7FF56B54D000
unkown image
page readonly
clean
7FF56AD03000
unkown image
page readonly
clean
2A91000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
324B000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
2EBAEF5C000
unkown
page read and write
clean
4D1E000
unkown
page read and write
clean
30AE000
unkown
page read and write
clean
7FF502CF8000
unkown image
page readonly
clean
1977FA00000
unkown image
page readonly
clean
2EBAE4D0000
heap private
page read and write
clean
C3D000
unkown
page read and write
clean
329E000
unkown
page read and write
clean
4D23000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
5C4000
unkown
page read and write
clean
1B468213000
unkown
page read and write
clean
7DF52FF30000
unkown image
page readonly
clean
9E0000
unkown image
page readonly
clean
7F670000
unkown image
page readonly
clean
7FF56A2BD000
unkown image
page readonly
clean
1590000
unkown image
page readonly
clean
510000
unkown image
page readonly
clean
7FEE2000
unkown image
page readonly
clean
BB0000
unkown
page read and write
clean
DEEF0FE000
stack
page read and write
clean
930000
heap private
page read and write
clean
1977F84B000
unkown
page read and write
clean
7FF56B549000
unkown image
page readonly
clean
2AE0000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
32B0000
unkown
page read and write
clean
5446000
unkown
page read and write
clean
6960000
unkown
page read and write
clean
4EA0000
unkown
page read and write
clean
3019000
unkown image
page readonly
clean
24726A7A000
unkown
page read and write
clean
4A61000
unkown
page read and write
clean
7FF56A121000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
3390000
unkown image
page readonly
clean
32C8000
unkown
page read and write
clean
2EBAEF89000
unkown
page read and write
clean
7FF51AE14000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
7FF56B321000
unkown image
page readonly
clean
7FF56B52F000
unkown image
page readonly
clean
30D3000
unkown image
page readonly
clean
4A61000
unkown
page read and write
clean
7F2E2000
unkown image
page readonly
clean
30A7000
unkown
page read and write
clean
19780002000
unkown
page read and write
clean
There are 2062 hidden memdumps, click here to show them.