IOC Report

loading gif

Files

File Path
Type
Category
Malicious
41e0000.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
initial sample
malicious
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{0789B96C-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{1187F3F6-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{18677AF6-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2030A8D3-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{DF65E4B6-7A32-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{FCCA606F-7A32-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0789B96E-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0D9E988A-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0D9E988C-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{1187F3F8-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{18677AF8-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{18677AFA-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{18677AFC-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2030A8D5-7A33-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
modified
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{DF65E4B8-7A32-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FCCA6071-7A32-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FCCA6073-7A32-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{FCCA6075-7A32-11EC-90E5-ECF4BB570DC9}.dat
Composite Document File V2 Document, Cannot read section info
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dnserror[2]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\down[2]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\httpErrorPagesScripts[2]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\NewErrorPageTemplate[2]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\down[2]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\httpErrorPagesScripts[2]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dnserror[2]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\errorPageStrings[2]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\errorPageStrings[3]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\JavaDeployReg.log
ASCII text, with CRLF line terminators
modified
C:\Users\user\AppData\Local\Temp\~DF0DFA2E9BDD010B64.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF0FA6B24B5E37207F.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF315CA12AF44BEC6B.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF39FCB87D136FE619.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF46B8E1B94B04B19A.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF48BD7061296EE036.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF4FE5A93EA29006C1.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF516DF10BC96611FB.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF58FBD8594A2EF4B8.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DF9357A3070BEC43BD.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFBFD7520757EE7FA8.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFC42CCAFCE743BEA7.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFD008A2FC4BAFFBB5.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFE193DBC687A04650.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFF5EADCEC42896510.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFF636516E7CE20BDB.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFF8FC7C7342251397.TMP
data
dropped
C:\Users\user\AppData\Local\Temp\~DFF9AFC0207BE9256F.TMP
data
dropped
There are 63 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\System32\loaddll32.exe
loaddll32.exe "C:\Users\user\Desktop\41e0000.dll"
malicious
C:\Windows\SysWOW64\cmd.exe
cmd.exe /C rundll32.exe "C:\Users\user\Desktop\41e0000.dll",#1
malicious
C:\Windows\SysWOW64\regsvr32.exe
regsvr32.exe /s C:\Users\user\Desktop\41e0000.dll
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\user\Desktop\41e0000.dll",#1
malicious
C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\user\Desktop\41e0000.dll,DllRegisterServer
malicious
C:\Program Files\internet explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6712 CREDAT:17410 /prefetch:2
C:\Program Files\internet explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3520 CREDAT:17410 /prefetch:2
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3520 CREDAT:17414 /prefetch:2
C:\Program Files\internet explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:736 CREDAT:17410 /prefetch:2
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:736 CREDAT:17424 /prefetch:2
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:736 CREDAT:82948 /prefetch:2
C:\Program Files\internet explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5396 CREDAT:17410 /prefetch:2
C:\Program Files\internet explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5696 CREDAT:17410 /prefetch:2
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5696 CREDAT:82948 /prefetch:2
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5696 CREDAT:17422 /prefetch:2
C:\Program Files\internet explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6300 CREDAT:17410 /prefetch:2
There are 12 hidden processes, click here to show them.

URLs

Name
IP
Malicious
http://www.nnnnnn.casa/drew/gKT0MlKWG38_2/BMau4Oul/cEXy48BAqFiRWaKy3Hmuv38/3RbGiyCyh2/l1GuJ4tJh6rYVcx3P/CJUEexxeLegN/asUAVrcr8Os/6Heu8XQ9NwKS3r/RsXyOEKXh6_2Fk8FF_2Be/55GNIEO4rqxc9s7n/ukqCx_2FTaQH3qL/wkmTl5GH5xOHOuPfEe/BWDc8XF7Q/Aj_2BpbOenr9CVTaE_2B/XdQQRARWLLAVNpj0F5Y/DhKfHWf2CN42/6CU_2FsM/oq0.jlk
198.54.117.211
malicious
http://www.nnnnnn.casa/drew/aO1m2qbhzR/PyScSysfUMu7pQ56N/VjOvZCjAa_2F/1mYmXVIR1Zt/ZytsC9Ykmf_2Fu/iu9BdbHsH649dhw5xv4AE/uvJRR2pHSfmCL3mX/qVeQLGXMe6qLR0u/Wt56BLAa0ngbKPNWJl/aK0_2FM_2/B_2FgePTZg5J6aAm67BS/UxRCj8tcca1XehAjtUd/YhkFvH3YtE1Pt1_2BwmyD7/71NTX8ZhkOA2A/ekCIE_2B/Axlx1Zu2c2Fm5fnQIZEKkDy/m.jlk
198.54.117.218
malicious
http://www.nnnnnn.bar/
unknown
malicious
http://nnnnnn.casa/dre
unknown
malicious
http://nnnnnn.casa/drew/MeZUUlMrrzCrTTo/WRQsq4b7fIDR_2F2ui/K6Zod5HZQ/pReKsZQJuAIiqXNhcotr/27SAvb0lLGD4m4MtFqv/lionnkJutjVCo9Od2amHc6/vcomrgcHuTiyu/619f5X9g/OqezXl3127vZEQSYuxkxeXa/jXToImScJb/S5cz6j_2Fse9g4BcM/g7zL04pozIiS/_2B_2FN5VMo/ZAlJdIbg2SlHI1/d8no93Q9ma7mUN4PubD3o/tloZKX2Kmj/q.jlk
192.64.119.233
malicious
http://www.nnnnnn.bar/drew/2dHt0g0ZqxBpcdpMURTYE/SQxrvbTaCVQCWrs7/t263S3GMZiTKRdq/jvCj142v8i06uAQqd2/qg8dX3i_2/BKHu1GhglPcxgFFzOwll/mE2uKWB4mhjJIhyxTbk/_2F4mS5i039Fc7Qu_2Bekr/iQMweYWStlPtj/o4jxWrxk/qxdFPQJxNpwFwYEvbalIklB/QVqGaFPam2/C2rQw2gzAO6yhP_2F/dkOEushjYAis/iro3PbyNh/HGAz2Q_2F/i0Bn.jlk
198.54.117.216
malicious
http://nnnnnn.bar/drew/zBWev8_2BKC0Kv4cFyjxa4K/cXf7Mx9Yu7/tb380Z5Te_2FUr5sc/S5LVwKU9d2Ii/UAurGXKRWnS
unknown
malicious
http://nnnnnn.casa/drew/eLhw7nu1K6FTq/stO2JZ1h/n1J6MMYac0r5XgMvFx5tBMd/79pB3BpRVf/FsRkAxNC5o0VI8z66/
unknown
malicious
http://museumistat.bar/drew/4iG_2BGMJbK_2Fz5Q7E/OfnzhNXmjy08XAO4hBOEsU/_2FWo4bkEDMbg/aulR18j2/5zekh_
unknown
malicious
http://nnnnnn.bar/drew/2dHt0g0ZqxBpcdpMURTYE/SQxrvbTaCVQCWrs7/t263S3GMZiTKRdq/jvCj142v8i06uAQqd2/qg8dX3i_2/BKHu1GhglPcxgFFzOwll/mE2uKWB4mhjJIhyxTbk/_2F4mS5i039Fc7Qu_2Bekr/iQMweYWStlPtj/o4jxWrxk/qxdFPQJxNpwFwYEvbalIklB/QVqGaFPam2/C2rQw2gzAO6yhP_2F/dkOEushjYAis/iro3PbyNh/HGAz2Q_2F/i0Bn.jlk
162.255.119.177
malicious
http://nnnnnn.bar/drew/BVo0JfnyET/LCuKNvyhPvtrfvUnc/mObdgwXcgrZe/zSKG23eDqpN/HkpkBNiTxuWbBP/jak_2BPpM4WA8X4iaERBU/M_2BNnZd3vNVKd3D/snYYJ6wnfiJDJcL/92irgYdy9jdt7bObTQ/XthL2dpz7/ChmMUV7DDxy9eem0RAqA/QIh0WdqUZEhxu0X9j_2/F2lcfFWCQ7qV66laejvuEP/BvotBkMbOhSl5/Azm9mu3j/3M1GGyFrveB8gl1/M.jlk
162.255.119.177
malicious
http://www.nnnnnn.casa/drew/MeZUUlMrrzCrTTo/WRQsq4b7fIDR_2F2ui/K6Zod5HZQ/pReKsZQJuAIiqXNhcotr/27SAvb0lLGD4m4MtFqv/lionnkJutjVCo9Od2amHc6/vcomrgcHuTiyu/619f5X9g/OqezXl3127vZEQSYuxkxeXa/jXToImScJb/S5cz6j_2Fse9g4BcM/g7zL04pozIiS/_2B_2FN5VMo/ZAlJdIbg2SlHI1/d8no93Q9ma7mUN4PubD3o/tloZKX2Kmj/q.jlk
198.54.117.218
malicious
http://nnnnnn.casa/drew/ryTDvI_2B04X_/2F0aCkH0/_2BDKJR7A0jigzDfk2oUtkS/TzWw2n73nE/Dg4sUCgqU_2FAr5Pj/SDWuXQsskkRv/UNsc0mp28hP/x_2B_2FFq_2BHQ/F27_2FxKayrB3Cjy97Qhx/v8nlOT4QFPkzm4Ie/eAXoVlzzaxz8tgI/QR3P1Uk2I7ZbwimQXR/OfOcdTcUh/zjDQ5XVxR1cI0bdt8PDF/mZjcYY9L2vv_2BELjHj/Y7ijGd_2F3psmxh_2FsXvv/mj29lZ4n/h.jlk
192.64.119.233
malicious
http://nnnnnn.bar
unknown
malicious
http://museumistat.bar
unknown
malicious
http://www.nnnnnn.casa/nnnnnn.casa5
unknown
malicious
http://www.nnnnnn.bar/drew/aOCcLYeYaTiAEXOHR/rDcm23Ra7HRA/Ll0tIfgTYdg/Ovc937_2BZJhqR/_2B9nyoyx5GXZFgCkf0O8/4fSjQKFRypPXeHUM/2VwdsjoRmoerb1g/N6r4i0t9F_2FA66_2F/CrVcoXDX5/D2kSFR1VHNVLT3GtdrVC/2IzirCs34EDnFYvNPWY/fYM6gayTm5L9yWZL2Vx5Nc/R0anH3ZYvesfP/30v94E34/TL40v70SibYCobhKHsZEJ7c/OLRlO.jlk
198.54.117.211
malicious
http://www.nnnnnn.bar/drew/6ktn4xRUX5JQALxIWi_2FJ/ICUDlvTaNKSMK/d1ei2DU0/YfFfMIO56w8ZRW_2Fc4zkGn/yDjRWn9P_2/BB0g0D98WIpaFL2hK/UQH6jhZN2tpm/ORHiRY8gQ2t/UYqiaMMUPs7I05/R0awjzx8aAAERc7YB4ys0/Q5QjXt_2F1mCoLne/245MRunYvrY5c2x/MdnxTtnmOaN2uVZew3/1GHuZOvuL/Rb_2Bfqw7L_2BYB_2FWD/UIZ_2FNd7aPjE9V_2B_/2BC4BHu.jlk
198.54.117.210
malicious
http://www.nnnnnn.bar/drew/2dHt0g0ZqxBpcdpMURTYE/SQxrvbTaCVQCWrs7/t263S3GMZiTKRdq/jvCj142v8i06uAQqd2
unknown
malicious
http://nnnnnn.bar/drew/2dHt0g0ZxBpcdpMURTYE/SQxrvbTaCVQCWrs7/t63S3GMZiTKRdq/jvCj1
unknown
malicious
http://museumistat.bar/drew/ammuwrNq_/2BqepYvRFV9AqHabqa_2/F1YKJqeJLi3jEjiQLE2/U5afXyZSkYxg9zlQghLCU
unknown
malicious
http://www.nnnnnn.casa/drew/0j7ZvX6Yf_2Ff4PZOIhk8/4LwtJMzbxxuFilPr/sSF9SqjkHo3YN93/N6KmwTforklWI7En4U/8dXb3jJiK/zds9L6K3nZZ7oSB_2FRe/J_2F81pI4nTjSy_2FLT/d8Gf2VlN_2BGJ3KTHQhxNU/PK1lsXUZsV6B7/COUqQ3wX/120xfpxJZhcCTcDgyQOQ47a/2BRczUrfQU/ppPj1HI3Q0OhFDCjv/4_2Br67LS5pR/l5aWeKuI6uG/ni53ezQ1izt/Yu.jlk
198.54.117.216
malicious
http://nnnnnn.casa/drew/dRBCohQjpH2R4ZrxcN/VH3wq9yT2/VmLml8GJ5aPaDzoCDj8x/EmzpTBuP5mftF8uNtQM/TnqYzSdCW3EjFkfnBVLNrh/u6iSfeXnIxEc4/iOpnKu8_/2B6ER0J96Uzbim1bUMtmrJq/DMYICZNGt5/BH1k0iCPsGbgr2jmq/LZISYUDUDQ3s/sBmfD_2B_2F/KeRIfCDg82xxJ1/5QkNXVsBvP5NPb2r4nyOG/rCLwK7C8JPaslI4x/C4pqB4g_2/B.jlk
192.64.119.233
malicious
http://www.nnnnnn.casa/drew/dRBCohQjpH2R4ZrxcN/VH3wq9yT2/VmLml8GJ5aPaDzoCDj8x/EmzpTBuP5mftF8uNtQM/TnqYzSdCW3EjFkfnBVLNrh/u6iSfeXnIxEc4/iOpnKu8_/2B6ER0J96Uzbim1bUMtmrJq/DMYICZNGt5/BH1k0iCPsGbgr2jmq/LZISYUDUDQ3s/sBmfD_2B_2F/KeRIfCDg82xxJ1/5QkNXVsBvP5NPb2r4nyOG/rCLwK7C8JPaslI4x/C4pqB4g_2/B.jlk
198.54.117.211
malicious
http://nnnnnn.bar/drew/b2eob5aE7jJqRFK/rA9TqIOSBzTkqwZ1zv/iNhLsTUKi/a_2FZiiuvYhXdLNrvbCh/8PEJcafughe
unknown
malicious
http://museumistat.bar/drew/XMU8iofODBy1lrN0vdkRj/PLODd_2Bhig1hkqI/Wigiwyx9ltM_2Fd/r36Wr8ytAbQS3wDa6
unknown
malicious
http://nnnnnn.casa/drew/0j7ZvX6Yf_2Ff4PZOIhk8/4LwtJMzbxxuFilPr/sSF9SqjkHo3YN93/N6KmwTforklWI7En4U/8dXb3jJiK/zds9L6K3nZZ7oSB_2FRe/J_2F81pI4nTjSy_2FLT/d8Gf2VlN_2BGJ3KTHQhxNU/PK1lsXUZsV6B7/COUqQ3wX/120xfpxJZhcCTcDgyQOQ47a/2BRczUrfQU/ppPj1HI3Q0OhFDCjv/4_2Br67LS5pR/l5aWeKuI6uG/ni53ezQ1izt/Yu.jlk
192.64.119.233
malicious
http://museumistat.bar/
unknown
malicious
http://museumistat.bar/drew/tizLy41OuYHIsTgBNj/0Uu4NPNlH/3sO8ziJptuwkpagoG2Xn/2Wzxx3rAW_2F6s4Zntp/4O
unknown
malicious
http://nnnnnn.bar/drew/6ktn4xRUX5JQALxIWi_2FJ/ICUDlvTaNKSMK/d1ei2DU0/YfFfMIO56w8ZRW_2Fc4zkGn/yDjRWn9
unknown
malicious
http://www.nnnnnn.casa/drew/eLhw7nu1K6FTq/stO2JZ1h/n1J6MMYac0r5XgMvFx5tBMd/79pB3BpRVf/FsRkAxNC5o0VI8
unknown
malicious
http://www.nnnnnn.casa/drew/ryTDvI_2B04X_/2F0aCkH0/_2BDKJR7A0jigzDfk2oUtkS/TzWw2n73nE/Dg4sUCgqU_2FAr5Pj/SDWuXQsskkRv/UNsc0mp28hP/x_2B_2FFq_2BHQ/F27_2FxKayrB3Cjy97Qhx/v8nlOT4QFPkzm4Ie/eAXoVlzzaxz8tgI/QR3P1Uk2I7ZbwimQXR/OfOcdTcUh/zjDQ5XVxR1cI0bdt8PDF/mZjcYY9L2vv_2BELjHj/Y7ijGd_2F3psmxh_2FsXvv/mj29lZ4n/h.jlk
198.54.117.217
malicious
http://www.nnnnnn.bar/drew/BVo0JfnyET/LCuKNvyhPvtrfvUnc/mObdgwXcgrZe/zSKG23eDqpN/HkpkBNiTxuWbBP/jak_2BPpM4WA8X4iaERBU/M_2BNnZd3vNVKd3D/snYYJ6wnfiJDJcL/92irgYdy9jdt7bObTQ/XthL2dpz7/ChmMUV7DDxy9eem0RAqA/QIh0WdqUZEhxu0X9j_2/F2lcfFWCQ7qV66laejvuEP/BvotBkMbOhSl5/Azm9mu3j/3M1GGyFrveB8gl1/M.jlk
198.54.117.210
malicious
http://nnnnnn.casa
unknown
malicious
http://nnnnnn.bar/drew/2dHt0g0ZqxBpcdpMURTYE/SQxrvbTaCVQCWrs7/t263S3GMZiTKRdq/jvCj142v8i06uAQqd2/qg8
unknown
malicious
http://www.nnnnnn.casa/drew/ryTDvI_2B04X_/2F0aCkH0/_2BDKJR7A0jigzDfk2oUtkS/TzWw2n73nE/Dg4sUCgqU_2FAr
unknown
malicious
http://nnnnnn.casa/drew/0j7ZvX6Yf_2Ff4PZOIhk8/4LwtJMzbxxuFilPr/sSF9SqjkHo3YN93/N6KmwTforklWI7En4U/8d
unknown
malicious
http://www.nnnnnn.bar/drew/b2eob5aE7jJqRFK/rA9TqIOSBzTkqwZ1zv/iNhLsTUKi/a_2FZiiuvYhXdLNrvbCh/8PEJcafughemPo02ekn/fOGpqXigagMOIeoi2whU2K/VcKgvpNbHoVGC/D5UC9izH/aHNIhYwGohjos0FQ6xviFWf/oAZv_2Bi_2/FQiT5Hhg78q185o5l/RS9K9tlnC9cl/irJKo_2Bc3F/Cv7H0DN6I4ItJ9/fG_2BK5HpVFIp2pJnaZ2D/aV8ATJwwcAP/_2Bs.jlk
198.54.117.215
malicious
http://nnnnnn.bar/drew/aOCcLYeYaTiAEXOHR/rDcm23Ra7HRA/Ll0tIfgTYdg/Ovc937_2BZJhqR/_2B9nyoyx5GXZFgCkf0
