IOCReport

loading gif

Files

File Path
Type
Category
Malicious
initial sample
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{936DC963-5585-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{936DC965-5585-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\xlsx[1].png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\spoguestaccess-a0017cc2[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Temp\~DF3A4ED906E2C2A4CC.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFF5BAC88AD18566F0.TMP
data
dropped
clean
C:\Users\user\Desktop\cmdline.out
ASCII text, with CRLF line terminators
modified
clean
C:\Users\user\Desktop\download\.wget-hsts
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\Desktop\download\Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ@email=Bill.Sparrow@99restaurants.com&e=4%3AtJjRLx&at=9
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
dropped
clean
There are 9 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P 'C:\Users\user\Desktop\download' --no-check-certificate --content-disposition --user-agent='Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko' 'https://partnersinhealth.sharepoint.com/:x:/s/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntelligenceUnit/Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ?email=Bill.Sparrow%4099restaurants.com&e=4%3atJjRLx&at=9' > cmdline.out 2>&1
clean
C:\Windows\System32\conhost.exe
C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
clean
C:\Windows\SysWOW64\wget.exe
wget -t 2 -v -T 60 -P 'C:\Users\user\Desktop\download' --no-check-certificate --content-disposition --user-agent='Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko' 'https://partnersinhealth.sharepoint.com/:x:/s/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntelligenceUnit/Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ?email=Bill.Sparrow%4099restaurants.com&e=4%3atJjRLx&at=9'
clean
C:\Program Files\internet explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' C:\Users\user\Desktop\download\Ec_oHive0IlGh0zKWdNWJqwBv4CGuicjIXG6ZM__kHKiUQ@email=Bill.Sparrow@99restaurants.com&e=4%3AtJjRLx&at=9.html
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:464 CREDAT:17410 /prefetch:2
clean

URLs

Name
IP
Malicious
http://www.nytimes.com/
unknown
clean
https://spoprod-a.akamaihd.net/files/fabric-cdn-prod_20201008.001/assets/item-types/
unknown
clean
https://github.com/microsoft/fluentui/wiki/Using-icons
unknown
clean
https://partnersinhealth.sharepoint.com/sites/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntellige
unknown
clean
http://www.youtube.com/
unknown
clean
http://www.wikipedia.com/
unknown
clean
http://www.amazon.com/
unknown
clean
http://www.live.com/
unknown
clean
https://spoprod-a.akamaihd.net
unknown
clean
http://www.reddit.com/
unknown
clean
http://www.twitter.com/
unknown
clean
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
unknown
clean
https://static2.sharepointonline.com/files/fabric/assets
unknown
clean
https://partnersinhealth.sharepoint.com/:x:/s/COVIDCommunityTeam-Massachusetts-EIU-EpidemicIntellige
unknown
clean
There are 4 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
18164-ipv4.farm.prod.aa-rt.sharepoint.com
40.108.137.41
clean
partnersinhealth.sharepoint.com
unknown
clean
spoprod-a.akamaihd.net
unknown
clean

IPs

IP
Domain
Country
Active
Malicious
40.108.137.41
unknown
United States
unknown
clean
192.168.2.1
unknown
unknown
unknown
clean

Registry

Path
Value
Malicious
C:\Program Files\internet explorer\iexplore.exe
{936DC963-5585-11EB-90E4-ECF4BB862DED}
clean
C:\Program Files\internet explorer\iexplore.exe
AdminActive
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Blocked
clean
C:\Program Files\internet explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
Count
clean
C:\Program Files\internet explorer\iexplore.exe
Time
clean
C:\Program Files\internet explorer\iexplore.exe
CVListPingLastYMD
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\internet explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\internet explorer\iexplore.exe
NextUpdateDate
clean
There are 7 hidden registries, click here to show them.

Memdumps

Base Address
Regiontype
Protect
Malicious
237B866B000
unkown
page read and write
clean
7FF54DF20000
unkown
page readonly
clean
7FF5D6415000
unkown
page readonly
clean
201DCFFE000
unkown
page read and write
clean
7FF5D641F000
unkown
page readonly
clean
7FF502588000
unkown
page readonly
clean
7FF5A95FD000
unkown
page readonly
clean
8DD9D7E000
unkown
page read and write
clean
7FF534F90000
unkown
page readonly
clean
7FF5776B7000
unkown
page readonly
clean
201D7A56000
unkown
page read and write
clean
B21000
unkown
page read and write
clean
201D79C0000
unkown
page read and write
clean
7FF5B9E42000
unkown
page readonly
clean
7FF50D70A000
unkown
page readonly
clean
1D234860000
unkown
page read and write
clean
7FF577719000
unkown
page readonly
clean
7FF535625000
unkown
page readonly
clean
7FF5A4908000
unkown
page readonly
clean
7FF535396000
unkown
page readonly
clean
1CF53878000
heap default
page read and write
clean
263C716F000
unkown
page read and write
clean
201DD0F8000
unkown
page write copy
clean
6C4B15B000
unkown
page read and write
clean
118CFE4A000
unkown
page read and write
clean
7FF54DD4A000
unkown
page readonly
clean
7CBB7E000
unkown
page read and write
clean
7FF5D7FA9000
unkown
page readonly
clean
7FF57770E000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
201DCED0000
unkown
page read and write
clean
7FF50DF09000
unkown
page readonly
clean
7FF5A9699000
unkown
page readonly
clean
7FF502601000
unkown
page readonly
clean
118D17E0000
unkown
page readonly
clean
7FF5351D1000
unkown
page readonly
clean
237B88D0000
unkown
page readonly
clean
7FF54DF80000
unkown
page readonly
clean
7FF577711000
unkown
page readonly
clean
263C7129000
unkown
page read and write
clean
30D717F000
unkown