unknown
malicious
http://www.nnnnnn.casa/
unknown
malicious
http://nnnnnn.casa/drew/dRBCohQjpH2R4ZrxcN/VH3wq9yT2/VmLml8GJ5aPaDzoCDj8x/EmzpTBuP5mftF8uNtQM/TnqYzS
unknown
malicious
http://museumistat.bar/icies
unknown
malicious
http://nnnnnn.bar/drew/b2eob5aE7jJqRFK/rA9TqIOSBzTkqwZ1zv/iNhLsTUKi/a_2FZiiuvYhXdLNrvbCh/8PEJcafughemPo02ekn/fOGpqXigagMOIeoi2whU2K/VcKgvpNbHoVGC/D5UC9izH/aHNIhYwGohjos0FQ6xviFWf/oAZv_2Bi_2/FQiT5Hhg78q185o5l/RS9K9tlnC9cl/irJKo_2Bc3F/Cv7H0DN6I4ItJ9/fG_2BK5HpVFIp2pJnaZ2D/aV8ATJwwcAP/_2Bs.jlk
162.255.119.177
malicious
http://www.nnnnnn.bar/g
unknown
malicious
http://www.nnnnnn.bar/f
unknown
malicious
http://www.nnnnnn.bar/wl
unknown
malicious
http://www.nnnnnn.bar/drew/zBWev8_2BKC0Kv4cFyjxa4K/cXf7Mx9Yu7/tb380Z5Te_2FUr5sc/S5LVwKU9d2Ii/UAurGXKRWnS/sNuzGwvgFbGuiX/cYwNdjWOtQd_2Fg50Gq6_/2FjOiJCVbSj9xwyh/G_2BXTVzOZQxb5p/q_2BNRYwk1baG5TnLz/jbdiar_2B/vITHroP6B_2F_2BAIZUm/KtOtUG2G23eAdJDsUmd/Q0nO6sNJelOrTMnHEyXMkV/0ho4YTGcPihXz/P5SVPgNqDh/MwH.jlk
198.54.117.216
malicious
http://www.nnnnnn.bar/drew/zBWev8_2BKC0Kv4cFyjxa4K/cXf7Mx9Yu7/tb380Z5Te_2FUr5sc/S5LVwKU9d2Ii/UAurGXK
unknown
malicious
http://nnnnnn.casa/drew/gKT0MlKWG38_2/BMau4Oul/cEXy48BAqFiRWaKy3Hmuv38/3RbGiyCyh2/l1GuJ4tJh6rYVcx3P/CJUEexxeLegN/asUAVrcr8Os/6Heu8XQ9NwKS3r/RsXyOEKXh6_2Fk8FF_2Be/55GNIEO4rqxc9s7n/ukqCx_2FTaQH3qL/wkmTl5GH5xOHOuPfEe/BWDc8XF7Q/Aj_2BpbOenr9CVTaE_2B/XdQQRARWLLAVNpj0F5Y/DhKfHWf2CN42/6CU_2FsM/oq0.jlk
192.64.119.233
malicious
http://nnnnnn.bar/drew/6ktn4xRUX5JQALxIWi_2FJ/ICUDlvTaNKSMK/d1ei2DU0/YfFfMIO56w8ZRW_2Fc4zkGn/yDjRWn9P_2/BB0g0D98WIpaFL2hK/UQH6jhZN2tpm/ORHiRY8gQ2t/UYqiaMMUPs7I05/R0awjzx8aAAERc7YB4ys0/Q5QjXt_2F1mCoLne/245MRunYvrY5c2x/MdnxTtnmOaN2uVZew3/1GHuZOvuL/Rb_2Bfqw7L_2BYB_2FWD/UIZ_2FNd7aPjE9V_2B_/2BC4BHu.jlk
162.255.119.177
malicious
http://nnnnnn.casa/drew/aO1m2qbhzR/PyScSysfUMu7pQ56N/VjOvZCjAa_2F/1mYmXVIR1Zt/ZytsC9Ykmf_2Fu/iu9BdbHsH649dhw5xv4AE/uvJRR2pHSfmCL3mX/qVeQLGXMe6qLR0u/Wt56BLAa0ngbKPNWJl/aK0_2FM_2/B_2FgePTZg5J6aAm67BS/UxRCj8tcca1XehAjtUd/YhkFvH3YtE1Pt1_2BwmyD7/71NTX8ZhkOA2A/ekCIE_2B/Axlx1Zu2c2Fm5fnQIZEKkDy/m.jlk
192.64.119.233
malicious
http://nnnnnn.casa/drew/gKT0MlKWG38_2/BMau4Oul/cEXy48BAqFiRWaKy3Hmuv38/3RbGiyCyh2/l1GuJ4tJh6rYVcx3P/
unknown
malicious
http://nnnnnn.casa/drew/ryTDvI_2B04X_/2F0aCkH0/_2BDKJR7A0jigzDfk2oUtkS/TzWw2n73nE/Dg4sUCgqU_2FAr5Pj/
unknown
malicious
http://nnnnnn.bar/drew/BVo0JfnyET/LCuKNvyhPvtrfvUnc/mObdgwXcgrZe/zSKG23eDqpN/HkpkBNiTxuWbBP/jak_2BPp
unknown
malicious
http://nnnnnn.bar/drew/aOCcLYeYaTiAEXOHR/rDcm23Ra7HRA/Ll0tIfgTYdg/Ovc937_2BZJhqR/_2B9nyoyx5GXZFgCkf0O8/4fSjQKFRypPXeHUM/2VwdsjoRmoerb1g/N6r4i0t9F_2FA66_2F/CrVcoXDX5/D2kSFR1VHNVLT3GtdrVC/2IzirCs34EDnFYvNPWY/fYM6gayTm5L9yWZL2Vx5Nc/R0anH3ZYvesfP/30v94E34/TL40v70SibYCobhKHsZEJ7c/OLRlO.jlk
162.255.119.177
malicious
http://nnnnnn.bar/drew/zBWev8_2BKC0Kv4cFyjxa4K/cXf7Mx9Yu7/tb380Z5Te_2FUr5sc/S5LVwKU9d2Ii/UAurGXKRWnS/sNuzGwvgFbGuiX/cYwNdjWOtQd_2Fg50Gq6_/2FjOiJCVbSj9xwyh/G_2BXTVzOZQxb5p/q_2BNRYwk1baG5TnLz/jbdiar_2B/vITHroP6B_2F_2BAIZUm/KtOtUG2G23eAdJDsUmd/Q0nO6sNJelOrTMnHEyXMkV/0ho4YTGcPihXz/P5SVPgNqDh/MwH.jlk
162.255.119.177
malicious
http://www.amazon.com/
unknown
http://www.twitter.com/
unknown
http://www.reddit.com/
unknown
http://www.nytimes.com/
unknown
http://www.nnnnnn.casaw/eLhw7nu1K6FTq/stO2JZ1h/n1J6MMYac0r5XgMvFx5tBMd/79pB3BpRVf/FsRkAxNC5o0VI8z66/
unknown
http://www.youtube.com/
unknown
http://www.wikipedia.com/
unknown
http://www.live.com/
unknown
http://www.google.com/
unknown
There are 55 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
nnnnnn.bar
162.255.119.177
malicious
nnnnnn.casa
192.64.119.233
malicious
museumistat.bar
unknown
malicious
www.nnnnnn.casa
unknown
malicious
www.nnnnnn.bar
unknown
malicious
parkingpage.namecheap.com
198.54.117.216

IPs

IP
Domain
Country
Malicious
198.54.117.217
unknown
United States
malicious
198.54.117.218
unknown
United States
malicious
198.54.117.210
unknown
United States
malicious
198.54.117.211
unknown
United States
malicious
192.64.119.233
nnnnnn.casa
United States
malicious
162.255.119.177
nnnnnn.bar
United States
malicious
198.54.117.215
unknown
United States
malicious
192.168.2.1
unknown
unknown
198.54.117.216
parkingpage.namecheap.com
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{DF65E4B6-7A32-11EC-90E5-ECF4BB570DC9}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
CVListPingLastYMD
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
CVListPingBitmap
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\BrowserEmulation
CVListPingRandomizedBitmap
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{FCCA606F-7A32-11EC-90E5-ECF4BB570DC9}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{0789B96C-7A33-11EC-90E5-ECF4BB570DC9}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{1187F3F6-7A33-11EC-90E5-ECF4BB570DC9}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{18677AF6-7A33-11EC-90E5-ECF4BB570DC9}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Window_Placement
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AdminActive
{2030A8D3-7A33-11EC-90E5-ECF4BB570DC9}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}\iexplore
Blocked
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Count
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
Time
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9}\iexplore
LoadTimeArray
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
DecayDateQueue
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage
LastProcessed
There are 139 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
5048000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
4F68000
heap private
page read and write
malicious
4C78000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
5048000
heap private
page read and write
malicious
16E8000
heap private
page read and write
malicious
7E0000
unkown
page read and write
C60000
unkown
page read and write
7FF59154E000
unkown image
page readonly
5C0000
unkown
page read and write
B12000
unkown
page read and write
172A407E000
unkown
page read and write
BA0000
unkown image
page readonly
4630000
unkown
page read and write
395A000
stack
page read and write
4630000
unkown
page read and write
29F9DA51000
unkown
page read and write
7FF4FC99C000
unkown image
page readonly
32DF000
stack
page read and write
1C35A7B000
stack
page read and write
1CED9A8E000
unkown
page read and write
7E0000
unkown
page read and write
1D9EC940000
unkown image
page readonly
4630000
unkown
page read and write
ECE3DF7000
stack
page read and write
29F9DA4F000
unkown
page read and write
172A404F000
unkown
page read and write
2602000
unkown image
page readonly
C60000
unkown
page read and write
46CB000
stack
page read and write
7E0000
unkown
page read and write
2DFC2290000
unkown image
page readonly
5C0000
unkown
page read and write
2522EA00000
unkown image
page readonly
7FF5913AF000
unkown image
page readonly
1CEDEFA0000
unkown
page read and write
2522E829000
unkown
page read and write
665000
unkown
page read and write
1CA15402000
unkown
page read and write
7DF5FBEE0000
unkown image
page readonly
1CA14E65000
unkown
page read and write
1D9EC9BF000
unkown
page read and write
7FF50F4F3000
unkown image
page readonly
2DFC2453000
unkown
page read and write
2D97000
unkown
page read and write
1CEDA318000
unkown
page read and write
5C0000
unkown
page read and write
C15D9F9000
stack
page read and write
51192FD000
stack
page read and write
7FF548184000
unkown image
page readonly
2874000
unkown image
page readonly
1D9017A0000
unkown image
page readonly
B2B000
unkown
page read and write
7FF50000
unkown image
page readonly
7FF50F4E2000
unkown image
page readonly
7D1000
unkown
page read and write
7C5000
unkown
page read and write
5C0000
unkown
page read and write
7DF5A6E60000
unkown image
page readonly
7FE40000
unkown image
page readonly
7FF585F95000
unkown image
page readonly
8E1000
unkown image
page execute read
7FF591530000
unkown image
page readonly
7FF57EEFE000
unkown image
page readonly
1CA14E55000
unkown
page read and write
7E0000
unkown
page read and write
2D97000
unkown
page read and write
2DFC2488000
unkown
page read and write
1D901802000
unkown
page read and write
8F0000
heap private
page read and write
29B000
unkown
page read and write
5C0000
unkown
page read and write
7FF4FCA7B000
unkown image
page readonly
450D000
stack
page read and write
10D9000
heap private
page read and write
ECE3CF7000
stack
page read and write
12C0000
heap private
page read and write
7E0000
unkown
page read and write
4C3F000
stack
page read and write
1CED9E10000
unkown image
page readonly
D9BD4FF000
stack
page read and write
40C0000
heap private
page read and write
ECE3F7F000
stack
page read and write
7FF59154B000
unkown image
page readonly
652000
unkown
page read and write
52CE000
stack
page read and write
7E0000
unkown
page read and write
1CEDA1F3000
unkown
page read and write
29F9E389000
unkown
page read and write
7E0000
unkown
page read and write
A2D000
stack
page read and write
7FF5E62F7000
unkown image
page readonly
7FF4ECA48000
unkown image
page readonly
C60000
unkown
page read and write
7E0000
unkown
page read and write
7FF50F307000
unkown image
page readonly
2A97000
unkown image
page readonly
7FF4ECF5B000
unkown image
page readonly
7E0000
unkown
page read and write
7FF571B5B000
unkown image
page readonly
7FF5E65C0000
unkown image
page readonly
23F74E98000
heap default
page read and write
29F9E38C000
unkown
page read and write
C60000
unkown
page read and write
C60000
unkown
page read and write
51CE000
stack
page read and write
27CC000
unkown image
page readonly
1CA14E56000
unkown
page read and write
29F9DAD8000
unkown
page read and write
7FF5713B4000
unkown image
page readonly
29F9E3A4000
unkown
page read and write
454E000
stack
page read and write
351D000
stack
page read and write
1CEDA302000
unkown
page read and write
1CEDF0C0000
unkown
page read and write
29F9E312000
unkown
page read and write
5118EFF000
stack
page read and write
7FF58DBA9000
unkown image
page readonly
7FF585EF0000
unkown image
page readonly
7FF4FC851000
unkown image
page readonly
7FF58F51E000
unkown image
page readonly
5C0000
unkown
page read and write
9DC000
stack
page read and write
D9BD57F000
stack
page read and write
297000
unkown
page read and write
7FF5480E3000
unkown image
page readonly
2DFC2508000
unkown
page read and write
EF445FF000
stack
page read and write
38C000
unkown
page read and write
C60000
unkown
page read and write
640000
unkown
page read and write
1DBA3013000
unkown
page read and write
4630000
unkown
page read and write
2DFC244E000
unkown
page read and write
7FAD0000
unkown image
page readonly
7DF5A6E52000
unkown image
page readonly
29C0000
unkown image
page readonly
5C0000
unkown
page read and write
7DF5FBEF2000
unkown image
page readonly
4630000
unkown
page read and write
1D9ECBA0000
unkown image
page readonly
7E0000
unkown
page read and write
7FF5E6382000
unkown image
page readonly
4C7B000
heap private
page read and write
4630000
unkown
page read and write
1DBA3650000
unkown image
page readonly
29F9E394000
unkown
page read and write
7FF50EDB6000
unkown image
page readonly
2522EC00000
unkown image
page readonly
7FF4FC2C6000
unkown image
page readonly
7E0000
unkown
page read and write
5C0000
unkown
page read and write
4630000
unkown
page read and write
25FB000
unkown image
page readonly
1CEDF22C000
unkown
page read and write
1CED9A92000
unkown
page read and write
7DC000
unkown
page read and write
1DBA3054000
unkown
page read and write
2DFC2449000
unkown
page read and write
2A81000
unkown image
page readonly
C70000
unkown image
page read and write
4630000
unkown
page read and write
7FF50F0D8000
unkown image
page readonly
7FF58D739000
unkown image
page readonly
1CEDEFB0000
unkown
page read and write
14EC000
heap private
page read and write
23F74FA0000
unkown image
page readonly
4C7B000
heap private
page read and write
B7A000
unkown image
page read and write
2522E84A000
unkown
page read and write
7FF4ECD5E000
unkown image
page readonly
1CED98D0000
unkown image
page readonly
29F9E390000
unkown
page read and write
29F9E389000
unkown
page read and write
4C7D000
heap private
page read and write
7DF567E42000
unkown image
page readonly
7E0000
unkown
page read and write
7FF4FC987000
unkown image
page readonly
7FF585FEF000
unkown image
page readonly
7FF5913B5000
unkown image
page readonly
29F9E377000
unkown
page read and write
7FF58DA5E000
unkown image
page readonly
222E8CF0000
unkown image
page readonly
1D9EC9AE000
unkown
page read and write
23F74E70000
unkown
page read and write
7FF58DB63000
unkown image
page readonly
4C6E000
heap private
page read and write
AF0000
unkown
page read and write
B79000
unkown image
page readonly
B71000
unkown image
page execute read
2A8C000
unkown image
page readonly
4E6A000
heap private
page read and write
1DBA306A000
unkown
page read and write
7E0000
unkown
page read and write
7FF4FC9C9000
unkown image
page readonly
1DBA303C000
unkown
page read and write
500A000
stack
page read and write
2DFC22B0000
heap default
page read and write
275D000
unkown image
page readonly
7FF58F495000
unkown image
page readonly
7D1000
unkown
page read and write
7C1000
unkown
page read and write
7FF50F5FB000
unkown image
page readonly
29F9E39A000
unkown
page read and write
7DF5A4E32000
unkown image
page readonly
2DFC2250000
heap private
page read and write
1C35279000
stack
page read and write
29F9E382000
unkown
page read and write
1D9EC991000
unkown
page read and write
29F9D910000
unkown image
page readonly
7FF5E627A000
unkown image
page readonly
963847D000
stack
page read and write
7E0000
unkown
page read and write
1CA14E68000
unkown
page read and write
16EB000
heap private
page read and write
7DF5A3580000
unkown image
page readonly
1CA14E7F000
unkown
page read and write
29F9DA37000
unkown
page read and write
5C0000
unkown
page read and write
8C0000
unkown image
page readonly
7FF57F017000
unkown image
page readonly
7FF571B28000
unkown image
page readonly
4630000
unkown
page read and write
29B9000
unkown image
page readonly
7FF57EED3000
unkown image
page readonly
7FF58ED80000
unkown image
page readonly
7FF50F3EE000
unkown image
page readonly
4E4C000
heap private
page read and write
7DF59B930000
unkown image
page readonly
7FF58F4EF000
unkown image
page readonly
4B40000
unkown
page read and write
222E8ECA000
unkown
page read and write
10001000
unkown image
page execute read
5C0000
unkown
page read and write
4630000
unkown
page read and write
508F000
stack
page read and write
7E0000
unkown
page read and write
2D4D000
unkown
page read and write
7FF42000
unkown image
page readonly
29F9E38E000
unkown
page read and write
4630000
unkown
page read and write
23F74F03000
unkown
page read and write
4630000
heap private
page read and write
2522E650000
unkown image
page readonly
7DF567E50000
unkown image
page readonly
1CEDF0D0000
unkown
page read and write
2BF0000
unkown
page read and write
7DF5A4E30000
unkown image
page readonly
46EA000
unkown image
page read and write
1CED9A9C000
unkown
page read and write
7FF5520FB000
unkown image
page readonly
10000000
unkown image
page readonly
7DF594A00000
unkown image
page readonly
28C9000
unkown image
page readonly
7E0000
unkown
page read and write
B370D6E000
stack
page read and write
7FF42000
unkown image
page readonly
1CA14F02000
unkown
page read and write
29F9E803000
unkown
page read and write
2A22000
unkown image
page readonly
ECE387C000
unkown
page read and write
7FF4FC9A8000
unkown image
page readonly
7DF5A3572000
unkown image
page readonly
7FF57F0C8000
unkown image
page readonly
7E0000
unkown
page read and write
ECE407C000
stack
page read and write
690000
unkown image
page readonly
7FF5480CD000
unkown image
page readonly
1CA15380000
unkown image
page readonly
2978000
unkown image
page readonly
2D79000
unkown
page read and write
29F9E38C000
unkown
page read and write
7FF4ECE77000
unkown image
page readonly
1D9EC920000
unkown image
page readonly
29F9DCD0000
unkown image
page readonly
64D687E000
stack
page read and write
4630000
unkown
page read and write
639000
unkown
page read and write
7FF50F3C3000
unkown image
page readonly
7FF4FCA74000
unkown image
page readonly
7E0000
unkown
page read and write
2522E800000
unkown
page read and write
7FF57F05A000
unkown image
page readonly
23F74EDD000
unkown
page read and write
4AFE000
stack
page read and write
7FF591023000
unkown image
page readonly
29F9DA3C000
unkown
page read and write
7E0000
unkown
page read and write
61A000
unkown
page read and write
7DF524EF0000
unkown image
page readonly
7D0000
heap private
page read and write
7E0000
unkown
page read and write
4630000
unkown
page read and write
7FF57F053000
unkown image
page readonly
7FAC2000
unkown image
page readonly
7FF4ECEA9000
unkown image
page readonly
5C0000
unkown
page read and write
1D901883000
unkown
page read and write
1D901913000
unkown
page read and write
963807F000
stack
page read and write
7FF5520B4000
unkown image
page readonly
7FF58F4FB000
unkown image
page readonly
7FF4ECF40000
unkown image
page readonly
7FF4ECEBA000
unkown image
page readonly
7FF59151F000
unkown image
page readonly
7DF5A4E40000
unkown image
page readonly
C60000
unkown
page read and write
222E8E00000
unkown
page read and write
2D6B000
unkown
page read and write
7FF4FCA6D000
unkown image
page readonly
2522E902000
unkown
page read and write
B23000
unkown
page read and write
160000
unkown image
page read and write
7FF4FCA8D000
unkown image
page readonly
2700000
unkown image
page readonly
2D00000
heap default
page read and write
1CED9B07000
unkown
page read and write
29F9E38C000
unkown
page read and write
4530000
unkown
page read and write
7DF512380000
unkown image
page readonly
7FF5E63AC000
unkown image
page readonly
7FF50F2FD000
unkown image
page readonly
29F9E385000
unkown
page read and write
2D0A000
heap default
page read and write
7DC000
unkown
page read and write
29F9DA13000
unkown
page read and write
25AA000
unkown image
page readonly
1CA14C00000
unkown image
page readonly
10001000
unkown image
page execute read
7FF591457000
unkown image
page readonly
7FF57EBD3000
unkown image
page readonly
5C0000
unkown
page read and write
29F9E800000
unkown
page read and write
7C2000
unkown
page read and write
725000
heap default
page read and write
28C2000
unkown image
page readonly
18422BB0000
unkown
page read and write
1DBA2F10000
heap private
page read and write
504D000
heap private
page read and write
ECE397E000
stack
page read and write
222E8E29000
unkown
page read and write
286A000
unkown image
page readonly
2D66000
heap default
page read and write
1CA14E70000
unkown
page read and write
7FF57F01C000
unkown image
page readonly
7FF4FC53F000
unkown image
page readonly
23F74EDD000
unkown
page read and write
29F9E39A000
unkown
page read and write
7DF45B960000
unkown image
page readonly
7D8000
unkown
page read and write
27FC000
unkown image
page readonly
720000
heap default
page read and write
7FF58DC6F000
unkown image
page readonly
4630000
unkown
page read and write
7FF58F500000
unkown image
page readonly
28C5000
unkown image
page readonly
1CEDF2DF000
unkown
page read and write
51191FC000
stack
page read and write
7E0000
unkown
page read and write
47DD000
stack
page read and write
7FF57F0F4000
unkown image
page readonly
B2D59DB000
unkown
page read and write
1C3567B000
stack
page read and write
1CEDEE60000
unkown
page read and write
7C5000
unkown
page read and write
10000000
unkown image
page readonly
7FF58DB88000
unkown image
page readonly
4630000
unkown
page read and write
29F9D8F0000
unkown image
page read and write
29D0000
unkown image
page readonly
7FF58DBD5000
unkown image
page readonly
2A2D000
unkown image
page readonly
7FF50F5BF000
unkown image
page readonly
4630000
unkown
page read and write
B0D000
unkown
page read and write
18423402000
unkown
page read and write
5C0000
unkown
page read and write
B14000
unkown
page read and write
7FF55253B000
unkown image
page readonly
721227E000
stack
page read and write
172A4002000
unkown
page read and write
7FF52000
unkown image
page readonly
7FF4ECF6F000
unkown image
page readonly
26D3000
unkown image
page readonly
2522E813000
unkown
page read and write
7FF57F03D000
unkown image
page readonly
49488FC000
stack
page read and write
5C0000
unkown
page read and write
7FF5524A5000
unkown image
page readonly
7FF57197D000
unkown image
page readonly
C60000
unkown
page read and write
18422C02000
unkown
page read and write
963857E000
stack
page read and write
1C3557C000
stack
page read and write
7FF548105000
unkown image
page readonly
1CEDF254000
unkown
page read and write
1CEDF0E0000
unkown
page read and write
16EB000
heap private
page read and write
222E8D00000
unkown image
page readonly
45A000
unkown
page read and write
7FF50F284000
unkown image
page readonly
2978000
unkown image
page readonly
7C6000
unkown
page read and write
75A000
heap default
page read and write
1CEDA359000
unkown
page read and write
4630000
unkown
page read and write
7FF5E653A000
unkown image
page readonly
7B8000
unkown
page read and write
58C000
unkown
page read and write
7DF512390000
unkown image
page readonly
7FF50F535000
unkown image
page readonly
7FF58F1E3000
unkown image
page readonly
29F9E37F000
unkown
page read and write
7DF502880000
unkown image
page readonly
7FF5E63BF000
unkown image
page readonly
49DE000
stack
page read and write
B23000
unkown
page read and write
AF0000
unkown
page read and write
7FF5521FF000
unkown image
page readonly
B7C000
unkown image
page readonly
4630000
unkown
page read and write
29F9E393000
unkown
page read and write
286A000
unkown image
page readonly
2A8C000
unkown image
page readonly
7DF5A3560000
unkown image
page readonly
C60000
unkown
page read and write
7FF4FCA8B000
unkown image
page readonly
29F9E3D1000
unkown
page read and write
1CEDF200000
unkown
page read and write
60B000
unkown
page read and write
1CA14BD0000
heap private
page read and write
7FF591323000
unkown image
page readonly
7FF4ECD0D000
unkown image
page readonly
7FF57F049000
unkown image
page readonly
29F9E180000
unkown
page read and write
7FF58601E000
unkown image
page readonly
1D901CD0000
unkown image
page readonly
7FF50F323000
unkown image
page readonly
7DF4A2CF0000
unkown image
page readonly
C60000
unkown
page read and write
7FF585DCD000
unkown image
page readonly
7F4F0000
unkown image
page readonly
4B3F000
stack
page read and write
64D62EC000
unkown
page read and write
530000
unkown image
page readonly
29F9D9C0000
unkown image
page readonly
7E0000
unkown
page read and write
25DE000
unkown image
page readonly
7F840000
unkown image
page readonly
C15D97E000
stack
page read and write
2D6A000
unkown
page read and write
1CEDF23C000
unkown
page read and write
7DF5A4E20000
unkown image
page readonly
29F9E395000
unkown
page read and write
5C0000
unkown
page read and write
23F74ED5000
unkown
page read and write
A8E000
stack
page read and write
C15D87A000
stack
page read and write
7FF571B36000
unkown image
page readonly
172A4000000
unkown
page read and write
7FF57EF65000
unkown image
page readonly
9637EFB000
stack
page read and write
5E0000
unkown image
page readonly
29F9E393000
unkown
page read and write
1CEDF300000
unkown
page read and write
EF444FB000
unkown
page read and write
7FF571B5E000
unkown image
page readonly
7FF4FCA56000
unkown image
page readonly
8EA000
unkown image
page read and write
7FF55250E000
unkown image
page readonly
7C2000
unkown
page read and write
7F720000
unkown image
page readonly
7DF5FBEF0000
unkown image
page readonly
7FF4FC904000
unkown image
page readonly
23F75650000
unkown image
page readonly
7DF5A6E70000
unkown image
page readonly
5C0000
unkown
page read and write
7DF5A6E70000
unkown image
page readonly
7FF551FEF000
unkown image
page readonly
7DF587460000
unkown image
page readonly
5C0000
unkown
page read and write
4550000
heap private
page read and write
4A5D000
stack
page read and write
7FF585F37000
unkown image
page readonly
5C0000
unkown
page read and write
7FF58600D000
unkown image
page readonly
7E0000
unkown
page read and write
7FF4ECE67000
unkown image
page readonly
C60000
unkown
page read and write
7E0000
unkown
page read and write
5C0000
unkown
page read and write
C60000
unkown
page read and write
7FF5E65CD000
unkown image
page readonly
29F9E396000
unkown
page read and write
494877D000
stack
page read and write
1D9ECDA0000
unkown image
page readonly
D9BCFAA000
unkown
page read and write
7FF58DA0D000
unkown image
page readonly
16ED000
heap private
page read and write
4948000
heap private
page read and write
271A000
unkown image
page readonly
7E0000
unkown
page read and write
7FF4ECCBC000
unkown image
page readonly
7FF5E65BB000
unkown image
page readonly
534E000
stack
page read and write
7FF5522D4000
unkown image
page readonly
7DF5A6E62000
unkown image
page readonly
7D8000
unkown
page read and write
B23000
heap default
page read and write
4AA0000
unkown
page read and write
C60000
unkown
page read and write
23F74EDD000
unkown
page read and write
7FF552071000
unkown image
page readonly
10003000
unkown image
page readonly
7DF5FBF00000
unkown image
page readonly
790000
unkown
page read and write
7DF5A4E22000
unkown image
page readonly
7DF587462000
unkown image
page readonly
16EB000
heap private
page read and write
4630000
unkown
page read and write
1D9EC996000
heap default
page read and write
44CB000
stack
page read and write
7E0000
unkown
page read and write
4630000
unkown
page read and write