page read and write
clean
7FF5B9DE5000
unkown
page readonly
clean
7FF5B9E0D000
unkown
page readonly
clean
7FF534FA7000
unkown
page readonly
clean
201D8A10000
unkown
page read and write
clean
7FF5D7FA1000
unkown
page readonly
clean
7FF5AF025000
unkown
page readonly
clean
B68000
unkown
page read and write
clean
263C6813000
unkown
page read and write
clean
7FF502699000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
28AD6600000
unkown
page readonly
clean
9C000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF53F1B9000
unkown
page readonly
clean
7FF5025E9000
unkown
page readonly
clean
7FF5A4A19000
unkown
page readonly
clean
201D7A52000
unkown
page read and write
clean
7FF5D6429000
unkown
page readonly
clean
7FF53560A000
unkown
page readonly
clean
BC5D2FE000
unkown
page read and write
clean
7FF50DEC8000
unkown
page readonly
clean
2AD000
unkown
page read and write
clean
201D8302000
unkown
page read and write
clean
9AD207F000
unkown
page read and write
clean
7FF5771D6000
unkown
page readonly
clean
1A2AFA40000
unkown
page read and write
clean
14B0000
heap private
page read and write
clean
28AD63B0000
unkown
page readonly
clean
201DD2AE000
unkown
page read and write
clean
7FF50260C000
unkown
page readonly
clean
263C7110000
unkown
page read and write
clean
7FF535363000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
1D234875000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF5353B7000
unkown
page readonly
clean
201DD2AB000
unkown
page read and write
clean
7FF5AF0D5000
unkown
page readonly
clean
7FF53F136000
unkown
page readonly
clean
8628EFD000
unkown
page read and write
clean
7FF535322000
unkown
page readonly
clean
28AD6E00000
unkown
page readonly
clean
7FF5A92B5000
unkown
page readonly
clean
6C4B7FB000
unkown
page read and write
clean
7FF5D6470000
unkown
page readonly
clean
201DD1D0000
unkown
page readonly
clean
7FF5A9625000
unkown
page readonly
clean
7FF53528C000
unkown
page readonly
clean
263C7540000
unkown
page readonly
clean
7FF5D63AA000
unkown
page readonly
clean
7FF53502F000
unkown
page readonly
clean
201D7A9A000
unkown
page read and write
clean
237B8613000
unkown
page read and write
clean
1A6932D0000
unkown
page readonly
clean
263C7200000
unkown
page readonly
clean
7FF54DE98000
unkown
page readonly
clean
7FF5AF116000
unkown
page readonly
clean
7FF50261C000
unkown
page readonly
clean
7FF576E4F000
unkown
page readonly
clean
7FF535639000
unkown
page readonly
clean
1DAF0AE0000
unkown
page readonly
clean
FABAAFF000
unkown
page read and write
clean
5D33A7F000
unkown
page read and write
clean
263C714B000
unkown
page read and write
clean
2A1B6B40000
unkown
page readonly
clean
237B8560000
unkown
page readonly
clean
1C963385000
heap private
page read and write
clean
118CFD40000
unkown
page readonly
clean
28AD64E4000
unkown
page read and write
clean
1BA8F060000
heap private
page read and write
clean
118D1802000
unkown
page read and write
clean
1D234C00000
unkown
page readonly
clean
8DD989C000
unkown
page read and write
clean
7CBC7F000
unkown
page read and write
clean
118CFDB0000
unkown
page read and write
clean
1D234858000
unkown
page read and write
clean
1D23487E000
unkown
page read and write
clean
7FF502268000
unkown
page readonly
clean
7FF5AF0CE000
unkown
page readonly
clean
7FF53565C000
unkown
page readonly
clean
7FF57734B000
unkown
page readonly
clean
2A1B5D90000
unkown
page readonly
clean
562AA7F000
unkown
page read and write
clean
7CBF7C000
unkown
page read and write
clean
263C7102000
unkown
page read and write
clean
1DAF0EE0000
unkown
page readonly
clean
1D23486F000
unkown
page read and write
clean
1A2AFC00000
unkown
page readonly
clean
3621CC000
unkown
page read and write
clean
7FF5D645C000
unkown
page readonly
clean
7FF5A8DE5000
unkown
page readonly
clean
9AD1C8B000
unkown
page read and write
clean
7FF5A4255000
unkown
page readonly
clean
1D234829000
unkown
page read and write
clean
7FF5025CE000
unkown
page readonly
clean
1A693450000
unkown
page readonly
clean
7FF535297000
unkown
page readonly
clean
263C7177000
unkown
page read and write
clean
201D7A8C000
unkown
page read and write
clean
201DD150000
unkown
page read and write
clean
FABACFF000
unkown
page read and write
clean
FABA5FC000
unkown
page read and write
clean
201DD256000
unkown
page read and write
clean
1D234845000
unkown
page read and write
clean
7DFA1A135000
unkown
page readonly
clean
201D8900000
unkown
page read and write
clean
7FF5025DF000
unkown
page readonly
clean
237B8602000
unkown
page read and write
clean
201D7990000
heap default
page read and write
clean
7FF53F145000
unkown
page readonly
clean
7FF5B9E26000
unkown
page readonly
clean
7FF534C2F000
unkown
page readonly
clean
28AD646B000
unkown
page read and write
clean
1CF53AF0000
heap private
page read and write
clean
B60000
unkown
page read and write
clean
F4F000
stack
page read and write
clean
201DD0C8000
unkown
page readonly
clean
263C67A0000
unkown
page read and write
clean
28AD6429000
unkown
page read and write
clean
7FF54DEAA000
unkown
page readonly
clean
7FF54DAEE000
unkown
page readonly
clean
263C7015000
unkown
page read and write
clean
7FF5A49B2000
unkown
page readonly
clean
7FF5021D3000
unkown
page readonly
clean
1D2346C0000
heap private
page read and write
clean
7FF50DEB0000
unkown
page readonly
clean
1A2AF9F0000
unkown
page read and write
clean
1BA8D660000
unkown
page readonly
clean
B29000
unkown
page read and write
clean
1D234884000
unkown
page read and write
clean
30D6F7E000
unkown
page read and write
clean
7FF535326000
unkown
page readonly
clean
7FF5D63D2000
unkown
page readonly
clean
7FF5A4780000
unkown
page readonly
clean
7FF5355E2000
unkown
page readonly
clean
1A693318000
heap default
page read and write
clean
201DD034000
unkown
page read and write
clean
7FF5352FC000
unkown
page readonly
clean
7FF5350CE000
unkown
page readonly
clean
31D907E000
unkown
page read and write
clean
201D81F0000
unkown
page read and write
clean
7FF54DCEE000
unkown
page readonly
clean
263C714F000
unkown
page read and write
clean
B25000
unkown
page read and write
clean
201D7A00000
unkown
page read and write
clean
7FF577686000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
201DCEA0000
unkown
page readonly
clean
7FF53540E000
unkown
page readonly
clean
1DAF0C0E000
heap default
page read and write
clean
FABA8FE000
unkown
page read and write
clean
30D69BB000
unkown
page read and write
clean
7FF502625000
unkown
page readonly
clean
7FF502637000
unkown
page readonly
clean
7FF50DFB9000
unkown
page readonly
clean
1BA8D5E0000
unkown
page read and write
clean
118CFD60000
unkown
page read and write
clean
201D8930000
unkown
page read and write
clean
7FF53566C000
unkown
page readonly
clean
7FF5A9606000
unkown
page readonly
clean
7FF5A4955000
unkown
page readonly
clean
7FF54DE80000
unkown
page readonly
clean
7FF535285000
unkown
page readonly
clean
7FF5A961C000
unkown
page readonly
clean
263C6902000
unkown
page read and write
clean
7FF5A46E0000
unkown
page readonly
clean
237B8800000
unkown
page readonly
clean
1D234846000
unkown
page read and write
clean
5D3397E000
unkown
page read and write
clean
7FF50DEC6000
unkown
page readonly
clean
7FF5A4904000
unkown
page readonly
clean
7FF5D7F0D000
unkown
page readonly
clean
7FF5A4551000
unkown
page readonly
clean
201DD2B0000
unkown
page read and write
clean
7FF54DECF000
unkown
page readonly
clean
1BA8D44D000
heap default
page read and write
clean
28AD6360000
unkown
page readonly
clean
7FF502551000
unkown
page readonly
clean
7FF54DE82000
unkown
page readonly
clean
7FF5D7EB8000
unkown
page readonly
clean
201DCFF0000
unkown
page read and write
clean
201D8202000
unkown
page read and write
clean
7FF57763A000
unkown
page readonly
clean
1D234844000
unkown
page read and write
clean
FABA37B000
unkown
page read and write
clean
201DD24C000
unkown
page read and write
clean
7CB59B000
unkown
page read and write
clean
2A1B5D50000
unkown
page readonly
clean
201D81E3000
unkown
page read and write
clean
7FF5D63E8000
unkown
page readonly
clean
263C6A00000
unkown
page readonly
clean
201DD010000
unkown
page read and write
clean
7FF5A95DF000
unkown
page readonly
clean
C6C7B7E000
unkown
page read and write
clean
7FF50DEF5000
unkown
page readonly
clean
7FF5B9E9E000
unkown
page readonly
clean
7FF5A497D000
unkown
page readonly
clean
1BA8D6E5000
heap private
page read and write
clean
2B1000
unkown
page read and write
clean
237B8700000
unkown
page read and write
clean
1DAF0A80000
unkown
page readonly
clean
201DD21F000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
2A1B5C10000
heap private
page read and write
clean
7FF576E58000
unkown
page readonly
clean
7FF502634000
unkown
page readonly
clean
7FF5352B1000
unkown
page readonly
clean
7FF5A498C000
unkown
page readonly
clean
FABA9FE000
unkown
page read and write
clean
7FF5AF0FD000
unkown
page readonly
clean
7FF534FE8000
unkown
page readonly
clean
263C7171000
unkown
page read and write
clean
2A1B5C70000
heap default
page read and write
clean
B69000
unkown
page read and write
clean
7FF5025A6000
unkown
page readonly
clean
7FF53F1B1000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
201D7A97000
unkown
page read and write
clean
118CFDF0000
unkown
page read and write
clean
201DD130000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
562AB7E000
unkown
page read and write
clean
1D234861000
unkown
page read and write
clean
7FF5A9699000
unkown
page readonly
clean
7FF54DDFC000
unkown
page readonly
clean
7FF534E63000
unkown
page readonly
clean
7FF5B9EA1000
unkown
page readonly
clean
7FF5D6365000
unkown
page readonly
clean
1A2AF9B0000
unkown
page readonly
clean
BC5CEFF000
unkown
page read and write
clean
8628C7D000
unkown
page read and write
clean
237B8628000
unkown
page read and write
clean
7FF53E9EC000
unkown
page readonly
clean
7FF53531B000
unkown
page readonly
clean
263C67E0000
unkown
page readonly
clean
BC5CA7C000
unkown
page read and write
clean
7FF5D6474000
unkown
page readonly
clean
7FF5A495F000
unkown
page readonly
clean
201DD23F000
unkown
page read and write
clean
B22000
unkown
page read and write
clean
86288FE000
unkown
page read and write
clean
7FF5A9590000
unkown
page readonly
clean
C6C727C000
unkown
page read and write
clean
1D234841000
unkown
page read and write
clean
263C683D000
unkown
page read and write
clean
7FF5025A2000
unkown
page readonly
clean
7FF535675000
unkown
page readonly
clean
201DD29E000
unkown
page read and write
clean
7FF5D62A9000
unkown
page readonly
clean
7FF5022CE000
unkown
page readonly
clean
A90000
unkown
page read and write
clean
263C7002000
unkown
page read and write
clean
237B9000000
unkown
page readonly
clean
201D81E0000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
134F000
stack
page read and write
clean
7FF53F1B9000
unkown
page readonly
clean
201D8B40000
unkown
page readonly
clean
7FF5B9EA9000
unkown
page readonly
clean
7FF5D618E000
unkown
page readonly
clean
263C685D000
unkown
page read and write
clean
7FF50DEEE000
unkown
page readonly
clean
1BA8F380000
heap private
page read and write
clean
FABA4FF000
unkown
page read and write
clean
7FF50DCDA000
unkown
page readonly
clean
1CF53AF5000
heap private
page read and write
clean
7FF534F53000
unkown
page readonly
clean
7FF54DE8D000
unkown
page readonly
clean
263C6770000
heap default
page read and write
clean
118CFE49000
unkown
page read and write
clean
1A2AFA2A000
unkown
page read and write
clean
7FF54DE78000
unkown
page readonly
clean
1D234874000
unkown
page read and write
clean
B2D000
unkown
page read and write
clean
1D234902000
unkown
page read and write
clean
28AD6488000
unkown
page read and write
clean
B23000
unkown
page read and write
clean
7FF54DF89000
unkown
page readonly
clean
6C4BEFD000
unkown
page read and write
clean
1BA8D670000
unkown
page readonly
clean
7FF5B9DB8000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
7FF5D7F1C000
unkown
page readonly