29F1000
unkown image
page readonly
7FF58F448000
unkown image
page readonly
1D9EC980000
heap default
page read and write
B1B000
heap default
page read and write
B2D5DFC000
stack
page read and write
631000
unkown
page read and write
C71000
unkown image
page execute read
7FF55253F000
unkown image
page readonly
7FF571AB3000
unkown image
page readonly
7FF58601B000
unkown image
page readonly
4BFE000
stack
page read and write
2710000
unkown image
page readonly
298D000
unkown image
page readonly
4630000
unkown
page read and write
7FF40000
unkown image
page readonly
7E0000
unkown
page read and write
222E8E3E000
unkown
page read and write
7DF55DA90000
unkown image
page readonly
7DF502862000
unkown image
page readonly
2A22000
unkown image
page readonly
1CEDA215000
unkown
page read and write
511917C000
stack
page read and write
29F9DED0000
unkown image
page readonly
C60000
unkown
page read and write
29F9E389000
unkown
page read and write
ECE3BF9000
stack
page read and write
7DF524F10000
unkown image
page readonly
2E00000
unkown image
page readonly
7DF5A3560000
unkown image
page readonly
7DF567E30000
unkown image
page readonly
5C0000
unkown
page read and write
7FF58F45D000
unkown image
page readonly
2D46000
unkown
page read and write
7FF552422000
unkown image
page readonly
7FF59148D000
unkown image
page readonly
7FF58DA3E000
unkown image
page readonly
ECE427F000
stack
page read and write
7FF552400000
unkown image
page readonly
7C2000
unkown
page read and write
7FF58DB67000
unkown image
page readonly
172A3DE0000
unkown image
page readonly
1CEDEFB0000
unkown
page read and write
7FF50F4B7000
unkown image
page readonly
7FF5E65ED000
unkown image
page readonly
7FF56581E000
unkown image
page readonly
7FF50F288000
unkown image
page readonly
2522E855000
unkown
page read and write
253C000
unkown image
page readonly
7E0000
unkown
page read and write
29F9E394000
unkown
page read and write
10006000
unkown image
page readonly
1CED9A74000
unkown
page read and write
7E0000
unkown
page read and write
29F9DAAF000
unkown
page read and write
1CA14E85000
unkown
page read and write
7E0000
unkown
page read and write
1CED9B02000
unkown
page read and write
1D901879000
unkown
page read and write
4F6D000
heap private
page read and write
1D901E50000
unkown image
page readonly
10005000
unkown image
page read and write
172A4580000
unkown image
page readonly
172A4590000
unkown
page read and write
1CEDF2D9000
unkown
page read and write
7FF55244C000
unkown image
page readonly
7FF57F0DB000
unkown image
page readonly
330000
unkown image
page readonly
2522E630000
unkown image
page read and write
1DBA2F50000
unkown image
page readonly
7FF58F469000
unkown image
page readonly
7FF5520EF000
unkown image
page readonly
5C0000
unkown
page read and write
2731000
unkown image
page readonly
10000000
unkown image
page readonly
12AE000
stack
page read and write
1CED98F0000
unkown image
page readonly
29F9E38D000
unkown
page read and write
7FF59155F000
unkown image
page readonly
2A97000
unkown image
page readonly
7E0000
unkown
page read and write
2DFC2454000
unkown
page read and write
7FF571B2F000
unkown image
page readonly
2976000
unkown image
page readonly
7F822000
unkown image
page readonly
2A97000
unkown image
page readonly
7FF552506000
unkown image
page readonly
7FF591029000
unkown image
page readonly
7FF57EF84000
unkown image
page readonly
7DF55DA92000
unkown image
page readonly
7FF5914C5000
unkown image
page readonly
1CA14E40000
unkown
page read and write
29F9E318000
unkown
page read and write
7FF58DC6B000
unkown image
page readonly
1CA14E00000
unkown
page read and write
1DBA3108000
unkown
page read and write
1CED9C00000
unkown image
page readonly
B2D617F000
stack
page read and write
29F9E300000
unkown
page read and write
7FF50F40D000
unkown image
page readonly
7FF50F131000
unkown image
page readonly
341F000
stack
page read and write
7FF50F539000
unkown image
page readonly
2D7C000
unkown
page read and write
D9BD27F000
stack
page read and write
7AD000
unkown
page read and write
1C350F7000
stack
page read and write
7FF5520C0000
unkown image
page readonly
721257E000
stack
page read and write
7FF58602F000
unkown image
page readonly
7FF4FCA8F000
unkown image
page readonly
2DFC2260000
unkown image
page readonly
7FF5520CF000
unkown image
page readonly
5C0000
unkown
page read and write
5C0000
unkown
page read and write
23F75C90000
unkown
page read and write
29F9E38C000
unkown
page read and write
C60000
unkown
page read and write
29F1000
unkown image
page readonly
7E0000
unkown
page read and write
7DF524F02000
unkown image
page readonly
7DF55DAB0000
unkown image
page readonly
95D000
stack
page read and write
1D9017D0000
unkown image
page readonly
2864000
unkown image
page readonly
EF44CFF000
stack
page read and write
7FF5912AC000
unkown image
page readonly
7FF4ECEA5000
unkown image
page readonly
7E0000
unkown
page read and write
25F3000
unkown image
page readonly
543E000
stack
page read and write
7FF50F2B3000
unkown image
page readonly
7FF571999000
unkown image
page readonly
B37000
unkown
page read and write
222E8CB0000
unkown image
page read and write
29F9E375000
unkown
page read and write
7FF5524FF000
unkown image
page readonly
2D82000
unkown
page read and write
1CEDEE70000
unkown
page read and write
AA0000
heap default
page read and write
7E0000
unkown
page read and write
1CA14E51000
unkown
page read and write
1CED9A3D000
unkown
page read and write
7FF571AD5000
unkown image
page readonly
2D7B000
unkown
page read and write
2522ED80000
unkown image
page readonly
7FF58F4F6000
unkown image
page readonly
29F9E382000
unkown
page read and write
1CEDF247000
unkown
page read and write
963877E000
stack
page read and write
7D1000
unkown
page read and write
29FC000
unkown image
page readonly
6EC000
unkown
page read and write
7FF552483000
unkown image
page readonly
29F9DA36000
unkown
page read and write
7FF5713AD000
unkown image
page readonly
C60000
unkown
page read and write
29F9D910000
unkown image
page readonly
530000
unkown
page read and write
29F9E393000
unkown
page read and write
29B1000
unkown image
page readonly
4630000
unkown
page read and write
4630000
unkown
page read and write
7FF55248A000
unkown image
page readonly
2DFC2600000
unkown image
page readonly
4630000
unkown
page read and write
4630000
unkown
page read and write
7FF591499000
unkown image
page readonly
7DF5A3562000
unkown image
page readonly
7DF5FBEE0000
unkown image
page readonly
1CEDF261000
unkown
page read and write
7FF5520C7000
unkown image
page readonly
27D7000
unkown image
page readonly
10001000
unkown image
page execute read
1CED9A29000
unkown
page read and write
642000
unkown
page read and write
830000
unkown
page read and write
1CEDA304000
unkown
page read and write
1CEDF410000
unkown
page read and write
18422A30000
unkown image
page readonly
1D901770000
unkown image
page readonly
877000
heap private
page read and write
4630000
unkown
page read and write
2D62000
unkown
page read and write
7DF59B932000
unkown image
page readonly
7DF512382000
unkown image
page readonly
10005000
unkown image
page read and write
2522F002000
unkown
page read and write
2522E872000
unkown
page read and write
7F4F0000
unkown image
page readonly
1CA14E5A000
unkown
page read and write
222E8EC0000
unkown
page read and write
1D9ECB50000
unkown
page read and write
4630000
unkown
page read and write
7FF571B3B000
unkown image
page readonly
7DF5A6E52000
unkown image
page readonly
7FF4ECF28000
unkown image
page readonly
5C0000
unkown
page read and write
2522E850000
unkown
page read and write
721287C000
stack
page read and write
850000
unkown image
page readonly
7E0000
unkown
page read and write
1A80000
unkown image
page readonly
23F74E50000
unkown
page read and write
7DF422DC0000
unkown image
page readonly
7FF552410000
unkown image
page readonly
7FF52000
unkown image
page readonly
7FF57F0FB000
unkown image
page readonly
4630000
unkown
page read and write
4630000
unkown
page read and write
172A4200000
unkown image
page readonly
29F9DA57000
unkown
page read and write
1D9017C0000
heap default
page read and write
2D6A000
unkown
page read and write
7FF4ECF4D000
unkown image
page readonly
7212677000
stack
page read and write
7DF5A6E62000
unkown image
page readonly
1D9EC920000
unkown image
page readonly
642000
unkown
page read and write
B37147F000
stack
page read and write
7FF547D50000
unkown image
page readonly
1D9EC9A6000
unkown
page read and write
2A97000
unkown image
page readonly
29F9E384000
unkown
page read and write
7FF50F507000
unkown image
page readonly
7DF55DA90000
unkown image
page readonly
29F9D930000
unkown image
page readonly
7DF55DA92000
unkown image
page readonly
7F820000
unkown image
page readonly
7E0000
unkown
page read and write
2762000
unkown image
page readonly
7E0000
unkown
page read and write
7DF55DAB0000
unkown image
page readonly
7FF50F4C0000
unkown image
page readonly
29F9E3B7000
unkown
page read and write
7D0000
unkown
page read and write
2784000
unkown image
page readonly
273C000
unkown image
page readonly
172A3DE0000
unkown image
page readonly
7C2000
unkown
page read and write
7E0000
unkown
page read and write
7FF571716000
unkown image
page readonly
2DFC2390000
unkown image
page readonly
23F75C70000
unkown
page readonly
7FF5E6529000
unkown image
page readonly
7FF58F43C000
unkown image
page readonly
7FF58DC2F000
unkown image
page readonly
4FB000
unkown
page read and write
7DF512382000
unkown image
page readonly
1CA14E13000
unkown
page read and write
2522E83C000
unkown
page read and write
18422D02000
unkown
page read and write
ECE417A000
stack
page read and write
7FF5E65DB000
unkown image
page readonly
7FF50F518000
unkown image
page readonly
7FF55252B000
unkown image
page readonly
4630000
unkown
page read and write
23F74D30000
unkown image
page readonly
504B000
heap private
page read and write
7DF55DAA2000
unkown image
page readonly
172A4029000
unkown
page read and write
7FF591373000
unkown image
page readonly
29F9E180000
unkown
page read and write
721277F000
stack
page read and write
10003000
unkown image
page readonly
18422A50000
unkown image
page readonly
51194FF000
stack
page read and write
7FF552377000
unkown image
page readonly
7FF4FC983000
unkown image
page readonly
222E93A0000
unkown image
page readonly
1CED9A6E000
unkown
page read and write
2A85000
unkown image
page readonly
7FAE0000
unkown image
page readonly
4C50000
heap private
page read and write
29DA000
unkown image
page readonly
7FF571B4D000
unkown image
page readonly
B14000
unkown
page read and write
7FF4ECD3E000
unkown image
page readonly
172A4100000
unkown
page read and write
7FF4FC5EA000
unkown image
page readonly
5C0000
unkown
page read and write
5C0000
unkown
page read and write
18422A30000
unkown image
page readonly
5C0000
unkown
page read and write
7E0000
unkown
page read and write
7F4E2000
unkown image
page readonly
7FF551DBA000
unkown image
page readonly
1D901770000
unkown image
page readonly
23F74EFE000
unkown
page read and write
2D54000
unkown
page read and write
7FF571B6F000
unkown image
page readonly
7FF58F514000
unkown image
page readonly
7D1000
unkown
page read and write
7FF571AA9000
unkown image
page readonly
1D9EC9AC000
unkown
page read and write
7DF4A4D20000
unkown image
page readonly
29F9E389000
unkown
page read and write
2EB0000
unkown image
page readonly
172A3E10000
unkown image
page readonly
7FF50F5DD000
unkown image
page readonly
7F4F2000
unkown image
page readonly
7DF594A12000
unkown image
page readonly
7DF5A3572000
unkown image
page readonly
C60000
unkown
page read and write
29F9E378000
unkown
page read and write
29F9E202000
unkown
page read and write
7DF59B922000
unkown image
page readonly
D2E000
stack
page read and write
7FF57EBD9000
unkown image
page readonly
7FF55253F000
unkown image
page readonly
7DF5A3570000
unkown image
page readonly
5C0000
unkown
page read and write
8E9000
unkown image
page readonly
1CEDEFC0000
unkown
page read and write
652000
unkown
page read and write
7DF5A3562000
unkown image
page readonly
7FF54795A000
unkown image
page readonly
4630000
unkown
page read and write
29F9E180000
unkown
page read and write
4880000
heap private
page read and write
7FF4FC89D000
unkown image
page readonly
485D000
stack
page read and write
B70000
unkown image
page read and write
7FF5914AA000
unkown image
page readonly
7E0000
unkown
page read and write
1CEDA318000
unkown
page read and write
7FF58DBBA000
unkown image
page readonly
2735000
unkown image
page readonly
B12000
unkown
page read and write
172A4602000
unkown
page read and write
2D79000
unkown
page read and write
481A000
stack
page read and write
7E0000
unkown
page read and write
7FF58DC6F000
unkown image
page readonly
1D90185B000
unkown
page read and write