clean
7FF50268E000
unkown
page readonly
clean
1BA8D650000
unkown
page readonly
clean
1BA8D3F0000
unkown
page read and write
clean
2A1B5D60000
unkown
page readonly
clean
201DD1F0000
unkown
page readonly
clean
1A6931E0000
unkown
page readonly
clean
1CF53870000
heap default
page read and write
clean
1DAF0ED5000
heap private
page read and write
clean
1D234800000
unkown
page read and write
clean
6C4BDFF000
unkown
page read and write
clean
28AD6380000
unkown
page read and write
clean
7FF5A467D000
unkown
page readonly
clean
1DAF0BB0000
unkown
page read and write
clean
201DD0C0000
unkown
page read and write
clean
201D7A74000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
1D23485A000
unkown
page read and write
clean
7FF5B9E2C000
unkown
page readonly
clean
201DD460000
unkown
page readonly
clean
7FF5D63E6000
unkown
page readonly
clean
1C963740000
unkown
page readonly
clean
118CFE5A000
unkown
page read and write
clean
201DD150000
unkown
page readonly
clean
201DD150000
unkown
page read and write
clean
7FF5023C7000
unkown
page readonly
clean
7FF53F109000
unkown
page readonly
clean
1BA8D6E0000
heap private
page read and write
clean
9AD20FF000
unkown
page read and write
clean
562A67C000
unkown
page read and write
clean
7FF502616000
unkown
page readonly
clean
36267F000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF5B9EA9000
unkown
page readonly
clean
118CFE4A000
unkown
page read and write
clean
118CFE3D000
unkown
page read and write
clean
263C6900000
unkown
page read and write
clean
1D234865000
unkown
page read and write
clean
7FF5D6298000
unkown
page readonly
clean
7FF53502C000
unkown
page readonly
clean
31D90FF000
unkown
page read and write
clean
201DD140000
unkown
page read and write
clean
7FF5A4922000
unkown
page readonly
clean
7FF54DCB4000
unkown
page readonly
clean
118D0390000
unkown
page readonly
clean
263C7135000
unkown
page read and write
clean
263C7162000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF5352DB000
unkown
page readonly
clean
201D7930000
heap private
page read and write
clean
7FF5D7F26000
unkown
page readonly
clean
7FF5356E1000
unkown
page readonly
clean
7FF5D7EE5000
unkown
page readonly
clean
7FF502547000
unkown
page readonly
clean
5D33B7E000
unkown
page read and write
clean
7FF5025A8000
unkown
page readonly
clean
7FF5775F7000
unkown
page readonly
clean
1D235002000
unkown
page read and write
clean
7FF5352E7000
unkown
page readonly
clean
237B867C000
unkown
page read and write
clean
201D8B50000
unkown
page readonly
clean
562A97B000
unkown
page read and write
clean
114F000
stack
page read and write
clean
7FF5D7FA9000
unkown
page readonly
clean
7FF5351D8000
unkown
page readonly
clean
28AD6D00000
unkown
page read and write
clean
C6C74FE000
unkown
page read and write
clean
263C7100000
unkown
page read and write
clean
7FF5D6465000
unkown
page readonly
clean
7FF577696000
unkown
page readonly
clean
1D234E80000
unkown
page read and write
clean
7FF5B9DBA000
unkown
page readonly
clean
7FF5776B0000
unkown
page readonly
clean
7FF53519F000
unkown
page readonly
clean
1CF53990000
unkown
page read and write
clean
7FF53568D000
unkown
page readonly
clean
7FF5A9250000
unkown
page readonly
clean
7FF54DEF1000
unkown
page readonly
clean
6C4B8FF000
unkown
page read and write
clean
263C6790000
unkown
page readonly
clean
7FF5353A5000
unkown
page readonly
clean
7FF53517E000
unkown
page readonly
clean
28AD6451000
unkown
page read and write
clean
7FF53F13C000
unkown
page readonly
clean
201D8B20000
unkown
page readonly
clean
7FF534F55000
unkown
page readonly
clean
1A693180000
unkown
page readonly
clean
B10000
heap default
page read and write
clean
237B8C60000
unkown
page readonly
clean
B68000
unkown
page read and write
clean
7FF5D640E000
unkown
page readonly
clean
201DCEF0000
unkown
page read and write
clean
1D234A00000
unkown
page readonly
clean
7FF535651000
unkown
page readonly
clean
237B8550000
unkown
page readonly
clean
2A1B5E02000
unkown
page read and write
clean
1D234840000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
263C7169000
unkown
page read and write
clean
30D6E7E000
unkown
page read and write
clean
3624FE000
unkown
page read and write
clean
31D8F7F000
unkown
page read and write
clean
379F000
stack
page read and write
clean
1A2AF9C0000
unkown
page read and write
clean
7FF502592000
unkown
page readonly
clean
862857B000
unkown
page read and write
clean
1D23483D000
unkown
page read and write
clean
1BA8D390000
unkown
page readonly
clean
7FF5A9637000
unkown
page readonly
clean
263C682A000
unkown
page read and write
clean
1A693445000
heap private
page read and write
clean
7FF535158000
unkown
page readonly
clean
7FF5D7F2C000
unkown
page readonly
clean
201DD2AD000
unkown
page read and write
clean
7FF54DF27000
unkown
page readonly
clean
7FF50DFAE000
unkown
page readonly
clean
201D7A76000
unkown
page read and write
clean
7FF5D625F000
unkown
page readonly
clean
7FF5352FC000
unkown
page readonly
clean
A4E000
unkown
page read and write
clean
7FF5D63FA000
unkown
page readonly
clean
7FF50254A000
unkown
page readonly
clean
237B84E0000
heap private
page read and write
clean
118CFC00000
heap private
page read and write
clean
7FF57749F000
unkown
page readonly
clean
7FF5A479F000
unkown
page readonly
clean
263C6913000
unkown
page read and write
clean
7FF57767D000
unkown
page readonly
clean
7FF54DAF2000
unkown
page readonly
clean
1CF53790000
unkown
page readonly
clean
562A87F000
unkown
page read and write
clean
7FF57769C000
unkown
page readonly
clean
7FF535386000
unkown
page readonly
clean
6C4BAFE000
unkown
page read and write
clean
7FF534B91000
unkown
page readonly
clean
118CFF00000
unkown
page read and write
clean
118CFF13000
unkown
page read and write
clean
237B8657000
unkown
page read and write
clean
7FF5A47E9000
unkown
page readonly
clean
BC5D0FB000
unkown
page read and write
clean
1BA8D437000
heap default
page read and write
clean
7FF5775A5000
unkown
page readonly
clean
201DD150000
unkown
page read and write
clean
1D234868000
unkown
page read and write
clean
237B8702000
unkown
page read and write
clean
1D23486D000
unkown
page read and write
clean
201D7A6C000
unkown
page read and write
clean
201D8300000
unkown
page read and write
clean
6C4BD7A000
unkown
page read and write
clean
C6C72FE000
unkown
page read and write
clean
1D23483A000
unkown
page read and write
clean
7FF577253000
unkown
page readonly
clean
7FF5A4926000
unkown
page readonly
clean
1A6933E0000
unkown
page read and write
clean
7FF53564D000
unkown
page readonly
clean
1D234857000
unkown
page read and write
clean
2A1B5E40000
unkown
page read and write
clean
7FF577597000
unkown
page readonly
clean
7FF5A9253000
unkown
page readonly
clean
7FF535312000
unkown
page readonly
clean
2A1B6000000
unkown
page readonly
clean
263C7137000
unkown
page read and write
clean
AEE000
unkown
page read and write
clean
7FF54DD28000
unkown
page readonly
clean
2A1B5D70000
unkown
page read and write
clean
7FF5D6278000
unkown
page readonly
clean
7FF5353B0000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
1D234831000
unkown
page read and write
clean
1A6932B0000
unkown
page read and write
clean
7FF53535F000
unkown
page readonly
clean
7FF535355000
unkown
page readonly
clean
7FF5A9264000
unkown
page readonly
clean
7FF53F0F5000
unkown
page readonly
clean
7FF5D6477000
unkown
page readonly
clean
7FF5A4827000
unkown
page readonly
clean
1C963276000
heap default
page read and write
clean
8628A7E000
unkown
page read and write
clean
1D23484E000
unkown
page read and write
clean
7FF53561E000
unkown
page readonly
clean
1D234E70000
unkown
page readonly
clean
7FF5A4969000
unkown
page readonly
clean
263C6710000
heap private
page read and write
clean
7FF50DF3C000
unkown
page readonly
clean
7FF502690000
unkown
page readonly
clean
1D23487B000
unkown
page read and write
clean
14C0000
unkown
page readonly
clean
7FF50D70C000
unkown
page readonly
clean
201D8318000
unkown
page read and write
clean
7FF50DF1D000
unkown
page readonly
clean
13CE000
unkown
page read and write
clean
263C710E000
unkown
page read and write
clean
1D23485F000
unkown
page read and write
clean
7FF577610000
unkown
page readonly
clean
7FF54DEBE000
unkown
page readonly
clean
263C7113000
unkown
page read and write
clean
7FF5775FC000
unkown
page readonly
clean
BC5CF7C000
unkown
page read and write
clean
8628CFF000
unkown
page read and write
clean
8628B7E000
unkown
page read and write
clean
C6C757F000
unkown
page read and write
clean
7E006F591000
unkown
page readonly
clean
7FF50257C000
unkown
page readonly
clean
201D7A13000
unkown
page read and write
clean
BC5D4FF000
unkown
page read and write
clean
1D23486B000
unkown
page read and write
clean
1C963270000
heap default
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF5D7F35000
unkown
page readonly
clean
1A2AFA02000
unkown
page read and write
clean
C6C747B000
unkown
page read and write
clean
7FF5A9567000
unkown
page readonly
clean
201DD1A0000
unkown
page readonly
clean
7FF5A4996000
unkown
page readonly
clean
7FF54DE15000
unkown
page readonly
clean
7FF534C55000
unkown
page readonly
clean
7CBE7C000
unkown
page read and write
clean
1CF53970000
unkown
page read and write
clean
1DAF0BF0000
unkown
page readonly
clean
28AD6C02000
unkown
page read and write
clean
7FF502606000
unkown
page readonly
clean
118CFDF0000
unkown
page read and write
clean
7FF502537000
unkown
page readonly
clean
201DD400000
unkown
page readonly
clean
2A1B5C80000
unkown
page readonly
clean
C6C7779000
unkown
page read and write
clean
7FF5A9601000
unkown
page readonly
clean
7FF5D60A8000
unkown
page readonly
clean
118CFE02000
unkown
page read and write
clean
1A2AF990000
heap default
page read and write
clean
7FF5A49B4000
unkown
page readonly
clean
201DD0E4000
unkown
page readonly
clean
B6A000
unkown
page read and write
clean
201DD288000
unkown
page read and write
clean
6C4BB7F000
unkown
page read and write
clean
7FF5D7F9E000
unkown
page readonly
clean
7FF54DEFC000
unkown
page readonly
clean
36247F000
unkown
page read and write
clean
7FF535687000
unkown
page readonly
clean
7FF5355FA000
unkown
page readonly
clean
7FF5A422B000
unkown
page readonly
clean
263C712E000
unkown
page read and write
clean
2A1B6602000
unkown
page read and write
clean
C58000
heap default
page read and write
clean
118CFE67000
unkown
page read and write
clean
28AD6290000
unkown
page readonly
clean
1A2B0060000
unkown
page readonly
clean
7FF5351E9000
unkown
page readonly
clean
A8E000
unkown
page read and write
clean
7FF5352F3000
unkown
page readonly
clean
7FF5D64D9000
unkown
page readonly
clean
1BA8EE90000
unkown
page readonly
clean
7FF5A4A0E000
unkown
page readonly
clean
237B8540000
heap default
page read and write
clean
31D8FFF000
unkown
page read and write
clean
7FF5B9DF9000
unkown
page readonly
clean
7FF535308000
unkown
page readonly
clean
7FF5A46D5000
unkown
page readonly
clean
201D8215000
unkown
page read and write
clean
7FF535656000
unkown
page readonly
clean
7FF53558A000
unkown
page readonly
clean
7FF535594000
unkown
page readonly
clean
7FF53536C000
unkown
page readonly
clean
7FF5D61A0000
unkown
page readonly
clean
201DD100000
unkown
page read and write
clean
1BA8D600000
unkown
page readonly
clean
7FF5A95CE000
unkown
page readonly
clean
7FF5D64D9000
unkown
page readonly
clean
28AD64BA000
unkown
page read and write
clean
118CFE00000
unkown
page read and write
clean
7FF5351E0000
unkown
page readonly
clean
237B8713000
unkown
page read and write
clean
201D8E90000
unkown
page read and write
clean
7FF54DF06000
unkown
page readonly
clean
1BA8D6C0000
heap private
page read and write
clean
2A1B5E71000
unkown
page read and write
clean
5D3387C000
unkown
page read and write
clean
7FF5353B4000
unkown
page readonly
clean
201DD2B2000
unkown
page read and write
clean
7FF5A499C000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
28AD64C2000
unkown
page read and write