730000
unkown image
page readonly
7FF57E956000
unkown image
page readonly
7FF571409000
unkown image
page readonly
29F9DA53000
unkown
page read and write
331E000
stack
page read and write
7FF58DC54000
unkown image
page readonly
2A09000
unkown image
page readonly
371A000
stack
page read and write
2993000
unkown image
page readonly
C60000
unkown
page read and write
4947EBC000
unkown
page read and write
172A4108000
unkown
page read and write
2DFC2980000
unkown image
page readonly
2522E900000
unkown
page read and write
23F759A0000
unkown
page read and write
29F9E39A000
unkown
page read and write
29F9000
unkown image
page readonly
4C7B000
heap private
page read and write
B2D627F000
stack
page read and write
7FF548170000
unkown image
page readonly
7FF58DAE4000
unkown image
page readonly
669000
heap default
page read and write
7FF4FC7D9000
unkown image
page readonly
1DBA2F20000
unkown image
page readonly
7E0000
unkown
page read and write
29F9E3AD000
unkown
page read and write
7E0000
unkown
page read and write
2DFC244D000
unkown
page read and write
7FF585FFB000
unkown image
page readonly
7FF4ECF5E000
unkown image
page readonly
4630000
unkown
page read and write
2522E908000
unkown
page read and write
1D9EC9B2000
unkown
page read and write
4630000
unkown
page read and write
1DBA304F000
unkown
page read and write
29F9E802000
unkown
page read and write
B00000
unkown image
page readonly
29F9E389000
unkown
page read and write
4630000
unkown
page read and write
7FF50F1A4000
unkown image
page readonly
4630000
unkown
page read and write
2522E856000
unkown
page read and write
10000000
unkown image
page readonly
2522E780000
unkown image
page readonly
2D7C000
unkown
page read and write
4630000
unkown
page read and write
7E0000
unkown
page read and write
8E0000
unkown
page read and write
7DF5A6E50000
unkown image
page readonly
520F000
stack
page read and write
7FF4FC97C000
unkown image
page readonly
7FAC0000
unkown image
page readonly
C60000
unkown
page read and write
29F9E3AD000
unkown
page read and write
29F9D970000
unkown image
page readonly
7DF502862000
unkown image
page readonly
C79000
unkown image
page readonly
C60000
unkown
page read and write
7FF552447000
unkown image
page readonly
7FF4ECEB3000
unkown image
page readonly
7F4E0000
unkown image
page readonly
4630000
unkown
page read and write
29F9E39A000
unkown
page read and write
2739000
unkown image
page readonly
29F5000
unkown image
page readonly
7FF50F2F1000
unkown image
page readonly
7FF60000
unkown image
page readonly
172A407C000
unkown
page read and write
7FF552524000
unkown image
page readonly
5C0000
unkown
page read and write
1CED9E00000
unkown image
page readonly
7FF4ECE63000
unkown image
page readonly
7DF5A4E40000
unkown image
page readonly
46E9000
unkown image
page readonly
7FF50F2F3000
unkown image
page readonly
7E0000
unkown
page read and write
700000
unkown
page read and write
7FF50F1D3000
unkown image
page readonly
7E0000
unkown
page read and write
7FF40000
unkown image
page readonly
1CA14E6E000
unkown
page read and write
1CA15000000
unkown image
page readonly
7E0000
unkown
page read and write
7FF571B40000
unkown image
page readonly
1D901902000
unkown
page read and write
2DFC2447000
unkown
page read and write
7DF55DAA0000
unkown image
page readonly
7DF587470000
unkown image
page readonly
BE0000
heap private
page read and write
C60000
unkown
page read and write
28AC000
unkown image
page readonly
B00000
heap default
page read and write
C60000
unkown
page read and write
1D901AD0000
unkown image
page readonly
1CED9B14000
unkown
page read and write
29F9DAC7000
unkown
page read and write
7E0000
unkown
page read and write
2DFC2473000
unkown
page read and write
D9BD2FE000
stack
page read and write
7E0000
unkown
page read and write
7FF55246D000
unkown image
page readonly
740000
unkown image
page readonly
2A85000
unkown image
page readonly
7FAC2000
unkown image
page readonly
28B3000
unkown image
page readonly
4630000
unkown
page read and write
7FF5523F7000
unkown image
page readonly
1CEDF0B0000
unkown
page read and write
5C0000
unkown
page read and write
29F9DB02000
unkown
page read and write
7FF57F10F000
unkown image
page readonly
172A3F10000
unkown image
page readonly
7FF54819F000
unkown image
page readonly
7FF552247000
unkown image
page readonly
2749000
unkown image
page readonly
5C0000
unkown
page read and write
7E0000
unkown
page read and write
1CA15390000
unkown
page read and write
7E0000
unkown
page read and write
7DF524EF2000
unkown image
page readonly
B2D5E7F000
stack
page read and write
4630000
unkown
page read and write
222E9700000
unkown
page read and write
7DF5A6E50000
unkown image
page readonly
27BB000
unkown image
page readonly
4620000
unkown image
page readonly
7E0000
unkown
page read and write
7E0000
unkown
page read and write
7DF5123A0000
unkown image
page readonly
5CB000
unkown
page read and write
AEC000
unkown
page read and write
7FF50EDF7000
unkown image
page readonly
7FF4FC9BD000
unkown image
page readonly
1CEDF2F8000
unkown
page read and write
1CA14E62000
unkown
page read and write
7FF4ECC23000
unkown image
page readonly
7FF5E64C4000
unkown image
page readonly
7FF547956000
unkown image
page readonly
C60000
unkown
page read and write
642000
unkown
page read and write
C60000
unkown
page read and write
1CEDEF8E000
unkown
page read and write
C60000
unkown
page read and write
7FF5912FD000
unkown image
page readonly
7DF502860000
unkown image
page readonly
B80000
unkown image
page readonly
16EB000
heap private
page read and write
7FF4ECF2F000
unkown image
page readonly
2DFC2455000
unkown
page read and write
64D6977000
stack
page read and write
2A7B000
unkown image
page readonly
7E0000
unkown
page read and write
7FF50F321000
unkown image
page readonly
4B3E000
stack
page read and write
1CA14E57000
unkown
page read and write
7DF524F00000
unkown image
page readonly
29F9E384000
unkown
page read and write
1CEDF050000
unkown
page read and write
7E0000
unkown
page read and write
7E0000
unkown
page read and write
26B6000
unkown image
page readonly
C60000
unkown
page read and write
7FF591526000
unkown image
page readonly
2609000
unkown image
page readonly
1CEDADF0000
unkown
page read and write
1700000
unkown image
page readonly
7DF5123A0000
unkown image
page readonly
5C0000
unkown
page read and write
7FF59132E000
unkown image
page readonly
5C0000
unkown
page read and write
29F9E3A4000
unkown
page read and write
B2D6077000
stack
page read and write
51193FE000
stack
page read and write
18422A20000
heap private
page read and write
7DF410250000
unkown image
page readonly
B2B000
unkown
page read and write
26F6000
unkown image
page readonly
4A7C000
heap private
page read and write
23F75C80000
unkown
page read and write
7FF54819F000
unkown image
page readonly
805000
heap default
page read and write
511888B000
unkown
page read and write
10001000
unkown image
page execute read
1CEDEFC4000
unkown
page read and write
29F9E38D000
unkown
page read and write
18422BB0000
unkown
page read and write
222E8E13000
unkown
page read and write
2D7C000
unkown
page read and write
7E0000
unkown
page read and write
7DF594A10000
unkown image
page readonly
7FF57EF23000
unkown image
page readonly
7FF552458000
unkown image
page readonly
4630000
unkown
page read and write
7FF5E62ED000
unkown image
page readonly
1D9EC900000
unkown image
page read and write
7FF4FCA7E000
unkown image
page readonly
7E0000
unkown
page read and write
7FF57F0D6000
unkown image
page readonly
AAA000
heap default
page read and write
7FF58DB7C000
unkown image
page readonly
28B3000
unkown image
page readonly
320000
unkown image
page read and write
24C4000
unkown image
page readonly
5C0000
unkown
page read and write
8D0000
unkown
page read and write
690000
unkown image
page readonly
222E8E6F000
unkown
page read and write
2DFC2451000
unkown
page read and write
2D62000
unkown
page read and write
7FF571B6F000
unkown image
page readonly
29F9DB16000
unkown
page read and write
7D7000
heap private
page read and write
C60000
unkown
page read and write
7FF585CE6000
unkown image
page readonly
18422C29000
unkown
page read and write
7FF58F52B000
unkown image
page readonly
1CA14E60000
unkown
page read and write
468C000
stack
page read and write
23F75C60000
unkown
page read and write
7FF571A9D000
unkown image
page readonly
7A0000
heap default
page read and write
18423000000
unkown image
page readonly
7FF50F4AD000
unkown image
page readonly
641000
unkown
page read and write
29F9E3AB000
unkown
page read and write
4630000
unkown
page read and write
B39000
unkown
page read and write
52FF000
stack
page read and write
4630000
unkown
page read and write
29F9DA84000
unkown
page read and write
2C70000
stack
page read and write
29F9DA4E000
unkown
page read and write
7FF571A74000
unkown image
page readonly
29F9DA52000
unkown
page read and write
C60000
unkown
page read and write
172A4113000
unkown
page read and write
29F9DA8D000
unkown
page read and write
1DBA3802000
unkown
page read and write
29F9E35E000
unkown
page read and write
7FF586000000
unkown image
page readonly
4630000
unkown
page read and write
553D000
stack
page read and write
4630000
unkown
page read and write
7DF512392000
unkown image
page readonly
7FF55242C000
unkown image
page readonly
4630000
unkown
page read and write
8EC000
unkown image
page readonly
7FF50F5EB000
unkown image
page readonly
1CEDF249000
unkown
page read and write
7FF551CF3000
unkown image
page readonly
C15D8FB000
stack
page read and write
29F9E3C2000
unkown
page read and write
7D1000
unkown
page read and write
1CEDEF80000
unkown
page read and write
1D9ECB90000
unkown image
page readonly
2DFC2280000
unkown image
page readonly
1CED9AAD000
unkown
page read and write
29C4000
unkown image
page readonly
2522E88C000
unkown
page read and write
29F9E376000
unkown
page read and write
1CEDF2FB000
unkown
page read and write
222E9480000
unkown
page read and write
1A90000
unkown image
page readonly
497E000
heap private
page read and write
494837E000
stack
page read and write
2DFC243C000
unkown
page read and write
4630000
unkown
page read and write
7FF58D46D000
unkown image
page readonly
2874000
unkown image
page readonly
26E1000
unkown image
page readonly
49483FC000
stack
page read and write
7E0000
unkown
page read and write
C60000
unkown
page read and write
7FF5719A7000
unkown image
page readonly
1CEDF1D0000
unkown
page read and write
7FF4FCA4F000
unkown image
page readonly
7DF567E32000
unkown image
page readonly
172A404A000
unkown
page read and write
64D63EE000
stack
page read and write
70D000
stack
page read and write
7FF5522F3000
unkown image
page readonly
1CA14E29000
unkown
page read and write
29F9E395000
unkown
page read and write
7E0000
unkown
page read and write
2D7C000
unkown
page read and write
4630000
unkown
page read and write
1CED9F90000
unkown image
page readonly
7DF594A02000
unkown image
page readonly
26CD000
unkown image
page readonly
7DF5FBEE2000
unkown image
page readonly
725000
heap default
page read and write
D9BD37F000
stack
page read and write
2864000
unkown image
page readonly
222E8F13000
unkown
page read and write
ECE3EFF000
stack
page read and write
2A09000
unkown image
page readonly
1CEDEFA4000
unkown
page read and write
79D000
unkown
page read and write
5C0000
unkown
page read and write
272B000
unkown image
page readonly
7D8000
unkown
page read and write
44B8000
heap private
page read and write
1CEDF0E0000
unkown
page read and write
7DF59B940000
unkown image
page readonly
9637A9B000
unkown
page read and write
B2D5F7B000
stack
page read and write
7E0000
unkown
page read and write
7FF5520E4000
unkown image
page readonly
7FF57F007000
unkown image
page readonly
7FF4ECD83000
unkown image
page readonly
7F830000
unkown image
page readonly
7FF591453000
unkown image
page readonly
7DF465D00000
unkown image
page readonly
29F9E34D000
unkown
page read and write
7FF5E5E42000
unkown image
page readonly
29F9E802000
unkown
page read and write
2DFC2448000
unkown
page read and write
7FF5523F0000
unkown image
page readonly
C60000
unkown
page read and write
1CEDA880000
unkown
page read and write
1CA14E6A000
unkown
page read and write
23F750C0000
unkown
page read and write
18423260000
unkown
page read and write
7FF571A7C000
unkown image
page readonly
1CED9920000
heap default
page read and write
652000
unkown
page read and write
C60000
unkown
page read and write
C80000
unkown image
page readonly
4630000
unkown
page read and write
1CA14E5C000
unkown
page read and write
1CA14E61000
unkown
page read and write
7FF586014000
unkown image
page readonly
10000000
unkown image
page readonly
1CA14E42000
unkown
page read and write
7FF4ECE9D000
unkown image
page readonly
7FF552046000
unkown image
page readonly
23F75CE0000
unkown