clean
7FF53558E000
unkown
page readonly
clean
8DD9C7D000
unkown
page read and write
clean
7FF5A494E000
unkown
page readonly
clean
201D79D0000
unkown
page read and write
clean
1BA8D41E000
heap default
page read and write
clean
7FF5D6195000
unkown
page readonly
clean
7FF5D623E000
unkown
page readonly
clean
263C7164000
unkown
page read and write
clean
28AD6990000
unkown
page readonly
clean
2A1B6800000
unkown
page readonly
clean
6C4BBFF000
unkown
page read and write
clean
7FF5A4A11000
unkown
page readonly
clean
7FF54DD97000
unkown
page readonly
clean
201DD0E0000
unkown
page write copy
clean
1A2B0202000
unkown
page read and write
clean
263C7000000
unkown
page read and write
clean
7FF5AF191000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
7FF5A95D5000
unkown
page readonly
clean
B60000
unkown
page read and write
clean
263C7148000
unkown
page read and write
clean
7FF535680000
unkown
page readonly
clean
6C4B6FD000
unkown
page read and write
clean
118CFF02000
unkown
page read and write
clean
7FF53F11E000
unkown
page readonly
clean
7FF5AF18E000
unkown
page readonly
clean
118D0000000
unkown
page readonly
clean
3625FF000
unkown
page read and write
clean
201D8060000
unkown
page readonly
clean
7FF5A48A5000
unkown
page readonly
clean
7FF5D6446000
unkown
page readonly
clean
7FF53F12C000
unkown
page readonly
clean
7FF5AF106000
unkown
page readonly
clean
118CFE59000
unkown
page read and write
clean
8DD9DFE000
unkown
page read and write
clean
28AD6370000
unkown
page readonly
clean
7FF54DE96000
unkown
page readonly
clean
7FF53F0CA000
unkown
page readonly
clean
118CFF18000
unkown
page read and write
clean
7FF54DE5A000
unkown
page readonly
clean
7FF5B9E1C000
unkown
page readonly
clean
263C6832000
unkown
page read and write
clean
1A2AF9F0000
unkown
page read and write
clean
201D8200000
unkown
page read and write
clean
7FF53537D000
unkown
page readonly
clean
7FF5A960C000
unkown
page readonly
clean
7FF5D7F16000
unkown
page readonly
clean
2BD000
unkown
page read and write
clean
28AD6513000
unkown
page read and write
clean
1A2AFA13000
unkown
page read and write
clean
30D6CFE000
unkown
page read and write
clean
7FF577073000
unkown
page readonly
clean
1A2AFA00000
unkown
page read and write
clean
7FF5350D5000
unkown
page readonly
clean
7FF534DB2000
unkown
page readonly
clean
7FF54DF7E000
unkown
page readonly
clean
C50000
heap default
page read and write
clean
1D234863000
unkown
page read and write
clean
28AD6413000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
1BA8F2AF000
heap private
page read and write
clean
9AD217F000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
201DD263000
unkown
page read and write
clean
319F000
stack
page read and write
clean
263C7167000
unkown
page read and write
clean
C8C000
heap default
page read and write
clean
359F000
stack
page read and write
clean
263C716F000
unkown
page read and write
clean
201D81C1000
unkown
page read and write
clean
201DD150000
unkown
page read and write
clean
28AD6400000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF50DF54000
unkown
page readonly
clean
201D7AB7000
unkown
page read and write
clean
118CFE86000
unkown
page read and write
clean
2A1B5E6C000
unkown
page read and write
clean
7FF5351BE000
unkown
page readonly
clean
7FF5A47B8000
unkown
page readonly
clean
7FF535419000
unkown
page readonly
clean
263C7148000
unkown
page read and write
clean
7FF5A9592000
unkown
page readonly
clean
7FF50DF45000
unkown
page readonly
clean
118D17A0000
unkown
page read and write
clean
B2D000
unkown
page read and write
clean
7FF53509C000
unkown
page readonly
clean
6C4BC7F000
unkown
page read and write
clean
7FF5D63C8000
unkown
page readonly
clean
7FF54DF24000
unkown
page readonly
clean
7CBD7F000
unkown
page read and write
clean
7FF5A4765000
unkown
page readonly
clean
7FF54DBD6000
unkown
page readonly
clean
118CFD80000
unkown
page read and write
clean
1D234720000
heap default
page read and write
clean
FAB9F3B000
unkown
page read and write
clean
7FF50246A000
unkown
page readonly
clean
7FF5A955B000
unkown
page readonly
clean
1C963170000
unkown
page readonly
clean
7FF50DF2C000
unkown
page readonly
clean
7FF534C31000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
31D8E7A000
unkown
page read and write
clean
201D8318000
unkown
page read and write
clean
C6C797E000
unkown
page read and write
clean
7FF5025FD000
unkown
page readonly
clean
7FF5AF10C000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
7FF5352C7000
unkown
page readonly
clean
7FF50DFB1000
unkown
page readonly
clean
201D7AF9000
unkown
page read and write
clean
263C7134000
unkown
page read and write
clean
201D8B10000
unkown
page readonly
clean
7FF54DBBE000
unkown
page readonly
clean
6C4B9FB000
unkown
page read and write
clean
201DD0CC000
unkown
page write copy
clean
5D33AFF000
unkown
page read and write
clean
7FF5356E9000
unkown
page readonly
clean
7FF535684000
unkown
page readonly
clean
118CFE60000
unkown
page read and write
clean
263C687C000
unkown
page read and write
clean
263C68AD000
unkown
page read and write
clean
C6C7A7B000
unkown
page read and write
clean
7FF57761D000
unkown
page readonly
clean
201D8B00000
unkown
page readonly
clean
118D1A40000
unkown
page readonly
clean
1A6932E0000
heap default
page read and write
clean
1D23487D000
unkown
page read and write
clean
1D234842000
unkown
page read and write
clean
118CFC60000
heap default
page read and write
clean
7FF50DFB9000
unkown
page readonly
clean
7FF535692000
unkown
page readonly
clean
7FF5A9257000
unkown
page readonly
clean
2A1B5E13000
unkown
page read and write
clean
7FF5B9E16000
unkown
page readonly
clean
201DD190000
unkown
page readonly
clean
7FF54DDA0000
unkown
page readonly
clean
1A2AF9F0000
unkown
page read and write
clean
118CFDF0000
unkown
page read and write
clean
7FF5352F7000
unkown
page readonly
clean
140E000
unkown
page read and write
clean
263C6893000
unkown
page read and write
clean
263C6800000
unkown
page read and write
clean
118CFD50000
unkown
page readonly
clean
7FF5AF199000
unkown
page readonly
clean
7FF5021D5000
unkown
page readonly
clean
118CFE2A000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF502400000
unkown
page readonly
clean
1BA8D610000
unkown
page readonly
clean
201DD020000
unkown
page read and write
clean
7FF5776B4000
unkown
page readonly
clean
1D234730000
unkown
page readonly
clean
201DD030000
unkown
page read and write
clean
201D7A3D000
unkown
page read and write
clean
862897E000
unkown
page read and write
clean
1A2AF9A0000
unkown
page readonly
clean
263C7177000
unkown
page read and write
clean
1A2AFA5C000
unkown
page read and write
clean
7FF57744C000
unkown
page readonly
clean
B26000
unkown
page read and write
clean
201DCFF0000
unkown
page read and write
clean
7FF5A4555000
unkown
page readonly
clean
8DD9CFC000
unkown
page read and write
clean
BC5D3FC000
unkown
page read and write
clean
7FF53513B000
unkown
page readonly
clean
7FF5D6456000
unkown
page readonly
clean
237B8600000
unkown
page read and write
clean
7FF5AE9CC000
unkown
page readonly
clean
7FF50DF50000
unkown
page readonly
clean
B16000
heap default
page read and write
clean
7FF535310000
unkown
page readonly
clean
7FF54DEC5000
unkown
page readonly
clean
1D234837000
unkown
page read and write
clean
7FF5AF0A8000
unkown
page readonly
clean
201DD011000
unkown
page read and write
clean
201D7B13000
unkown
page read and write
clean
7FF535410000
unkown
page readonly
clean
7FF54DEF6000
unkown
page readonly
clean
30D707E000
unkown
page read and write
clean
1D23485C000
unkown
page read and write
clean
7FF5774B8000
unkown
page readonly
clean
1BA8D510000
unkown
page readonly
clean
BC5D1FC000
unkown
page read and write
clean
201D7CD0000
unkown
page readonly
clean
1A6932EB000
heap default
page read and write
clean
FABA7FD000
unkown
page read and write
clean
7FF5355E0000
unkown
page readonly
clean
7FF53F1AE000
unkown
page readonly
clean
FABA6FF000
unkown
page read and write
clean
118D1D80000
unkown
page write copy
clean
7CC17C000
unkown
page read and write
clean
201DD215000
unkown
page read and write
clean
7FF534B87000
unkown
page readonly
clean
7FF5D63BC000
unkown
page readonly
clean
7FF54DF15000
unkown
page readonly
clean
7FF5A968E000
unkown
page readonly
clean
7FF53538C000
unkown
page readonly
clean
7FF5A95A8000
unkown
page readonly
clean
1BA8D417000
heap default
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF5A9691000
unkown
page readonly
clean
263C7171000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF54DF0C000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
263C6E60000
unkown
page readonly
clean
7FF54DE92000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
7FF5D63E2000
unkown
page readonly
clean
28AD64CB000
unkown
page read and write
clean
1C963240000
unkown
page read and write
clean
7FF5D64D1000
unkown
page readonly
clean
7FF534FAE000
unkown
page readonly
clean
1D234849000
unkown
page read and write
clean
1DAF0ED0000
heap private
page read and write
clean
7FF577719000
unkown
page readonly
clean
237B863C000
unkown
page read and write
clean
7FF54DED9000
unkown
page readonly
clean
1D23486A000
unkown
page read and write
clean
28AD6A60000
unkown
page write copy
clean
7FF50DF26000
unkown
page readonly
clean
7FF5AF11C000
unkown
page readonly
clean
7FF5D7EF9000
unkown
page readonly
clean
7FF5350E0000
unkown
page readonly
clean
1DAF0C06000
heap default
page read and write
clean
263C716F000
unkown
page read and write
clean
263C7171000
unkown
page read and write
clean
1A2AFA55000
unkown
page read and write
clean
7FF5D7EBA000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
1D234813000
unkown
page read and write
clean
9CC000
stack
page read and write
clean
201D7A2A000
unkown
page read and write
clean
BC5CC7C000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
201DCEE0000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF5351CC000
unkown
page readonly
clean
BC5D07E000
unkown
page read and write
clean
7FF502699000
unkown
page readonly
clean
7FF5A416E000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
2A1B5E2A000
unkown
page read and write
clean
118CFC70000
unkown
page readonly
clean
7FF5356DE000
unkown
page readonly
clean
1D234864000
unkown
page read and write
clean
7FF577669000
unkown
page readonly
clean
7FF5355F6000
unkown
page readonly
clean
B2D000
unkown
page read and write
clean
201D79B0000
unkown
page readonly
clean
201DD2AD000
unkown
page read and write
clean
7FF5A95A2000
unkown
page readonly
clean
263C7165000
unkown
page read and write
clean
237B8E02000
unkown
page read and write
clean
118CFE8B000
unkown
page read and write
clean
7FF54DEED000
unkown
page readonly
clean
201DD120000
unkown
page read and write
clean
7FF5A49A5000
unkown
page readonly
clean
7FF5356E9000
unkown
page readonly
clean
7FF50DF36000
unkown
page readonly
clean
7FF53F045000
unkown
page readonly
clean
201D7AA8000
unkown
page read and write
clean
7FF5B9E35000
unkown
page readonly
clean
1E0000
unkown
page readonly
clean
2A1B5E76000
unkown
page read and write
clean
7FF57764E000
unkown
page readonly
clean
7FF50DF57000
unkown
page readonly
clean
1BA8DA80000
unkown
page readonly
clean
7FF5D644C000
unkown
page readonly
clean
7CB9FE000
unkown
page read and write
clean
7FF53534E000
unkown
page readonly
clean
7FF5AF199000
unkown
page readonly
clean
1C963390000
unkown
page read and write
clean
7FF5A49B7000
unkown
page readonly
clean
7FF5D64CE000
unkown
page readonly
clean
1C963370000
unkown
page readonly
clean
7FF5AF0E9000
unkown
page readonly
clean
201D7B02000
unkown
page read and write
clean
118CFF1C000
unkown
page read and write
clean
7FF5A9616000
unkown
page readonly
clean
7FF502590000
unkown
page readonly
clean
201D8AF0000
unkown
page readonly
clean
7FF5B9DDE000
unkown
page readonly
clean
7FF5A45BD000
unkown
page readonly
clean
201D8313000
unkown
page read and write
clean
118CFE13000