page read and write
1CA14BE0000
unkown image
page readonly
7FF585D28000
unkown image
page readonly
2DFC2470000
unkown
page read and write
9AE000
stack
page read and write
29F9E393000
unkown
page read and write
18422A10000
unkown image
page read and write
7DF485330000
unkown image
page readonly
1CEDF070000
unkown
page read and write
29F9E190000
unkown image
page read and write
7DF5FBEE2000
unkown image
page readonly
7D1000
unkown
page read and write
7E8000
unkown
page read and write
1CA14E75000
unkown
page read and write
B37137E000
stack
page read and write
172A404B000
unkown
page read and write
1D901760000
heap private
page read and write
7FF5E651D000
unkown image
page readonly
1E0000
unkown image
page readonly
1D901865000
unkown
page read and write
7FF59155F000
unkown image
page readonly
C60000
unkown
page read and write
172A402C000
unkown
page read and write
2522E84B000
unkown
page read and write
29F9E385000
unkown
page read and write
7FF4ECA39000
unkown image
page readonly
1CEDA200000
unkown
page read and write
B1A000
unkown
page read and write
7DF59B932000
unkown image
page readonly
2D7B000
unkown
page read and write
680000
unkown image
page read and write
7E0000
unkown
page read and write
7FF50F313000
unkown image
page readonly
7D1000
unkown
page read and write
7E0000
unkown
page read and write
23F75A20000
unkown
page read and write
4630000
unkown
page read and write
29F9E37F000
unkown
page read and write
7FF552261000
unkown image
page readonly
7DF594A12000
unkown image
page readonly
1C35C7F000
stack
page read and write
7FF50F0AF000
unkown image
page readonly
29F9DA5C000
unkown
page read and write
7FF50F0C3000
unkown image
page readonly
7FF50F3B8000
unkown image
page readonly
1CED9A76000
unkown
page read and write
61C000
unkown
page read and write
2522E853000
unkown
page read and write
1CEDF0A0000
unkown
page read and write
2A2D000
unkown image
page readonly
172A403C000
unkown
page read and write
5118CFB000
stack
page read and write
7FF585F7A000
unkown image
page readonly
16EB000
heap private
page read and write
7FF58DABF000
unkown image
page readonly
7FF58DBB3000
unkown image
page readonly
7FF50F5D0000
unkown image
page readonly
C60000
unkown
page read and write
10006000
unkown image
page readonly
29F9E3BA000
unkown
page read and write
222E8CD0000
unkown image
page readonly
BC0000
unkown
page read and write
29B1000
unkown image
page readonly
46E0000
unkown image
page read and write
23F750B0000
heap private
page read and write
276D000
unkown image
page readonly
29F9E384000
unkown
page read and write
C60000
unkown
page read and write
7FF58DC40000
unkown image
page readonly
29F9E383000
unkown
page read and write
7FF5524F8000
unkown image
page readonly
64D6B7F000
stack
page read and write
3000000
unkown image
page readonly
C60000
unkown
page read and write
3E0000
unkown image
page readonly
7FF548166000
unkown image
page readonly
7DF587480000
unkown image
page readonly
4A9A000
stack
page read and write
28C5000
unkown image
page readonly
538F000
stack
page read and write
EF448FB000
stack
page read and write
7FF58DC28000
unkown image
page readonly
7F840000
unkown image
page readonly
7FF55223D000
unkown image
page readonly
1DBA3102000
unkown
page read and write
172A404E000
unkown
page read and write
23F750B9000
heap private
page read and write
7FF50F474000
unkown image
page readonly
7FF552414000
unkown image
page readonly
2D6B000
unkown
page read and write
1CEDF050000
unkown
page read and write
7FF60000
unkown image
page readonly
7F822000
unkown image
page readonly
27FC000
unkown image
page readonly
8F0000
heap default
page read and write
1CA14E76000
unkown
page read and write
4560000
unkown image
page readonly
66C000
heap default
page read and write
2522E852000
unkown
page read and write
1D901813000
unkown
page read and write
7FF57F10B000
unkown image
page readonly
7DF59B930000
unkown image
page readonly
5C0000
unkown
page read and write
5C0000
unkown
page read and write
222E9390000
unkown image
page readonly
7E0000
unkown
page read and write
7FF4FC9D3000
unkown image
page readonly
2A7B000
unkown image
page readonly
7FF58583F000
unkown image
page readonly
7FF50F455000
unkown image
page readonly
7FF4ECE7C000
unkown image
page readonly
7FF57F028000
unkown image
page readonly
23F74D20000
unkown
page read and write
5C0000
unkown
page read and write
4630000
unkown
page read and write
2D79000
unkown
page read and write
7FF591038000
unkown image
page readonly
4630000
unkown
page read and write
7FF50EDFD000
unkown image
page readonly
C15DA79000
stack
page read and write
29F9E395000
unkown
page read and write
4630000
unkown
page read and write
800000
heap default
page read and write
1CEDF0E0000
unkown
page read and write
7FF5E65A8000
unkown image
page readonly
29F9E3B5000
unkown
page read and write
7FF55251D000
unkown image
page readonly
7DF502870000
unkown image
page readonly
2D61000
heap default
page read and write
1CEDA080000
unkown
page read and write
18422BB0000
unkown
page read and write
7FF4FC9DA000
unkown image
page readonly
10006000
unkown image
page readonly
B1A000
unkown
page read and write
1CEDEFA1000
unkown
page read and write
EF449FB000
stack
page read and write
45E000
unkown
page read and write
4B70000
heap private
page read and write
4630000
unkown
page read and write
4630000
unkown
page read and write
2D79000
heap default
page read and write
5C0000
unkown
page read and write
27C1000
unkown image
page readonly
4630000
unkown
page read and write
B6E000
stack
page read and write
4630000
unkown
page read and write
7FF55253D000
unkown image
page readonly
385D000
stack
page read and write
29F9E130000
unkown image
page write copy
1CA14BC0000
unkown image
page read and write
29F9E394000
unkown
page read and write
C60000
unkown
page read and write
7FAD0000
unkown image
page readonly
29F9E395000
unkown
page read and write
2605000
unkown image
page readonly
5C0000
unkown
page read and write
29B6000
unkown image
page readonly
4860000
unkown
page read and write
1D9EC9BE000
unkown
page read and write
29F9E86A000
unkown
page read and write
2DFC2260000
unkown image
page readonly
4630000
unkown
page read and write
4630000
unkown
page read and write
1CA14E63000
unkown
page read and write
1DBA2F40000
unkown image
page readonly
7DF4928D0000
unkown image
page readonly
23F759B0000
unkown
page read and write
29F9E389000
unkown
page read and write
2D79000
unkown
page read and write
29F9E385000
unkown
page read and write
60F000
unkown
page read and write
1CD000
unkown
page read and write
172A4051000
unkown
page read and write
2522E6A0000
heap default
page read and write
7E0000
unkown
page read and write
29F9E322000
unkown
page read and write
1CA14D10000
unkown image
page readonly
4630000
unkown
page read and write
4630000
unkown
page read and write
7FF58DC5B000
unkown image
page readonly
C60000
unkown
page read and write
B2D5CFE000
stack
page read and write
1CED98D0000
unkown image
page readonly
7FF4ECF6F000
unkown image
page readonly
C60000
unkown
page read and write
547F000
stack
page read and write
4630000
unkown
page read and write
7FF5914A3000
unkown image
page readonly
1D9EC9A8000
unkown
page read and write
1CEDF2F0000
unkown
page read and write
5C0000
unkown
page read and write
29E5000
unkown image
page readonly
2704000
unkown image
page readonly
2993000
unkown image
page readonly
7FF590D04000
unkown image
page readonly
7FF54816B000
unkown image
page readonly
1CEDA1F0000
unkown
page read and write
1CEDEF80000
unkown
page read and write
23F74E90000
heap default
page read and write
29F9E393000
unkown
page read and write
23F752D0000
unkown image
page readonly
C7C000
unkown image
page readonly
1D9EC9B2000
unkown
page read and write
29F9E393000
unkown
page read and write
1CED98C0000
heap private
page read and write
27C5000
unkown image
page readonly
4630000
unkown
page read and write
7FF54817D000
unkown image
page readonly
1DBA32D0000
unkown image
page readonly
7FAC0000
unkown image
page readonly
1CA15200000
unkown image
page readonly
7FF50F3B3000
unkown image
page readonly
5C0000
unkown
page read and write
720000
heap default
page read and write
7FF5480EA000
unkown image
page readonly
7FF50EDBA000
unkown image
page readonly
D9BD3F9000
stack
page read and write
1CEDA300000
unkown
page read and write
1CEDEDF0000
unkown
page read and write
B14000
unkown
page read and write
7FF591544000
unkown image
page readonly
7FF552290000
unkown image
page readonly
461D000
stack
page read and write
7DF512380000
unkown image
page readonly
7FF58F473000
unkown image
page readonly
1158000
heap private
page read and write
29F9DAC0000
unkown
page read and write
1D0000
unkown image
page readonly
643000
unkown
page read and write
1D9EC9AC000
unkown
page read and write
C60000
unkown
page read and write
29F9E38B000
unkown
page read and write
7FF58DA33000
unkown image
page readonly
7FF5E64E3000
unkown image
page readonly
7E0000
unkown
page read and write
7FF585FE8000
unkown image
page readonly
7FF50F50C000
unkown image
page readonly
7E0000
unkown
page read and write
7DF400730000
unkown image
page readonly
7FF57F0FE000
unkown image
page readonly
7E0000
unkown
page read and write
29F9E3A6000
unkown
page read and write
15EA000
heap private
page read and write
1D902002000
unkown
page read and write
7DF567E40000
unkown image
page readonly
7FF55252E000
unkown image
page readonly
530000
unkown image
page readonly
7FF591478000
unkown image
page readonly
5C0000
unkown
page read and write
7FF585F27000
unkown image
page readonly
520000
unkown image
page read and write
2522E680000
unkown image
page readonly
1CEDF2A9000
unkown
page read and write
8D0000
unkown image
page readonly
4630000
unkown
page read and write
10000000
unkown image
page readonly
7E0000
unkown
page read and write
7DF4A1430000
unkown image
page readonly
289E000
unkown image
page readonly
2A1D000
unkown image
page readonly
C60000
unkown
page read and write
7E0000
unkown
page read and write
963887F000
stack
page read and write
C60000
unkown
page read and write
B370CEC000
unkown
page read and write
7DFD9DE02000
unkown image
page readonly
7F3E0000
unkown image
page readonly
64D636E000
stack
page read and write
7FF5522F8000
unkown image
page readonly
7E0000
unkown
page read and write
652000
unkown
page read and write
4630000
unkown
page read and write
B23000
unkown
page read and write
25EC000
unkown image
page readonly
7FF5480D9000
unkown image
page readonly
4630000
unkown
page read and write
49485FD000
stack
page read and write
7FF5E64F8000
unkown image
page readonly
222E9200000
unkown image
page readonly
7DF5A3580000
unkown image
page readonly
29F9E389000
unkown
page read and write
5C0000
unkown
page read and write
7E0000
unkown
page read and write
10000000
unkown image
page readonly
7DF59B922000
unkown image
page readonly
4B7A000
heap private
page read and write
1CEDF050000
unkown
page read and write
49A9000
heap private
page read and write
29D0000
unkown image
page readonly
29F9E395000
unkown
page read and write
7FF57F075000
unkown image
page readonly
7FF5E646E000
unkown image
page readonly
5C0000
unkown
page read and write
7FF4ECA33000
unkown image
page readonly
504E000
stack
page read and write
7FF4FC82D000
unkown image
page readonly
4630000
unkown
page read and write
750000
heap default
page read and write
1CA14C10000
unkown image
page readonly
4630000
unkown
page read and write
EF4457F000
stack
page read and write
5C0000
unkown
page read and write
2DFC2513000
unkown
page read and write
4630000
unkown
page read and write
7DF524EF2000
unkown image
page readonly
4AFA000
stack
page read and write
4D4E000
heap private
page read and write
7FF552475000
unkown image
page readonly
1CEDF2AC000
unkown
page read and write
7C1000
unkown
page read and write
910000
heap private
page read and write
C60000
unkown
page read and write
2745000
unkown image
page readonly
7DF567E40000
unkown image
page readonly
7F830000
unkown image
page readonly
7E0000
unkown
page read and write
5C0000
unkown
page read and write
7DF502872000
unkown image
page readonly
2DFC2C02000
unkown
page read and write
7E0000
unkown
page read and write
2A0D000
unkown image
page readonly
7E0000
unkown
page read and write
7FF5E65AF000
unkown image
page readonly
7FF58F427000
unkown image
page readonly
29F9E393000
unkown
page read and write
1D901876000
unkown
page read and write
5C0000
unkown
page read and write
29F9E3B8000
unkown
page read and write
7FF552418000
unkown image
page readonly
7DF502872000
unkown image
page readonly
1CED9A13000
unkown
page read and write
1CA14E64000
unkown
page read and write
64D66FB000
stack
page read and write
7E0000
unkown
page read and write
29F9E821000
unkown
page read and write
2D82000
unkown
page read and write