unkown
page read and write
clean
1A2B0400000
unkown
page read and write
clean
100000
unkown
page readonly
clean
7FF5350C7000
unkown
page readonly
clean
7FF5D6013000
unkown
page readonly
clean
7FF57765F000
unkown
page readonly
clean
7FF577655000
unkown
page readonly
clean
2A1B5E66000
unkown
page read and write
clean
7FF54DB71000
unkown
page readonly
clean
28AD6AB0000
unkown
page readonly
clean
201DD020000
unkown
page read and write
clean
7FF577628000
unkown
page readonly
clean
237B8570000
unkown
page read and write
clean
7FF5772E8000
unkown
page readonly
clean
7FF5A4740000
unkown
page readonly
clean
201D7C00000
unkown
page readonly
clean
7FF54DE6C000
unkown
page readonly
clean
7FF53501D000
unkown
page readonly
clean
C91000
heap default
page read and write
clean
1C96327E000
heap default
page read and write
clean
263C710E000
unkown
page read and write
clean
9AD1D8F000
unkown
page read and write
clean
7FF50DEFF000
unkown
page readonly
clean
7FF5D7EDE000
unkown
page readonly
clean
263C7177000
unkown
page read and write
clean
7FF5355F8000
unkown
page readonly
clean
2A1B5F02000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
1D234862000
unkown
page read and write
clean
7FF535328000
unkown
page readonly
clean
7FF53539C000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
263C6AD0000
unkown
page readonly
clean
7FF577612000
unkown
page readonly
clean
7FF54DF89000
unkown
page readonly
clean
C6C787E000
unkown
page read and write
clean
263C6780000
unkown
page readonly
clean
6C4C0FE000
unkown
page read and write
clean
7FF5A4910000
unkown
page readonly
clean
263C6832000
unkown
page read and write
clean
7FF5AF125000
unkown
page readonly
clean
201D8359000
unkown
page read and write
clean
28AD6280000
heap default
page read and write
clean
A0E000
unkown
page read and write
clean
2A1B5E5A000
unkown
page read and write
clean
7FF5352D1000
unkown
page readonly
clean
FABABFE000
unkown
page read and write
clean
7FF54DB62000
unkown
page readonly
clean
7FF5A47DA000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
2C60000
unkown
page readonly
clean
7FF5A941F000
unkown
page readonly
clean
201D7A71000
unkown
page read and write
clean
201D8359000
unkown
page read and write
clean
1A2AFB02000
unkown
page read and write
clean
2A1B6390000
unkown
page readonly
clean
7FF5A4986000
unkown
page readonly
clean
3626FE000
unkown
page read and write
clean
7FF5D7F42000
unkown
page readonly
clean
B20000
unkown
page read and write
clean
1F0000
unkown
page read and write
clean
7FF535026000
unkown
page readonly
clean
201DCFF8000
unkown
page read and write
clean
201D79A0000
unkown
page readonly
clean
7FF5AF0AA000
unkown
page readonly
clean
1C963380000
heap private
page read and write
clean
263C716F000
unkown
page read and write
clean
1DAF0BD0000
unkown
page read and write
clean
7FF53F0C8000
unkown
page readonly
clean
14B6000
heap private
page read and write
clean
7FF5776A5000
unkown
page readonly
clean
7FF5A4928000
unkown
page readonly
clean
7FF54DDAC000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
7FF534ECE000
unkown
page readonly
clean
7FF53514C000
unkown
page readonly
clean
5D338FE000
unkown
page read and write
clean
201D7A86000
unkown
page read and write
clean
6C4B577000
unkown
page read and write
clean
7FF50DEDA000
unkown
page readonly
clean
7FF53533A000
unkown
page readonly
clean
1A693440000
heap private
page read and write
clean
8628DFD000
unkown
page read and write
clean
201DD014000
unkown
page read and write
clean
201DD200000
unkown
page read and write
clean
7FF535369000
unkown
page readonly
clean
118CFE5A000
unkown
page read and write
clean
118D17F0000
unkown
page readonly
clean
7FF5D63D0000
unkown
page readonly
clean
7FF5A9634000
unkown
page readonly
clean
263C7177000
unkown
page read and write
clean
2A1B5E00000
unkown
page read and write
clean
7FF5A4A19000
unkown
page readonly
clean
1DAF0C00000
heap default
page read and write
clean
7FF5D5C38000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
7FF5D643D000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
1D0000
unkown
page read and write
clean
1D234859000
unkown
page read and write
clean
7FF5A4912000
unkown
page readonly
clean
7CC07E000
unkown
page read and write
clean
201DD22D000
unkown
page read and write
clean
1BA8D410000
heap default
page read and write
clean
263C7151000
unkown
page read and write
clean
7FF57768C000
unkown
page readonly
clean
7FF577626000
unkown
page readonly
clean
7FF535381000
unkown
page readonly
clean
7FF5A95E9000
unkown
page readonly
clean
7FF535419000
unkown
page readonly
clean
1A2AF930000
heap private
page read and write
clean
BC5CDFE000
unkown
page read and write
clean
201D8B30000
unkown
page readonly
clean
28AD6502000
unkown
page read and write
clean
7FF5021D1000
unkown
page readonly
clean
C6C767C000
unkown
page read and write
clean
7FF5025D5000
unkown
page readonly
clean
28AD6220000
heap private
page read and write
clean
2A1B5F13000
unkown
page read and write
clean
7FF535666000
unkown
page readonly
clean
7FF534F51000
unkown
page readonly
clean
3350000
heap private
page read and write
clean
201DD0FC000
unkown
page readonly
clean
1C9633B0000
unkown
page readonly
clean
30D6C7E000
unkown
page read and write
clean
1BA8D6F0000
unkown
page readonly
clean
7FF5D6187000
unkown
page readonly
clean
7FF54DB5F000
unkown
page readonly
clean
201DD110000
unkown
page read and write
clean
86289FF000
unkown
page read and write
clean
1BA8F1B0000
heap private
page read and write
clean
1A2AFCD0000
unkown
page readonly
clean
263C686F000
unkown
page read and write
clean
7FF54DD0F000
unkown
page readonly
clean
263C716F000
unkown
page read and write
clean
263C716F000
unkown
page read and write
clean
7FF50DD3F000
unkown
page readonly
clean
201DD2AB000
unkown
page read and write
clean
7FF54DE07000
unkown
page readonly
clean
6C4BA7E000
unkown
page read and write
clean
There are 1021 hidden memdumps, click here to show them.