7FF585CD8000
unkown image
page readonly
7FF4FC972000
unkown image
page readonly
1CA14E5F000
unkown
page read and write
7FF58602F000
unkown image
page readonly
7FF58F52F000
unkown image
page readonly
A4D000
stack
page read and write
2DFC2240000
unkown image
page read and write
799000
unkown
page read and write
28C2000
unkown image
page readonly
29F9DA4D000
unkown
page read and write
1CEDEE80000
unkown
page read and write
2976000
unkown image
page readonly
7FF552233000
unkown image
page readonly
7FF58D923000
unkown image
page readonly
7DF512390000
unkown image
page readonly
3D0000
unkown image
page readonly
963867F000
stack
page read and write
29F9DA29000
unkown
page read and write
7FF50F5FF000
unkown image
page readonly
2DFC2400000
unkown
page read and write
29F9E314000
unkown
page read and write
5C0000
unkown
page read and write
7DF587472000
unkown image
page readonly
29DA000
unkown image
page readonly
C60000
unkown
page read and write
448C000
stack
page read and write
7FF5E64FC000
unkown image
page readonly
7DF567E30000
unkown image
page readonly
7FF552433000
unkown image
page readonly
29F5000
unkown image
page readonly
1CED9AA5000
unkown
page read and write
1CA14BE0000
unkown image
page readonly
7FF4ECF54000
unkown image
page readonly
541A000
stack
page read and write
A90000
unkown
page read and write
7FF5716D3000
unkown image
page readonly
2522E84D000
unkown
page read and write
29F9DA6F000
unkown
page read and write
1D9ECB80000
heap private
page read and write
10005000
unkown image
page read and write
3030000
unkown image
page readonly
7FF4ECD33000
unkown image
page readonly
29EB000
unkown image
page readonly
C60000
unkown
page read and write
18422C40000
unkown
page read and write
EF44BFE000
stack
page read and write
850000
stack
page read and write
7FF5718FA000
unkown image
page readonly
7FF591495000
unkown image
page readonly
23F74D60000
unkown image
page readonly
7FF571B54000
unkown image
page readonly
7FF57EEDE000
unkown image
page readonly
1CEDF090000
unkown
page read and write
7DF587472000
unkown image
page readonly
7FF59155B000
unkown image
page readonly
29F9E394000
unkown
page read and write
7C2000
unkown
page read and write
7E0000
unkown
page read and write
7FAD2000
unkown image
page readonly
29B9000
unkown image
page readonly
4630000
unkown
page read and write
7FF5521CA000
unkown image
page readonly
4630000
unkown
page read and write
1CEDF2FE000
unkown
page read and write
5C0000
unkown
page read and write
504B000
heap private
page read and write
7DF567E32000
unkown image
page readonly
7FF58F4E8000
unkown image
page readonly
7FF5E64D2000
unkown image
page readonly
29F9DA49000
unkown
page read and write
29F9DAA5000
unkown
page read and write
2C3B000
stack
page read and write
7FF5E638D000
unkown image
page readonly
29F9DA55000
unkown
page read and write
1CED9B02000
unkown
page read and write
EF44AF7000
stack
page read and write
23F74D10000
unkown image
page read and write
4630000
unkown
page read and write
23F74D30000
unkown image
page readonly
5118FFE000
stack
page read and write
B13000
unkown
page read and write
7DF4997F0000
unkown image
page readonly
222E9000000
unkown image
page readonly
48C9000
heap private
page read and write
7FF50F413000
unkown image
page readonly
4630000
unkown
page read and write
B370DEE000
stack
page read and write
4630000
unkown
page read and write
1D9EC98B000
heap default
page read and write
7DF567E50000
unkown image
page readonly
1D901800000
unkown
page read and write
7F4E2000
unkown image
page readonly
1CED9AFC000
unkown
page read and write
7E0000
unkown
page read and write
7FF50F350000
unkown image
page readonly
7FF50F5FF000
unkown image
page readonly
29F9DA4B000
unkown
page read and write
7FF4FC985000
unkown image
page readonly
7FF552231000
unkown image
page readonly
79D000
unkown
page read and write
298D000
unkown image
page readonly
7FF5522D9000
unkown image
page readonly
18422E00000
unkown image
page readonly
29F9E863000
unkown
page read and write
B22000
unkown
page read and write
7FF58F52F000
unkown image
page readonly
1DBA2FA0000
unkown
page read and write
1D901841000
unkown
page read and write
4630000
unkown
page read and write
4630000
unkown
page read and write
29F9E393000
unkown
page read and write
7FF57EEAD000
unkown image
page readonly
5C0000
unkown
page read and write
7F832000
unkown image
page readonly
7DF594A10000
unkown image
page readonly
C60000
unkown
page read and write
26B8000
unkown image
page readonly
7DF594A20000
unkown image
page readonly
C60000
unkown
page read and write
1C34CFC000
unkown
page read and write
7FF58D733000
unkown image
page readonly
7FF50F3CE000
unkown image
page readonly
4630000
unkown
page read and write
29F9DB13000
unkown
page read and write
7E0000
unkown
page read and write
7FF548103000
unkown image
page readonly
7FF58DC4D000
unkown image
page readonly
28BB000
unkown image
page readonly
7FF5E65DE000
unkown image
page readonly
2D79000
unkown
page read and write
5D0000
heap default
page read and write
7FAD2000
unkown image
page readonly
7FF5713D3000
unkown image
page readonly
7DF59B920000
unkown image
page readonly
1DBA3113000
unkown
page read and write
7E0000
unkown
page read and write
1DBA2F70000
heap default
page read and write
2784000
unkown image
page readonly
1D9EC9AC000
unkown
page read and write
7FF58D467000
unkown image
page readonly
29F9E384000
unkown
page read and write
7FF4ECED5000
unkown image
page readonly
7FF50F44F000
unkown image
page readonly
7FF4FC9C5000
unkown image
page readonly
7DF5A3570000
unkown image
page readonly
7FF591518000
unkown image
page readonly
7FF4ECF6B000
unkown image
page readonly
29F9E3B5000
unkown
page read and write
7FF58F47A000
unkown image
page readonly
7FF591213000
unkown image
page readonly
7FF5522DD000
unkown image
page readonly
3190000
unkown image
page readonly
7DF5FBF00000
unkown image
page readonly
1D9EC960000
unkown
page read and write
730000
unkown image
page readonly
4F4A000
heap private
page read and write
B23000
unkown
page read and write
1D901750000
unkown image
page read and write
C60000
unkown
page read and write
2BF4000
unkown
page read and write
7FF50F565000
unkown image
page readonly
2DFC2502000
unkown
page read and write
7FF58DC36000
unkown image
page readonly
1DBA3029000
unkown
page read and write
7FF55238F000
unkown image
page readonly
29F9DA59000
unkown
page read and write
1DBA2F20000
unkown image
page readonly
1CED9A57000
unkown
page read and write
494867E000
stack
page read and write
C7A000
unkown image
page read and write
1CED9A51000
unkown
page read and write
172A4049000
unkown
page read and write
1D9ECF30000
unkown image
page readonly
7FF4FCA5E000
unkown image
page readonly
7DF5A6E60000
unkown image
page readonly
4630000
unkown
page read and write
7FF5E64DC000
unkown image
page readonly
652000
unkown
page read and write
2D6A000
heap default
page read and write
5C0000
unkown
page read and write
23F754D0000
unkown image
page readonly
26F9000
unkown image
page readonly
7FF57F003000
unkown image
page readonly
23F750B5000
heap private
page read and write
4630000
unkown
page read and write
7FF585F73000
unkown image
page readonly
7FF5E6525000
unkown image
page readonly
5C0000
unkown
page read and write
7E0000
unkown
page read and write
172A3E30000
heap default
page read and write
7FF4ECDBF000
unkown image
page readonly
1CED98B0000
unkown image
page read and write
7E0000
unkown
page read and write
1CA14E27000
unkown
page read and write
4630000
unkown
page read and write
7FF4ECDC5000
unkown image
page readonly
1CED9A9E000
unkown
page read and write
7FF50F39D000
unkown image
page readonly
7FF59153D000
unkown image
page readonly
5C0000
unkown
page read and write
222E9510000
unkown image
page write copy
1D901790000
unkown image
page readonly
2D79000
unkown
page read and write
7FF58F51B000
unkown image
page readonly
7DF594A00000
unkown image
page readonly
7DF5FBEF0000
unkown image
page readonly
C60000
unkown
page read and write
1CA14E58000
unkown
page read and write
7FF55230C000
unkown image
page readonly
ECE38FE000
stack
page read and write
2CB0000
unkown image
page readonly
330000
unkown image
page readonly
7FAE0000
unkown image
page readonly
C60000
unkown
page read and write
7DF5A4E32000
unkown image
page readonly
7FF50000
unkown image
page readonly
170000
unkown image
page readonly
7FF5713D8000
unkown image
page readonly
4560000
unkown
page read and write
29F9DB08000
unkown
page read and write
18422B80000
unkown
page read and write
79D000
unkown
page read and write
7FF4FC756000
unkown image
page readonly
7FF50F1B0000
unkown image
page readonly
504B000
heap private
page read and write
7DF55DAA0000
unkown image
page readonly
7FF5913D4000
unkown image
page readonly
7FF55250B000
unkown image
page readonly
289E000
unkown image
page readonly
652000
unkown
page read and write
7DF567E42000
unkown image
page readonly
99E000
stack
page read and write
23F75A10000
unkown
page read and write
29C4000
unkown image
page readonly
7D1000
unkown
page read and write
7FF4FC9F5000
unkown image
page readonly
7E0000
unkown
page read and write
7DF5A4E22000
unkown image
page readonly
7FF58DC5E000
unkown image
page readonly
2522E650000
unkown image
page readonly
7E0000
unkown
page read and write
72122FD000
stack
page read and write
7FF4ECF36000
unkown image
page readonly
12F0000
heap private
page read and write
1CEDF297000
unkown
page read and write
7FF58F2CD000
unkown image
page readonly
18422A80000
heap default
page read and write
2DFC2429000
unkown
page read and write
7DF524F02000
unkown image
page readonly
61B000
unkown
page read and write
172A3DD0000
heap private
page read and write
29F9E396000
unkown
page read and write
222E8CC0000
heap private
page read and write
7FF57F0CF000
unkown image
page readonly
7FF50F5C6000
unkown image
page readonly
7F832000
unkown image
page readonly
29F9E802000
unkown
page read and write
1DBA2F00000
unkown image
page read and write
2725000
unkown image
page readonly
1CED9A9E000
unkown
page read and write
27D7000
unkown image
page readonly
7FF55222C000
unkown image
page readonly
2522E7A0000
unkown
page read and write
7DF594A20000
unkown image
page readonly
7FF50F5E4000
unkown image
page readonly
381F000
stack
page read and write
963897F000
stack
page read and write
652000
unkown
page read and write
2522E881000
unkown
page read and write
963817D000
stack
page read and write
1CEDA202000
unkown
page read and write
1CED9AA8000
unkown
page read and write
10006000
unkown image
page readonly
2D84000
unkown
page read and write
274D000
unkown image
page readonly
7FF50F5CB000
unkown image
page readonly
7F500000
unkown image
page readonly
ECE3A7B000
stack
page read and write
7FF58DB9D000
unkown image
page readonly
2D6A000
unkown
page read and write
28BB000
unkown image
page readonly
7DF55DAA2000
unkown image
page readonly
29F9000
unkown image
page readonly
18423190000
unkown image
page readonly
7FF56581E000
unkown image
page readonly
64D67FB000
stack
page read and write
7FF585FF6000
unkown image
page readonly
1CA14E3C000
unkown
page read and write
72124FB000
stack
page read and write
7D8000
unkown
page read and write
28AC000
unkown image
page readonly
7FF5521B9000
unkown image
page readonly
7E0000
unkown
page read and write
29F9DA00000
unkown
page read and write
1DBA307C000
unkown
page read and write
29A1000
unkown image
page readonly
4630000
unkown
page read and write
2DFC2450000
unkown
page read and write
557E000
stack
page read and write
222E8D20000
heap default
page read and write
1CA14E7E000
unkown
page read and write
4ABD000
stack
page read and write
4630000
unkown
page read and write
2522E670000
unkown image
page readonly
29F9E38D000
unkown
page read and write
1CEDA313000
unkown
page read and write
870000
heap private
page read and write
126F000
stack
page read and write
7FF5520BA000
unkown image
page readonly
1DBA34D0000
unkown image
page readonly
7E0000
unkown
page read and write
29B6000
unkown image
page readonly
7FF5E6508000
unkown image
page readonly
7FF54815F000
unkown image
page readonly
7FF4FC8A6000
unkown image
page readonly
2A05000
unkown image
page readonly
7FF585F69000
unkown image
page readonly
1CA14E6C000
unkown
page read and write
1CEDF21E000
unkown
page read and write
7FF50F54A000
unkown image
page readonly
1CA14E59000
unkown
page read and write
18422C00000
unkown
page read and write
29F9E802000
unkown
page read and write
7FF571AA5000
unkown image
page readonly
1D9EC9AE000
unkown
page read and write
B37127E000
stack
page read and write
29F9E3C0000
unkown
page read and write
C60000
unkown
page read and write
7FF50F310000
unkown image
page readonly
1CED9900000
unkown image
page readonly
2DFC2413000
unkown
page read and write
29C0000
unkown image
page readonly
1D901829000
unkown
page read and write
2522E84F000
unkown
page read and write
222E8EB9000
unkown
page read and write
18422B60000
unkown image
page readonly
172A4013000
unkown
page read and write
7FF552479000
unkown image
page readonly
23F74F90000
unkown image
page readonly
7FF50F5EE000
unkown image
page readonly
D50000
unkown
page read and write
5C0000
unkown
page read and write
29F9E802000
unkown
page read and write
7FF50F5FD000
unkown image
page readonly
63D000
heap default
page read and write
29F9E3B6000
unkown
page read and write
4630000
unkown
page read and write
504B000
heap private
page read and write
46EC000
unkown image
page readonly
7FF5E65B6000
unkown image
page readonly
1CED9AFC000
unkown
page read and write
222E8F02000
unkown
page read and write
172A4088000
unkown
page read and write
1C3537A000
stack
page read and write
7FF585F13000
unkown image
page readonly
504B000
heap private
page read and write
1CA14C30000
heap default
page read and write
1900000
unkown image
page readonly
B37117E000
stack
page read and write
7BB000
unkown
page read and write
29A1000
unkown image
page readonly
3CB000
unkown
page read and write
1DBA3000000
unkown
page read and write
4630000
unkown
page read and write
1DBA2F80000
unkown image
page readonly
7FF4FC822000
unkown image
page readonly
7FF58602D000
unkown image
page readonly
4630000
unkown
page read and write
7FF4ECE88000
unkown image
page readonly
7211FEB000
unkown
page read and write
1CED9A78000
unkown
page read and write
29F9E387000
unkown
page read and write
7DF524F10000
unkown image
page readonly
7B0000
unkown image
page readonly
1C3547E000
stack
page read and write
2A81000
unkown image
page readonly
7FF57EBE8000
unkown image
page readonly
7FF585F65000
unkown image
page readonly
1CA14E48000
unkown
page read and write
8F5000
heap default
page read and write
7DF587470000
unkown image
page readonly
1D9ECB85000
heap private
page read and write
7C2000
unkown
page read and write
C60000
unkown
page read and write
29F9E3BC000
unkown
page read and write
4F6B000
heap private
page read and write
1CA14E41000
unkown
page read and write
7FF5520F5000
unkown image
page readonly
2DFC2500000
unkown
page read and write
29F9E3C0000
unkown
page read and write
7FF58DBA5000
unkown image
page readonly
4A7A000
stack
page read and write
7E0000
unkown
page read and write
4630000
unkown
page read and write
7FF58DC3B000
unkown image
page readonly
29F9E37F000
unkown
page read and write
7DF512392000
unkown image
page readonly
7FF4FCA5B000
unkown image
page readonly
7FF57F045000
unkown image
page readonly
B11000
heap default
page read and write
7FF50F5B8000
unkown image
page readonly
72B000
unkown
page read and write
7FF4EC714000
unkown image
page readonly
7DF59B940000
unkown image
page readonly
3040000
unkown image
page readonly
7FF5523B4000
unkown image
page readonly
860000
stack
page read and write
7DF4F9DB0000
unkown image
page readonly
2522E640000
heap private
page read and write
7FF50F4F7000
unkown image
page readonly
2DFC2800000
unkown image
page readonly
2A1D000
unkown image
page readonly
2DFC244B000
unkown
page read and write
18422C13000
unkown
page read and write
172A406C000
unkown
page read and write
C60000
unkown
page read and write
10000000
unkown image
page readonly
7FF4FC997000
unkown image
page readonly
53DD000
stack
page read and write
2CB0000
unkown image
page readonly
8E0000
unkown image
page read and write
29F9E3A1000
unkown
page read and write
C60000
unkown
page read and write
C60000
unkown
page read and write
5C0000
unkown
page read and write
7DF587460000
unkown image
page readonly
7FF552437000
unkown image
page readonly
4630000
unkown
page read and write
7DF587462000
unkown image
page readonly
C60000
unkown
page read and write
222E8CD0000
unkown image
page readonly
7FF57F0E0000
unkown image
page readonly
7E0000
unkown
page read and write
880000
stack
page read and write
29F9E802000
unkown
page read and write
7FF59134E000
unkown image
page readonly
7FF4FC2D4000
unkown image
page readonly
170000
unkown image
page readonly
4A1D000
stack
page read and write
2DFC23B0000
unkown
page read and write
7FF5E65D4000
unkown image
page readonly
2522E849000
unkown
page read and write
1CA14E7C000
unkown
page read and write
2DFC244A000
unkown
page read and write
4D6C000
heap private
page read and write
1DBA3087000
unkown
page read and write
2D97000
unkown
page read and write
C60000
unkown
page read and write
5C0000
unkown
page read and write
7FF552263000
unkown image
page readonly
7FF585F5D000
unkown image
page readonly
5C0000
unkown
page read and write
2D48000
heap default
page read and write
1CEDEF88000
unkown
page read and write
4630000
unkown
page read and write
2A0D000
unkown image
page readonly
29F9D900000
heap private
page read and write
7FF4ECDE4000
unkown image
page readonly
172A4102000
unkown
page read and write
7DF5FBEF2000
unkown image
page readonly
A6E000
stack
page read and write
7FF57EF5F000
unkown image
page readonly
4630000
unkown
page read and write
25A4000
unkown image
page readonly
172A404D000
unkown
page read and write
4F6B000
heap private
page read and write
29F9E393000
unkown
page read and write
10005000
unkown image
page read and write
1CED9AA5000
unkown
page read and write
64D6A7E000
stack
page read and write
4630000
unkown
page read and write
29F9D990000
unkown
page read and write
29F9D940000
unkown image
page readonly
1CEDF212000
unkown
page read and write
7E0000
unkown
page read and write
4640000
heap private
page read and write
7FF585F3D000
unkown image
page readonly
4630000
unkown
page read and write
662000
unkown
page read and write
7FF54818B000
unkown image
page readonly
7DF594A02000
unkown image
page readonly
29F9E389000
unkown
page read and write
5C0000
unkown
page read and write
4D6C000
heap private
page read and write
5C0000
unkown
page read and write
18423180000
unkown image
page readonly
222E9602000
unkown
page read and write
1DBA304C000
unkown
page read and write
7FF57F10F000
unkown image
page readonly
7FF50F0C9000
unkown image
page readonly
7E0000
unkown
page read and write
7FF5E65EF000
unkown image
page readonly
7FF5480AD000
unkown image
page readonly
29F9DAF6000
unkown
page read and write
7FF5E65EB000
unkown image
page readonly
7FF50F4D8000
unkown image
page readonly
4630000
unkown
page read and write
10003000
unkown image
page readonly
7FF4FCA48000
unkown image
page readonly
1CED9A00000
unkown
page read and write
1DBA306D000
unkown
page read and write
7FF4FC964000
unkown image
page readonly
4439000
heap private
page read and write
7FF5480D5000
unkown image
page readonly
7FF5713D1000
unkown image
page readonly
7DF524F00000
unkown image
page readonly
7E0000
unkown
page read and write
963837F000
stack
page read and write
C60000
unkown
page read and write
29EB000
unkown image
page readonly
D60000
heap private
page read and write
2522E857000
unkown
page read and write
29F9E393000
unkown
page read and write
7F4E0000
unkown image
page readonly
5D0000
unkown image
page readonly
1CED9A8C000
unkown
page read and write
5C0000
unkown
page read and write
7E0000
unkown
page read and write
28C9000
unkown image
page readonly
7FF50F4EC000
unkown image
page readonly
2DFC247E000
unkown
page read and write
25B4000
unkown image
page readonly
C60000
unkown
page read and write
2522E913000
unkown
page read and write
29F9E389000
unkown
page read and write
1DBA3100000
unkown
page read and write
29F9E393000
unkown
page read and write
5C0000
unkown
page read and write
7FF4FC90E000
unkown image
page readonly
29F9E3A4000
unkown
page read and write
1CED9AAA000
unkown
page read and write
7FF5E63B6000
unkown image
page readonly
7FF58DB77000
unkown image
page readonly
7E0000
unkown
page read and write
83B000
stack
page read and write
7DF59B920000
unkown image
page readonly
29F9E384000
unkown
page read and write
1CED9A9B000
unkown
page read and write
1CEDF0E0000
unkown
page read and write
900000
unkown image
page readonly
7DF5A4E30000
unkown image
page readonly
7FF4FC8B2000
unkown image
page readonly
61A000
unkown
page read and write
2A05000
unkown image
page readonly
7FF57F0ED000
unkown image
page readonly
7FF58F465000
unkown image
page readonly
1D9EC9AE000
unkown
page read and write
2D53000
unkown
page read and write
63D000
unkown
page read and write
7FF548158000
unkown image
page readonly
172A3DC0000
unkown image
page read and write
7FF5523ED000
unkown image
page readonly
7FF552223000
unkown image
page readonly
29F9E802000
unkown
page read and write
18422C5C000
unkown
page read and write
B23000
unkown
page read and write
2522E84C000
unkown
page read and write
29F9D960000
heap default
page read and write
172A3E00000
unkown image
page readonly
8F7000
heap private
page read and write
7FF4ECF3B000
unkown image
page readonly
7DF587480000
unkown image
page readonly
7E0000
unkown
page read and write
4A28000
heap private
page read and write
7E0000
unkown
page read and write
5C0000
unkown
page read and write
7F9C0000
unkown image
page readonly
172A4400000
unkown image
page readonly
7DF524EF0000
unkown image
page readonly
7FF55222A000
unkown image
page readonly
2522E858000
unkown
page read and write
4630000
unkown
page read and write
1CEDA970000
unkown
page read and write
29F9E372000
unkown
page read and write
4630000
unkown
page read and write
1D9EC9B2000
unkown
page read and write
CEB000
stack
page read and write
A90000
unkown image
page readonly
2BFA000
unkown
page read and write
7FF5E6555000
unkown image
page readonly
4AB0000
heap private
page read and write
7FF5E6533000
unkown image
page readonly
1CEDA359000
unkown
page read and write
29F9DAEC000
unkown
page read and write
29F9E393000
unkown
page read and write
C60000
unkown
page read and write
7F500000
unkown image
page readonly
3180000
unkown image
page readonly
7FF4FCA8F000
unkown image
page readonly
7FF50F4B0000
unkown image
page readonly
D9BD47F000
stack
page read and write
7E0000
unkown
page read and write
29F9DA4A000
unkown
page read and write
7FF585F00000
unkown image
page readonly
1D9ECDB0000
unkown image
page readonly
7EB000
unkown
page read and write
7DF502870000
unkown image
page readonly
10000000
unkown image
page readonly
4630000
unkown
page read and write
7DF502860000
unkown image
page readonly
C60000
unkown
page read and write
29F9E802000
unkown
page read and write
2C40000
stack
page read and write
7FF591467000
unkown image
page readonly
7FF58DAC5000
unkown image
page readonly
18422A60000
unkown image
page readonly
7F820000
unkown image
page readonly
7FF58D748000
unkown image
page readonly
222E9210000
unkown image
page readonly
29F9DAE1000
unkown
page read and write
7DF502880000
unkown image
page readonly
7FF50F543000
unkown image
page readonly
4F6B000
heap private
page read and write
23F74D50000
unkown image
page readonly
16EB000
heap private
page read and write
29F9DAA4000
unkown
page read and write
511907C000
stack
page read and write
7FF58DA83000
unkown image
page readonly
7FF54818E000
unkown image
page readonly
7E0000
unkown
page read and write
7DF5A4E20000
unkown image
page readonly
29F9DA5B000
unkown
page read and write
10003000
unkown image
page readonly
4630000
unkown
page read and write
7FF4FC5EE000
unkown image
page readonly
4630000
unkown
page read and write
7FF4FC768000
unkown image
page readonly
1DBA3049000
unkown
page read and write
7E0000
unkown
page read and write
29FC000
unkown image
page readonly
29F9E050000
unkown image
page readonly
5DB000
heap default
page read and write
B23000
unkown
page read and write
B2D5C7E000
stack
page read and write
29F9E393000
unkown
page read and write
2D7C000
unkown
page read and write
7FF50F52D000
unkown image
page readonly
2DFC2456000
unkown
page read and write
C60000
unkown
page read and write
5C0000
unkown
page read and write
C15D4DB000
unkown
page read and write
C60000
unkown
page read and write
7FF5E64E7000
unkown image
page readonly
7F4F2000
unkown image
page readonly
46E1000
unkown image
page execute read
7FF5E65EF000
unkown image
page readonly
C60000
unkown
page read and write
7FF59146C000
unkown image
page readonly
5C0000
unkown
page read and write
1D901E60000
unkown image
page readonly
7FF57EDC3000
unkown image
page readonly
7FF585C05000
unkown image
page readonly
4630000
unkown
page read and write
ECE3AFE000
stack
page read and write
29F9E3B5000
unkown
page read and write
5C0000
unkown
page read and write
530F000
stack
page read and write
5C0000
unkown
page read and write
5C0000
unkown
page read and write
4630000
unkown
page read and write
1CED9AAD000
unkown
page read and write
1D9017F0000
unkown
page read and write
7FF59152B000
unkown image
page readonly
29E5000
unkown image
page readonly
There are 2218 hidden memdumps, click here to show them.